last executing test programs: 1.116546827s ago: executing program 4 (id=3965): r0 = syz_open_dev$mtd(0x0, 0x48a99fbe, 0x183ee1) ioctl$MEMGETREGIONCOUNT(r0, 0x80044d07, &(0x7f00000001c0)) 1.108980101s ago: executing program 3 (id=3967): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000001280)=0xa5a95, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1100}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000140)=[@acquire, @enter_looper], 0x53}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x5, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000340)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x34, 0x0, &(0x7f0000000480)=[@request_death, @clear_death={0x400c630f, 0xffffffff}, @increfs_done={0x40106308, 0x3, 0x3}]}) setresgid(0xee00, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000c80)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f0000000d00)=0x0, &(0x7f0000000d40)=0x0, &(0x7f0000000d80)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000dc0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000e40)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000e80)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) mmap$IORING_OFF_SQ_RING(0x0, 0x8000202, 0x2000007, 0x401d031, r12, 0x0) syz_ublk_setup_queues(r12, r10, 0x0, &(0x7f0000000ec0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x40000, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f00000012c0)={0x2e, 0xa, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, r9, '\x00', {0x5, 0x8004, 0x0, 0x0}}, 0x0) prlimit64(r4, 0x2, 0x0, 0x0) mmap(&(0x7f0000cbb000/0x1000)=nil, 0x1000, 0x3000000, 0x41071, r13, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000540)='660', 0x3) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x8000, 0x0) r14 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/thread-self/fail-nth\x00', 0x2, 0x44) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r14, &(0x7f00000011c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) write(r14, &(0x7f0000000640)='3', 0x4e) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x3000000, &(0x7f0000000700)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000740)="$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") sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c0001"], 0x25c}}, 0x0) 1.04995224s ago: executing program 4 (id=3968): r0 = socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x173) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='10', 0x2) getdents64(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0xfffffbfc, 0x2}, 0x2e) 1.031546645s ago: executing program 4 (id=3969): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x3, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xfff, 0x0, 0x100, 0x0, 0x781, 0x4d, 0x9, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x448c2}, 0x4894) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8001, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x8, 0x96, 0xb, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.001925065s ago: executing program 0 (id=3970): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f000000f1c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f000000f200)={0x0, 0x0, &(0x7f000000f240)={&(0x7f000000f280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f000000f300)={0x0, 0x0, &(0x7f000000f340)=[{&(0x7f000000f380)}], 0x1}, 0x0) r5 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f000000f3c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000000f400)={0x0, 0x0, &(0x7f000000f440)={&(0x7f000000f480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x40, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f000000f4c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb810047000806"], 0x0) 884.944547ms ago: executing program 2 (id=3971): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0xa}, 0x28) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa) writev(r0, 0x0, 0x0) 884.563166ms ago: executing program 0 (id=3972): 797.2751ms ago: executing program 0 (id=3973): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000900)="f8a9452000000c00000051229dc9", 0x0, 0x20000004, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000000c0)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x8, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="24010000", @ANYRES8=r0, @ANYBLOB="01002dbd7000000000001800000008000300", @ANYRES32=r2, @ANYBLOB="18003080140001800800040059400000080001000200000068013080840001800c00050008000000000000000c000500000800000000000028000380080002000000000008000200020000000c0004000201aaaaaaaaaaaa06000100ffff000014000380060001000000000008000200000080000800040006000000050002000300000005000200020000000c0005000000000070700d0008000400000000002400030082274fe44bb67498c523a9b0ec7c0f031a2f385e167dc28e729e665ca05b3b846400018008000400050000000c0005000600000000000000100003800c0004000203aaaaaaaaaaaa05000200000000000800010001"], 0x1a4}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000630000001500020000000000bf010000000000008500000056000000b70000000000000095"], &(0x7f0000000840)='GPL\x00', 0x1, 0x1000, &(0x7f0000000f00)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f00)={r3, 0x0, 0xe, 0x0, &(0x7f0000001f80)="001122334455667788a918dbf57e", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f0000000d80)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0}}], 0x1, 0x40) syz_emit_vhci(&(0x7f0000000dc0)=ANY=[@ANYBLOB="040e0b01a320"], 0xe) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x977}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @broadcast}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c0a4}, 0x4000000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0xdaa02, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000540)={0xa690b000, &(0x7f00000005c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) writev(r6, &(0x7f0000000600)=[{&(0x7f0000000b40)="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", 0xff8e}, {0x0, 0xfffffda8}], 0x2) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/timer_list\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000980)=""/82, 0x52, 0x2000000fc) unshare(0x22020600) 724.064534ms ago: executing program 2 (id=3974): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x472, 0x8, 0x4, 0x7, 0x3, 0x1, 0x2, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xad}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x54815}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000600)={'syzkaller0\x00', @random="2b0100004ec6"}) 675.810742ms ago: executing program 4 (id=3976): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macsec0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r1, 0x1, 0x6, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000580)={r6, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000005c0)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xfff1}, {0x1, 0xfff1}, {0x0, 0x3}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1100, 0x1000}}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtclass={0x74, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xfff1}, {0x1, 0xfff1}, {0x0, 0x9}}, [@tclass_kind_options=@c_htb={{0x8}, {0x40, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x11000}, {0x0, 0x0, 0x2, 0x205c, 0x0, 0x1000}, 0x1000, 0x1000}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x9}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}]}, 0x74}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x400, 0x0) ioctl$TUNGETVNETBE(r8, 0x800454df, &(0x7f0000000640)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@delchain={0x48, 0x65, 0x200, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xb, 0x5}, {0x10, 0xc}, {0x2, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xf}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d1) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macsec0\x00'}) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r1, 0x1, 0x6, @local}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'veth0\x00'}) (async) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000580)={r6, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000005c0)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xfff1}, {0x1, 0xfff1}, {0x0, 0x3}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1100, 0x1000}}]}}]}, 0x60}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtclass={0x74, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xfff1}, {0x1, 0xfff1}, {0x0, 0x9}}, [@tclass_kind_options=@c_htb={{0x8}, {0x40, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x11000}, {0x0, 0x0, 0x2, 0x205c, 0x0, 0x1000}, 0x1000, 0x1000}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x9}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}]}, 0x74}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x400, 0x0) (async) ioctl$TUNGETVNETBE(r8, 0x800454df, &(0x7f0000000640)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@delchain={0x48, 0x65, 0x200, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xb, 0x5}, {0x10, 0xc}, {0x2, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xf}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d1) (async) 556.055103ms ago: executing program 1 (id=3979): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x40000, 0x6) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) close(0x3) open_by_handle_at(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="100000000200000012"], 0x0) pread64(r0, &(0x7f0000000040)=""/152, 0x98, 0x7) (fail_nth: 1) 498.810037ms ago: executing program 1 (id=3980): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x40000, 0x6) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) close(0x3) open_by_handle_at(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="100000000200000012"], 0x0) pread64(r0, &(0x7f0000000040)=""/152, 0x98, 0x7) 486.815088ms ago: executing program 1 (id=3981): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private1, 0xa0, 0x2, 0x0, 0xa, 0x5, 0xe17}, 0x20) prctl$PR_SET_THP_DISABLE(0x42, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) ioctl(r0, 0x8b32, &(0x7f0000000180)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ff"], 0x12c}, 0x1, 0x0, 0x0, 0x4048885}, 0x8000) 452.552944ms ago: executing program 2 (id=3982): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000009c0)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 378.772513ms ago: executing program 1 (id=3983): 324.948349ms ago: executing program 4 (id=3984): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0xa}, 0x28) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040), 0x0) 324.466344ms ago: executing program 1 (id=3985): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x800000807, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000002c0)={0x8, 0x1, 0x57dbceec40f9ae52, "6040a7170200ff0120000000fcff00ff1057e31e940000000000000000aeff00", 0x20493859}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) dup(r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) fcntl$getown(r1, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0xc8, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x4, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x3, 0x8, 0x80000001, 0x0, 0x4, 0x6}}, {0x4}}]}]}, 0xc8}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05b0246584e4b64c3ecc0000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050007000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000001800000008000300", @ANYRES32=r9], 0x28}}, 0x0) bind(r7, &(0x7f0000000200)=@isdn={0x22, 0x0, 0x0, 0x7f, 0x7}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000009c0)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 322.787687ms ago: executing program 2 (id=3986): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x0, 0x9, 0x3, 0xd1ea, 0x7, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x6, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x4, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x6, 0xc28, 0x2, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x5, 0x4, 0x7, 0x8, 0xfffffff9, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x6, 0x80000000, 0xffff, 0x6, 0x5, 0x8000, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x80020200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000042, 0x2, 0x7, 0x7, 0x102, 0x4, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x3, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x7ffc, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x7, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0x4, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0xfffffffe, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0x1e, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x0, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x4, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x49da, 0x1, 0x3, 0x80ea6, 0x6, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x4, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x9, 0x14, 0x62, 0x8, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0x9, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x1, 0x84d3, 0xfffffefd, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x1004, 0x2, 0x6, 0x2, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x409, 0x101, 0xefba, 0x101, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0xc0, 0x2d, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x40) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000bc0)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c00)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000c40)={&(0x7f0000000c80)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000d00)}, 0x4) 246.815861ms ago: executing program 4 (id=3987): r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x39, &(0x7f0000000480)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) (fail_nth: 1) 243.180996ms ago: executing program 1 (id=3988): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/ip_forward\x00', &(0x7f0000000180)={0x400, 0x0, 0x17}, 0x18) renameat(r2, &(0x7f00000001c0)='./proc/sys/net/ipv4/ip_forward\x00', r1, &(0x7f0000000240)='./proc/sys/net/ipv4/ip_forward\x00') r3 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x2) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, r6, 0x28543634fae43ad, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000640)={0x400, r7}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r6, 0x2, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) open_by_handle_at(r3, &(0x7f0000000340)=@shmem={0xc, 0x1, {0x2, 0x7}}, 0x84040) write(r1, &(0x7f0000000200)='0', 0x1) r8 = getpid() r9 = syz_open_dev$video(&(0x7f0000000680), 0x3, 0x0) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000006c0)={0x9, @sliced={0xc0, [0x1, 0x9, 0x5d, 0x4, 0xfffc, 0xaec0, 0x6, 0x6, 0x1000, 0x0, 0x9, 0xfffe, 0x6, 0x2, 0x1, 0x3, 0x8, 0x3, 0x9, 0x7, 0xe, 0x6, 0x5, 0x6, 0x18e6, 0x9, 0x2bc9, 0x0, 0x7, 0x3, 0x401, 0x401, 0x1, 0xffff, 0x2, 0x5, 0xdca, 0x9, 0x6, 0x4, 0x3, 0xfb5, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xfffa], 0x4}}) sched_setscheduler(r8, 0x2, &(0x7f0000000580)=0x7) sched_setscheduler(r8, 0x5, &(0x7f00000005c0)=0x7) 237.627402ms ago: executing program 3 (id=3989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e80)={&(0x7f0000005ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080001400000000108000240378b5ec30900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a0001007175657565000000140002800600034000010000060001400017000014000000110001"], 0xd8}}, 0x0) (fail_nth: 1) 200.576855ms ago: executing program 3 (id=3990): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xe, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000480), 0x8, 0x10, &(0x7f0000000780), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000800)='./proc\x00', &(0x7f0000000840)='proc\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$fuse(0x0, &(0x7f0000000e00)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000e40)='./proc\x00', &(0x7f0000000e80)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='fd/3\x00') read$FUSE(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000000c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./trace/error_log\x00', 0x4b) mount(0x0, &(0x7f0000000cc0)='./trace\x00', &(0x7f0000000d00)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./trace/error_log\x00', 0x2, 0x0) writev(r5, &(0x7f0000000d80)=[{&(0x7f0000000dc0)="ab", 0x1}], 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r6, &(0x7f00000008c0)='7', 0x1) r7 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='b', 0x1, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000380), &(0x7f0000000940)={'syz', 0x3}, &(0x7f0000000980)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e88827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614756b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e1a9010000668e8fd0e52ce0705ae511456c4d540796f9ae7d360fc4b4c3e39171d21b1bbadf8b456ff7f5b3b26509", 0xe1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000a80)={r7, r8, r8}, &(0x7f0000000ac0)=""/194, 0xc2, &(0x7f0000000bc0)={&(0x7f0000000c00)={'wp256-generic\x00'}, &(0x7f0000000c40)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f20781e971fc777714", 0x33}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r9, 0x0, 0x484, &(0x7f0000000240)={0x0, @private=0xa010101, 0x4e24, 0x0, 'sed\x00', 0x0, 0x1, 0x24}, 0x2c) mount$nfs4(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='sec=krb5,smack\x00\x00\x00\x00\x00\x00\x00K\x00\x00\x00\x00\x00\x00\x00']) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f0000000500)=ANY=[@ANYBLOB="50e34944b9cdebd7000200", @ANYRES16=0x0, @ANYBLOB="000228bd7008fddbdf254100000008000300", @ANYRES32=r10, @ANYBLOB="0c009900030000001a00200008002201fc0000000800220149030000080026006c090000050019010c000000050018012f000000"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0xc0005) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r1, 0x0, 0x0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000009000000000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677265001c000280080014000000000005000a00000000000500130001000000"], 0x48}}, 0x0) 160.067258ms ago: executing program 3 (id=3991): syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaab8aaaabbbbbbbbbbbb0800480000340000000000059078ac1414000a01010006290703ac1414110000f954e4154e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x90, &(0x7f0000000480)=ANY=[@ANYBLOB="726f00000000000400006d7461696c3d302c6e6f6e756d7461696c3d302c6e6e6f6e756d7461696c3d312c6e6f636173652c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c757466383d302c73686f72746e616d653d77696e39352c636f6465706167653d3836322c636865636b3d7374726963742c696f636861727365743d63703836332c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d77743d63703733372c00"/195], 0x3, 0x27b, &(0x7f0000000180)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000440)=0xa40, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e80)={&(0x7f0000005ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080001400000000108000240378b5ec30900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a0001007175657565000000140002800600034000010000060001400017000014000000110001"], 0xd8}}, 0x0) 149.120983ms ago: executing program 0 (id=3992): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x2f}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x4044004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0xfe) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047bd, &(0x7f0000000600)={0x2, 0x4e23, @local}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000640)={0x0, 0xf0ffffff, &(0x7f0000000680)=[{&(0x7f00000006c0)="89000000120081ae08060cdc030000007f03e3f700004e236ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 133.823735ms ago: executing program 2 (id=3993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x3, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xfff, 0x0, 0x100, 0x0, 0x781, 0x4d, 0x9, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x448c2}, 0x4894) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 53.466649ms ago: executing program 3 (id=3994): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101c82, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r2 = dup(r1) read$FUSE(r2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newsa={0x158, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, 0x0, 0x5, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x3, 0x9, 0x9, 0x10001, 0x0, 0x0, 0xfffffffffffffffc}, {0x4, 0x0, 0x5f, 0xa}, {0x1, 0xc0000000, 0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd27, 0x70bd29, 0x70bd2d, 0x70bd2b, 0x4, [0x0]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20040}, 0x80) 53.36648ms ago: executing program 3 (id=3995): syz_emit_vhci(0x0, 0x0) 52.87341ms ago: executing program 0 (id=3996): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x173) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', &(0x7f0000000080)={0x440000}, 0x18) mount$cgroup(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100), 0x1008048, &(0x7f0000000140)={[{@none}, {@subsystem='blkio'}], [{@smackfsroot={'smackfsroot', 0x3d, '^}'}}, {@obj_role}, {@obj_role={'obj_role', 0x3d, '/dev/dri/card#\x00'}}, {@measure}, {@uid_gt={'uid>', 0xee01}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0xdea02, 0xb5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x0, 0x1, "ba"}, 0x9) write(r0, &(0x7f0000000300)='10', 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) 726.649µs ago: executing program 0 (id=3997): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x3, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xfff, 0x0, 0x100, 0x0, 0x781, 0x4d, 0x9, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x448c2}, 0x4894) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8001, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x8, 0x96, 0xb, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 2 (id=3998): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0xa}, 0x28) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040), 0x0) kernel console output (not intermixed with test programs): interface with an up link [ 147.903164][T13879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3183'. [ 148.109151][T13916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3193'. [ 148.109448][T13916] netlink: 'syz.1.3193': attribute type 10 has an invalid length. [ 148.226869][T13920] syzkaller0: entered promiscuous mode [ 148.226882][T13920] syzkaller0: entered allmulticast mode [ 148.329050][T13922] FAULT_INJECTION: forcing a failure. [ 148.329050][T13922] name fail_futex, interval 1, probability 0, space 0, times 0 [ 148.329068][T13922] CPU: 1 UID: 0 PID: 13922 Comm: syz.1.3196 Not tainted syzkaller #0 PREEMPT [ 148.329079][T13922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 148.329095][T13922] Call trace: [ 148.329098][T13922] show_stack+0x2c/0x3c (C) [ 148.329118][T13922] __dump_stack+0x30/0x40 [ 148.329131][T13922] dump_stack_lvl+0xd8/0x12c [ 148.329143][T13922] dump_stack+0x1c/0x28 [ 148.329155][T13922] should_fail_ex+0x418/0x58c [ 148.329165][T13922] should_fail+0x14/0x24 [ 148.329173][T13922] get_futex_key+0x1ec/0x12b0 [ 148.329184][T13922] futex_wake+0x10c/0x594 [ 148.329195][T13922] do_futex+0x2c4/0x378 [ 148.329206][T13922] __arm64_sys_futex+0x2e4/0x418 [ 148.329218][T13922] invoke_syscall+0x98/0x244 [ 148.329230][T13922] el0_svc_common+0xec/0x23c [ 148.329242][T13922] do_el0_svc+0x4c/0x5c [ 148.329253][T13922] el0_svc+0x60/0x1d8 [ 148.329263][T13922] el0t_64_sync_handler+0x44/0x104 [ 148.329272][T13922] el0t_64_sync+0x198/0x19c [ 148.539112][T13944] bond0: option mode: unable to set because the bond device has slaves [ 148.545091][T13944] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 148.569931][T13946] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3205'. [ 148.570294][T13946] netlink: 'syz.4.3205': attribute type 10 has an invalid length. [ 148.571031][T13946] syz_tun: entered promiscuous mode [ 148.575618][T13946] bond0: (slave syz_tun): Enslaving as a backup interface with an up link [ 148.577423][T13946] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 148.933080][T13967] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 149.213617][T13982] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3218'. [ 149.225524][T13982] netlink: 'syz.1.3218': attribute type 10 has an invalid length. [ 149.323093][T13986] syzkaller0: entered promiscuous mode [ 149.323103][T13986] syzkaller0: entered allmulticast mode [ 149.328620][T13986] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 149.461338][ C0] net_ratelimit: 581 callbacks suppressed [ 149.579534][T14008] syzkaller0: entered promiscuous mode [ 149.579546][T14008] syzkaller0: entered allmulticast mode [ 149.602751][T14008] tipc: Enabled bearer , priority 0 [ 149.628806][T14007] tipc: Resetting bearer [ 149.633845][ T4722] Bluetooth: hci4: command tx timeout [ 149.652047][T14007] tipc: Disabling bearer [ 149.686274][T14013] netlink: 'syz.0.3230': attribute type 10 has an invalid length. [ 149.686677][T14013] syz_tun: entered promiscuous mode [ 149.689555][T14013] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 149.692668][ T40] bond0: (slave bond_slave_0): interface is now down [ 149.692681][ T40] bond0: (slave bond_slave_1): interface is now down [ 149.711363][ T1328] bond0: (slave bond_slave_0): interface is now down [ 149.711378][ T1328] bond0: (slave bond_slave_1): interface is now down [ 149.711385][ T1328] bond0: (slave syz_tun): interface is now down [ 149.731312][ T1328] bond0: (slave bond_slave_0): interface is now down [ 149.731329][ T1328] bond0: (slave bond_slave_1): interface is now down [ 149.731339][ T1328] bond0: (slave syz_tun): interface is now down [ 149.734702][ T1328] bond0: now running without any active interface! [ 149.767711][T14017] syzkaller0: entered promiscuous mode [ 149.767723][T14017] syzkaller0: entered allmulticast mode [ 149.784411][T14017] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 149.902521][T14022] bond0: (slave bond_slave_0): Releasing backup interface [ 149.953234][T14022] bond0: (slave bond_slave_1): Releasing backup interface [ 150.071027][T14032] bond0: (slave bond_slave_0): Releasing backup interface [ 150.110195][T14032] bond0: (slave bond_slave_1): Releasing backup interface [ 150.120848][T14032] bond0: option mode: unable to set because the bond device has slaves [ 150.129845][T14032] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 150.172737][T14040] syzkaller0: entered promiscuous mode [ 150.172747][T14040] syzkaller0: entered allmulticast mode [ 150.443306][T14070] FAULT_INJECTION: forcing a failure. [ 150.443306][T14070] name failslab, interval 1, probability 0, space 0, times 0 [ 150.443320][T14070] CPU: 1 UID: 0 PID: 14070 Comm: syz.2.3244 Not tainted syzkaller #0 PREEMPT [ 150.443331][T14070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 150.443345][T14070] Call trace: [ 150.443348][T14070] show_stack+0x2c/0x3c (C) [ 150.443368][T14070] __dump_stack+0x30/0x40 [ 150.443381][T14070] dump_stack_lvl+0xd8/0x12c [ 150.443393][T14070] dump_stack+0x1c/0x28 [ 150.443404][T14070] should_fail_ex+0x418/0x58c [ 150.443414][T14070] should_failslab+0xc4/0x120 [ 150.443423][T14070] __kmalloc_cache_noprof+0x94/0x5fc [ 150.443434][T14070] sget_fc+0x630/0x1520 [ 150.443444][T14070] vfs_get_super+0x40/0x148 [ 150.443454][T14070] get_tree_nodev+0x2c/0x3c [ 150.443464][T14070] mqueue_get_tree+0xac/0xe8 [ 150.443474][T14070] vfs_get_tree+0x90/0x28c [ 150.443484][T14070] fc_mount+0x24/0xac [ 150.443495][T14070] fc_mount_longterm+0x20/0x74 [ 150.443506][T14070] mq_init_ns+0x3c8/0x638 [ 150.443513][T14070] copy_ipcs+0x3c8/0x63c [ 150.443522][T14070] create_new_namespaces+0x1a8/0x50c [ 150.443533][T14070] unshare_nsproxy_namespaces+0x120/0x170 [ 150.443545][T14070] ksys_unshare+0x438/0x6e0 [ 150.443555][T14070] __arm64_sys_unshare+0x40/0x54 [ 150.443565][T14070] invoke_syscall+0x98/0x244 [ 150.443578][T14070] el0_svc_common+0xec/0x23c [ 150.443590][T14070] do_el0_svc+0x4c/0x5c [ 150.443601][T14070] el0_svc+0x60/0x1d8 [ 150.443611][T14070] el0t_64_sync_handler+0x44/0x104 [ 150.443620][T14070] el0t_64_sync+0x198/0x19c [ 150.544187][T14075] syzkaller0: entered promiscuous mode [ 150.544198][T14075] syzkaller0: entered allmulticast mode [ 150.739304][T14083] FAULT_INJECTION: forcing a failure. [ 150.739304][T14083] name failslab, interval 1, probability 0, space 0, times 0 [ 150.739347][T14083] CPU: 1 UID: 0 PID: 14083 Comm: syz.1.3250 Not tainted syzkaller #0 PREEMPT [ 150.739359][T14083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 150.739374][T14083] Call trace: [ 150.739377][T14083] show_stack+0x2c/0x3c (C) [ 150.739398][T14083] __dump_stack+0x30/0x40 [ 150.739411][T14083] dump_stack_lvl+0xd8/0x12c [ 150.739423][T14083] dump_stack+0x1c/0x28 [ 150.739435][T14083] should_fail_ex+0x418/0x58c [ 150.739444][T14083] should_failslab+0xc4/0x120 [ 150.739453][T14083] __kmalloc_cache_noprof+0x94/0x5fc [ 150.739463][T14083] sget_fc+0x630/0x1520 [ 150.739473][T14083] vfs_get_super+0x40/0x148 [ 150.739483][T14083] get_tree_nodev+0x2c/0x3c [ 150.739493][T14083] mqueue_get_tree+0xac/0xe8 [ 150.739503][T14083] vfs_get_tree+0x90/0x28c [ 150.739516][T14083] fc_mount+0x24/0xac [ 150.739526][T14083] fc_mount_longterm+0x20/0x74 [ 150.739537][T14083] mq_init_ns+0x3c8/0x638 [ 150.739545][T14083] copy_ipcs+0x3c8/0x63c [ 150.739553][T14083] create_new_namespaces+0x1a8/0x50c [ 150.739565][T14083] unshare_nsproxy_namespaces+0x120/0x170 [ 150.739576][T14083] ksys_unshare+0x438/0x6e0 [ 150.739586][T14083] __arm64_sys_unshare+0x40/0x54 [ 150.739596][T14083] invoke_syscall+0x98/0x244 [ 150.739608][T14083] el0_svc_common+0xec/0x23c [ 150.739620][T14083] do_el0_svc+0x4c/0x5c [ 150.739632][T14083] el0_svc+0x60/0x1d8 [ 150.739642][T14083] el0t_64_sync_handler+0x44/0x104 [ 150.739650][T14083] el0t_64_sync+0x198/0x19c [ 151.022933][T14093] __nla_validate_parse: 3 callbacks suppressed [ 151.022945][T14093] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3262'. [ 151.022960][T14093] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3262'. [ 151.367289][T14142] loop4: detected capacity change from 0 to 128 [ 151.369777][T14142] vfat: Unknown parameter 'dos1xfloppX' [ 151.582203][T14171] FAULT_INJECTION: forcing a failure. [ 151.582203][T14171] name failslab, interval 1, probability 0, space 0, times 0 [ 151.582218][T14171] CPU: 1 UID: 0 PID: 14171 Comm: syz.4.3277 Not tainted syzkaller #0 PREEMPT [ 151.582229][T14171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 151.582242][T14171] Call trace: [ 151.582245][T14171] show_stack+0x2c/0x3c (C) [ 151.582265][T14171] __dump_stack+0x30/0x40 [ 151.582278][T14171] dump_stack_lvl+0xd8/0x12c [ 151.582290][T14171] dump_stack+0x1c/0x28 [ 151.582302][T14171] should_fail_ex+0x418/0x58c [ 151.582311][T14171] should_failslab+0xc4/0x120 [ 151.582320][T14171] __kmalloc_cache_noprof+0x94/0x5fc [ 151.582330][T14171] sget_fc+0x630/0x1520 [ 151.582341][T14171] vfs_get_super+0x40/0x148 [ 151.582351][T14171] get_tree_nodev+0x2c/0x3c [ 151.582361][T14171] mqueue_get_tree+0xac/0xe8 [ 151.582371][T14171] vfs_get_tree+0x90/0x28c [ 151.582381][T14171] fc_mount+0x24/0xac [ 151.582392][T14171] fc_mount_longterm+0x20/0x74 [ 151.582402][T14171] mq_init_ns+0x3c8/0x638 [ 151.582410][T14171] copy_ipcs+0x3c8/0x63c [ 151.582418][T14171] create_new_namespaces+0x1a8/0x50c [ 151.582430][T14171] unshare_nsproxy_namespaces+0x120/0x170 [ 151.582441][T14171] ksys_unshare+0x438/0x6e0 [ 151.582451][T14171] __arm64_sys_unshare+0x40/0x54 [ 151.582461][T14171] invoke_syscall+0x98/0x244 [ 151.582474][T14171] el0_svc_common+0xec/0x23c [ 151.582486][T14171] do_el0_svc+0x4c/0x5c [ 151.582497][T14171] el0_svc+0x60/0x1d8 [ 151.582507][T14171] el0t_64_sync_handler+0x44/0x104 [ 151.582516][T14171] el0t_64_sync+0x198/0x19c [ 151.696567][T14173] FAULT_INJECTION: forcing a failure. [ 151.696567][T14173] name failslab, interval 1, probability 0, space 0, times 0 [ 151.696611][T14173] CPU: 0 UID: 0 PID: 14173 Comm: syz.0.3286 Not tainted syzkaller #0 PREEMPT [ 151.696623][T14173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 151.696637][T14173] Call trace: [ 151.696641][T14173] show_stack+0x2c/0x3c (C) [ 151.696663][T14173] __dump_stack+0x30/0x40 [ 151.696676][T14173] dump_stack_lvl+0xd8/0x12c [ 151.696688][T14173] dump_stack+0x1c/0x28 [ 151.696700][T14173] should_fail_ex+0x418/0x58c [ 151.696709][T14173] should_failslab+0xc4/0x120 [ 151.696717][T14173] __kmalloc_cache_noprof+0x94/0x5fc [ 151.696727][T14173] sget_fc+0x630/0x1520 [ 151.696737][T14173] vfs_get_super+0x40/0x148 [ 151.696747][T14173] get_tree_nodev+0x2c/0x3c [ 151.696757][T14173] mqueue_get_tree+0xac/0xe8 [ 151.696766][T14173] vfs_get_tree+0x90/0x28c [ 151.696781][T14173] fc_mount+0x24/0xac [ 151.696792][T14173] fc_mount_longterm+0x20/0x74 [ 151.696803][T14173] mq_init_ns+0x3c8/0x638 [ 151.696810][T14173] copy_ipcs+0x3c8/0x63c [ 151.696821][T14173] create_new_namespaces+0x1a8/0x50c [ 151.696833][T14173] unshare_nsproxy_namespaces+0x120/0x170 [ 151.696844][T14173] ksys_unshare+0x438/0x6e0 [ 151.696854][T14173] __arm64_sys_unshare+0x40/0x54 [ 151.696864][T14173] invoke_syscall+0x98/0x244 [ 151.696876][T14173] el0_svc_common+0xec/0x23c [ 151.696889][T14173] do_el0_svc+0x4c/0x5c [ 151.696900][T14173] el0_svc+0x60/0x1d8 [ 151.696910][T14173] el0t_64_sync_handler+0x44/0x104 [ 151.696919][T14173] el0t_64_sync+0x198/0x19c [ 151.761452][ T4722] Bluetooth: hci4: command tx timeout [ 151.934938][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3291'. [ 151.936711][T14182] netlink: 'syz.3.3291': attribute type 10 has an invalid length. [ 151.938374][T14182] syz_tun: entered promiscuous mode [ 151.960733][T14182] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 152.084728][T14195] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3296'. [ 152.274470][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3304'. [ 152.274741][T14220] netlink: 'syz.1.3304': attribute type 10 has an invalid length. [ 152.358317][T14223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3305'. [ 152.358987][T14223] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3305'. [ 152.409681][T14228] tipc: Enabled bearer , priority 0 [ 152.412418][T14228] tipc: Resetting bearer [ 152.424048][T14227] tipc: Disabling bearer [ 152.627787][T14226] device-mapper: ioctl: device has been removed from the dev hash table. [ 152.966752][T14244] syzkaller0: entered promiscuous mode [ 152.966762][T14244] syzkaller0: entered allmulticast mode [ 152.985930][T14244] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 153.139721][T14254] bond0: option mode: unable to set because the bond device has slaves [ 153.144956][T14254] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 153.308226][T14261] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 153.659916][T14263] tipc: Enabled bearer , priority 0 [ 153.664534][T14263] tipc: Resetting bearer [ 153.667388][T14262] tipc: Disabling bearer [ 153.700632][T14265] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3322'. [ 153.700646][T14265] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3322'. [ 154.026160][T14283] syzkaller0: entered promiscuous mode [ 154.026198][T14283] syzkaller0: entered allmulticast mode [ 154.042767][T14283] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 154.123094][T14292] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3333'. [ 154.150999][T14294] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 154.221864][T14303] syzkaller0: entered promiscuous mode [ 154.221874][T14303] syzkaller0: entered allmulticast mode [ 154.472414][ T13] net_ratelimit: 324 callbacks suppressed [ 154.730179][T14325] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 155.070331][T14332] syzkaller0: entered promiscuous mode [ 155.070341][T14332] syzkaller0: entered allmulticast mode [ 155.080181][T14332] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 155.172418][T14339] FAULT_INJECTION: forcing a failure. [ 155.172418][T14339] name failslab, interval 1, probability 0, space 0, times 0 [ 155.172460][T14339] CPU: 0 UID: 0 PID: 14339 Comm: syz.4.3348 Not tainted syzkaller #0 PREEMPT [ 155.172471][T14339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 155.172486][T14339] Call trace: [ 155.172489][T14339] show_stack+0x2c/0x3c (C) [ 155.172510][T14339] __dump_stack+0x30/0x40 [ 155.172523][T14339] dump_stack_lvl+0xd8/0x12c [ 155.172536][T14339] dump_stack+0x1c/0x28 [ 155.172547][T14339] should_fail_ex+0x418/0x58c [ 155.172557][T14339] should_failslab+0xc4/0x120 [ 155.172567][T14339] __kmalloc_cache_noprof+0x94/0x5fc [ 155.172578][T14339] shrinker_alloc+0x68/0x9b0 [ 155.172591][T14339] sget_fc+0xbd0/0x1520 [ 155.172602][T14339] vfs_get_super+0x40/0x148 [ 155.172612][T14339] get_tree_nodev+0x2c/0x3c [ 155.172623][T14339] mqueue_get_tree+0xac/0xe8 [ 155.172633][T14339] vfs_get_tree+0x90/0x28c [ 155.172643][T14339] fc_mount+0x24/0xac [ 155.172654][T14339] fc_mount_longterm+0x20/0x74 [ 155.172669][T14339] mq_init_ns+0x3c8/0x638 [ 155.172677][T14339] copy_ipcs+0x3c8/0x63c [ 155.172686][T14339] create_new_namespaces+0x1a8/0x50c [ 155.172698][T14339] unshare_nsproxy_namespaces+0x120/0x170 [ 155.172710][T14339] ksys_unshare+0x438/0x6e0 [ 155.172720][T14339] __arm64_sys_unshare+0x40/0x54 [ 155.172730][T14339] invoke_syscall+0x98/0x244 [ 155.172743][T14339] el0_svc_common+0xec/0x23c [ 155.172756][T14339] do_el0_svc+0x4c/0x5c [ 155.172768][T14339] el0_svc+0x60/0x1d8 [ 155.172782][T14339] el0t_64_sync_handler+0x44/0x104 [ 155.172793][T14339] el0t_64_sync+0x198/0x19c [ 155.622725][T14362] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 155.864272][T14367] bond0: option mode: unable to set because the bond device has slaves [ 155.864881][T14367] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 155.898432][T14370] syzkaller0: entered promiscuous mode [ 155.898444][T14370] syzkaller0: entered allmulticast mode [ 155.909207][T14370] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 156.005857][T14375] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 156.044507][T14377] __nla_validate_parse: 6 callbacks suppressed [ 156.044523][T14377] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3367'. [ 156.198556][T14389] syzkaller0: entered promiscuous mode [ 156.198568][T14389] syzkaller0: entered allmulticast mode [ 156.200942][T14389] tipc: Enabled bearer , priority 0 [ 156.214291][T14389] tipc: Resetting bearer [ 156.219726][T14388] tipc: Resetting bearer [ 156.228769][T14388] tipc: Disabling bearer [ 156.348078][T14397] tipc: Started in network mode [ 156.348100][T14397] tipc: Node identity 2e6ea7c99bc1, cluster identity 4711 [ 156.348153][T14397] tipc: Enabled bearer , priority 0 [ 156.357400][T14397] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 156.365826][T14397] tipc: Resetting bearer [ 156.376515][T14396] tipc: Disabling bearer [ 156.395718][T14402] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3377'. [ 156.635998][T14410] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3380'. [ 156.766998][T14421] syzkaller0: entered promiscuous mode [ 156.767010][T14421] syzkaller0: entered allmulticast mode [ 156.768453][T14421] tipc: Enabled bearer , priority 0 [ 156.779399][T14421] tipc: Resetting bearer [ 156.783895][T14420] tipc: Resetting bearer [ 156.788051][T14420] tipc: Disabling bearer [ 156.870567][T14429] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3389'. [ 156.995276][T14435] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 157.532126][T14452] syzkaller0: entered promiscuous mode [ 157.532137][T14452] syzkaller0: entered allmulticast mode [ 157.533560][T14452] tipc: Enabled bearer , priority 0 [ 157.542331][T14452] tipc: Resetting bearer [ 157.549349][T14451] tipc: Resetting bearer [ 157.557736][T14451] tipc: Disabling bearer [ 157.938479][T14464] netlink: 'syz.1.3403': attribute type 10 has an invalid length. [ 158.028113][T14474] syzkaller0: entered promiscuous mode [ 158.028123][T14474] syzkaller0: entered allmulticast mode [ 158.029569][T14474] tipc: Enabled bearer , priority 0 [ 158.035942][T14474] tipc: Resetting bearer [ 158.039166][T14473] tipc: Resetting bearer [ 158.046552][T14473] tipc: Disabling bearer [ 158.084845][T14478] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 158.179728][T14487] syzkaller0: entered promiscuous mode [ 158.179738][T14487] syzkaller0: entered allmulticast mode [ 158.187542][T14487] tipc: Enabled bearer , priority 0 [ 158.198633][T14487] tipc: Resetting bearer [ 158.205516][T14483] tipc: Resetting bearer [ 158.214979][T14483] tipc: Disabling bearer [ 158.272507][T14490] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 158.504102][T14497] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 158.504490][T14497] netlink: 'syz.4.3415': attribute type 10 has an invalid length. [ 158.506219][T14497] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 158.521852][T14494] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3414'. [ 158.588812][T14506] FAULT_INJECTION: forcing a failure. [ 158.588812][T14506] name fail_futex, interval 1, probability 0, space 0, times 0 [ 158.588833][T14506] CPU: 1 UID: 0 PID: 14506 Comm: syz.2.3419 Not tainted syzkaller #0 PREEMPT [ 158.588846][T14506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 158.588860][T14506] Call trace: [ 158.588864][T14506] show_stack+0x2c/0x3c (C) [ 158.588886][T14506] __dump_stack+0x30/0x40 [ 158.588901][T14506] dump_stack_lvl+0xd8/0x12c [ 158.588913][T14506] dump_stack+0x1c/0x28 [ 158.588924][T14506] should_fail_ex+0x418/0x58c [ 158.588934][T14506] should_fail+0x14/0x24 [ 158.588942][T14506] get_futex_key+0x1ec/0x12b0 [ 158.588954][T14506] futex_wake+0x10c/0x594 [ 158.588966][T14506] do_futex+0x2c4/0x378 [ 158.588976][T14506] __arm64_sys_futex+0x2e4/0x418 [ 158.588988][T14506] invoke_syscall+0x98/0x244 [ 158.589001][T14506] el0_svc_common+0xec/0x23c [ 158.589012][T14506] do_el0_svc+0x4c/0x5c [ 158.589025][T14506] el0_svc+0x60/0x1d8 [ 158.589035][T14506] el0t_64_sync_handler+0x44/0x104 [ 158.589044][T14506] el0t_64_sync+0x198/0x19c [ 158.674007][T14510] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 158.736381][T14516] syzkaller0: entered promiscuous mode [ 158.736392][T14516] syzkaller0: entered allmulticast mode [ 158.738037][T14516] tipc: Enabled bearer , priority 0 [ 158.740906][T14516] tipc: Resetting bearer [ 158.749817][T14515] tipc: Resetting bearer [ 158.759558][T14515] tipc: Disabling bearer [ 158.842066][T14531] netlink: 'syz.1.3430': attribute type 10 has an invalid length. [ 158.862447][T14527] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3429'. [ 158.927522][T14538] FAULT_INJECTION: forcing a failure. [ 158.927522][T14538] name fail_futex, interval 1, probability 0, space 0, times 0 [ 158.927550][T14538] CPU: 1 UID: 0 PID: 14538 Comm: syz.0.3433 Not tainted syzkaller #0 PREEMPT [ 158.927564][T14538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 158.927579][T14538] Call trace: [ 158.927582][T14538] show_stack+0x2c/0x3c (C) [ 158.927605][T14538] __dump_stack+0x30/0x40 [ 158.927617][T14538] dump_stack_lvl+0xd8/0x12c [ 158.927629][T14538] dump_stack+0x1c/0x28 [ 158.927641][T14538] should_fail_ex+0x418/0x58c [ 158.927650][T14538] should_fail+0x14/0x24 [ 158.927658][T14538] get_futex_key+0x1ec/0x12b0 [ 158.927669][T14538] futex_wake+0x10c/0x594 [ 158.927680][T14538] do_futex+0x2c4/0x378 [ 158.927691][T14538] __arm64_sys_futex+0x2e4/0x418 [ 158.927702][T14538] invoke_syscall+0x98/0x244 [ 158.927715][T14538] el0_svc_common+0xec/0x23c [ 158.927727][T14538] do_el0_svc+0x4c/0x5c [ 158.927738][T14538] el0_svc+0x60/0x1d8 [ 158.927748][T14538] el0t_64_sync_handler+0x44/0x104 [ 158.927757][T14538] el0t_64_sync+0x198/0x19c [ 158.942608][T14539] FAULT_INJECTION: forcing a failure. [ 158.942608][T14539] name failslab, interval 1, probability 0, space 0, times 0 [ 158.942623][T14539] CPU: 1 UID: 0 PID: 14539 Comm: syz.2.3427 Not tainted syzkaller #0 PREEMPT [ 158.942633][T14539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 158.942647][T14539] Call trace: [ 158.942650][T14539] show_stack+0x2c/0x3c (C) [ 158.942671][T14539] __dump_stack+0x30/0x40 [ 158.942687][T14539] dump_stack_lvl+0xd8/0x12c [ 158.942699][T14539] dump_stack+0x1c/0x28 [ 158.942711][T14539] should_fail_ex+0x418/0x58c [ 158.942721][T14539] should_failslab+0xc4/0x120 [ 158.942736][T14539] __kmalloc_cache_noprof+0x94/0x5fc [ 158.942747][T14539] alloc_fs_context+0x7c/0xba4 [ 158.942759][T14539] fs_context_for_mount+0x34/0x44 [ 158.942769][T14539] mq_init_ns+0xdc/0x638 [ 158.942778][T14539] copy_ipcs+0x3c8/0x63c [ 158.942792][T14539] create_new_namespaces+0x1a8/0x50c [ 158.942806][T14539] unshare_nsproxy_namespaces+0x120/0x170 [ 158.942817][T14539] ksys_unshare+0x438/0x6e0 [ 158.942827][T14539] __arm64_sys_unshare+0x40/0x54 [ 158.942837][T14539] invoke_syscall+0x98/0x244 [ 158.942851][T14539] el0_svc_common+0xec/0x23c [ 158.942863][T14539] do_el0_svc+0x4c/0x5c [ 158.942875][T14539] el0_svc+0x60/0x1d8 [ 158.942885][T14539] el0t_64_sync_handler+0x44/0x104 [ 158.942894][T14539] el0t_64_sync+0x198/0x19c [ 159.020587][T14541] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 159.266558][T14551] syzkaller0: entered promiscuous mode [ 159.266568][T14551] syzkaller0: entered allmulticast mode [ 159.270604][T14551] tipc: Enabled bearer , priority 0 [ 159.279747][T14551] tipc: Resetting bearer [ 159.303494][T14550] tipc: Resetting bearer [ 159.328233][T14550] tipc: Disabling bearer [ 159.366229][T14547] 9pnet_fd: Insufficient options for proto=fd [ 159.418314][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3442'. [ 159.418614][T14561] netlink: 'syz.3.3442': attribute type 10 has an invalid length. [ 159.449524][T14567] FAULT_INJECTION: forcing a failure. [ 159.449524][T14567] name fail_futex, interval 1, probability 0, space 0, times 0 [ 159.449541][T14567] CPU: 0 UID: 0 PID: 14567 Comm: syz.4.3445 Not tainted syzkaller #0 PREEMPT [ 159.449554][T14567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 159.449568][T14567] Call trace: [ 159.449572][T14567] show_stack+0x2c/0x3c (C) [ 159.449591][T14567] __dump_stack+0x30/0x40 [ 159.449605][T14567] dump_stack_lvl+0xd8/0x12c [ 159.449617][T14567] dump_stack+0x1c/0x28 [ 159.449629][T14567] should_fail_ex+0x418/0x58c [ 159.449639][T14567] should_fail+0x14/0x24 [ 159.449646][T14567] get_futex_key+0x1ec/0x12b0 [ 159.449659][T14567] futex_wake+0x10c/0x594 [ 159.449670][T14567] do_futex+0x2c4/0x378 [ 159.449681][T14567] __arm64_sys_futex+0x2e4/0x418 [ 159.449692][T14567] invoke_syscall+0x98/0x244 [ 159.449705][T14567] el0_svc_common+0xec/0x23c [ 159.449716][T14567] do_el0_svc+0x4c/0x5c [ 159.449728][T14567] el0_svc+0x60/0x1d8 [ 159.449738][T14567] el0t_64_sync_handler+0x44/0x104 [ 159.449747][T14567] el0t_64_sync+0x198/0x19c [ 