last executing test programs: 1m31.651289676s ago: executing program 2 (id=180): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001080)={0xb, {"a2e3ad21ed9b52f91b5d300987f70e06d038e7ff7fc6e5539b3247298b089b3308356d090890e0878f0e1ac6e7049b3350959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d074b0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f70e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce38036d347bc0c1fa556e0421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c1e81384784723b76db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d27f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561d0225ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d52cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba4a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5e3528ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1c443a6c5cbe59758bfee2916580dac4b008e592e7b7491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e000058cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc1b651432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee0875080000001a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ed356b0c785f2f47b90e29389f22fc5b5995af4486220d664130bfc53c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e39079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9edee885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000200", 0x1000}}, 0x1006) 1m31.426019999s ago: executing program 2 (id=182): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x0, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m31.375313684s ago: executing program 2 (id=183): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000780)={0x16, 0x40, 0xfa00, {{0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9fd}, {0xa, 0x4e21, 0x5fd2, @loopback, 0x4}, 0xffffffffffffffff, 0x6}}, 0x48) 1m31.238422679s ago: executing program 2 (id=186): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800714, &(0x7f0000000280)={[{@nobarrier}]}, 0xff, 0x489, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x2141, 0x59) pwrite64(r0, &(0x7f00000007c0)="f6", 0xffffff07, 0x8000c61) syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) 1m30.357005719s ago: executing program 2 (id=198): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000008000000000fdfffdff850000005300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000bd000000850000007d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000004c0)={0x1, 0x1, 0x3, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000540)={0x1, 0x2, 0x4000000200000000}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='fdinfo/4\x00') pread64(r2, &(0x7f00000005c0)=""/17, 0x11, 0x0) 1m29.191112829s ago: executing program 2 (id=207): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x3, &(0x7f0000000800)=@framed, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m29.07713394s ago: executing program 32 (id=207): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x3, &(0x7f0000000800)=@framed, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m18.994372533s ago: executing program 5 (id=310): getcwd(&(0x7f00000004c0)=""/237, 0xed) 1m18.879705395s ago: executing program 5 (id=312): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x10, 0x4, &(0x7f0000001000)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000010c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001100)={r2, &(0x7f0000001140), &(0x7f0000001180)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 1m18.759916437s ago: executing program 5 (id=315): syz_mount_image$ext4(&(0x7f0000000700)='ext3\x00', &(0x7f0000000440)='./file2\x00', 0x201841b, &(0x7f0000000780), 0xff, 0x520, &(0x7f00000007c0)="$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") 1m18.562448368s ago: executing program 5 (id=317): ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x804808, &(0x7f0000000a40)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYBLOB="a4d00cd11a1ca241ea8c82503a3f55f232c8cf863a24bd56fcc510eb857b074ec2d106f2c0f91069b199ab9a4826c306e49fe4cf01cfe050bd11969b038dcbeedd83c58cba19fe9b220c6e42b95a315e6888fcd82c20be12c4939f237d59684c83169c71a286fdaba8f129b4e7111a92ee96934c0f1913d696888f029a4d3cb8e22121fe8a7c63ec1f56d9f5530d7fd00c2aa4f82637ee1e0fc1c01567e2c42161abc8d7dda0d9ac0845a516", @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000000c00)="$eJzs3V1v00oawPHHpV2irNRdLSuEqgJD2ZWKVIKTQFDEldeZpIbEjmwHtVeooimqSGFFWWnbG7Y37K50zofgXJ4Pcb4ROh+BI4+dvuYF6Oup/r+ojGOPPY/TaB6miccCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSk6fmdJTWcWwuD1t7TbO8jK+TegWJEuyJW8iO5nNxIV934697m68k/czKbPpuVXFLkZPuP1//85NrkRH//EQF/k5++80ibW9uvV3q97ruTCuQCunl1+LaG9r0o8FpOQysvClS1UrEfLNYjVfeaOlqOYt1SbqidOAjVvHtPFavVstKF5aDjN2pOU/dXPr5fsu2KelpoayeMAv/B00LkLnrNpuc3TJ1kc1LncfJGfObFKtZOS6m19V63PO4EkkrFr6lUGlepZJdKxWKpVKw8qj56bNuTR1bYh8iRGif3psXv0wn23sDxTGT5X5riiS8dWRI18OFKTUIJpDVke6af///+QI9sd3/+72f5G3ubZ8Tk/1vps1vD8v+QWM7usSlbsi2vZUV60pOuvDv3iM720RAtvngSSSCetMQxa1S2RklVKlIRW17IotSnkl9iXTxpipZIliWSWLR5R7kSihZHYgkkFCXz4so9UVKUqlSlLEq0FGRZAumILw2piWOOsibr5nUvi7KGxbhbqTj0NPL9911XSiPOlvyP4zvJ7hs4li/9/A8AAAAAAC4ty/z1fcr83DTP615T2+cdFgAAAAAAOEHmk//ZpDDfzropFuN/AAAAAAAuG8tcY2eJSF5up0trYpnLpfgjAAAAAAAAl4T5/P9WUpg5UG6LtTtdCuN/AAAAAAAuif+NnWM/al+1fvlVwnDK2mkv/c3aMHPzOhtX0v2uHD5iXJ+xprODmKKSFpOTrp61cmml3UkwP2fF2rg4rL0AnN0A/vMtAVyblB/kTlrnzmparmZb/pS2kq97TV1wg+aTojjO9ESsl+J/vVn/t5jT/7/fmrZyst7rFl6+7a2aWHaSo+xsZBMoHplHcUQs7818C+aai4FnPGUuxMjazVuytt7r2u2lq9mRnY2JdGHiYIsfpke0+VHm0lpz2Yy3+f6WtM1c0maxMOzssyiKxzzzj3I3rXN3/m5aDIiiNC6K0v4oBr8Wx4+iPC6K8jGjAIDzsjYmC1lyJO9+Ry93KLsn3d5XZHf5xuz+UebTOvMzpmOdnBnQo9vjenT7mNnt5yP3QBqWY5N2fzyUVT8lO3wa2m7ULFnJS3jl/cY/5frm1vb99Y2VV91X3TelUrliP7TtRyWZMqeRFeQeAMAA+++xYw3M/6PuwvPlS5K7H2aj6p3Do+os4/1l9ysFBXkpb6Unq7JgrjYw3zgY+P+O/L6vISyMGbXmTZpM7/CyMGJU9wdzlUP/uKWRdQ/GUD6LXwUAAGdmbkweHp3/07H7wphx98FcPnp0nN93tzYAAHA6dPjZysf/tcLQa78oVqtFJ17UKgzcZyr0ag2tPD/Wobvo+A2t2mEQB27QTBaeezUdqajTbgdhrOpBqNpB5C2Z6QNVduv3SLccP/bcqN3UTqSVG/ix48aq5kWuanf+0fSiRR2anaO2dr265zqxF/gqCjqhqwtKRVrvq+jVtB97dS9Z9FU79FpOmFPPg2anpVVNR27oteMgPWC/Lc+vB2HLHLZw3i82AAAXxObW9uuVXq/77hQXBjacO/NTBQAAmTFZGgAAAAAAAAAAAAAAAAAAAAAAXABncf0fC5d8oT8V9EWJh4UTWBjbdXw49c4JwKn6LQAA//8FIlBo") setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x14b) syz_usb_disconnect(0xffffffffffffffff) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 1m17.461125921s ago: executing program 5 (id=333): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000004c0)={0x1, 0x1, 0x3, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000540)={0x1, 0x2, 0x4000000200000000}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='fdinfo/4\x00') pread64(r2, &(0x7f00000005c0)=""/17, 0x11, 0x0) 1m16.38848743s ago: executing program 5 (id=344): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_read_part_table(0x5fd, &(0x7f0000001780)="$eJzs3E9o01ccAPDXGI0KIt68GewhIoMIvU2yoSH9IQETgjIPm+hhYGG56MlDl8IC4pjxEhF20YMi1KIHeyplUChl7Q6DnMpKt8s6Sg+j0MHKxviN0F/WrStshXQw+Hwg8H3vff+8R+6/wP9aKvwYx/FACCHO9PYG/pJxuBf8HMfxjuqr46XhS9nqhdqVbtUHIYR3P/sp9+ceva6nk2VvPTSdrj8Yj+612sdOTh7c7jjWvdLWzOt9fSj74sydszOnNjsnpsrh6fzVj84frV+7NZErNtKh+ubi8+yL5H8P+Z2Fnf7Mf12YO/5J83bUulsYWYxGv49WUxvr0eXHT/KHDoZabu1ckndjl9pP+3OF8PLZbLG5cuRcKFcq7VdLjwZHS180P+4sDH6zef9mkrOcCWE406eBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsmzN3zs6c2uycmCqHp/PvzJ8/Wr92ayJXbEx8XX1z8Xn2xekkL79P818X5o4faN6OWncLI4vhcAirqY316PLjJ/lDDxu13Fo6ybuxW3Ecx42/76b3Mr/+23sfvnw2W2yuHBn6slyptF8tPRocLR1Iju/fTILlTHrPvQEAAAAAAAAAAAAAAAAAAODfKg1fylYv1K504/dDCG+NvP2wG8cDW+djSV7vOwDfZkIIqRCGptP1B+PRvVb72MnJ7K9ffZfZzu/+flj4/PofQ36J4zhsNUyN/YeP4x/9HgAA//84Eoe4") creat(&(0x7f0000001e00)='./bus\x00', 0x130) mount(&(0x7f0000001e40)=@loop={'/dev/loop', 0x0}, &(0x7f0000001e80)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000001ec0)='./bus\x00', 0x4c000, 0x14c) preadv2(r0, &(0x7f0000001f00)=[{&(0x7f0000001f40)=""/4083, 0xffffffdf}], 0x20, 0x0, 0x0, 0x1) 1m16.318128178s ago: executing program 33 (id=344): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_read_part_table(0x5fd, &(0x7f0000001780)="$eJzs3E9o01ccAPDXGI0KIt68GewhIoMIvU2yoSH9IQETgjIPm+hhYGG56MlDl8IC4pjxEhF20YMi1KIHeyplUChl7Q6DnMpKt8s6Sg+j0MHKxviN0F/WrStshXQw+Hwg8H3vff+8R+6/wP9aKvwYx/FACCHO9PYG/pJxuBf8HMfxjuqr46XhS9nqhdqVbtUHIYR3P/sp9+ceva6nk2VvPTSdrj8Yj+612sdOTh7c7jjWvdLWzOt9fSj74sydszOnNjsnpsrh6fzVj84frV+7NZErNtKh+ubi8+yL5H8P+Z2Fnf7Mf12YO/5J83bUulsYWYxGv49WUxvr0eXHT/KHDoZabu1ckndjl9pP+3OF8PLZbLG5cuRcKFcq7VdLjwZHS180P+4sDH6zef9mkrOcCWE406eBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsmzN3zs6c2uycmCqHp/PvzJ8/Wr92ayJXbEx8XX1z8Xn2xekkL79P818X5o4faN6OWncLI4vhcAirqY316PLjJ/lDDxu13Fo6ybuxW3Ecx42/76b3Mr/+23sfvnw2W2yuHBn6slyptF8tPRocLR1Iju/fTILlTHrPvQEAAAAAAAAAAAAAAAAAAODfKg1fylYv1K504/dDCG+NvP2wG8cDW+djSV7vOwDfZkIIqRCGptP1B+PRvVb72MnJ7K9ffZfZzu/+flj4/PofQ36J4zhsNUyN/YeP4x/9HgAA//84Eoe4") creat(&(0x7f0000001e00)='./bus\x00', 0x130) mount(&(0x7f0000001e40)=@loop={'/dev/loop', 0x0}, &(0x7f0000001e80)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000001ec0)='./bus\x00', 0x4c000, 0x14c) preadv2(r0, &(0x7f0000001f00)=[{&(0x7f0000001f40)=""/4083, 0xffffffdf}], 0x20, 0x0, 0x0, 0x1) 22.996111803s ago: executing program 0 (id=810): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x97, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1027, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 