last executing test programs: 1m34.216972297s ago: executing program 1 (id=2257): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000600), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000020000000100000008000100010000002c00048005000300010000000500"], 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) 1m34.07436843s ago: executing program 1 (id=2259): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sec/integrity/ima/ascii_runtime_measurements\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/4093, 0xffd}], 0x1) 1m33.846115835s ago: executing program 1 (id=2260): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x40, r1, 0x1, 0x4000000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0x0) 1m33.742265308s ago: executing program 1 (id=2261): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000100)={[{@noload}, {@quota}, {@lazytime}, {@errors_remount}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x402, &(0x7f0000000080)={0x0}) ptrace$ARCH_GET_FS(0x1e, r4, &(0x7f00000000c0), 0x1003) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r5, 0xffffffff80000101, 0x0, 0x0) symlinkat(&(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) 1m32.645984712s ago: executing program 1 (id=2266): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x101002, 0x0) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000300)=""/104, 0x68}, {0x0}], 0x2) 1m30.87769331s ago: executing program 1 (id=2271): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303, 0x38}, '\x00', "0000000000e3c100", '\x00', "00000000000000fd"}, 0x28) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 1m30.40682221s ago: executing program 32 (id=2271): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303, 0x38}, '\x00', "0000000000e3c100", '\x00', "00000000000000fd"}, 0x28) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 8.164474484s ago: executing program 3 (id=2571): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000200)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000100100000100000002000000000000001000000000000000100100000e00000067bb1e8bbe179000ca9ddc2c1be2d43a6cc64990b8b98414"], 0x28}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000440)={&(0x7f0000000480)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000500)=[{&(0x7f0000000540), 0x1000}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000010010000010000000100140000400000"], 0x18}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 7.429932379s ago: executing program 4 (id=2584): r0 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) 7.340136611s ago: executing program 4 (id=2585): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000500)=ANY=[], 0x6) 7.221927214s ago: executing program 4 (id=2589): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000400)={[{@grpquota}, {@nogrpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x200002, 0x200003, 0x801, 0x4, 0x7}) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, &(0x7f0000000340)={0x4, 0x3, 0x0, 0x8, 0x6, 0x6, 0x20000001000, 0xffffffff, 0xfffffffd}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000640)=ANY=[], 0x835, 0x1) 7.172328015s ago: executing program 3 (id=2590): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b40200000000000061111c000000000085000000190000009500000001000000"], &(0x7f0000000340)='GPL\x00', 0x4, 0x16, &(0x7f0000000380)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000480), 0x0, 0x10, &(0x7f00000004c0), 0x76}, 0x21) 6.930259851s ago: executing program 3 (id=2591): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1f, 0x0, 0x0, 0x1000}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x44004000) sendmsg$NFT_BATCH(r1, 0x0, 0x24000840) sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000480), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x34b9, &(0x7f0000000580)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000480)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000500), &(0x7f0000000740), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_enter(r2, 0x521c, 0x1, 0x61, 0x0, 0x18) 6.866560262s ago: executing program 4 (id=2593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001d00)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x78, 0xa, 0x0, 0xd, 0x6b}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000680), 0x56) sendmsg$kcm(r7, &(0x7f00000006c0)={&(0x7f0000000700)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000780)=[{&(0x7f00000007c0)="27030200dc0f14000e0000000025c10200000002125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f0000000800)="02db0b9ef1cafdab", 0xa888}], 0x2}, 0x4005) 6.538214379s ago: executing program 3 (id=2595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b906, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c0f4}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000480)="05", 0x1, 0x4088, &(0x7f00000004c0)={0x11, 0x86dd, r6, 0x1, 0x3, 0x6, @remote}, 0x14) 4.706131379s ago: executing program 0 (id=2600): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 4.654627049s ago: executing program 0 (id=2601): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000400)={[{@grpquota}, {@nogrpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x200002, 0x200003, 0x801, 0x4, 0x7}) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, &(0x7f0000000340)={0x4, 0x3, 0x0, 0x8, 0x6, 0x6, 0x20000001000, 0xffffffff, 0xfffffffd}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000640)=ANY=[], 0x835, 0x1) 4.444912844s ago: executing program 0 (id=2602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="000086dd0000110000080000000060ecfe8000000000000000000000000000aaff0200000000000000000000000000013a00000000000000"], 0x6e) 4.309765937s ago: executing program 2 (id=2603): r0 = fsopen(&(0x7f00000001c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) chdir(&(0x7f0000000300)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0x168) 4.242664009s ago: executing program 2 (id=2604): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xffffff, 0x1}, 0x10) write(r0, &(0x7f0000000040)="240000001a005f0214f9f407000904ff8100000001000005000000000800040001000000", 0x24) 2.843742119s ago: executing program 2 (id=2605): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000d80)=ANY=[@ANYBLOB='b3\x00'], 0x1a0) close(0x3) 2.78182521s ago: executing program 2 (id=2606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000010240)={0x0, 0x0}, &(0x7f0000010280)=0xc) mount$9p_fd(0x0, &(0x7f00000102c0)='.\x00', &(0x7f0000010300), 0x1000000, &(0x7f0000010340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid={'access', 0x3d, r4}}]}}) getgroups(0x2, &(0x7f00000103c0)=[0x0, 0xee00]) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8005) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80040, 0x54) fsetxattr$system_posix_acl(r5, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {0x1, 0x1}, [], {}, [{0x8, 0x2}], {0x10, 0x3}, {0x20, 0x1}}, 0x2c, 0x0) getxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00', &(0x7f0000000540)=""/213, 0xd5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) 2.78136515s ago: executing program 3 (id=2607): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000080)={[{@barrier_val={'barrier', 0x3d, 0x81}}, {@minixdf}, {@bh}, {@delalloc}, {@dioread_nolock}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000100)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x143042, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x143442, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000640)=0xae8, 0x863, 0x0) 2.678252942s ago: executing program 4 (id=2608): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000002, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x81, 0x2d1, &(0x7f0000000880)="$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") socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000540), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000c00)='3', 0x4e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2.677868182s ago: executing program 0 (id=2609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) close(0xffffffffffffffff) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7ff, 0x73c0, 0xfffffffb, 0xe795, 0x5, 0x5, 0x1, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x3, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4015}, 0x40488d0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000540), 0x56) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f00000005c0)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 2.31725108s ago: executing program 3 (id=2610): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000400)={[{@grpquota}, {@nogrpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x200002, 0x200003, 0x801, 0x4, 0x7}) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, &(0x7f0000000340)={0x4, 0x3, 0x0, 0x8, 0x6, 0x6, 0x20000001000, 0xffffffff, 0xfffffffd}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000640)=ANY=[], 0x835, 0x1) 1.473720318s ago: executing program 2 (id=2611): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) 1.320812682s ago: executing program 0 (id=2612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x54, 0xa, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) 1.210165695s ago: executing program 2 (id=2613): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x8000, 0x0) close(0x3) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f00000003c0)=r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, 0x0, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c811}, 0x20040884) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800718, &(0x7f00000004c0)={[{@nodioread_nolock}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noquota}, {@test_dummy_encryption}, {@inlinecrypt}, {@errors_remount}, {@init_itable}, {@errors_continue}, {@quota}]}, 0x4, 0x4a4, &(0x7f0000000a00)="$eJzs281rXFUbAPDn3mQm7duPpH37frRWjRYhKCZNWrULN0oLIhUFXdRlTKYldNpIE8XWYlMRV4IUdS0uRf8CdyKIuhLcunIlhaLdtHUVuTf3JpM0k4R8zNjO7wd35px7z809T879OHPOTAAdqz97SSJ2RsSvEdE7l11coH/u7fbNy2N3dl4eS2J29tU/krzcrZuXx8qi5X47isxAGpF+kBQHWWzq4qWzo/V67UKRH5o+9+bQ1MVLT759bvRM7Uzt/MixY0ePDD/z9MhTmxJnFtetA+9NHtz/wuvXXho7de2NH7/O6ruz2N4Yx2bpzwL/cza3dNtjm32wNtuVv/bkr0l3myvDmnVFRNZclfz6742uWGi83jjxflsrB2yp7NnU03zzzCxwH0tirSUrDfcM4N5XPuizz7/l0oJuxz/GjefmPgBlcd8ulrkt3ZEWZSrzn283X39EnJr56/NsiS0ahwAAaPTR2Gcnq9ET79756sWs79E7vyWN/+bvvy2aEeqLiD2fnIi9EfHviNgXEf+JyMv+LyL+v8H63N3/Sa9v8E+uKOv/PVvMbS3u/5W9v+jrKnK78vgryemJeu1wROyOiIGo9GT54RWO8e3xXz5utq2x/5ct2fHLvmBRj+vdSwboxkenR6OykagX3LgacaB7ufiT+ZmArPX3R8SB+b3WNMGzu0xMPP7lwWaFVo+/ib61VmNls19k4c1k8c/EkvhLSeP85MRd85ND26JeOzxUnhV3++nnD19pdvx1x79JbtTm3hvaf2mRvqRxvnZqc4+/zvM/rSav5fPM1WLO8Z3R6ekLwxHV5GSerxZl8/UjC/uW+bJ8dv4PHFr++t9b7JPF/0BEZCfxgxHxUEQ8XNT9kYh4NCIOrRDjD8+vHn+kbWr/qxHjy97/5s//Je1/8dLZ8ta4sGbFRNfZ779pdvy1tf/RPDVQrMnvf6tYrjrdy1R5vf83AAAAuJek+Xfgk3RwPp2mg4Nz3+HfF/9K65NT00+cnnzr/Pjcd+X7opKWI129xXhofaJeG05mir9YSY5HvTZSDNGV46VHImJPRHzatT3PD45N1sfbHDt0uh1Nrv/M713N99vWshoCW2j7smtHqi2vCNAGS+fR08XZKy+HmwHcr/xeGzrXKtd/2qp6AK3n+Q+da7nr/8qS/ApzAcA9zPMfOld5/Rvlhw6TftfuGgBtpP8PHWnVH+/niaTJL+q3LLGtcU115cLVVlasFYk1NsoGEj3r3z2iTKRt/0dJbGGi3XcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzfF3AAAA///N+te0") 951.57323ms ago: executing program 0 (id=2614): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes256, 0x3, @desc3}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) 0s ago: executing program 4 (id=2615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b906, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c0f4}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000480)="05", 0x1, 0x4088, &(0x7f00000004c0)={0x11, 0x86dd, r6, 0x1, 0x3, 0x6, @remote}, 0x14) kernel console output (not intermixed with test programs): 82] netlink: 24 bytes leftover after parsing attributes in process `syz.0.698'. [ 201.998398][ T8386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.700'. [ 202.041592][ T8385] syzkaller0: entered promiscuous mode [ 202.047115][ T8385] syzkaller0: entered allmulticast mode [ 202.469357][ T8407] sch_fq: defrate 3 ignored. [ 202.478503][ T8410] syzkaller0: entered promiscuous mode [ 202.484189][ T8410] syzkaller0: entered allmulticast mode [ 202.745279][ T8421] syzkaller0: entered promiscuous mode [ 202.751142][ T8421] syzkaller0: entered allmulticast mode [ 204.283156][ T8441] __nla_validate_parse: 3 callbacks suppressed [ 204.283171][ T8441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.724'. [ 204.515630][ T8459] syzkaller0: entered promiscuous mode [ 204.533881][ T8459] syzkaller0: entered allmulticast mode [ 206.454815][ T8476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.734'. [ 206.665718][ T8501] syzkaller0: entered promiscuous mode [ 206.671544][ T8501] syzkaller0: entered allmulticast mode [ 206.755898][ T8503] syzkaller0: entered promiscuous mode [ 206.763448][ T8503] syzkaller0: entered allmulticast mode [ 208.174486][ T8518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.747'. [ 208.369217][ T8538] syzkaller0: entered promiscuous mode [ 208.374742][ T8538] syzkaller0: entered allmulticast mode [ 208.422338][ T8538] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 208.507412][ T8544] syzkaller0: entered promiscuous mode [ 208.514918][ T8544] syzkaller0: entered allmulticast mode [ 208.824509][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.760'. [ 208.830636][ T8569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.761'. [ 209.046644][ T8576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.764'. [ 209.078825][ T5090] Bluetooth: hci3: link tx timeout [ 209.084354][ T5090] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.844502][ T8621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.775'. [ 211.108468][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 211.180249][ T8631] syzkaller1: entered promiscuous mode [ 211.185773][ T8631] syzkaller1: entered allmulticast mode [ 212.844179][ T8660] netlink: 'syz.1.789': attribute type 1 has an invalid length. [ 212.874686][ T8660] netlink: 84 bytes leftover after parsing attributes in process `syz.1.789'. [ 212.936552][ T8666] syzkaller1: entered promiscuous mode [ 212.946879][ T8666] syzkaller1: entered allmulticast mode [ 213.325444][ T8683] syzkaller0: entered promiscuous mode [ 213.342485][ T8683] syzkaller0: entered allmulticast mode [ 213.377974][ T8683] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 213.813002][ T8699] syzkaller1: entered promiscuous mode [ 213.828200][ T8699] syzkaller1: entered allmulticast mode [ 214.315394][ T8686] syz.3.798: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 214.358601][ T8686] CPU: 0 PID: 8686 Comm: syz.3.798 Not tainted syzkaller #0 [ 214.365953][ T8686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 214.376061][ T8686] Call Trace: [ 214.379379][ T8686] [ 214.382423][ T8686] dump_stack_lvl+0x18c/0x250 [ 214.387140][ T8686] ? show_regs_print_info+0x20/0x20 [ 214.392373][ T8686] ? load_image+0x420/0x420 [ 214.396923][ T8686] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 214.403377][ T8686] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 214.409919][ T8686] warn_alloc+0x246/0x340 [ 214.414287][ T8686] ? zone_watermark_ok_safe+0x230/0x230 [ 214.419878][ T8686] ? _raw_spin_unlock+0x28/0x40 [ 214.424764][ T8686] ? netlink_rcv_skb+0x235/0x4c0 [ 214.429743][ T8686] __vmalloc_node_range+0x661/0x1320 [ 214.435071][ T8686] ? __asan_memset+0x22/0x40 [ 214.439708][ T8686] ? free_vm_area+0x50/0x50 [ 214.444230][ T8686] ? kvmalloc_node+0x70/0x180 [ 214.448916][ T8686] ? rcu_is_watching+0x15/0xb0 [ 214.453715][ T8686] ? kvmalloc_node+0x70/0x180 [ 214.458418][ T8686] ? trace_kmalloc+0x1f/0xa0 [ 214.463041][ T8686] kvmalloc_node+0x13f/0x180 [ 214.467664][ T8686] ? hash_ipportnet4_resize+0x253/0x1a40 [ 214.473330][ T8686] hash_ipportnet4_resize+0x253/0x1a40 [ 214.478814][ T8686] ? hash_ipportnet4_uadt+0x13b0/0x13b0 [ 214.484381][ T8686] ? hash_ipportnet4_kadt+0x620/0x620 [ 214.489775][ T8686] call_ad+0x42a/0xb30 [ 214.493863][ T8686] ? ip_set_ad+0x9c0/0x9c0 [ 214.498300][ T8686] ? __nla_parse+0x40/0x50 [ 214.502715][ T8686] ip_set_ad+0x81a/0x9c0 [ 214.506966][ T8686] ? ip_set_dump_done+0x320/0x320 [ 214.511993][ T8686] ? rcu_is_watching+0x15/0xb0 [ 214.516789][ T8686] nfnetlink_rcv_msg+0xcaf/0x1290 [ 214.521817][ T8686] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.527891][ T8686] ? nfnetlink_rcv_msg+0x228/0x1290 [ 214.533115][ T8686] ? nfnetlink_unbind+0x160/0x160 [ 214.538155][ T8686] ? __dev_queue_xmit+0x1be8/0x37e0 [ 214.543368][ T8686] ? __netlink_deliver_tap+0x579/0x7f0 [ 214.548835][ T8686] ? netlink_deliver_tap+0x19c/0x1b0 [ 214.554118][ T8686] ? netlink_unicast+0x77b/0x930 [ 214.559050][ T8686] ? netlink_sendmsg+0x8d0/0xbf0 [ 214.563990][ T8686] ? ____sys_sendmsg+0x61b/0x980 [ 214.568930][ T8686] ? ___sys_sendmsg+0x2a6/0x360 [ 214.573784][ T8686] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 214.578814][ T8686] ? do_syscall_64+0x55/0xb0 [ 214.583413][ T8686] netlink_rcv_skb+0x235/0x4c0 [ 214.588183][ T8686] ? nfnetlink_unbind+0x160/0x160 [ 214.593209][ T8686] ? netlink_ack+0x1160/0x1160 [ 214.597980][ T8686] ? apparmor_capable+0x137/0x1a0 [ 214.603007][ T8686] ? bpf_lsm_capable+0x9/0x10 [ 214.607681][ T8686] ? security_capable+0x89/0xb0 [ 214.612543][ T8686] nfnetlink_rcv+0x2c9/0x2490 [ 214.617225][ T8686] ? __local_bh_enable_ip+0x13a/0x1c0 [ 214.622616][ T8686] ? lockdep_hardirqs_on+0x98/0x150 [ 214.627821][ T8686] ? __local_bh_enable_ip+0x13a/0x1c0 [ 214.633191][ T8686] ? _local_bh_enable+0xa0/0xa0 [ 214.638048][ T8686] ? __dev_queue_xmit+0x272/0x37e0 [ 214.643165][ T8686] ? __dev_queue_xmit+0x1329/0x37e0 [ 214.648360][ T8686] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 214.653907][ T8686] ? __dev_queue_xmit+0x272/0x37e0 [ 214.659055][ T8686] ? ref_tracker_free+0x686/0x830 [ 214.664084][ T8686] ? refcount_inc+0x70/0x70 [ 214.668598][ T8686] ? __asan_memcpy+0x40/0x70 [ 214.673212][ T8686] ? __skb_clone+0x5c/0x6c0 [ 214.677728][ T8686] ? __skb_clone+0x446/0x6c0 [ 214.682329][ T8686] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.687529][ T8686] ? __lock_acquire+0x7eb0/0x7eb0 [ 214.692563][ T8686] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.697769][ T8686] netlink_unicast+0x7b1/0x930 [ 214.702554][ T8686] netlink_sendmsg+0x8d0/0xbf0 [ 214.707324][ T8686] ? netlink_getsockopt+0x590/0x590 [ 214.712529][ T8686] ? apparmor_socket_sendmsg+0x170/0x330 [ 214.718173][ T8686] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 214.723468][ T8686] ? security_socket_sendmsg+0x80/0xa0 [ 214.728933][ T8686] ? netlink_getsockopt+0x590/0x590 [ 214.734138][ T8686] ____sys_sendmsg+0x61b/0x980 [ 214.738920][ T8686] ? __asan_memset+0x22/0x40 [ 214.743514][ T8686] ? __sys_sendmsg_sock+0x30/0x30 [ 214.748539][ T8686] ? __import_iovec+0x5f2/0x850 [ 214.753404][ T8686] ? import_iovec+0x73/0xa0 [ 214.757936][ T8686] ___sys_sendmsg+0x2a6/0x360 [ 214.762631][ T8686] ? __sys_sendmsg+0x2b0/0x2b0 [ 214.767437][ T8686] __se_sys_sendmsg+0x1d0/0x2c0 [ 214.772318][ T8686] ? __x64_sys_sendmsg+0x80/0x80 [ 214.777269][ T8686] ? lockdep_hardirqs_on+0x98/0x150 [ 214.782470][ T8686] do_syscall_64+0x55/0xb0 [ 214.786885][ T8686] ? clear_bhb_loop+0x40/0x90 [ 214.791561][ T8686] ? clear_bhb_loop+0x40/0x90 [ 214.796237][ T8686] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.802161][ T8686] RIP: 0033:0x7f208ad9e1d9 [ 214.806588][ T8686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.826200][ T8686] RSP: 002b:00007f208bbad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.834623][ T8686] RAX: ffffffffffffffda RBX: 00007f208b025fa0 RCX: 00007f208ad9e1d9 [ 214.842602][ T8686] RDX: 0000000020004000 RSI: 0000200000000100 RDI: 0000000000000003 [ 214.850568][ T8686] RBP: 00007f208ae35888 R08: 0000000000000000 R09: 0000000000000000 [ 214.858546][ T8686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.866511][ T8686] R13: 00007f208b026038 R14: 00007f208b025fa0 R15: 00007fff81d43ba8 [ 214.874508][ T8686] [ 214.908382][ T8686] Mem-Info: [ 214.911567][ T8686] active_anon:5495 inactive_anon:0 isolated_anon:0 [ 214.911567][ T8686] active_file:16708 inactive_file:40001 isolated_file:0 [ 214.911567][ T8686] unevictable:768 dirty:36 writeback:0 [ 214.911567][ T8686] slab_reclaimable:10259 slab_unreclaimable:93887 [ 214.911567][ T8686] mapped:24266 shmem:1363 pagetables:529 [ 214.911567][ T8686] sec_pagetables:0 bounce:0 [ 214.911567][ T8686] kernel_misc_reclaimable:0 [ 214.911567][ T8686] free:1344898 free_pcp:9081 free_cma:0 [ 214.970782][ T8686] Node 0 active_anon:22024kB inactive_anon:0kB active_file:66832kB inactive_file:159800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97088kB dirty:152kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10944kB pagetables:2132kB sec_pagetables:0kB all_unreclaimable? no [ 215.007792][ T8686] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 215.046389][ T8686] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.082753][ T8686] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 215.088936][ T8686] Node 0 DMA32 free:1474140kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:21824kB inactive_anon:0kB active_file:66832kB inactive_file:158716kB unevictable:1536kB writepending:152kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:17096kB local_pcp:12268kB free_cma:0kB [ 215.121453][ T8686] lowmem_reserve[]: 0 0 1 1 1 [ 215.126249][ T8686] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:1084kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 215.172993][ T8686] lowmem_reserve[]: 0 0 0 0 0 [ 215.177923][ T8686] Node 1 Normal free:3890092kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19520kB local_pcp:10720kB free_cma:0kB [ 215.219899][ T8686] lowmem_reserve[]: 0 0 0 0 0 [ 215.232919][ T8686] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 215.246162][ T8686] Node 0 DMA32: 364*4kB (ME) 1644*8kB (UME) 891*16kB (UME) 941*32kB (UME) 391*64kB (UME) 73*128kB (UME) 42*256kB (UME) 29*512kB (UME) 13*1024kB (M) 9*2048kB (UME) 323*4096kB (M) = 1473696kB [ 215.276937][ T8686] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 215.297521][ T8686] Node 1 Normal: 235*4kB (UME) 58*8kB (UME) 41*16kB (UME) 77*32kB (UME) 22*64kB (UME) 7*128kB (UME) 3*256kB (UME) 1*512kB (U) 1*1024kB (E) 1*2048kB (E) 947*4096kB (M) = 3890092kB [ 215.322430][ T8686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.332617][ T8686] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 215.342612][ T8686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.353403][ T8732] syzkaller1: entered promiscuous mode [ 215.358990][ T8732] syzkaller1: entered allmulticast mode [ 215.367929][ T8686] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 215.384437][ T8686] 58072 total pagecache pages [ 215.389649][ T8686] 0 pages in swap cache [ 215.410372][ T8686] Free swap = 124996kB [ 215.422130][ T8686] Total swap = 124996kB [ 215.426319][ T8686] 2097051 pages RAM [ 215.430546][ T8686] 0 pages HighMem/MovableOnly [ 215.435251][ T8686] 421118 pages reserved [ 215.439742][ T8686] 0 pages cma reserved [ 215.834296][ T8749] syzkaller0: entered promiscuous mode [ 215.845635][ T8749] syzkaller0: entered allmulticast mode [ 215.859224][ T8748] syzkaller0: entered promiscuous mode [ 215.867050][ T8748] syzkaller0: entered allmulticast mode [ 217.359128][ T8771] syzkaller1: entered promiscuous mode [ 217.388519][ T8771] syzkaller1: entered allmulticast mode [ 217.489710][ T8775] syzkaller0: entered promiscuous mode [ 217.495233][ T8775] syzkaller0: entered allmulticast mode [ 217.688513][ T8782] syzkaller0: entered promiscuous mode [ 217.694427][ T8782] syzkaller0: entered allmulticast mode [ 221.125310][ T8822] syzkaller0: entered promiscuous mode [ 221.131020][ T8822] syzkaller0: entered allmulticast mode [ 224.790769][ T8879] syzkaller0: entered promiscuous mode [ 224.796371][ T8879] syzkaller0: entered allmulticast mode [ 228.210533][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.860'. [ 229.273656][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'. [ 229.599849][ T8939] syzkaller0: entered promiscuous mode [ 229.606366][ T8939] syzkaller0: entered allmulticast mode [ 233.020980][ T8977] netlink: 40 bytes leftover after parsing attributes in process `syz.0.881'. [ 235.771343][ T9015] ip_tables: iptables: counters copy to user failed while replacing table [ 235.814384][ T9015] netlink: 'syz.0.889': attribute type 1 has an invalid length. [ 235.860567][ T9015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.873210][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.890'. [ 235.923926][ T9021] bond1: (slave gretap1): making interface the new active one [ 235.942102][ T9021] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 236.164537][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.893'. [ 238.550180][ T9051] netlink: 'syz.1.901': attribute type 1 has an invalid length. [ 238.560159][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.901'. [ 239.106456][ T9082] netlink: 104 bytes leftover after parsing attributes in process `syz.2.913'. [ 240.057788][ T9127] dummy0: entered promiscuous mode [ 240.064819][ T9127] dummy0: left promiscuous mode [ 240.417657][ T9148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.938'. [ 240.683935][ T9159] syzkaller0: entered promiscuous mode [ 240.695016][ T9159] syzkaller0: entered allmulticast mode [ 240.723251][ T9159] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 240.862113][ T9167] netlink: 60 bytes leftover after parsing attributes in process `syz.0.946'. [ 240.888492][ T9167] netlink: 84 bytes leftover after parsing attributes in process `syz.0.946'. [ 240.972611][ T9172] netlink: 24 bytes leftover after parsing attributes in process `syz.3.947'. [ 241.233651][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 241.246477][ T9184] netlink: 16 bytes leftover after parsing attributes in process `syz.2.952'. [ 241.257996][ T9186] netlink: 40 bytes leftover after parsing attributes in process `syz.3.951'. [ 241.268240][ T9186] netlink: 40 bytes leftover after parsing attributes in process `syz.3.951'. [ 241.321249][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 241.420030][ T9191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.957'. [ 241.468503][ T9186] netlink: 32 bytes leftover after parsing attributes in process `syz.3.951'. [ 243.153622][ T9219] netlink: 20 bytes leftover after parsing attributes in process `syz.2.963'. [ 246.069159][ T9313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.994'. [ 246.085528][ T9313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.994'. [ 246.806273][ T9351] syzkaller1: entered promiscuous mode [ 246.811997][ T9351] syzkaller1: entered allmulticast mode [ 246.951374][ T9358] syzkaller0: entered promiscuous mode [ 246.962585][ T9358] syzkaller0: entered allmulticast mode [ 247.144797][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 248.014981][ T9405] syzkaller1: entered promiscuous mode [ 248.025684][ T9405] syzkaller1: entered allmulticast mode [ 248.293642][ T9419] syzkaller0: entered promiscuous mode [ 248.299410][ T9419] syzkaller0: entered allmulticast mode [ 248.623705][ T9431] syzkaller0: entered promiscuous mode [ 248.629553][ T9431] syzkaller0: entered allmulticast mode [ 248.653377][ T9431] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 248.734553][ T9435] syzkaller1: entered promiscuous mode [ 248.740831][ T9435] syzkaller1: entered allmulticast mode [ 249.444062][ T9459] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1052'. [ 249.459229][ T9456] syzkaller0: entered promiscuous mode [ 249.465988][ T9456] syzkaller0: entered allmulticast mode [ 249.504686][ T9456] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 249.873456][ T9469] syzkaller0: entered promiscuous mode [ 249.881764][ T9469] syzkaller0: entered allmulticast mode [ 250.473104][ T9483] syzkaller0: entered promiscuous mode [ 250.488063][ T9483] syzkaller0: entered allmulticast mode [ 250.521902][ T9483] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 250.679282][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1066'. [ 250.881682][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1070'. [ 250.938819][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1070'. [ 251.409141][ T9514] syzkaller1: entered promiscuous mode [ 251.415861][ T9514] syzkaller1: entered allmulticast mode [ 251.730395][ T9523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1081'. [ 251.768313][ T9523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1081'. [ 251.917069][ T9527] 8021q: adding VLAN 0 to HW filter on device bond2 [ 252.359371][ T9527] bond2 (unregistering): Released all slaves [ 252.462701][ T9542] syzkaller1: entered promiscuous mode [ 252.478300][ T9542] syzkaller1: entered allmulticast mode [ 252.820702][ T9555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1093'. [ 252.908415][ T9558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1094'. [ 252.969481][ T9558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1094'. [ 255.044931][ T9595] syzkaller0: entered promiscuous mode [ 255.068245][ T9595] syzkaller0: entered allmulticast mode [ 255.142707][ T9595] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 255.366202][ T9602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1106'. [ 256.838741][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.845114][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.370303][ T9633] syzkaller0: entered promiscuous mode [ 257.375849][ T9633] syzkaller0: entered allmulticast mode [ 257.450790][ T9640] syzkaller1: entered promiscuous mode [ 257.466505][ T9640] syzkaller1: entered allmulticast mode [ 257.486163][ T9633] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 258.079062][ T9660] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1122'. [ 258.323915][ T9672] syzkaller0: entered promiscuous mode [ 258.329780][ T9672] syzkaller0: entered allmulticast mode [ 258.497337][ T9674] syzkaller1: entered promiscuous mode [ 258.514961][ T9674] syzkaller1: entered allmulticast mode [ 258.849817][ T9698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1132'. [ 258.915565][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1133'. [ 258.967403][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1132'. [ 259.259399][ T9711] syzkaller0: entered promiscuous mode [ 259.264921][ T9711] syzkaller0: entered allmulticast mode [ 259.279470][ T9715] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1140'. [ 259.359372][ T9717] syzkaller1: entered promiscuous mode [ 259.376493][ T9717] syzkaller1: entered allmulticast mode [ 259.682760][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1145'. [ 260.146320][ T9757] syzkaller0: entered promiscuous mode [ 260.175307][ T9757] syzkaller0: entered allmulticast mode [ 260.393879][ T9770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1158'. [ 260.411840][ T9770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1158'. [ 262.623891][ T9805] syzkaller0: entered promiscuous mode [ 262.640844][ T9805] syzkaller0: entered allmulticast mode [ 264.888632][ T9852] syzkaller0: entered promiscuous mode [ 264.895202][ T9852] syzkaller0: entered allmulticast mode [ 265.634716][ T9880] syzkaller0: entered promiscuous mode [ 265.641551][ T9880] syzkaller0: entered allmulticast mode [ 266.252498][ T9904] syzkaller0: entered promiscuous mode [ 266.260188][ T9904] syzkaller0: entered allmulticast mode [ 266.398775][ T9906] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1201'. [ 266.441906][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1202'. [ 266.622477][ T9910] syzkaller0: entered promiscuous mode [ 266.652566][ T9910] syzkaller0: entered allmulticast mode [ 267.575036][ T9840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.259371][ T9932] syzkaller0: entered promiscuous mode [ 268.264904][ T9932] syzkaller0: entered allmulticast mode [ 268.296073][ T9936] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1212'. [ 268.370469][ T9938] tipc: Enabled bearer , priority 0 [ 268.378863][ T9938] syzkaller0: entered promiscuous mode [ 268.384375][ T9938] syzkaller0: entered allmulticast mode [ 268.406126][ T9938] tipc: Resetting bearer [ 268.464163][ T9937] tipc: Resetting bearer [ 268.504267][ T9937] tipc: Disabling bearer [ 271.811977][ T9976] syzkaller0: entered promiscuous mode [ 271.824512][ T9976] syzkaller0: entered allmulticast mode [ 271.935793][ T9985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1228'. [ 271.997543][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1228'. [ 273.707960][T10004] syzkaller0: entered promiscuous mode [ 273.716054][T10004] syzkaller0: entered allmulticast mode [ 275.603193][T10034] tipc: Enabling