159.452890][T14560] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3443'. [ 159.481748][ T12] net_ratelimit: 337 callbacks suppressed [ 159.498297][T14569] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 159.565755][T14579] syzkaller0: entered promiscuous mode [ 159.565765][T14579] syzkaller0: entered allmulticast mode [ 159.567317][T14579] tipc: Enabled bearer , priority 0 [ 159.578576][T14579] tipc: Resetting bearer [ 159.607852][T14576] tipc: Resetting bearer [ 159.624431][T14576] tipc: Disabling bearer [ 160.543650][T14605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3457'. [ 160.544616][T14605] netlink: 'syz.0.3457': attribute type 10 has an invalid length. [ 160.658078][T14616] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3458'. [ 160.743225][T14624] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 160.743920][T14623] tipc: Enabled bearer , priority 0 [ 160.752037][T14623] syzkaller0: entered promiscuous mode [ 160.752047][T14623] syzkaller0: entered allmulticast mode [ 160.760558][T14623] tipc: Resetting bearer [ 160.776976][T14619] tipc: Resetting bearer [ 160.795055][T14619] tipc: Disabling bearer [ 160.796505][T14630] FAULT_INJECTION: forcing a failure. [ 160.796505][T14630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.796521][T14630] CPU: 0 UID: 0 PID: 14630 Comm: syz.1.3467 Not tainted syzkaller #0 PREEMPT [ 160.796533][T14630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 160.796547][T14630] Call trace: [ 160.796550][T14630] show_stack+0x2c/0x3c (C) [ 160.796570][T14630] __dump_stack+0x30/0x40 [ 160.796581][T14630] dump_stack_lvl+0xd8/0x12c [ 160.796591][T14630] dump_stack+0x1c/0x28 [ 160.796601][T14630] should_fail_ex+0x418/0x58c [ 160.796609][T14630] should_fail+0x14/0x24 [ 160.796616][T14630] should_fail_usercopy+0x20/0x30 [ 160.796624][T14630] strncpy_from_user+0x48/0x388 [ 160.796633][T14630] mptcp_setsockopt+0x1138/0x219c [ 160.796643][T14630] sock_common_setsockopt+0xb0/0xcc [ 160.796654][T14630] do_sock_setsockopt+0x1f0/0x330 [ 160.796665][T14630] __sys_setsockopt+0x104/0x170 [ 160.796675][T14630] __arm64_sys_setsockopt+0xc8/0xe4 [ 160.796685][T14630] invoke_syscall+0x98/0x244 [ 160.796696][T14630] el0_svc_common+0xec/0x23c [ 160.796706][T14630] do_el0_svc+0x4c/0x5c [ 160.796715][T14630] el0_svc+0x60/0x1d8 [ 160.796723][T14630] el0t_64_sync_handler+0x44/0x104 [ 160.796731][T14630] el0t_64_sync+0x198/0x19c [ 160.938292][T14648] FAULT_INJECTION: forcing a failure. [ 160.938292][T14648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.938313][T14648] CPU: 1 UID: 0 PID: 14648 Comm: syz.3.3473 Not tainted syzkaller #0 PREEMPT [ 160.938324][T14648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 160.938338][T14648] Call trace: [ 160.938342][T14648] show_stack+0x2c/0x3c (C) [ 160.938362][T14648] __dump_stack+0x30/0x40 [ 160.938377][T14648] dump_stack_lvl+0xd8/0x12c [ 160.938387][T14648] dump_stack+0x1c/0x28 [ 160.938396][T14648] should_fail_ex+0x418/0x58c [ 160.938405][T14648] should_fail+0x14/0x24 [ 160.938412][T14648] should_fail_usercopy+0x20/0x30 [ 160.938420][T14648] simple_read_from_buffer+0xc4/0x238 [ 160.938434][T14648] proc_fail_nth_read+0x1a8/0x248 [ 160.938444][T14648] vfs_read+0x230/0x8c8 [ 160.938452][T14648] ksys_read+0x12c/0x228 [ 160.938459][T14648] __arm64_sys_read+0x84/0x98 [ 160.938466][T14648] invoke_syscall+0x98/0x244 [ 160.938477][T14648] el0_svc_common+0xec/0x23c [ 160.938487][T14648] do_el0_svc+0x4c/0x5c [ 160.938496][T14648] el0_svc+0x60/0x1d8 [ 160.938505][T14648] el0t_64_sync_handler+0x44/0x104 [ 160.938513][T14648] el0t_64_sync+0x198/0x19c [ 160.989601][T14650] device-mapper: multipath round-robin: repeat_count > 1 is deprecated, using 1 instead [ 160.989746][T14650] device-mapper: table: 248:4: multipath: not enough priority group arguments (-EINVAL) [ 160.989756][T14650] device-mapper: ioctl: error adding target to table [ 161.051609][T14660] FAULT_INJECTION: forcing a failure. [ 161.051609][T14660] name fail_futex, interval 1, probability 0, space 0, times 0 [ 161.051623][T14660] CPU: 1 UID: 0 PID: 14660 Comm: syz.2.3476 Not tainted syzkaller #0 PREEMPT [ 161.051632][T14660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 161.051645][T14660] Call trace: [ 161.051648][T14660] show_stack+0x2c/0x3c (C) [ 161.051668][T14660] __dump_stack+0x30/0x40 [ 161.051679][T14660] dump_stack_lvl+0xd8/0x12c [ 161.051689][T14660] dump_stack+0x1c/0x28 [ 161.051698][T14660] should_fail_ex+0x418/0x58c [ 161.051707][T14660] should_fail+0x14/0x24 [ 161.051714][T14660] get_futex_key+0x1ec/0x12b0 [ 161.051724][T14660] futex_wake+0x10c/0x594 [ 161.051733][T14660] do_futex+0x2c4/0x378 [ 161.051742][T14660] mm_exit_exec_release+0x190/0x27c [ 161.051751][T14660] exit_mm+0x50/0x1f0 [ 161.051758][T14660] do_exit+0x524/0x1a74 [ 161.051764][T14660] do_group_exit+0x198/0x238 [ 161.051771][T14660] get_signal+0xfb0/0x1094 [ 161.051780][T14660] arch_do_signal_or_restart+0x288/0x444c [ 161.051798][T14660] exit_to_user_mode_loop+0x70/0x17c [ 161.051808][T14660] el0_svc+0x12c/0x1d8 [ 161.051818][T14660] el0t_64_sync_handler+0x44/0x104 [ 161.051826][T14660] el0t_64_sync+0x198/0x19c [ 161.054053][T14662] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 161.108173][T14664] __nla_validate_parse: 1 callbacks suppressed [ 161.108191][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3479'. [ 161.113339][T14664] netlink: 'syz.3.3479': attribute type 10 has an invalid length. [ 161.167750][T14678] FAULT_INJECTION: forcing a failure. [ 161.167750][T14678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.167767][T14678] CPU: 0 UID: 0 PID: 14678 Comm: syz.4.3486 Not tainted syzkaller #0 PREEMPT [ 161.167785][T14678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 161.167799][T14678] Call trace: [ 161.167802][T14678] show_stack+0x2c/0x3c (C) [ 161.167820][T14678] __dump_stack+0x30/0x40 [ 161.167832][T14678] dump_stack_lvl+0xd8/0x12c [ 161.167842][T14678] dump_stack+0x1c/0x28 [ 161.167852][T14678] should_fail_ex+0x418/0x58c [ 161.167860][T14678] should_fail+0x14/0x24 [ 161.167867][T14678] should_fail_usercopy+0x20/0x30 [ 161.167874][T14678] _inline_copy_from_user+0x3c/0x174 [ 161.167883][T14678] copy_msghdr_from_user+0xb8/0x194 [ 161.167890][T14678] ___sys_sendmsg+0x14c/0x224 [ 161.167901][T14678] __sys_sendmsg+0x158/0x204 [ 161.167911][T14678] __arm64_sys_sendmsg+0x88/0x9c [ 161.167921][T14678] invoke_syscall+0x98/0x244 [ 161.167932][T14678] el0_svc_common+0xec/0x23c [ 161.167942][T14678] do_el0_svc+0x4c/0x5c [ 161.167951][T14678] el0_svc+0x60/0x1d8 [ 161.167959][T14678] el0t_64_sync_handler+0x44/0x104 [ 161.167967][T14678] el0t_64_sync+0x198/0x19c [ 161.195819][T14674] tipc: Enabled bearer , priority 0 [ 161.197833][T14674] syzkaller0: entered promiscuous mode [ 161.197849][T14674] syzkaller0: entered allmulticast mode [ 161.212445][T14674] tipc: Resetting bearer [ 161.214581][T14673] tipc: Resetting bearer [ 161.220582][T14673] tipc: Disabling bearer [ 161.355254][T14688] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3490'. [ 161.444058][T14695] FAULT_INJECTION: forcing a failure. [ 161.444058][T14695] name failslab, interval 1, probability 0, space 0, times 0 [ 161.444073][T14695] CPU: 0 UID: 0 PID: 14695 Comm: syz.0.3489 Not tainted syzkaller #0 PREEMPT [ 161.444084][T14695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 161.444098][T14695] Call trace: [ 161.444101][T14695] show_stack+0x2c/0x3c (C) [ 161.444126][T14695] __dump_stack+0x30/0x40 [ 161.444140][T14695] dump_stack_lvl+0xd8/0x12c [ 161.444152][T14695] dump_stack+0x1c/0x28 [ 161.444164][T14695] should_fail_ex+0x418/0x58c [ 161.444174][T14695] should_failslab+0xc4/0x120 [ 161.444183][T14695] __kmalloc_cache_noprof+0x94/0x5fc [ 161.444194][T14695] alloc_fs_context+0x7c/0xba4 [ 161.444205][T14695] fs_context_for_mount+0x34/0x44 [ 161.444214][T14695] mq_init_ns+0xdc/0x638 [ 161.444223][T14695] copy_ipcs+0x3c8/0x63c [ 161.444232][T14695] create_new_namespaces+0x1a8/0x50c [ 161.444245][T14695] unshare_nsproxy_namespaces+0x120/0x170 [ 161.444256][T14695] ksys_unshare+0x438/0x6e0 [ 161.444266][T14695] __arm64_sys_unshare+0x40/0x54 [ 161.444276][T14695] invoke_syscall+0x98/0x244 [ 161.444289][T14695] el0_svc_common+0xec/0x23c [ 161.444301][T14695] do_el0_svc+0x4c/0x5c [ 161.444313][T14695] el0_svc+0x60/0x1d8 [ 161.444323][T14695] el0t_64_sync_handler+0x44/0x104 [ 161.444332][T14695] el0t_64_sync+0x198/0x19c [ 161.502179][T14697] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 161.693466][T14710] netlink: 'syz.4.3497': attribute type 10 has an invalid length. [ 161.693880][T14710] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 161.894445][T14718] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 162.083449][T14717] tipc: Enabled bearer , priority 0 [ 162.085437][T14717] syzkaller0: entered promiscuous mode [ 162.085453][T14717] syzkaller0: entered allmulticast mode [ 162.100019][T14717] tipc: Resetting bearer [ 162.107513][T14716] tipc: Resetting bearer [ 162.143108][T14716] tipc: Disabling bearer [ 162.291914][T14726] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 162.464350][T14744] FAULT_INJECTION: forcing a failure. [ 162.464350][T14744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.464368][T14744] CPU: 0 UID: 0 PID: 14744 Comm: syz.0.3509 Not tainted syzkaller #0 PREEMPT [ 162.464381][T14744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 162.464396][T14744] Call trace: [ 162.464399][T14744] show_stack+0x2c/0x3c (C) [ 162.464420][T14744] __dump_stack+0x30/0x40 [ 162.464433][T14744] dump_stack_lvl+0xd8/0x12c [ 162.464444][T14744] dump_stack+0x1c/0x28 [ 162.464454][T14744] should_fail_ex+0x418/0x58c [ 162.464463][T14744] should_fail+0x14/0x24 [ 162.464469][T14744] should_fail_usercopy+0x20/0x30 [ 162.464477][T14744] _inline_copy_from_user+0x3c/0x174 [ 162.464490][T14744] do_arpt_set_ctl+0x5b8/0x94c [ 162.464498][T14744] nf_setsockopt+0xa0/0xe4 [ 162.464508][T14744] ip_setsockopt+0x118/0x128 [ 162.464517][T14744] sock_common_setsockopt+0xb0/0xcc [ 162.464530][T14744] do_sock_setsockopt+0x1f0/0x330 [ 162.464541][T14744] __sys_setsockopt+0x104/0x170 [ 162.464551][T14744] __arm64_sys_setsockopt+0xc8/0xe4 [ 162.464561][T14744] invoke_syscall+0x98/0x244 [ 162.464572][T14744] el0_svc_common+0xec/0x23c [ 162.464582][T14744] do_el0_svc+0x4c/0x5c [ 162.464592][T14744] el0_svc+0x60/0x1d8 [ 162.464601][T14744] el0t_64_sync_handler+0x44/0x104 [ 162.464609][T14744] el0t_64_sync+0x198/0x19c [ 162.490630][T14747] netlink: 'syz.3.3510': attribute type 10 has an invalid length. [ 162.527667][T14749] tipc: Enabled bearer , priority 0 [ 162.529273][T14749] tipc: Resetting bearer [ 162.531534][T14748] tipc: Disabling bearer [ 162.568908][T14751] FAULT_INJECTION: forcing a failure. [ 162.568908][T14751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.568929][T14751] CPU: 1 UID: 0 PID: 14751 Comm: syz.3.3512 Not tainted syzkaller #0 PREEMPT [ 162.568941][T14751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 162.568955][T14751] Call trace: [ 162.568958][T14751] show_stack+0x2c/0x3c (C) [ 162.568979][T14751] __dump_stack+0x30/0x40 [ 162.568993][T14751] dump_stack_lvl+0xd8/0x12c [ 162.569003][T14751] dump_stack+0x1c/0x28 [ 162.569013][T14751] should_fail_ex+0x418/0x58c [ 162.569021][T14751] should_fail+0x14/0x24 [ 162.569029][T14751] should_fail_usercopy+0x20/0x30 [ 162.569036][T14751] _inline_copy_from_user+0x3c/0x174 [ 162.569045][T14751] copy_msghdr_from_user+0xb8/0x194 [ 162.569053][T14751] ___sys_sendmsg+0x14c/0x224 [ 162.569063][T14751] __sys_sendmsg+0x158/0x204 [ 162.569073][T14751] __arm64_sys_sendmsg+0x88/0x9c [ 162.569084][T14751] invoke_syscall+0x98/0x244 [ 162.569094][T14751] el0_svc_common+0xec/0x23c [ 162.569105][T14751] do_el0_svc+0x4c/0x5c [ 162.569114][T14751] el0_svc+0x60/0x1d8 [ 162.569123][T14751] el0t_64_sync_handler+0x44/0x104 [ 162.569131][T14751] el0t_64_sync+0x198/0x19c [ 162.632374][T14753] syzkaller0: entered promiscuous mode [ 162.632385][T14753] syzkaller0: entered allmulticast mode [ 162.634266][T14753] tipc: Enabled bearer , priority 0 [ 162.640316][T14753] tipc: Resetting bearer [ 162.650346][T14752] tipc: Resetting bearer [ 162.655946][T14752] tipc: Disabling bearer [ 162.712472][T14761] tipc: Enabled bearer , priority 0 [ 162.713309][T14761] syzkaller0: entered promiscuous mode [ 162.713322][T14761] syzkaller0: entered allmulticast mode [ 162.715888][T14761] tipc: Resetting bearer [ 162.718245][T14760] tipc: Resetting bearer [ 162.753084][T14760] tipc: Disabling bearer [ 162.778049][T14764] FAULT_INJECTION: forcing a failure. [ 162.778049][T14764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.778067][T14764] CPU: 0 UID: 0 PID: 14764 Comm: syz.3.3518 Not tainted syzkaller #0 PREEMPT [ 162.778078][T14764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 162.778091][T14764] Call trace: [ 162.778094][T14764] show_stack+0x2c/0x3c (C) [ 162.778114][T14764] __dump_stack+0x30/0x40 [ 162.778125][T14764] dump_stack_lvl+0xd8/0x12c [ 162.778135][T14764] dump_stack+0x1c/0x28 [ 162.778144][T14764] should_fail_ex+0x418/0x58c [ 162.778153][T14764] should_fail+0x14/0x24 [ 162.778160][T14764] should_fail_usercopy+0x20/0x30 [ 162.778167][T14764] _inline_copy_from_user+0x3c/0x174 [ 162.778176][T14764] do_sock_getsockopt+0x210/0x720 [ 162.778187][T14764] __sys_getsockopt+0xfc/0x168 [ 162.778197][T14764] __arm64_sys_getsockopt+0xc8/0xe4 [ 162.778208][T14764] invoke_syscall+0x98/0x244 [ 162.778218][T14764] el0_svc_common+0xec/0x23c [ 162.778228][T14764] do_el0_svc+0x4c/0x5c [ 162.778238][T14764] el0_svc+0x60/0x1d8 [ 162.778247][T14764] el0t_64_sync_handler+0x44/0x104 [ 162.778255][T14764] el0t_64_sync+0x198/0x19c [ 162.896700][T14773] netlink: 'syz.0.3522': attribute type 10 has an invalid length. [ 163.067577][T14790] FAULT_INJECTION: forcing a failure. [ 163.067577][T14790] name fail_futex, interval 1, probability 0, space 0, times 0 [ 163.067655][T14790] CPU: 1 UID: 0 PID: 14790 Comm: syz.0.3528 Not tainted syzkaller #0 PREEMPT [ 163.067667][T14790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 163.067682][T14790] Call trace: [ 163.067685][T14790] show_stack+0x2c/0x3c (C) [ 163.067704][T14790] __dump_stack+0x30/0x40 [ 163.067717][T14790] dump_stack_lvl+0xd8/0x12c [ 163.067729][T14790] dump_stack+0x1c/0x28 [ 163.067740][T14790] should_fail_ex+0x418/0x58c [ 163.067750][T14790] should_fail+0x14/0x24 [ 163.067758][T14790] get_futex_key+0x1ec/0x12b0 [ 163.067769][T14790] futex_wake+0x10c/0x594 [ 163.067780][T14790] do_futex+0x2c4/0x378 [ 163.067798][T14790] __arm64_sys_futex+0x2e4/0x418 [ 163.067809][T14790] invoke_syscall+0x98/0x244 [ 163.067822][T14790] el0_svc_common+0xec/0x23c [ 163.067834][T14790] do_el0_svc+0x4c/0x5c [ 163.067845][T14790] el0_svc+0x60/0x1d8 [ 163.067855][T14790] el0t_64_sync_handler+0x44/0x104 [ 163.067864][T14790] el0t_64_sync+0x198/0x19c [ 163.139045][T14793] syzkaller0: entered promiscuous mode [ 163.139056][T14793] syzkaller0: entered allmulticast mode [ 163.140810][T14793] tipc: Enabled bearer , priority 0 [ 163.167774][T14793] tipc: Resetting bearer [ 163.184325][T14792] tipc: Resetting bearer [ 163.198481][T14792] tipc: Disabling bearer [ 163.216207][T14799] tipc: Enabled bearer , priority 0 [ 163.216482][T14799] syzkaller0: entered promiscuous mode [ 163.216559][T14799] syzkaller0: entered allmulticast mode [ 163.221418][T14799] tipc: Resetting bearer [ 163.229543][T14798] tipc: Resetting bearer [ 163.244157][T14798] tipc: Disabling bearer [ 163.269617][T14805] netlink: 'syz.4.3534': attribute type 10 has an invalid length. [ 163.272305][T14805] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 163.409877][T14821] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3538'. [ 163.434077][T14825] FAULT_INJECTION: forcing a failure. [ 163.434077][T14825] name fail_futex, interval 1, probability 0, space 0, times 0 [ 163.434102][T14825] CPU: 1 UID: 0 PID: 14825 Comm: syz.4.3540 Not tainted syzkaller #0 PREEMPT [ 163.434113][T14825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 163.434128][T14825] Call trace: [ 163.434131][T14825] show_stack+0x2c/0x3c (C) [ 163.434151][T14825] __dump_stack+0x30/0x40 [ 163.434163][T14825] dump_stack_lvl+0xd8/0x12c [ 163.434175][T14825] dump_stack+0x1c/0x28 [ 163.434186][T14825] should_fail_ex+0x418/0x58c [ 163.434196][T14825] should_fail+0x14/0x24 [ 163.434203][T14825] get_futex_key+0x1ec/0x12b0 [ 163.434215][T14825] futex_wake+0x10c/0x594 [ 163.434226][T14825] do_futex+0x2c4/0x378 [ 163.434237][T14825] __arm64_sys_futex+0x2e4/0x418 [ 163.434248][T14825] invoke_syscall+0x98/0x244 [ 163.434261][T14825] el0_svc_common+0xec/0x23c [ 163.434273][T14825] do_el0_svc+0x4c/0x5c [ 163.434285][T14825] el0_svc+0x60/0x1d8 [ 163.434296][T14825] el0t_64_sync_handler+0x44/0x104 [ 163.434305][T14825] el0t_64_sync+0x198/0x19c [ 163.688075][T14842] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 163.728112][T14846] netlink: 'syz.4.3548': attribute type 10 has an invalid length. [ 163.728565][T14846] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 164.010008][T14857] FAULT_INJECTION: forcing a failure. [ 164.010008][T14857] name fail_futex, interval 1, probability 0, space 0, times 0 [ 164.010031][T14857] CPU: 1 UID: 0 PID: 14857 Comm: syz.0.3553 Not tainted syzkaller #0 PREEMPT [ 164.010043][T14857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 164.010057][T14857] Call trace: [ 164.010061][T14857] show_stack+0x2c/0x3c (C) [ 164.010083][T14857] __dump_stack+0x30/0x40 [ 164.010096][T14857] dump_stack_lvl+0xd8/0x12c [ 164.010108][T14857] dump_stack+0x1c/0x28 [ 164.010120][T14857] should_fail_ex+0x418/0x58c [ 164.010129][T14857] should_fail+0x14/0x24 [ 164.010137][T14857] get_futex_key+0x1ec/0x12b0 [ 164.010148][T14857] futex_wake+0x10c/0x594 [ 164.010160][T14857] do_futex+0x2c4/0x378 [ 164.010171][T14857] __arm64_sys_futex+0x2e4/0x418 [ 164.010182][T14857] invoke_syscall+0x98/0x244 [ 164.010195][T14857] el0_svc_common+0xec/0x23c [ 164.010210][T14857] do_el0_svc+0x4c/0x5c [ 164.010221][T14857] el0_svc+0x60/0x1d8 [ 164.010231][T14857] el0t_64_sync_handler+0x44/0x104 [ 164.010241][T14857] el0t_64_sync+0x198/0x19c [ 164.158614][T14869] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 164.174614][T14871] netlink: 'syz.1.3559': attribute type 10 has an invalid length. [ 164.214547][T14875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3561'. [ 164.268894][T14879] syzkaller0: entered promiscuous mode [ 164.268906][T14879] syzkaller0: entered allmulticast mode [ 164.518542][T14890] tipc: Enabled bearer , priority 0 [ 164.518852][T14890] syzkaller0: entered promiscuous mode [ 164.518862][T14890] syzkaller0: entered allmulticast mode [ 164.523320][T14886] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3566'. [ 164.527312][T14890] tipc: Resetting bearer [ 164.535097][T14889] tipc: Resetting bearer [ 164.550933][T14889] tipc: Disabling bearer [ 164.578884][T14894] tipc: Enabled bearer , priority 0 [ 164.580320][T14894] tipc: Resetting bearer [ 164.586433][T14893] tipc: Disabling bearer [ 164.619052][T14897] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 164.669062][T14902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3573'. [ 164.683153][T14908] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3572'. [ 164.685292][T14908] netlink: 'syz.2.3572': attribute type 10 has an invalid length. [ 164.685687][T14908] syz_tun: entered promiscuous mode [ 164.701859][T14908] bond0: (slave syz_tun): Enslaving as a backup interface with an up link [ 164.705868][T14908] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 164.715382][T14913] net_ratelimit: 447 callbacks suppressed [ 164.859104][T14933] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 164.886665][T14935] team_slave_1: entered allmulticast mode [ 164.924173][T14937] tipc: Enabled bearer , priority 0 [ 164.925926][T14937] tipc: Resetting bearer [ 164.940510][T14936] tipc: Disabling bearer [ 164.992758][T14943] tipc: Enabled bearer , priority 0 [ 164.993324][T14943] syzkaller0: entered promiscuous mode [ 164.993334][T14943] syzkaller0: entered allmulticast mode [ 164.998194][T14943] tipc: Resetting bearer [ 165.008109][T14942] tipc: Resetting bearer [ 165.017959][T14945] FAULT_INJECTION: forcing a failure. [ 165.017959][T14945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.017977][T14945] CPU: 1 UID: 0 PID: 14945 Comm: syz.3.3588 Not tainted syzkaller #0 PREEMPT [ 165.017989][T14945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 165.018003][T14945] Call trace: [ 165.018006][T14945] show_stack+0x2c/0x3c (C) [ 165.018026][T14945] __dump_stack+0x30/0x40 [ 165.018037][T14945] dump_stack_lvl+0xd8/0x12c [ 165.018047][T14945] dump_stack+0x1c/0x28 [ 165.018057][T14945] should_fail_ex+0x418/0x58c [ 165.018065][T14945] should_fail+0x14/0x24 [ 165.018072][T14945] should_fail_usercopy+0x20/0x30 [ 165.018079][T14945] _inline_copy_from_user+0x3c/0x174 [ 165.018088][T14945] copy_msghdr_from_user+0xb8/0x194 [ 165.018096][T14945] ___sys_recvmsg+0x11c/0x1f4 [ 165.018103][T14945] do_recvmmsg+0x288/0x7d4 [ 165.018110][T14945] __sys_recvmmsg+0x1e0/0x270 [ 165.018117][T14945] __arm64_sys_recvmmsg+0xe0/0x108 [ 165.018124][T14945] invoke_syscall+0x98/0x244 [ 165.018135][T14945] el0_svc_common+0xec/0x23c [ 165.018144][T14945] do_el0_svc+0x4c/0x5c [ 165.018154][T14945] el0_svc+0x60/0x1d8 [ 165.018163][T14945] el0t_64_sync_handler+0x44/0x104 [ 165.018171][T14945] el0t_64_sync+0x198/0x19c [ 165.026778][T14942] tipc: Disabling bearer [ 165.086245][T14951] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3591'. [ 165.086549][T14951] netlink: 'syz.4.3591': attribute type 10 has an invalid length. [ 165.086829][T14951] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 165.098521][T14952] xt_IDLETIMER: timeout value is too big [ 165.215088][T14966] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 165.302263][T14974] syzkaller0: entered promiscuous mode [ 165.302273][T14974] syzkaller0: entered allmulticast mode [ 165.303749][T14974] tipc: Enabled bearer , priority 0 [ 165.305957][T14974] tipc: Resetting bearer [ 165.309257][T14973] tipc: Resetting bearer [ 165.324442][T14973] tipc: Disabling bearer [ 165.352046][T14980] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3603'. [ 165.352391][T14980] netlink: 'syz.2.3603': attribute type 10 has an invalid length. [ 165.356409][T14980] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 165.392651][T14986] tipc: Enabled bearer , priority 10 [ 165.439356][T14998] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 165.530764][T15007] FAULT_INJECTION: forcing a failure. [ 165.530764][T15007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.530792][T15007] CPU: 0 UID: 0 PID: 15007 Comm: syz.2.3612 Not tainted syzkaller #0 PREEMPT [ 165.530803][T15007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 165.530820][T15007] Call trace: [ 165.530823][T15007] show_stack+0x2c/0x3c (C) [ 165.530843][T15007] __dump_stack+0x30/0x40 [ 165.530855][T15007] dump_stack_lvl+0xd8/0x12c [ 165.530866][T15007] dump_stack+0x1c/0x28 [ 165.530875][T15007] should_fail_ex+0x418/0x58c [ 165.530884][T15007] should_fail+0x14/0x24 [ 165.530891][T15007] should_fail_usercopy+0x20/0x30 [ 165.530899][T15007] _inline_copy_from_user+0x3c/0x174 [ 165.530908][T15007] copy_msghdr_from_user+0xb8/0x194 [ 165.530916][T15007] ___sys_sendmsg+0x14c/0x224 [ 165.530926][T15007] __sys_sendmsg+0x158/0x204 [ 165.530936][T15007] __arm64_sys_sendmsg+0x88/0x9c [ 165.530947][T15007] invoke_syscall+0x98/0x244 [ 165.530957][T15007] el0_svc_common+0xec/0x23c [ 165.530967][T15007] do_el0_svc+0x4c/0x5c [ 165.530977][T15007] el0_svc+0x60/0x1d8 [ 165.530986][T15007] el0t_64_sync_handler+0x44/0x104 [ 165.530993][T15007] el0t_64_sync+0x198/0x19c [ 165.799895][T15018] syzkaller0: entered promiscuous mode [ 165.799907][T15018] syzkaller0: entered allmulticast mode [ 165.804985][T15018] tipc: Enabled bearer , priority 0 [ 165.813498][T15018] tipc: Resetting bearer [ 165.816497][T15017] tipc: Resetting bearer [ 165.825744][T15017] tipc: Disabling bearer [ 165.896594][T15021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3617'. [ 165.897094][T15021] netlink: 'syz.2.3617': attribute type 10 has an invalid length. [ 165.897360][T15021] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 166.082035][T15041] FAULT_INJECTION: forcing a failure. [ 166.082035][T15041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.082057][T15041] CPU: 1 UID: 0 PID: 15041 Comm: syz.2.3624 Not tainted syzkaller #0 PREEMPT [ 166.082072][T15041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 166.082086][T15041] Call trace: [ 166.082090][T15041] show_stack+0x2c/0x3c (C) [ 166.082111][T15041] __dump_stack+0x30/0x40 [ 166.082125][T15041] dump_stack_lvl+0xd8/0x12c [ 166.082136][T15041] dump_stack+0x1c/0x28 [ 166.082145][T15041] should_fail_ex+0x418/0x58c [ 166.082154][T15041] should_fail+0x14/0x24 [ 166.082161][T15041] should_fail_usercopy+0x20/0x30 [ 166.082169][T15041] _inline_copy_from_user+0x3c/0x174 [ 166.082179][T15041] copy_msghdr_from_user+0xb8/0x194 [ 166.082187][T15041] ___sys_sendmsg+0x14c/0x224 [ 166.082197][T15041] __sys_sendmsg+0x158/0x204 [ 166.082208][T15041] __arm64_sys_sendmsg+0x88/0x9c [ 166.082218][T15041] invoke_syscall+0x98/0x244 [ 166.082229][T15041] el0_svc_common+0xec/0x23c [ 166.082239][T15041] do_el0_svc+0x4c/0x5c [ 166.082248][T15041] el0_svc+0x60/0x1d8 [ 166.082258][T15041] el0t_64_sync_handler+0x44/0x104 [ 166.082266][T15041] el0t_64_sync+0x198/0x19c [ 166.098633][T15044] sctp: [Deprecated]: syz.2.3625 (pid 15044) Use of int in max_burst socket option. [ 166.098633][T15044] Use struct sctp_assoc_value instead [ 166.134464][T15047] tipc: Enabled bearer , priority 0 [ 166.140122][T15047] tipc: Resetting bearer [ 166.147882][T15046] tipc: Disabling bearer [ 166.250853][T15052] syzkaller0: entered promiscuous mode [ 166.250865][T15052] syzkaller0: entered allmulticast mode [ 166.275758][T15060] __nla_validate_parse: 1 callbacks suppressed [ 166.275766][T15060] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3630'. [ 166.276075][T15060] netlink: 'syz.2.3630': attribute type 10 has an invalid length. [ 166.276347][T15060] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 166.362370][T15064] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3632'. [ 166.401937][ T865] tipc: Node number set to 2074610465 [ 166.420163][T15072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3635'. [ 166.424059][T15072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3635'. [ 166.424517][T15072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3635'. [ 166.424733][T15072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3635'. [ 166.425158][T15072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3635'. [ 166.425361][T15072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3635'. [ 166.425596][T15072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3635'. [ 166.425801][T15072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3635'. [ 166.434834][T15075] FAULT_INJECTION: forcing a failure. [ 166.434834][T15075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.434852][T15075] CPU: 1 UID: 0 PID: 15075 Comm: syz.1.3636 Not tainted syzkaller #0 PREEMPT [ 166.434864][T15075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 166.434879][T15075] Call trace: [ 166.434882][T15075] show_stack+0x2c/0x3c (C) [ 166.434900][T15075] __dump_stack+0x30/0x40 [ 166.434911][T15075] dump_stack_lvl+0xd8/0x12c [ 166.434921][T15075] dump_stack+0x1c/0x28 [ 166.434931][T15075] should_fail_ex+0x418/0x58c [ 166.434939][T15075] should_fail+0x14/0x24 [ 166.434946][T15075] should_fail_usercopy+0x20/0x30 [ 166.434954][T15075] _inline_copy_from_user+0x3c/0x174 [ 166.434963][T15075] __sys_bpf+0x1b4/0x82c [ 166.434971][T15075] __arm64_sys_bpf+0xd0/0xec [ 166.434979][T15075] invoke_syscall+0x98/0x244 [ 166.434990][T15075] el0_svc_common+0xec/0x23c [ 166.435000][T15075] do_el0_svc+0x4c/0x5c [ 166.435009][T15075] el0_svc+0x60/0x1d8 [ 166.435018][T15075] el0t_64_sync_handler+0x44/0x104 [ 166.435026][T15075] el0t_64_sync+0x198/0x19c [ 166.513587][T15079] FAULT_INJECTION: forcing a failure. [ 166.513587][T15079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.513600][T15079] CPU: 1 UID: 0 PID: 15079 Comm: syz.3.3638 Not tainted syzkaller #0 PREEMPT [ 166.513610][T15079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 166.513621][T15079] Call trace: [ 166.513624][T15079] show_stack+0x2c/0x3c (C) [ 166.513644][T15079] __dump_stack+0x30/0x40 [ 166.513655][T15079] dump_stack_lvl+0xd8/0x12c [ 166.513665][T15079] dump_stack+0x1c/0x28 [ 166.513674][T15079] should_fail_ex+0x418/0x58c [ 166.513683][T15079] should_fail+0x14/0x24 [ 166.513690][T15079] should_fail_usercopy+0x20/0x30 [ 166.513697][T15079] _inline_copy_from_user+0x3c/0x174 [ 166.513707][T15079] do_sock_getsockopt+0x210/0x720 [ 166.513717][T15079] __sys_getsockopt+0xfc/0x168 [ 166.513727][T15079] __arm64_sys_getsockopt+0xc8/0xe4 [ 166.513738][T15079] invoke_syscall+0x98/0x244 [ 166.513748][T15079] el0_svc_common+0xec/0x23c [ 166.513758][T15079] do_el0_svc+0x4c/0x5c [ 166.513768][T15079] el0_svc+0x60/0x1d8 [ 166.513776][T15079] el0t_64_sync_handler+0x44/0x104 [ 166.513793][T15079] el0t_64_sync+0x198/0x19c [ 166.663678][T15108] FAULT_INJECTION: forcing a failure. [ 166.663678][T15108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.663694][T15108] CPU: 1 UID: 0 PID: 15108 Comm: syz.4.3646 Not tainted syzkaller #0 PREEMPT [ 166.663704][T15108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 166.663717][T15108] Call trace: [ 166.663720][T15108] show_stack+0x2c/0x3c (C) [ 166.663740][T15108] __dump_stack+0x30/0x40 [ 166.663751][T15108] dump_stack_lvl+0xd8/0x12c [ 166.663761][T15108] dump_stack+0x1c/0x28 [ 166.663771][T15108] should_fail_ex+0x418/0x58c [ 166.663779][T15108] should_fail+0x14/0x24 [ 166.663794][T15108] should_fail_usercopy+0x20/0x30 [ 166.663802][T15108] _inline_copy_from_user+0x3c/0x174 [ 166.663811][T15108] copy_msghdr_from_user+0xb8/0x194 [ 166.663819][T15108] ___sys_sendmsg+0x14c/0x224 [ 166.663830][T15108] __sys_sendmsg+0x158/0x204 [ 166.663841][T15108] __arm64_sys_sendmsg+0x88/0x9c [ 166.663851][T15108] invoke_syscall+0x98/0x244 [ 166.663862][T15108] el0_svc_common+0xec/0x23c [ 166.663872][T15108] do_el0_svc+0x4c/0x5c [ 166.663881][T15108] el0_svc+0x60/0x1d8 [ 166.663890][T15108] el0t_64_sync_handler+0x44/0x104 [ 166.663898][T15108] el0t_64_sync+0x198/0x19c [ 166.726537][T15115] FAULT_INJECTION: forcing a failure. [ 166.726537][T15115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.726559][T15115] CPU: 1 UID: 0 PID: 15115 Comm: syz.0.3649 Not tainted syzkaller #0 PREEMPT [ 166.726570][T15115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 166.726584][T15115] Call trace: [ 166.726587][T15115] show_stack+0x2c/0x3c (C) [ 166.726605][T15115] __dump_stack+0x30/0x40 [ 166.726616][T15115] dump_stack_lvl+0xd8/0x12c [ 166.726626][T15115] dump_stack+0x1c/0x28 [ 166.726636][T15115] should_fail_ex+0x418/0x58c [ 166.726644][T15115] should_fail+0x14/0x24 [ 166.726651][T15115] should_fail_usercopy+0x20/0x30 [ 166.726659][T15115] _inline_copy_from_user+0x3c/0x174 [ 166.726668][T15115] copy_msghdr_from_user+0xb8/0x194 [ 166.726675][T15115] ___sys_sendmsg+0x14c/0x224 [ 166.726686][T15115] __sys_sendmsg+0x158/0x204 [ 166.726696][T15115] __arm64_sys_sendmsg+0x88/0x9c [ 166.726706][T15115] invoke_syscall+0x98/0x244 [ 166.726717][T15115] el0_svc_common+0xec/0x23c [ 166.726727][T15115] do_el0_svc+0x4c/0x5c [ 166.726736][T15115] el0_svc+0x60/0x1d8 [ 166.726745][T15115] el0t_64_sync_handler+0x44/0x104 [ 166.726753][T15115] el0t_64_sync+0x198/0x19c [ 166.798049][T15117] capability: warning: `syz.4.3650' uses deprecated v2 capabilities in a way that may be insecure [ 167.357665][T15185] FAULT_INJECTION: forcing a failure. [ 167.357665][T15185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.357683][T15185] CPU: 1 UID: 0 PID: 15185 Comm: syz.0.3675 Not tainted syzkaller #0 PREEMPT [ 167.357693][T15185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 167.357706][T15185] Call trace: [ 167.357709][T15185] show_stack+0x2c/0x3c (C) [ 167.357730][T15185] __dump_stack+0x30/0x40 [ 167.357744][T15185] dump_stack_lvl+0xd8/0x12c [ 167.357754][T15185] dump_stack+0x1c/0x28 [ 167.357764][T15185] should_fail_ex+0x418/0x58c [ 167.357772][T15185] should_fail+0x14/0x24 [ 167.357779][T15185] should_fail_usercopy+0x20/0x30 [ 167.357794][T15185] _inline_copy_from_user+0x3c/0x174 [ 167.357804][T15185] copy_msghdr_from_user+0xb8/0x194 [ 167.357812][T15185] ___sys_sendmsg+0x14c/0x224 [ 167.357823][T15185] __sys_sendmmsg+0x204/0x580 [ 167.357833][T15185] __arm64_sys_sendmmsg+0xac/0xc8 [ 167.357844][T15185] invoke_syscall+0x98/0x244 [ 167.357855][T15185] el0_svc_common+0xec/0x23c [ 167.357864][T15185] do_el0_svc+0x4c/0x5c [ 167.357874][T15185] el0_svc+0x60/0x1d8 [ 167.357883][T15185] el0t_64_sync_handler+0x44/0x104 [ 167.357891][T15185] el0t_64_sync+0x198/0x19c [ 167.400135][T15187] netlink: 'syz.4.3676': attribute type 29 has an invalid length. [ 167.400661][T15187] process 'syz.4.3676' launched './file1' with NULL argv: empty string added [ 167.554892][T15219] FAULT_INJECTION: forcing a failure. [ 167.554892][T15219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.554914][T15219] CPU: 1 UID: 0 PID: 15219 Comm: syz.4.3687 Not tainted syzkaller #0 PREEMPT [ 167.554926][T15219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 167.554940][T15219] Call trace: [ 167.554943][T15219] show_stack+0x2c/0x3c (C) [ 167.554960][T15219] __dump_stack+0x30/0x40 [ 167.554971][T15219] dump_stack_lvl+0xd8/0x12c [ 167.554981][T15219] dump_stack+0x1c/0x28 [ 167.554991][T15219] should_fail_ex+0x418/0x58c [ 167.554999][T15219] should_fail+0x14/0x24 [ 167.555006][T15219] should_fail_usercopy+0x20/0x30 [ 167.555014][T15219] _inline_copy_from_user+0x3c/0x174 [ 167.555023][T15219] __sys_bpf+0x1b4/0x82c [ 167.555032][T15219] __arm64_sys_bpf+0xd0/0xec [ 167.555040][T15219] invoke_syscall+0x98/0x244 [ 167.555050][T15219] el0_svc_common+0xec/0x23c [ 167.555060][T15219] do_el0_svc+0x4c/0x5c [ 167.555070][T15219] el0_svc+0x60/0x1d8 [ 167.555079][T15219] el0t_64_sync_handler+0x44/0x104 [ 167.555087][T15219] el0t_64_sync+0x198/0x19c [ 167.614001][T15225] xt_LOG: prefix is not null-terminated [ 167.634258][T15227] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 167.839370][T15244] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 168.075938][T15246] FAULT_INJECTION: forcing a failure. [ 168.075938][T15246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.075957][T15246] CPU: 0 UID: 0 PID: 15246 Comm: syz.2.3697 Not tainted syzkaller #0 PREEMPT [ 168.075968][T15246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 168.075982][T15246] Call trace: [ 168.075985][T15246] show_stack+0x2c/0x3c (C) [ 168.076001][T15246] __dump_stack+0x30/0x40 [ 168.076013][T15246] dump_stack_lvl+0xd8/0x12c [ 168.076023][T15246] dump_stack+0x1c/0x28 [ 168.076033][T15246] should_fail_ex+0x418/0x58c [ 168.076042][T15246] should_fail+0x14/0x24 [ 168.076048][T15246] should_fail_usercopy+0x20/0x30 [ 168.076056][T15246] _copy_from_iter+0x188/0x1064 [ 168.076065][T15246] tun_get_user+0x3e8/0x37fc [ 168.076075][T15246] tun_chr_write_iter+0xfc/0x168 [ 168.076084][T15246] vfs_write+0x51c/0xa0c [ 168.076092][T15246] ksys_write+0x12c/0x228 [ 168.076099][T15246] __arm64_sys_write+0x84/0x98 [ 168.076106][T15246] invoke_syscall+0x98/0x244 [ 168.076117][T15246] el0_svc_common+0xec/0x23c [ 168.076126][T15246] do_el0_svc+0x4c/0x5c [ 168.076136][T15246] el0_svc+0x60/0x1d8 [ 168.076145][T15246] el0t_64_sync_handler+0x44/0x104 [ 168.076152][T15246] el0t_64_sync+0x198/0x19c [ 168.212592][T15257] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 168.250679][T15259] tipc: Enabled bearer , priority 0 [ 168.259842][T15259] tipc: Resetting bearer [ 168.274409][T15258] tipc: Disabling bearer [ 168.393267][T15268] FAULT_INJECTION: forcing a failure. [ 168.393267][T15268] name failslab, interval 1, probability 0, space 0, times 0 [ 168.393282][T15268] CPU: 0 UID: 0 PID: 15268 Comm: syz.3.3701 Not tainted syzkaller #0 PREEMPT [ 168.393293][T15268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 168.393306][T15268] Call trace: [ 168.393310][T15268] show_stack+0x2c/0x3c (C) [ 168.393331][T15268] __dump_stack+0x30/0x40 [ 168.393346][T15268] dump_stack_lvl+0xd8/0x12c [ 168.393358][T15268] dump_stack+0x1c/0x28 [ 168.393370][T15268] should_fail_ex+0x418/0x58c [ 168.393380][T15268] should_failslab+0xc4/0x120 [ 168.393389][T15268] __kmalloc_cache_noprof+0x94/0x5fc [ 168.393399][T15268] sget_fc+0x630/0x1520 [ 168.393410][T15268] vfs_get_super+0x40/0x148 [ 168.393420][T15268] get_tree_nodev+0x2c/0x3c [ 168.393430][T15268] mqueue_get_tree+0xac/0xe8 [ 168.393440][T15268] vfs_get_tree+0x90/0x28c [ 168.393451][T15268] fc_mount+0x24/0xac [ 168.393462][T15268] fc_mount_longterm+0x20/0x74 [ 168.393473][T15268] mq_init_ns+0x3c8/0x638 [ 168.393481][T15268] copy_ipcs+0x3c8/0x63c [ 168.393489][T15268] create_new_namespaces+0x1a8/0x50c [ 168.393501][T15268] unshare_nsproxy_namespaces+0x120/0x170 [ 168.393512][T15268] ksys_unshare+0x438/0x6e0 [ 168.393523][T15268] __arm64_sys_unshare+0x40/0x54 [ 168.393533][T15268] invoke_syscall+0x98/0x244 [ 168.393546][T15268] el0_svc_common+0xec/0x23c [ 168.393558][T15268] do_el0_svc+0x4c/0x5c [ 168.393570][T15268] el0_svc+0x60/0x1d8 [ 168.393580][T15268] el0t_64_sync_handler+0x44/0x104 [ 168.393589][T15268] el0t_64_sync+0x198/0x19c [ 168.482357][T15270] FAULT_INJECTION: forcing a failure. [ 168.482357][T15270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.482379][T15270] CPU: 0 UID: 0 PID: 15270 Comm: syz.1.3705 Not tainted syzkaller #0 PREEMPT [ 168.482390][T15270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 168.482403][T15270] Call trace: [ 168.482406][T15270] show_stack+0x2c/0x3c (C) [ 168.482425][T15270] __dump_stack+0x30/0x40 [ 168.482436][T15270] dump_stack_lvl+0xd8/0x12c [ 168.482446][T15270] dump_stack+0x1c/0x28 [ 168.482456][T15270] should_fail_ex+0x418/0x58c [ 168.482464][T15270] should_fail+0x14/0x24 [ 168.482471][T15270] should_fail_usercopy+0x20/0x30 [ 168.482479][T15270] _inline_copy_from_user+0x3c/0x174 [ 168.482488][T15270] __sys_bpf+0x1b4/0x82c [ 168.482497][T15270] __arm64_sys_bpf+0xd0/0xec [ 168.482505][T15270] invoke_syscall+0x98/0x244 [ 168.482516][T15270] el0_svc_common+0xec/0x23c [ 168.482526][T15270] do_el0_svc+0x4c/0x5c [ 168.482535][T15270] el0_svc+0x60/0x1d8 [ 168.482544][T15270] el0t_64_sync_handler+0x44/0x104 [ 168.482552][T15270] el0t_64_sync+0x198/0x19c [ 168.602328][T15277] netlink: 'syz.4.3708': attribute type 21 has an invalid length. [ 168.606120][T15278] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 168.945693][T15312] input: syz0 as /devices/virtual/input/input3 [ 169.147108][T15329] tipc: Enabled bearer , priority 0 [ 169.147974][T15329] syzkaller0: entered promiscuous mode [ 169.147989][T15329] syzkaller0: entered allmulticast mode [ 169.172495][T15329] tipc: Resetting bearer [ 169.174033][T15328] tipc: Resetting bearer [ 169.181061][T15328] tipc: Disabling bearer [ 169.208810][T15334] FAULT_INJECTION: forcing a failure. [ 169.208810][T15334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.208828][T15334] CPU: 0 UID: 0 PID: 15334 Comm: syz.3.3727 Not tainted syzkaller #0 PREEMPT [ 169.208841][T15334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 169.208857][T15334] Call trace: [ 169.208860][T15334] show_stack+0x2c/0x3c (C) [ 169.208882][T15334] __dump_stack+0x30/0x40 [ 169.208893][T15334] dump_stack_lvl+0xd8/0x12c [ 169.208904][T15334] dump_stack+0x1c/0x28 [ 169.208913][T15334] should_fail_ex+0x418/0x58c [ 169.208922][T15334] should_fail+0x14/0x24 [ 169.208929][T15334] should_fail_usercopy+0x20/0x30 [ 169.208936][T15334] _copy_from_iter+0x188/0x1064 [ 169.208945][T15334] tun_get_user+0x3e8/0x37fc [ 169.208955][T15334] tun_chr_write_iter+0xfc/0x168 [ 169.208964][T15334] vfs_write+0x51c/0xa0c [ 169.208972][T15334] ksys_write+0x12c/0x228 [ 169.208979][T15334] __arm64_sys_write+0x84/0x98 [ 169.208987][T15334] invoke_syscall+0x98/0x244 [ 169.208997][T15334] el0_svc_common+0xec/0x23c [ 169.209007][T15334] do_el0_svc+0x4c/0x5c [ 169.209017][T15334] el0_svc+0x60/0x1d8 [ 169.209025][T15334] el0t_64_sync_handler+0x44/0x104 [ 169.209033][T15334] el0t_64_sync+0x198/0x19c [ 169.318622][T15344] syzkaller0: entered promiscuous mode [ 169.318632][T15344] syzkaller0: entered allmulticast mode [ 169.338372][T15347] netlink: 'syz.2.3731': attribute type 29 has an invalid length. [ 169.366209][T15349] FAULT_INJECTION: forcing a failure. [ 169.366209][T15349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.366224][T15349] CPU: 1 UID: 0 PID: 15349 Comm: syz.2.3732 Not tainted syzkaller #0 PREEMPT [ 169.366234][T15349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 169.366246][T15349] Call trace: [ 169.366249][T15349] show_stack+0x2c/0x3c (C) [ 169.366271][T15349] __dump_stack+0x30/0x40 [ 169.366281][T15349] dump_stack_lvl+0xd8/0x12c [ 169.366291][T15349] dump_stack+0x1c/0x28 [ 169.366301][T15349] should_fail_ex+0x418/0x58c [ 169.366309][T15349] should_fail+0x14/0x24 [ 169.366316][T15349] should_fail_usercopy+0x20/0x30 [ 169.366323][T15349] _inline_copy_from_user+0x3c/0x174 [ 169.366332][T15349] copy_msghdr_from_user+0xb8/0x194 [ 169.366340][T15349] ___sys_sendmsg+0x14c/0x224 [ 169.366351][T15349] __sys_sendmsg+0x158/0x204 [ 169.366361][T15349] __arm64_sys_sendmsg+0x88/0x9c [ 169.366371][T15349] invoke_syscall+0x98/0x244 [ 169.366382][T15349] el0_svc_common+0xec/0x23c [ 169.366392][T15349] do_el0_svc+0x4c/0x5c [ 169.366401][T15349] el0_svc+0x60/0x1d8 [ 169.366410][T15349] el0t_64_sync_handler+0x44/0x104 [ 169.366418][T15349] el0t_64_sync+0x198/0x19c [ 169.389489][T15351] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 169.725783][T15374] net_ratelimit: 342 callbacks suppressed [ 169.869774][T15373] tipc: Enabled bearer , priority 0 [ 169.880130][T15373] syzkaller0: entered promiscuous mode [ 169.880142][T15373] syzkaller0: entered allmulticast mode [ 169.925501][T15373] tipc: Resetting bearer [ 169.931180][T15372] tipc: Resetting bearer ** 906 printk messages dropped ** [ 169.999483][T15372] tipc: Disabling bearer ** 781 printk messages dropped ** [ 170.023215][T15382] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 170.049872][T15385] tipc: Enabling of bearer rejected, failed to enable media [ 170.171619][T15395] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 170.214929][T15397] syzkaller0: entered promiscuous mode [ 170.214940][T15397] syzkaller0: entered allmulticast mode ** 790 printk messages dropped ** ** 120 printk messages dropped ** ** 845 printk messages dropped ** ** 1933 printk messages dropped ** [ 170.977012][T15420] netlink: 'syz.4.3753': attribute type 10 has an invalid length. [ 170.978797][T15420] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 171.251828][T15429] syzkaller0: entered promiscuous mode [ 171.251839][T15429] syzkaller0: entered allmulticast mode [ 171.450525][T15437] syzkaller0: entered promiscuous mode [ 171.450536][T15437] syzkaller0: entered allmulticast mode [ 171.759230][T15454] FAULT_INJECTION: forcing a failure. [ 171.759230][T15454] name failslab, interval 1, probability 0, space 0, times 0 [ 171.759245][T15454] CPU: 1 UID: 0 PID: 15454 Comm: syz.0.3764 Not tainted syzkaller #0 PREEMPT [ 171.759256][T15454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 171.759270][T15454] Call trace: [ 171.759273][T15454] show_stack+0x2c/0x3c (C) [ 171.759295][T15454] __dump_stack+0x30/0x40 [ 171.759308][T15454] dump_stack_lvl+0xd8/0x12c [ 171.759320][T15454] dump_stack+0x1c/0x28 [ 171.759332][T15454] should_fail_ex+0x418/0x58c [ 171.759341][T15454] should_failslab+0xc4/0x120 [ 171.759350][T15454] __kmalloc_cache_noprof+0x94/0x5fc [ 171.759360][T15454] sget_fc+0x630/0x1520 [ 171.759370][T15454] vfs_get_super+0x40/0x148 [ 171.759380][T15454] get_tree_nodev+0x2c/0x3c [ 171.759391][T15454] mqueue_get_tree+0xac/0xe8 [ 171.759400][T15454] vfs_get_tree+0x90/0x28c [ 171.759411][T15454] fc_mount+0x24/0xac [ 171.759422][T15454] fc_mount_longterm+0x20/0x74 [ 171.759433][T15454] mq_init_ns+0x3c8/0x638 [ 171.759441][T15454] copy_ipcs+0x3c8/0x63c [ 171.759449][T15454] create_new_namespaces+0x1a8/0x50c [ 171.759460][T15454] unshare_nsproxy_namespaces+0x120/0x170 [ 171.759472][T15454] ksys_unshare+0x438/0x6e0 [ 171.759482][T15454] __arm64_sys_unshare+0x40/0x54 [ 171.759492][T15454] invoke_syscall+0x98/0x244 [ 171.759505][T15454] el0_svc_common+0xec/0x23c [ 171.759517][T15454] do_el0_svc+0x4c/0x5c [ 171.759529][T15454] el0_svc+0x60/0x1d8 [ 171.759539][T15454] el0t_64_sync_handler+0x44/0x104 [ 171.759548][T15454] el0t_64_sync+0x198/0x19c [ 171.991698][T15458] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 172.060202][T15453] device-mapper: table: 248:9: raid: Invalid flags combination (-EINVAL) [ 172.060222][T15453] device-mapper: ioctl: error adding target to table [ 172.120863][T15460] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 172.121030][T15460] block device autoloading is deprecated and will be removed. [ 172.140873][T15466] FAULT_INJECTION: forcing a failure. [ 172.140873][T15466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.140896][T15466] CPU: 0 UID: 0 PID: 15466 Comm: syz.4.3771 Not tainted syzkaller #0 PREEMPT [ 172.140906][T15466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 172.140921][T15466] Call trace: [ 172.140924][T15466] show_stack+0x2c/0x3c (C) [ 172.140946][T15466] __dump_stack+0x30/0x40 [ 172.140957][T15466] dump_stack_lvl+0xd8/0x12c [ 172.140967][T15466] dump_stack+0x1c/0x28 [ 172.140977][T15466] should_fail_ex+0x418/0x58c [ 172.140987][T15466] should_fail+0x14/0x24 [ 172.140994][T15466] should_fail_usercopy+0x20/0x30 [ 172.141001][T15466] _inline_copy_from_user+0x3c/0x174 [ 172.141010][T15466] copy_msghdr_from_user+0xb8/0x194 [ 172.141018][T15466] ___sys_sendmsg+0x14c/0x224 [ 172.141029][T15466] __sys_sendmsg+0x158/0x204 [ 172.141039][T15466] __arm64_sys_sendmsg+0x88/0x9c [ 172.141049][T15466] invoke_syscall+0x98/0x244 [ 172.141060][T15466] el0_svc_common+0xec/0x23c [ 172.141070][T15466] do_el0_svc+0x4c/0x5c [ 172.141080][T15466] el0_svc+0x60/0x1d8 [ 172.141089][T15466] el0t_64_sync_handler+0x44/0x104 [ 172.141097][T15466] el0t_64_sync+0x198/0x19c [ 172.248363][T15473] tipc: Enabled bearer , priority 0 [ 172.248651][T15473] syzkaller0: entered promiscuous mode [ 172.248661][T15473] syzkaller0: entered allmulticast mode [ 172.266503][T15473] tipc: Resetting bearer [ 172.269876][T15472] tipc: Resetting bearer [ 172.279290][T15472] tipc: Disabling bearer [ 172.388423][T15474] __nla_validate_parse: 70 callbacks suppressed [ 172.388449][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3772'. [ 172.517361][T15474] macvlan2: entered allmulticast mode [ 172.517407][T15474] hsr0: entered allmulticast mode [ 172.517414][T15474] hsr_slave_0: entered allmulticast mode [ 172.517425][T15474] hsr_slave_1: entered allmulticast mode [ 172.517444][T15474] hsr0: entered promiscuous mode [ 172.843766][T15486] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 173.279701][T15500] FAULT_INJECTION: forcing a failure. [ 173.279701][T15500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.279722][T15500] CPU: 1 UID: 0 PID: 15500 Comm: syz.1.3784 Not tainted syzkaller #0 PREEMPT [ 173.279735][T15500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 173.279750][T15500] Call trace: [ 173.279753][T15500] show_stack+0x2c/0x3c (C) [ 173.279774][T15500] __dump_stack+0x30/0x40 [ 173.279790][T15500] dump_stack_lvl+0xd8/0x12c [ 173.279801][T15500] dump_stack+0x1c/0x28 [ 173.279811][T15500] should_fail_ex+0x418/0x58c [ 173.279820][T15500] should_fail+0x14/0x24 [ 173.279828][T15500] should_fail_usercopy+0x20/0x30 [ 173.279835][T15500] _inline_copy_from_user+0x3c/0x174 [ 173.279845][T15500] copy_msghdr_from_user+0xb8/0x194 [ 173.279853][T15500] ___sys_sendmsg+0x14c/0x224 [ 173.279864][T15500] __sys_sendmsg+0x158/0x204 [ 173.279874][T15500] __arm64_sys_sendmsg+0x88/0x9c [ 173.279885][T15500] invoke_syscall+0x98/0x244 [ 173.279895][T15500] el0_svc_common+0xec/0x23c [ 173.279906][T15500] do_el0_svc+0x4c/0x5c [ 173.279915][T15500] el0_svc+0x60/0x1d8 [ 173.279924][T15500] el0t_64_sync_handler+0x44/0x104 [ 173.279932][T15500] el0t_64_sync+0x198/0x19c [ 173.286532][T15494] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3782'. [ 173.355517][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3788'. [ 173.360616][T15510] xfrm1: entered promiscuous mode [ 173.360625][T15510] xfrm1: entered allmulticast mode [ 173.360803][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3788'. [ 173.369916][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3788'. [ 173.370066][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3788'. [ 173.370203][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3788'. [ 173.370339][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3788'. [ 173.370458][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3788'. [ 173.370583][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3788'. [ 173.373483][T15509] tipc: Enabled bearer , priority 0 [ 173.375174][T15509] syzkaller0: entered promiscuous mode [ 173.375187][T15509] syzkaller0: entered allmulticast mode [ 173.390409][T15509] tipc: Resetting bearer [ 173.405485][T15506] tipc: Resetting bearer [ 173.422328][T15506] tipc: Disabling bearer [ 173.460962][T15516] FAULT_INJECTION: forcing a failure. [ 173.460962][T15516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.460983][T15516] CPU: 0 UID: 0 PID: 15516 Comm: syz.0.3790 Not tainted syzkaller #0 PREEMPT [ 173.460993][T15516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 173.461006][T15516] Call trace: [ 173.461009][T15516] show_stack+0x2c/0x3c (C) [ 173.461027][T15516] __dump_stack+0x30/0x40 [ 173.461039][T15516] dump_stack_lvl+0xd8/0x12c [ 173.461049][T15516] dump_stack+0x1c/0x28 [ 173.461059][T15516] should_fail_ex+0x418/0x58c [ 173.461067][T15516] should_fail+0x14/0x24 [ 173.461074][T15516] should_fail_usercopy+0x20/0x30 [ 173.461082][T15516] _inline_copy_from_user+0x3c/0x174 [ 173.461091][T15516] copy_msghdr_from_user+0xb8/0x194 [ 173.461098][T15516] ___sys_sendmsg+0x14c/0x224 [ 173.461109][T15516] __sys_sendmsg+0x158/0x204 [ 173.461119][T15516] __arm64_sys_sendmsg+0x88/0x9c [ 173.461129][T15516] invoke_syscall+0x98/0x244 [ 173.461140][T15516] el0_svc_common+0xec/0x23c [ 173.461150][T15516] do_el0_svc+0x4c/0x5c [ 173.461160][T15516] el0_svc+0x60/0x1d8 [ 173.461168][T15516] el0t_64_sync_handler+0x44/0x104 [ 173.461176][T15516] el0t_64_sync+0x198/0x19c [ 173.764727][T15550] tipc: Enabled bearer , priority 0 [ 173.765061][T15550] syzkaller0: entered promiscuous mode [ 173.765072][T15550] syzkaller0: entered allmulticast mode [ 173.784233][T15550] tipc: Resetting bearer [ 173.787009][T15549] tipc: Resetting bearer [ 173.799442][T15549] tipc: Disabling bearer [ 173.818464][T15554] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.243738][T15565] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 174.244262][T15565] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 174.291071][T15570] FAULT_INJECTION: forcing a failure. [ 174.291071][T15570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.291091][T15570] CPU: 1 UID: 0 PID: 15570 Comm: syz.1.3812 Not tainted syzkaller #0 PREEMPT [ 174.291101][T15570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 174.291114][T15570] Call trace: [ 174.291117][T15570] show_stack+0x2c/0x3c (C) [ 174.291135][T15570] __dump_stack+0x30/0x40 [ 174.291145][T15570] dump_stack_lvl+0xd8/0x12c [ 174.291155][T15570] dump_stack+0x1c/0x28 [ 174.291165][T15570] should_fail_ex+0x418/0x58c [ 174.291173][T15570] should_fail+0x14/0x24 [ 174.291180][T15570] should_fail_usercopy+0x20/0x30 [ 174.291188][T15570] _inline_copy_from_user+0x3c/0x174 [ 174.291196][T15570] copy_msghdr_from_user+0xb8/0x194 [ 174.291207][T15570] ___sys_sendmsg+0x14c/0x224 [ 174.291218][T15570] __sys_sendmsg+0x158/0x204 [ 174.291229][T15570] __arm64_sys_sendmsg+0x88/0x9c [ 174.291240][T15570] invoke_syscall+0x98/0x244 [ 174.291251][T15570] el0_svc_common+0xec/0x23c [ 174.291261][T15570] do_el0_svc+0x4c/0x5c [ 174.291271][T15570] el0_svc+0x60/0x1d8 [ 174.291280][T15570] el0t_64_sync_handler+0x44/0x104 [ 174.291288][T15570] el0t_64_sync+0x198/0x19c [ 174.314000][T15572] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.371765][T15579] syzkaller0: entered promiscuous mode [ 174.371782][T15579] syzkaller0: entered allmulticast mode [ 174.720147][T15596] ubi: mtd0 is already attached to ubi0 [ 174.738352][T15598] FAULT_INJECTION: forcing a failure. [ 174.738352][T15598] name failslab, interval 1, probability 0, space 0, times 0 [ 174.738371][T15598] CPU: 1 UID: 0 PID: 15598 Comm: syz.0.3822 Not tainted syzkaller #0 PREEMPT [ 174.738382][T15598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 174.738395][T15598] Call trace: [ 174.738398][T15598] show_stack+0x2c/0x3c (C) [ 174.738416][T15598] __dump_stack+0x30/0x40 [ 174.738427][T15598] dump_stack_lvl+0xd8/0x12c [ 174.738437][T15598] dump_stack+0x1c/0x28 [ 174.738447][T15598] should_fail_ex+0x418/0x58c [ 174.738456][T15598] should_failslab+0xc4/0x120 [ 174.738464][T15598] __kmalloc_noprof+0x108/0x6c8 [ 174.738472][T15598] tomoyo_realpath_from_path+0xbc/0x4dc [ 174.738484][T15598] tomoyo_path_number_perm+0x1f0/0x500 [ 174.738493][T15598] tomoyo_file_ioctl+0x2c/0x3c [ 174.738504][T15598] security_file_ioctl+0xdc/0x2b0 [ 174.738513][T15598] __arm64_sys_ioctl+0xb0/0x1cc [ 174.738521][T15598] invoke_syscall+0x98/0x244 [ 174.738532][T15598] el0_svc_common+0xec/0x23c [ 174.738541][T15598] do_el0_svc+0x4c/0x5c [ 174.738551][T15598] el0_svc+0x60/0x1d8 [ 174.738560][T15598] el0t_64_sync_handler+0x44/0x104 [ 174.738568][T15598] el0t_64_sync+0x198/0x19c [ 174.738577][T15598] ERROR: Out of memory at tomoyo_realpath_from_path. [ 174.738595][T15598] ubi: mtd0 is already attached to ubi0 [ 174.797624][T15604] ubi: mtd0 is already attached to ubi0 [ 174.818509][ T4400] net_ratelimit: 365 callbacks suppressed [ 175.472212][T15633] syzkaller0: entered promiscuous mode [ 175.472221][T15633] syzkaller0: entered allmulticast mode [ 175.827276][T15645] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 175.827796][T15645] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 175.884940][T15653] FAULT_INJECTION: forcing a failure. [ 175.884940][T15653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.884957][T15653] CPU: 1 UID: 0 PID: 15653 Comm: syz.2.3839 Not tainted syzkaller #0 PREEMPT [ 175.884968][T15653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 175.884980][T15653] Call trace: [ 175.884983][T15653] show_stack+0x2c/0x3c (C) [ 175.885002][T15653] __dump_stack+0x30/0x40 [ 175.885014][T15653] dump_stack_lvl+0xd8/0x12c [ 175.885024][T15653] dump_stack+0x1c/0x28 [ 175.885033][T15653] should_fail_ex+0x418/0x58c [ 175.885042][T15653] should_fail+0x14/0x24 [ 175.885048][T15653] should_fail_usercopy+0x20/0x30 [ 175.885056][T15653] _inline_copy_from_user+0x3c/0x174 [ 175.885065][T15653] copy_msghdr_from_user+0xb8/0x194 [ 175.885073][T15653] ___sys_sendmsg+0x14c/0x224 [ 175.885084][T15653] __sys_sendmsg+0x158/0x204 [ 175.885094][T15653] __arm64_sys_sendmsg+0x88/0x9c [ 175.885104][T15653] invoke_syscall+0x98/0x244 [ 175.885115][T15653] el0_svc_common+0xec/0x23c [ 175.885125][T15653] do_el0_svc+0x4c/0x5c [ 175.885135][T15653] el0_svc+0x60/0x1d8 [ 175.885143][T15653] el0t_64_sync_handler+0x44/0x104 [ 175.885155][T15653] el0t_64_sync+0x198/0x19c [ 177.314826][T15572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 177.419879][T15672] syzkaller0: entered promiscuous mode [ 177.419891][T15672] syzkaller0: entered allmulticast mode [ 177.445163][T15678] syzkaller0: entered promiscuous mode [ 177.445171][T15678] syzkaller0: entered allmulticast mode [ 177.446450][T15678] FAULT_INJECTION: forcing a failure. [ 177.446450][T15678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.446464][T15678] CPU: 0 UID: 0 PID: 15678 Comm: syz.2.3848 Not tainted syzkaller #0 PREEMPT [ 177.446473][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 177.446486][T15678] Call trace: [ 177.446489][T15678] show_stack+0x2c/0x3c (C) [ 177.446505][T15678] __dump_stack+0x30/0x40 [ 177.446517][T15678] dump_stack_lvl+0xd8/0x12c [ 177.446527][T15678] dump_stack+0x1c/0x28 [ 177.446537][T15678] should_fail_ex+0x418/0x58c [ 177.446545][T15678] should_fail+0x14/0x24 [ 177.446552][T15678] should_fail_usercopy+0x20/0x30 [ 177.446560][T15678] _inline_copy_from_user+0x3c/0x174 [ 177.446569][T15678] move_addr_to_kernel+0x88/0x168 [ 177.446580][T15678] __sys_sendto+0x1b0/0x328 [ 177.446590][T15678] __arm64_sys_sendto+0xec/0x10c [ 177.446600][T15678] invoke_syscall+0x98/0x244 [ 177.446611][T15678] el0_svc_common+0xec/0x23c [ 177.446621][T15678] do_el0_svc+0x4c/0x5c [ 177.446631][T15678] el0_svc+0x60/0x1d8 [ 177.446639][T15678] el0t_64_sync_handler+0x44/0x104 [ 177.446647][T15678] el0t_64_sync+0x198/0x19c [ 177.716001][T15683] __nla_validate_parse: 63 callbacks suppressed [ 177.716014][T15683] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3849'. [ 177.716260][T15683] syzkaller0: entered promiscuous mode [ 177.716271][T15683] syzkaller0: entered allmulticast mode [ 177.768358][T15688] FAULT_INJECTION: forcing a failure. [ 177.768358][T15688] name failslab, interval 1, probability 0, space 0, times 0 [ 177.768377][T15688] CPU: 1 UID: 0 PID: 15688 Comm: syz.2.3851 Not tainted syzkaller #0 PREEMPT [ 177.768389][T15688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 177.768402][T15688] Call trace: [ 177.768405][T15688] show_stack+0x2c/0x3c (C) [ 177.768425][T15688] __dump_stack+0x30/0x40 [ 177.768436][T15688] dump_stack_lvl+0xd8/0x12c [ 177.768446][T15688] dump_stack+0x1c/0x28 [ 177.768455][T15688] should_fail_ex+0x418/0x58c [ 177.768464][T15688] should_failslab+0xc4/0x120 [ 177.768472][T15688] kmem_cache_alloc_node_noprof+0x98/0x604 [ 177.768481][T15688] __alloc_skb+0x1f0/0x610 [ 177.768492][T15688] alloc_skb_with_frags+0xb8/0x690 [ 177.768500][T15688] sock_alloc_send_pskb+0x740/0x850 [ 177.768510][T15688] tun_get_user+0x6e0/0x37fc [ 177.768520][T15688] tun_chr_write_iter+0xfc/0x168 [ 177.768529][T15688] vfs_write+0x51c/0xa0c [ 177.768537][T15688] ksys_write+0x12c/0x228 [ 177.768544][T15688] __arm64_sys_write+0x84/0x98 [ 177.768551][T15688] invoke_syscall+0x98/0x244 [ 177.768561][T15688] el0_svc_common+0xec/0x23c [ 177.768571][T15688] do_el0_svc+0x4c/0x5c [ 177.768581][T15688] el0_svc+0x60/0x1d8 [ 177.768590][T15688] el0t_64_sync_handler+0x44/0x104 [ 177.768597][T15688] el0t_64_sync+0x198/0x19c [ 177.863756][T15690] Bluetooth: MGMT ver 1.23 [ 177.864134][T15695] tipc: Enabling of bearer rejected, failed to enable media [ 177.866055][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3852'. [ 177.866067][T15690] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3852'. [ 178.047671][T15715] syzkaller0: entered promiscuous mode [ 178.047682][T15715] syzkaller0: entered allmulticast mode [ 178.058503][T15717] FAULT_INJECTION: forcing a failure. [ 178.058503][T15717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.058525][T15717] CPU: 1 UID: 0 PID: 15717 Comm: syz.3.3861 Not tainted syzkaller #0 PREEMPT [ 178.058536][T15717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 178.058550][T15717] Call trace: [ 178.058554][T15717] show_stack+0x2c/0x3c (C) [ 178.058574][T15717] __dump_stack+0x30/0x40 [ 178.058585][T15717] dump_stack_lvl+0xd8/0x12c [ 178.058596][T15717] dump_stack+0x1c/0x28 [ 178.058609][T15717] should_fail_ex+0x418/0x58c [ 178.058617][T15717] should_fail+0x14/0x24 [ 178.058624][T15717] should_fail_usercopy+0x20/0x30 [ 178.058632][T15717] _inline_copy_from_user+0x3c/0x174 [ 178.058642][T15717] copy_msghdr_from_user+0xb8/0x194 [ 178.058650][T15717] ___sys_recvmsg+0x11c/0x1f4 [ 178.058657][T15717] do_recvmmsg+0x288/0x7d4 [ 178.058664][T15717] __sys_recvmmsg+0x1e0/0x270 [ 178.058671][T15717] __arm64_sys_recvmmsg+0xe0/0x108 [ 178.058678][T15717] invoke_syscall+0x98/0x244 [ 178.058689][T15717] el0_svc_common+0xec/0x23c [ 178.058699][T15717] do_el0_svc+0x4c/0x5c [ 178.058708][T15717] el0_svc+0x60/0x1d8 [ 178.058718][T15717] el0t_64_sync_handler+0x44/0x104 [ 178.058726][T15717] el0t_64_sync+0x198/0x19c [ 178.170602][T15728] FAULT_INJECTION: forcing a failure. [ 178.170602][T15728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.170623][T15728] CPU: 0 UID: 0 PID: 15728 Comm: syz.4.3865 Not tainted syzkaller #0 PREEMPT [ 178.170633][T15728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 178.170646][T15728] Call trace: [ 178.170649][T15728] show_stack+0x2c/0x3c (C) [ 178.170667][T15728] __dump_stack+0x30/0x40 [ 178.170681][T15728] dump_stack_lvl+0xd8/0x12c [ 178.170692][T15728] dump_stack+0x1c/0x28 [ 178.170702][T15728] should_fail_ex+0x418/0x58c [ 178.170711][T15728] should_fail+0x14/0x24 [ 178.170718][T15728] should_fail_usercopy+0x20/0x30 [ 178.170725][T15728] _inline_copy_from_user+0x3c/0x174 [ 178.170734][T15728] copy_msghdr_from_user+0xb8/0x194 [ 178.170742][T15728] ___sys_recvmsg+0x11c/0x1f4 [ 178.170749][T15728] do_recvmmsg+0x288/0x7d4 [ 178.170756][T15728] __sys_recvmmsg+0x1e0/0x270 [ 178.170763][T15728] __arm64_sys_recvmmsg+0xe0/0x108 [ 178.170770][T15728] invoke_syscall+0x98/0x244 [ 178.170786][T15728] el0_svc_common+0xec/0x23c [ 178.170796][T15728] do_el0_svc+0x4c/0x5c [ 178.170806][T15728] el0_svc+0x60/0x1d8 [ 178.170815][T15728] el0t_64_sync_handler+0x44/0x104 [ 178.170823][T15728] el0t_64_sync+0x198/0x19c [ 178.472108][T15741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3867'. [ 178.495924][T15741] macvlan2: entered allmulticast mode [ 178.495942][T15741] hsr0: entered allmulticast mode [ 178.495970][T15741] hsr_slave_0: entered allmulticast mode [ 178.496012][T15741] hsr_slave_1: entered allmulticast mode [ 178.496079][T15741] hsr0: entered promiscuous mode [ 178.643077][T15748] syz_tun: entered allmulticast mode [ 178.643782][T15748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3873'. [ 178.644524][T15747] syz_tun: left allmulticast mode [ 178.690576][T15752] syzkaller0: entered promiscuous mode [ 178.690589][T15752] syzkaller0: entered allmulticast mode [ 178.768415][T15757] FAULT_INJECTION: forcing a failure. [ 178.768415][T15757] name failslab, interval 1, probability 0, space 0, times 0 [ 178.768429][T15757] CPU: 1 UID: 0 PID: 15757 Comm: syz.4.3877 Not tainted syzkaller #0 PREEMPT [ 178.768439][T15757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 178.768451][T15757] Call trace: [ 178.768454][T15757] show_stack+0x2c/0x3c (C) [ 178.768472][T15757] __dump_stack+0x30/0x40 [ 178.768483][T15757] dump_stack_lvl+0xd8/0x12c [ 178.768493][T15757] dump_stack+0x1c/0x28 [ 178.768502][T15757] should_fail_ex+0x418/0x58c [ 178.768511][T15757] should_failslab+0xc4/0x120 [ 178.768518][T15757] __kmalloc_noprof+0x108/0x6c8 [ 178.768527][T15757] tomoyo_realpath_from_path+0xbc/0x4dc [ 178.768538][T15757] tomoyo_path_number_perm+0x1f0/0x500 [ 178.768548][T15757] tomoyo_file_ioctl+0x2c/0x3c [ 178.768558][T15757] security_file_ioctl+0xdc/0x2b0 [ 178.768567][T15757] __arm64_sys_ioctl+0xb0/0x1cc [ 178.768575][T15757] invoke_syscall+0x98/0x244 [ 178.768586][T15757] el0_svc_common+0xec/0x23c [ 178.768595][T15757] do_el0_svc+0x4c/0x5c [ 178.768605][T15757] el0_svc+0x60/0x1d8 [ 178.768614][T15757] el0t_64_sync_handler+0x44/0x104 [ 178.768622][T15757] el0t_64_sync+0x198/0x19c [ 178.768631][T15757] ERROR: Out of memory at tomoyo_realpath_from_path. [ 178.811141][T15761] netlink: 'syz.0.3879': attribute type 21 has an invalid length. [ 178.837519][T15763] FAULT_INJECTION: forcing a failure. [ 178.837519][T15763] name failslab, interval 1, probability 0, space 0, times 0 [ 178.837539][T15763] CPU: 1 UID: 0 PID: 15763 Comm: syz.4.3880 Not tainted syzkaller #0 PREEMPT [ 178.837553][T15763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 178.837569][T15763] Call trace: [ 178.837572][T15763] show_stack+0x2c/0x3c (C) [ 178.837591][T15763] __dump_stack+0x30/0x40 [ 178.837605][T15763] dump_stack_lvl+0xd8/0x12c [ 178.837619][T15763] dump_stack+0x1c/0x28 [ 178.837631][T15763] should_fail_ex+0x418/0x58c [ 178.837642][T15763] should_failslab+0xc4/0x120 [ 178.837653][T15763] kmem_cache_alloc_noprof+0x94/0x5d4 [ 178.837664][T15763] locks_alloc_lock+0x28/0x12c [ 178.837677][T15763] flock_lock_inode+0x1a0/0xa0c [ 178.837687][T15763] locks_lock_inode_wait+0xfc/0x400 [ 178.837700][T15763] __arm64_sys_flock+0x32c/0x470 [ 178.837712][T15763] invoke_syscall+0x98/0x244 [ 178.837726][T15763] el0_svc_common+0xec/0x23c [ 178.837739][T15763] do_el0_svc+0x4c/0x5c [ 178.837752][T15763] el0_svc+0x60/0x1d8 [ 178.837763][T15763] el0t_64_sync_handler+0x44/0x104 [ 178.837774][T15763] el0t_64_sync+0x198/0x19c [ 178.859809][T15766] 9p: Bad value for 'rfdno' [ 178.898694][T15769] FAULT_INJECTION: forcing a failure. [ 178.898694][T15769] name failslab, interval 1, probability 0, space 0, times 0 [ 178.898711][T15769] CPU: 0 UID: 0 PID: 15769 Comm: syz.4.3882 Not tainted syzkaller #0 PREEMPT [ 178.898722][T15769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 178.898736][T15769] Call trace: [ 178.898739][T15769] show_stack+0x2c/0x3c (C) [ 178.898760][T15769] __dump_stack+0x30/0x40 [ 178.898787][T15769] dump_stack_lvl+0xd8/0x12c [ 178.898805][T15769] dump_stack+0x1c/0x28 [ 178.898817][T15769] should_fail_ex+0x418/0x58c [ 178.898826][T15769] should_failslab+0xc4/0x120 [ 178.898835][T15769] __kmalloc_cache_noprof+0x94/0x5fc [ 178.898845][T15769] do_eventfd+0x88/0x280 [ 178.898855][T15769] __arm64_sys_eventfd2+0x64/0x7c [ 178.898865][T15769] invoke_syscall+0x98/0x244 [ 178.898877][T15769] el0_svc_common+0xec/0x23c [ 178.898889][T15769] do_el0_svc+0x4c/0x5c [ 178.898902][T15769] el0_svc+0x60/0x1d8 [ 178.898912][T15769] el0t_64_sync_handler+0x44/0x104 [ 178.898921][T15769] el0t_64_sync+0x198/0x19c [ 179.018576][T15779] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3887'. [ 179.112665][T15785] tipc: Enabled bearer , priority 0 [ 179.113051][T15785] syzkaller0: entered promiscuous mode [ 179.113062][T15785] syzkaller0: entered allmulticast mode [ 179.120595][T15785] tipc: Resetting bearer [ 179.129706][T15784] tipc: Resetting bearer [ 179.139240][T15784] tipc: Disabling bearer [ 179.155979][T15789] FAULT_INJECTION: forcing a failure. [ 179.155979][T15789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.155998][T15789] CPU: 0 UID: 0 PID: 15789 Comm: syz.3.3891 Not tainted syzkaller #0 PREEMPT [ 179.156008][T15789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 179.156021][T15789] Call trace: [ 179.156024][T15789] show_stack+0x2c/0x3c (C) [ 179.156042][T15789] __dump_stack+0x30/0x40 [ 179.156053][T15789] dump_stack_lvl+0xd8/0x12c [ 179.156063][T15789] dump_stack+0x1c/0x28 [ 179.156073][T15789] should_fail_ex+0x418/0x58c [ 179.156081][T15789] should_fail+0x14/0x24 [ 179.156088][T15789] should_fail_usercopy+0x20/0x30 [ 179.156095][T15789] _inline_copy_from_user+0x3c/0x174 [ 179.156105][T15789] copy_msghdr_from_user+0xb8/0x194 [ 179.156112][T15789] ___sys_sendmsg+0x14c/0x224 [ 179.156123][T15789] __sys_sendmmsg+0x204/0x580 [ 179.156133][T15789] __arm64_sys_sendmmsg+0xac/0xc8 [ 179.156143][T15789] invoke_syscall+0x98/0x244 [ 179.156154][T15789] el0_svc_common+0xec/0x23c [ 179.156164][T15789] do_el0_svc+0x4c/0x5c [ 179.156173][T15789] el0_svc+0x60/0x1d8 [ 179.156182][T15789] el0t_64_sync_handler+0x44/0x104 [ 179.156190][T15789] el0t_64_sync+0x198/0x19c [ 179.213677][T15795] FAULT_INJECTION: forcing a failure. [ 179.213677][T15795] name failslab, interval 1, probability 0, space 0, times 0 [ 179.213693][T15795] CPU: 1 UID: 0 PID: 15795 Comm: syz.1.3894 Not tainted syzkaller #0 PREEMPT [ 179.213703][T15795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 179.213715][T15795] Call trace: [ 179.213718][T15795] show_stack+0x2c/0x3c (C) [ 179.213734][T15795] __dump_stack+0x30/0x40 [ 179.213745][T15795] dump_stack_lvl+0xd8/0x12c [ 179.213755][T15795] dump_stack+0x1c/0x28 [ 179.213765][T15795] should_fail_ex+0x418/0x58c [ 179.213773][T15795] should_failslab+0xc4/0x120 [ 179.213781][T15795] __kmalloc_noprof+0x108/0x6c8 [ 179.213794][T15795] tomoyo_realpath_from_path+0xbc/0x4dc [ 179.213806][T15795] tomoyo_path_number_perm+0x1f0/0x500 [ 179.213815][T15795] tomoyo_file_ioctl+0x2c/0x3c [ 179.213826][T15795] security_file_ioctl+0xdc/0x2b0 [ 179.213835][T15795] __arm64_sys_ioctl+0xb0/0x1cc [ 179.213843][T15795] invoke_syscall+0x98/0x244 [ 179.213854][T15795] el0_svc_common+0xec/0x23c [ 179.213864][T15795] do_el0_svc+0x4c/0x5c [ 179.213873][T15795] el0_svc+0x60/0x1d8 [ 179.213882][T15795] el0t_64_sync_handler+0x44/0x104 [ 179.213890][T15795] el0t_64_sync+0x198/0x19c [ 179.213899][T15795] ERROR: Out of memory at tomoyo_realpath_from_path. [ 179.226682][T15793] syzkaller0: entered promiscuous mode [ 179.226693][T15793] syzkaller0: entered allmulticast mode [ 179.383459][T15803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3898'. [ 179.383468][T15803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3898'. [ 179.525761][T15817] FAULT_INJECTION: forcing a failure. [ 179.525761][T15817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.525786][T15817] CPU: 0 UID: 0 PID: 15817 Comm: syz.3.3902 Not tainted syzkaller #0 PREEMPT [ 179.525800][T15817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 179.525815][T15817] Call trace: [ 179.525819][T15817] show_stack+0x2c/0x3c (C) [ 179.525840][T15817] __dump_stack+0x30/0x40 [ 179.525853][T15817] dump_stack_lvl+0xd8/0x12c [ 179.525863][T15817] dump_stack+0x1c/0x28 [ 179.525873][T15817] should_fail_ex+0x418/0x58c [ 179.525882][T15817] should_fail+0x14/0x24 [ 179.525889][T15817] should_fail_usercopy+0x20/0x30 [ 179.525896][T15817] _inline_copy_from_user+0x3c/0x174 [ 179.525906][T15817] copy_msghdr_from_user+0xb8/0x194 [ 179.525914][T15817] ___sys_sendmsg+0x14c/0x224 [ 179.525926][T15817] __sys_sendmsg+0x158/0x204 [ 179.525936][T15817] __arm64_sys_sendmsg+0x88/0x9c [ 179.525947][T15817] invoke_syscall+0x98/0x244 [ 179.525958][T15817] el0_svc_common+0xec/0x23c [ 179.525968][T15817] do_el0_svc+0x4c/0x5c [ 179.525978][T15817] el0_svc+0x60/0x1d8 [ 179.525987][T15817] el0t_64_sync_handler+0x44/0x104 [ 179.525995][T15817] el0t_64_sync+0x198/0x19c [ 179.830313][T15828] net_ratelimit: 287 callbacks suppressed [ 179.830323][T15828] TC_ACT_REPEAT abuse ? [ 179.863474][ T865] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 179.869390][ T865] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 179.873036][T15834] udevd[15834]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 179.941002][T15842] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3909'. [ 179.965536][T15840] syzkaller0: entered promiscuous mode [ 179.965547][T15840] syzkaller0: entered allmulticast mode [ 180.019849][T15851] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 180.041528][T15853] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 180.136869][T15862] syzkaller0: entered promiscuous mode [ 180.136888][T15862] syzkaller0: entered allmulticast mode [ 180.137893][T15864] macsec0: entered promiscuous mode [ 180.138847][T15864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3919'. [ 180.149913][T15860] TC_ACT_REPEAT abuse ? [ 180.150841][T15864] veth1_macvtap: left promiscuous mode [ 180.155664][T15864] macsec0 (unregistering): left promiscuous mode [ 180.625329][ T4722] Bluetooth: Wrong link type (-71) [ 180.625467][ T4722] Bluetooth: hci5: link tx timeout [ 180.625472][ T4722] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 180.944879][T15875] tipc: Enabled bearer , priority 0 [ 180.954468][T15886] tipc: Resetting bearer [ 180.975758][T15896] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 180.982666][T15865] tipc: Disabling bearer [ 180.994913][T15899] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 180.995439][T15899] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 181.026806][T15903] FAULT_INJECTION: forcing a failure. [ 181.026806][T15903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.026830][T15903] CPU: 1 UID: 0 PID: 15903 Comm: syz.0.3927 Not tainted syzkaller #0 PREEMPT [ 181.026842][T15903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 181.026859][T15903] Call trace: [ 181.026862][T15903] show_stack+0x2c/0x3c (C) [ 181.026881][T15903] __dump_stack+0x30/0x40 [ 181.026892][T15903] dump_stack_lvl+0xd8/0x12c [ 181.026902][T15903] dump_stack+0x1c/0x28 [ 181.026911][T15903] should_fail_ex+0x418/0x58c [ 181.026921][T15903] should_fail+0x14/0x24 [ 181.026927][T15903] should_fail_usercopy+0x20/0x30 [ 181.026935][T15903] _inline_copy_from_user+0x3c/0x174 [ 181.026944][T15903] copy_msghdr_from_user+0xb8/0x194 [ 181.026951][T15903] ___sys_sendmsg+0x14c/0x224 [ 181.026962][T15903] __sys_sendmsg+0x158/0x204 [ 181.026972][T15903] __arm64_sys_sendmsg+0x88/0x9c [ 181.026982][T15903] invoke_syscall+0x98/0x244 [ 181.026993][T15903] el0_svc_common+0xec/0x23c [ 181.027003][T15903] do_el0_svc+0x4c/0x5c [ 181.027012][T15903] el0_svc+0x60/0x1d8 [ 181.027021][T15903] el0t_64_sync_handler+0x44/0x104 [ 181.027029][T15903] el0t_64_sync+0x198/0x19c [ 181.169626][T15923] syz_tun: tun_net_xmit 6 [ 181.204170][T15927] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 181.279941][T15934] FAULT_INJECTION: forcing a failure. [ 181.279941][T15934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.279962][T15934] CPU: 1 UID: 0 PID: 15934 Comm: syz.2.3941 Not tainted syzkaller #0 PREEMPT [ 181.279973][T15934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 181.279987][T15934] Call trace: [ 181.279990][T15934] show_stack+0x2c/0x3c (C) [ 181.280008][T15934] __dump_stack+0x30/0x40 [ 181.280018][T15934] dump_stack_lvl+0xd8/0x12c [ 181.280028][T15934] dump_stack+0x1c/0x28 [ 181.280038][T15934] should_fail_ex+0x418/0x58c [ 181.280047][T15934] should_fail+0x14/0x24 [ 181.280054][T15934] should_fail_usercopy+0x20/0x30 [ 181.280061][T15934] _inline_copy_from_user+0x3c/0x174 [ 181.280070][T15934] copy_msghdr_from_user+0xb8/0x194 [ 181.280077][T15934] ___sys_sendmsg+0x14c/0x224 [ 181.280088][T15934] __sys_sendmsg+0x158/0x204 [ 181.280098][T15934] __arm64_sys_sendmsg+0x88/0x9c [ 181.280108][T15934] invoke_syscall+0x98/0x244 [ 181.280119][T15934] el0_svc_common+0xec/0x23c [ 181.280129][T15934] do_el0_svc+0x4c/0x5c [ 181.280138][T15934] el0_svc+0x60/0x1d8 [ 181.280148][T15934] el0t_64_sync_handler+0x44/0x104 [ 181.280155][T15934] el0t_64_sync+0x198/0x19c [ 181.417764][T15955] tmpfs: Bad value for 'nr_inodes' [ 181.425134][T15957] FAULT_INJECTION: forcing a failure. [ 181.425134][T15957] name failslab, interval 1, probability 0, space 0, times 0 [ 181.425152][T15957] CPU: 0 UID: 0 PID: 15957 Comm: syz.2.3951 Not tainted syzkaller #0 PREEMPT [ 181.425162][T15957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 181.425176][T15957] Call trace: [ 181.425179][T15957] show_stack+0x2c/0x3c (C) [ 181.425199][T15957] __dump_stack+0x30/0x40 [ 181.425210][T15957] dump_stack_lvl+0xd8/0x12c [ 181.425219][T15957] dump_stack+0x1c/0x28 [ 181.425229][T15957] should_fail_ex+0x418/0x58c [ 181.425238][T15957] should_failslab+0xc4/0x120 [ 181.425246][T15957] __kvmalloc_node_noprof+0x160/0x7fc [ 181.425255][T15957] seq_read_iter+0x1d0/0xbe8 [ 181.425263][T15957] kernfs_fop_read_iter+0x13c/0x414 [ 181.425274][T15957] do_iter_readv_writev+0x48c/0x6f8 [ 181.425282][T15957] vfs_readv+0x21c/0x520 [ 181.425290][T15957] do_readv+0x134/0x2a8 [ 181.425297][T15957] __arm64_sys_readv+0x88/0x9c [ 181.425305][T15957] invoke_syscall+0x98/0x244 [ 181.425316][T15957] el0_svc_common+0xec/0x23c [ 181.425326][T15957] do_el0_svc+0x4c/0x5c [ 181.425335][T15957] el0_svc+0x60/0x1d8 [ 181.425344][T15957] el0t_64_sync_handler+0x44/0x104 [ 181.425352][T15957] el0t_64_sync+0x198/0x19c [ 181.605748][T15973] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 181.606292][T15973] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 181.642793][T15976] FAULT_INJECTION: forcing a failure. [ 181.642793][T15976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.642813][T15976] CPU: 1 UID: 0 PID: 15976 Comm: syz.4.3960 Not tainted syzkaller #0 PREEMPT [ 181.642825][T15976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 181.642840][T15976] Call trace: [ 181.642843][T15976] show_stack+0x2c/0x3c (C) [ 181.642864][T15976] __dump_stack+0x30/0x40 [ 181.642875][T15976] dump_stack_lvl+0xd8/0x12c [ 181.642885][T15976] dump_stack+0x1c/0x28 [ 181.642894][T15976] should_fail_ex+0x418/0x58c [ 181.642903][T15976] should_fail+0x14/0x24 [ 181.642910][T15976] should_fail_usercopy+0x20/0x30 [ 181.642918][T15976] _inline_copy_from_user+0x3c/0x174 [ 181.642927][T15976] copy_msghdr_from_user+0xb8/0x194 [ 181.642935][T15976] ___sys_sendmsg+0x14c/0x224 [ 181.642946][T15976] __sys_sendmsg+0x158/0x204 [ 181.642956][T15976] __arm64_sys_sendmsg+0x88/0x9c [ 181.642966][T15976] invoke_syscall+0x98/0x244 [ 181.642977][T15976] el0_svc_common+0xec/0x23c [ 181.642987][T15976] do_el0_svc+0x4c/0x5c [ 181.642997][T15976] el0_svc+0x60/0x1d8 [ 181.643006][T15976] el0t_64_sync_handler+0x44/0x104 [ 181.643014][T15976] el0t_64_sync+0x198/0x19c [ 181.714548][T15984] FAULT_INJECTION: forcing a failure. [ 181.714548][T15984] name failslab, interval 1, probability 0, space 0, times 0 [ 181.714569][T15984] CPU: 0 UID: 0 PID: 15984 Comm: syz.2.3963 Not tainted syzkaller #0 PREEMPT [ 181.714585][T15984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 181.714601][T15984] Call trace: [ 181.714605][T15984] show_stack+0x2c/0x3c (C) [ 181.714628][T15984] __dump_stack+0x30/0x40 [ 181.714641][T15984] dump_stack_lvl+0xd8/0x12c [ 181.714652][T15984] dump_stack+0x1c/0x28 [ 181.714664][T15984] should_fail_ex+0x418/0x58c [ 181.714673][T15984] should_failslab+0xc4/0x120 [ 181.714682][T15984] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 181.714692][T15984] sock_alloc_inode+0x30/0x180 [ 181.714702][T15984] alloc_inode+0x68/0x198 [ 181.714714][T15984] sock_alloc+0x4c/0x204 [ 181.714725][T15984] __sock_create+0x108/0x670 [ 181.714736][T15984] __sys_socket_create+0xc0/0x11c [ 181.714748][T15984] __sys_socket+0x44/0xec [ 181.714759][T15984] __arm64_sys_socket+0x84/0x9c [ 181.714771][T15984] invoke_syscall+0x98/0x244 [ 181.714792][T15984] el0_svc_common+0xec/0x23c [ 181.714804][T15984] do_el0_svc+0x4c/0x5c [ 181.714816][T15984] el0_svc+0x60/0x1d8 [ 181.714826][T15984] el0t_64_sync_handler+0x44/0x104 [ 181.714835][T15984] el0t_64_sync+0x198/0x19c [ 181.718752][T15986] FAULT_INJECTION: forcing a failure. [ 181.718752][T15986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.718765][T15986] CPU: 0 UID: 0 PID: 15986 Comm: syz.3.3964 Not tainted syzkaller #0 PREEMPT [ 181.718781][T15986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 181.718795][T15986] Call trace: [ 181.718798][T15986] show_stack+0x2c/0x3c (C) [ 181.718814][T15986] __dump_stack+0x30/0x40 [ 181.718826][T15986] dump_stack_lvl+0xd8/0x12c [ 181.718836][T15986] dump_stack+0x1c/0x28 [ 181.718845][T15986] should_fail_ex+0x418/0x58c [ 181.718854][T15986] should_fail+0x14/0x24 [ 181.718860][T15986] should_fail_usercopy+0x20/0x30 [ 181.718868][T15986] _inline_copy_from_user+0x3c/0x174 [ 181.718879][T15986] __arm64_sys_io_uring_register+0x5b8/0x12e4 [ 181.718890][T15986] invoke_syscall+0x98/0x244 [ 181.718900][T15986] el0_svc_common+0xec/0x23c [ 181.718910][T15986] do_el0_svc+0x4c/0x5c [ 181.718920][T15986] el0_svc+0x60/0x1d8 [ 181.718929][T15986] el0t_64_sync_handler+0x44/0x104 [ 181.718937][T15986] el0t_64_sync+0x198/0x19c [ 181.795507][T15984] rxe_eth0 speed is unknown, defaulting to 1000 [ 181.804818][T15990] FAULT_INJECTION: forcing a failure. [ 181.804818][T15990] name fail_futex, interval 1, probability 0, space 0, times 0 [ 181.804832][T15990] CPU: 0 UID: 0 PID: 15990 Comm: syz.0.3966 Not tainted syzkaller #0 PREEMPT [ 181.804844][T15990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 181.804857][T15990] Call trace: [ 181.804860][T15990] show_stack+0x2c/0x3c (C) [ 181.804880][T15990] __dump_stack+0x30/0x40 [ 181.804893][T15990] dump_stack_lvl+0xd8/0x12c [ 181.804905][T15990] dump_stack+0x1c/0x28 [ 181.804916][T15990] should_fail_ex+0x418/0x58c [ 181.804925][T15990] should_fail+0x14/0x24 [ 181.804933][T15990] get_futex_key+0x1ec/0x12b0 [ 181.804945][T15990] futex_wake+0x10c/0x594 [ 181.804956][T15990] do_futex+0x2c4/0x378 [ 181.804967][T15990] __arm64_sys_futex+0x2e4/0x418 [ 181.804978][T15990] invoke_syscall+0x98/0x244 [ 181.804991][T15990] el0_svc_common+0xec/0x23c [ 181.805002][T15990] do_el0_svc+0x4c/0x5c [ 181.805014][T15990] el0_svc+0x60/0x1d8 [ 181.805024][T15990] el0t_64_sync_handler+0x44/0x104 [ 181.805033][T15990] el0t_64_sync+0x198/0x19c [ 181.816738][T15995] FAULT_INJECTION: forcing a failure. [ 181.816738][T15995] name failslab, interval 1, probability 0, space 0, times 0 [ 181.816761][T15995] CPU: 0 UID: 0 PID: 15995 Comm: syz.4.3968 Not tainted syzkaller #0 PREEMPT [ 181.816781][T15995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 181.816800][T15995] Call trace: [ 181.816804][T15995] show_stack+0x2c/0x3c (C) [ 181.816826][T15995] __dump_stack+0x30/0x40 [ 181.816840][T15995] dump_stack_lvl+0xd8/0x12c [ 181.816853][T15995] dump_stack+0x1c/0x28 [ 181.816866][T15995] should_fail_ex+0x418/0x58c [ 181.816877][T15995] should_failslab+0xc4/0x120 [ 181.816887][T15995] __kmalloc_cache_noprof+0x94/0x5fc [ 181.816899][T15995] tipc_service_create+0x88/0x228 [ 181.816910][T15995] tipc_nametbl_subscribe+0x150/0x7f4 [ 181.816921][T15995] tipc_sub_subscribe+0x33c/0x644 [ 181.816931][T15995] tipc_conn_rcv_sub+0x124/0x30c [ 181.816941][T15995] tipc_topsrv_kern_subscr+0x15c/0x228 [ 181.816951][T15995] tipc_group_create+0x2c0/0x440 [ 181.816961][T15995] tipc_sk_join+0x1e0/0x508 [ 181.816974][T15995] tipc_setsockopt+0x570/0x7c0 [ 181.816986][T15995] do_sock_setsockopt+0x1f0/0x330 [ 181.817001][T15995] __sys_setsockopt+0x104/0x170 [ 181.817014][T15995] __arm64_sys_setsockopt+0xc8/0xe4 [ 181.817027][T15995] invoke_syscall+0x98/0x244 [ 181.817047][T15995] el0_svc_common+0xec/0x23c [ 181.817061][T15995] do_el0_svc+0x4c/0x5c [ 181.817074][T15995] el0_svc+0x60/0x1d8 [ 181.817084][T15995] el0t_64_sync_handler+0x44/0x104 [ 181.817095][T15995] el0t_64_sync+0x198/0x19c [ 181.817120][T15995] tipc: Service creation failed, no memory [ 181.817125][T15995] tipc: Failed to subscribe for {66,0,4294967295} [ 181.826666][T15993] binder: 15989:15993 ioctl c0306201 20000100 returned -14 [ 181.881576][T15998] binder: 15989:15998 BC_CLEAR_DEATH_NOTIFICATION invalid ref -1 [ 181.881589][T15998] binder: 15989:15998 BC_INCREFS_DONE u0000000000000003 no match [ 181.934422][T15997] syzkaller0: entered promiscuous mode [ 181.934435][T15997] syzkaller0: entered allmulticast mode [ 182.011705][T16003] FAULT_INJECTION: forcing a failure. [ 182.011705][T16003] name failslab, interval 1, probability 0, space 0, times 0 [ 182.011720][T16003] CPU: 1 UID: 0 PID: 16003 Comm: syz.3.3967 Not tainted syzkaller #0 PREEMPT [ 182.011731][T16003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 182.011744][T16003] Call trace: [ 182.011747][T16003] show_stack+0x2c/0x3c (C) [ 182.011766][T16003] __dump_stack+0x30/0x40 [ 182.011779][T16003] dump_stack_lvl+0xd8/0x12c [ 182.011798][T16003] dump_stack+0x1c/0x28 [ 182.011810][T16003] should_fail_ex+0x418/0x58c [ 182.011819][T16003] should_failslab+0xc4/0x120 [ 182.011828][T16003] __kmalloc_cache_noprof+0x94/0x5fc [ 182.011838][T16003] __arm64_sys_memfd_create+0x258/0x3ec [ 182.011849][T16003] invoke_syscall+0x98/0x244 [ 182.011862][T16003] el0_svc_common+0xec/0x23c [ 182.011874][T16003] do_el0_svc+0x4c/0x5c [ 182.011885][T16003] el0_svc+0x60/0x1d8 [ 182.011895][T16003] el0t_64_sync_handler+0x44/0x104 [ 182.011904][T16003] el0t_64_sync+0x198/0x19c [ 182.244884][T16013] tipc: Enabled bearer , priority 0 [ 182.245419][T16018] veth0: entered promiscuous mode [ 182.247716][T16013] syzkaller0: entered promiscuous mode [ 182.247729][T16013] syzkaller0: entered allmulticast mode [ 182.300952][T16013] tipc: Resetting bearer [ 182.316136][T16012] tipc: Resetting bearer [ 182.333077][T16033] FAULT_INJECTION: forcing a failure. [ 182.333077][T16033] name failslab, interval 1, probability 0, space 0, times 0 [ 182.333095][T16033] CPU: 0 UID: 0 PID: 16033 Comm: syz.1.3979 Not tainted syzkaller #0 PREEMPT [ 182.333105][T16033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 182.333118][T16033] Call trace: [ 182.333121][T16033] show_stack+0x2c/0x3c (C) [ 182.333141][T16033] __dump_stack+0x30/0x40 [ 182.333155][T16033] dump_stack_lvl+0xd8/0x12c [ 182.333165][T16033] dump_stack+0x1c/0x28 [ 182.333175][T16033] should_fail_ex+0x418/0x58c [ 182.333184][T16033] should_failslab+0xc4/0x120 [ 182.333192][T16033] __kvmalloc_node_noprof+0x160/0x7fc [ 182.333201][T16033] traverse+0xe4/0x4a4 [ 182.333209][T16033] seq_read_iter+0xb00/0xbe8 [ 182.333216][T16033] kernfs_fop_read_iter+0x13c/0x414 [ 182.333227][T16033] vfs_read+0x498/0x8c8 [ 182.333234][T16033] ksys_pread64+0x118/0x1ac [ 182.333241][T16033] __arm64_sys_pread64+0xa8/0xc0 [ 182.333248][T16033] invoke_syscall+0x98/0x244 [ 182.333259][T16033] el0_svc_common+0xec/0x23c [ 182.333269][T16033] do_el0_svc+0x4c/0x5c [ 182.333279][T16033] el0_svc+0x60/0x1d8 [ 182.333288][T16033] el0t_64_sync_handler+0x44/0x104 [ 182.333296][T16033] el0t_64_sync+0x198/0x19c [ 182.374067][T16012] tipc: Disabling bearer [ 182.453479][T16017] veth0: left promiscuous mode [ 182.615456][T16054] syzkaller0: entered promiscuous mode [ 182.615469][T16054] syzkaller0: entered allmulticast mode [ 182.661324][ T4721] Bluetooth: hci5: command 0x0406 tx timeout [ 182.669002][T16070] FAULT_INJECTION: forcing a failure. [ 182.669002][T16070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.669020][T16070] CPU: 1 UID: 0 PID: 16070 Comm: syz.3.3989 Not tainted syzkaller #0 PREEMPT [ 182.669030][T16070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 182.669042][T16070] Call trace: [ 182.669046][T16070] show_stack+0x2c/0x3c (C) [ 182.669063][T16070] __dump_stack+0x30/0x40 [ 182.669075][T16070] dump_stack_lvl+0xd8/0x12c [ 182.669085][T16070] dump_stack+0x1c/0x28 [ 182.669094][T16070] should_fail_ex+0x418/0x58c [ 182.669103][T16070] should_fail+0x14/0x24 [ 182.669110][T16070] should_fail_usercopy+0x20/0x30 [ 182.669117][T16070] _inline_copy_from_user+0x3c/0x174 [ 182.669126][T16070] copy_msghdr_from_user+0xb8/0x194 [ 182.669134][T16070] ___sys_sendmsg+0x14c/0x224 [ 182.669144][T16070] __sys_sendmsg+0x158/0x204 [ 182.669154][T16070] __arm64_sys_sendmsg+0x88/0x9c [ 182.669165][T16070] invoke_syscall+0x98/0x244 [ 182.669175][T16070] el0_svc_common+0xec/0x23c [ 182.669185][T16070] do_el0_svc+0x4c/0x5c [ 182.669195][T16070] el0_svc+0x60/0x1d8 [ 182.669203][T16070] el0t_64_sync_handler+0x44/0x104 [ 182.669211][T16070] el0t_64_sync+0x198/0x19c [ 182.701076][T16072] FAULT_INJECTION: forcing a failure. [ 182.701076][T16072] name failslab, interval 1, probability 0, space 0, times 0 [ 182.701094][T16072] CPU: 1 UID: 0 PID: 16072 Comm: syz.3.3990 Not tainted syzkaller #0 PREEMPT [ 182.701105][T16072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 182.701119][T16072] Call trace: [ 182.701122][T16072] show_stack+0x2c/0x3c (C) [ 182.701142][T16072] __dump_stack+0x30/0x40 [ 182.701155][T16072] dump_stack_lvl+0xd8/0x12c [ 182.701167][T16072] dump_stack+0x1c/0x28 [ 182.701178][T16072] should_fail_ex+0x418/0x58c [ 182.701188][T16072] should_failslab+0xc4/0x120 [ 182.701197][T16072] kmem_cache_alloc_noprof+0x94/0x5d4 [ 182.701210][T16072] prepare_creds+0x34/0x7d0 [ 182.701223][T16072] lookup_user_key+0x284/0xd4c [ 182.701236][T16072] __arm64_sys_add_key+0x34c/0x43c [ 182.701247][T16072] invoke_syscall+0x98/0x244 [ 182.701259][T16072] el0_svc_common+0xec/0x23c [ 182.701272][T16072] do_el0_svc+0x4c/0x5c [ 182.701283][T16072] el0_svc+0x60/0x1d8 [ 182.701293][T16072] el0t_64_sync_handler+0x44/0x104 [ 182.701303][T16072] el0t_64_sync+0x198/0x19c [ 182.711155][T16072] nfs4: Unknown parameter 'smack' [ 182.768259][T16078] syzkaller0: entered promiscuous mode [ 182.768272][T16078] syzkaller0: entered allmulticast mode [ 182.769503][T16078] tipc: Enabled bearer , priority 0 [ 182.776854][T16078] tipc: Resetting bearer [ 182.786118][T16077] tipc: Resetting bearer [ 182.807068][T16077] tipc: Disabling bearer [ 182.808153][T16081] nbd1: detected capacity change from 0 to 4 [ 182.826461][T16081] block nbd1: shutting down sockets [ 182.836215][T16085] cgroup: Unknown subsys name 'obj_role' [ 182.838242][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 182.838314][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 182.838634][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 182.838648][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 182.839346][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 182.839365][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 182.839423][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 182.839434][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 182.839479][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 182.839490][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 182.839508][T10786] ldm_validate_partition_table(): Disk read failed. [ 182.839540][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 182.839551][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 182.839592][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 182.839602][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 182.839642][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 182.839652][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 182.839693][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 182.839703][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 182.839720][T10786] Dev nbd1: unable to read RDB block 0 [ 182.839748][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 182.839758][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 182.839864][T10786] nbd1: unable to read partition table [ 182.839945][T10786] nbd1: partition table beyond EOD, truncated [ 182.874895][T16063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.875151][T16063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.876894][T16063] FAULT_INJECTION: forcing a failure. [ 182.876894][T16063] name failslab, interval 1, probability 0, space 0, times 0 [ 182.876911][T16063] CPU: 1 UID: 0 PID: 16063 Comm: syz.4.3987 Not tainted syzkaller #0 PREEMPT [ 182.876922][T16063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 182.876934][T16063] Call trace: [ 182.876937][T16063] show_stack+0x2c/0x3c (C) [ 182.876957][T16063] __dump_stack+0x30/0x40 [ 182.876971][T16063] dump_stack_lvl+0xd8/0x12c [ 182.876981][T16063] dump_stack+0x1c/0x28 [ 182.876991][T16063] should_fail_ex+0x418/0x58c [ 182.877000][T16063] should_failslab+0xc4/0x120 [ 182.877008][T16063] __kmalloc_noprof+0x108/0x6c8 [ 182.877018][T16063] tomoyo_realpath_from_path+0xbc/0x4dc [ 182.877030][T16063] tomoyo_path_number_perm+0x1f0/0x500 [ 182.877039][T16063] tomoyo_file_ioctl+0x2c/0x3c [ 182.877050][T16063] security_file_ioctl+0xdc/0x2b0 [ 182.877059][T16063] __arm64_sys_ioctl+0xb0/0x1cc [ 182.877067][T16063] invoke_syscall+0x98/0x244 [ 182.877078][T16063] el0_svc_common+0xec/0x23c [ 182.877087][T16063] do_el0_svc+0x4c/0x5c [ 182.877097][T16063] el0_svc+0x60/0x1d8 [ 182.877106][T16063] el0t_64_sync_handler+0x44/0x104 [ 182.877113][T16063] el0t_64_sync+0x198/0x19c [ 182.877124][T16063] ERROR: Out of memory at tomoyo_realpath_from_path. [ 182.920197][T10786] ldm_validate_partition_table(): Disk read failed. [ 182.920341][T10786] Dev nbd1: unable to read RDB block 0 [ 182.920447][T10786] nbd1: unable to read partition table [ 182.920505][T10786] nbd1: partition table beyond EOD, truncated [ 182.922850][T16088] syzkaller0: entered promiscuous mode [ 182.922864][T16088] syzkaller0: entered allmulticast mode [ 182.932733][T16088] syzkaller0: bond_netdev_event received NETDEV_PRECHANGEMTU [ 182.932757][T16088] net syzkaller0: siw: event 24 [ 182.932888][T16088] syzkaller0: bond_netdev_event received NETDEV_CHANGEMTU [ 182.932901][T16088] net syzkaller0: siw: event 7 [ 182.932955][T16088] IPv6: walker 00000000cee50602 adjusted by delroute [ 182.933076][T16088] IPv6: walker 00000000cee50602 adjusted by delroute [ 182.934209][T10786] kobject: 'nbd1' (0000000086c06a7f): kobject_uevent_env [ 182.934346][T10786] kobject: 'nbd1' (0000000086c06a7f): fill_kobj_path: path = '/devices/virtual/block/nbd1' [ 182.934446][T10786] [ 182.936068][T16087] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 455 [ 182.936099][ T26] nfc: nfc_urelease_event_work: portid 455 [ 182.939029][T16090] sctp: sctp_init_sock: sk:00000000aacfabd0 [ 182.939740][T16089] sctp: sctp_close: sk:00000000aacfabd0, timeout:0 [ 182.939755][T16089] sctp: sctp_destroy_sock: sk:00000000aacfabd0 [ 182.940289][T16090] kcov: kcov_task_exit: t = ffff0000f41e5880, kcov->t = ffff0000f41e5880 [ 182.951661][T16092] kcov: kcov_start: t = ffff0000d34c9d80, size = 524288, area = ffff8000a0a9a000 [ 182.955600][T16092] __nla_validate_parse: 8 callbacks suppressed [ 182.955612][T16092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4000'. [ 182.959401][T10786] ====================================================== [ 182.960950][T10786] WARNING: possible circular locking dependency detected [ 182.962356][T10786] syzkaller #0 Not tainted [ 182.963215][T10786] ------------------------------------------------------ [ 182.964640][T10786] udevd/10786 is trying to acquire lock: [ 182.965792][T10786] ffff800089a9a6a0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x64/0x604 [ 182.967913][T10786] [ 182.967913][T10786] but task is already holding lock: [ 182.969433][T10786] ffff80008adfb2e0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x24c/0x53c [ 182.971360][T10786] [ 182.971360][T10786] which lock already depends on the new lock. [ 182.971360][T10786] [ 182.973616][T10786] [ 182.973616][T10786] the existing dependency chain (in reverse order) is: [ 182.975456][T10786] [ 182.975456][T10786] -> #7 (uevent_sock_mutex){+.