21.76455592s ago: executing program 0 (id=814): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000001240)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000001280)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x4, 0x0, 0xffffffff}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047459, 0x0) 21.526091474s ago: executing program 0 (id=818): openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0180) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @broadcast, 'batadv_slave_1\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffd, @multicast, 'veth0_virt_wifi\x00'}}, 0x1e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'batadv_slave_1\x00', 0xcd}) 21.422668684s ago: executing program 0 (id=820): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800714, &(0x7f0000000280)={[{@nobarrier}]}, 0xff, 0x489, &(0x7f00000002c0)="$eJzs3M9vFFUcAPDvTFug/GpFREXRKhqJP1paUDl4UKM3DyZ64FrbgsgChtZESBOrMXg0Jt6NRxP/Am9eiHowJl418WhIiDYmFE9r5hfdbrelLW1Xup9Psux7M2/73ndm3u6becwE0LEGsn+SiN0R8VtE9BXZhQUGire52emxm7PTY0nU62/9leTlbsxOj1VFq8/tKjNH0oj00yReThbXO3np8tnRWm3iYpkfmjr3/tDkpcvPnTk3enri9MT5kRMnjh8bfvGFkefXJc4srhsH611FbuzkF+/8+G3WrAOHiiWNcdzWzRYBtTCQbbW/67nmdU+uuLK7w56GdNLdxoawKlmHyHZXT97/+6Ir5ndeX7z+SVsbB2yo7Ldp+9KrZ+rAFpZEu1sAtEf1Q5+d/1avTRp6/C9cfyViW5mem50em7sVf3ek5fKeDax/ICJOzvz7VfaK1V6HAABYg3xs82yr8V8aB/L3Yq5jbzmH0h8R90TEvoi4NyL2R8R9EXnZ+yPigazw1aj3rbD+gab84vFPeq1lm9dJNv57qWHsN9cQf/nW31Xm9uTx9ySnztQmjpbb5Ej0bM/yw8vU8f1rv36+1LrG8V/2yuqvxoJlA651N12gGx+dGl2vjXD944iD3a3iT27NBGRHwIMRcXB1f3pvlTjz9DcPL1Xo9vEvYx3mmepfRzxV7P+ZaIq/kiw/Pzm0I2oTR4eqo2Kxn3658uZS9d9R/Osg2/87Fx7/TSX6/kmK+dqeqNUmLk6uvo4rv3+25DnNWo//bcnb+Zz1z+8Wyz4cnZq6OByxLXkjz1fndPnykfnPVvmqfBb/kcOt+/++8jNZ/A9FRHYQH4qIRyLi0bLtj0XE4xFxeJn4f3j1ifeWiT+JJNq6/8dbfv/dOv77k8b5+jUkus5e/W6pGfOV7f/jMZN/1xby77/bWGkD73DzAQAAwF0hjYjdkaSDRXpgd6Tp4GDxf/j3x860dmFy6plTFz44P17cI9AfPWl1pauv4XrocDJT/sUiP1JeK67WHyuvG3/Z1ZvnB8cu1MbbHDt0ul0L+39U/T/zZ1e7WwdsOPdrQedq7v9pm9oBbL6V/P47F4CtqUX/721HO4DN5/wfOler/v9RU974H7amxf3/jxaPrAO2IuN/6Fz6P3Qu/R860p3c17/2RHWzwIJVvSu+af/S5bM7VlO4IxLVEy82sq7emF8SadtD7qBE1mM2o675Z33MP0MFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgbvZfAAAA//+dEeOQ") r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x2141, 0x59) pwrite64(r0, &(0x7f00000007c0)="f6", 0xffffff07, 0x8000c61) syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) 19.410948091s ago: executing program 0 (id=830): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000340)={0x23, 0x9, 0x8}, 0x10) 18.713112022s ago: executing program 0 (id=847): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) 17.878663108s ago: executing program 34 (id=847): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) 3.721892999s ago: executing program 4 (id=919): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe00000100ed"], 0x24}}, 0x0) 3.421809089s ago: executing program 4 (id=923): syz_read_part_table(0x5fd, &(0x7f0000001780)="$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") 3.100835422s ago: executing program 4 (id=926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42003, 0x0) 1.486972978s ago: executing program 1 (id=947): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00001012c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000101300)='./sys\x00', &(0x7f0000101340)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000101380)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r0, &(0x7f00001013c0)='logitech', 0x8) 1.374633769s ago: executing program 1 (id=951): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f00000003c0)={0x7f, 0x2c36e582}) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000a80)=0x7) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0xf7ff, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) connect$unix(r2, &(0x7f0000000b00)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000bc0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000c00)='dirsync\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c40)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001740), 0xffffffffffffffd2}, 0x48) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000340)={0x0, 0x7, 0x44, 0x0, 0x83, "00000000000000000000ffff00"}) syz_open_pts(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020642500000000202000207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x1000c40, &(0x7f0000000380), 0x5, 0x51c, &(0x7f00000004c0)="$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") quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, 0x0, &(0x7f0000000a00)) unlinkat(r4, &(0x7f00000002c0)='./file0\x00', 0x200) 1.346902102s ago: executing program 3 (id=952): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000100100000d000000aa00ee2e"], 0x30}, 0x0) 1.27065934s ago: executing program 3 (id=954): semget(0x3, 0x2, 0x280) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000100002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0x0, 0xa}, {0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.087675339s ago: executing program 7 (id=957): syz_emit_ethernet(0x4e, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4000) socket(0xa, 0x3, 0xff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000001500), &(0x7f0000001540)='.\x02\x00', 0xa04000, &(0x7f0000001580)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYBLOB="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"], 0x1, 0x11f0, &(0x7f00000016c0)="$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") lchown(&(0x7f00000028c0)='.\x00', 0xffffffffffffffff, 0xee01) 1.050419383s ago: executing program 3 (id=958): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @local, 0x1}, {0xa, 0x4e22, 0x4, @loopback, 0x800000}, r1, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {r1, 0x6}}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x2797, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='270', 0x3) syz_open_dev$loop(0x0, 0x6, 0x14f882) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000640)=0xe) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = getpid() sched_setaffinity(r4, 0x0, 0x0) sendto$l2tp(r3, &(0x7f0000000700)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000740)={0x2, 0x0, @loopback}, 0x10) unshare(0x40000000) 575.408332ms ago: executing program 7 (id=962): timer_create(0x2, 0x0, &(0x7f0000000440)=0x0) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000480)={{r1, r2+10000000}, {0x77359400}}, 0x0) timer_gettime(r0, &(0x7f00000004c0)) 541.672295ms ago: executing program 6 (id=963): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0xffffffffffffffff, &(0x7f0000000940)=0x3aae482061d3e3c8) 442.463915ms ago: executing program 1 (id=964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 442.347475ms ago: executing program 6 (id=965): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xf0}}, 0x0) 381.371611ms ago: executing program 7 (id=966): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271b, 0x0, &(0x7f0000000680)) 374.060952ms ago: executing program 6 (id=967): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={@fallback=r0, r0, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@fallback=r0, r0, 0x2f, 0x8, 0x0, @void, @value=r0}, 0x20) 353.071004ms ago: executing program 4 (id=968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x30}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x6a, &(0x7f0000000640)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "3ce7b9286b574dc2720ef6057772f09df9d3421eee34e003", "047b90670593e17881953d1e429031066797feb6632a4cea988cc9256fe11df4"}}}}}}, 0x0) 298.33592ms ago: executing program 3 (id=969): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x8, 0x10}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000300000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r1}, 0xc) 298.24732ms ago: executing program 1 (id=970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x4000) 256.935874ms ago: executing program 6 (id=971): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}}, 0x2404c0c0) 255.808984ms ago: executing program 7 (id=972): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "f1a1173fb9462d3581000000fff9f6a31854ec980982f8937f0052dd8d39af14c31ed56ad59300000d14fd59e422848f8d00"}, 0x48, 0xffffffffffffffff) keyctl$revoke(0x3, r0) 226.748717ms ago: executing program 1 (id=973): syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x100c404, &(0x7f00000007c0)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,nfs=stale_rw,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,time_offset=0x00000000000003cc,errors=continue,nodots,dots,nodots,nodots,usefree,check=relaxed,nodots,nfs,nodots,showexec,nodots,umask=00000000000000000000007,nodots,nodots,dont_hash,seclabel,func=FILE_MMAP,subj_user=-+]^(-%*@@k+,:@{^[^@,uid>', @ANYRESDEC=0x0, @ANYBLOB="2c617564692c0093591481b2dac6c586482df1499a5d110264abd884a04c3c17f1c678294ba89de3d86c0645512aed6d9103b453b32f2367ac88ec9428d5c7acbe688a0077fcfc4862ee05f019c1f7fd56a6ffbf9af11e85ba202f6f3745d3", @ANYRES16], 0x1, 0x1f5, &(0x7f0000000980)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x80000, 0x103) getdents(r0, &(0x7f0000000040)=""/184, 0xb8) 146.359305ms ago: executing program 3 (id=974): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) 