last executing test programs: 2m56.942983736s ago: executing program 4 (id=183): socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000840)={0x0, 0x258, &(0x7f0000000880)=[{&(0x7f00000008c0)="89000000120081ae08060cdc030ec0007f03e3f7ff1f000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 2m56.737189044s ago: executing program 4 (id=186): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000004c0), 0x1d3942, 0x0) sendfile(r0, r0, 0x0, 0x200000) 2m55.784185732s ago: executing program 4 (id=187): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x800) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9f, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000004a00010000000000000000000a0080010000000000000000180001"], 0x34}}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f0000000080)=[{r2, 0x9f712fd3135d632f}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) 2m55.452858991s ago: executing program 4 (id=188): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x1080) 2m55.173783684s ago: executing program 4 (id=189): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000640)='27', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x167) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f00000006c0)={@multicast2, @local, @remote}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000ffff26bd7000fddbdf2700000000", @ANYRES32=0x0, @ANYBLOB="88db33daf67784d411732aa6929b3889900a050023000000200012806272696467650000101f0000000000000000009b7000000000000000"], 0x40}}, 0xc31fe084736518c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/172, 0xac}], 0x2}}], 0x1, 0x10001, &(0x7f0000000580)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x11}}, './file0\x00'}) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) getsockopt(r6, 0x200000000114, 0x2715, 0x0, &(0x7f0000000740)) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)) process_vm_writev(r4, &(0x7f0000002180)=[{&(0x7f0000000080)=""/197, 0xc5}], 0x1, &(0x7f0000002540)=[{&(0x7f00000021c0)=""/221, 0xdd}], 0x1, 0x0) 2m54.840440973s ago: executing program 4 (id=191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101001, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x8}}}}}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101001, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) (rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0x7, 0xffff}, {0xd, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x2, 0xd, 0x8000, 0x5, 0x4, 0x3, 0x7fffffff}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 2m39.481270351s ago: executing program 32 (id=191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101001, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x8}}}}}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101001, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) (rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0x7, 0xffff}, {0xd, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x2, 0xd, 0x8000, 0x5, 0x4, 0x3, 0x7fffffff}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 14.365112271s ago: executing program 2 (id=1145): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001740)={@fallback=r1, r1, 0x2f}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x3, 0x8, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000002900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002940)={@cgroup=r2, r1, 0x2f, 0x10, 0x4, @void, @value=r1}, 0x20) 14.129904036s ago: executing program 1 (id=1150): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4e00}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0xffffff1f, 0x70bd26, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x84) 13.979401451s ago: executing program 2 (id=1153): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r4, 0x1) sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) mount(0x0, &(0x7f00000004c0)='./trace\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) open$dir(0x0, 0x40000, 0x235) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) 13.593622741s ago: executing program 1 (id=1156): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000005c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000640)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000006c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000700), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000000102010200000000000000000a000004300001802c00018014000300"], 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x0) setitimer(0x2, &(0x7f0000000500)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x42, 0x40040, &(0x7f0000000440)=@generic={0x2d, "00000000000000001f00010000000600"}, 0x80) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000004c0)) syz_emit_ethernet(0x38, &(0x7f0000000880)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "00001e", 0x2, 0x2b, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], "4ede"}}}}}, 0x0) 11.985996803s ago: executing program 2 (id=1158): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x169802, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x808b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000780), 0x651, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000900)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000d40)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff0200000000000000000000000000010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a1bc0000000000000000000000000000000000000000000000000000000000000000020000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00fffc00000000fe8000000000000000000000000000bb0700"/394, @ANYRESHEX=r2, @ANYBLOB="9a9d52208c01681fab45fbde655859fba9dbdff24b6d5b1060bcf71f653faa21e5c7593a3d22064e20001c7781173170bd855a396a7631b609756230a5da005dfdfbb9452401fc4892d7a6cff7f8956bad0e61b1fae52591f44fea2b12b7f6baa64c39ac498208d939f418ff68c49ea86dfa78769edda6ca52ec40479281b53c669f7e05eaa8ba56034f4f12497f0b869c2bff4e97bba27e8c84d8d8e884408e7e"], 0x190) add_key(&(0x7f0000000bc0)='asymmetric\x00', 0x0, &(0x7f0000000c00)="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", 0x114, 0xfffffffffffffffe) 11.307578971s ago: executing program 1 (id=1159): socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xd50, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0x200000ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 10.380841361s ago: executing program 5 (id=1160): write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000003c0)='X', 0x1, 0x400e1, &(0x7f0000000400)={0xa, 0xffff, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) 10.297222277s ago: executing program 3 (id=1162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x2, 0x8, 0x1, 0x3}, 0x13}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48d4}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000880), 0x56) sendmsg$kcm(r6, &(0x7f00000008c0)={&(0x7f0000000900)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000980)=[{&(0x7f00000009c0)="27030200dc0f14000e0007000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000040000000", 0x2e}], 0x1}, 0x4005) 10.262859622s ago: executing program 1 (id=1163): prlimit64(0x0, 0xe, &(0x7f0000000840)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000880)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000900)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000dc0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000e00), 0x80002c1, 0x2, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) r4 = socket(0x11, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$packet(r4, 0x0, 0x0) waitid(0x1, r3, 0x0, 0xb, &(0x7f0000000e40)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000fc0)) sendmsg$nl_route(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f00000010c0)='ext4\x00', &(0x7f0000001100)='.\x02\x00', 0x22000402, &(0x7f0000001140)={[{@noinit_itable}, {@init_itable}, {@noinit_itable}, {@discard}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@usrquota}, {@usrjquota_path={'usrjquota', 0x3d, '.\x02'}}, {@resgid}, {@nolazytime}], [], 0x2c}, 0x1, 0x4ef, &(0x7f0000001240)="$eJzs3MtvG8UfAPDv2nn1mbS/6gd9QAMFEVFImrRADxwAgdQLCAkO5RjSUJWmLWqDRKuKBoTKEfEXFI5ISJy4cAIJIeACiCvcUaUK5dLAARmNvZs4iZM4b1p/PpLtmfXszn53d7zjHa8DaFm96SmL2B4Rv0VEdy07u0Bv7WVq8urIX5NXR7KoVF75M6uWuz15daQoWsy3Lc/0lSJKH2Sxv0G9ly5fOTs8NjZ6Mc8PjJ97a+DS5SuPnzk3fHr09Oj5oePHjx0dfOrJoSeaiuPaEu+nuG7ve/fCgb0nXvv4xZFKvP7D52l9t+fv18dR09NUvQsrtkalamZ6R/X54VUu/b9mR106a9vEFWFZyhGRdld7tf13Rzlmdl53vPD+dObbTVpBYN2kc9OueVPL+WspP3sBd6dMG4cWVZzx0/ff4rGR/Y/NduvZ9DxajX8qf/z0Um3blNJ32Z7aN/auOfOV8tf/N1hmKluudaEq3UvUvz0iTk78fSM9ouF1iEVkTZcEAJj2der/PNao/1ea1bfZmY+h9ETE4YjYHRH/i4g90z2hiHsi4t5l1t87Jz+///PLlmUucllS/+/pfGyreNTeKeLKpnM7qvG3Z2+cGRs9km+TvmjvTPnBRer45vlfP1rovd66/l96pPqLvmC+Hjfb5nQ+Tw2PD68i5FluvRexr61R/Nn0SEDaAnsjYt8Klp+22ZlHPzuQ0ju3zX9/6fgXkOUDF6tU+TTikdr+n4g58ddVlWpaaHxyoCvGRo8MFEfFfD/+fP3l+nx7XXpW/F3NxTT3u8hqpP2/dc7xX1t+Hn8pr3DOeO3EMuq4/vuHC0Y1K/5y3JiazOJkvvDamGLpZltnRGyZ2Wzp+O/IXq2mO/Jp7wyPj18cjOjIJ8yaPjRTX5Evyqf4+w41bv+7I/75JJ9vf0Skg/i+iLg/Ig7m6/5ARDwYEYcWif/75x56c/EttILjf42k+E81/PybPv57svrx+hUkyme/+2qh+pv6/Os8Vk315VOa+fxrdgVXs+0AAADgTlGqjkFnpf4iXXdxak9sLY1duDR+uDfePn+qNlbdE+2l4kpXd9310MH82nCRH0rpjpn80YjYVf2l0ZZqvn/kwtiOzQwcqN6rU7T/znxaf3/t9Y/yZq4ZsCGWNY5W/6OzL75c+5UBNpT7NaF1af/QurR/aF3aP7SuRu3/WsTUJqwKsMGaO/9X3G4OdyH9f2hd2j+0rpn27xd/0ELm3xJf/N3KSu70n0nsPrGq2dc9UelelyVPLH+u8jpFGnV/2rFw4SwiVlZFlBYv0xGXr3StUTjpDLVYmeKmlaYXWFqyzDNLbZb2Vf0nRkoczBOdEdHsXNea2Kdrd/wkmct+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAHe3fAAAA///pidwx") getsockname$inet6(r6, 0x0, &(0x7f0000000100)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x20008090) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="0500000000000f0071190400000000008510000002000000850000007600000095"], &(0x7f0000000700)='GPL\x00', 0x5, 0xc3, &(0x7f0000000740)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 10.204910024s ago: executing program 5 (id=1164): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30008011) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="89000000120081ae08060cdc030ec0007f03e3f7ff1f000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27f", 0x88}], 0x1}, 0x0) 9.755326656s ago: executing program 2 (id=1167): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mq_open(&(0x7f0000000000)='R}\x00', 0x40, 0x60, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ppoll(&(0x7f00000003c0)=[{r0, 0x4014}], 0x1, &(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000000c0)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000140)=[0x0], 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="230000006d0200000300000022bf000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0), &(0x7f0000001600), 0x401, r3, 0x0, 0xa002a0}, 0x38) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001640)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001680)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000016c0)='./proc\x00', 0x180) unshare(0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001740)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000001840), 0x651, 0x0) recvmmsg(r5, &(0x7f0000001880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000018c0)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000001900)=@base={0x21, 0x4, 0x5b, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r2, 0xeeeeeeee}) 9.655037926s ago: executing program 5 (id=1168): r0 = syz_open_dev$vim2m(&(0x7f00000006c0), 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000900)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000c00), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000c40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c80)=0x6) syz_open_dev$video(0x0, 0x8, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={0x0, 0x6ec}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) mknodat(0xffffffffffffff9c, &(0x7f0000000d80)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000e40)='./file2\x00', 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000e80)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000ec0)=0x1) 7.161024202s ago: executing program 3 (id=1170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x9c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_LABELS={0x14, 0x7, "52add35914398c3899317dd95a90224c"}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x9c}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed282811"], 0xfdef) 5.044633802s ago: executing program 1 (id=1171): setresuid(0x0, 0xee01, 0x0) socket(0xa, 0x3, 0xff) socket$vsock_stream(0x28, 0x1, 0x0) set_mempolicy(0x3, 0x0, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f00000003c0)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 4.762023757s ago: executing program 5 (id=1172): syz_emit_ethernet(0xbe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 4.575444202s ago: executing program 0 (id=1174): r0 = syz_open_dev$vim2m(&(0x7f00000006c0), 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000900)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c00), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000c40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c80)=0x6) syz_open_dev$video(0x0, 0x8, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={0x0, 0x6ec}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) lsetxattr$smack_xattr_label(&(0x7f0000000dc0)='./file2\x00', &(0x7f0000000e00)='security.SMACK64MMAP\x00', 0x0, 0x0, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000e40)='./file2\x00', 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000e80)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000ec0)=0x1) 3.810369016s ago: executing program 0 (id=1175): bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000c40)='\x00'/14, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.541408981s ago: executing program 0 (id=1176): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 3.293705018s ago: executing program 3 (id=1177): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x241) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3.085606703s ago: executing program 0 (id=1178): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x14, 0x0, &(0x7f0000000340)) r1 = socket(0x10, 0x2, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x10b8}, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000580)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, '\x00'}], 0x18}, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000840)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000880)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r5, &(0x7f00000008c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffff73}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000900)=[{{&(0x7f0000000980)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000a00)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)='m', 0x1}], 0x1}}], 0x2, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYBLOB="0a040200060004"], 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r8, @ANYBLOB="04005b00"], 0x20}}, 0x48000) close_range(r1, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)}, 0x14) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x8, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000004000000000000000003500ffff0000000085000000000000000000000500fcff000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x567058a4}, 0x94) 3.020511456s ago: executing program 5 (id=1179): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x21400, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r1 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) sched_setscheduler(r1, 0x1, &(0x7f0000000640)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000740), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x88, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x9, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000940)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x4c7ac37826251993, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@cache={0x0, 0x800, 0x0, 0x80, 'cache\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '1024', 0x20, '0', 0x20, 'default 0'}}]}) setrlimit(0x5, &(0x7f0000000b00)={0x7, 0x8001}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x5a3700, 0x0) r5 = socket(0xa, 0x80000, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) bind(r5, &(0x7f0000000280)=@can={0x1d, r6, 0x1, 0x2}, 0x10) r7 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r7, &(0x7f0000000300)={&(0x7f0000000340)={0x1d, r6}, 0x10, &(0x7f0000000380)={&(0x7f00000003c0)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, "0100"}, 0x10}}, 0x20004004) sendmsg$nl_route(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@bridge_setlink={0x3c, 0x13, 0x4, 0x70bd28, 0x25dfdbfb, {0x7, 0x0, 0x0, r6, 0x9014, 0x101}, [@IFLA_OPERSTATE={0x5, 0x10, 0x2}, @IFLA_IFALIAS={0x14, 0x14, 'tunl0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 2.921363014s ago: executing program 2 (id=1180): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={[&(0x7f0000000100)='#\x00', &(0x7f0000000140)='$\x00']}, &(0x7f0000000300)={[&(0x7f00000001c0)='@\xf3@,[.