of bearer rejected, failed to enable media [ 277.715400][T10110] tipc: Started in network mode [ 277.723075][T10110] tipc: Node identity fe4639bb6216, cluster identity 4711 [ 277.732283][T10110] tipc: Enabled bearer , priority 0 [ 277.748598][T10110] syzkaller0: entered promiscuous mode [ 277.754326][T10110] syzkaller0: entered allmulticast mode [ 277.770759][T10110] tipc: Resetting bearer [ 277.802265][T10109] tipc: Resetting bearer [ 277.845273][T10109] tipc: Disabling bearer [ 277.907964][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 278.040890][T10122] syzkaller0: entered promiscuous mode [ 278.046426][T10122] syzkaller0: entered allmulticast mode [ 278.100485][T10120] syzkaller0: entered promiscuous mode [ 278.106049][T10120] syzkaller0: entered allmulticast mode [ 280.115387][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1269'. [ 280.156043][T10170] syzkaller0: entered promiscuous mode [ 280.163486][T10170] syzkaller0: entered allmulticast mode [ 280.451628][T10177] syzkaller0: entered promiscuous mode [ 280.463072][T10177] syzkaller0: entered allmulticast mode [ 282.372752][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1283'. [ 282.398616][T10223] syzkaller0: entered promiscuous mode [ 282.408480][T10223] syzkaller0: entered allmulticast mode [ 282.733660][T10240] syzkaller0: entered promiscuous mode [ 282.745058][T10240] syzkaller0: entered allmulticast mode [ 284.550582][ T5090] Bluetooth: hci3: command 0x0406 tx timeout [ 284.832981][T10245] syzkaller0: entered promiscuous mode [ 284.853926][T10245] syzkaller0: entered allmulticast mode [ 286.758702][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1296'. [ 286.860221][T10286] syzkaller0: entered promiscuous mode [ 286.878789][T10286] syzkaller0: entered allmulticast mode [ 288.796379][T10298] syzkaller0: entered promiscuous mode [ 288.805774][T10298] syzkaller0: entered allmulticast mode [ 288.871123][T10300] netlink: 'syz.2.1304': attribute type 1 has an invalid length. [ 290.893500][T10300] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1304'. [ 291.137182][T10326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1310'. [ 292.843146][T10334] syzkaller0: entered promiscuous mode [ 292.862741][T10334] syzkaller0: entered allmulticast mode [ 293.205565][T10338] syzkaller1: entered promiscuous mode [ 293.218172][T10338] syzkaller1: entered allmulticast mode [ 293.297444][T10340] syzkaller0: entered promiscuous mode [ 293.328343][T10340] syzkaller0: entered allmulticast mode [ 293.746000][T10348] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1312'. [ 297.040888][T10374] IPv6: Can't replace route, no match found [ 297.127441][T10373] syzkaller1: entered promiscuous mode [ 297.149076][T10373] syzkaller1: entered allmulticast mode [ 297.367352][T10385] syzkaller0: entered promiscuous mode [ 297.375518][T10385] syzkaller0: entered allmulticast mode [ 297.565225][T10389] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1332'. [ 298.036739][T10405] syzkaller1: entered promiscuous mode [ 298.055306][T10405] syzkaller1: entered allmulticast mode [ 298.580823][T10422] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1345'. [ 299.056239][T10437] syzkaller1: entered promiscuous mode [ 299.078552][T10437] syzkaller1: entered allmulticast mode [ 299.447477][T10448] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1356'. [ 299.913192][T10454] bridge0: entered promiscuous mode [ 300.412553][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1363'. [ 300.436865][T10469] syzkaller1: entered promiscuous mode [ 300.443169][T10469] syzkaller1: entered allmulticast mode [ 300.806587][T10488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1370'. [ 301.191194][T10500] syzkaller1: entered promiscuous mode [ 301.196850][T10500] syzkaller1: entered allmulticast mode [ 301.213257][T10498] syzkaller0: entered promiscuous mode [ 301.226373][T10498] syzkaller0: entered allmulticast mode [ 301.410239][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1377'. [ 301.568646][T10513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1379'. [ 301.676950][T10519] netlink: 'syz.3.1383': attribute type 1 has an invalid length. [ 301.719090][T10519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.781899][T10519] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 301.795956][T10516] syzkaller0: entered promiscuous mode [ 301.806916][T10516] syzkaller0: entered allmulticast mode [ 301.815926][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1383'. [ 301.836900][T10519] bridge1: entered promiscuous mode [ 301.857496][T10519] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 302.052976][T10531] syzkaller1: entered promiscuous mode [ 302.061122][T10531] syzkaller1: entered allmulticast mode [ 302.143770][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1387'. [ 302.251739][T10545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1391'. [ 302.310918][T10545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1391'. [ 302.506603][T10558] syzkaller0: entered promiscuous mode [ 302.521612][T10558] syzkaller0: entered allmulticast mode [ 302.824079][T10568] syzkaller1: entered promiscuous mode [ 302.836354][T10568] syzkaller1: entered allmulticast mode [ 302.853788][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1400'. [ 303.821605][T10601] syzkaller1: entered promiscuous mode [ 303.846196][T10601] syzkaller1: entered allmulticast mode [ 304.470628][T10624] __nla_validate_parse: 3 callbacks suppressed [ 304.470644][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1421'. [ 304.574689][T10626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1423'. [ 304.741892][T10630] syzkaller1: entered promiscuous mode [ 304.751863][T10630] syzkaller1: entered allmulticast mode [ 304.898388][T10632] tipc: Enabled bearer , priority 0 [ 304.938345][T10632] syzkaller0: entered promiscuous mode [ 304.943875][T10632] syzkaller0: entered allmulticast mode [ 304.998890][T10632] tipc: Resetting bearer [ 305.024601][T10631] tipc: Resetting bearer [ 305.059768][T10631] tipc: Disabling bearer [ 305.136939][T10634] syzkaller0: entered promiscuous mode [ 305.143018][T10634] syzkaller0: entered allmulticast mode [ 305.372057][T10645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1431'. [ 305.434180][T10647] batman_adv: batadv0: Adding interface: syzkaller0 [ 305.448736][T10647] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.498317][T10647] batman_adv: batadv0: Interface activated: syzkaller0 [ 305.514616][T10649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1433'. [ 305.533755][T10646] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 305.564120][T10646] batman_adv: batadv0: Removing interface: syzkaller0 [ 305.741832][T10656] syzkaller1: entered promiscuous mode [ 305.747366][T10656] syzkaller1: entered allmulticast mode [ 306.248342][T10673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1443'. [ 306.361192][T10677] syzkaller1: entered promiscuous mode [ 306.377653][T10677] syzkaller1: entered allmulticast mode [ 306.393566][T10679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1444'. [ 306.639656][T10686] syzkaller1: entered promiscuous mode [ 306.645190][T10686] syzkaller1: entered allmulticast mode [ 306.858791][T10694] ip_tables: iptables: counters copy to user failed while replacing table [ 307.268504][T10699] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1454'. [ 308.678512][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1456'. [ 308.916732][T10720] warning: `syz.1.1460' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 309.007114][T10722] syzkaller1: entered promiscuous mode [ 309.020596][T10722] syzkaller1: entered allmulticast mode [ 309.367967][T10733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1465'. [ 311.317915][T10756] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1473'. [ 313.057762][T10767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1477'. [ 316.040615][T10830] syzkaller0: entered promiscuous mode [ 316.046151][T10830] syzkaller0: entered allmulticast mode [ 316.243008][T10836] tipc: Cannot configure node identity twice [ 316.733004][T10858] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1503'. [ 316.885430][T10862] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 316.923536][T10862] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1504'. [ 317.061744][T10869] syzkaller0: entered promiscuous mode [ 317.068637][T10869] syzkaller0: entered allmulticast mode [ 317.273015][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.280531][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.373274][T10919] syzkaller0: entered promiscuous mode [ 319.379065][T10919] syzkaller0: entered allmulticast mode [ 321.116716][T10942] syzkaller0: entered promiscuous mode [ 321.122599][T10942] syzkaller0: entered allmulticast mode [ 323.118454][T10991] syzkaller0: entered promiscuous mode [ 323.123979][T10991] syzkaller0: entered allmulticast mode [ 324.846351][T11004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'. [ 324.952783][T11025] syzkaller0: entered promiscuous mode [ 324.958463][T11025] syzkaller0: entered allmulticast mode [ 325.005364][T11029] ip_tables: iptables: counters copy to user failed while replacing table [ 325.205180][T11035] tipc: Enabled bearer , priority 0 [ 325.228569][T11035] syzkaller0: entered promiscuous mode [ 325.234099][T11035] syzkaller0: entered allmulticast mode [ 325.304264][T11035] tipc: Resetting bearer [ 325.329467][T11034] tipc: Resetting bearer [ 325.382467][T11034] tipc: Disabling bearer [ 325.545457][T11054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'. [ 326.142825][T11074] tipc: Enabled bearer , priority 0 [ 326.167020][T11074] syzkaller0: entered promiscuous mode [ 326.173256][T11074] syzkaller0: entered allmulticast mode [ 326.221469][T11074] tipc: Resetting bearer [ 326.246319][T11073] tipc: Resetting bearer [ 326.284160][T11073] tipc: Disabling bearer [ 326.483829][T11086] syzkaller0: entered promiscuous mode [ 326.499558][T11086] syzkaller0: entered allmulticast mode [ 326.742291][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1573'. [ 327.103650][T11106] syzkaller0: entered promiscuous mode [ 327.117791][T11106] syzkaller0: entered allmulticast mode [ 327.275248][T11113] syzkaller0: entered promiscuous mode [ 327.296324][T11113] syzkaller0: entered allmulticast mode [ 327.744211][T11136] tipc: Cannot configure node identity twice [ 327.846122][T11130] syzkaller0: entered promiscuous mode [ 327.858205][T11130] syzkaller0: entered allmulticast mode [ 328.053859][T11147] ip_tables: iptables: counters copy to user failed while replacing table [ 328.081723][T11147] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 328.109092][T11144] syzkaller0: entered promiscuous mode [ 328.114626][T11144] syzkaller0: entered allmulticast mode [ 328.123992][T11143] syzkaller0: entered promiscuous mode [ 328.133193][T11143] syzkaller0: entered allmulticast mode [ 329.938232][T11179] tipc: Cannot configure node identity twice [ 329.985690][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1603'. [ 330.312913][T11186] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 330.324851][T11194] syzkaller0: entered promiscuous mode [ 330.331550][T11194] syzkaller0: entered allmulticast mode [ 330.622264][T11206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1613'. [ 330.853125][T11203] tipc: Enabling of bearer rejected, failed to enable media [ 330.998897][T11222] netlink: 'syz.3.1616': attribute type 1 has an invalid length. [ 331.106415][T11226] syzkaller0: entered promiscuous mode [ 331.138375][T11226] syzkaller0: entered allmulticast mode [ 331.217907][T11228] tipc: Enabled bearer , priority 0 [ 331.301696][T11228] syzkaller0: entered promiscuous mode [ 331.307364][T11228] syzkaller0: entered allmulticast mode [ 331.333935][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1622'. [ 331.356156][T11228] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 331.398971][T11235] tipc: Resetting bearer [ 331.444149][T11227] tipc: Resetting bearer [ 331.471466][T11227] tipc: Disabling bearer [ 331.726277][T11255] syzkaller0: entered promiscuous mode [ 331.732644][T11255] syzkaller0: entered allmulticast mode [ 331.827008][T11261] syzkaller0: entered promiscuous mode [ 331.832861][T11261] syzkaller0: entered allmulticast mode [ 331.960237][T11263] tc action pedit offset must be on 32 bit boundaries [ 332.403516][T11282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1640'. [ 332.443477][T11283] syzkaller0: entered promiscuous mode [ 332.449591][T11283] syzkaller0: entered allmulticast mode [ 332.647061][T11295] tipc: Cannot configure node identity twice [ 333.309432][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1652'. [ 333.450100][T11329] syzkaller0: entered promiscuous mode [ 333.456031][T11329] syzkaller0: entered allmulticast mode [ 333.733261][T11335] syzkaller0: entered promiscuous mode [ 333.739299][T11335] syzkaller0: entered allmulticast mode [ 333.786327][T11345] netlink: 'syz.1.1660': attribute type 1 has an invalid length. [ 335.558656][T11375] syzkaller0: entered promiscuous mode [ 335.578271][T11375] syzkaller0: entered allmulticast mode [ 336.037359][T11402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1680'. [ 336.176870][T11406] syzkaller0: entered promiscuous mode [ 336.193225][T11406] syzkaller0: entered allmulticast mode [ 337.502699][T11417] tipc: Enabled bearer , priority 0 [ 337.516361][T11417] syzkaller0: entered promiscuous mode [ 337.535696][T11417] syzkaller0: entered allmulticast mode [ 337.597459][T11417] tipc: Resetting bearer [ 337.638845][T11416] tipc: Resetting bearer [ 337.666619][T11416] tipc: Disabling bearer [ 337.843093][T11425] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1691'. [ 337.893080][T11425] syzkaller1: entered promiscuous mode [ 337.898869][T11425] syzkaller1: entered allmulticast mode [ 339.544741][T11439] syzkaller0: entered promiscuous mode [ 339.564314][T11439] syzkaller0: entered allmulticast mode [ 340.954393][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1705'. [ 340.968073][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1705'. [ 341.012297][T11458] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 341.155618][T11458] xt_CT: No such helper "netbios-ns" [ 341.161589][T11465] syzkaller0: entered promiscuous mode [ 341.172988][T11465] syzkaller0: entered allmulticast mode [ 341.809726][T11482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1712'. [ 342.168199][T11493] syzkaller0: entered promiscuous mode [ 342.173986][T11493] syzkaller0: entered allmulticast mode [ 342.496113][T11510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1722'. [ 342.641751][T11518] netlink: 'syz.2.1727': attribute type 10 has an invalid length. [ 342.674916][T11518] team0: Port device netdevsim0 added [ 342.838327][T11518] netlink: 'syz.2.1727': attribute type 10 has an invalid length. [ 342.913128][T11518] team0: Port device netdevsim0 removed [ 342.932939][T11518] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 343.037734][T11518] syz.2.1727 (11518) used greatest stack depth: 20392 bytes left [ 343.192215][T11539] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 343.495384][T11558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1735'. [ 345.202442][T11576] netlink: 'syz.2.1742': attribute type 1 has an invalid length. [ 345.450732][T11592] netlink: 'syz.3.1748': attribute type 10 has an invalid length. [ 345.512505][T11592] team0: Port device netdevsim0 added [ 345.734816][T11606] netlink: 'syz.1.1755': attribute type 1 has an invalid length. [ 345.745194][T11606] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1755'. [ 345.972399][T11617] syzkaller0: entered promiscuous mode [ 345.991254][T11617] syzkaller0: entered allmulticast mode [ 346.055991][T11621] lo: entered allmulticast mode [ 346.183061][T11620] lo: left allmulticast mode [ 346.429852][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1772'. [ 346.575891][T11648] syzkaller0: entered promiscuous mode [ 346.603481][T11648] syzkaller0: entered allmulticast mode [ 347.049513][T11674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1782'. [ 347.082957][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1782'. [ 347.198062][T11682] syzkaller0: entered