+.}-{4:4}: [ 182.977153][T10786] __mutex_lock+0x164/0x1078 [ 182.978262][T10786] mutex_lock_nested+0x24/0x30 [ 182.979442][T10786] kobject_uevent_net_broadcast+0x24c/0x53c [ 182.980868][T10786] kobject_uevent_env+0x518/0x944 [ 182.982093][T10786] kobject_uevent+0x2c/0x3c [ 182.983115][T10786] device_add+0x4d0/0x9e0 [ 182.984173][T10786] device_register+0x28/0x38 [ 182.985275][T10786] register_cpu+0x28c/0x57c [ 182.986306][T10786] arch_register_cpu+0x160/0x224 [ 182.987341][T10786] acpi_processor_add+0x8f0/0x13f0 [ 182.988349][T10786] acpi_bus_attach+0x398/0x778 [ 182.989429][T10786] acpi_dev_for_one_check+0xa0/0xb4 [ 182.990604][T10786] device_for_each_child+0xf4/0x184 [ 182.991760][T10786] acpi_dev_for_each_child+0x98/0xe4 [ 182.993045][T10786] acpi_bus_attach+0x540/0x778 [ 182.994176][T10786] acpi_dev_for_one_check+0xa0/0xb4 [ 182.995390][T10786] device_for_each_child+0xf4/0x184 [ 182.996598][T10786] acpi_dev_for_each_child+0x98/0xe4 [ 182.997826][T10786] acpi_bus_attach+0x540/0x778 [ 182.998867][T10786] acpi_bus_scan+0x104/0x310 [ 182.999960][T10786] acpi_scan_init+0x168/0x3cc [ 183.001088][T10786] acpi_init+0x15c/0x1f4 [ 183.001997][T10786] do_one_initcall+0x274/0x9f8 [ 183.002977][T10786] do_initcall_level+0x12c/0x1c4 [ 183.004104][T10786] do_initcalls+0x70/0xd0 [ 183.005154][T10786] do_basic_setup+0x7c/0x90 [ 183.006189][T10786] kernel_init_freeable+0x258/0x398 [ 183.007410][T10786] kernel_init+0x28/0x1e0 [ 183.008422][T10786] ret_from_fork+0x10/0x20 [ 183.009391][T10786] [ 183.009391][T10786] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 183.010951][T10786] cpus_read_lock+0x54/0x1c8 [ 183.011981][T10786] static_key_slow_inc+0x1c/0x40 [ 183.013146][T10786] sk_set_memalloc+0x6c/0xa0 [ 183.014200][T10786] nbd_genl_reconnect_sock_cb+0x32c/0x72c [ 183.015547][T10786] nbd_genl_foreach_sock+0x204/0x3c8 [ 183.016773][T10786] nbd_genl_reconfigure+0x714/0x9e8 [ 183.017932][T10786] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 183.019117][T10786] genl_rcv_msg+0x43c/0x620 [ 183.020140][T10786] netlink_rcv_skb+0x238/0x414 [ 183.021321][T10786] genl_rcv+0x38/0x50 [ 183.022259][T10786] netlink_unicast+0x600/0x7f8 [ 183.023299][T10786] netlink_sendmsg+0x648/0x948 [ 183.024449][T10786] __sock_sendmsg+0xc8/0x17c [ 183.025525][T10786] ____sys_sendmsg+0x3d0/0x6c8 [ 183.026653][T10786] ___sys_sendmsg+0x198/0x224 [ 183.027776][T10786] __sys_sendmsg+0x158/0x204 [ 183.028844][T10786] __arm64_sys_sendmsg+0x88/0x9c [ 183.030058][T10786] invoke_syscall+0x98/0x244 [ 183.031205][T10786] el0_svc_common+0xec/0x23c [ 183.032327][T10786] do_el0_svc+0x4c/0x5c [ 183.033237][T10786] el0_svc+0x60/0x1d8 [ 183.034135][T10786] el0t_64_sync_handler+0x44/0x104 [ 183.035250][T10786] el0t_64_sync+0x198/0x19c [ 183.036257][T10786] [ 183.036257][T10786] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 183.037891][T10786] __mutex_lock+0x164/0x1078 [ 183.039112][T10786] mutex_lock_nested+0x24/0x30 [ 183.040253][T10786] nbd_queue_rq+0x1f4/0xbac [ 183.041294][T10786] blk_mq_dispatch_rq_list+0x3d4/0x13a8 [ 183.042624][T10786] __blk_mq_sched_dispatch_requests+0xa48/0x10e8 [ 183.044087][T10786] blk_mq_sched_dispatch_requests+0xa8/0x158 [ 183.045454][T10786] blk_mq_run_work_fn+0x154/0x2e4 [ 183.046640][T10786] process_scheduled_works+0x91c/0x1250 [ 183.047912][T10786] worker_thread+0x798/0xbd0 [ 183.049041][T10786] kthread+0x304/0x3d4 [ 183.050064][T10786] ret_from_fork+0x10/0x20 [ 183.051156][T10786] [ 183.051156][T10786] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 183.052809][T10786] __mutex_lock+0x164/0x1078 [ 183.053906][T10786] mutex_lock_nested+0x24/0x30 [ 183.055064][T10786] nbd_queue_rq+0xb0/0xbac [ 183.056151][T10786] blk_mq_dispatch_rq_list+0x3d4/0x13a8 [ 183.057487][T10786] __blk_mq_sched_dispatch_requests+0xa48/0x10e8 [ 183.058855][T10786] blk_mq_sched_dispatch_requests+0xa8/0x158 [ 183.060137][T10786] blk_mq_run_work_fn+0x154/0x2e4 [ 183.061322][T10786] process_scheduled_works+0x91c/0x1250 [ 183.062630][T10786] worker_thread+0x798/0xbd0 [ 183.063796][T10786] kthread+0x304/0x3d4 [ 183.064824][T10786] ret_from_fork+0x10/0x20 [ 183.065901][T10786] [ 183.065901][T10786] -> #3 (set->srcu){.+.+}-{0:0}: [ 183.067504][T10786] __synchronize_srcu+0xc8/0x268 [ 183.068735][T10786] synchronize_srcu+0x280/0x2e0 [ 183.069893][T10786] blk_mq_wait_quiesce_done+0x88/0xac [ 183.071227][T10786] blk_mq_quiesce_queue+0x70/0x8c [ 183.072422][T10786] elevator_switch+0x128/0x38c [ 183.073537][T10786] elevator_change+0x204/0x35c [ 183.074730][T10786] elevator_set_default+0x190/0x2b0 [ 183.076051][T10786] blk_register_queue+0x2fc/0x3d4 [ 183.077252][T10786] __add_disk+0x5c8/0xbdc [ 183.078309][T10786] add_disk_fwnode+0xd4/0x340 [ 183.079415][T10786] device_add_disk+0x38/0x4c [ 183.080470][T10786] nbd_dev_add+0x594/0x884 [ 183.081555][T10786] nbd_init+0x174/0x19c [ 183.082603][T10786] do_one_initcall+0x274/0x9f8 [ 183.083789][T10786] do_initcall_level+0x12c/0x1c4 [ 183.084933][T10786] do_initcalls+0x70/0xd0 [ 183.085929][T10786] do_basic_setup+0x7c/0x90 [ 183.086955][T10786] kernel_init_freeable+0x258/0x398 [ 183.088111][T10786] kernel_init+0x28/0x1e0 [ 183.089121][T10786] ret_from_fork+0x10/0x20 [ 183.090180][T10786] [ 183.090180][T10786] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 183.091900][T10786] __mutex_lock+0x164/0x1078 [ 183.092980][T10786] mutex_lock_nested+0x24/0x30 [ 183.094043][T10786] elevator_change+0x188/0x35c [ 183.095171][T10786] elevator_set_none+0xa8/0x13c [ 183.096338][T10786] blk_mq_update_nr_hw_queues+0x4c4/0x11e0 [ 183.097698][T10786] nbd_start_device+0x15c/0xa44 [ 183.098796][T10786] nbd_genl_connect+0xde4/0x12b0 [ 183.099879][T10786] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 183.101105][T10786] genl_rcv_msg+0x43c/0x620 [ 183.102137][T10786] netlink_rcv_skb+0x238/0x414 [ 183.103258][T10786] genl_rcv+0x38/0x50 [ 183.104250][T10786] netlink_unicast+0x600/0x7f8 [ 183.105411][T10786] netlink_sendmsg+0x648/0x948 [ 183.106610][T10786] __sock_sendmsg+0xc8/0x17c [ 183.107756][T10786] ____sys_sendmsg+0x3d0/0x6c8 [ 183.108932][T10786] ___sys_sendmsg+0x198/0x224 [ 183.110103][T10786] __sys_sendmsg+0x158/0x204 [ 183.111236][T10786] __arm64_sys_sendmsg+0x88/0x9c [ 183.112431][T10786] invoke_syscall+0x98/0x244 [ 183.113404][T10786] el0_svc_common+0xec/0x23c [ 183.114426][T10786] do_el0_svc+0x4c/0x5c [ 183.115472][T10786] el0_svc+0x60/0x1d8 [ 183.116366][T10786] el0t_64_sync_handler+0x44/0x104 [ 183.117570][T10786] el0t_64_sync+0x198/0x19c [ 183.118623][T10786] [ 183.118623][T10786] -> #1 (&q->q_usage_counter(io)#33){++++}-{0:0}: [ 183.120381][T10786] blk_alloc_queue+0x488/0x590 [ 183.121443][T10786] blk_mq_alloc_queue+0x148/0x284 [ 183.122583][T10786] __blk_mq_alloc_disk+0x38/0x10c [ 183.123711][T10786] nbd_dev_add+0x3d0/0x884 [ 183.124686][T10786] nbd_init+0x174/0x19c [ 183.125596][T10786] do_one_initcall+0x274/0x9f8 [ 183.126703][T10786] do_initcall_level+0x12c/0x1c4 [ 183.127926][T10786] do_initcalls+0x70/0xd0 [ 183.128951][T10786] do_basic_setup+0x7c/0x90 [ 183.129957][T10786] kernel_init_freeable+0x258/0x398 [ 183.131078][T10786] kernel_init+0x28/0x1e0 [ 183.132047][T10786] ret_from_fork+0x10/0x20 [ 183.133124][T10786] [ 183.133124][T10786] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 183.134709][T10786] __lock_acquire+0x1660/0x2b08 [ 183.135792][T10786] lock_acquire+0x13c/0x320 [ 183.136833][T10786] fs_reclaim_acquire+0x90/0x110 [ 183.137968][T10786] kmem_cache_alloc_node_noprof+0x64/0x604 [ 183.139292][T10786] __alloc_skb+0x1f0/0x610 [ 183.140338][T10786] alloc_uevent_skb+0x78/0x1ec [ 183.141448][T10786] kobject_uevent_net_broadcast+0x2d4/0x53c [ 183.142844][T10786] kobject_uevent_env+0x518/0x944 [ 183.143956][T10786] kobject_uevent+0x2c/0x3c [ 183.145008][T10786] nbd_config_put+0x23c/0x6a8 [ 183.146006][T10786] nbd_release+0xe8/0x130 [ 183.147012][T10786] blkdev_put_whole+0xd0/0x110 [ 183.147920][T10786] bdev_release+0x244/0x328 [ 183.148831][T10786] blkdev_release+0x20/0x34 [ 183.149848][T10786] __fput+0x338/0x74c [ 183.150807][T10786] fput_close_sync+0x10c/0x278 [ 183.151848][T10786] __arm64_sys_close+0x80/0x110 [ 183.152970][T10786] invoke_syscall+0x98/0x244 [ 183.154034][T10786] el0_svc_common+0xec/0x23c [ 183.155165][T10786] do_el0_svc+0x4c/0x5c [ 183.156183][T10786] el0_svc+0x60/0x1d8 [ 183.157117][T10786] el0t_64_sync_handler+0x44/0x104 [ 183.158237][T10786] el0t_64_sync+0x198/0x19c [ 183.159279][T10786] [ 183.159279][T10786] other info that might help us debug this: [ 183.159279][T10786] [ 183.161493][T10786] Chain exists of: [ 183.161493][T10786] fs_reclaim --> cpu_hotplug_lock --> uevent_sock_mutex [ 183.161493][T10786] [ 183.164377][T10786] Possible unsafe locking scenario: [ 183.164377][T10786] [ 183.165956][T10786] CPU0 CPU1 [ 183.167128][T10786] ---- ---- [ 183.168286][T10786] lock(uevent_sock_mutex); [ 183.169310][T10786] lock(cpu_hotplug_lock); [ 183.170824][T10786] lock(uevent_sock_mutex); [ 183.172387][T10786] lock(fs_reclaim); [ 183.173236][T10786] [ 183.173236][T10786] *** DEADLOCK *** [ 183.173236][T10786] [ 183.174937][T10786] locks held by udevd/10786: 3, last CPU#0: [ 183.176222][T10786] #0: ffff0000c5243350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x128/0x328 [ 183.178143][T10786] #1: ffff0000c4deba60 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x40/0xec [ 183.180476][T10786] #2: ffff80008adfb2e0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x24c/0x53c [ 183.183027][T10786] [ 183.183027][T10786] stack backtrace: [ 183.184297][T10786] CPU: 0 UID: 0 PID: 10786 Comm: udevd Not tainted syzkaller #0 PREEMPT [ 183.186044][T10786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 183.188029][T10786] dump_backtrace(regs = 0000000000000000 tsk = 0000000000000000) [ 183.189589][T10786] Call trace: [ 183.190201][T10786] show_stack+0x2c/0x3c (C) [ 183.191124][T10786] __dump_stack+0x30/0x40 [ 183.191372][ T40] bond2: (slave geneve2): Send learning packet: mac 16:d6:e8:f4:78:09 vlan 0 [ 183.191618][ T40] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 183.191639][ T40] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 183.195328][ C1] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 183.195350][ C1] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 183.198959][ C1] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 183.198979][ C1] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 183.204509][T10786] dump_stack_lvl+0xd8/0x12c [ 183.205433][T10786] dump_stack+0x1c/0x28 [ 183.206280][T10786] print_circular_bug+0x328/0x330 [ 183.207384][T10786] check_noncircular+0x158/0x174 [ 183.208511][T10786] __lock_acquire+0x1660/0x2b08 [ 183.209555][T10786] lock_acquire+0x13c/0x320 [ 183.210530][T10786] fs_reclaim_acquire+0x90/0x110 [ 183.211603][T10786] kmem_cache_alloc_node_noprof+0x64/0x604 [ 183.212728][T10786] __alloc_skb+0x1f0/0x610 [ 183.213635][T10786] alloc_uevent_skb+0x78/0x1ec [ 183.214677][T10786] kobject_uevent_net_broadcast+0x2d4/0x53c [ 183.215855][T10786] kobject_uevent_env+0x518/0x944 [ 183.216877][T10786] kobject_uevent+0x2c/0x3c [ 183.217855][T10786] nbd_config_put+0x23c/0x6a8 [ 183.218889][T10786] nbd_release+0xe8/0x130 [ 183.219813][T10786] blkdev_put_whole+0xd0/0x110 [ 183.220840][T10786] bdev_release+0x244/0x328 [ 183.221759][T10786] blkdev_release+0x20/0x34 [ 183.222686][T10786] __fput+0x338/0x74c [ 183.223477][T10786] fput_close_sync+0x10c/0x278 [ 183.224461][T10786] __arm64_sys_close+0x80/0x110 [ 183.225439][T10786] invoke_syscall+0x98/0x244 [ 183.226467][T10786] el0_svc_common+0xec/0x23c [ 183.227374][T10786] do_el0_svc+0x4c/0x5c [ 183.228279][T10786] el0_svc+0x60/0x1d8 [ 183.229159][T10786] el0t_64_sync_handler+0x44/0x104 [ 183.230240][T10786] el0t_64_sync+0x198/0x19c [ 183.232278][T16087] syzkaller0: bond_netdev_event received NETDEV_GOING_DOWN [ 183.232306][T16087] net syzkaller0: siw: event 10 [ 183.233259][T16087] syzkaller0: bond_netdev_event received NETDEV_DOWN [ 183.233282][T16087] net syzkaller0: siw: event 2 [ 183.237582][T10786] kernfs pid: removing [ 183.237768][T10786] block nbd1: queue cleared [ 183.238617][T10786] inotify_handle_inode_event: group=00000000b6385be4 mark=00000000f0f809fa mask=8000 [ 183.238633][T10786] fsnotify_insert_event: group=00000000b6385be4 event=00000000b479c1f9 [ 183.249052][ T4344] get_one_event: group=00000000b6385be4 event=00000000b479c1f9 [ 183.249074][ T4344] fsnotify_remove_first_event: group=00000000b6385be4 event=00000000b479c1f9 [ 183.249082][ T4344] inotify_read: group=00000000b6385be4 kevent=00000000b479c1f9 [ 183.249089][ T4344] copy_event_to_user: group=00000000b6385be4 event=00000000b479c1f9 [ 183.249100][ T4344] inotify_read: group=00000000b6385be4 kevent=0000000000000000 [ 183.249938][T16087] syzkaller0 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 183.249975][T16087] net syzkaller0: siw: event 6 [ 183.250213][T16087] syzkaller0 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 183.250227][T16087] net syzkaller0: siw: event 18 [ 183.252068][T16094] kcov: kcov_start: t = ffff0000f27e3b00, size = 524288, area = ffff800098c99000 [ 183.252204][T16087] kernfs rps_cpus: removing [ 183.252229][T16087] kernfs rps_flow_cnt: removing [ 183.252246][T16087] kobject: 'rx-0' (00000000d3c75bec): kobject_cleanup, parent 00000000a2334980 [ 183.252256][T16087] kobject: 'rx-0' (00000000d3c75bec): auto cleanup kobject_del [ 183.252263][T16087] kobject: 'rx-0' (00000000d3c75bec): auto cleanup 'remove' event [ 183.252270][T16087] kobject: 'rx-0' (00000000d3c75bec): kobject_uevent_env [ 183.252282][T16087] kobject: 'rx-0' (00000000d3c75bec): fill_kobj_path: path = '/devices/virtual/net/syzkaller0/queues/rx-0' [ 183.252320][T16087] kernfs rx-0: removing [ 183.252332][T16087] kobject: 'rx-0' (00000000d3c75bec): calling ktype release [ 183.252340][T16087] kobject: 'rx-0': free name [ 183.252353][T16087] kernfs tx_timeout: removing [ 183.252366][T16087] kernfs traffic_class: removing [ 183.252378][T16087] kernfs xps_cpus: removing [ 183.252388][T16087] kernfs xps_rxqs: removing [ 183.252399][T16087] kernfs tx_maxrate: removing [ 183.252409][T16087] kobject: 'tx-0' (000000008c3dcdb3): kobject_cleanup, parent 00000000a2334980 [ 183.252416][T16087] kobject: 'tx-0' (000000008c3dcdb3): auto cleanup kobject_del [ 183.252421][T16087] kobject: 'tx-0' (000000008c3dcdb3): auto cleanup 'remove' event [ 183.252427][T16087] kobject: 'tx-0' (000000008c3dcdb3): kobject_uevent_env [ 183.252435][T16087] kobject: 'tx-0' (000000008c3dcdb3): fill_kobj_path: path = '/devices/virtual/net/syzkaller0/queues/tx-0' [ 183.252479][T16087] kernfs tx-0: removing [ 183.252583][T16087] kobject: 'tx-0' (000000008c3dcdb3): calling ktype release [ 183.252594][T16087] kobject: 'tx-0': free name [ 183.252606][T16087] kernfs queues: removing [ 183.252620][T16087] kobject: 'queues' (00000000a2334980): kobject_cleanup, parent 0000000000000000 [ 183.252628][T16087] kobject: 'queues' (00000000a2334980): calling ktype release [ 183.252634][T16087] kobject: 'queues' (00000000a2334980): kset_release [ 183.252643][T16087] kobject: 'queues': free name [ 183.252662][T16087] kernfs runtime_status: removing [ 183.252675][T16087] kernfs control: removing [ 183.252686][T16087] kernfs runtime_suspended_time: removing [ 183.252697][T16087] kernfs runtime_active_time: removing [ 183.252708][T16087] kernfs autosuspend_delay_ms: removing [ 183.252724][T16087] kernfs power: removing [ 183.252746][T16087] kernfs subsystem: removing [ 183.252762][T16087] kernfs syzkaller0: removing [ 183.252781][T16087] kernfs uevent: removing [ 183.252797][T16087] kernfs tun_flags: removing [ 183.252809][T16087] kernfs owner: removing [ 183.252820][T16087] kernfs group: removing [ 183.252833][T16087] kernfs rx_packets: removing [ 183.252845][T16087] kernfs tx_packets: removing [ 183.252855][T16087] kernfs rx_bytes: removing [ 183.252865][T16087] kernfs tx_bytes: removing [ 183.252876][T16087] kernfs rx_errors: removing [ 183.252886][T16087] kernfs tx_errors: removing [ 183.252897][T16087] kernfs rx_dropped: removing [ 183.252908][T16087] kernfs tx_dropped: removing [ 183.252918][T16087] kernfs multicast: removing [ 183.252928][T16087] kernfs collisions: removing [ 183.252939][T16087] kernfs rx_length_errors: removing [ 183.252949][T16087] kernfs rx_over_errors: removing [ 183.252960][T16087] kernfs rx_crc_errors: removing [ 183.252970][T16087] kernfs rx_frame_errors: removing [ 183.252980][T16087] kernfs rx_fifo_errors: removing [ 183.252990][T16087] kernfs rx_missed_errors: removing [ 183.253000][T16087] kernfs tx_aborted_errors: removing [ 183.253010][T16087] kernfs tx_carrier_errors: removing [ 183.253021][T16087] kernfs tx_fifo_errors: removing [ 183.253031][T16087] kernfs tx_heartbeat_errors: removing [ 183.253041][T16087] kernfs tx_window_errors: removing [ 183.253051][T16087] kernfs rx_compressed: removing [ 183.253061][T16087] kernfs tx_compressed: removing [ 183.253071][T16087] kernfs rx_nohandler: removing [ 183.253085][T16087] kernfs statistics: removing [ 183.253098][T16087] kernfs netdev_group: removing [ 183.253109][T16087] kernfs type: removing [ 183.253119][T16087] kernfs dev_id: removing [ 183.253129][T16087] kernfs dev_port: removing [ 183.253139][T16087] kernfs iflink: removing [ 183.253150][T16087] kernfs ifindex: removing [ 183.253159][T16087] kernfs name_assign_type: removing [ 183.253170][T16087] kernfs addr_assign_type: removing [ 183.253180][T16087] kernfs addr_len: removing [ 183.253190][T16087] kernfs link_mode: removing [ 183.253200][T16087] kernfs address: removing [ 183.253211][T16087] kernfs broadcast: removing [ 183.253221][T16087] kernfs speed: removing [ 183.253231][T16087] kernfs duplex: removing [ 183.253241][T16087] kernfs dormant: removing [ 183.253251][T16087] kernfs testing: removing [ 183.253261][T16087] kernfs operstate: removing [ 183.253271][T16087] kernfs carrier_changes: removing [ 183.253281][T16087] kernfs ifalias: removing [ 183.253291][T16087] kernfs carrier: removing [ 183.253301][T16087] kernfs mtu: removing [ 183.253311][T16087] kernfs flags: removing [ 183.253320][T16087] kernfs tx_queue_len: removing [ 183.253330][T16087] kernfs gro_flush_timeout: removing [ 183.253340][T16087] kernfs napi_defer_hard_irqs: removing [ 183.253351][T16087] kernfs proto_down: removing [ 183.253360][T16087] kernfs carrier_up_count: removing [ 183.253370][T16087] kernfs carrier_down_count: removing [ 183.253380][T16087] kernfs threaded: removing [ 183.253390][T16087] PM: Removing info for No Bus:syzkaller0 [ 183.253404][T16087] kobject: 'syzkaller0' (0000000073e3c6cc): kobject_uevent_env [ 183.253414][T16087] kobject: 'syzkaller0' (0000000073e3c6cc): fill_kobj_path: path = '/devices/virtual/net/syzkaller0' [ 183.253447][T16087] kernfs syzkaller0: removing [ 183.261175][T16094] kcov: kcov_task_exit: t = ffff0000f27e3b00, kcov->t = ffff0000f27e3b00 [ 183.262539][T10786] block nbd1: queue cleared [ 183.263056][T16087] kobject: 'syzkaller0' (0000000073e3c6cc): kobject_cleanup, parent 0000000000000000 [ 183.263073][T16087] kobject: 'syzkaller0' (0000000073e3c6cc): calling ktype release [ 183.263098][T16087] kobject: 'syzkaller0': free name [ 183.263276][T16088] kcov: kcov_task_exit: t = ffff0000c7205880, kcov->t = ffff0000c7205880 [ 183.264646][T16092] vxcan0: bond_netdev_event received NETDEV_GOING_DOWN [ 183.264669][T16092] net vxcan0: siw: event 10 [ 183.264727][T16092] vxcan1: bond_netdev_event received NETDEV_GOING_DOWN [ 183.264741][T16092] net vxcan1: siw: event 10 [ 183.264933][T16092] In tnode_resize 0000000087865d9d inflate_threshold=50 threshold=25 [ 183.264950][T16092] In tnode_resize 0000000089012dc7 inflate_threshold=50 threshold=25 [ 183.264976][T16092] In tnode_resize 00000000a3939de6 inflate_threshold=50 threshold=25 [ 183.264985][T16092] In tnode_resize 000000002773bd70 inflate_threshold=50 threshold=25 [ 183.264993][T16092] In tnode_resize 000000006b2afcd2 inflate_threshold=50 threshold=25 [ 183.265000][T16092] In tnode_resize 00000000c5ef5727 inflate_threshold=50 threshold=25 [ 183.265008][T16092] In tnode_resize 00000000f3e47c1d inflate_threshold=50 threshold=25 [ 183.265015][T16092] trie_flush found=1 [ 183.265030][T16092] In tnode_resize 0000000087865d9d inflate_threshold=50 threshold=25 [ 183.265042][T16092] In tnode_resize 0000000089012dc7 inflate_threshold=50 threshold=25 [ 183.265054][T16092] In tnode_resize 00000000a3939de6 inflate_threshold=50 threshold=25 [ 183.265061][T16092] In tnode_resize 000000002773bd70 inflate_threshold=50 threshold=25 [ 183.265068][T16092] In tnode_resize 000000006b2afcd2 inflate_threshold=50 threshold=25 [ 183.265076][T16092] In tnode_resize 00000000c5ef5727 inflate_threshold=50 threshold=25 [ 183.265083][T16092] In tnode_resize 00000000f3e47c1d inflate_threshold=50 threshold=25 [ 183.265090][T16092] trie_flush found=1 [ 183.265104][T16092] vxcan0: bond_netdev_event received NETDEV_DOWN [ 183.265114][T16092] net vxcan0: siw: event 2 [ 183.267245][T16092] In tnode_resize 0000000087865d9d inflate_threshold=50 threshold=25 [ 183.267262][T16092] In tnode_resize 0000000089012dc7 inflate_threshold=50 threshold=25 [ 183.267285][T16092] In tnode_resize 00000000a3939de6 inflate_threshold=50 threshold=25 [ 183.267293][T16092] In tnode_resize 000000002773bd70 inflate_threshold=50 threshold=25 [ 183.267302][T16092] In tnode_resize 000000006b2afcd2 inflate_threshold=50 threshold=25 [ 183.267309][T16092] In tnode_resize 00000000c5ef5727 inflate_threshold=50 threshold=25 [ 183.267317][T16092] In tnode_resize 00000000f3e47c1d inflate_threshold=50 threshold=25 [ 183.267324][T16092] trie_flush found=1 [ 183.267337][T16092] In tnode_resize 0000000087865d9d inflate_threshold=50 threshold=25 [ 183.267347][T16092] In tnode_resize 0000000089012dc7 inflate_threshold=50 threshold=25 [ 183.267357][T16092] In tnode_resize 00000000a3939de6 inflate_threshold=50 threshold=25 [ 183.267364][T16092] In tnode_resize 000000002773bd70 inflate_threshold=50 threshold=25 [ 183.267372][T16092] In tnode_resize 000000006b2afcd2 inflate_threshold=50 threshold=25 [ 183.267379][T16092] In tnode_resize 00000000c5ef5727 inflate_threshold=50 threshold=25 [ 183.267386][T16092] In tnode_resize 00000000f3e47c1d inflate_threshold=50 threshold=25 [ 183.267393][T16092] trie_flush found=1 [ 183.267406][T16092] vxcan1: bond_netdev_event received NETDEV_DOWN [ 183.267416][T16092] net vxcan1: siw: event 2 [ 183.269660][T16092] Deleting ac141400/24 dsfield=0x00 t=000000008cb2d0b8 [ 183.269682][T16092] Deleting ac1414ff/32 dsfield=0x00 t=000000008cb2d0b8 [ 183.269696][T16092] Deleting ac141427/32 dsfield=0x00 t=000000008cb2d0b8 [ 183.269765][T16092] In tnode_resize 0000000089012dc7 inflate_threshold=50 threshold=25 [ 183.269777][T16092] In tnode_resize 000000002773bd70 inflate_threshold=50 threshold=25 [ 183.269785][T16092] In tnode_resize 00000000f3e47c1d inflate_threshold=50 threshold=25 [ 183.272181][T16092] vxcan0 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 183.272203][T16092] net vxcan0: siw: event 6 [ 183.272858][T16092] vxcan0 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 183.272872][T16092] net