\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='\x00']}, 0x400) r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x205, 0x88201) r1 = syz_open_dev$usbmon(&(0x7f0000000380), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000003c0)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000400)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) socket$unix(0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000480)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000005c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000600), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000400000004a50d0001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f0000000780)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r6}, @generic={0x61, 0x0, 0x1, 0x3}, @exit], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.650885501s ago: executing program 3 (id=1181): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r4, 0x1) sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) open$dir(0x0, 0x40000, 0x235) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) 906.759537ms ago: executing program 0 (id=1182): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30008011) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)}, 0x0) 903.963632ms ago: executing program 5 (id=1183): r0 = openat(0xffffffffffffffff, &(0x7f0000000240)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x335180, 0x0) write(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x874, 0x6, 0x1}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={r1, 0x8, 0x3, 0x4, 0x7, 0x81}, 0x14) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000001c0)={@loopback={0xfec0ffffffffffff}, 0x32, r4}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x44, r4}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r6, &(0x7f00000000c0), &(0x7f0000000100)=@udp6=r5}, 0x20) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pselect6(0x40, &(0x7f0000000180)={0x8, 0x80, 0x401, 0x6, 0x6, 0x5, 0x401}, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000340), 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r7, 0x852ac000) r8 = dup(r7) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000480)=0x19f6, 0x4) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f00000003c0)='X', 0x1, 0x400e1, &(0x7f0000000400)={0xa, 0xffff, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) 617.093625ms ago: executing program 3 (id=1184): socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000040085"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xd50, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0x200000ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 454.369758ms ago: executing program 3 (id=1185): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r1 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) sched_setscheduler(r1, 0x1, &(0x7f0000000640)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000740), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000780), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x88, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x9, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000940)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x4c7ac37826251993, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@cache={0x0, 0x800, 0x0, 0x80, 'cache\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '1024', 0x20, '0', 0x20, 'default 0'}}]}) setrlimit(0x5, &(0x7f0000000b00)={0x7, 0x8001}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x5a3700, 0x0) r5 = socket(0xa, 0x80000, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@bridge_setlink={0x3c, 0x13, 0x4, 0x70bd28, 0x25dfdbfb, {0x7, 0x0, 0x0, r6, 0x9014, 0x101}, [@IFLA_OPERSTATE={0x5, 0x10, 0x2}, @IFLA_IFALIAS={0x14, 0x14, 'tunl0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 436.621428ms ago: executing program 0 (id=1186): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x6, 0x9fd, 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 1.071608ms ago: executing program 1 (id=1187): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xc08, 0x80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x8000) 0s ago: executing program 2 (id=1188): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) io_uring_setup(0x76fc, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x1000, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r3}, 0x11) syz_open_dev$dri(0x0, 0x8000000002, 0x48340) socket$kcm(0x21, 0x7, 0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000004c0), 0x1d3942, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x9, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f00000005c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000640)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000006c0), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000700), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x200000) sendmmsg$unix(r2, &(0x7f00000004c0), 0x651, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): 05392][ T4750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.605608][ T4750] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.605814][ T4750] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.606052][ T4750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.606211][ T4750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.606275][ T4750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.606508][ T4750] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.606611][ T4750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.606784][ T4750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.607006][ T4750] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.607148][ T4750] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.608223][ T4750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.608693][ T4750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.609464][ T4750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.610871][ T4750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.611108][ T4750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.611645][ T4750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.612423][ T4743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.620708][ T4752] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.622351][ T4743] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.637775][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.820261][ T4735] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.820544][ T4735] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.820913][ T4735] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.825440][ T4744] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.826935][ T4740] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.841698][ T4747] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.878520][ T4735] infiniband rxe0: set active [ 29.878941][ T4735] infiniband rxe0: added rxe_eth0 [ 29.879064][ T4736] rxe0: rxe_newlink: already configured on rxe_eth0 [ 29.894917][ T1166] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.901886][ T4747] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.910228][ T4735] RDS/IB: rxe0: added [ 29.910302][ T4735] smc: adding ib device rxe0 with port count 1 [ 29.910325][ T4735] smc: ib device rxe0 port 1 has no pnetid [ 29.914168][ T1166] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.971747][ T4736] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.050194][ T1166] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.073694][ T875] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.084787][ T4735] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.134288][ T4735] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.168008][ T4740] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.168048][ T4740] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.168145][ T4740] bridge_slave_0: entered allmulticast mode [ 30.169106][ T4740] bridge_slave_0: entered promiscuous mode [ 30.189837][ T4740] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.189876][ T4740] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.189933][ T4740] bridge_slave_1: entered allmulticast mode [ 30.190349][ T4740] bridge_slave_1: entered promiscuous mode [ 30.198453][ T4735] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.214296][ T4744] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.214323][ T4744] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.214390][ T4744] bridge_slave_0: entered allmulticast mode [ 30.214941][ T4744] bridge_slave_0: entered promiscuous mode [ 30.216125][ T4744] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.216148][ T4744] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.216201][ T4744] bridge_slave_1: entered allmulticast mode [ 30.217106][ T4744] bridge_slave_1: entered promiscuous mode [ 30.225358][ T4744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.226253][ T4744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.234531][ T4744] team0: Port device team_slave_0 added [ 30.235246][ T4744] team0: Port device team_slave_1 added [ 30.264625][ T4744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.264637][ T4744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.264650][ T4744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.277540][ T4747] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.277759][ T4747] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.277852][ T4747] bridge_slave_0: entered allmulticast mode [ 30.278261][ T4747] bridge_slave_0: entered promiscuous mode [ 30.279436][ T4747] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.279469][ T4747] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.279519][ T4747] bridge_slave_1: entered allmulticast mode [ 30.279897][ T4747] bridge_slave_1: entered promiscuous mode [ 30.287673][ T4747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.288729][ T4747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.294701][ T4747] team0: Port device team_slave_0 added [ 30.295389][ T4747] team0: Port device team_slave_1 added [ 30.304524][ T4747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.304538][ T4747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.304550][ T4747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.305022][ T4744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.305032][ T4744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.305050][ T4744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.305441][ T4747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.305448][ T4747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.305462][ T4747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.309706][ T4740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.310642][ T4740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.316764][ T4740] team0: Port device team_slave_0 added [ 30.317453][ T4740] team0: Port device team_slave_1 added [ 30.324214][ T4740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.324224][ T4740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.324235][ T4740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.324760][ T4740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.324767][ T4740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.324782][ T4740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.336949][ T4740] hsr_slave_0: entered promiscuous mode [ 30.337280][ T4740] hsr_slave_1: entered promiscuous mode [ 30.382776][ T4747] hsr_slave_0: entered promiscuous mode [ 30.383123][ T4747] hsr_slave_1: entered promiscuous mode [ 30.383312][ T4747] debugfs: 'hsr0' already exists in 'hsr' [ 30.383360][ T4747] Cannot create hsr debugfs directory [ 30.421668][ T4744] hsr_slave_0: entered promiscuous mode [ 30.421982][ T4744] hsr_slave_1: entered promiscuous mode [ 30.422161][ T4744] debugfs: 'hsr0' already exists in 'hsr' [ 30.422171][ T4744] Cannot create hsr debugfs directory [ 30.472354][ T4740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.474936][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.475312][ T4740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.476982][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.502614][ T4740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.504106][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.516533][ T4740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.520307][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.543710][ T4736] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.543754][ T4736] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.543828][ T4736] bridge_slave_0: entered allmulticast mode [ 30.544280][ T4736] bridge_slave_0: entered promiscuous mode [ 30.548282][ T4736] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.548307][ T4736] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.548401][ T4736] bridge_slave_1: entered allmulticast mode [ 30.548803][ T4736] bridge_slave_1: entered promiscuous mode [ 30.567464][ T4747] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.570159][ T4747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.570469][ T4747] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.571684][ T4747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.577191][ T4736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.593480][ T4747] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.594529][ T4747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.594890][ T4747] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.596056][ T4747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.599394][ T4740] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.599433][ T4740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.599571][ T4740] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.599599][ T4740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.601488][ T4736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.612085][ T4736] team0: Port device team_slave_0 added [ 30.615547][ T4736] team0: Port device team_slave_1 added [ 30.636025][ T4735] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.636055][ T4735] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.636152][ T4735] bridge_slave_0: entered allmulticast mode [ 30.636574][ T4735] bridge_slave_0: entered promiscuous mode [ 30.638713][ T4735] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.638736][ T4735] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.638791][ T4735] bridge_slave_1: entered allmulticast mode [ 30.639637][ T4735] bridge_slave_1: entered promiscuous mode [ 30.650568][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.650581][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.650594][ T4736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.652692][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.652700][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.652713][ T4736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.677207][ T4744] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.679482][ T4744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.679810][ T4744] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.682339][ T4744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.690068][ T4735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.691687][ T4735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.697306][ T4747] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.697336][ T4747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.697419][ T4747] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.697448][ T4747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.700760][ T4744] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.702653][ T4744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.702969][ T4744] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.704645][ T4744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.706132][ T4740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.712386][ T4735] team0: Port device team_slave_0 added [ 30.713601][ T4735] team0: Port device team_slave_1 added [ 30.715313][ T4736] hsr_slave_0: entered promiscuous mode [ 30.715618][ T4736] hsr_slave_1: entered promiscuous mode [ 30.715846][ T4736] debugfs: 'hsr0' already exists in 'hsr' [ 30.715855][ T4736] Cannot create hsr debugfs directory [ 30.727084][ T4740] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.731228][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.731735][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.733637][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.733885][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.749013][ T4735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.749025][ T4735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.749039][ T4735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.756739][ T4735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.756751][ T4735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.756764][ T4735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.771396][ T3744] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.771432][ T3744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.781666][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.781698][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.808488][ T4735] hsr_slave_0: entered promiscuous mode [ 30.808808][ T4735] hsr_slave_1: entered promiscuous mode [ 30.809004][ T4735] debugfs: 'hsr0' already exists in 'hsr' [ 30.809014][ T4735] Cannot create hsr debugfs directory [ 30.844437][ T4747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.883286][ T4747] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.886722][ T3744] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.886750][ T3744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.907153][ T4744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.919209][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.919237][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.922201][ T4736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.927121][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.927495][ T4736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.932740][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.935015][ T4744] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.943516][ T4736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.944758][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.946142][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.946210][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.946540][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.946558][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.955129][ T4744] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.955144][ T4744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.964147][ T4736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.965493][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.000447][ T4747] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.000466][ T4747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.030881][ T4735] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.032241][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.038968][ T4735] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.045208][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.050267][ T4735] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.051389][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.054812][ T4735] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.056563][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.096736][ T4736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.112822][ T4740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.130134][ T4740] veth0_vlan: entered promiscuous mode [ 31.135628][ T4740] veth1_vlan: entered promiscuous mode [ 31.145477][ T4740] veth0_macvtap: entered promiscuous mode [ 31.155803][ T4740] veth1_macvtap: entered promiscuous mode [ 31.169689][ T4735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.176100][ T4740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.176780][ T4735] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.180827][ T4740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.184089][ T4736] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.188739][ T1251] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.188764][ T1251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.189300][ T1251] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.189319][ T1251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.190925][ T4744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.209301][ T1251] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.209330][ T1251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.209983][ T1251] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.210004][ T1251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.223329][ T4735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.223345][ T4735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.244874][ T4736] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.244892][ T4736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.287042][ T4747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.305716][ T4744] veth0_vlan: entered promiscuous mode [ 31.307447][ T4744] veth1_vlan: entered promiscuous mode [ 31.325193][ T4744] veth0_macvtap: entered promiscuous mode [ 31.325947][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.325960][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.343461][ T4744] veth1_macvtap: entered promiscuous mode [ 31.352753][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.352767][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.358771][ T3744] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.359180][ T3744] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.366890][ T4747] veth0_vlan: entered promiscuous mode [ 31.370135][ T4747] veth1_vlan: entered promiscuous mode [ 31.375449][ T4747] veth0_macvtap: entered promiscuous mode [ 31.381622][ T4747] veth1_macvtap: entered promiscuous mode [ 31.390211][ T4747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.392035][ T4747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.395285][ T3744] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.395330][ T3744] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.395355][ T3744] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.408847][ T1251] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.414337][ T4740] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.423727][ T4744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.444674][ T4744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.448521][ T3744] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.449135][ T3744] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.449196][ T3744] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.449250][ T3744] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.449311][ T3744] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.449551][ T3744] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.483090][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.483107][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.501888][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.501901][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.524397][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.524414][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.549639][ T4735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.550766][ T1251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.550779][ T1251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.570114][ T4736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.579986][ T4736] veth0_vlan: entered promiscuous mode [ 31.582056][ T4736] veth1_vlan: entered promiscuous mode [ 31.591657][ T4736] veth0_macvtap: entered promiscuous mode [ 31.592756][ T4736] veth1_macvtap: entered promiscuous mode [ 31.597258][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.624712][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.629614][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.629789][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.629861][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.629927][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.630764][ T51] Bluetooth: hci0: command tx timeout [ 31.630961][ T4749] Bluetooth: hci3: command tx timeout [ 31.638939][ T4749] Bluetooth: hci2: command tx timeout [ 31.698712][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.698728][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.707961][ T51] Bluetooth: hci1: command tx timeout [ 31.708237][ T4749] Bluetooth: hci4: command tx timeout [ 31.728783][ T1251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.728800][ T1251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.753869][ T4938] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 31.795918][ T4735] veth0_vlan: entered promiscuous mode [ 31.800988][ T4735] veth1_vlan: entered promiscuous mode [ 31.814221][ T4735] veth0_macvtap: entered promiscuous mode [ 31.815866][ T4735] veth1_macvtap: entered promiscuous mode [ 31.832967][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.835696][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.154234][ T4946] loop2: detected capacity change from 0 to 256 [ 32.159263][ T1251] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.159293][ T1251] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.159313][ T1251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.159330][ T1251] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.167419][ T1251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.167434][ T1251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.182333][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.182349][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.211913][ C1] vcan0: j1939_tp_rxtimer: 0x00000000d92cb31b: rx timeout, send abort [ 32.376307][ T4955] md/raid1:md2: active with 2 out of 2 mirrors [ 32.376824][ T4955] md2: detected capacity change from 0 to 4096 [ 32.410014][ T4955] md2: detected capacity change from 4096 to 0 [ 32.410078][ T4955] md: md2 stopped. [ 32.533103][ T4959] trusted_key: encrypted_key: insufficient parameters specified [ 32.546682][ T4959] Config c/1 of g1 needs at least one function. [ 32.546774][ T4959] udc dummy_udc.0: failed to start g1: -22 [ 32.546784][ T4959] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 32.548333][ T4959] UDC core: g1: couldn't find an available UDC or it's busy [ 32.712013][ C1] vcan0: j1939_tp_rxtimer: 0x00000000d92cb31b: abort rx timeout. Force session deactivation [ 33.496087][ T4986] loop3: detected capacity change from 0 to 1024 [ 33.755358][ T51] Bluetooth: hci3: command tx timeout [ 33.755423][ T4749] Bluetooth: hci2: command tx timeout [ 33.817964][ T4749] Bluetooth: hci4: command tx timeout [ 34.251034][ T4995] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.334356][ T4743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 34.335312][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.336109][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 34.336702][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 34.336853][ T4743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.337287][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.337491][ T4743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 34.338720][ T4743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.339039][ T4743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.339692][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 34.500560][ T4999] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.542892][ T4998] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.807016][ T4999] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.807074][ T4999] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.807178][ T4999] bridge_slave_0: entered allmulticast mode [ 34.809699][ T4999] bridge_slave_0: entered promiscuous mode [ 34.812968][ T4999] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.812992][ T4999] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.813054][ T4999] bridge_slave_1: entered allmulticast mode [ 34.813454][ T4999] bridge_slave_1: entered promiscuous mode [ 35.087074][ T4999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.087164][ T4998] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.087220][ T4998] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.087311][ T4998] bridge_slave_0: entered allmulticast mode [ 35.096381][ T4998] bridge_slave_0: entered promiscuous mode [ 35.097860][ T4998] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.097890][ T4998] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.098064][ T4998] bridge_slave_1: entered allmulticast mode [ 35.098534][ T4998] bridge_slave_1: entered promiscuous mode [ 35.101426][ T4999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.116516][ T4999] team0: Port device team_slave_0 added [ 35.117533][ T4998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.122192][ T4998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.123153][ T4999] team0: Port device team_slave_1 added [ 35.137245][ T4998] team0: Port device team_slave_0 added [ 35.138850][ T4999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.138860][ T4999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.138871][ T4999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.139987][ T4999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.139996][ T4999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.140007][ T4999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.140770][ T4998] team0: Port device team_slave_1 added [ 35.155622][ T4998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.155636][ T4998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.155648][ T4998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.156894][ T4998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.156903][ T4998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.156916][ T4998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.169286][ T4999] hsr_slave_0: entered promiscuous mode [ 35.169616][ T4999] hsr_slave_1: entered promiscuous mode [ 35.169822][ T4999] debugfs: 'hsr0' already exists in 'hsr' [ 35.169833][ T4999] Cannot create hsr debugfs directory [ 35.194216][ T4998] hsr_slave_0: entered promiscuous mode [ 35.194608][ T4998] hsr_slave_1: entered promiscuous mode [ 35.194813][ T4998] debugfs: 'hsr0' already exists in 'hsr' [ 35.194823][ T4998] Cannot create hsr debugfs directory [ 35.298461][ T4999] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.680358][ T4965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 35.788173][ T51] Bluetooth: hci3: command tx timeout [ 35.788228][ T4739] Bluetooth: hci2: command tx timeout [ 35.839550][ T5068] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 35.868497][ T4739] Bluetooth: hci4: command tx timeout [ 36.195255][ T5081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 36.195275][ T5081] netlink: 22 bytes leftover after parsing attributes in process `syz.0.21'. [ 36.291781][ T5083] SET target dimension over the limit! [ 36.428678][ T4739] Bluetooth: hci0: command tx timeout [ 36.439476][ T4739] Bluetooth: hci1: command tx timeout [ 36.493194][ T4999] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.554480][ T4999] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.597117][ T4999] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.667179][ T5085] loop2: detected capacity change from 0 to 256 [ 36.750779][ T5085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 36.773601][ T4995] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.833820][ T4995] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.872777][ T4995] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.886384][ T5088] loop2: detected capacity change from 0 to 512 [ 36.900532][ T5088] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 36.900552][ T5088] FAT-fs (loop2): Filesystem has been set read-only [ 36.902124][ T5088] FAT-fs (loop2): error, invalid access to FAT (entry 0x00020000) [ 36.902288][ T5088] FAT-fs (loop2): error, invalid access to FAT (entry 0x00020000) [ 36.963740][ T5091] FAULT_INJECTION: forcing a failure. [ 36.963740][ T5091] name failslab, interval 1, probability 0, space 0, times 1 [ 36.963764][ T5091] CPU: 1 UID: 0 PID: 5091 Comm: syz.2.25 Not tainted syzkaller #0 PREEMPT [ 36.963779][ T5091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 36.963785][ T5091] Call trace: [ 36.963789][ T5091] show_stack+0x2c/0x3c (C) [ 36.963806][ T5091] __dump_stack+0x30/0x40 [ 36.963815][ T5091] dump_stack_lvl+0xd8/0x12c [ 36.963823][ T5091] dump_stack+0x1c/0x28 [ 36.963831][ T5091] should_fail_ex+0x418/0x58c [ 36.963842][ T5091] should_failslab+0xc4/0x120 [ 36.963852][ T5091] __kvmalloc_node_noprof+0x160/0x7fc [ 36.963864][ T5091] allocate_hook_entries_size+0x50/0xb8 [ 36.963874][ T5091] nf_hook_entries_grow+0x1b0/0x560 [ 36.963888][ T5091] __nf_register_net_hook+0x22c/0x624 [ 36.963896][ T5091] nf_register_net_hook+0xc0/0x19c [ 36.963904][ T5091] nf_register_net_hooks+0x54/0xf0 [ 36.963911][ T5091] xt_register_table+0x2e0/0x710 [ 36.963924][ T5091] ip6t_register_table+0x140/0x2b0 [ 36.963937][ T5091] ip6table_mangle_table_init+0x4c/0x78 [ 36.963955][ T5091] xt_find_table_lock+0x228/0x3c0 [ 36.963967][ T5091] do_ip6t_get_ctl+0x554/0x10f8 [ 36.963975][ T5091] nf_getsockopt+0x94/0xd4 [ 36.963984][ T5091] ipv6_getsockopt+0x220/0x3b4 [ 36.963995][ T5091] udpv6_getsockopt+0x14c/0x388 [ 36.964007][ T5091] sock_common_getsockopt+0xa8/0xc4 [ 36.964018][ T5091] do_sock_getsockopt+0x338/0x720 [ 36.964031][ T5091] __sys_getsockopt+0xfc/0x168 [ 36.964042][ T5091] __arm64_sys_getsockopt+0xc8/0xe4 [ 36.964054][ T5091] invoke_syscall+0x98/0x244 [ 36.964063][ T5091] el0_svc_common+0xec/0x23c [ 36.964071][ T5091] do_el0_svc+0x4c/0x5c [ 36.964080][ T5091] el0_svc+0x60/0x1d8 [ 36.964088][ T5091] el0t_64_sync_handler+0x44/0x104 [ 36.964096][ T5091] el0t_64_sync+0x198/0x19c [ 36.996341][ T4995] bridge_slave_1: left allmulticast mode [ 36.996368][ T4995] bridge_slave_1: left promiscuous mode [ 36.996711][ T4995] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.010227][ T4995] bridge_slave_0: left allmulticast mode [ 37.010247][ T4995] bridge_slave_0: left promiscuous mode [ 37.010340][ T4995] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.117101][ T4995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.159375][ T4995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.389974][ T5105] overlayfs: cannot append lower layer [ 37.410238][ T4995] bond0 (unregistering): Released all slaves [ 37.422621][ T5103] loop0: detected capacity change from 0 to 256 [ 37.530345][ T5093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 37.867770][ T4739] Bluetooth: hci2: command tx timeout [ 37.868582][ T4739] Bluetooth: hci3: command tx timeout [ 38.019910][ T51] Bluetooth: hci4: command tx timeout [ 38.072524][ T4995] hsr_slave_0: left promiscuous mode [ 38.079631][ T4995] hsr_slave_1: left promiscuous mode [ 38.081686][ T4995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.081713][ T4995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.082549][ T4995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.082559][ T4995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.099512][ T4995] veth1_macvtap: left promiscuous mode [ 38.099551][ T4995] veth0_macvtap: left promiscuous mode [ 38.099606][ T4995] veth1_vlan: left promiscuous mode [ 38.099649][ T4995] veth0_vlan: left promiscuous mode [ 38.242818][ T4995] team0 (unregistering): Port device team_slave_1 removed [ 38.256619][ T4995] team0 (unregistering): Port device team_slave_0 removed [ 38.507761][ T4739] Bluetooth: hci0: command tx timeout [ 38.508075][ T51] Bluetooth: hci1: command tx timeout [ 38.610454][ T4998] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.616798][ T5163] Zero length message leads to an empty skb [ 38.619177][ T4998] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.619615][ T4998] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.621028][ T4998] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.623355][ T4998] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.626709][ T5163] loop0: detected capacity change from 0 to 1024 [ 38.627923][ T4998] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.634563][ T4998] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.639758][ T4998] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.693713][ T5163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.696109][ T4999] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.702409][ T4999] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.704731][ T4999] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.706406][ T4999] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.709588][ T4999] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.716112][ T4999] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.723021][ T4999] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.960835][ T4999] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.974534][ T5163] FAULT_INJECTION: forcing a failure. [ 38.974534][ T5163] name fail_futex, interval 1, probability 0, space 0, times 1 [ 38.974557][ T5163] CPU: 0 UID: 0 PID: 5163 Comm: syz.0.36 Not tainted syzkaller #0 PREEMPT [ 38.974568][ T5163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.974575][ T5163] Call trace: [ 38.974579][ T5163] show_stack+0x2c/0x3c (C) [ 38.974595][ T5163] __dump_stack+0x30/0x40 [ 38.974604][ T5163] dump_stack_lvl+0xd8/0x12c [ 38.974612][ T5163] dump_stack+0x1c/0x28 [ 38.974620][ T5163] should_fail_ex+0x418/0x58c [ 38.974631][ T5163] should_fail+0x14/0x24 [ 38.974640][ T5163] get_futex_key+0x1ec/0x12b0 [ 38.974652][ T5163] futex_wake+0x10c/0x594 [ 38.974660][ T5163] do_futex+0x2c4/0x378 [ 38.974672][ T5163] __arm64_sys_futex+0x2e4/0x418 [ 38.974684][ T5163] invoke_syscall+0x98/0x244 [ 38.974693][ T5163] el0_svc_common+0xec/0x23c [ 38.974701][ T5163] do_el0_svc+0x4c/0x5c [ 38.974709][ T5163] el0_svc+0x60/0x1d8 [ 38.974718][ T5163] el0t_64_sync_handler+0x44/0x104 [ 38.974726][ T5163] el0t_64_sync+0x198/0x19c [ 39.030526][ T4999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.034361][ T4999] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.040294][ T3744] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.040324][ T3744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.041310][ T3744] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.041330][ T3744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.050589][ T5163] netlink: 'syz.0.36': attribute type 1 has an invalid length. [ 39.050609][ T5163] netlink: 228 bytes leftover after parsing attributes in process `syz.0.36'. [ 39.063603][ T5163] team0 (unregistering): Port device team_slave_0 removed [ 39.070116][ T5163] team0 (unregistering): Port device team_slave_1 removed [ 39.084632][ T5186] netlink: 'syz.2.37': attribute type 5 has an invalid length. [ 39.096768][ T4998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.114880][ T4998] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.123062][ T3744] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.123110][ T3744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.127161][ T3744] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.127198][ T3744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.179072][ T4747] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.183954][ T4995] bridge_slave_1: left allmulticast mode [ 39.183976][ T4995] bridge_slave_1: left promiscuous mode [ 39.184081][ T4995] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.195140][ T4995] bridge_slave_0: left allmulticast mode [ 39.195158][ T4995] bridge_slave_0: left promiscuous mode [ 39.195375][ T4995] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.292765][ T4995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.341581][ T4995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.368534][ T4995] bond0 (unregistering): Released all slaves [ 39.372410][ T26] team_slave_0: entered promiscuous mode [ 39.372431][ T26] team_slave_1: entered promiscuous mode [ 39.503229][ T5219] loop3: detected capacity change from 0 to 512 [ 39.525595][ T5219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.549819][ T4998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.573100][ T4999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.616083][ T4999] veth0_vlan: entered promiscuous mode [ 39.631810][ T4999] veth1_vlan: entered promiscuous mode [ 39.637096][ T4999] veth0_macvtap: entered promiscuous mode [ 39.681724][ T4999] veth1_macvtap: entered promiscuous mode [ 39.683798][ T5219] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #18: comm syz.3.42: corrupted inode contents [ 39.683886][ T5219] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 39.685692][ T4999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.687347][ T4999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.689859][ T5219] EXT4-fs error (device loop3): ext4_dirty_inode:6736: inode #18: comm syz.3.42: mark_inode_dirty error [ 39.689911][ T5219] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 39.700980][ T5219] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #18: comm syz.3.42: corrupted inode contents [ 39.701023][ T5219] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 39.701232][ T5219] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #18: comm syz.3.42: mark_inode_dirty error [ 39.701254][ T5219] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 39.713577][ T5219] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2965: inode #18: comm syz.3.42: mark inode dirty (error -117) [ 39.713624][ T5219] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 39.713840][ T5219] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117) [ 39.732607][ T4740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.744959][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.764653][ T1251] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.764790][ T3744] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.793031][ T4998] veth0_vlan: entered promiscuous mode [ 39.800435][ T3744] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.806106][ T4998] veth1_vlan: entered promiscuous mode [ 39.837179][ T4998] veth0_macvtap: entered promiscuous mode [ 39.882174][ T4998] veth1_macvtap: entered promiscuous mode [ 39.886295][ T4998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.887337][ T4998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.896737][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.896752][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.896968][ T4372] team_slave_0: left promiscuous mode [ 39.896985][ T4372] team_slave_1: left promiscuous mode [ 39.917121][ T4995] hsr_slave_0: left promiscuous mode [ 39.917381][ T4995] hsr_slave_1: left promiscuous mode [ 39.920336][ T4995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.920348][ T4995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.920637][ T4995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.920645][ T4995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.923242][ T4995] veth1_macvtap: left promiscuous mode [ 39.923269][ T4995] veth0_macvtap: left promiscuous mode [ 39.923314][ T4995] veth1_vlan: left promiscuous mode [ 39.923349][ T4995] veth0_vlan: left promiscuous mode [ 40.288762][ T4995] team0 (unregistering): Port device team_slave_1 removed [ 40.307277][ T4995] team0 (unregistering): Port device team_slave_0 removed [ 40.337179][ T5237] loop2: detected capacity change from 0 to 512 [ 40.405491][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.405506][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.466887][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.466905][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.479141][ T268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.479153][ T268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.499538][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.499918][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.499935][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.499956][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.588863][ T51] Bluetooth: hci1: command tx timeout [ 40.588891][ T51] Bluetooth: hci0: command tx timeout [ 41.526261][ T1166] rxe_eth0 speed is unknown, defaulting to 1000 [ 42.667793][ T4739] Bluetooth: hci0: command tx timeout [ 42.667819][ T4739] Bluetooth: hci1: command tx timeout [ 63.834159][ T5267] netlink: 'syz.3.49': attribute type 4 has an invalid length. [ 64.521504][ T1612] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.521539][ T1612] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.526450][ T24] cfg80211: failed to load regulatory.db [ 64.769826][ T5298] process 'syz.3.52' launched './file2' with NULL argv: empty string added [ 64.782017][ T5298] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 65.019097][ T5302] loop1: detected capacity change from 0 to 1024 [ 65.022064][ T5302] ======================================================= [ 65.022064][ T5302] WARNING: The mand mount option has been deprecated and [ 65.022064][ T5302] and is ignored by this kernel. Remove the mand [ 65.022064][ T5302] option from the mount to silence this warning. [ 65.022064][ T5302] ======================================================= [ 65.022108][ T5302] EXT4-fs: Ignoring removed i_version option [ 65.050164][ T5304] loop4: detected capacity change from 0 to 4096 [ 65.052948][ T5304] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.054721][ T5302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 65.056323][ T5304] EXT4-fs (loop4): Test dummy encryption mode enabled [ 65.057537][ T5304] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 65.058155][ T5304] System zones: 0-5 [ 65.347201][ T5304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.393068][ T4999] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 65.583217][ T5320] loop3: detected capacity change from 0 to 512 [ 65.603188][ T5326] FAULT_INJECTION: forcing a failure. [ 65.603188][ T5326] name failslab, interval 1, probability 0, space 0, times 0 [ 65.603209][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.1.59 Not tainted syzkaller #0 PREEMPT [ 65.603221][ T5326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 65.603227][ T5326] Call trace: [ 65.603230][ T5326] show_stack+0x2c/0x3c (C) [ 65.603247][ T5326] __dump_stack+0x30/0x40 [ 65.603256][ T5326] dump_stack_lvl+0xd8/0x12c [ 65.603264][ T5326] dump_stack+0x1c/0x28 [ 65.603272][ T5326] should_fail_ex+0x418/0x58c [ 65.603283][ T5326] should_failslab+0xc4/0x120 [ 65.603293][ T5326] __kmalloc_cache_noprof+0x94/0x5fc [ 65.603303][ T5326] reuseport_alloc+0x11c/0x458 [ 65.603313][ T5326] inet_hash+0x498/0x90c [ 65.603322][ T5326] inet_csk_listen_start+0x218/0x328 [ 65.603332][ T5326] __inet_listen_sk+0x214/0x630 [ 65.603343][ T5326] inet_listen+0xac/0x120 [ 65.603353][ T5326] __sys_listen_socket+0x100/0x128 [ 65.603369][ T5326] __sys_listen+0xa8/0x10c [ 65.603380][ T5326] __arm64_sys_listen+0x64/0x7c [ 65.603391][ T5326] invoke_syscall+0x98/0x244 [ 65.603400][ T5326] el0_svc_common+0xec/0x23c [ 65.603409][ T5326] do_el0_svc+0x4c/0x5c [ 65.603417][ T5326] el0_svc+0x60/0x1d8 [ 65.603426][ T5326] el0t_64_sync_handler+0x44/0x104 [ 65.603434][ T5326] el0t_64_sync+0x198/0x19c [ 65.893705][ T4998] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.004757][ T5350] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 66.030142][ T5356] Bluetooth: MGMT ver 1.23 [ 66.373942][ T5380] loop2: detected capacity change from 0 to 512 [ 66.376333][ T5380] EXT4-fs: Invalid want_extra_isize 129 [ 66.421069][ T5382] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 66.531449][ T5382] md: could not open device unknown-block(1,0). [ 66.531481][ T5382] md: error, md_import_device() returned -16 [ 66.568045][ T5390] md: could not open device unknown-block(1,1). [ 66.568087][ T5390] md: error, md_import_device() returned -16 [ 66.568921][ T5382] md: md0 stopped. [ 66.583852][ T5384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.73'. [ 66.641810][ T5398] FAULT_INJECTION: forcing a failure. [ 66.641810][ T5398] name failslab, interval 1, probability 0, space 0, times 0 [ 66.641832][ T5398] CPU: 1 UID: 0 PID: 5398 Comm: syz.2.77 Not tainted syzkaller #0 PREEMPT [ 66.641846][ T5398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 66.641852][ T5398] Call trace: [ 66.641855][ T5398] show_stack+0x2c/0x3c (C) [ 66.641873][ T5398] __dump_stack+0x30/0x40 [ 66.641884][ T5398] dump_stack_lvl+0xd8/0x12c [ 66.641892][ T5398] dump_stack+0x1c/0x28 [ 66.641900][ T5398] should_fail_ex+0x418/0x58c [ 66.641912][ T5398] should_failslab+0xc4/0x120 [ 66.641922][ T5398] __kvmalloc_node_noprof+0x160/0x7fc [ 66.641933][ T5398] io_alloc_cache_init+0x48/0x154 [ 66.641949][ T5398] io_ring_ctx_alloc+0x3e0/0x958 [ 66.641961][ T5398] io_uring_create+0x6c/0x830 [ 66.641972][ T5398] __arm64_sys_io_uring_setup+0x284/0x290 [ 66.641984][ T5398] invoke_syscall+0x98/0x244 [ 66.641993][ T5398] el0_svc_common+0xec/0x23c [ 66.642001][ T5398] do_el0_svc+0x4c/0x5c [ 66.642009][ T5398] el0_svc+0x60/0x1d8 [ 66.642019][ T5398] el0t_64_sync_handler+0x44/0x104 [ 66.642027][ T5398] el0t_64_sync+0x198/0x19c [ 66.645071][ T5398] loop2: detected capacity change from 0 to 512 [ 66.645628][ T5398] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.646282][ T5398] EXT4-fs (loop2): unsupported inode size: 0 [ 66.646295][ T5398] EXT4-fs (loop2): blocksize: 4096 [ 66.839008][ T5405] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 66.887294][ T5360] overlayfs: statfs failed on './file0' [ 67.020877][ T5425] syzkaller0: entered promiscuous mode [ 67.020893][ T5425] syzkaller0: entered allmulticast mode [ 67.360852][ T5430] loop1: detected capacity change from 0 to 512 [ 67.370119][ T5430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.393591][ T4999] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.517468][ T5442] 0x000000000000-0x000000010000 : "" [ 67.525041][ T5442] ftl_cs: FTL header not found. [ 67.525834][ T5442] FAULT_INJECTION: forcing a failure. [ 67.525834][ T5442] name failslab, interval 1, probability 0, space 0, times 0 [ 67.525853][ T5442] CPU: 1 UID: 0 PID: 5442 Comm: syz.0.90 Not tainted syzkaller #0 PREEMPT [ 67.525864][ T5442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 67.525870][ T5442] Call trace: [ 67.525873][ T5442] show_stack+0x2c/0x3c (C) [ 67.525890][ T5442] __dump_stack+0x30/0x40 [ 67.525899][ T5442] dump_stack_lvl+0xd8/0x12c [ 67.525908][ T5442] dump_stack+0x1c/0x28 [ 67.525916][ T5442] should_fail_ex+0x418/0x58c [ 67.525927][ T5442] should_failslab+0xc4/0x120 [ 67.525937][ T5442] __kmalloc_cache_noprof+0x94/0x5fc [ 67.525958][ T5442] percpu_ref_init+0xcc/0x2f0 [ 67.525967][ T5442] blk_alloc_queue+0x378/0x590 [ 67.525978][ T5442] blk_mq_alloc_queue+0x148/0x284 [ 67.525989][ T5442] __blk_mq_alloc_disk+0x38/0x10c [ 67.526000][ T5442] add_mtd_blktrans_dev+0x738/0x107c [ 67.526014][ T5442] mtdblock_add_mtd+0x158/0x218 [ 67.526026][ T5442] blktrans_notify_add+0xa8/0xf8 [ 67.526038][ T5442] add_mtd_device+0xedc/0x1504 [ 67.526047][ T5442] mtd_add_partition+0x318/0x438 [ 67.526058][ T5442] mtdchar_blkpg_ioctl+0x224/0x248 [ 67.526070][ T5442] mtdchar_ioctl+0x1218/0x1a7c [ 67.526081][ T5442] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 67.526093][ T5442] __arm64_sys_ioctl+0x154/0x1cc [ 67.526102][ T5442] invoke_syscall+0x98/0x244 [ 67.526111][ T5442] el0_svc_common+0xec/0x23c [ 67.526120][ T5442] do_el0_svc+0x4c/0x5c [ 67.526128][ T5442] el0_svc+0x60/0x1d8 [ 67.526137][ T5442] el0t_64_sync_handler+0x44/0x104 [ 67.526145][ T5442] el0t_64_sync+0x198/0x19c [ 68.118757][ T51] Bluetooth: hci0: Opcode 0x1405 failed: -110 [ 68.120347][ T51] Bluetooth: hci0: command 0x1405 tx timeout [ 68.177433][ T5458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.94'. [ 68.450302][ T5470] loop4: detected capacity change from 0 to 512 [ 69.065748][ T5470] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #2: block 8: comm syz.4.96: lblock 0 mapped to illegal pblock 8 (length 1) [ 69.065903][ T5470] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 69.067686][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 69.067702][ C1] EXT4-fs (loop4): initial error at time 69: ext4_map_blocks:790: inode 2: block 8 [ 69.067722][ C1] EXT4-fs (loop4): last error at time 69: ext4_map_blocks:790: inode 2: block 8 [ 69.106303][ T5470] EXT4-fs (loop4): Remounting filesystem read-only [ 69.106355][ T5470] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.96: error -EUCLEAN reading directory block [ 69.106517][ T5470] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 69.106729][ T5470] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.96: error -EUCLEAN reading directory block [ 69.106798][ T5470] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 69.111620][ T5470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.313042][ T5478] loop1: detected capacity change from 0 to 128 [ 69.318289][ T5478] vfat: Unknown parameter '0000000000000000000000000000000000000000iocharset' [ 69.331608][ T4998] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.489787][ T5503] loop2: detected capacity change from 0 to 512 [ 69.726098][ T5505] bridge0: port 3(ipvlan2) entered blocking state [ 69.726136][ T5505] bridge0: port 3(ipvlan2) entered disabled state [ 69.726198][ T5505] ipvlan2: entered allmulticast mode [ 69.726207][ T5505] bridge0: entered allmulticast mode [ 69.727252][ T5505] ipvlan2: left allmulticast mode [ 69.727262][ T5505] bridge0: left allmulticast mode [ 70.462720][ T5503] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 70.462740][ T5503] FAT-fs (loop2): Filesystem has been set read-only [ 70.650560][ T5518] FAULT_INJECTION: forcing a failure. [ 70.650560][ T5518] name failslab, interval 1, probability 0, space 0, times 0 [ 70.650580][ T5518] CPU: 1 UID: 0 PID: 5518 Comm: syz.3.112 Not tainted syzkaller #0 PREEMPT [ 70.650591][ T5518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 70.650596][ T5518] Call trace: [ 70.650599][ T5518] show_stack+0x2c/0x3c (C) [ 70.650616][ T5518] __dump_stack+0x30/0x40 [ 70.650625][ T5518] dump_stack_lvl+0xd8/0x12c [ 70.650633][ T5518] dump_stack+0x1c/0x28 [ 70.650641][ T5518] should_fail_ex+0x418/0x58c [ 70.650653][ T5518] should_failslab+0xc4/0x120 [ 70.650663][ T5518] kmem_cache_alloc_noprof+0x94/0x5d4 [ 70.650673][ T5518] alloc_vfsmnt+0x38/0x48c [ 70.650685][ T5518] clone_mnt+0x5c/0x6c0 [ 70.650697][ T5518] copy_tree+0x2c0/0x9bc [ 70.650709][ T5518] __do_loopback+0x258/0x32c [ 70.650717][ T5518] do_loopback+0x354/0x424 [ 70.650725][ T5518] path_mount+0x490/0xa88 [ 70.650732][ T5518] do_mount+0xe8/0x148 [ 70.650739][ T5518] __arm64_sys_mount+0x33c/0x388 [ 70.650747][ T5518] invoke_syscall+0x98/0x244 [ 70.650756][ T5518] el0_svc_common+0xec/0x23c [ 70.650765][ T5518] do_el0_svc+0x4c/0x5c [ 70.650773][ T5518] el0_svc+0x60/0x1d8 [ 70.650781][ T5518] el0t_64_sync_handler+0x44/0x104 [ 70.650789][ T5518] el0t_64_sync+0x198/0x19c [ 71.372664][ T5563] netlink: 'syz.4.124': attribute type 5 has an invalid length. [ 71.373237][ T5563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.124'. [ 71.398434][ T5563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.124'. [ 71.403535][ T5563] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.403818][ T5563] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.714706][ T5573] FAULT_INJECTION: forcing a failure. [ 71.714706][ T5573] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 71.714727][ T5573] CPU: 0 UID: 0 PID: 5573 Comm: syz.3.126 Not tainted syzkaller #0 PREEMPT [ 71.714737][ T5573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 71.714742][ T5573] Call trace: [ 71.714745][ T5573] show_stack+0x2c/0x3c (C) [ 71.714760][ T5573] __dump_stack+0x30/0x40 [ 71.714768][ T5573] dump_stack_lvl+0xd8/0x12c [ 71.714775][ T5573] dump_stack+0x1c/0x28 [ 71.714782][ T5573] should_fail_ex+0x418/0x58c [ 71.714792][ T5573] should_fail+0x14/0x24 [ 71.714800][ T5573] should_fail_usercopy+0x20/0x30 [ 71.714808][ T5573] strncpy_from_user+0x48/0x388 [ 71.714818][ T5573] do_getname+0x84/0x234 [ 71.714827][ T5573] getname_flags+0x2c/0x3c [ 71.714836][ T5573] vfs_fstatat+0x48/0xd0 [ 71.714842][ T5573] __arm64_sys_newfstatat+0x134/0x1c8 [ 71.714850][ T5573] invoke_syscall+0x98/0x244 [ 71.714858][ T5573] el0_svc_common+0xec/0x23c [ 71.714865][ T5573] do_el0_svc+0x4c/0x5c [ 71.714872][ T5573] el0_svc+0x60/0x1d8 [ 71.714880][ T5573] el0t_64_sync_handler+0x44/0x104 [ 71.714887][ T5573] el0t_64_sync+0x198/0x19c [ 71.744750][ T5576] loop4: detected capacity change from 0 to 2048 [ 71.751834][ T5577] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 71.770342][ T5576] loop4: p1 < > p4 [ 71.770342][ T5576] p4: [ 71.773607][ T5576] loop4: p4 size 722688 extends beyond EOD, truncated [ 71.774957][ T5576] loop4: p6 start 262464109 is beyond EOD, truncated [ 71.774974][ T5576] loop4: p7 size 2304 extends beyond EOD, truncated [ 71.794635][ T5581] loop2: detected capacity change from 0 to 2048 [ 71.795052][ T5581] EXT4-fs: Ignoring removed nobh option [ 71.860350][ T5586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.128'. [ 72.053014][ T5581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.150903][ T4744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.313816][ T5603] capability: warning: `syz.1.135' uses deprecated v2 capabilities in a way that may be insecure [ 72.320586][ T5604] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 72.320605][ T5604] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 72.323516][ T5604] vhci_hcd vhci_hcd.0: Device attached [ 72.327130][ T5609] loop4: detected capacity change from 0 to 1024 [ 72.327373][ T5603] loop1: detected capacity change from 0 to 256 [ 72.342220][ T5609] EXT4-fs: Ignoring removed oldalloc option [ 72.342278][ T5609] EXT4-fs: Ignoring removed orlov option [ 72.621507][ T5609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 72.625702][ T5609] sctp: [Deprecated]: syz.4.136 (pid 5609) Use of struct sctp_assoc_value in delayed_ack socket option. [ 72.625702][ T5609] Use struct sctp_sack_info instead [ 72.641733][ T1197] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 6) [ 72.643294][ T1197] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 72.643315][ T1197] EXT4-fs (loop4): This should not happen!! Data will be lost [ 72.643315][ T1197] [ 72.644438][ T1197] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm kworker/u8:6: bg 0: block 112: padding at end of block bitmap is not set [ 72.645120][ T1197] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 72.645134][ T1197] EXT4-fs (loop4): This should not happen!! Data will be lost [ 72.645134][ T1197] [ 72.645142][ T1197] EXT4-fs (loop4): Total free blocks count 0 [ 72.645148][ T1197] EXT4-fs (loop4): Free/Dirty block details [ 72.645155][ T1197] EXT4-fs (loop4): free_blocks=0 [ 72.645167][ T1197] EXT4-fs (loop4): dirty_blocks=32 [ 72.645173][ T1197] EXT4-fs (loop4): Block reservation details [ 72.645498][ T4998] EXT4-fs warning (device loop4): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 72.720953][ T5619] netlink: 'syz.4.138': attribute type 10 has an invalid length. [ 72.759338][ T24] usb 4-1: new high-speed USB device number 2 using vhci_hcd [ 72.942312][ T5619] CUSE: unknown device info "" [ 72.942322][ T5619] CUSE: unknown device info "" [ 72.942327][ T5619] CUSE: unknown device info "ÿw" [ 72.942331][ T5619] CUSE: zero length info key specified [ 72.976780][ T5628] usb usb8: usbfs: process 5628 (syz.4.141) did not claim interface 0 before use [ 73.050219][ T30] audit: type=1326 audit(73.020:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5627 comm="syz.4.141" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff93d7a228 code=0x0 [ 73.146399][ T5607] vhci_hcd: connection reset by peer [ 73.150265][ T40] vhci_hcd vhci_hcd.1: stop threads [ 73.150459][ T40] vhci_hcd vhci_hcd.1: release socket [ 73.150929][ T40] vhci_hcd vhci_hcd.1: disconnect device [ 73.308557][ T4743] Bluetooth: hci0: command 0x1405 tx timeout [ 73.353644][ T4739] Bluetooth: hci0: Opcode 0x1405 failed: -110 [ 74.246148][ T5660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.151'. [ 74.306665][ T5669] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 74.684370][ T5686] 0x000000000000-0x000000010000 : "" [ 74.687176][ T5686] ftl_cs: FTL header not found. [ 74.691961][ T5686] FAULT_INJECTION: forcing a failure. [ 74.691961][ T5686] name failslab, interval 1, probability 0, space 0, times 0 [ 74.691981][ T5686] CPU: 0 UID: 0 PID: 5686 Comm: syz.2.163 Not tainted syzkaller #0 PREEMPT [ 74.691992][ T5686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 74.691998][ T5686] Call trace: [ 74.692002][ T5686] show_stack+0x2c/0x3c (C) [ 74.692018][ T5686] __dump_stack+0x30/0x40 [ 74.692028][ T5686] dump_stack_lvl+0xd8/0x12c [ 74.692037][ T5686] dump_stack+0x1c/0x28 [ 74.692045][ T5686] should_fail_ex+0x418/0x58c [ 74.692056][ T5686] should_failslab+0xc4/0x120 [ 74.692066][ T5686] kmem_cache_alloc_noprof+0x94/0x5d4 [ 74.692077][ T5686] __kernfs_new_node+0xf0/0x7d8 [ 74.692086][ T5686] kernfs_new_node+0xe8/0x130 [ 74.692093][ T5686] __kernfs_create_file+0x60/0x2e0 [ 74.692102][ T5686] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 74.692111][ T5686] internal_create_group+0x550/0xb30 [ 74.692122][ T5686] internal_create_groups+0x64/0x138 [ 74.692132][ T5686] sysfs_create_groups+0x2c/0x3c [ 74.692142][ T5686] device_add_attrs+0x124/0x4e4 [ 74.692152][ T5686] device_add+0x420/0x9e0 [ 74.692160][ T5686] __add_disk+0x450/0xbdc [ 74.692170][ T5686] add_disk_fwnode+0xd4/0x340 [ 74.692179][ T5686] device_add_disk+0x38/0x4c [ 74.692188][ T5686] add_mtd_blktrans_dev+0xb28/0x107c [ 74.692202][ T5686] mtdblock_add_mtd+0x158/0x218 [ 74.692215][ T5686] blktrans_notify_add+0xa8/0xf8 [ 74.692227][ T5686] add_mtd_device+0xedc/0x1504 [ 74.692235][ T5686] mtd_add_partition+0x318/0x438 [ 74.692246][ T5686] mtdchar_blkpg_ioctl+0x224/0x248 [ 74.692258][ T5686] mtdchar_ioctl+0x1218/0x1a7c [ 74.692270][ T5686] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 74.692281][ T5686] __arm64_sys_ioctl+0x154/0x1cc [ 74.692291][ T5686] invoke_syscall+0x98/0x244 [ 74.692300][ T5686] el0_svc_common+0xec/0x23c [ 74.692308][ T5686] do_el0_svc+0x4c/0x5c [ 74.692317][ T5686] el0_svc+0x60/0x1d8 [ 74.692325][ T5686] el0t_64_sync_handler+0x44/0x104 [ 74.692333][ T5686] el0t_64_sync+0x198/0x19c [ 74.771145][ T5688] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 74.797129][ T5693] loop2: detected capacity change from 0 to 512 [ 74.797528][ T5693] EXT4-fs: Ignoring removed bh option [ 74.808488][ T5693] EXT4-fs (loop2): failed to initialize system zone (-117) [ 74.808562][ T5693] EXT4-fs (loop2): mount failed [ 74.821163][ T5693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.164'. [ 75.067802][ T4749] Bluetooth: hci5: command 0xfc11 tx timeout [ 75.067867][ T4749] Bluetooth: hci2: command 0x2016 tx timeout [ 75.067930][ T51] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 75.178355][ T5701] netlink: 128 bytes leftover after parsing attributes in process `syz.3.167'. [ 75.197699][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c2d [ 75.213669][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 75.500115][ T5710] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 76.677669][ T4749] Bluetooth: hci4: command tx timeout [ 78.120954][ T24] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 78.159969][ T5755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.184'. [ 78.215337][ T5754] FAULT_INJECTION: forcing a failure. [ 78.215337][ T5754] name failslab, interval 1, probability 0, space 0, times 0 [ 78.215369][ T5754] CPU: 0 UID: 0 PID: 5754 Comm: syz.4.189 Not tainted syzkaller #0 PREEMPT [ 78.215383][ T5754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 78.215391][ T5754] Call trace: [ 78.215396][ T5754] show_stack+0x2c/0x3c (C) [ 78.215416][ T5754] __dump_stack+0x30/0x40 [ 78.215430][ T5754] dump_stack_lvl+0xd8/0x12c [ 78.215443][ T5754] dump_stack+0x1c/0x28 [ 78.215455][ T5754] should_fail_ex+0x418/0x58c [ 78.215470][ T5754] should_failslab+0xc4/0x120 [ 78.215485][ T5754] __kmalloc_noprof+0x108/0x6c8 [ 78.215499][ T5754] sock_kmalloc+0xec/0x1a0 [ 78.215514][ T5754] __ip_mc_join_group+0x334/0x4d0 [ 78.215532][ T5754] ip_mc_join_group_ssm+0x34/0x48 [ 78.215549][ T5754] do_ip_setsockopt+0x1734/0x2628 [ 78.215567][ T5754] ip_setsockopt+0x80/0x128 [ 78.215579][ T5754] raw_setsockopt+0xd8/0x294 [ 78.215594][ T5754] sock_common_setsockopt+0xb0/0xcc [ 78.215609][ T5754] do_sock_setsockopt+0x1f0/0x330 [ 78.215625][ T5754] __sys_setsockopt+0x104/0x170 [ 78.215641][ T5754] __arm64_sys_setsockopt+0xc8/0xe4 [ 78.215657][ T5754] invoke_syscall+0x98/0x244 [ 78.215670][ T5754] el0_svc_common+0x19c/0x23c [ 78.215683][ T5754] do_el0_svc+0x4c/0x5c [ 78.215695][ T5754] el0_svc+0x60/0x1d8 [ 78.215708][ T5754] el0t_64_sync_handler+0x44/0x104 [ 78.215721][ T5754] el0t_64_sync+0x198/0x19c [ 78.219288][ T5754] netlink: 32 bytes leftover after parsing attributes in process `syz.4.189'. [ 78.436973][ T5757] loop1: detected capacity change from 0 to 128 [ 78.681041][ T5746] loop3: detected capacity change from 0 to 1024 [ 78.750678][ T4743] Bluetooth: hci4: command 0x0406 tx timeout [ 78.768640][ T5746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 78.786158][ T5757] capability: warning: `syz.1.190' uses 32-bit capabilities (legacy support in use) [ 78.799197][ T5722] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 3: comm syz.3.177: lblock 3 mapped to illegal pblock 3 (length 2) [ 78.807768][ T5722] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.177: bg 0: block 112: padding at end of block bitmap is not set [ 79.228121][ T51] Bluetooth: hci2: command 0x2016 tx timeout [ 79.441658][ T4740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 79.612780][ T5774] FAULT_INJECTION: forcing a failure. [ 79.612780][ T5774] name failslab, interval 1, probability 0, space 0, times 0 [ 79.612807][ T5774] CPU: 0 UID: 0 PID: 5774 Comm: syz.1.195 Not tainted syzkaller #0 PREEMPT [ 79.612818][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 79.612825][ T5774] Call trace: [ 79.612830][ T5774] show_stack+0x2c/0x3c (C) [ 79.612848][ T5774] __dump_stack+0x30/0x40 [ 79.612861][ T5774] dump_stack_lvl+0xd8/0x12c [ 79.612872][ T5774] dump_stack+0x1c/0x28 [ 79.612883][ T5774] should_fail_ex+0x418/0x58c [ 79.612897][ T5774] should_failslab+0xc4/0x120 [ 79.612910][ T5774] __kmalloc_noprof+0x108/0x6c8 [ 79.612923][ T5774] tomoyo_encode2+0x10c/0x330 [ 79.612949][ T5774] tomoyo_encode+0x34/0x50 [ 79.612961][ T5774] tomoyo_realpath_from_path+0x488/0x4dc [ 79.612973][ T5774] tomoyo_path_perm+0x218/0x460 [ 79.612987][ T5774] tomoyo_inode_getattr+0x28/0x38 [ 79.612999][ T5774] security_inode_getattr+0x114/0x2c0 [ 79.613013][ T5774] vfs_statx_path+0x34/0x22c [ 79.613025][ T5774] vfs_statx+0x124/0x1d8 [ 79.613036][ T5774] vfs_fstatat+0xa4/0xd0 [ 79.613047][ T5774] __arm64_sys_newfstatat+0x134/0x1c8 [ 79.613058][ T5774] invoke_syscall+0x98/0x244 [ 79.613070][ T5774] el0_svc_common+0x19c/0x23c [ 79.613082][ T5774] do_el0_svc+0x4c/0x5c [ 79.613095][ T5774] el0_svc+0x60/0x1d8 [ 79.613108][ T5774] el0t_64_sync_handler+0x44/0x104 [ 79.613122][ T5774] el0t_64_sync+0x198/0x19c [ 79.613185][ T5774] ERROR: Out of memory at tomoyo_realpath_from_path. [ 79.691483][ T5773] bond1: Removing last ns target with arp_interval on [ 79.711676][ T5773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.929955][ T5784] Bluetooth: MGMT ver 1.23 [ 80.827815][ T51] Bluetooth: hci0: command 0x1405 tx timeout [ 80.828437][ T4743] Bluetooth: hci0: Opcode 0x1405 failed: -110 [ 81.841129][ T5811] netlink: 'syz.0.207': attribute type 1 has an invalid length. [ 82.008003][ T4749] Bluetooth: hci3: Opcode 0x1405 failed: -110 [ 82.013038][ T4749] Bluetooth: hci3: command 0x1405 tx timeout [ 83.270143][ T5804] loop1: detected capacity change from 0 to 512 [ 83.585472][ T5804] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 83.585496][ T5804] FAT-fs (loop1): Filesystem has been set read-only [ 83.600644][ T5804] FAT-fs (loop1): error, invalid access to FAT (entry 0x00020000) [ 83.601024][ T5804] FAT-fs (loop1): error, invalid access to FAT (entry 0x00020000) [ 84.737807][ T5831] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 84.737910][ T5831] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 84.792516][ T5831] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 84.802668][ T5831] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 84.802953][ T5831] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 84.839057][ T5831] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 84.878733][ T5831] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 84.878836][ T5831] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 84.936146][ T5831] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 84.939013][ T5831] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 84.939054][ T5831] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 84.961328][ T5831] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 84.969993][ T5831] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 84.970045][ T5831] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 84.974407][ T5831] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 86.128040][ T4743] Bluetooth: hci2: command 0x2016 tx timeout [ 87.058354][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.059516][ T51] Bluetooth: hci0: command 0x1405 tx timeout [ 87.070321][ T4749] Bluetooth: hci4: command 0x0406 tx timeout [ 87.072144][ T4743] Bluetooth: hci3: command 0x1405 tx timeout [ 87.537841][ T5856] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 87.709776][ T5851] loop1: detected capacity change from 0 to 512 [ 87.982732][ T5858] netlink: 20 bytes leftover after parsing attributes in process `syz.0.219'. [ 88.237848][ T4743] Bluetooth: hci2: command 0x2016 tx timeout [ 88.513446][ T5851] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 88.513474][ T5851] FAT-fs (loop1): Filesystem has been set read-only [ 88.997512][ T5860] loop3: detected capacity change from 0 to 4096 [ 89.003775][ T5860] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.011631][ T5860] EXT4-fs (loop3): Test dummy encryption mode enabled [ 89.029364][ T5860] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 89.029459][ T5860] System zones: 0-5 [ 89.037524][ T5860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.147841][ T4743] Bluetooth: hci3: command 0x1405 tx timeout [ 89.147881][ T4749] Bluetooth: hci4: command 0x0406 tx timeout [ 89.147900][ T4743] Bluetooth: hci0: command 0x1405 tx timeout [ 89.147927][ T4749] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.614816][ T4740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.825013][ T5875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.835243][ T5875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.277947][ T4739] Bluetooth: hci2: command 0x2016 tx timeout [ 91.227854][ T4739] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.227907][ T4739] Bluetooth: hci4: command 0x0406 tx timeout [ 91.237734][ T4749] Bluetooth: hci0: command 0x1405 tx timeout [ 91.237789][ T4749] Bluetooth: hci3: command 0x1405 tx timeout [ 91.493673][ T5891] nvmet: adding nsid 1 to subsystem testsubsys [ 91.536962][ T5890] null_blk: disk nullb1 created [ 92.007174][ T5895] hub 1-0:1.0: USB hub found [ 92.012930][ T5895] hub 1-0:1.0: 1 port detected [ 92.332790][ T4739] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 94.213837][ T5924] netlink: 'syz.1.241': attribute type 1 has an invalid length. [ 94.303352][ T5924] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.401389][ T4749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.402664][ T4749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.404044][ T4749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.405469][ T4749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.406270][ T4749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.628037][ T5924] macvtap1: entered allmulticast mode [ 94.636536][ T5941] netlink: 'syz.3.247': attribute type 10 has an invalid length. [ 94.734492][ T268] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.017977][ T5924] bond1: (slave geneve2): making interface the new active one [ 95.019981][ T5924] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 96.347251][ T5956] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 96.349878][ T5956] block device autoloading is deprecated and will be removed. [ 96.459895][ T268] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.509284][ T4749] Bluetooth: hci0: command tx timeout [ 96.782445][ T268] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.949823][ T268] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.064851][ T5932] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.616352][ T268] bridge_slave_1: left allmulticast mode [ 97.616383][ T268] bridge_slave_1: left promiscuous mode [ 97.616557][ T268] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.629657][ T268] bridge_slave_0: left allmulticast mode [ 97.629684][ T268] bridge_slave_0: left promiscuous mode [ 97.629838][ T268] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.937778][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.511378][ T268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.544035][ T268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.561177][ T268] bond0 (unregistering): Released all slaves [ 98.920431][ T6011] Bluetooth: MGMT ver 1.23 [ 98.923064][ T26] usb 1-1: unable to get BOS descriptor or descriptor too short [ 98.923166][ T26] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 98.923219][ T26] usb 1-1: no configurations [ 98.923228][ T26] usb 1-1: can't read configurations, error -22 [ 99.065168][ T6016] syz.2.269 uses obsolete (PF_INET,SOCK_PACKET) [ 101.033672][ T6053] device-mapper: table: 248:5: raid: Cannot understand number of raid devices parameters (-EINVAL) [ 101.033694][ T6053] device-mapper: ioctl: error adding target to table [ 101.208377][ T4428] 8021q: adding VLAN 0 to HW filter on device eth0 [ 101.257940][ T268] hsr_slave_0: left promiscuous mode [ 101.269270][ T268] hsr_slave_1: left promiscuous mode [ 101.270153][ T268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.270173][ T268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.282470][ T268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.282494][ T268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.312361][ T268] veth1_macvtap: left promiscuous mode [ 101.312425][ T268] veth0_macvtap: left promiscuous mode [ 101.312556][ T268] veth1_vlan: left promiscuous mode [ 101.312653][ T268] veth0_vlan: left promiscuous mode [ 101.766574][ T6071] FAULT_INJECTION: forcing a failure. [ 101.766574][ T6071] name failslab, interval 1, probability 0, space 0, times 0 [ 101.766612][ T6071] CPU: 1 UID: 0 PID: 6071 Comm: syz.0.281 Not tainted syzkaller #0 PREEMPT [ 101.766625][ T6071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 101.766634][ T6071] Call trace: [ 101.766639][ T6071] show_stack+0x2c/0x3c (C) [ 101.766660][ T6071] __dump_stack+0x30/0x40 [ 101.766673][ T6071] dump_stack_lvl+0xd8/0x12c [ 101.766687][ T6071] dump_stack+0x1c/0x28 [ 101.766699][ T6071] should_fail_ex+0x418/0x58c [ 101.766714][ T6071] should_failslab+0xc4/0x120 [ 101.766729][ T6071] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 101.766744][ T6071] alloc_inode+0x84/0x198 [ 101.766761][ T6071] iget_locked+0xd8/0x37c [ 101.766774][ T6071] kernfs_get_inode+0x54/0x378 [ 101.766791][ T6071] kernfs_iop_lookup+0x144/0x210 [ 101.766804][ T6071] lookup_open+0x6a8/0x1180 [ 101.766820][ T6071] path_openat+0x50c/0x18f0 [ 101.766836][ T6071] do_file_open+0x1c8/0x2e8 [ 101.766852][ T6071] do_sys_openat2+0x114/0x1e8 [ 101.766865][ T6071] do_sys_open+0xb0/0xe0 [ 101.766878][ T6071] __arm64_sys_openat+0xa8/0xc4 [ 101.766892][ T6071] invoke_syscall+0x98/0x244 [ 101.766905][ T6071] el0_svc_common+0x19c/0x23c [ 101.766918][ T6071] do_el0_svc+0x4c/0x5c [ 101.766931][ T6071] el0_svc+0x60/0x1d8 [ 101.766948][ T6071] el0t_64_sync_handler+0x44/0x104 [ 101.766962][ T6071] el0t_64_sync+0x198/0x19c [ 101.917372][ T268] team0 (unregistering): Port device team_slave_1 removed [ 101.952019][ T268] team0 (unregistering): Port device team_slave_0 removed [ 102.228269][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.228434][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.228658][ T5932] bridge_slave_0: entered allmulticast mode [ 102.230796][ T5932] bridge_slave_0: entered promiscuous mode [ 102.303398][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.303538][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.303758][ T5932] bridge_slave_1: entered allmulticast mode [ 102.305814][ T5932] bridge_slave_1: entered promiscuous mode [ 102.562469][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.578752][ T6085] device-mapper: table: 248:5: crypt: Error decoding and setting key (-EINVAL) [ 102.578774][ T6085] device-mapper: ioctl: error adding target to table [ 102.691175][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.958966][ T5932] team0: Port device team_slave_0 added [ 102.961773][ T5932] team0: Port device team_slave_1 added [ 103.114445][ T6093] warning: `syz.0.289' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.115338][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.115353][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.115371][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.135295][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.135314][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.135330][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.202871][ T6104] netlink: 'syz.2.292': attribute type 1 has an invalid length. [ 103.354550][ T6104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.460887][ T6109] bond1: (slave geneve2): making interface the new active one [ 103.463714][ T6109] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 103.476737][ T6113] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.591957][ T5932] hsr_slave_0: entered promiscuous mode [ 103.600445][ T5932] hsr_slave_1: entered promiscuous mode [ 103.601271][ T5932] debugfs: 'hsr0' already exists in 'hsr' [ 103.601294][ T5932] Cannot create hsr debugfs directory [ 104.333998][ T6132] nbd: must specify an index to disconnect [ 104.388733][ T4428] 8021q: adding VLAN 0 to HW filter on device eth1 [ 104.432982][ T5932] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.458428][ T5932] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.473180][ T5932] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.493208][ T5932] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.494033][ T5932] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.524260][ T5932] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.553750][ T5932] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.577202][ T5932] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.898526][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.969178][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.013895][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.013955][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.066027][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.066082][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.675120][ T4428] 8021q: adding VLAN 0 to HW filter on device eth2 [ 106.220228][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.223337][ T6189] syzkaller0: entered promiscuous mode [ 106.223358][ T6189] syzkaller0: entered allmulticast mode [ 106.910228][ T5932] veth0_vlan: entered promiscuous mode [ 106.943154][ T5932] veth1_vlan: entered promiscuous mode [ 107.027769][ T5932] veth0_macvtap: entered promiscuous mode [ 107.058563][ T5932] veth1_macvtap: entered promiscuous mode [ 107.115927][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.126033][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.181669][ T4428] 8021q: adding VLAN 0 to HW filter on device eth3 [ 107.219827][ T1312] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.221083][ T1312] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.221324][ T1312] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.221356][ T1312] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.350939][ T1312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.350960][ T1312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.470418][ T268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.470439][ T268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.741101][ T6243] netlink: 'syz.2.323': attribute type 10 has an invalid length. [ 107.764096][ T6243] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.766753][ T6243] team0: Port device netdevsim1 added [ 108.138909][ T6243] netlink: 'syz.2.323': attribute type 10 has an invalid length. [ 108.237540][ T6243] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 108.238244][ T6243] team0: Port device netdevsim1 removed [ 108.240468][ T6243] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.288831][ T6243] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 108.333274][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.327'. [ 108.930264][ T6272] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 109.137937][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz.5.332'. [ 109.310904][ T6277] gretap1: entered promiscuous mode [ 109.327294][ T6277] batman_adv: batadv0: Adding interface: gretap1 [ 109.327310][ T6277] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.327328][ T6277] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 111.428164][ T6324] bridge_slave_0: left allmulticast mode [ 111.428193][ T6324] bridge_slave_0: left promiscuous mode [ 111.428395][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.434681][ T6324] bridge_slave_1: left allmulticast mode [ 111.434709][ T6324] bridge_slave_1: left promiscuous mode [ 111.434854][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.483914][ T6324] bond0: (slave bond_slave_0): Releasing backup interface [ 111.532534][ T6324] bond0: (slave bond_slave_1): Releasing backup interface [ 111.575232][ T6324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.575259][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.585332][ T6324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.585356][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.589641][ T6324] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 111.825056][ T6325] syzkaller0: entered promiscuous mode [ 111.825083][ T6325] syzkaller0: entered allmulticast mode [ 111.987130][ T6348] block nbd0: not configured, cannot reconfigure [ 112.273961][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.5.355'. [ 112.410439][ T6367] ip_tables: iptables: counters copy to user failed while replacing table [ 112.486958][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.5.356'. [ 113.020716][ T6378] netlink: 48 bytes leftover after parsing attributes in process `syz.3.359'. [ 113.467521][ T6400] xt_hashlimit: size too large, truncated to 1048576 [ 113.813317][ T6413] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 113.958535][ T6425] netlink: 48 bytes leftover after parsing attributes in process `syz.0.372'. [ 114.187899][ T4739] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.387391][ T6444] ip_tables: iptables: counters copy to user failed while replacing table [ 114.398382][ T6445] netlink: 'syz.5.377': attribute type 1 has an invalid length. [ 114.438993][ T6445] macvtap1: entered allmulticast mode [ 114.981243][ T6471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.384'. [ 114.981273][ T6471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.384'. [ 114.981288][ T6471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.384'. [ 115.153110][ T6476] syzkaller1: entered promiscuous mode [ 115.153137][ T6476] syzkaller1: entered allmulticast mode [ 116.277935][ T4739] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.591072][ T6495] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 116.591099][ T6495] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 116.761734][ T6495] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 116.761755][ T6495] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 116.818628][ T6526] netlink: 24 bytes leftover after parsing attributes in process `syz.5.398'. [ 116.818657][ T6526] netlink: 24 bytes leftover after parsing attributes in process `syz.5.398'. [ 116.818672][ T6526] netlink: 24 bytes leftover after parsing attributes in process `syz.5.398'. [ 116.947770][ T6495] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 116.947802][ T6495] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 117.038019][ T6495] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.038039][ T6495] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 117.504835][ T6546] syzkaller1: entered promiscuous mode [ 117.504859][ T6546] syzkaller1: entered allmulticast mode [ 118.822369][ T6595] bridge_slave_0: left allmulticast mode [ 118.822399][ T6595] bridge_slave_0: left promiscuous mode [ 118.822553][ T6595] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.824140][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.419'. [ 