promiscuous mode [ 347.206381][T11682] syzkaller0: entered allmulticast mode [ 347.779141][T11717] netlink: 'syz.3.1802': attribute type 1 has an invalid length. [ 347.792154][T11717] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1802'. [ 348.077148][T11727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1807'. [ 348.088745][T11727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1807'. [ 348.258229][T11735] netlink: 'syz.3.1811': attribute type 1 has an invalid length. [ 348.278559][T11735] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1811'. [ 348.602649][T11749] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1817'. [ 348.654464][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1817'. [ 348.872692][T11763] lo: entered allmulticast mode [ 348.894466][T11762] lo: left allmulticast mode [ 348.902713][T11765] netem: change failed [ 349.023563][T11771] syzkaller0: entered promiscuous mode [ 349.033234][T11771] syzkaller0: entered allmulticast mode [ 349.230586][T11776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1828'. [ 349.294930][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1828'. [ 349.608306][T11797] syzkaller0: entered promiscuous mode [ 349.613995][T11797] syzkaller0: entered allmulticast mode [ 349.774449][T11806] syzkaller0: entered promiscuous mode [ 349.788241][T11806] syzkaller0: entered allmulticast mode [ 349.876457][T11813] syzkaller0: entered promiscuous mode [ 349.882989][T11813] syzkaller0: entered allmulticast mode [ 350.571510][T11846] syzkaller0: entered promiscuous mode [ 350.577049][T11846] syzkaller0: entered allmulticast mode [ 350.677829][T11848] syzkaller0: entered promiscuous mode [ 350.702159][T11848] syzkaller0: entered allmulticast mode [ 350.769237][T11850] lo: entered allmulticast mode [ 350.786212][T11849] lo: left allmulticast mode [ 350.838916][T11852] syzkaller0: entered promiscuous mode [ 350.848716][T11852] syzkaller0: entered allmulticast mode [ 351.175080][T11866] syzkaller0: entered promiscuous mode [ 351.191323][T11866] syzkaller0: entered allmulticast mode [ 351.223424][T11869] batman_adv: batadv0: Adding interface: syzkaller0 [ 351.253575][T11869] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.305922][T11869] batman_adv: batadv0: Interface activated: syzkaller0 [ 351.371478][T11868] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 351.419070][T11868] batman_adv: batadv0: Removing interface: syzkaller0 [ 351.488551][T11879] syzkaller0: entered promiscuous mode [ 351.494078][T11879] syzkaller0: entered allmulticast mode [ 351.584096][T11882] syzkaller0: entered promiscuous mode [ 351.591011][T11882] syzkaller0: entered allmulticast mode [ 351.678645][T11885] lo: entered allmulticast mode [ 351.700038][T11884] lo: left allmulticast mode [ 351.896415][T11892] syzkaller0: entered promiscuous mode [ 351.904454][T11892] syzkaller0: entered allmulticast mode [ 352.069926][T11901] syzkaller0: entered promiscuous mode [ 352.076031][T11901] syzkaller0: entered allmulticast mode [ 352.208257][T11908] lo: entered allmulticast mode [ 352.215695][T11907] lo: left allmulticast mode [ 352.265786][T11909] syzkaller0: entered promiscuous mode [ 352.275528][T11909] syzkaller0: entered allmulticast mode [ 352.375497][T11911] syzkaller0: entered promiscuous mode [ 352.408172][T11911] syzkaller0: entered allmulticast mode [ 352.880643][T11940] __nla_validate_parse: 5 callbacks suppressed [ 352.880655][T11940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1884'. [ 352.900665][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1884'. [ 353.311734][T11956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1888'. [ 353.811192][T11985] netlink: 'syz.1.1898': attribute type 10 has an invalid length. [ 353.864518][T11985] team0: Port device netdevsim0 added [ 353.984631][T11985] netlink: 'syz.1.1898': attribute type 10 has an invalid length. [ 354.078843][T11985] team0: Port device netdevsim0 removed [ 354.087774][T11985] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 354.684447][T12025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1912'. [ 354.728533][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1912'. [ 355.004415][T12035] netlink: 'syz.1.1916': attribute type 10 has an invalid length. [ 355.140120][T12035] bond0: (slave netdevsim0): Releasing backup interface [ 355.163640][T12035] team0: Port device netdevsim0 added [ 355.192427][T12039] netlink: 'syz.1.1916': attribute type 10 has an invalid length. [ 355.235786][T12039] team0: Port device netdevsim0 removed [ 355.276680][T12039] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 356.973333][T12051] syzkaller0: entered promiscuous mode [ 356.978965][T12051] syzkaller0: entered allmulticast mode [ 358.462116][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1924'. [ 358.472285][T12081] netlink: 'syz.3.1928': attribute type 10 has an invalid length. [ 358.502593][T12084] netlink: 'syz.3.1928': attribute type 10 has an invalid length. [ 358.568581][T12084] team0: Port device netdevsim0 removed [ 358.589437][T12084] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 358.873429][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1937'. [ 358.905960][T12106] syzkaller0: entered promiscuous mode [ 358.919115][T12106] syzkaller0: entered allmulticast mode [ 359.092968][T12114] syzkaller0: entered promiscuous mode [ 359.098563][T12114] syzkaller0: entered allmulticast mode [ 359.232490][T12122] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 359.352929][T12131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1948'. [ 359.520212][T12139] syzkaller0: entered promiscuous mode [ 359.529713][T12139] syzkaller0: entered allmulticast mode [ 359.826049][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1959'. [ 360.032414][T12163] syzkaller0: entered promiscuous mode [ 360.038844][T12163] syzkaller0: entered allmulticast mode [ 361.970449][T12218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1977'. [ 362.104363][T12222] syzkaller0: entered promiscuous mode [ 362.113763][T12222] syzkaller0: entered allmulticast mode [ 362.129275][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.150092][T12222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.290345][T12232] syzkaller0: entered promiscuous mode [ 362.303214][T12232] syzkaller0: entered allmulticast mode [ 363.893716][T12239] netlink: 'syz.1.1986': attribute type 10 has an invalid length. [ 363.908023][T12239] bond0: (slave netdevsim0): Releasing backup interface [ 363.928862][T12239] team0: Port device netdevsim0 added [ 363.934664][T12241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1987'. [ 363.947853][T12242] netlink: 'syz.1.1986': attribute type 10 has an invalid length. [ 363.976181][T12242] team0: Port device netdevsim0 removed [ 363.992774][T12242] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 364.124788][T12265] lo: entered allmulticast mode [ 364.534561][T12285] netlink: 'syz.3.1995': attribute type 1 has an invalid length. [ 364.777888][T12294] netlink: 'syz.2.1999': attribute type 10 has an invalid length. [ 364.820146][T12294] bond0: (slave netdevsim0): Releasing backup interface [ 364.834932][T12294] team0: Port device netdevsim0 added [ 364.933268][T12295] syzkaller0: entered promiscuous mode [ 364.943669][T12295] syzkaller0: entered allmulticast mode [ 364.956907][T12294] netlink: 'syz.2.1999': attribute type 10 has an invalid length. [ 364.987329][T12294] team0: Port device netdevsim0 removed [ 365.013726][T12294] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 366.815423][T12300] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2000'. [ 368.704008][T12341] netlink: 'syz.1.2009': attribute type 10 has an invalid length. [ 368.719869][T12341] bond0: (slave netdevsim0): Releasing backup interface [ 368.739320][T12341] team0: Port device netdevsim0 added [ 368.745334][T12347] netlink: 'syz.1.2009': attribute type 10 has an invalid length. [ 368.771710][T12347] team0: Port device netdevsim0 removed [ 368.804649][T12347] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 369.089310][T12391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2017'. [ 369.914995][ T5776] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 370.042098][T12421] netlink: 'syz.2.2024': attribute type 10 has an invalid length. [ 370.075731][T12421] bond0: (slave netdevsim0): Releasing backup interface [ 370.096703][T12421] team0: Port device netdevsim0 added [ 370.136335][T12421] netlink: 'syz.2.2024': attribute type 10 has an invalid length. [ 370.157926][T12421] team0: Port device netdevsim0 removed [ 370.174558][T12421] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 370.276715][T12431] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2027'. [ 370.318483][T12429] netlink: 'syz.3.2026': attribute type 1 has an invalid length. [ 370.331938][T12429] netlink: 'syz.3.2026': attribute type 2 has an invalid length. [ 371.214922][T12465] netlink: 'syz.1.2036': attribute type 10 has an invalid length. [ 371.274530][T12465] bond0: (slave netdevsim0): Releasing backup interface [ 371.341074][T12465] team0: Port device netdevsim0 added [ 371.365431][T12466] netlink: 'syz.1.2036': attribute type 10 has an invalid length. [ 371.413214][T12466] team0: Failed to send options change via netlink (err -105) [ 371.443853][T12466] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 371.454202][T12466] team0: Port device netdevsim0 removed [ 371.469491][T12466] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 373.896573][T12507] netlink: 'syz.2.2049': attribute type 10 has an invalid length. [ 373.910102][T12507] bond0: (slave netdevsim0): Releasing backup interface [ 373.926938][T12507] team0: Port device netdevsim0 added [ 373.935836][T12508] netlink: 'syz.2.2049': attribute type 10 has an invalid length. [ 373.957069][T12508] team0: Port device netdevsim0 removed [ 373.973707][T12508] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 374.100287][T12528] syzkaller0: entered promiscuous mode [ 374.106375][T12528] syzkaller0: entered allmulticast mode [ 374.563961][T12555] 0: reclassify loop, rule prio 0, protocol 03 [ 374.941924][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2067'. [ 375.015598][T12577] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2068'. [ 375.037914][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2068'. [ 375.267308][T12587] syzkaller0: entered promiscuous mode [ 375.281952][T12587] syzkaller0: entered allmulticast mode [ 377.780768][T12650] netlink: 404 bytes leftover after parsing attributes in process `syz.2.2091'. [ 377.810595][T12652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2092'. [ 377.873456][T12654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2091'. [ 377.899401][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2091'. [ 377.933774][T12650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.000823][T12657] syzkaller0: entered promiscuous mode [ 378.006353][T12657] syzkaller0: entered allmulticast mode [ 378.463612][T12679] syzkaller0: entered promiscuous mode [ 378.469387][T12679] syzkaller0: entered allmulticast mode [ 378.576183][T12681] syzkaller0: entered promiscuous mode [ 378.585220][T12681] syzkaller0: entered allmulticast mode [ 378.712092][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.719901][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.746831][T12689] syzkaller0: entered promiscuous mode [ 378.754116][T12689] syzkaller0: entered allmulticast mode [ 379.204890][T12712] syzkaller0: entered promiscuous mode [ 379.221770][T12712] syzkaller0: entered allmulticast mode [ 379.502499][T12727] syzkaller0: entered promiscuous mode [ 379.514747][T12727] syzkaller0: entered allmulticast mode [ 380.007757][T12738] syzkaller0: entered promiscuous mode [ 380.013584][T12738] syzkaller0: entered allmulticast mode [ 382.044039][T12790] syzkaller0: entered promiscuous mode [ 382.050025][T12790] syzkaller0: entered allmulticast mode [ 383.952307][T12817] syzkaller0: entered promiscuous mode [ 383.962817][T12817] syzkaller0: entered allmulticast mode [ 385.834219][T12873] syzkaller0: entered promiscuous mode [ 385.859189][T12873] syzkaller0: entered allmulticast mode [ 387.595953][T12909] syzkaller0: entered promiscuous mode [ 387.612283][T12909] syzkaller0: entered allmulticast mode [ 387.923963][T12925] syzkaller0: entered promiscuous mode [ 387.934614][T12925] syzkaller0: entered allmulticast mode [ 388.016391][T12926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2163'. [ 388.543883][T12949] Bluetooth: MGMT ver 1.22 [ 389.455965][T12955] netlink: 264 bytes leftover after parsing attributes in process `syz.0.2173'. [ 389.470769][T12955] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2173'. [ 389.873599][T12944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2170'. [ 390.062420][T12968] ip_tables: iptables: counters copy to user failed while replacing table [ 390.487117][T12994] vcan0: tx address claim with dlc 0 [ 391.171597][T13031] ip_tables: iptables: counters copy to user failed while replacing table [ 391.253417][T13036] syzkaller0: entered promiscuous mode [ 391.259284][T13036] syzkaller0: entered allmulticast mode [ 391.925332][T13068] syzkaller0: entered promiscuous mode [ 391.942746][T13068] syzkaller0: entered allmulticast mode [ 392.318580][T13085] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 392.533263][T13090] syzkaller0: entered promiscuous mode [ 392.550428][T13090] syzkaller0: entered allmulticast mode [ 393.139848][ T5090] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 393.163047][ T5090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 393.171379][ T5090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 393.198002][ T5090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 393.205971][ T5090] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 393.214154][ T5090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 394.855876][ T1110] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.052052][ T1110] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.100223][T13138] vcan0: tx address claim with dlc 0 [ 395.116529][T13136] lo: entered allmulticast mode [ 395.201819][ T1110] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.251037][T13135] lo: left allmulticast mode [ 395.256436][T13104] chnl_net:caif_netlink_parms(): no params data found [ 395.268382][ T5776] Bluetooth: hci2: command tx timeout [ 395.358694][T13143] syzkaller0: entered promiscuous mode [ 395.364343][T13143] syzkaller0: entered allmulticast mode [ 395.393006][ T1110] bond0: (slave netdevsim0): Releasing backup interface [ 395.411192][ T1110] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.068054][T13168] vcan0: tx address claim with dlc 4 [ 397.145212][T13104] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.166819][T13104] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.183884][T13104] bridge_slave_0: entered allmulticast mode [ 397.202989][T13104] bridge_slave_0: entered promiscuous mode [ 397.275860][T13104] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.294662][T13104] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.305237][T13104] bridge_slave_1: entered allmulticast mode [ 397.320140][T13104] bridge_slave_1: entered promiscuous mode [ 397.348355][ T5776] Bluetooth: hci2: command tx timeout [ 397.414550][T13183] lo: entered allmulticast mode [ 397.432172][T13104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.475629][T13179] lo: left allmulticast mode [ 397.510842][T13104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.614425][ T1110] tipc: Left network mode [ 397.642901][T13104] team0: Port device team_slave_0 added [ 397.676426][T13104] team0: Port device team_slave_1 added [ 397.929951][T13202] syzkaller0: entered promiscuous mode [ 397.937906][T13202] syzkaller0: entered allmulticast mode [ 398.053515][T13104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.069805][T13104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.116173][T13104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.121880][T13210] vcan0: tx address claim with dlc 4 [ 398.323721][T13104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.345101][T13104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.390070][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2249'. [ 