146.222755ms ago: executing program 6 (id=975): setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="44c67f187eae4a961cc767f38a1e32303903884667027357e99e77ad72b50066e376b1483888b26eb1", 0x29}], 0x1}}], 0x1, 0x0) 146.118195ms ago: executing program 4 (id=976): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x1000000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/xfrm_stat\x00') read$usbfs(r0, 0x0, 0x0) 112.382279ms ago: executing program 7 (id=977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x3, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r0, &(0x7f0000000140), &(0x7f0000000180)=""/187}, 0x20) 111.312759ms ago: executing program 1 (id=978): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42003, 0x0) 54.339494ms ago: executing program 3 (id=979): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000f80), 0x10) 54.179645ms ago: executing program 6 (id=980): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x5000, @loopback}, 0x10) listen(r1, 0xa) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000400)={0x2, 0x5000, @loopback}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 54.054015ms ago: executing program 4 (id=981): syz_mount_image$ext4(&(0x7f0000000c40)='ext4\x00', &(0x7f0000000c80)='./bus\x00', 0x21081e, &(0x7f0000000cc0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000003640)="$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") open(&(0x7f0000003b40)='./bus\x00', 0x14927e, 0x9) mount(&(0x7f0000003c00)=@loop={'/dev/loop', 0x0}, &(0x7f0000003c40)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000003c80)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x4, 0x0, 0x0, 0x417, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffdf2e500000f0000000e000200", [0x40000000004]}) 0s ago: executing program 7 (id=982): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x210000, &(0x7f0000000f80)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@sysvgroups}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@debug}]}, 0xfc, 0x57d, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000c00), &(0x7f0000000c40)='./bus\x00', 0x8584b4, &(0x7f0000000c80)=ANY=[], 0x1, 0x0, &(0x7f0000000cc0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000d40)='./bus/file0\x00', 0x2) kernel console output (not intermixed with test programs): e 2 family 0 port 6081 - 0 [ 80.647654][ T4926] FAULT_INJECTION: forcing a failure. [ 80.647654][ T4926] name failslab, interval 1, probability 0, space 0, times 0 [ 80.681958][ T4926] CPU: 1 PID: 4926 Comm: syz.1.209 Not tainted syzkaller #0 [ 80.689343][ T4926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 80.699587][ T4926] Call Trace: [ 80.702875][ T4926] [ 80.705813][ T4926] dump_stack_lvl+0x188/0x250 [ 80.710510][ T4926] ? show_regs_print_info+0x20/0x20 [ 80.715725][ T4926] ? load_image+0x410/0x410 [ 80.720253][ T4926] ? rcu_lock_release+0x5/0x20 [ 80.725028][ T4926] should_fail+0x383/0x4b0 [ 80.729462][ T4926] should_failslab+0x5/0x20 [ 80.733974][ T4926] slab_pre_alloc_hook+0x51/0xc0 [ 80.738919][ T4926] ? __nf_conntrack_alloc+0x93/0x370 [ 80.744215][ T4926] kmem_cache_alloc+0x3d/0x280 [ 80.748994][ T4926] __nf_conntrack_alloc+0x93/0x370 [ 80.754122][ T4926] init_conntrack+0x2fd/0x1530 [ 80.758900][ T4926] ? get_l4proto+0x670/0x670 [ 80.763503][ T4926] ? early_drop+0x800/0x800 [ 80.768021][ T4926] ? nf_conntrack_find_get+0x640/0x640 [ 80.773490][ T4926] ? __siphash_unaligned+0x286/0x3d0 [ 80.778794][ T4926] nf_conntrack_in+0xd76/0x17b0 [ 80.783684][ T4926] ? nf_ct_pernet+0x240/0x240 [ 80.788377][ T4926] ? rcu_lock_release+0x5/0x20 [ 80.793160][ T4926] ? ip6t_alloc_initial_table+0x640/0x640 [ 80.798902][ T4926] ? ipv6_defrag+0x2d2/0x3a0 [ 80.803505][ T4926] ? ipv6_conntrack_in+0x20/0x20 [ 80.808454][ T4926] nf_hook_slow+0xb9/0x200 [ 80.812887][ T4926] ? rcu_read_unlock+0xa0/0xa0 [ 80.817663][ T4926] nf_hook+0x205/0x360 [ 80.821754][ T4926] ? ip6_make_skb+0x530/0x530 [ 80.826453][ T4926] ? rcu_read_unlock+0xa0/0xa0 [ 80.831246][ T4926] ip6_xmit+0xfa5/0x16e0 [ 80.835502][ T4926] ? rcu_read_unlock+0xa0/0xa0 [ 80.840286][ T4926] ? ip6_autoflowlabel+0xd0/0xd0 [ 80.845265][ T4926] sctp_v6_xmit+0x94a/0x1150 [ 80.849882][ T4926] ? kasan_quarantine_put+0xd4/0x210 [ 80.855179][ T4926] ? rcu_lock_release+0x20/0x20 [ 80.860052][ T4926] ? slab_free_freelist_hook+0xec/0x170 [ 80.865614][ T4926] ? rcu_is_watching+0x11/0xa0 [ 80.870386][ T4926] ? kmem_cache_free+0x14c/0x210 [ 80.875338][ T4926] sctp_packet_transmit+0x234b/0x28c0 [ 80.880749][ T4926] sctp_packet_singleton+0x22c/0x330 [ 80.886054][ T4926] ? sctp_outq_select_transport+0x590/0x590 [ 80.891971][ T4926] ? sctp_outq_select_transport+0x480/0x590 [ 80.893828][ T4268] Bluetooth: hci5: command 0x1003 tx timeout [ 80.897874][ T4926] ? sctp_transport_burst_limited+0x193/0x280 [ 80.910063][ T4926] sctp_outq_flush+0x4b3/0x32b0 [ 80.914946][ T4926] ? lockdep_hardirqs_on+0x94/0x140 [ 80.920166][ T4926] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 80.926087][ T4926] ? rcu_is_watching+0x11/0xa0 [ 80.930843][ T4206] Bluetooth: hci5: sending frame failed (-49) [ 80.936923][ T4926] ? enqueue_timer+0x225/0x520 [ 80.936955][ T4926] ? sctp_outq_tail+0x8a0/0x8a0 [ 80.936984][ T4926] ? sctp_outq_uncork+0x49/0xa0 [ 80.937004][ T4926] sctp_do_sm+0x4f7f/0x5690 [ 80.937036][ T4926] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 80.937049][ T4926] ? sctp_stream_init_ext+0x53/0x160 [ 80.967483][ T4926] ? __sys_sendto+0x46d/0x620 [ 80.972177][ T4926] ? __x64_sys_sendto+0xda/0xf0 [ 80.977082][ T4926] ? __sk_mem_raise_allocated+0x6e2/0x11b0 [ 80.982915][ T4926] sctp_primitive_ASSOCIATE+0x91/0xc0 [ 80.988310][ T4926] sctp_sendmsg_to_asoc+0x14f4/0x1e10 [ 80.993713][ T4926] ? memcpy+0x3c/0x60 [ 80.997724][ T4926] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 81.003543][ T4926] ? __sctp_connect+0xd80/0xd80 [ 81.008408][ T4926] ? __local_bh_enable_ip+0x136/0x1c0 [ 81.013798][ T4926] ? _local_bh_enable+0xa0/0xa0 [ 81.018664][ T4926] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 81.024228][ T4926] ? security_sctp_bind_connect+0x85/0xb0 [ 81.029968][ T4926] sctp_sendmsg+0x1b87/0x2940 [ 81.034676][ T4926] ? sctp_getsockopt+0x8a0/0x8a0 [ 81.039628][ T4926] ? aa_af_perm+0x340/0x340 [ 81.044191][ T4926] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 81.050622][ T4926] ? aa_sock_msg_perm+0x94/0x150 [ 81.055572][ T4926] ? sock_rps_record_flow+0x17/0x3b0 [ 81.060872][ T4926] ? inet_sendmsg+0x7a/0x2a0 [ 81.065469][ T4926] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 81.070791][ T4926] __sys_sendto+0x46d/0x620 [ 81.075308][ T4926] ? __ia32_sys_getpeername+0x80/0x80 [ 81.080699][ T4926] ? lock_chain_count+0x20/0x20 [ 81.085562][ T4926] __x64_sys_sendto+0xda/0xf0 [ 81.090249][ T4926] do_syscall_64+0x4c/0xa0 [ 81.094658][ T4926] ? clear_bhb_loop+0x30/0x80 [ 81.099321][ T4926] ? clear_bhb_loop+0x30/0x80 [ 81.103984][ T4926] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.109862][ T4926] RIP: 0033:0x7fe696b11559 [ 81.114267][ T4926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.133860][ T4926] RSP: 002b:00007fe694d68028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 81.142262][ T4926] RAX: ffffffffffffffda RBX: 00007fe696d97fa0 RCX: 00007fe696b11559 [ 81.150222][ T4926] RDX: 000000000000fffd RSI: 00002000000003c0 RDI: 0000000000000003 [ 81.158207][ T4926] RBP: 00007fe696ba8b20 R08: 0000200000000400 R09: 000000000000001c [ 81.166172][ T4926] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000000 [ 81.174131][ T4926] R13: 00007fe696d98038 R14: 00007fe696d97fa0 R15: 00007fffac94d7c8 [ 81.182104][ T4926] [ 81.259044][ T4771] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.303483][ T4935] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.361587][ T4960] syz.1.218 uses obsolete (PF_INET,SOCK_PACKET) [ 82.179873][ T4935] chnl_net:caif_netlink_parms(): no params data found [ 82.425619][ T4935] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.451295][ T4935] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.476656][ T4935] device bridge_slave_0 entered promiscuous mode [ 82.487641][ T5021] loop3: detected capacity change from 0 to 1024 [ 82.527651][ T4935] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.536884][ T4935] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.549459][ T4935] device bridge_slave_1 entered promiscuous mode [ 82.556230][ T5021] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 82.612722][ T5021] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,init_itable,sysvgroups,resuid=0x0000000000000000,init_itable,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 82.639224][ T4935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.677713][ T4935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.751572][ T4935] team0: Port device team_slave_0 added [ 82.774635][ T4935] team0: Port device team_slave_1 added [ 82.811996][ T4265] Bluetooth: hci1: command 0x0409 tx timeout [ 82.946661][ T5045] loop1: detected capacity change from 0 to 128 [ 82.988212][ T4265] Bluetooth: hci5: command 0x1001 tx timeout [ 82.995469][ T4206] Bluetooth: hci5: sending frame failed (-49) [ 83.024863][ T4935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.041861][ T4935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.066210][ T5045] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.143035][ T4935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.186979][ T5045] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.674911][ T4935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.691733][ T4935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.741089][ T4935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.998257][ T4935] device hsr_slave_0 entered promiscuous mode [ 84.012846][ T4935] device hsr_slave_1 entered promiscuous mode [ 84.049158][ T4935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.071933][ T4935] Cannot create hsr debugfs directory [ 84.155074][ T5061] device syzkaller0 entered promiscuous mode [ 84.307911][ T5067] loop3: detected capacity change from 0 to 4096 [ 84.363741][ T5067] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 84.455175][ T4771] device hsr_slave_0 left promiscuous mode [ 84.483065][ T5078] FAULT_INJECTION: forcing a failure. [ 84.483065][ T5078] name failslab, interval 1, probability 0, space 0, times 0 [ 84.504614][ T4771] device hsr_slave_1 left promiscuous mode [ 84.511020][ T5078] CPU: 0 PID: 5078 Comm: syz.1.251 Not tainted syzkaller #0 [ 84.518314][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 84.528375][ T5078] Call Trace: [ 84.531662][ T5078] [ 84.534600][ T5078] dump_stack_lvl+0x188/0x250 [ 84.539296][ T5078] ? show_regs_print_info+0x20/0x20 [ 84.544507][ T5078] ? load_image+0x410/0x410 [ 84.549029][ T5078] ? __lock_acquire+0x7d40/0x7d40 [ 84.554067][ T5078] ? aa_get_newest_label+0xf5/0x5a0 [ 84.559277][ T5078] should_fail+0x383/0x4b0 [ 84.563712][ T5078] should_failslab+0x5/0x20 [ 84.568218][ T5078] slab_pre_alloc_hook+0x51/0xc0 [ 84.573165][ T5078] kmem_cache_alloc_trace+0x47/0x290 [ 84.578457][ T5078] ? btf_new_fd+0x110/0x910 [ 84.582973][ T5078] btf_new_fd+0x110/0x910 [ 84.587308][ T5078] ? capable+0x84/0xe0 [ 84.591387][ T5078] __sys_bpf+0x58c/0x6f0 [ 84.595641][ T5078] ? bpf_link_show_fdinfo+0x380/0x380 [ 84.601035][ T5078] __x64_sys_bpf+0x78/0x90 [ 84.605459][ T5078] do_syscall_64+0x4c/0xa0 [ 84.609882][ T5078] ? clear_bhb_loop+0x30/0x80 [ 84.614570][ T5078] ? clear_bhb_loop+0x30/0x80 [ 84.619253][ T5078] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.625152][ T5078] RIP: 0033:0x7fe696b11559 [ 84.629574][ T5078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.649197][ T5078] RSP: 002b:00007fe694d68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.657628][ T5078] RAX: ffffffffffffffda RBX: 00007fe696d97fa0 RCX: 00007fe696b11559 [ 84.665611][ T5078] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 84.673597][ T5078] RBP: 00007fe696ba8b20 R08: 0000000000000000 R09: 0000000000000000 [ 84.681579][ T5078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.689562][ T5078] R13: 00007fe696d98038 R14: 00007fe696d97fa0 R15: 00007fffac94d7c8 [ 84.697564][ T5078] [ 84.724883][ T4771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.732796][ T4771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.762813][ T4771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.776002][ T4771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.804831][ T4771] device bridge_slave_1 left promiscuous mode [ 84.812459][ T4771] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.873923][ T4771] device bridge_slave_0 left promiscuous mode [ 84.891907][ T1351] Bluetooth: hci1: command 0x041b tx timeout [ 84.904766][ T4771] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.995920][ T4771] device veth1_macvtap left promiscuous mode [ 85.023518][ T4771] device veth0_macvtap left promiscuous mode [ 85.029635][ T4771] device veth1_vlan left promiscuous mode [ 85.053811][ T1351] Bluetooth: hci5: command 0x1009 tx timeout [ 85.064052][ T4771] device veth0_vlan left promiscuous mode [ 85.642992][ T4771] team0 (unregistering): Port device team_slave_1 removed [ 85.672679][ T4771] team0 (unregistering): Port device team_slave_0 removed [ 85.718666][ T4771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.789696][ T4771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.980259][ T4771] bond0 (unregistering): Released all slaves [ 86.039130][ T5121] netlink: 'syz.1.267': attribute type 4 has an invalid length. [ 86.167096][ T4935] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.208896][ T4935] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 86.234535][ T4935] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.279964][ T4935] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.462793][ T4935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.492348][ T4935] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.515101][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.548175][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.575513][ T1108] cfg80211: failed to load regulatory.db [ 86.583594][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.615541][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.642906][ T4743] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.650037][ T4743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.666995][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.682861][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.702221][ T4743] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.709310][ T4743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.737705][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.768754][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.800166][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.857741][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.888504][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.917798][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.958513][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.968779][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.981998][ T1351] Bluetooth: hci1: command 0x040f tx timeout [ 87.006418][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.030937][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.051407][ T4935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.093750][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.117195][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.297954][ T5166] loop1: detected capacity change from 0 to 1024 [ 87.415348][ T5166] EXT4-fs (loop1): Ignoring removed oldalloc option [ 87.442392][ T5166] EXT4-fs (loop1): Ignoring removed orlov option [ 87.488068][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.523184][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.542647][ T5166] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 87.571486][ T4935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.712409][ T5166] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #12: comm syz.1.280: corrupted in-inode xattr [ 88.144380][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.173255][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.205560][ T5205] loop1: detected capacity change from 0 to 256 [ 88.233845][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.242531][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.262845][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.288951][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.329424][ T4935] device veth0_vlan entered promiscuous mode [ 88.386629][ T4935] device veth1_vlan entered promiscuous mode [ 88.512736][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.532357][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.552857][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.584922][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.612969][ T5211] device syzkaller0 left promiscuous mode [ 88.622641][ T4935] device veth0_macvtap entered promiscuous mode [ 88.643819][ T4935] device veth1_macvtap entered promiscuous mode [ 88.728820][ T4935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.771852][ T4935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.781695][ T4935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.833475][ T4935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.871531][ T4935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.921984][ T4935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.941980][ T4935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.970553][ T4935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.990765][ T5230] xt_nfacct: accounting object `' does not exist [ 89.019033][ T4935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.052112][ T4268] Bluetooth: hci1: command 0x0419 tx timeout [ 89.066639][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.091576][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.176908][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.240539][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.303792][ T4935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.335957][ T4935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.376543][ T4935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.427957][ T4935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.446647][ T5239] block device autoloading is deprecated and will be removed. [ 