vxcan0: siw: event 18 [ 183.272900][T16092] kernfs rps_cpus: removing [ 183.272920][T16092] kernfs rps_flow_cnt: removing [ 183.272934][T16092] kobject: 'rx-1' (00000000fcd5954c): kobject_cleanup, parent 00000000135dd601 [ 183.272945][T16092] kobject: 'rx-1' (00000000fcd5954c): auto cleanup kobject_del [ 183.272952][T16092] kobject: 'rx-1' (00000000fcd5954c): auto cleanup 'remove' event [ 183.272960][T16092] kobject: 'rx-1' (00000000fcd5954c): kobject_uevent_env [ 183.272973][T16092] kobject: 'rx-1' (00000000fcd5954c): fill_kobj_path: path = '/devices/virtual/net/vxcan0/queues/rx-1' [ 183.273012][T16092] kernfs rx-1: removing [ 183.273026][T16092] kobject: 'rx-1' (00000000fcd5954c): calling ktype release [ 183.273035][T16092] kobject: 'rx-1': free name [ 183.273044][T16092] kernfs rps_cpus: removing [ 183.273056][T16092] kernfs rps_flow_cnt: removing [ 183.273068][T16092] kobject: 'rx-0' (0000000047382d5e): kobject_cleanup, parent 00000000135dd601 [ 183.273077][T16092] kobject: 'rx-0' (0000000047382d5e): auto cleanup kobject_del [ 183.273083][T16092] kobject: 'rx-0' (0000000047382d5e): auto cleanup 'remove' event [ 183.273089][T16092] kobject: 'rx-0' (0000000047382d5e): kobject_uevent_env [ 183.274266][T16092] kobject: 'rx-0' (0000000047382d5e): fill_kobj_path: path = '/devices/virtual/net/vxcan0/queues/rx-0' [ 183.274334][T16092] kernfs rx-0: removing [ 183.274350][T16092] kobject: 'rx-0' (0000000047382d5e): calling ktype release [ 183.274360][T16092] kobject: 'rx-0': free name [ 183.274369][T16092] kernfs tx_timeout: removing [ 183.274383][T16092] kernfs traffic_class: removing [ 183.274395][T16092] kernfs xps_cpus: removing [ 183.274407][T16092] kernfs xps_rxqs: removing [ 183.274418][T16092] kernfs tx_maxrate: removing [ 183.274429][T16092] kobject: 'tx-1' (0000000041561f67): kobject_cleanup, parent 00000000135dd601 [ 183.274437][T16092] kobject: 'tx-1' (0000000041561f67): auto cleanup kobject_del [ 183.274444][T16092] kobject: 'tx-1' (0000000041561f67): auto cleanup 'remove' event [ 183.274450][T16092] kobject: 'tx-1' (0000000041561f67): kobject_uevent_env [ 183.274461][T16092] kobject: 'tx-1' (0000000041561f67): fill_kobj_path: path = '/devices/virtual/net/vxcan0/queues/tx-1' [ 183.274496][T16092] kernfs tx-1: removing [ 183.274507][T16092] kobject: 'tx-1' (0000000041561f67): calling ktype release [ 183.274516][T16092] kobject: 'tx-1': free name [ 183.274524][T16092] kernfs tx_timeout: removing [ 183.274535][T16092] kernfs traffic_class: removing [ 183.274547][T16092] kernfs xps_cpus: removing [ 183.274558][T16092] kernfs xps_rxqs: removing [ 183.274582][T16092] kernfs tx_maxrate: removing [ 183.274593][T16092] kobject: 'tx-0' (00000000e9f15869): kobject_cleanup, parent 00000000135dd601 [ 183.274602][T16092] kobject: 'tx-0' (00000000e9f15869): auto cleanup kobject_del [ 183.274608][T16092] kobject: 'tx-0' (00000000e9f15869): auto cleanup 'remove' event [ 183.274615][T16092] kobject: 'tx-0' (00000000e9f15869): kobject_uevent_env [ 183.274625][T16092] kobject: 'tx-0' (00000000e9f15869): fill_kobj_path: path = '/devices/virtual/net/vxcan0/queues/tx-0' [ 183.274659][T16092] kernfs tx-0: removing [ 183.274670][T16092] kobject: 'tx-0' (00000000e9f15869): calling ktype release [ 183.274678][T16092] kobject: 'tx-0': free name [ 183.274687][T16092] kernfs queues: removing [ 183.274700][T16092] kobject: 'queues' (00000000135dd601): kobject_cleanup, parent 0000000000000000 [ 183.274708][T16092] kobject: 'queues' (00000000135dd601): calling ktype release [ 183.274714][T16092] kobject: 'queues' (00000000135dd601): kset_release [ 183.274725][T16092] kobject: 'queues': free name [ 183.274741][T16092] kernfs runtime_status: removing [ 183.274753][T16092] kernfs control: removing [ 183.274765][T16092] kernfs runtime_suspended_time: removing [ 183.274781][T16092] kernfs runtime_active_time: removing [ 183.274793][T16092] kernfs autosuspend_delay_ms: removing [ 183.274809][T16092] kernfs power: removing [ 183.274833][T16092] kernfs subsystem: removing [ 183.274850][T16092] kernfs vxcan0: removing [ 183.274865][T16092] kernfs uevent: removing [ 183.274881][T16092] kernfs rx_packets: removing [ 183.274895][T16092] kernfs tx_packets: removing [ 183.274906][T16092] kernfs rx_bytes: removing [ 183.274918][T16092] kernfs tx_bytes: removing [ 183.274930][T16092] kernfs rx_errors: removing [ 183.274941][T16092] kernfs tx_errors: removing [ 183.274953][T16092] kernfs rx_dropped: removing [ 183.274964][T16092] kernfs tx_dropped: removing [ 183.274976][T16092] kernfs multicast: removing [ 183.274987][T16092] kernfs collisions: removing [ 183.274999][T16092] kernfs rx_length_errors: removing [ 183.275010][T16092] kernfs rx_over_errors: removing [ 183.275021][T16092] kernfs rx_crc_errors: removing [ 183.275033][T16092] kernfs rx_frame_errors: removing [ 183.275045][T16092] kernfs rx_fifo_errors: removing [ 183.275056][T16092] kernfs rx_missed_errors: removing [ 183.275068][T16092] kernfs tx_aborted_errors: removing [ 183.275079][T16092] kernfs tx_carrier_errors: removing [ 183.275090][T16092] kernfs tx_fifo_errors: removing [ 183.275101][T16092] kernfs tx_heartbeat_errors: removing [ 183.275113][T16092] kernfs tx_window_errors: removing [ 183.275124][T16092] kernfs rx_compressed: removing [ 183.275136][T16092] kernfs tx_compressed: removing [ 183.275146][T16092] kernfs rx_nohandler: removing [ 183.275158][T16092] kernfs statistics: removing [ 183.275172][T16092] kernfs netdev_group: removing [ 183.275184][T16092] kernfs type: removing [ 183.275195][T16092] kernfs dev_id: removing [ 183.275207][T16092] kernfs dev_port: removing [ 183.275218][T16092] kernfs iflink: removing [ 183.275229][T16092] kernfs ifindex: removing [ 183.275240][T16092] kernfs name_assign_type: removing [ 183.275252][T16092] kernfs addr_assign_type: removing [ 183.280278][T16092] kernfs addr_len: removing [ 183.280315][T16092] kernfs link_mode: removing [ 183.280333][T16092] kernfs address: removing [ 183.280347][T16092] kernfs broadcast: removing [ 183.280360][T16092] kernfs speed: removing [ 183.280372][T16092] kernfs duplex: removing [ 183.280383][T16092] kernfs dormant: removing [ 183.280395][T16092] kernfs testing: removing [ 183.280406][T16092] kernfs operstate: removing [ 183.280418][T16092] kernfs carrier_changes: removing [ 183.280429][T16092] kernfs ifalias: removing [ 183.280440][T16092] kernfs carrier: removing [ 183.280451][T16092] kernfs mtu: removing [ 183.280462][T16092] kernfs flags: removing [ 183.280473][T16092] kernfs tx_queue_len: removing [ 183.280485][T16092] kernfs gro_flush_timeout: removing [ 183.280496][T16092] kernfs napi_defer_hard_irqs: removing [ 183.280508][T16092] kernfs proto_down: removing [ 183.280519][T16092] kernfs carrier_up_count: removing [ 183.280533][T16092] kernfs carrier_down_count: removing [ 183.280545][T16092] kernfs threaded: removing [ 183.280558][T16092] PM: Removing info for No Bus:vxcan0 [ 183.280575][T16092] kobject: 'vxcan0' (00000000892c4eb6): kobject_uevent_env [ 183.280588][T16092] kobject: 'vxcan0' (00000000892c4eb6): fill_kobj_path: path = '/devices/virtual/net/vxcan0' [ 183.280633][T16092] kernfs vxcan0: removing [ 183.280745][T16092] Deleting ac141400/24 dsfield=0x00 t=000000008cb2d0b8 [ 183.280769][T16092] Deleting ac1414ff/32 dsfield=0x00 t=000000008cb2d0b8 [ 183.280795][T16092] Deleting ac141428/32 dsfield=0x00 t=000000008cb2d0b8 [ 183.282135][T16092] In tnode_resize 0000000089012dc7 inflate_threshold=50 threshold=25 [ 183.282154][T16092] In tnode_resize 000000002773bd70 inflate_threshold=50 threshold=25 [ 183.282164][T16092] In tnode_resize 00000000f3e47c1d inflate_threshold=50 threshold=25 [ 183.282319][T16092] vxcan1 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 183.282335][T16092] net vxcan1: siw: event 6 [ 183.282977][T16092] vxcan1 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 183.282990][T16092] net vxcan1: siw: event 18 [ 183.283718][T16092] kernfs rps_cpus: removing [ 183.283741][T16092] kernfs rps_flow_cnt: removing [ 183.283759][T16092] kobject: 'rx-1' (00000000ebec9a41): kobject_cleanup, parent 000000004bc89170 [ 183.283769][T16092] kobject: 'rx-1' (00000000ebec9a41): auto cleanup kobject_del [ 183.283782][T16092] kobject: 'rx-1' (00000000ebec9a41): auto cleanup 'remove' event [ 183.283790][T16092] kobject: 'rx-1' (00000000ebec9a41): kobject_uevent_env [ 183.283805][T16092] kobject: 'rx-1' (00000000ebec9a41): fill_kobj_path: path = '/devices/virtual/net/vxcan1/queues/rx-1' [ 183.283846][T16092] kernfs rx-1: removing [ 183.283862][T16092] kobject: 'rx-1' (00000000ebec9a41): calling ktype release [ 183.283872][T16092] kobject: 'rx-1': free name [ 183.283884][T16092] kernfs rps_cpus: removing [ 183.283898][T16092] kernfs rps_flow_cnt: removing [ 183.283910][T16092] kobject: 'rx-0' (00000000928112da): kobject_cleanup, parent 000000004bc89170 [ 183.283919][T16092] kobject: 'rx-0' (00000000928112da): auto cleanup kobject_del [ 183.283925][T16092] kobject: 'rx-0' (00000000928112da): auto cleanup 'remove' event [ 183.283931][T16092] kobject: 'rx-0' (00000000928112da): kobject_uevent_env [ 183.283940][T16092] kobject: 'rx-0' (00000000928112da): fill_kobj_path: path = '/devices/virtual/net/vxcan1/queues/rx-0' [ 183.283970][T16092] kernfs rx-0: removing [ 183.283981][T16092] kobject: 'rx-0' (00000000928112da): calling ktype release [ 183.283989][T16092] kobject: 'rx-0': free name [ 183.283997][T16092] kernfs tx_timeout: removing [ 183.284009][T16092] kernfs traffic_class: removing [ 183.284020][T16092] kernfs xps_cpus: removing [ 183.284031][T16092] kernfs xps_rxqs: removing [ 183.284042][T16092] kernfs tx_maxrate: removing [ 183.284052][T16092] kobject: 'tx-1' (000000001f4ec6fe): kobject_cleanup, parent 000000004bc89170 [ 183.284060][T16092] kobject: 'tx-1' (000000001f4ec6fe): auto cleanup kobject_del [ 183.284065][T16092] kobject: 'tx-1' (000000001f4ec6fe): auto cleanup 'remove' event [ 183.284071][T16092] kobject: 'tx-1' (000000001f4ec6fe): kobject_uevent_env [ 183.284112][T16092] kobject: 'tx-1' (000000001f4ec6fe): fill_kobj_path: path = '/devices/virtual/net/vxcan1/queues/tx-1' [ 183.284146][T16092] kernfs tx-1: removing [ 183.284159][T16092] kobject: 'tx-1' (000000001f4ec6fe): calling ktype release [ 183.284167][T16092] kobject: 'tx-1': free name [ 183.284177][T16092] kernfs tx_timeout: removing [ 183.284189][T16092] kernfs traffic_class: removing [ 183.284201][T16092] kernfs xps_cpus: removing [ 183.284211][T16092] kernfs xps_rxqs: removing [ 183.284222][T16092] kernfs tx_maxrate: removing [ 183.284284][T16092] kobject: 'tx-0' (00000000a1b38559): kobject_cleanup, parent 000000004bc89170 [ 183.284297][T16092] kobject: 'tx-0' (00000000a1b38559): auto cleanup kobject_del [ 183.284303][T16092] kobject: 'tx-0' (00000000a1b38559): auto cleanup 'remove' event [ 183.284309][T16092] kobject: 'tx-0' (00000000a1b38559): kobject_uevent_env [ 183.284317][T16092] kobject: 'tx-0' (00000000a1b38559): fill_kobj_path: path = '/devices/virtual/net/vxcan1/queues/tx-0' [ 183.284347][T16092] kernfs tx-0: removing [ 183.284359][T16092] kobject: 'tx-0' (00000000a1b38559): calling ktype release [ 183.284367][T16092] kobject: 'tx-0': free name [ 183.284376][T16092] kernfs queues: removing [ 183.284388][T16092] kobject: 'queues' (000000004bc89170): kobject_cleanup, parent 0000000000000000 [ 183.284396][T16092] kobject: 'queues' (000000004bc89170): calling ktype release [ 183.284401][T16092] kobject: 'queues' (000000004bc89170): kset_release [ 183.284410][T16092] kobject: 'queues': free name [ 183.284426][T16092] kernfs runtime_status: removing [ 183.284439][T16092] kernfs control: removing [ 183.284450][T16092] kernfs runtime_suspended_time: removing [ 183.284461][T16092] kernfs runtime_active_time: removing [ 183.284471][T16092] kernfs autosuspend_delay_ms: removing [ 183.284486][T16092] kernfs power: removing [ 183.284506][T16092] kernfs subsystem: removing [ 183.284522][T16092] kernfs vxcan1: removing [ 183.284535][T16092] kernfs uevent: removing [ 183.284550][T16092] kernfs rx_packets: removing [ 183.284563][T16092] kernfs tx_packets: removing [ 183.284574][T16092] kernfs rx_bytes: removing [ 183.284586][T16092] kernfs tx_bytes: removing [ 183.284596][T16092] kernfs rx_errors: removing [ 183.284607][T16092] kernfs tx_errors: removing [ 183.284617][T16092] kernfs rx_dropped: removing [ 183.284628][T16092] kernfs tx_dropped: removing [ 183.284639][T16092] kernfs multicast: removing [ 183.284649][T16092] kernfs collisions: removing [ 183.284660][T16092] kernfs rx_length_errors: removing [ 183.284671][T16092] kernfs rx_over_errors: removing [ 183.284682][T16092] kernfs rx_crc_errors: removing [ 183.284692][T16092] kernfs rx_frame_errors: removing [ 183.284703][T16092] kernfs rx_fifo_errors: removing [ 183.284713][T16092] kernfs rx_missed_errors: removing [ 183.284724][T16092] kernfs tx_aborted_errors: removing [ 183.284735][T16092] kernfs tx_carrier_errors: removing [ 183.284746][T16092] kernfs tx_fifo_errors: removing [ 183.284757][T16092] kernfs tx_heartbeat_errors: removing [ 183.284767][T16092] kernfs tx_window_errors: removing [ 183.284783][T16092] kernfs rx_compressed: removing [ 183.284794][T16092] kernfs tx_compressed: removing [ 183.284806][T16092] kernfs rx_nohandler: removing [ 183.284817][T16092] kernfs statistics: removing [ 183.284830][T16092] kernfs netdev_group: removing [ 183.284841][T16092] kernfs type: removing [ 183.284851][T16092] kernfs dev_id: removing [ 183.284861][T16092] kernfs dev_port: removing [ 183.284871][T16092] kernfs iflink: removing [ 183.284882][T16092] kernfs ifindex: removing [ 183.284892][T16092] kernfs name_assign_type: removing [ 183.284903][T16092] kernfs addr_assign_type: removing [ 183.284913][T16092] kernfs addr_len: removing [ 183.284923][T16092] kernfs link_mode: removing [ 183.284934][T16092] kernfs address: removing [ 183.284945][T16092] kernfs broadcast: removing [ 183.284955][T16092] kernfs speed: removing [ 183.284965][T16092] kernfs duplex: removing [ 183.284976][T16092] kernfs dormant: removing [ 183.284986][T16092] kernfs testing: removing [ 183.284996][T16092] kernfs operstate: removing [ 183.285006][T16092] kernfs carrier_changes: removing [ 183.285017][T16092] kernfs ifalias: removing [ 183.285028][T16092] kernfs carrier: removing [ 183.285038][T16092] kernfs mtu: removing [ 183.285048][T16092] kernfs flags: removing [ 183.285059][T16092] kernfs tx_queue_len: removing [ 183.285070][T16092] kernfs gro_flush_timeout: removing [ 183.285080][T16092] kernfs napi_defer_hard_irqs: removing [ 183.285090][T16092] kernfs proto_down: removing [ 183.285101][T16092] kernfs carrier_up_count: removing [ 183.285111][T16092] kernfs carrier_down_count: removing [ 183.285122][T16092] kernfs threaded: removing [ 183.285137][T16092] PM: Removing info for No Bus:vxcan1 [ 183.285149][T16092] kobject: 'vxcan1' (000000006e62610a): kobject_uevent_env [ 183.285192][T16092] kobject: 'vxcan1' (000000006e62610a): fill_kobj_path: path = '/devices/virtual/net/vxcan1' [ 183.285225][T16092] kernfs vxcan1: removing [ 183.329682][T16083] kcov: kcov_task_exit: t = ffff0000f4310000, kcov->t = ffff0000f4310000 [ 183.332330][T16092] kobject: 'vxcan0' (00000000892c4eb6): kobject_cleanup, parent 0000000000000000 [ 183.332343][T16092] kobject: 'vxcan0' (00000000892c4eb6): calling ktype release [ 183.332371][T16092] kobject: 'vxcan0': free name [ 183.332425][T16092] kobject: 'vxcan1' (000000006e62610a): kobject_cleanup, parent 0000000000000000 [ 183.332434][T16092] kobject: 'vxcan1' (000000006e62610a): calling ktype release [ 183.332458][T16092] kobject: 'vxcan1': free name [ 183.393581][T16092] kcov: kcov_task_exit: t = ffff0000d34c9d80, kcov->t = ffff0000d34c9d80 [ 183.541218][ C0] wireguard: wg1: Handshake for peer 10 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 3) [ 184.181216][ C0] wireguard: wg0: Handshake for peer 20 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 4) [ 184.301308][ T40] bond2: (slave geneve2): Send learning packet: mac 16:d6:e8:f4:78:09 vlan 0 [ 184.301539][ T40] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 184.301561][ T40] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 184.303062][ C1] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 184.303080][ C1] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 184.307608][ C1] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 184.307623][ C1] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 184.831400][ C1] net_ratelimit: 301 callbacks suppressed [ 184.831416][ C1] wireguard: wg0: Sending keepalive packet to peer 43 (127.0.0.1:20002) [ 184.831449][ C1] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0) [ 184.835303][ T4806] wireguard: wg1: Receiving keepalive packet from peer 3 ([::1]:20001/0%0) [ 184.837707][T13287] wireguard: wg1: Receiving keepalive packet from peer 45 (127.0.0.1:20001) [ 184.837813][T12828] wireguard: wg1: Packet has invalid nonce 6 (max 7) [ 184.838668][T13287] wireguard: wg1: Packet has invalid nonce 44 (max 45) [ 184.840084][ T4806] wireguard: wg1: Packet has invalid nonce 139 (max 140) [ 184.981230][ C1] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 184.981282][ C1] wireguard: wg0: Sending keepalive packet to peer 37 ([::1]:20002/0%0) [ 184.981276][ C0] wireguard: wg0: Sending keepalive packet to peer 56 ([::1]:20003/0%0) [ 185.411294][T13551] bond2: (slave geneve2): Send learning packet: mac 16:d6:e8:f4:78:09 vlan 0 [ 185.411517][T13551] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 185.411539][T13551] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 185.411594][ C0] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 185.411614][ C0] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 185.411654][ C0] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 185.411666][ C0] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 185.461213][ C0] wireguard: wg1: Handshake for peer 9 (127.0.0.1:20001) did not complete after 5 seconds, retrying (try 5) [ 185.461253][ C0] wireguard: wg1: Handshake for peer 21 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 6) [ 186.521243][T13551] bond2: (slave geneve2): Send learning packet: mac 16:d6:e8:f4:78:09 vlan 0 [ 186.521460][T13551] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 186.521483][T13551] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 186.521531][ C1] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 186.521547][ C1] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 186.527529][ C1] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 186.527545][ C1] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 187.381822][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.381851][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.621283][T13551] bond2: (slave geneve2): Send learning packet: mac 16:d6:e8:f4:78:09 vlan 0 [ 187.621511][T13551] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 187.621530][T13551] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 187.623478][ C0] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 187.623497][ C0] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 187.630934][ C0] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 187.630952][ C0] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 187.861261][ C1] wireguard: wg2: Handshake for peer 12 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 5) [ 188.731255][ T40] bond2: (slave geneve2): Send learning packet: mac 16:d6:e8:f4:78:09 vlan 0 [ 188.731483][ T40] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 188.731503][ T40] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 188.735187][ C0] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 188.735206][ C0] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 188.740908][ C0] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 188.740926][ C0] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 189.301221][ C0] wireguard: wg1: Handshake for peer 10 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 4) [ 189.851259][ T1328] bond2: (slave geneve2): Send learning packet: mac 16:d6:e8:f4:78:09 vlan 0 [ 189.851302][ T1328] net_ratelimit: 244 callbacks suppressed [ 189.851310][ T1328] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:7fff:0001, type=128, ifindex=8) => 00000003 [ 189.851328][ T1328] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=1) => 00000000 [ 189.851341][ T1328] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:0000:000a, type=0, ifindex=1) => 00000001 [ 189.851354][ T1328] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:0000:000e, type=0, ifindex=2) => 00000001 [ 189.851365][ T1328] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:ac14:140d, type=0, ifindex=3) => 00000001 [ 189.851375][ T1328] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:ac14:140c, type=0, ifindex=3) => 00000001 [ 189.851385][ T1328] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:ac14:14aa, type=0, ifindex=3) => 00000001 [ 189.851395][ T1328] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:ac14:140b, type=0, ifindex=3) => 00000001 [ 189.851404][ T1328] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:ac14:140f, type=0, ifindex=3) => 00000001 [ 189.851414][ T1328] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:ac14:140e, type=0, ifindex=3) => 00000001 [ 189.851576][ T1328] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 189.851594][ T1328] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 189.857661][ C0] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 189.857680][ C0] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 189.858628][ C0] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 189.858642][ C0] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 189.951214][ C0] wireguard: wg0: Handshake for peer 20 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 5) [ 190.951258][ T1328] bond2: (slave geneve2): Send learning packet: mac 16:d6:e8:f4:78:09 vlan 0 [ 190.951482][ T1328] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 190.951502][ T1328] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 190.953002][ C1] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 190.953021][ C1] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 190.956569][ C1] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 190.956583][ C1] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 191.231214][ C0] wireguard: wg1: Handshake for peer 9 (127.0.0.1:20001) did not complete after 5 seconds, retrying (try 6) [ 191.231262][ C0] wireguard: wg1: Handshake for peer 21 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 7) [ 192.051542][T13551] bond2: (slave geneve2): Send learning packet: mac 16:d6:e8:f4:78:09 vlan 0 [ 192.051760][T13551] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 192.051779][T13551] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 192.051842][ C1] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 192.051858][ C1] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 192.059320][ C1] nf_nat: Already setup manip DST for ct 0000000065bc5c0b (status bits 0x188) [ 192.059338][ C1] nf_nat: Already setup manip SRC for ct 0000000065bc5c0b (status bits 0x188) [ 192.501510][ C0] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 192.901322][ C0] wireguard: wg2: Handshake for peer 12 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 6)