398.390397][T13104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.529379][T13222] syzkaller0: entered promiscuous mode [ 398.534022][T13229] syz.3.2252[13229]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 398.537870][T13222] syzkaller0: entered allmulticast mode [ 398.596702][T13229] loop3: detected capacity change from 0 to 512 [ 398.671305][T13092] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 399.428364][ T5776] Bluetooth: hci2: command tx timeout [ 400.213348][T13104] hsr_slave_0: entered promiscuous mode [ 400.248962][T13104] hsr_slave_1: entered promiscuous mode [ 400.270527][T13104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.287517][T13104] Cannot create hsr debugfs directory [ 400.307061][T13245] vcan0: tx address claim with dlc 4 [ 400.324183][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2257'. [ 400.751650][T13264] syzkaller0: entered promiscuous mode [ 400.763869][T13264] syzkaller0: entered allmulticast mode [ 400.894224][T13271] loop1: detected capacity change from 0 to 512 [ 400.952035][T13271] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 400.969456][T13271] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 401.038495][T13271] EXT4-fs (loop1): 1 truncate cleaned up [ 401.045659][T13271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.415235][ T1110] hsr_slave_0: left promiscuous mode [ 401.453230][ T1110] hsr_slave_1: left promiscuous mode [ 401.463905][T13288] process 'syz.1.2261' launched './file0' with NULL argv: empty string added [ 401.523434][ T5776] Bluetooth: hci2: command tx timeout [ 401.549374][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.605856][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.821953][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.868912][T13296] vcan0: tx address claim with dlc 6 [ 401.878243][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.887817][ T1110] bridge_slave_1: left allmulticast mode [ 401.893609][ T1110] bridge_slave_1: left promiscuous mode [ 401.900586][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.901482][ T5786] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 401.979190][ T1110] bridge_slave_0: left allmulticast mode [ 401.997453][ T1110] bridge_slave_0: left promiscuous mode [ 402.009753][ T5786] EXT4-fs (loop1): Remounting filesystem read-only [ 402.028681][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.212720][ T1110] veth1_macvtap: left promiscuous mode [ 402.219836][ T1110] veth0_macvtap: left promiscuous mode [ 402.226218][ T1110] veth1_vlan: left promiscuous mode [ 402.233323][ T1110] veth0_vlan: left promiscuous mode [ 402.746198][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 402.789406][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 402.832407][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.871478][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.123782][ T1110] bond0 (unregistering): Released all slaves [ 403.185043][T13305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2267'. [ 403.280751][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2267'. [ 403.334636][T13309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2268'. [ 403.558551][T13286] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.918023][ T1110] IPVS: stop unused estimator thread 0... [ 404.205370][T13330] vcan0: tx address claim with dlc 6 [ 404.291842][ T1110] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.490670][ T1110] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.608413][T13343] syzkaller0: entered promiscuous mode [ 404.615484][T13343] syzkaller0: entered allmulticast mode [ 404.698544][ T1110] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.716016][T13104] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 404.731836][T13104] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 404.750385][ T5090] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 404.766368][ T5090] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 404.775076][ T5090] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 404.784303][ T5090] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 404.793504][ T5090] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 404.801478][ T5090] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 406.150799][T13104] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 406.160971][T13104] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 406.187719][ T1110] bond0: (slave netdevsim0): Releasing backup interface [ 406.199172][ T1110] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.225952][T13349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2276'. [ 406.260085][T13354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2277'. [ 406.341901][T13354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2277'. [ 406.624748][T13359] syzkaller0: entered promiscuous mode [ 406.642806][T13359] syzkaller0: entered allmulticast mode [ 406.650974][T13364] vcan0: tx address claim with dlc 6 [ 406.673158][ T1110] tipc: Left network mode [ 406.868465][ T5776] Bluetooth: hci3: command tx timeout [ 406.932986][T13346] chnl_net:caif_netlink_parms(): no params data found [ 406.967054][T13104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.067041][T13371] syzkaller0: entered promiscuous mode [ 407.072976][T13371] syzkaller0: entered allmulticast mode [ 408.680368][T13390] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2284'. [ 408.793453][T13104] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.842304][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.850359][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.922938][T13346] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.933282][T13346] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.940784][T13346] bridge_slave_0: entered allmulticast mode [ 408.948776][ T5090] Bluetooth: hci3: command tx timeout [ 408.958366][T13346] bridge_slave_0: entered promiscuous mode [ 409.005274][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.012474][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.027183][T13346] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.037060][T13346] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.044995][T13346] bridge_slave_1: entered allmulticast mode [ 409.059520][T13346] bridge_slave_1: entered promiscuous mode [ 409.153880][T13405] syzkaller0: entered promiscuous mode [ 409.169153][T13405] syzkaller0: entered allmulticast mode [ 409.271620][T13346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.695051][T13346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.831175][T13422] vcan0: tx address claim with dlc 7 [ 410.845116][T13346] team0: Port device team_slave_0 added [ 410.861315][T13346] team0: Port device team_slave_1 added [ 411.017911][T13346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.028744][T13346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.029629][ T5090] Bluetooth: hci3: command tx timeout [ 411.060824][T13346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.091073][T13346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.106955][T13346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.162095][T13346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.189449][T13428] syzkaller0: entered promiscuous mode [ 411.197481][T13428] syzkaller0: entered allmulticast mode [ 411.494419][ T1110] hsr_slave_0: left promiscuous mode [ 411.502787][ T1110] hsr_slave_1: left promiscuous mode [ 411.515946][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.538333][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.559216][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.566669][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.597488][ T1110] bridge_slave_1: left allmulticast mode [ 411.614578][ T1110] bridge_slave_1: left promiscuous mode [ 411.626824][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.652524][ T1110] bridge_slave_0: left allmulticast mode [ 411.658695][ T1110] bridge_slave_0: left promiscuous mode [ 411.669673][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.713437][ T1110] veth1_macvtap: left promiscuous mode [ 411.721387][ T1110] veth0_macvtap: left promiscuous mode [ 411.727148][ T1110] veth1_vlan: left promiscuous mode [ 411.747489][ T1110] veth0_vlan: left promiscuous mode [ 412.607973][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 412.645610][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 412.685403][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.729512][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.957528][ T1110] bond0 (unregistering): Released all slaves [ 413.021960][T13474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2295'. [ 413.108614][ T5090] Bluetooth: hci3: command tx timeout [ 413.128313][T13458] syzkaller0: entered promiscuous mode [ 413.133887][T13458] syzkaller0: entered allmulticast mode [ 413.140580][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2295'. [ 413.274372][T13489] vcan0: tx address claim with dlc 7 [ 414.738022][T13346] hsr_slave_0: entered promiscuous mode [ 414.746186][T13346] hsr_slave_1: entered promiscuous mode [ 415.004517][T13104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.277819][T13104] veth0_vlan: entered promiscuous mode [ 415.312298][ T1110] IPVS: stop unused estimator thread 0... [ 415.326822][T13521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2302'. [ 415.362258][T13346] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 415.380319][T13346] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 415.394674][T13346] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 415.408482][T13346] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 415.426151][T13521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2302'. [ 415.456123][T13104] veth1_vlan: entered promiscuous mode [ 415.535563][T13104] veth0_macvtap: entered promiscuous mode [ 415.566066][T13104] veth1_macvtap: entered promiscuous mode [ 415.605656][T13104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.628042][T13104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.638479][T13104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.649486][T13104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.664671][T13104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.689713][T13530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2303'. [ 415.715446][T13104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.726428][T13104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.737335][T13104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.748794][T13104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.763521][T13104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.791523][T13104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.809756][T13104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.820037][T13104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.831449][T13104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.853460][T13346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.857346][T13533] vcan0: tx address claim with dlc 7 [ 415.925179][T13346] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.976676][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.983908][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.032014][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.039244][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.217912][T13541] syzkaller0: entered promiscuous mode [ 416.226045][T13541] syzkaller0: entered allmulticast mode [ 416.253150][T13539] syzkaller0: entered promiscuous mode [ 416.268585][T13539] syzkaller0: entered allmulticast mode [ 417.767388][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.775969][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.047217][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.086869][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.202030][T13563] 9pnet_fd: Insufficient options for proto=fd [ 419.008018][T13346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.072538][T13577] CUSE: info not properly terminated [ 419.195946][T13583] syzkaller0: entered promiscuous mode [ 419.219044][T13583] syzkaller0: entered allmulticast mode [ 419.524408][T13590] syzkaller0: entered promiscuous mode [ 419.543076][T13590] syzkaller0: entered allmulticast mode [ 422.043752][T13346] veth0_vlan: entered promiscuous mode [ 422.133154][T13346] veth1_vlan: entered promiscuous mode [ 422.245326][T13346] veth0_macvtap: entered promiscuous mode [ 422.271491][T13346] veth1_macvtap: entered promiscuous mode [ 422.371454][T13346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.384316][T13346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.398174][T13346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.408880][T13346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.419109][T13346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.430024][T13346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.444396][T13346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.477148][T13346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.497977][T13346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.518443][T13346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.544715][T13346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.557665][T13346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.569424][T13346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.581831][T13346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.603300][T13653] syzkaller0: entered promiscuous mode [ 422.612423][T13653] syzkaller0: entered allmulticast mode [ 422.633728][T13346] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.658425][T13346] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.671350][T13346] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.686424][T13346] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.971325][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.990432][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.155634][ T3499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.183583][ T3499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.249062][T13672] syzkaller0: entered promiscuous mode [ 423.254761][T13672] syzkaller0: entered allmulticast mode [ 425.102639][T13702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2333'. [ 425.173695][T13705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2333'. [ 425.292955][T13712] syzkaller0: entered promiscuous mode [ 425.308768][T13712] syzkaller0: entered allmulticast mode [ 425.921378][T13727] loop4: detected capacity change from 0 to 512 [ 425.955251][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 425.966827][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 425.975478][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 425.984563][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 425.997916][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 426.008808][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 426.054329][T13727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.100889][T13727] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.148008][ T1110] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.179202][T13727] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 426.220862][T13727] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 426.363291][ T1110] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.386900][T13346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.512056][ T1110] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.687191][T13745] syzkaller0: entered promiscuous mode [ 426.694760][T13745] syzkaller0: entered allmulticast mode [ 426.729777][ T1110] bond0: (slave netdevsim0): Releasing backup interface [ 426.739918][ T1110] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.746448][T13759] binder: 13758:13759 unknown command 1074553619 [ 426.756862][T13759] binder: 13758:13759 ioctl c0306201 2000000001c0 returned -22 [ 426.766279][T13759] binder: 13758:13759 unknown command 1074553620 [ 426.767062][T13756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2345'. [ 426.781662][T13759] binder: 13758:13759 ioctl c0306201 200000000240 returned -22 [ 426.794616][T13759] binder: 13758:13759 