89.470122][ T4935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.515940][ T4935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.572873][ T4935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.612065][ T4935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.652115][ T4935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.689134][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.708900][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.749829][ T4935] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.775170][ T4935] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.795097][ T5249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.298'. [ 89.804635][ T4935] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.840343][ T4935] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.061189][ T4911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.075065][ T4911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.120068][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.132084][ T5256] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 90.138634][ T5256] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.159331][ T4911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.173924][ T5256] vhci_hcd vhci_hcd.0: Device attached [ 90.191515][ T4911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.210717][ T5262] vhci_hcd: connection closed [ 90.210937][ T4719] vhci_hcd: stop threads [ 90.215943][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.248837][ T4719] vhci_hcd: release socket [ 90.270668][ T4719] vhci_hcd: disconnect device [ 90.300807][ T5270] loop1: detected capacity change from 0 to 1024 [ 90.344387][ T5270] EXT4-fs (loop1): Ignoring removed oldalloc option [ 90.381716][ T5270] EXT4-fs (loop1): inline encryption not supported [ 90.442358][ T5270] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,abort,init_itable,inlinecrypt,abort,,errors=continue. Quota mode: none. [ 90.502432][ T5270] EXT4-fs error (device loop1): ext4_get_first_dir_block:3610: inode #11: comm syz.1.305: directory missing '.' [ 90.868991][ T5301] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.943884][ T5305] loop5: detected capacity change from 0 to 512 [ 91.160156][ T5312] loop5: detected capacity change from 0 to 164 [ 91.226869][ T5315] FAULT_INJECTION: forcing a failure. [ 91.226869][ T5315] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 91.246324][ T5318] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 91.252871][ T5318] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 91.271320][ T5315] CPU: 1 PID: 5315 Comm: syz.0.320 Not tainted syzkaller #0 [ 91.278639][ T5315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 91.288696][ T5315] Call Trace: [ 91.291975][ T5315] [ 91.294906][ T5315] dump_stack_lvl+0x188/0x250 [ 91.299598][ T5315] ? show_regs_print_info+0x20/0x20 [ 91.304803][ T5315] ? load_image+0x410/0x410 [ 91.309321][ T5315] ? __lock_acquire+0x7d40/0x7d40 [ 91.314365][ T5315] ? mark_lock+0x94/0x320 [ 91.318705][ T5315] should_fail+0x383/0x4b0 [ 91.323139][ T5315] _copy_from_user+0x2e/0x170 [ 91.327823][ T5315] __copy_msghdr_from_user+0xc9/0x630 [ 91.333203][ T5315] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 91.338500][ T5315] ? rcu_is_watching+0x11/0xa0 [ 91.343263][ T5315] ? verify_lock_unused+0x140/0x140 [ 91.348481][ T5315] ? kfree+0x4a/0x2a0 [ 91.352481][ T5315] ___sys_sendmsg+0x19a/0x2e0 [ 91.357175][ T5315] ? __sys_sendmsg+0x290/0x290 [ 91.361974][ T5315] ? __might_fault+0xb3/0x110 [ 91.366658][ T5315] __sys_sendmmsg+0x2ba/0x500 [ 91.371350][ T5315] ? __ia32_sys_sendmsg+0x80/0x80 [ 91.376398][ T5315] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 91.382393][ T5315] ? lock_chain_count+0x20/0x20 [ 91.387270][ T5315] __x64_sys_sendmmsg+0x9c/0xb0 [ 91.392138][ T5315] do_syscall_64+0x4c/0xa0 [ 91.396561][ T5315] ? clear_bhb_loop+0x30/0x80 [ 91.401241][ T5315] ? clear_bhb_loop+0x30/0x80 [ 91.405926][ T5315] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.411826][ T5315] RIP: 0033:0x7f98267ca559 [ 91.416240][ T5315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.435850][ T5315] RSP: 002b:00007f9824a21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 91.444296][ T5315] RAX: ffffffffffffffda RBX: 00007f9826a50fa0 RCX: 00007f98267ca559 [ 91.452277][ T5315] RDX: 0000000004000095 RSI: 0000200000000180 RDI: 0000000000000004 [ 91.460254][ T5315] RBP: 00007f9826861b20 R08: 0000000000000000 R09: 0000000000000000 [ 91.468231][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.476207][ T5315] R13: 00007f9826a51038 R14: 00007f9826a50fa0 R15: 00007ffd49922f38 [ 91.484206][ T5315] [ 91.520571][ T5318] vhci_hcd vhci_hcd.0: Device attached [ 91.553049][ T5321] vhci_hcd: connection closed [ 91.558409][ T4771] vhci_hcd: stop threads [ 91.575138][ T4771] vhci_hcd: release socket [ 91.589839][ T4771] vhci_hcd: disconnect device [ 91.985448][ T5352] netlink: 72 bytes leftover after parsing attributes in process `syz.4.329'. [ 92.180158][ T5362] loop1: detected capacity change from 0 to 512 [ 92.204310][ T4935] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 92.233075][ T4935] ISOFS: unable to read i-node block [ 92.250254][ T4935] ISOFS: unable to read i-node block [ 92.327294][ T5362] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,norecovery,,errors=continue. Quota mode: writeback. [ 92.377482][ T5362] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.695457][ T5382] ip6gre0 speed is unknown, defaulting to 1000 [ 92.710767][ T5382] ip6gre0 speed is unknown, defaulting to 1000 [ 92.736319][ T5382] ip6gre0 speed is unknown, defaulting to 1000 [ 92.755318][ T5390] FAULT_INJECTION: forcing a failure. [ 92.755318][ T5390] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 92.790992][ T5389] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 92.797556][ T5389] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 92.798795][ T5390] CPU: 1 PID: 5390 Comm: syz.3.340 Not tainted syzkaller #0 [ 92.806665][ T5389] vhci_hcd vhci_hcd.0: Device attached [ 92.812210][ T5390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 92.812226][ T5390] Call Trace: [ 92.812235][ T5390] [ 92.812242][ T5390] dump_stack_lvl+0x188/0x250 [ 92.838604][ T5390] ? show_regs_print_info+0x20/0x20 [ 92.839738][ T5394] vhci_hcd: connection closed [ 92.843810][ T5390] ? load_image+0x410/0x410 [ 92.843848][ T5390] ? __lock_acquire+0x7d40/0x7d40 [ 92.843876][ T5390] should_fail+0x383/0x4b0 [ 92.853264][ T4719] vhci_hcd: stop threads [ 92.858046][ T5390] prepare_alloc_pages+0x1e3/0x5b0 [ 92.871783][ T5390] __alloc_pages+0x11b/0x480 [ 92.871880][ T4719] vhci_hcd: release socket [ 92.876388][ T5390] ? zone_statistics+0x170/0x170 [ 92.876409][ T5390] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 92.876443][ T5390] pcpu_populate_chunk+0x15d/0xc80 [ 92.880982][ T4719] vhci_hcd: disconnect device [ 92.885792][ T5390] ? _find_next_bit+0x1a9/0x200 [ 92.885827][ T5390] pcpu_alloc+0xcb6/0x16d0 [ 92.885860][ T5390] bpf_map_alloc_percpu+0xc5/0x150 [ 92.885880][ T5390] htab_map_alloc+0xce5/0x1670 [ 92.885912][ T5390] map_create+0x481/0x2330 [ 92.885931][ T5390] ? bpf_lsm_bpf+0x5/0x10 [ 92.885952][ T5390] __sys_bpf+0x30a/0x6f0 [ 92.885972][ T5390] ? bpf_link_show_fdinfo+0x380/0x380 [ 92.886009][ T5390] __x64_sys_bpf+0x78/0x90 [ 92.886029][ T5390] do_syscall_64+0x4c/0xa0 [ 92.886046][ T5390] ? clear_bhb_loop+0x30/0x80 [ 92.886063][ T5390] ? clear_bhb_loop+0x30/0x80 [ 92.886081][ T5390] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.886099][ T5390] RIP: 0033:0x7fe609716559 [ 92.886117][ T5390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.886131][ T5390] RSP: 002b:00007fe60796d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.886152][ T5390] RAX: ffffffffffffffda RBX: 00007fe60999cfa0 RCX: 00007fe609716559 [ 92.886165][ T5390] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 4400000000000000 [ 92.886178][ T5390] RBP: 00007fe6097adb20 R08: 0000000000000000 R09: 0000000000000000 [ 92.886189][ T5390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.886200][ T5390] R13: 00007fe60999d038 R14: 00007fe60999cfa0 R15: 00007fffdfdda558 [ 92.886224][ T5390] [ 93.040837][ T2306] ip6gre0 speed is unknown, defaulting to 1000 [ 93.039806][ T5382] infiniband syz1: set active [ 93.095046][ T5382] infiniband syz1: added ip6gre0 [ 93.100027][ T5392] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.136304][ T5382] RDS/IB: syz1: added [ 93.141760][ T5382] smc: adding ib device syz1 with port count 1 [ 93.148372][ T5382] smc: ib device syz1 port 1 has pnetid [ 93.150842][ T5403] device team0 entered promiscuous mode [ 93.189206][ T5403] device team_slave_0 entered promiscuous mode [ 93.197584][ T5403] device team_slave_1 entered promiscuous mode [ 93.208640][ T4343] ip6gre0 speed is unknown, defaulting to 1000 [ 93.224301][ T5382] ip6gre0 speed is unknown, defaulting to 1000 [ 93.236695][ T5401] device team0 left promiscuous mode [ 93.261541][ T5401] device team_slave_0 left promiscuous mode [ 93.337180][ T5401] device team_slave_1 left promiscuous mode [ 93.388408][ T4771] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.510947][ T4771] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.528141][ T5410] loop1: detected