118.824166][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.419'. [ 118.824181][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.419'. [ 118.850045][ T6595] bridge_slave_1: left allmulticast mode [ 118.850072][ T6595] bridge_slave_1: left promiscuous mode [ 118.850209][ T6595] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.887060][ T6595] bond0: (slave bond_slave_0): Releasing backup interface [ 118.936242][ T6595] bond0: (slave bond_slave_1): Releasing backup interface [ 119.001580][ T6595] team0: Port device team_slave_0 removed [ 119.055906][ T6595] team0: Port device team_slave_1 removed [ 119.056732][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.056751][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.069942][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.069972][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.092917][ T6595] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 121.320272][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.430'. [ 121.320303][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.430'. [ 121.320317][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.430'. [ 122.060740][ T6692] syzkaller0: entered promiscuous mode [ 122.060765][ T6692] syzkaller0: entered allmulticast mode [ 122.633773][ T6719] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 122.941295][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.449'. [ 123.354160][ T6732] netlink: 168 bytes leftover after parsing attributes in process `syz.2.451'. [ 123.641147][ T6736] FAULT_INJECTION: forcing a failure. [ 123.641147][ T6736] name failslab, interval 1, probability 0, space 0, times 0 [ 123.641174][ T6736] CPU: 0 UID: 0 PID: 6736 Comm: syz.3.453 Not tainted syzkaller #0 PREEMPT [ 123.641187][ T6736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 123.641195][ T6736] Call trace: [ 123.641200][ T6736] show_stack+0x2c/0x3c (C) [ 123.641219][ T6736] __dump_stack+0x30/0x40 [ 123.641232][ T6736] dump_stack_lvl+0xd8/0x12c [ 123.641245][ T6736] dump_stack+0x1c/0x28 [ 123.641257][ T6736] should_fail_ex+0x418/0x58c [ 123.641272][ T6736] should_failslab+0xc4/0x120 [ 123.641288][ T6736] __kmalloc_noprof+0x108/0x6c8 [ 123.641303][ T6736] __memcg_list_lru_alloc+0x1c4/0x4e8 [ 123.641319][ T6736] memcg_list_lru_alloc+0xc4/0xf8 [ 123.641333][ T6736] __memcg_slab_post_alloc_hook+0x22c/0x824 [ 123.641347][ T6736] kmem_cache_alloc_lru_noprof+0x32c/0x5d8 [ 123.641362][ T6736] alloc_inode+0x84/0x198 [ 123.641379][ T6736] iget_locked+0xd8/0x37c [ 123.641391][ T6736] kernfs_get_inode+0x54/0x378 [ 123.641409][ T6736] kernfs_iop_lookup+0x144/0x210 [ 123.641422][ T6736] lookup_open+0x6a8/0x1180 [ 123.641438][ T6736] path_openat+0x50c/0x18f0 [ 123.641454][ T6736] do_file_open+0x1c8/0x2e8 [ 123.641470][ T6736] do_sys_openat2+0x114/0x1e8 [ 123.641484][ T6736] do_sys_open+0xb0/0xe0 [ 123.641497][ T6736] __arm64_sys_openat+0xa8/0xc4 [ 123.641510][ T6736] invoke_syscall+0x98/0x244 [ 123.641523][ T6736] el0_svc_common+0x19c/0x23c [ 123.641536][ T6736] do_el0_svc+0x4c/0x5c [ 123.641548][ T6736] el0_svc+0x60/0x1d8 [ 123.641561][ T6736] el0t_64_sync_handler+0x44/0x104 [ 123.641574][ T6736] el0t_64_sync+0x198/0x19c [ 124.160419][ T6755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.949767][ T1612] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.949825][ T1612] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.073518][ T6793] FAULT_INJECTION: forcing a failure. [ 126.073518][ T6793] name failslab, interval 1, probability 0, space 0, times 0 [ 126.073547][ T6793] CPU: 0 UID: 0 PID: 6793 Comm: syz.3.468 Not tainted syzkaller #0 PREEMPT [ 126.073561][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 126.073569][ T6793] Call trace: [ 126.073574][ T6793] show_stack+0x2c/0x3c (C) [ 126.073594][ T6793] __dump_stack+0x30/0x40 [ 126.073607][ T6793] dump_stack_lvl+0xd8/0x12c [ 126.073620][ T6793] dump_stack+0x1c/0x28 [ 126.073632][ T6793] should_fail_ex+0x418/0x58c [ 126.073648][ T6793] should_failslab+0xc4/0x120 [ 126.073662][ T6793] __kmalloc_cache_noprof+0x94/0x5fc [ 126.073678][ T6793] bpf_prog_alloc_no_stats+0xdc/0x4e8 [ 126.073695][ T6793] bpf_prog_alloc+0x48/0x110 [ 126.073710][ T6793] bpf_prog_load+0x5e0/0x1554 [ 126.073726][ T6793] __sys_bpf+0x7d4/0x82c [ 126.073743][ T6793] __arm64_sys_bpf+0xd0/0xec [ 126.073758][ T6793] invoke_syscall+0x98/0x244 [ 126.073771][ T6793] el0_svc_common+0x19c/0x23c [ 126.073784][ T6793] do_el0_svc+0x4c/0x5c [ 126.073796][ T6793] el0_svc+0x60/0x1d8 [ 126.073810][ T6793] el0t_64_sync_handler+0x44/0x104 [ 126.073822][ T6793] el0t_64_sync+0x198/0x19c [ 128.392261][ T6774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 129.035385][ T6862] netlink: 'syz.5.493': attribute type 1 has an invalid length. [ 129.267146][ T6868] netlink: 'syz.1.496': attribute type 10 has an invalid length. [ 129.267170][ T6868] netlink: 40 bytes leftover after parsing attributes in process `syz.1.496'. [ 129.267394][ T6868] vlan0: entered promiscuous mode [ 129.272679][ T6868] vlan0: entered allmulticast mode [ 129.272695][ T6868] veth0_vlan: entered allmulticast mode [ 129.273321][ T6868] bridge0: port 3(vlan0) entered blocking state [ 129.273392][ T6868] bridge0: port 3(vlan0) entered disabled state [ 129.276510][ T6868] bridge0: port 3(vlan0) entered blocking state [ 129.276581][ T6868] bridge0: port 3(vlan0) entered forwarding state [ 129.311391][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.497'. [ 129.311420][ T6870] netlink: 9 bytes leftover after parsing attributes in process `syz.5.497'. [ 129.407291][ T6874] netlink: 64 bytes leftover after parsing attributes in process `syz.2.498'. [ 129.442737][ T6874] syzkaller1: entered promiscuous mode [ 129.442761][ T6874] syzkaller1: entered allmulticast mode [ 132.356145][ T6876] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.030416][ T6935] netlink: 'syz.2.520': attribute type 4 has an invalid length. [ 134.089224][ T6953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.522'. [ 134.219974][ T6956] syzkaller0: entered promiscuous mode [ 134.220000][ T6956] syzkaller0: entered allmulticast mode [ 134.278206][ T6959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.526'. [ 134.776807][ T6966] syzkaller1: entered promiscuous mode [ 134.776833][ T6966] syzkaller1: entered allmulticast mode [ 135.226306][ T7001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.536'. [ 135.704186][ T7028] netlink: 24 bytes leftover after parsing attributes in process `syz.5.545'. [ 135.776774][ T7028] syzkaller1: entered promiscuous mode [ 135.776801][ T7028] syzkaller1: entered allmulticast mode [ 136.080190][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'. [ 136.239215][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.553'. [ 136.256552][ T7050] bridge_slave_0: left allmulticast mode [ 136.256580][ T7050] bridge_slave_0: left promiscuous mode [ 136.258055][ T7050] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.311137][ T7050] bridge_slave_1: left allmulticast mode [ 136.311165][ T7050] bridge_slave_1: left promiscuous mode [ 136.311351][ T7050] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.316016][ T7058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.554'. [ 136.352270][ T7050] bond0: (slave bond_slave_0): Releasing backup interface [ 136.406721][ T7050] bond0: (slave bond_slave_1): Releasing backup interface [ 136.461446][ T7050] team0: Port device team_slave_0 removed [ 136.474988][ T7050] team0: Port device team_slave_1 removed [ 136.475737][ T7050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.475756][ T7050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.486581][ T7050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.486606][ T7050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.496902][ T7050] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 136.706890][ T7076] FAULT_INJECTION: forcing a failure. [ 136.706890][ T7076] name failslab, interval 1, probability 0, space 0, times 0 [ 136.706917][ T7076] CPU: 1 UID: 0 PID: 7076 Comm: syz.0.560 Not tainted syzkaller #0 PREEMPT [ 136.706930][ T7076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 136.706938][ T7076] Call trace: [ 136.706943][ T7076] show_stack+0x2c/0x3c (C) [ 136.706970][ T7076] __dump_stack+0x30/0x40 [ 136.706983][ T7076] dump_stack_lvl+0xd8/0x12c [ 136.706996][ T7076] dump_stack+0x1c/0x28 [ 136.707009][ T7076] should_fail_ex+0x418/0x58c [ 136.707025][ T7076] should_failslab+0xc4/0x120 [ 136.707039][ T7076] kmem_cache_alloc_noprof+0x94/0x5d4 [ 136.707054][ T7076] seq_open+0x60/0x13c [ 136.707068][ T7076] kernfs_fop_open+0x414/0x994 [ 136.707081][ T7076] do_dentry_open+0x5c4/0xfbc [ 136.707094][ T7076] vfs_open+0x44/0x2dc [ 136.707107][ T7076] path_openat+0x1084/0x18f0 [ 136.707123][ T7076] do_file_open+0x1c8/0x2e8 [ 136.707140][ T7076] do_sys_openat2+0x114/0x1e8 [ 136.707152][ T7076] do_sys_open+0xb0/0xe0 [ 136.707165][ T7076] __arm64_sys_openat+0xa8/0xc4 [ 136.707178][ T7076] invoke_syscall+0x98/0x244 [ 136.707191][ T7076] el0_svc_common+0x19c/0x23c [ 136.707204][ T7076] do_el0_svc+0x4c/0x5c [ 136.707216][ T7076] el0_svc+0x60/0x1d8 [ 136.707229][ T7076] el0t_64_sync_handler+0x44/0x104 [ 136.707242][ T7076] el0t_64_sync+0x198/0x19c [ 136.975428][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.566'. [ 137.288813][ T7110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.573'. [ 137.982728][ T7138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.588'. [ 138.425518][ T7153] syzkaller1: entered promiscuous mode [ 138.425542][ T7153] syzkaller1: entered allmulticast mode [ 138.830085][ T7168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.601'. [ 139.268948][ T7184] syzkaller1: entered promiscuous mode [ 139.268972][ T7184] syzkaller1: entered allmulticast mode [ 139.856982][ T7208] netlink: 'syz.2.620': attribute type 17 has an invalid length. [ 139.857008][ T7208] netlink: 'syz.2.620': attribute type 16 has an invalid length. [ 139.857024][ T7208] netlink: 152 bytes leftover after parsing attributes in process `syz.2.620'. [ 139.965052][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'. [ 140.241980][ T7224] syzkaller1: entered promiscuous mode [ 140.242006][ T7224] syzkaller1: entered allmulticast mode [ 141.111386][ T7271] netlink: 'syz.3.643': attribute type 10 has an invalid length. [ 141.112314][ T7271] batman_adv: batadv0: Adding interface: veth0 [ 141.112326][ T7271] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.112350][ T7271] batman_adv: batadv0: Interface activated: veth0 [ 142.275396][ T7320] syzkaller1: entered promiscuous mode [ 142.275459][ T7320] syzkaller1: entered allmulticast mode [ 142.903109][ T7334] xt_hashlimit: size too large, truncated to 1048576 [ 143.369797][ T7356] netlink: 204 bytes leftover after parsing attributes in process `syz.1.674'. [ 143.612606][ T7365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.681'. [ 144.012664][ T7386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.688'. [ 144.177852][ T7393] netlink: 204 bytes leftover after parsing attributes in process `syz.2.689'. [ 144.262280][ T7395] netlink: 64 bytes leftover after parsing attributes in process `syz.5.691'. [ 144.385572][ T7395] syzkaller1: entered promiscuous mode [ 144.385597][ T7395] syzkaller1: entered allmulticast mode [ 144.710208][ T7414] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.744524][ T7414] macvtap2: entered allmulticast mode [ 145.000243][ T7432] netlink: 168 bytes leftover after parsing attributes in process `syz.1.705'. [ 145.483886][ T7459] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 145.625829][ T7461] syzkaller0: entered promiscuous mode [ 145.625854][ T7461] syzkaller0: entered allmulticast mode [ 145.755817][ T7473] netlink: 88 bytes leftover after parsing attributes in process `syz.5.723'. [ 145.799258][ T7473] syzkaller1: entered promiscuous mode [ 145.799284][ T7473] syzkaller1: entered allmulticast mode [ 145.987662][ T7485] fuse: Bad value for 'group_id' [ 145.987682][ T7485] fuse: Bad value for 'group_id' [ 146.080383][ T7487] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.199313][ T7487] macvtap1: entered allmulticast mode [ 146.240921][ T7487] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 146.368431][ T7499] netlink: 60 bytes leftover after parsing attributes in process `syz.5.733'. [ 147.964408][ T7522] fuse: Bad value for 'group_id' [ 147.964430][ T7522] fuse: Bad value for 'group_id' [ 148.331220][ T7539] netlink: 60 bytes leftover after parsing attributes in process `syz.1.750'. [ 148.598620][ T7554] fuse: Bad value for 'group_id' [ 148.598637][ T7554] fuse: Bad value for 'group_id' [ 149.592702][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'. [ 149.615855][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'. [ 149.797121][ T7594] syzkaller0: entered promiscuous mode [ 149.797145][ T7594] syzkaller0: entered allmulticast mode [ 150.438760][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'. [ 151.605584][ T7679] syzkaller0: entered promiscuous mode [ 151.605608][ T7679] syzkaller0: entered allmulticast mode [ 152.488836][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.819'. [ 152.488907][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.819'. [ 153.096142][ T7743] ip_tables: iptables: counters copy to user failed while replacing table [ 153.276368][ T7752] loop2: detected capacity change from 0 to 128 [ 153.350952][ T7752] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.493697][ T4744] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.664131][ T7768] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 153.831800][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.842069][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.897426][ T7782] netlink: 156 bytes leftover after parsing attributes in process `syz.5.851'. [ 153.922067][ T7781] binder: 7779:7781 tried to acquire reference to desc 0, got 1 instead [ 153.922494][ T7781] binder_alloc: 7779: binder_alloc_buf, no vma [ 153.922528][ T7781] binder: cannot allocate buffer: vma cleared, target dead or dying [ 153.922614][ T7781] binder: 7779:7781 transaction call to 7779:0 failed 5/29189/-3, code 0 size 0-0 line 3409 [ 153.923477][ T1166] binder: undelivered TRANSACTION_ERROR: 29189 [ 154.350042][ T7807] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 154.350069][ T7807] block device autoloading is deprecated and will be removed. [ 155.147415][ T7810] syz.0.860 (7810): drop_caches: 2 [ 155.806993][ T7822] syzkaller1: entered promiscuous mode [ 155.807017][ T7822] syzkaller1: entered allmulticast mode [ 156.100995][ T7836] ip_tables: iptables: counters copy to user failed while replacing table [ 157.713798][ T7862] netlink: 156 bytes leftover after parsing attributes in process `syz.5.884'. [ 157.918231][ T7869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.919108][ T7869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.000416][ T7877] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 162.864107][ T7917] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 165.372500][ T7945] syzkaller0: entered promiscuous mode [ 165.372528][ T7945] syzkaller0: entered allmulticast mode [ 165.650670][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.912'. [ 165.918909][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.907'. [ 165.919881][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.907'. [ 167.012752][ T7956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.013433][ T7956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.765598][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'. [ 167.765625][ T7963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.916'. [ 167.765643][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'. [ 167.765656][ T7963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.916'. [ 168.518281][ T1197] IPVS: starting estimator thread 0... [ 168.621836][ T7975] IPVS: using max 11 ests per chain, 26400 per kthread [ 170.343072][ T7983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.706907][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.928'. [ 171.706938][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.928'. [ 171.706957][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.928'. [ 171.706970][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.928'. [ 172.178764][ T8006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.930'. [ 172.486397][ T8013] netlink: 'syz.1.933': attribute type 1 has an invalid length. [ 173.613342][ T8013] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.400298][ T8008] syzkaller0: entered promiscuous mode [ 174.400324][ T8008] syzkaller0: entered allmulticast mode [ 174.563939][ T8014] macvtap3: entered allmulticast mode [ 179.874678][ T8066] fuse: Bad value for 'fd' [ 184.028991][ T875] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 184.950600][ T8098] netlink: 'syz.3.955': attribute type 1 has an invalid length. [ 184.978007][ T875] usb 1-1: Using ep0 maxpacket: 16 [ 184.997861][ T875] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 185.016037][ T875] usb 1-1: config 0 interface 