ioctl c0306201 200000000300 returned -11 [ 426.875104][T13762] loop0: detected capacity change from 0 to 512 [ 426.913987][T13762] EXT4-fs: Ignoring removed bh option [ 426.930910][T13762] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 426.993157][T13762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.007178][T13762] ext4 filesystem being mounted at /572/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.836536][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.069402][ T5776] Bluetooth: hci0: command tx timeout [ 428.253124][T13770] 9pnet_fd: Insufficient options for proto=fd [ 429.344676][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2345'. [ 429.540620][T13778] binder: BINDER_SET_CONTEXT_MGR already set [ 429.568818][T13778] binder: 13775:13778 ioctl 4018620d 2000000002c0 returned -16 [ 429.622988][T13729] chnl_net:caif_netlink_parms(): no params data found [ 429.759672][ T1110] tipc: Left network mode [ 429.800108][T13729] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.807339][T13729] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.827547][T13729] bridge_slave_0: entered allmulticast mode [ 429.837050][T13729] bridge_slave_0: entered promiscuous mode [ 429.846774][T13729] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.854888][T13729] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.862736][T13729] bridge_slave_1: entered allmulticast mode [ 429.871244][T13729] bridge_slave_1: entered promiscuous mode [ 430.089835][T13729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.158443][ T5776] Bluetooth: hci0: command tx timeout [ 430.208067][T13729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.003241][T13811] loop0: detected capacity change from 0 to 1024 [ 431.034987][T13811] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 431.065672][T13811] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 431.105573][T13813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2358'. [ 431.125859][T13811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.138280][T13729] team0: Port device team_slave_0 added [ 431.141220][T13729] team0: Port device team_slave_1 added [ 431.275462][T13816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2358'. [ 431.444233][T13811] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 431.499911][T13811] EXT4-fs (loop0): This should not happen!! Data will be lost [ 431.499911][T13811] [ 431.528524][T13811] EXT4-fs (loop0): Total free blocks count 0 [ 431.534580][T13811] EXT4-fs (loop0): Free/Dirty block details [ 431.564503][T13811] EXT4-fs (loop0): free_blocks=0 [ 431.576747][T13811] EXT4-fs (loop0): dirty_blocks=0 [ 431.586271][T13811] EXT4-fs (loop0): Block reservation details [ 431.592785][T13834] loop4: detected capacity change from 0 to 512 [ 431.598316][T13811] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 431.639830][T13729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.669829][T13834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.671533][T13729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.688297][T13834] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.735941][T13729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.749449][T13729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.756424][T13729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.783477][T13729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.863682][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.867807][T13346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.027455][ T5776] Bluetooth: hci1: unexpected event for opcode 0x2035 [ 432.073497][T13729] hsr_slave_0: entered promiscuous mode [ 432.081223][T13729] hsr_slave_1: entered promiscuous mode [ 432.091732][T13729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.102363][T13729] Cannot create hsr debugfs directory [ 432.228471][ T5776] Bluetooth: hci0: command tx timeout [ 432.500446][ T1110] hsr_slave_0: left promiscuous mode [ 432.519917][ T1110] hsr_slave_1: left promiscuous mode [ 432.536824][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.560382][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.576870][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.603321][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.642337][ T1110] bridge_slave_1: left allmulticast mode [ 432.648037][ T1110] bridge_slave_1: left promiscuous mode [ 432.674247][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.712661][T13863] loop0: detected capacity change from 0 to 512 [ 432.732319][T13863] EXT4-fs: Ignoring removed bh option [ 432.738561][ T1110] bridge_slave_0: left allmulticast mode [ 432.744250][ T1110] bridge_slave_0: left promiscuous mode [ 432.763796][T13863] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 432.776364][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.846015][T13863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.852561][T13874] Bluetooth: MGMT ver 1.22 [ 432.863825][ T1110] bridge0: left promiscuous mode [ 432.886913][ T1110] veth1_macvtap: left promiscuous mode [ 432.898277][T13863] ext4 filesystem being mounted at /578/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.909871][ T1110] veth0_macvtap: left promiscuous mode [ 432.916117][ T1110] veth1_vlan: left promiscuous mode [ 432.943150][ T1110] veth0_vlan: left promiscuous mode [ 433.814906][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.970522][ T1110] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 434.125426][ T1110] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 434.139654][ T1110] bond1 (unregistering): Released all slaves [ 434.308716][ T5776] Bluetooth: hci0: command tx timeout [ 434.642239][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 434.682664][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 434.723518][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.763872][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.010912][ T1110] bond0 (unregistering): Released all slaves [ 435.077484][T13866] netlink: 'syz.4.2369': attribute type 10 has an invalid length. [ 435.117415][T13866] team0: Port device netdevsim0 added [ 435.128682][T13871] netlink: 'syz.4.2369': attribute type 10 has an invalid length. [ 435.149372][T13871] team0: Port device netdevsim0 removed [ 435.156621][T13871] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 435.303807][T13910] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2375'. [ 435.551840][T13924] loop4: detected capacity change from 0 to 128 [ 435.626417][T13924] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 435.677534][T13924] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 435.718037][T13729] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 435.767594][T13729] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 435.801703][T13924] syz.4.2378 (pid 13924) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 435.831579][T13729] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 435.872185][T13729] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 435.935291][T13346] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 436.111679][T13729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.167114][T13729] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.201803][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.209048][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.271309][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.278537][ T5956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.556879][T13959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2385'. [ 436.889453][T13729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.961495][T13729] veth0_vlan: entered promiscuous mode [ 436.989498][T13729] veth1_vlan: entered promiscuous mode [ 437.062125][T13729] veth0_macvtap: entered promiscuous mode [ 437.077795][T13729] veth1_macvtap: entered promiscuous mode [ 437.092595][T13986] FAULT_INJECTION: forcing a failure. [ 437.092595][T13986] name failslab, interval 1, probability 0, space 0, times 0 [ 437.112799][T13986] CPU: 0 PID: 13986 Comm: syz.2.2391 Not tainted syzkaller #0 [ 437.120304][T13986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 437.130401][T13986] Call Trace: [ 437.133716][T13986] [ 437.136549][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.136655][T13986] dump_stack_lvl+0x18c/0x250 [ 437.151767][T13986] ? show_regs_print_info+0x20/0x20 [ 437.157001][T13986] ? load_image+0x420/0x420 [ 437.157648][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.161517][T13986] ? __lock_acquire+0x7eb0/0x7eb0 [ 437.161550][T13986] should_fail_ex+0x394/0x4c0 [ 437.161585][T13986] should_failslab+0x9/0x20 [ 437.185591][T13986] slab_pre_alloc_hook+0x59/0x300 [ 437.189061][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.190630][T13986] ? __vmalloc_node_range+0x598/0x1320 [ 437.206630][T13986] ? __vmalloc_node_range+0x598/0x1320 [ 437.212283][T13986] __kmem_cache_alloc_node+0x53/0x250 [ 437.215736][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.217683][T13986] ? __vmalloc_node_range+0x598/0x1320 [ 437.217717][T13986] __kmalloc_node+0xa6/0x240 [ 437.231509][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.232945][T13986] __vmalloc_node_range+0x598/0x1320 [ 437.233001][T13986] ? free_vm_area+0x50/0x50 [ 437.237609][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.247933][T13986] ? ima_read_file+0x84/0x1a0 [ 437.247963][T13986] ? ima_post_path_mknod+0x160/0x160 [ 437.247989][T13986] ? kernel_read_file+0x3e5/0x670 [ 437.255851][T13729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.257757][T13986] vmalloc+0x79/0x90 [ 437.257790][T13986] ? kernel_read_file+0x3e5/0x670 [ 437.273178][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.277524][T13986] kernel_read_file+0x3e5/0x670 [ 437.277561][T13986] ? __lock_acquire+0x7e91/0x7eb0 [ 437.282692][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.289758][T13986] ? vfs_cmd_create+0x230/0x230 [ 437.289797][T13986] __se_sys_finit_module+0x3f9/0x6c0 [ 437.294419][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.298710][T13986] ? __x64_sys_finit_module+0x80/0x80 [ 437.298765][T13986] ? lockdep_hardirqs_on+0x98/0x150 [ 437.309684][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.313999][T13986] do_syscall_64+0x55/0xb0 [ 437.314024][T13986] ? clear_bhb_loop+0x40/0x90 [ 437.320774][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.328906][T13986] ? clear_bhb_loop+0x40/0x90 [ 437.328937][T13986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.328966][T13986] RIP: 0033:0x7fd18c59e1d9 [ 437.328985][T13986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.334438][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.339089][T13986] RSP: 002b:00007fd18d4b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 437.339115][T13986] RAX: ffffffffffffffda RBX: 00007fd18c825fa0 RCX: 00007fd18c59e1d9 [ 437.339129][T13986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 437.339142][T13986] RBP: 00007fd18c635888 R08: 0000000000000000 R09: 0000000000000000 [ 437.339154][T13986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.339168][T13986] R13: 00007fd18c826038 R14: 00007fd18c825fa0 R15: 00007ffc2e70f558 [ 437.351890][T13729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.354920][T13986] [ 437.516243][T13986] warn_alloc: 1 callbacks suppressed [ 437.516260][T13986] syz.2.2391: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 437.581287][T13729] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.581560][T13986] CPU: 1 PID: 13986 Comm: syz.2.2391 Not tainted syzkaller #0 [ 437.597481][T13986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 437.607567][T13986] Call Trace: [ 437.609220][T13729] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.610849][T13986] [ 437.610861][T13986] dump_stack_lvl+0x18c/0x250 [ 437.627177][T13986] ? show_regs_print_info+0x20/0x20 [ 437.631599][T13729] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.632392][T13986] ? load_image+0x420/0x420 [ 437.645586][T13986] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 437.652036][T13986] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 437.653121][T13729] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.658560][T13986] warn_alloc+0x246/0x340 [ 437.658596][T13986] ? zone_watermark_ok_safe+0x230/0x230 [ 437.658624][T13986] ? __vmalloc_node_range+0x598/0x1320 [ 437.658652][T13986] ? __vmalloc_node_range+0x598/0x1320 [ 437.658674][T13986] ? rcu_is_watching+0x15/0xb0 [ 437.658700][T13986] ? __vmalloc_node_range+0x598/0x1320 [ 437.698391][T13986] ? __kmalloc_node+0xe4/0x240 [ 437.703201][T13986] __vmalloc_node_range+0x661/0x1320 [ 437.708566][T13986] ? free_vm_area+0x50/0x50 [ 437.713113][T13986] ? ima_read_file+0x84/0x1a0 [ 437.717833][T13986] ? ima_post_path_mknod+0x160/0x160 [ 437.723160][T13986] ? kernel_read_file+0x3e5/0x670 [ 437.728236][T13986] vmalloc+0x79/0x90 [ 437.732174][T13986] ? kernel_read_file+0x3e5/0x670 [ 437.737253][T13986] kernel_read_file+0x3e5/0x670 [ 437.742160][T13986] ? __lock_acquire+0x7e91/0x7eb0 [ 437.747263][T13986] ? vfs_cmd_create+0x230/0x230 [ 437.752171][T13986] __se_sys_finit_module+0x3f9/0x6c0 [ 437.757505][T13986] ? __x64_sys_finit_module+0x80/0x80 [ 437.762946][T13986] ? lockdep_hardirqs_on+0x98/0x150 [ 437.768175][T13986] do_syscall_64+0x55/0xb0 [ 437.772618][T13986] ? clear_bhb_loop+0x40/0x90 [ 437.777325][T13986] ? clear_bhb_loop+0x40/0x90 [ 437.782035][T13986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.787963][T13986] RIP: 0033:0x7fd18c59e1d9 [ 437.792411][T13986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.812053][T13986] RSP: 002b:00007fd18d4b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 437.820505][T13986] RAX: ffffffffffffffda RBX: 00007fd18c825fa0 RCX: 00007fd18c59e1d9 [ 437.828511][T13986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 437.836595][T13986] RBP: 00007fd18c635888 R08: 0000000000000000 R09: 0000000000000000 [ 437.844621][T13986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.852608][T13986] R13: 00007fd18c826038 R14: 00007fd18c825fa0 R15: 00007ffc2e70f558 [ 437.860585][T13986] [ 437.884908][T13986] Mem-Info: [ 437.888960][T13986] active_anon:5885 inactive_anon:0 isolated_anon:0 [ 437.888960][T13986] active_file:16759 inactive_file:40092 isolated_file:0 [ 437.888960][T13986] unevictable:768 dirty:61 writeback:25 [ 437.888960][T13986] slab_reclaimable:10346 slab_unreclaimable:93520 [ 437.888960][T13986] mapped:24336 shmem:1377 pagetables:543 [ 437.888960][T13986] sec_pagetables:0 bounce:0 [ 437.888960][T13986] kernel_misc_reclaimable:0 [ 437.888960][T13986] free:1341198 free_pcp:9563 free_cma:0 [ 438.021850][T13986] Node 0 active_anon:23720kB inactive_anon:0kB active_file:67036kB inactive_file:160164kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97472kB dirty:196kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10612kB pagetables:2328kB sec_pagetables:0kB all_unreclaimable? no [ 438.082723][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.103539][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.117403][T13986] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 438.175213][T13986] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 438.207768][T13986] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 438.216361][T13986] Node 0 DMA32 free:1455552kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:23484kB inactive_anon:0kB active_file:67036kB inactive_file:159080kB unevictable:1536kB writepending:196kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:21188kB local_pcp:17700kB free_cma:0kB [ 438.253537][T13986] lowmem_reserve[]: 0 0 1 1 1 [ 438.260879][T13986] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:1084kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 438.314372][T13986] lowmem_reserve[]: 0 0 0 0 0 [ 438.328454][T13986] Node 1 Normal free:3891628kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18084kB local_pcp:10048kB free_cma:0kB [ 438.376454][T13986] lowmem_reserve[]: 0 0 0 0 0 [ 438.386344][T13986] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 438.405294][T13986] Node 0 DMA32: 0*4kB 2*8kB (ME) 444*16kB (ME) 618*32kB (UME) 403*64kB (UME) 271*128kB (UME) 121*256kB (UME) 58*512kB (UME) 34*1024kB (UM) 13*2048kB (UME) 302*4096kB (UM) = 1446480kB [ 438.432685][T13986] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 