capacity change from 0 to 512 [ 93.659286][ T4771] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.686560][ T5410] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.709202][ T5410] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.726527][ T5382] ip6gre0 speed is unknown, defaulting to 1000 [ 93.756757][ T5414] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.829236][ T4771] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.832956][ T5427] FAULT_INJECTION: forcing a failure. [ 93.832956][ T5427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.902141][ T5427] CPU: 1 PID: 5427 Comm: syz.3.349 Not tainted syzkaller #0 [ 93.909466][ T5427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 93.919536][ T5427] Call Trace: [ 93.922818][ T5427] [ 93.925745][ T5427] dump_stack_lvl+0x188/0x250 [ 93.930437][ T5427] ? show_regs_print_info+0x20/0x20 [ 93.935647][ T5427] ? load_image+0x410/0x410 [ 93.940154][ T5427] ? __lock_acquire+0x7d40/0x7d40 [ 93.945185][ T5427] should_fail+0x383/0x4b0 [ 93.949614][ T5427] strncpy_from_user+0x32/0x350 [ 93.954478][ T5427] getname_flags+0xf2/0x4f0 [ 93.958985][ T5427] ? do_futex+0xd83/0x12b0 [ 93.959075][ T5382] ip6gre0 speed is unknown, defaulting to 1000 [ 93.963404][ T5427] user_path_at_empty+0x2a/0x190 [ 93.963427][ T5427] path_removexattr+0xdf/0x480 [ 93.963447][ T5427] ? listxattr+0x2e0/0x2e0 [ 93.963470][ T5427] ? __context_tracking_exit+0x4c/0x80 [ 93.963494][ T5427] ? __lock_acquire+0x7d40/0x7d40 [ 93.963518][ T5427] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 93.963540][ T5427] ? lock_chain_count+0x20/0x20 [ 93.963562][ T5427] ? syscall_enter_from_user_mode+0x21/0x70 [ 93.963583][ T5427] __x64_sys_lremovexattr+0x59/0x70 [ 93.963601][ T5427] do_syscall_64+0x4c/0xa0 [ 93.963616][ T5427] ? clear_bhb_loop+0x30/0x80 [ 93.963633][ T5427] ? clear_bhb_loop+0x30/0x80 [ 93.963651][ T5427] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.963668][ T5427] RIP: 0033:0x7fe609716559 [ 93.963685][ T5427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.963699][ T5427] RSP: 002b:00007fe60796d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 93.963718][ T5427] RAX: ffffffffffffffda RBX: 00007fe60999cfa0 RCX: 00007fe609716559 [ 93.963732][ T5427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.963743][ T5427] RBP: 00007fe6097adb20 R08: 0000000000000000 R09: 0000000000000000 [ 93.963762][ T5427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.963772][ T5427] R13: 00007fe60999d038 R14: 00007fe60999cfa0 R15: 00007fffdfdda558 [ 93.963797][ T5427] [ 94.415071][ T5382] ip6gre0 speed is unknown, defaulting to 1000 [ 94.538377][ T5450] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 94.544908][ T5450] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 94.572324][ T5450] vhci_hcd vhci_hcd.0: Device attached [ 94.598200][ T5457] FAULT_INJECTION: forcing a failure. [ 94.598200][ T5457] name failslab, interval 1, probability 0, space 0, times 0 [ 94.625542][ T5453] vhci_hcd: connection closed [ 94.626006][ T4743] vhci_hcd: stop threads [ 94.642063][ T5457] CPU: 1 PID: 5457 Comm: syz.0.357 Not tainted syzkaller #0 [ 94.644810][ T4743] vhci_hcd: release socket [ 94.649400][ T5457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 94.649414][ T5457] Call Trace: [ 94.649420][ T5457] [ 94.649427][ T5457] dump_stack_lvl+0x188/0x250 [ 94.649457][ T5457] ? show_regs_print_info+0x20/0x20 [ 94.649477][ T5457] ? load_image+0x410/0x410 [ 94.663539][ T4743] vhci_hcd: disconnect device [ 94.663930][ T5457] ? __might_sleep+0xf0/0xf0 [ 94.693712][ T5457] ? __lock_acquire+0x7d40/0x7d40 [ 94.698768][ T5457] should_fail+0x383/0x4b0 [ 94.703210][ T5457] should_failslab+0x5/0x20 [ 94.707733][ T5457] slab_pre_alloc_hook+0x51/0xc0 [ 94.712691][ T5457] kmem_cache_alloc_trace+0x47/0x290 [ 94.717992][ T5457] ? io_uring_alloc_task_context+0xad/0x5c0 [ 94.723908][ T5457] io_uring_alloc_task_context+0xad/0x5c0 [ 94.729650][ T5457] ? __io_uring_add_tctx_node+0x500/0x500 [ 94.735391][ T5457] ? __lock_acquire+0x7d40/0x7d40 [ 94.740436][ T5457] ? __rwlock_init+0x140/0x140 [ 94.745221][ T5457] __io_uring_add_tctx_node+0x37b/0x500 [ 94.750798][ T5457] ? __io_cqring_overflow_flush+0xa30/0xa30 [ 94.756712][ T5457] ? _raw_spin_unlock+0x24/0x40 [ 94.761582][ T5457] ? alloc_fd+0x59e/0x650 [ 94.765927][ T5457] io_uring_install_fd+0xc0/0xf0 [ 94.770889][ T5457] __se_sys_io_uring_setup+0x2303/0x2900 [ 94.776555][ T5457] ? __x64_sys_io_uring_setup+0x60/0x60 [ 94.782144][ T5457] ? lockdep_hardirqs_on+0x94/0x140 [ 94.787415][ T5457] do_syscall_64+0x4c/0xa0 [ 94.791845][ T5457] ? clear_bhb_loop+0x30/0x80 [ 94.796537][ T5457] ? clear_bhb_loop+0x30/0x80 [ 94.801235][ T5457] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.807144][ T5457] RIP: 0033:0x7f98267ca559 [ 94.811579][ T5457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.831192][ T5457] RSP: 002b:00007f9824a20fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 94.839624][ T5457] RAX: ffffffffffffffda RBX: 0000200000000240 RCX: 00007f98267ca559 [ 94.847608][ T5457] RDX: 0000200000000300 RSI: 0000200000000240 RDI: 0000000000000efe [ 94.855734][ T5457] RBP: 00007f9826861b20 R08: 0000000000000000 R09: 0000000000000000 [ 94.863719][ T5457] R10: 0000200000000340 R11: 0000000000000206 R12: 0000200000000300 [ 94.871679][ T5457] R13: 0000200000000340 R14: 00002000000000c0 R15: 00007ffd49922f38 [ 94.879647][ T5457] [ 94.884923][ T5414] ip6gre0 speed is unknown, defaulting to 1000 [ 95.030194][ T5382] ip6gre0 speed is unknown, defaulting to 1000 [ 95.226838][ T5382] ip6gre0 speed is unknown, defaulting to 1000 [ 95.318443][ T5482] loop1: detected capacity change from 0 to 512 [ 95.398416][ T5414] chnl_net:caif_netlink_parms(): no params data found [ 95.498779][ T5482] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 95.527771][ T5482] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.629601][ T5499] FAULT_INJECTION: forcing a failure. [ 95.629601][ T5499] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 95.707341][ T5499] CPU: 0 PID: 5499 Comm: syz.0.366 Not tainted syzkaller #0 [ 95.714674][ T5499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.724742][ T5499] Call Trace: [ 95.728034][ T5499] [ 95.730971][ T5499] dump_stack_lvl+0x188/0x250 [ 95.735671][ T5499] ? show_regs_print_info+0x20/0x20 [ 95.740889][ T5499] ? load_image+0x410/0x410 [ 95.745414][ T5499] ? __lock_acquire+0x7d40/0x7d40 [ 95.750476][ T5499] should_fail+0x383/0x4b0 [ 95.750869][ T5414] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.754900][ T5499] prepare_alloc_pages+0x1e3/0x5b0 [ 95.754966][ T5499] __alloc_pages+0x11b/0x480 [ 95.754989][ T5499] ? zone_statistics+0x170/0x170 [ 95.776615][ T5499] ? __perf_event_task_sched_out+0xec0/0xec0 [ 95.782620][ T5499] alloc_pages_vma+0x2bc/0x790 [ 95.787407][ T5499] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 95.793244][ T5499] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 95.798910][ T5499] ? shmem_swapin_page+0x22f0/0x22f0 [ 95.804237][ T5499] ? __lock_acquire+0x7d40/0x7d40 [ 95.809283][ T5499] ? xas_start+0x3d1/0x770 [ 95.813720][ T5499] ? xas_load+0x119/0x140 [ 95.818077][ T5499] ? pagecache_get_page+0xc32/0xf20 [ 95.822064][ T5414] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.823291][ T5499] ? page_cache_prev_miss+0x380/0x380 [ 95.823323][ T5499] ? __lock_acquire+0x13b3/0x7d40 [ 95.840711][ T5499] shmem_getpage_gfp+0x14be/0x2c10 [ 95.845872][ T5499] shmem_fallocate+0x8b8/0xec0 [ 95.850667][ T5499] ? shmem_mmap+0x200/0x200 [ 95.855195][ T5499] ? rcu_read_lock_any_held+0xb0/0x130 [ 95.860755][ T5499] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 95.866055][ T5499] ? common_file_perm+0x171/0x1c0 [ 95.871099][ T5499] vfs_fallocate+0x57e/0x6f0 [ 95.875708][ T5499] __x64_sys_fallocate+0xbd/0x100 [ 95.880752][ T5499] do_syscall_64+0x4c/0xa0 [ 95.885177][ T5499] ? clear_bhb_loop+0x30/0x80 [ 95.889863][ T5499] ? clear_bhb_loop+0x30/0x80 [ 95.894551][ T5499] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.900457][ T5499] RIP: 0033:0x7f98267ca559 [ 95.904886][ T5499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.911056][ T5414] device bridge_slave_0 entered promiscuous mode [ 95.924498][ T5499] RSP: 002b:00007f9824a21028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 95.924524][ T5499] RAX: ffffffffffffffda RBX: 00007f9826a50fa0 RCX: 00007f98267ca559 [ 95.924535][ T5499] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 95.924544][ T5499] RBP: 00007f9826861b20 R08: 0000000000000000 R09: 0000000000000000 [ 95.924554][ T5499] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000 [ 95.924565][ T5499] R13: 00007f9826a51038 R14: 00007f9826a50fa0 R15: 00007ffd49922f38 [ 95.924592][ T5499] [ 95.925923][ T4343] Bluetooth: hci1: command 0x0409 tx timeout [ 96.016359][ T5414] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.023905][ T5414] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.056706][ T5414] device bridge_slave_1 entered promiscuous mode [ 96.259685][ T5414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.265977][ T5514] ODEBUG: Out of memory. ODEBUG disabled [ 96.363681][ T5414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.551852][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 