0 has no altsetting 0 [ 185.016074][ T875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.064740][ T8098] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.166212][ T875] usb 1-1: config 0 descriptor?? [ 185.304277][ T8098] macvtap2: entered allmulticast mode [ 186.384243][ T8112] loop5: detected capacity change from 0 to 512 [ 186.819538][ T8112] EXT4-fs error (device loop5): __ext4_iget:5592: inode #2: block 131072: comm syz.5.958: invalid block [ 186.820906][ T8112] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 186.827727][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 186.827751][ C1] EXT4-fs (loop5): initial error at time 186: __ext4_iget:5592: inode 2: block 131072 [ 186.827785][ C1] EXT4-fs (loop5): last error at time 186: __ext4_iget:5592: inode 2: block 131072 [ 187.296400][ T8112] EXT4-fs (loop5): get root inode failed [ 187.296420][ T8112] EXT4-fs (loop5): mount failed [ 187.392031][ T1612] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.392216][ T1612] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.063315][ T8126] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 189.286516][ T875] usbhid 1-1:0.0: can't add hid device: -71 [ 189.286642][ T875] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 189.297815][ T875] usb 1-1: USB disconnect, device number 4 [ 189.440626][ T8138] netlink: 88 bytes leftover after parsing attributes in process `syz.3.962'. [ 189.528420][ T8138] syzkaller1: entered promiscuous mode [ 189.528445][ T8138] syzkaller1: entered allmulticast mode [ 189.706047][ T30] audit: type=1326 audit(189.670:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8143 comm="syz.2.968" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bd7a228 code=0x7ffc0000 [ 189.706098][ T30] audit: type=1326 audit(189.670:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8143 comm="syz.2.968" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bd7a228 code=0x7ffc0000 [ 189.706136][ T30] audit: type=1326 audit(189.670:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8143 comm="syz.2.968" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff9bd7a228 code=0x7ffc0000 [ 189.706173][ T30] audit: type=1326 audit(189.670:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8143 comm="syz.2.968" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bd7a228 code=0x7ffc0000 [ 189.706213][ T30] audit: type=1326 audit(189.670:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8143 comm="syz.2.968" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bd7a228 code=0x7ffc0000 [ 189.707284][ T30] audit: type=1326 audit(189.670:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8143 comm="syz.2.968" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff9bd7a228 code=0x7ffc0000 [ 189.707324][ T30] audit: type=1326 audit(189.670:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8143 comm="syz.2.968" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bd7a228 code=0x7ffc0000 [ 189.707360][ T30] audit: type=1326 audit(189.670:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8143 comm="syz.2.968" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bd7a228 code=0x7ffc0000 [ 189.711736][ T30] audit: type=1326 audit(189.680:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8143 comm="syz.2.968" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff9bd7a228 code=0x7ffc0000 [ 189.711784][ T30] audit: type=1326 audit(189.680:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8143 comm="syz.2.968" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bd7a228 code=0x7ffc0000 [ 190.777807][ T8149] tipc: Started in network mode [ 190.777835][ T8149] tipc: Node identity 4, cluster identity 4711 [ 190.777847][ T8149] tipc: Node number set to 4 [ 191.115286][ T8151] ip_tables: iptables: counters copy to user failed while replacing table [ 194.104354][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'. [ 194.104381][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'. [ 194.104394][ T8165] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 195.447312][ T8179] device-mapper: ioctl: Unable to change uuid on mapped device syzb1 to one that already exists: syzb1 [ 195.674380][ T8193] loop1: detected capacity change from 0 to 128 [ 195.677075][ T8191] syz_tun: entered allmulticast mode [ 195.691859][ T8189] syz_tun: left allmulticast mode [ 195.700981][ T8193] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.248655][ T8207] rxe_eth0 speed is unknown, defaulting to 1000 [ 198.895893][ T4999] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.421377][ T8231] device-mapper: ioctl: Unable to rename non-existent device, syza1 to uuid syza1 [ 200.098036][ T8247] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 200.116280][ T8250] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 201.215581][ T8256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.999'. [ 201.226200][ T8253] netlink: 20 bytes leftover after parsing attributes in process `syz.5.998'. [ 202.644835][ T8290] device-mapper: ioctl: Unable to change uuid on mapped device syzb1 to one that already exists: syzb1 [ 203.075821][ T8307] syzkaller0: entered promiscuous mode [ 203.075846][ T8307] syzkaller0: entered allmulticast mode [ 203.242487][ T8309] syzkaller0: entered promiscuous mode [ 203.242515][ T8309] syzkaller0: entered allmulticast mode [ 205.923726][ T8336] device-mapper: ioctl: Unable to rename non-existent device, syzf1 to uuid syzf1 [ 205.948739][ T4852] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.823165][ T8325] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 207.246503][ T8348] syzkaller0: entered promiscuous mode [ 207.246528][ T8348] syzkaller0: entered allmulticast mode [ 208.237674][ T8369] FAULT_INJECTION: forcing a failure. [ 208.237674][ T8369] name failslab, interval 1, probability 0, space 0, times 0 [ 208.237702][ T8369] CPU: 0 UID: 0 PID: 8369 Comm: syz.0.1037 Not tainted syzkaller #0 PREEMPT [ 208.237716][ T8369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 208.237724][ T8369] Call trace: [ 208.237729][ T8369] show_stack+0x2c/0x3c (C) [ 208.237749][ T8369] __dump_stack+0x30/0x40 [ 208.237763][ T8369] dump_stack_lvl+0xd8/0x12c [ 208.237775][ T8369] dump_stack+0x1c/0x28 [ 208.237788][ T8369] should_fail_ex+0x418/0x58c [ 208.237803][ T8369] should_failslab+0xc4/0x120 [ 208.237818][ T8369] __kmalloc_cache_noprof+0x94/0x5fc [ 208.237833][ T8369] kernfs_fop_open+0x2a0/0x994 [ 208.237848][ T8369] do_dentry_open+0x5c4/0xfbc [ 208.237861][ T8369] vfs_open+0x44/0x2dc [ 208.237873][ T8369] path_openat+0x1084/0x18f0 [ 208.237889][ T8369] do_file_open+0x1c8/0x2e8 [ 208.237905][ T8369] do_sys_openat2+0x114/0x1e8 [ 208.237919][ T8369] do_sys_open+0xb0/0xe0 [ 208.237931][ T8369] __arm64_sys_openat+0xa8/0xc4 [ 208.237950][ T8369] invoke_syscall+0x98/0x244 [ 208.237963][ T8369] el0_svc_common+0x19c/0x23c [ 208.237976][ T8369] do_el0_svc+0x4c/0x5c [ 208.237989][ T8369] el0_svc+0x60/0x1d8 [ 208.238003][ T8369] el0t_64_sync_handler+0x44/0x104 [ 208.238016][ T8369] el0t_64_sync+0x198/0x19c [ 209.637268][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1041'. [ 211.062457][ T8395] netlink: 'syz.1.1044': attribute type 1 has an invalid length. [ 211.183072][ T8395] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.625349][ T8410] syzkaller0: entered promiscuous mode [ 211.625374][ T8410] syzkaller0: entered allmulticast mode [ 212.748105][ T8423] syz_tun: entered allmulticast mode [ 212.757893][ T8423] syz_tun: left allmulticast mode [ 212.768955][ T8415] rxe_eth0 speed is unknown, defaulting to 1000 [ 212.942750][ T8430] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1055'. [ 215.320976][ T8465] workqueue: Failed to create a rescuer kthread for wq "dm-cache": -EINTR [ 215.342385][ T8465] device-mapper: table: 248:1: cache: could not create workqueue for metadata object (-ENOMEM) [ 215.342407][ T8465] device-mapper: ioctl: error adding target to table [ 215.548032][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 215.549358][ T8118] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 216.210088][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 216.340860][ T8476] syz_tun: entered allmulticast mode [ 216.370401][ T8475] syz_tun: left allmulticast mode [ 216.532484][ T8484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1071'. [ 216.614022][ T8489] netlink: 'syz.0.1073': attribute type 1 has an invalid length. [ 216.639362][ T8489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.690507][ T8489] bond1: (slave geneve2): making interface the new active one [ 216.692119][ T8489] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 218.099929][ T8512] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 220.055450][ T8528] ip_tables: iptables: counters copy to user failed while replacing table [ 220.163920][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1085'. [ 220.401251][ T12] IPVS: starting estimator thread 0... [ 220.487859][ T8526] IPVS: using max 11 ests per chain, 26400 per kthread [ 220.886873][ T8557] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 222.068168][ T8570] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1095'. [ 222.163282][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 222.732889][ T8574] syzkaller0: entered promiscuous mode [ 222.732915][ T8574] syzkaller0: entered allmulticast mode [ 227.768389][ T1312] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 228.400428][ T8639] ip_tables: iptables: counters copy to user failed while replacing table [ 233.276108][ T8669] TC_ACT_REPEAT abuse ? [ 233.480245][ T14] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 235.389410][ T4879] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.679915][ T8728] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 238.916587][ T8735] syzkaller0: entered promiscuous mode [ 238.916613][ T8735] syzkaller0: entered allmulticast mode [ 239.163608][ T8753] netlink: 'syz.1.1150': attribute type 1 has an invalid length. [ 239.229580][ T3744] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 239.246770][ T8753] 8021q: adding VLAN 0 to HW filter on device bond5 [ 239.338874][ T8753] macvtap4: entered allmulticast mode [ 240.392433][ T8771] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 243.097393][ T8790] syzkaller0: entered promiscuous mode [ 243.097418][ T8790] syzkaller0: entered allmulticast mode [ 243.531604][ T8798] loop1: detected capacity change from 0 to 512 [ 244.878404][ T8118] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.917221][ T8798] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #2: block 8: comm syz.1.1163: lblock 0 mapped to illegal pblock 8 (length 1) [ 244.917255][ T8798] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 244.917786][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 244.917806][ C1] EXT4-fs (loop1): initial error at time 244: ext4_map_blocks:790: inode 2: block 8 [ 244.917843][ C1] EXT4-fs (loop1): last error at time 244: ext4_map_blocks:790: inode 2: block 8 [ 246.084655][ T8798] EXT4-fs (loop1): Remounting filesystem read-only [ 246.084686][ T8798] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.1163: error -EUCLEAN reading directory block [ 246.084747][ T8798] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 246.084815][ T8798] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.1163: error -EUCLEAN reading directory block [ 246.084855][ T8798] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 246.087288][ T8798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.097956][ T8814] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 248.162176][ T4999] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.174475][ T8818] TC_ACT_REPEAT abuse ? [ 248.975138][ T8825] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 249.244763][ T1612] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.244908][ T1612] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.108657][ T1312] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 255.195994][ T8876] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR [ 255.196444][ T8876] ================================================================== [ 255.196453][ T8876] BUG: KASAN: null-ptr-deref in dm_kcopyd_client_destroy+0xa0/0x3c4 [ 255.196476][ T8876] Read of size 4 at addr 0000000000000174 by task syz.3.1185/8876 [ 255.196486][ T8876] [ 255.196493][ T8876] CPU: 0 UID: 0 PID: 8876 Comm: syz.3.1185 Not tainted syzkaller #0 PREEMPT [ 255.196505][ T8876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 255.196512][ T8876] Call trace: [ 255.196517][ T8876] show_stack+0x2c/0x3c (C) [ 255.196532][ T8876] __dump_stack+0x30/0x40 [ 255.196545][ T8876] dump_stack_lvl+0xd8/0x12c [ 255.196558][ T8876] print_report+0x58/0x84 [ 255.196572][ T8876] kasan_report+0x8c/0xc4 [ 255.196588][ T8876] kasan_check_range+0x17c/0x1ac [ 255.196604][ T8876] __kasan_check_read+0x20/0x30 [ 255.196616][ T8876] dm_kcopyd_client_destroy+0xa0/0x3c4 [ 255.196632][ T8876] __destroy+0x15c/0x2cc [ 255.196647][ T8876] cache_ctr+0xe78/0x1f1c [ 255.196662][ T8876] dm_table_add_target+0x44c/0xb18 [ 255.196674][ T8876] table_load+0x27c/0x764 [ 255.196689][ T8876] dm_ctl_ioctl+0x884/0xbbc [ 255.196704][ T8876] __arm64_sys_ioctl+0x154/0x1cc [ 255.196718][ T8876] invoke_syscall+0x98/0x244 [ 255.196731][ T8876] el0_svc_common+0x19c/0x23c [ 255.196744][ T8876] do_el0_svc+0x4c/0x5c [ 255.196756][ T8876] el0_svc+0x60/0x1d8 [ 255.196770][ T8876] el0t_64_sync_handler+0x44/0x104 [ 255.196782][ T8876] el0t_64_sync+0x198/0x19c [ 255.196797][ T8876] ================================================================== [ 255.196805][ T8876] Disabling lock debugging due to kernel taint [ 255.196854][ T8876] Unable to handle kernel paging request at virtual address dfff80000000002e [ 255.196863][ T8876] KASAN: null-ptr-deref in range [0x0000000000000170-0x0000000000000177] [ 255.196872][ T8876] Mem abort info: [ 255.196878][ T8876] ESR = 0x0000000096000005 [ 255.196885][ T8876] EC = 0x25: DABT (current EL), IL = 32 bits [ 255.196894][ T8876] SET = 0, FnV = 0 [ 255.196901][ T8876] EA = 0, S1PTW = 0 [ 255.196907][ T8876] FSC = 0x05: level 1 translation fault [ 255.196914][ T8876] Data abort info: [ 255.196920][ T8876] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 255.196927][ T8876] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 255.196940][ T8876] GCS = 0, Overlay = 0, DirtyBit = 0 [ 255.196948][ T8876] [dfff80000000002e] address between user and kernel address ranges [ 255.196958][ T8876] Internal error: Oops: 0000000096000005 [#1] SMP [ 255.250532][ T8876] Modules linked in: [ 255.251418][ T8876] CPU: 0 UID: 0 PID: 8876 Comm: syz.3.1185 Tainted: G B syzkaller #0 PREEMPT [ 255.253766][ T8876] Tainted: [B]=BAD_PAGE [ 255.254703][ T8876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 255.257036][ T8876] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 255.258777][ T8876] pc : dm_kcopyd_client_destroy+0xa4/0x3c4 [ 255.260049][ T8876] lr : dm_kcopyd_client_destroy+0xa0/0x3c4 [ 255.261381][ T8876] sp : ffff800098ab7620 [ 255.262268][ T8876] x29: ffff800098ab76c0 x28: ffff700013156efc x27: dfff800000000000 [ 255.264211][ T8876] x26: 0000000000000400 x25: 000000000000002e x24: 0000000000000174 [ 255.266112][ T8876] x23: dfff800000000000 x22: ffff700013156ec4 x21: ffff800098ab7620 [ 255.267990][ T8876] x20: fffffffffffffff4 x19: fffffffffffffff4 x18: ffff8001237ae000 [ 255.269800][ T8876] x17: 3d3d3d3d3d3d3d3d x16: 3d3d3d3d3d3d3d3d x15: 3d3d3d3d3d3d3d3d [ 255.271701][ T8876] x14: 00000000000010b1 x13: 0000000000000001 x12: 0000000000000000 [ 255.273605][ T8876] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000000000 [ 255.275469][ T8876] x8 : 0000000000000000 x7 : 756372735f656c6f x6 : 5f656c6f736e6f63 [ 255.277332][ T8876] x5 : ffff0000d75eaca0 x4 : 0000000000000000 x3 : ffff8000802f4854 [ 255.279170][ T8876] x2 : 0000000000000000 x1 : ffff0000dbb00000 x0 : 0000000000000000 [ 255.280947][ T8876] Call trace: [ 255.281631][ T8876] dm_kcopyd_client_destroy+0xa4/0x3c4 (P) [ 255.282908][ T8876] __destroy+0x15c/0x2cc [ 255.283849][ T8876] cache_ctr+0xe78/0x1f1c [ 255.284794][ T8876] dm_table_add_target+0x44c/0xb18 [ 255.285947][ T8876] table_load+0x27c/0x764 [ 255.286930][ T8876] dm_ctl_ioctl+0x884/0xbbc [ 255.287912][ T8876] __arm64_sys_ioctl+0x154/0x1cc [ 255.289025][ T8876] invoke_syscall+0x98/0x244 [ 255.290025][ T8876] el0_svc_common+0x19c/0x23c [ 255.290969][ T8876] do_el0_svc+0x4c/0x5c [ 255.291865][ T8876] el0_svc+0x60/0x1d8 [ 255.292689][ T8876] el0t_64_sync_handler+0x44/0x104 [ 255.293825][ T8876] el0t_64_sync+0x198/0x19c [ 255.294779][ T8876] Code: 52800081 91060278 972c3f7c d343ff19 (38f76b28) [ 255.296337][ T8876] ---[ end trace 0000000000000000 ]--- [ 255.480538][ T8886] netlink: 'syz.1.1187': attribute type 1 has an invalid length. [ 255.597532][ T8876] Kernel panic - not syncing: Oops: Fatal exception [ 255.600348][ T8876] SMP: stopping secondary CPUs [ 255.601276][ T8876] Kernel Offset: disabled [ 255.602099][ T8876] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 255.603450][ T8876] Memory Limit: none [ 255.892486][ T8876] Rebooting in 86400 seconds..