438.462201][T13986] Node 1 Normal: 235*4kB (UME) 58*8kB (UME) 41*16kB (UME) 113*32kB (UME) 26*64kB (UME) 8*128kB (UME) 3*256kB (UME) 1*512kB (U) 1*1024kB (E) 1*2048kB (E) 947*4096kB (M) = 3891628kB [ 438.480400][T13986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 438.490181][T13986] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 438.502313][T13986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 438.505111][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.567461][T14006] 9pnet_fd: Insufficient options for proto=fd [ 438.689159][T13986] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 438.896777][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.906001][T13986] 61078 total pagecache pages [ 439.009538][T13986] 0 pages in swap cache [ 439.127730][T13986] Free swap = 124996kB [ 439.132905][T13986] Total swap = 124996kB [ 439.137095][T13986] 2097051 pages RAM [ 439.188418][T13986] 0 pages HighMem/MovableOnly [ 439.212351][T13986] 421118 pages reserved [ 439.216570][T13986] 0 pages cma reserved [ 440.172684][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.182169][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.582214][T14019] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.591678][T14019] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.057408][T14019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.095463][T14019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.414675][T14019] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.424069][T14019] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.433048][T14019] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.445117][T14019] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.675887][T14040] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 441.687683][T14040] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 441.707875][ T28] audit: type=1800 audit(1791730280.907:2): pid=14040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2403" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 441.749040][T14040] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 441.926916][T14065] 9pnet_fd: Insufficient options for proto=fd [ 442.795988][T14080] netlink: 'syz.0.2411': attribute type 10 has an invalid length. [ 442.882842][T14080] team0: Port device netdevsim0 added [ 442.932932][T14080] netlink: 'syz.0.2411': attribute type 10 has an invalid length. [ 443.023026][T14080] team0: Port device netdevsim0 removed [ 443.053699][T14080] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 443.582226][T14125] syzkaller0: entered promiscuous mode [ 443.587827][T14125] syzkaller0: entered allmulticast mode [ 445.143316][T14130] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 445.214639][T14143] loop2: detected capacity change from 0 to 256 [ 447.258101][ C1] sched: RT throttling activated [ 447.594758][T14188] 9pnet_fd: Insufficient options for proto=fd [ 448.279975][T14195] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2434'. [ 448.425852][T14198] syzkaller0: entered promiscuous mode [ 448.433451][T14198] syzkaller0: entered allmulticast mode [ 451.182952][T14264] 9pnet_fd: Insufficient options for proto=fd [ 452.006441][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2440'. [ 452.030212][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2440'. [ 452.044707][T14253] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 452.123581][T14270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2444'. [ 453.085537][T14253] syz.3.2440 (14253): drop_caches: 2 [ 454.043879][T14326] 9pnet_fd: Insufficient options for proto=fd [ 455.186729][T14345] 9pnet_fd: Insufficient options for proto=fd [ 456.308783][ T5090] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 456.330897][ T5090] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 456.343895][ T5090] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 456.374414][ T5090] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 456.389082][ T5090] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 456.397377][ T5090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 456.582404][T14379] syzkaller0: entered promiscuous mode [ 456.610564][T14379] syzkaller0: entered allmulticast mode [ 458.441501][T14397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2462'. [ 458.468298][ T5776] Bluetooth: hci1: command tx timeout [ 458.663427][T14409] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 458.932850][T14368] chnl_net:caif_netlink_parms(): no params data found [ 460.045845][T14368] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.056394][T14368] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.087081][T14368] bridge_slave_0: entered allmulticast mode [ 460.103819][T14368] bridge_slave_0: entered promiscuous mode [ 460.126388][T14368] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.148505][T14368] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.167288][T14368] bridge_slave_1: entered allmulticast mode [ 460.180156][T14368] bridge_slave_1: entered promiscuous mode [ 460.307451][T14449] syzkaller0: entered promiscuous mode [ 460.329041][T14449] syzkaller0: entered allmulticast mode [ 460.339223][T14368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.379810][T14368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.548406][ T5776] Bluetooth: hci1: command tx timeout [ 460.602228][T14465] loop2: detected capacity change from 0 to 512 [ 460.699007][T14465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.712157][T14465] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.900419][T13104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.009918][T14479] loop2: detected capacity change from 0 to 512 [ 461.017602][T14479] EXT4-fs: Ignoring removed mblk_io_submit option [ 461.092781][T14479] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.2474: corrupted in-inode xattr: e_value size too large [ 461.124807][T14479] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.2474: couldn't read orphan inode 15 (err -117) [ 461.146373][T14479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.207618][T13104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.628237][ T5776] Bluetooth: hci1: command tx timeout [ 462.669618][T14368] team0: Port device team_slave_0 added [ 462.677179][T14486] netlink: 'syz.2.2477': attribute type 10 has an invalid length. [ 462.722788][T14486] team0: Port device netdevsim0 added [ 462.744437][T14490] loop4: detected capacity change from 0 to 1024 [ 462.756816][T14487] netlink: 'syz.2.2477': attribute type 10 has an invalid length. [ 462.779041][T14490] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 462.803208][T14490] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 462.807540][T14487] team0: Port device netdevsim0 removed [ 462.836325][T14487] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 462.855199][T14490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.876719][T14368] team0: Port device team_slave_1 added [ 462.951880][T14493] syzkaller0: entered promiscuous mode [ 462.957414][T14493] syzkaller0: entered allmulticast mode [ 463.007054][T14368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.040879][T14368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.116482][T14368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.130484][T13346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.270135][T14368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.285420][T14368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.369065][T14368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.486414][T14368] hsr_slave_0: entered promiscuous mode [ 463.507216][T14368] hsr_slave_1: entered promiscuous mode [ 463.521732][T14368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.548434][T14368] Cannot create hsr debugfs directory [ 463.605452][T14518] loop4: detected capacity change from 0 to 2048 [ 463.688924][T14518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.977018][ T12] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 464.012948][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 464.031728][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 464.031728][ T12] [ 464.044773][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 464.056019][ T12] EXT4-fs (loop4): Free/Dirty block details [ 464.063857][ T12] EXT4-fs (loop4): free_blocks=4096 [ 464.080383][ T12] EXT4-fs (loop4): dirty_blocks=0 [ 464.090821][ T12] EXT4-fs (loop4): Block reservation details [ 464.103231][ T12] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 464.140792][T13346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.169316][T14368] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.325388][T14368] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.404444][T14544] syzkaller0: entered promiscuous mode [ 464.410313][T14544] syzkaller0: entered allmulticast mode [ 464.463310][T14368] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.704348][T14368] bond0: (slave netdevsim0): Releasing backup interface [ 464.746061][T14368] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.774969][ T5776] Bluetooth: hci1: command tx timeout [ 464.981537][T14562] 9pnet_fd: Insufficient options for proto=fd [ 465.015980][T14561] loop4: detected capacity change from 0 to 512 [ 465.106673][T14561] EXT4-fs: Ignoring removed nobh option [ 465.541519][T14561] EXT4-fs (loop4): 1 truncate cleaned up [ 465.659534][T14561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.356350][T14573] loop3: detected capacity change from 0 to 512 [ 466.425999][T14573] EXT4-fs: Ignoring removed bh option [ 466.485490][T14573] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 466.531560][T13346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.570682][T14368] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 466.589169][T14573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.607053][T14368] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 466.640484][T14573] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.650975][T14368] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 466.671478][T14368] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 467.049952][T13729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.217817][T14596] syzkaller0: entered promiscuous mode [ 467.224645][T14596] syzkaller0: entered allmulticast mode [ 467.260288][T14600] syzkaller0: entered promiscuous mode [ 467.265807][T14600] syzkaller0: entered allmulticast mode [ 467.643723][T14610] 9pnet_fd: Insufficient options for proto=fd [ 469.843538][T14368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.870518][T14368] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.040271][T14368] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 470.078148][T14368] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 470.319038][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.326251][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.741289][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.748522][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.304718][T14646] loop4: detected capacity change from 0 to 512 [ 471.424989][T14646] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.2505: corrupted in-inode xattr: invalid ea_ino [ 471.440546][T14646] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.2505: couldn't read orphan inode 15 (err -117) [ 471.459726][T14646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.717891][T14650] loop2: detected capacity change from 0 to 1024 [ 471.787101][T13346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.866967][T14650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.107470][T14368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.169866][T13104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.367711][T14662] syzkaller0: entered promiscuous mode [ 472.398454][T14662] syzkaller0: entered allmulticast mode [ 472.607252][T14674] syzkaller0: entered promiscuous mode [ 472.614701][T14674] syzkaller0: entered allmulticast mode [ 475.298430][T14694] FAULT_INJECTION: forcing a failure. [ 475.298430][T14694] name failslab, interval 1, probability 0, space 0, times 0 [ 475.319242][T14694] CPU: 0 PID: 14694 Comm: syz.3.2517 Not tainted syzkaller #0 [ 475.326761][T14694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 475.336838][T14694] Call Trace: [ 475.340111][T14694] [ 475.343037][T14694] dump_stack_lvl+0x18c/0x250 [ 475.347739][T14694] ? show_regs_print_info+0x20/0x20 [ 475.352950][T14694] ? load_image+0x420/0x420 [ 475.357470][T14694] ? __might_sleep+0xe0/0xe0 [ 475.362054][T14694] ? __lock_acquire+0x7eb0/0x7eb0 [ 475.367071][T14694] ? percpu_ref_put+0x12/0x100 [ 475.371843][T14694] should_fail_ex+0x394/0x4c0 [ 475.376545][T14694] should_failslab+0x9/0x20 [ 475.381042][T14694] slab_pre_alloc_hook+0x59/0x300 [ 475.386058][T14694] kmem_cache_alloc+0x5a/0x2c0 [ 475.390817][T14694] ? vm_area_dup+0x61/0x270 [ 475.395334][T14694] vm_area_dup+0x61/0x270 [ 475.399659][T14694] __split_vma+0x1a8/0xc20 [ 475.404073][T14694] ? mmap_write_unlock+0x160/0x160 [ 475.409197][T14694] ? split_vma+0x8f/0x110 [ 475.413552][T14694] mlock_fixup+0x415/0x550 [ 475.417983][T14694] apply_vma_lock_flags+0x2a7/0x3c0 [ 475.423187][T14694] ? __lock_acquire+0x7eb0/0x7eb0 [ 475.428326][T14694] ? do_mlock+0x740/0x740 [ 475.432652][T14694] ? down_write_killable+0x181/0x230 [ 475.438012][T14694] do_mlock+0x4be/0x740 [ 475.442168][T14694] ? lru_gen_add_folio+0xe00/0xe00 [ 475.447272][T14694] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 475.453264][T14694] ? lock_chain_count+0x20/0x20 [ 475.458119][T14694] ? syscall_enter_from_user_mode+0x25/0x80 [ 475.464017][T14694] __x64_sys_mlock+0x60/0x70 [ 475.468614][T14694] do_syscall_64+0x55/0xb0 [ 475.473046][T14694] ? clear_bhb_loop+0x40/0x90 [ 475.477832][T14694] ? clear_bhb_loop+0x40/0x90 [ 475.482501][T14694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.488473][T14694] RIP: 0033:0x7f17a959e1d9 [ 475.492879][T14694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.512480][T14694] RSP: 002b:00007f17aa42d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 475.520906][T14694] RAX: ffffffffffffffda RBX: 00007f17a9825fa0 RCX: 00007f17a959e1d9 [ 475.528893][T14694] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 475.536873][T14694] RBP: 00007f17a9635888 R08: 0000000000000000 R09: 0000000000000000 [ 475.544954][T14694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.552924][T14694] R13: 00007f17a9826038 R14: 00007f17a9825fa0 R15: 00007ffcf6259d58 [ 475.560909][T14694] [ 476.770906][T14368] veth0_vlan: entered promiscuous mode [ 476.831951][T14368] veth1_vlan: entered promiscuous mode [ 476.907820][T14368] veth0_macvtap: entered promiscuous mode [ 476.943698][T14368] veth1_macvtap: entered promiscuous mode [ 477.044353][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.144857][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.164377][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.182336][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.204285][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.230582][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.277115][T14368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.333023][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.358928][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.388242][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.408273][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.426850][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.448887][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.467798][T14368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.493839][T14368] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.519978][T14368] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.548541][T14368] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.557302][T14368] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.816602][T14748] loop3: detected capacity change from 0 to 512 [ 477.845779][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.965772][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.192326][T14748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.533357][T14748] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.651537][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.678154][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.749926][T14758] syzkaller0: entered promiscuous mode [ 478.755462][T14758] syzkaller0: entered allmulticast mode [ 478.794935][T13729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.109310][T14780] loop4: detected capacity change from 0 to 512 [ 479.149655][T14780] EXT4-fs: Ignoring removed bh option [ 479.242373][T14780] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 479.380874][T14780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.459771][T14780] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.701320][T13346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.015465][T14802] syzkaller0: entered promiscuous mode [ 480.043512][T14802] syzkaller0: entered allmulticast mode [ 481.716131][T14819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2538'. [ 482.057433][T14837] loop3: detected capacity change from 0 to 8 [ 482.366650][T14837] SQUASHFS error: Failed to read block 0x4de: -5 [ 482.812491][T14837] SQUASHFS error: Failed to read block 0x4de: -5 [ 482.897287][ T28] audit: type=1800 audit(1791730322.097:3): pid=14837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2543" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 483.177289][T14851] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 483.323616][T14858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2549'. [ 484.244791][T14896] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2558'. [ 485.952728][T14939] FAULT_INJECTION: forcing a failure. [ 485.952728][T14939] name failslab, interval 1, probability 0, space 0, times 0 [ 485.974783][T14939] CPU: 0 PID: 14939 Comm: syz.3.2569 Not tainted syzkaller #0 [ 485.982317][T14939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 485.992410][T14939] Call Trace: [ 485.995714][T14939] [ 485.998668][T14939] dump_stack_lvl+0x18c/0x250 [ 486.003387][T14939] ? show_regs_print_info+0x20/0x20 [ 486.008627][T14939] ? load_image+0x420/0x420 [ 486.013182][T14939] ? __might_sleep+0xe0/0xe0 [ 486.017812][T14939] ? __lock_acquire+0x7eb0/0x7eb0 [ 486.022882][T14939] ? percpu_ref_put+0x12/0x100 [ 486.027683][T14939] should_fail_ex+0x394/0x4c0 [ 486.032398][T14939] should_failslab+0x9/0x20 [ 486.036928][T14939] slab_pre_alloc_hook+0x59/0x300 [ 486.041972][T14939] kmem_cache_alloc+0x5a/0x2c0 [ 486.046753][T14939] ? vm_area_dup+0x61/0x270 [ 486.051270][T14939] vm_area_dup+0x61/0x270 [ 486.055611][T14939] __split_vma+0x1a8/0xc20 [ 486.060045][T14939] ? mmap_write_unlock+0x160/0x160 [ 486.065206][T14939] ? split_vma+0x8f/0x110 [ 486.069545][T14939] mlock_fixup+0x415/0x550 [ 486.073994][T14939] apply_vma_lock_flags+0x2a7/0x3c0 [ 486.079227][T14939] ? __lock_acquire+0x7eb0/0x7eb0 [ 486.084345][T14939] ? do_mlock+0x740/0x740 [ 486.088679][T14939] ? down_write_killable+0x181/0x230 [ 486.093980][T14939] do_mlock+0x4be/0x740 [ 486.098148][T14939] ? lru_gen_add_folio+0xe00/0xe00 [ 486.103264][T14939] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 486.109250][T14939] ? lock_chain_count+0x20/0x20 [ 486.114106][T14939] ? syscall_enter_from_user_mode+0x25/0x80 [ 486.120007][T14939] __x64_sys_mlock+0x60/0x70 [ 486.124608][T14939] do_syscall_64+0x55/0xb0 [ 486.129033][T14939] ? clear_bhb_loop+0x40/0x90 [ 486.133713][T14939] ? clear_bhb_loop+0x40/0x90 [ 486.138395][T14939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.144297][T14939] RIP: 0033:0x7f17a959e1d9 [ 486.148739][T14939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.168381][T14939] RSP: 002b:00007f17aa42d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 486.176821][T14939] RAX: ffffffffffffffda RBX: 00007f17a9825fa0 RCX: 00007f17a959e1d9 [ 486.184805][T14939] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 486.192781][T14939] RBP: 00007f17a9635888 R08: 0000000000000000 R09: 0000000000000000 [ 486.200754][T14939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.208727][T14939] R13: 00007f17a9826038 R14: 00007f17a9825fa0 R15: 00007ffcf6259d58 [ 486.216720][T14939] [ 486.245430][T14937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2568'. [ 486.605049][T14958] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2574'. [ 487.283625][T14987] loop2: detected capacity change from 0 to 512 [ 487.325029][T14987] EXT4-fs: Ignoring removed bh option [ 487.350922][T14987] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 487.425815][T14987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.429231][T14990] loop4: detected capacity change from 0 to 512 [ 487.471393][T14987] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.527127][T14990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.546550][T14990] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.663826][T13346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.691786][T13104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.792434][T15003] loop0: detected capacity change from 0 to 256 [ 488.847100][T15006] syzkaller0: entered promiscuous mode [ 488.878287][T15006] syzkaller0: entered allmulticast mode [ 489.917065][T15034] loop0: detected capacity change from 0 to 512 [ 489.981423][T15034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.018363][T15034] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.082397][T14368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.808647][T15056] loop3: detected capacity change from 0 to 512 [ 491.829935][T15056] EXT4-fs: Ignoring removed bh option [ 491.870632][T15056] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 491.927488][T15056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.963069][T15056] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.055206][T15063] loop4: detected capacity change from 0 to 256 [ 492.130710][T15065] 9pnet_fd: Insufficient options for proto=fd [ 492.522472][T13729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.342309][T15078] loop2: detected capacity change from 0 to 512 [ 494.350094][T15078] EXT4-fs: inline encryption not supported [ 494.465542][T15078] EXT4-fs (loop2): Test dummy encryption mode enabled [ 494.577960][T15078] ------------[ cut here ]------------ [ 494.583904][T15078] EA inode 11 i_nlink=2 [ 494.584245][T15078] WARNING: CPU: 1 PID: 15078 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x572/0x5d0 [ 494.598815][T15078] Modules linked in: [ 494.602731][T15078] CPU: 1 PID: 15078 Comm: syz.2.2613 Not tainted syzkaller #0 [ 494.610263][T15078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 494.620411][T15078] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 494.627038][T15078] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 11 ee 98 ff 49 8b 34 24 48 c7 c7 20 ef de 8a 44 89 fa e8 6e cb 09 ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 18 86 4b 08 [ 494.646833][T15078] RSP: 0018:ffffc9000582f360 EFLAGS: 00010246 [ 494.652998][T15078] RAX: b1781bc818370700 RBX: ffff8880775118a8 RCX: 0000000000080000 [ 494.661477][T15078] RDX: ffffc900197f9000 RSI: 000000000002fbb8 RDI: 000000000002fbb9 [ 494.669791][T15078] RBP: ffffc9000582f450 R08: ffff8880b8d28c53 R09: 1ffff110171a518a [ 494.677829][T15078] R10: dffffc0000000000 R11: ffffed10171a518b R12: ffff888077511700 [ 494.685918][T15078] R13: ffffc9000582f3c0 R14: dffffc0000000000 R15: 0000000000000002 [ 494.693976][T15078] FS: 00007fd18d4716c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 494.703044][T15078] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.709702][T15078] CR2: 00007fa0eae28000 CR3: 0000000069a69000 CR4: 00000000003506e0 [ 494.717719][T15078] Call Trace: [ 494.721070][T15078] [ 494.724062][T15078] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 494.729775][T15078] ? __ext4_journal_ensure_credits+0x30/0x450 [ 494.735872][T15078] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 494.741937][T15078] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 494.747611][T15078] ? ext4_xattr_delete_inode+0x50c/0xd00 [ 494.753335][T15078] ext4_xattr_delete_inode+0xb3b/0xd00 [ 494.758963][T15078] ? lockdep_hardirqs_on+0x98/0x150 [ 494.764609][T15078] ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0 [ 494.770813][T15078] ? ext4_evict_inode+0xa69/0xe70 [ 494.775889][T15078] ext4_evict_inode+0xa88/0xe70 [ 494.780847][T15078] ? evict+0x482/0x8a0 [ 494.784953][T15078] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 494.790942][T15078] ? do_raw_spin_unlock+0x121/0x230 [ 494.796171][T15078] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 494.802147][T15078] evict+0x4b7/0x8a0 [ 494.806073][T15078] ? __lock_acquire+0x7eb0/0x7eb0 [ 494.811176][T15078] ? proc_nr_inodes+0x230/0x230 [ 494.816049][T15078] ? do_raw_spin_unlock+0x121/0x230 [ 494.821326][T15078] ? _raw_spin_unlock+0x28/0x40 [ 494.826301][T15078] ext4_orphan_cleanup+0xdff/0x1650 [ 494.831561][T15078] ? preempt_schedule_thunk+0x1a/0x30 [ 494.836972][T15078] ? ext4_orphan_file_block_trigger+0x440/0x440 [ 494.843275][T15078] ? ext4_orphan_del+0xc90/0xc90 [ 494.848284][T15078] ? ext4_register_li_request+0x182/0x930 [ 494.854030][T15078] ? errseq_check_and_advance+0x66/0x120 [ 494.859766][T15078] ext4_fill_super+0x5fb5/0x6870 [ 494.865179][T15078] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 494.871839][T15078] ? __might_sleep+0xe0/0xe0 [ 494.876463][T15078] ? read_lock_is_recursive+0x20/0x20 [ 494.882051][T15078] ? snprintf+0xe9/0x140 [ 494.886375][T15078] ? down_read_killable+0x340/0x340 [ 494.891657][T15078] ? setup_bdev_super+0x56b/0x660 [ 494.896717][T15078] get_tree_bdev+0x3e5/0x520 [ 494.901353][T15078] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 494.907623][T15078] ? setup_bdev_super+0x660/0x660 [ 494.912740][T15078] ? apparmor_capable+0x137/0x1a0 [ 494.917802][T15078] ? bpf_lsm_capable+0x9/0x10 [ 494.922565][T15078] ? security_capable+0x89/0xb0 [ 494.927449][T15078] vfs_get_tree+0x8c/0x280 [ 494.931930][T15078] do_new_mount+0x24a/0xa40 [ 494.936474][T15078] __se_sys_mount+0x2e7/0x3d0 [ 494.941235][T15078] ? __x64_sys_mount+0xc0/0xc0 [ 494.946028][T15078] ? lockdep_hardirqs_on+0x98/0x150 [ 494.951341][T15078] ? __x64_sys_mount+0x20/0xc0 [ 494.956132][T15078] do_syscall_64+0x55/0xb0 [ 494.960597][T15078] ? clear_bhb_loop+0x40/0x90 [ 494.965291][T15078] ? clear_bhb_loop+0x40/0x90 [ 494.970558][T15078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 494.976486][T15078] RIP: 0033:0x7fd18c59f44a [ 494.981047][T15078] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.000757][T15078] RSP: 002b:00007fd18d470e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 495.009250][T15078] RAX: ffffffffffffffda RBX: 00007fd18d470ee0 RCX: 00007fd18c59f44a [ 495.017249][T15078] RDX: 00002000000009c0 RSI: 0000200000000040 RDI: 00007fd18d470ea0 [ 495.025304][T15078] RBP: 00002000000009c0 R08: 00007fd18d470ee0 R09: 0000000000800718 [ 495.033465][T15078] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000040 [ 495.041501][T15078] R13: 00007fd18d470ea0 R14: 00000000000004a4 R15: 000000000000002c [ 495.049563][T15078] [ 495.052603][T15078] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 495.059888][T15078] CPU: 1 PID: 15078 Comm: syz.2.2613 Not tainted syzkaller #0 [ 495.067353][T15078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 495.077425][T15078] Call Trace: [ 495.080714][T15078] [ 495.083686][T15078] dump_stack_lvl+0x18c/0x250 [ 495.088385][T15078] ? show_regs_print_info+0x20/0x20 [ 495.093595][T15078] ? load_image+0x420/0x420 [ 495.098122][T15078] panic+0x2ca/0x720 [ 495.102038][T15078] ? bpf_jit_dump+0xd0/0xd0 [ 495.106574][T15078] __warn+0x2e0/0x470 [ 495.110569][T15078] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 495.116563][T15078] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 495.122555][T15078] report_bug+0x2be/0x4f0 [ 495.126987][T15078] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 495.132985][T15078] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 495.138974][T15078] ? ext4_xattr_inode_update_ref+0x574/0x5d0 [ 495.144962][T15078] handle_bug+0xcf/0x120 [ 495.149216][T15078] exc_invalid_op+0x1a/0x50 [ 495.153734][T15078] asm_exc_invalid_op+0x1a/0x20 [ 495.158823][T15078] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 495.165440][T15078] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 11 ee 98 ff 49 8b 34 24 48 c7 c7 20 ef de 8a 44 89 fa e8 6e cb 09 ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 18 86 4b 08 [ 495.185074][T15078] RSP: 0018:ffffc9000582f360 EFLAGS: 00010246 [ 495.191174][T15078] RAX: b1781bc818370700 RBX: ffff8880775118a8 RCX: 0000000000080000 [ 495.199180][T15078] RDX: ffffc900197f9000 RSI: 000000000002fbb8 RDI: 000000000002fbb9 [ 495.207168][T15078] RBP: ffffc9000582f450 R08: ffff8880b8d28c53 R09: 1ffff110171a518a [ 495.215154][T15078] R10: dffffc0000000000 R11: ffffed10171a518b R12: ffff888077511700 [ 495.223146][T15078] R13: ffffc9000582f3c0 R14: dffffc0000000000 R15: 0000000000000002 [ 495.231181][T15078] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 495.236847][T15078] ? __ext4_journal_ensure_credits+0x30/0x450 [ 495.242936][T15078] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 495.248958][T15078] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 495.254619][T15078] ? ext4_xattr_delete_inode+0x50c/0xd00 [ 495.260279][T15078] ext4_xattr_delete_inode+0xb3b/0xd00 [ 495.265764][T15078] ? lockdep_hardirqs_on+0x98/0x150 [ 495.271072][T15078] ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0 [ 495.277174][T15078] ? ext4_evict_inode+0xa69/0xe70 [ 495.282237][T15078] ext4_evict_inode+0xa88/0xe70 [ 495.287121][T15078] ? evict+0x482/0x8a0 [ 495.291222][T15078] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 495.297558][T15078] ? do_raw_spin_unlock+0x121/0x230 [ 495.302766][T15078] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 495.308667][T15078] evict+0x4b7/0x8a0 [ 495.312570][T15078] ? __lock_acquire+0x7eb0/0x7eb0 [ 495.317596][T15078] ? proc_nr_inodes+0x230/0x230 [ 495.322448][T15078] ? do_raw_spin_unlock+0x121/0x230 [ 495.327648][T15078] ? _raw_spin_unlock+0x28/0x40 [ 495.332513][T15078] ext4_orphan_cleanup+0xdff/0x1650 [ 495.337709][T15078] ? preempt_schedule_thunk+0x1a/0x30 [ 495.343090][T15078] ? ext4_orphan_file_block_trigger+0x440/0x440 [ 495.349345][T15078] ? ext4_orphan_del+0xc90/0xc90 [ 495.354280][T15078] ? ext4_register_li_request+0x182/0x930 [ 495.359993][T15078] ? errseq_check_and_advance+0x66/0x120 [ 495.365623][T15078] ext4_fill_super+0x5fb5/0x6870 [ 495.370579][T15078] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 495.376829][T15078] ? __might_sleep+0xe0/0xe0 [ 495.381425][T15078] ? read_lock_is_recursive+0x20/0x20 [ 495.386795][T15078] ? snprintf+0xe9/0x140 [ 495.391056][T15078] ? down_read_killable+0x340/0x340 [ 495.396260][T15078] ? setup_bdev_super+0x56b/0x660 [ 495.401287][T15078] get_tree_bdev+0x3e5/0x520 [ 495.405884][T15078] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 495.412162][T15078] ? setup_bdev_super+0x660/0x660 [ 495.417192][T15078] ? apparmor_capable+0x137/0x1a0 [ 495.422222][T15078] ? bpf_lsm_capable+0x9/0x10 [ 495.426902][T15078] ? security_capable+0x89/0xb0 [ 495.431760][T15078] vfs_get_tree+0x8c/0x280 [ 495.436202][T15078] do_new_mount+0x24a/0xa40 [ 495.440709][T15078] __se_sys_mount+0x2e7/0x3d0 [ 495.445393][T15078] ? __x64_sys_mount+0xc0/0xc0 [ 495.450180][T15078] ? lockdep_hardirqs_on+0x98/0x150 [ 495.455374][T15078] ? __x64_sys_mount+0x20/0xc0 [ 495.460134][T15078] do_syscall_64+0x55/0xb0 [ 495.464551][T15078] ? clear_bhb_loop+0x40/0x90 [ 495.469242][T15078] ? clear_bhb_loop+0x40/0x90 [ 495.473945][T15078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 495.479861][T15078] RIP: 0033:0x7fd18c59f44a [ 495.484282][T15078] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.503917][T15078] RSP: 002b:00007fd18d470e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 495.512376][T15078] RAX: ffffffffffffffda RBX: 00007fd18d470ee0 RCX: 00007fd18c59f44a [ 495.520358][T15078] RDX: 00002000000009c0 RSI: 0000200000000040 RDI: 00007fd18d470ea0 [ 495.528429][T15078] RBP: 00002000000009c0 R08: 00007fd18d470ee0 R09: 0000000000800718 [ 495.536398][T15078] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000040 [ 495.544379][T15078] R13: 00007fd18d470ea0 R14: 00000000000004a4 R15: 000000000000002c [ 495.552364][T15078] [ 495.555645][T15078] Kernel Offset: disabled [ 495.560027][T15078] Rebooting in 86400 seconds..