96.561861][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 96.571835][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 96.581829][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 96.591837][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 96.601833][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 96.864896][ T4771] device hsr_slave_0 left promiscuous mode [ 96.957712][ T4771] device hsr_slave_1 left promiscuous mode [ 97.049391][ T4771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.218605][ T4771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.241975][ T4771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.249413][ T4771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.262627][ T4771] device bridge_slave_1 left promiscuous mode [ 97.272350][ T4771] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.313608][ T5526] loop3: detected capacity change from 0 to 2048 [ 97.330835][ T4771] device bridge_slave_0 left promiscuous mode [ 97.359452][ T4771] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.421499][ T4771] device veth1_macvtap left promiscuous mode [ 97.428436][ T4771] device veth0_macvtap left promiscuous mode [ 97.436632][ T4771] device veth1_vlan left promiscuous mode [ 97.443092][ T4771] device veth0_vlan left promiscuous mode [ 97.445414][ T5526] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.724140][ T4771] team0 (unregistering): Port device team_slave_1 removed [ 97.739717][ T4771] team0 (unregistering): Port device team_slave_0 removed [ 97.754523][ T4771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.770413][ T4771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.829224][ T4771] bond0 (unregistering): Released all slaves [ 97.962845][ T5414] team0: Port device team_slave_0 added [ 97.988876][ T5414] team0: Port device team_slave_1 added [ 98.063136][ T5414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.087175][ T5569] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 98.087175][ T5569] program syz.1.384 not setting count and/or reply_len properly [ 98.114700][ T5414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.151124][ T5571] loop3: detected capacity change from 0 to 512 [ 98.183306][ T5414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.230170][ T5414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.252060][ T4343] Bluetooth: hci1: command 0x041b tx timeout [ 98.298763][ T5414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.409622][ T5414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.906354][ T5414] device hsr_slave_0 entered promiscuous mode [ 98.947730][ T5414] device hsr_slave_1 entered promiscuous mode [ 98.989402][ T5414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.027805][ T5414] Cannot create hsr debugfs directory [ 99.191385][ T5604] FAULT_INJECTION: forcing a failure. [ 99.191385][ T5604] name failslab, interval 1, probability 0, space 0, times 0 [ 99.239218][ T5604] CPU: 0 PID: 5604 Comm: syz.1.395 Not tainted syzkaller #0 [ 99.246553][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 99.256615][ T5604] Call Trace: [ 99.259900][ T5604] [ 99.261976][ T5599] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 99.262827][ T5604] dump_stack_lvl+0x188/0x250 [ 99.269318][ T5599] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 99.273982][ T5604] ? show_regs_print_info+0x20/0x20 [ 99.286528][ T5604] ? load_image+0x410/0x410 [ 99.291057][ T5604] ? __might_sleep+0xf0/0xf0 [ 99.295655][ T5604] ? __lock_acquire+0x7d40/0x7d40 [ 99.300690][ T5604] ? netlink_insert+0xe90/0x11f0 [ 99.305638][ T5604] should_fail+0x383/0x4b0 [ 99.310072][ T5604] should_failslab+0x5/0x20 [ 99.314581][ T5604] slab_pre_alloc_hook+0x51/0xc0 [ 99.319515][ T5604] kmem_cache_alloc_node+0x47/0x2c0 [ 99.324707][ T5604] ? __alloc_skb+0xf4/0x750 [ 99.329195][ T5604] __alloc_skb+0xf4/0x750 [ 99.333541][ T5604] netlink_sendmsg+0x654/0xbe0 [ 99.338299][ T5604] ? netlink_getsockopt+0x570/0x570 [ 99.343483][ T5604] ? aa_sock_msg_perm+0x94/0x150 [ 99.348410][ T5604] ? apparmor_socket_sendmsg+0x88/0x230 [ 99.353938][ T5604] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 99.359208][ T5604] ? security_socket_sendmsg+0x7c/0xa0 [ 99.364652][ T5604] ? netlink_getsockopt+0x570/0x570 [ 99.369839][ T5604] ____sys_sendmsg+0x5be/0x8f0 [ 99.374595][ T5604] ? __sys_sendmsg_sock+0x30/0x30 [ 99.379611][ T5604] ? import_iovec+0x6f/0xa0 [ 99.384104][ T5604] ___sys_sendmsg+0x236/0x2e0 [ 99.388773][ T5604] ? __sys_sendmsg+0x290/0x290 [ 99.393545][ T5604] __se_sys_sendmsg+0x1b7/0x2a0 [ 99.398382][ T5604] ? __x64_sys_sendmsg+0x80/0x80 [ 99.403305][ T5604] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 99.409287][ T5604] ? lockdep_hardirqs_on+0x94/0x140 [ 99.414475][ T5604] do_syscall_64+0x4c/0xa0 [ 99.418876][ T5604] ? clear_bhb_loop+0x30/0x80 [ 99.423564][ T5604] ? clear_bhb_loop+0x30/0x80 [ 99.428227][ T5604] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.434105][ T5604] RIP: 0033:0x7fe696b11559 [ 99.438504][ T5604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.458101][ T5604] RSP: 002b:00007fe694d68028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.466500][ T5604] RAX: ffffffffffffffda RBX: 00007fe696d97fa0 RCX: 00007fe696b11559 [ 99.474463][ T5604] RDX: 0000000004006140 RSI: 0000200000000180 RDI: 0000000000000004 [ 99.482422][ T5604] RBP: 00007fe696ba8b20 R08: 0000000000000000 R09: 0000000000000000 [ 99.490380][ T5604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.498336][ T5604] R13: 00007fe696d98038 R14: 00007fe696d97fa0 R15: 00007fffac94d7c8 [ 99.506305][ T5604] [ 99.528424][ T5599] vhci_hcd vhci_hcd.0: Device attached [ 99.568106][ T5609] vhci_hcd: connection closed [ 99.569265][ T4277] vhci_hcd: stop threads [ 99.583951][ T4277] vhci_hcd: release socket [ 99.588392][ T4277] vhci_hcd: disconnect device [ 99.737008][ T5414] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 99.784059][ T5414] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 99.824916][ T5414] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 99.849788][ T5414] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 100.121621][ T5631] netlink: 140 bytes leftover after parsing attributes in process `syz.0.399'. [ 100.171050][ T5414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.226502][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.252571][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.283357][ T5414] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.340307][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.341912][ T4268] Bluetooth: hci1: command 0x040f tx timeout [ 100.359748][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.402773][ T4743] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.409871][ T4743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.472788][ T5641] FAULT_INJECTION: forcing a failure. [ 100.472788][ T5641] name failslab, interval 1, probability 0, space 0, times 0 [ 100.489500][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.513887][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.534885][ T5641] CPU: 1 PID: 5641 Comm: syz.3.402 Not tainted syzkaller #0 [ 100.537862][ T4743] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.542231][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 100.542244][ T5641] Call Trace: [ 100.542250][ T5641] [ 100.542258][ T5641] dump_stack_lvl+0x188/0x250 [ 100.549333][ T4743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.559362][ T5641] ? show_regs_print_info+0x20/0x20 [ 100.559389][ T5641] ? load_image+0x410/0x410 [ 100.559407][ T5641] ? __might_sleep+0xf0/0xf0 [ 100.559424][ T5641] ? __lock_acquire+0x7d40/0x7d40 [ 100.596725][ T5641] should_fail+0x383/0x4b0 [ 100.601160][ T5641] should_failslab+0x5/0x20 [ 100.605668][ T5641] slab_pre_alloc_hook+0x51/0xc0 [ 100.610611][ T5641] __kmalloc+0x6b/0x340 [ 100.614769][ T5641] ? io_wq_create+0xc3/0xc00 [ 100.619382][ T5641] io_wq_create+0xc3/0xc00 [ 100.623807][ T5641] ? __init_waitqueue_head+0xa4/0x140 [ 100.629193][ T5641] io_uring_alloc_task_context+0x298/0x5c0 [ 100.635032][ T5641] ? __io_uring_add_tctx_node+0x500/0x500 [ 100.640768][ T5641] ? io_wq_free_work+0x1b0/0x1b0 [ 100.645708][ T5641] ? tctx_task_work+0x5e0/0x5e0 [ 100.650569][ T5641] ? __lock_acquire+0x7d40/0x7d40 [ 100.655598][ T5641] ? __rwlock_init+0x140/0x140 [ 100.660369][ T5641] __io_uring_add_tctx_node+0x37b/0x500 [ 100.665904][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.665932][ T5641] ? __io_cqring_overflow_flush+0xa30/0xa30 [ 100.679156][ T5641] ? _raw_spin_unlock+0x24/0x40 [ 100.684018][ T5641] ? alloc_fd+0x59e/0x650 [ 100.688364][ T5641] io_uring_install_fd+0xc0/0xf0 [ 100.693317][ T5641] __se_sys_io_uring_setup+0x2303/0x2900 [ 100.698988][ T5641] ? __x64_sys_io_uring_setup+0x60/0x60 [ 100.704572][ T5641] ? lockdep_hardirqs_on+0x94/0x140 [ 100.709791][ T5641] do_syscall_64+0x4c/0xa0 [ 100.714221][ T5641] ? clear_bhb_loop+0x30/0x80 [ 100.718921][ T5641] ? clear_bhb_loop+0x30/0x80 [ 100.723622][ T5641] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.729537][ T5641] RIP: 0033:0x7fe609716559 [ 100.733954][ T5641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.753565][ T5641] RSP: 002b:00007fe60796cfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 100.761990][ T5641] RAX: ffffffffffffffda RBX: 0000200000000240 RCX: 00007fe609716559 [ 100.769967][ T5641] RDX: 0000200000000300 RSI: 0000200000000240 RDI: 0000000000000efe [ 100.777984][ T5641] RBP: 00007fe6097adb20 R08: 0000000000000000 R09: 0000000000000000 [ 100.785963][ T5641] R10: 0000200000000340 R11: 0000000000000206 R12: 0000200000000300 [ 100.793975][ T5641] R13: 0000200000000340 R14: 00002000000000c0 R15: 00007fffdfdda558 [ 100.801975][ T5641] [ 100.802528][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.860817][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.884583][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.904944][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.938465][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.989587][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.007482][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.071458][ T5414] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.171912][ T5414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.206580][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.232974][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.252845][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.261500][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.271632][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.417126][ T5683] FAULT_INJECTION: forcing a failure. [ 101.417126][ T5683] name failslab, interval 1, probability 0, space 0, times 0 [ 101.434749][ T5684] loop0: detected capacity change from 0 to 512 [ 101.458731][ T5683] CPU: 0 PID: 5683 Comm: syz.3.412 Not tainted syzkaller #0 [ 101.466068][ T5683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 101.476135][ T5683] Call Trace: [ 101.479428][ T5683] [ 101.482370][ T5683] dump_stack_lvl+0x188/0x250 [ 101.487075][ T5683] ? show_regs_print_info+0x20/0x20 [ 101.492288][ T5683] ? load_image+0x410/0x410 [ 101.496812][ T5683] ? __might_sleep+0xf0/0xf0 [ 101.501414][ T5683] ? __lock_acquire+0x7d40/0x7d40 [ 101.506461][ T5683] should_fail+0x383/0x4b0 [ 101.510908][ T5683] should_failslab+0x5/0x20 [ 101.515423][ T5683] slab_pre_alloc_hook+0x51/0xc0 [ 101.520378][ T5683] kmem_cache_alloc_node+0x47/0x2c0 [ 101.525599][ T5683] ? alloc_vmap_area+0x199/0x1b30 [ 101.530648][ T5683] alloc_vmap_area+0x199/0x1b30 [ 101.535543][ T5683] ? vm_map_ram+0xba0/0xba0 [ 101.540074][ T5683] __get_vm_area_node+0x14f/0x2d0 [ 101.545121][ T5683] __vmalloc_node_range+0xef/0x8b0 [ 101.550255][ T5683] ? __do_replace+0xa8/0xa00 [ 101.554872][ T5683] ? __do_replace+0xa8/0xa00 [ 101.559481][ T5683] vzalloc+0x75/0x80 [ 101.563391][ T5683] ? __do_replace+0xa8/0xa00 [ 101.567995][ T5683] __do_replace+0xa8/0xa00 [ 101.572439][ T5683] ? translate_compat_table+0x2130/0x2130 [ 101.577929][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.578168][ T5683] ? _copy_from_user+0x111/0x170 [ 101.588916][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.590379][ T5683] do_ip6t_set_ctl+0xaa4/0xd90 [ 101.602418][ T5683] ? nf_setsockopt+0x218/0x280 [ 101.602660][ T5414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.607205][ T5683] ? ip6t_unregister_table_exit+0x230/0x230 [ 101.619884][ T5683] ? __lock_acquire+0x7d40/0x7d40 [ 101.624922][ T5683] ? __mutex_lock_common+0x435/0x2400 [ 101.630324][ T5683] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 101.635979][ T5683] ? mutex_unlock+0x10/0x10 [ 101.640501][ T5683] ? __local_bh_enable_ip+0x136/0x1c0 [ 101.645888][ T5683] ? lockdep_hardirqs_on+0x94/0x140 [ 101.651108][ T5683] ? __local_bh_enable_ip+0x136/0x1c0 [ 101.656500][ T5683] nf_setsockopt+0x25f/0x280 [ 101.661109][ T5683] ipv6_setsockopt+0x20ba/0x3cc0 [ 101.666084][ T5683] ? ipv6_update_options+0x400/0x400 [ 101.671394][ T5683] ? futex_wait_queue_me+0x16e/0x440 [ 101.676699][ T5683] ? __might_sleep+0xf0/0xf0 [ 101.681296][ T5683] ? __lock_acquire+0x7d40/0x7d40 [ 101.686325][ T5683] ? mark_lock+0x94/0x320 [ 101.690662][ T5683] ? __lock_acquire+0x12df/0x7d40 [ 101.695709][ T5683] ? __lock_acquire+0x13b3/0x7d40 [ 101.700749][ T5683] ? verify_lock_unused+0x140/0x140 [ 101.705953][ T5683] ? aa_label_sk_perm+0x3e6/0x540 [ 101.710989][ T5683] ? aa_sk_perm+0x910/0x910 [ 101.715503][ T5683] ? __might_sleep+0xf0/0xf0 [ 101.720094][ T5683] ? rcu_lock_release+0x9/0x20 [ 101.724859][ T5683] ? __lock_acquire+0x7d40/0x7d40 [ 101.729888][ T5683] ? aa_sk_perm+0x7dc/0x910 [ 101.734396][ T5683] rawv6_setsockopt+0x29e/0x660 [ 101.739255][ T5683] ? __fget_files+0x402/0x470 [ 101.743942][ T5683] ? raw6_destroy+0x30/0x30 [ 101.744044][ T5684] EXT4-fs (loop0): 1 truncate cleaned up [ 101.748452][ T5683] ? aa_sock_opt_perm+0x74/0x100 [ 101.748475][ T5683] ? sock_common_setsockopt+0x32/0xb0 [ 101.748495][ T5683] ? sock_common_recvmsg+0x1c0/0x1c0 [ 101.769650][ T5683] __sys_setsockopt+0x2bf/0x3d0 [ 101.774507][ T5683] __x64_sys_setsockopt+0xb1/0xc0 [ 101.776800][ T5684] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: none. [ 101.779529][ T5683] do_syscall_64+0x4c/0xa0 [ 101.794758][ T5683] ? clear_bhb_loop+0x30/0x80 [ 101.799448][ T5683] ? clear_bhb_loop+0x30/0x80 [ 101.804134][ T5683] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.810031][ T5683] RIP: 0033:0x7fe609716559 [ 101.814456][ T5683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.834069][ T5683] RSP: 002b:00007fe60796d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 101.842497][ T5683] RAX: ffffffffffffffda RBX: 00007fe60999cfa0 RCX: 00007fe609716559 [ 101.850481][ T5683] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 101.858461][ T5683] RBP: 00007fe6097adb20 R08: 00000000000003c8 R09: 0000000000000000 [ 101.866440][ T5683] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000000 [ 101.874420][ T5683] R13: 00007fe60999d038 R14: 00007fe60999cfa0 R15: 00007fffdfdda558 [ 101.882409][ T5683] [ 101.917278][ T5695] loop1: detected capacity change from 0 to 512 [ 101.927196][ T5684] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.415: bg 0: block 465: padding at end of block bitmap is not set [ 101.983088][ T5695] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 102.002423][ T5683] syz.3.412: vmalloc error: size 64, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 102.029990][ T5684] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 102.049506][ T5683] CPU: 1 PID: 5683 Comm: syz.3.412 Not tainted syzkaller #0 [ 102.056831][ T5683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 102.066913][ T5683] Call Trace: [ 102.070203][ T5683] [ 102.073147][ T5683] dump_stack_lvl+0x188/0x250 [ 102.077843][ T5683] ? rcu_lock_release+0x5/0x20 [ 102.082619][ T5683] ? show_regs_print_info+0x20/0x20 [ 102.084223][ T5684] EXT4-fs (loop0): This should not happen!! Data will be lost [ 102.084223][ T5684] [ 102.087821][ T5683] ? load_image+0x410/0x410 [ 102.087856][ T5683] warn_alloc+0x245/0x320 [ 102.106268][ T5683] ? zone_watermark_ok_safe+0x250/0x250 [ 102.109745][ T25] audit: type=1800 audit(1793326669.509:12): pid=5695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.416" name="file1" dev="loop1" ino=1048653 res=0 errno=0 [ 102.111823][ T5683] ? __get_vm_area_node+0x164/0x2d0 [ 102.111848][ T5683] ? kfree+0xef/0x2a0 [ 102.141652][ T5683] __vmalloc_node_range+0x2b1/0x8b0 [ 102.146878][ T5683] ? __do_replace+0xa8/0xa00 [ 102.151485][ T5683] vzalloc+0x75/0x80 [ 102.155388][ T5683] ? __do_replace+0xa8/0xa00 [ 102.159995][ T5683] __do_replace+0xa8/0xa00 [ 102.164531][ T5683] ? translate_compat_table+0x2130/0x2130 [ 102.170270][ T5683] ? _copy_from_user+0x111/0x170 [ 102.173065][ T5684] EXT4-fs (loop0): Total free blocks count 0 [ 102.175220][ T5683] do_ip6t_set_ctl+0xaa4/0xd90 [ 102.175252][ T5683] ? nf_setsockopt+0x218/0x280 [ 102.188738][ T5684] EXT4-fs (loop0): Free/Dirty block details [ 102.190723][ T5683] ? ip6t_unregister_table_exit+0x230/0x230 [ 102.190754][ T5683] ? __lock_acquire+0x7d40/0x7d40 [ 102.207518][ T5683] ? __mutex_lock_common+0x435/0x2400 [ 102.212926][ T5683] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 102.218573][ T5683] ? mutex_unlock+0x10/0x10 [ 102.223087][ T5683] ? __local_bh_enable_ip+0x136/0x1c0 [ 102.228470][ T5683] ? lockdep_hardirqs_on+0x94/0x140 [ 102.229027][ T5684] EXT4-fs (loop0): free_blocks=0 [ 102.233679][ T5683] ? __local_bh_enable_ip+0x136/0x1c0 [ 102.233706][ T5683] nf_setsockopt+0x25f/0x280 [ 102.233727][ T5683] ipv6_setsockopt+0x20ba/0x3cc0 [ 102.233754][ T5683] ? ipv6_update_options+0x400/0x400 [ 102.249916][ T5684] EXT4-fs (loop0): dirty_blocks=64 [ 102.253513][ T5683] ? futex_wait_queue_me+0x16e/0x440 [ 102.253540][ T5683] ? __might_sleep+0xf0/0xf0 [ 102.253557][ T5683] ? __lock_acquire+0x7d40/0x7d40 [ 102.253579][ T5683] ? mark_lock+0x94/0x320 [ 102.253596][ T5683] ? __lock_acquire+0x12df/0x7d40 [ 102.253629][ T5683] ? __lock_acquire+0x13b3/0x7d40 [ 102.253655][ T5683] ? verify_lock_unused+0x140/0x140 [ 102.253673][ T5683] ? aa_label_sk_perm+0x3e6/0x540 [ 102.253699][ T5683] ? aa_sk_perm+0x910/0x910 [ 102.253725][ T5683] ? __might_sleep+0xf0/0xf0 [ 102.253743][ T5683] ? rcu_lock_release+0x9/0x20 [ 102.253769][ T5683] ? __lock_acquire+0x7d40/0x7d40 [ 102.253792][ T5683] ? aa_sk_perm+0x7dc/0x910 [ 102.253814][ T5683] rawv6_setsockopt+0x29e/0x660 [ 102.264493][ T5684] EXT4-fs (loop0): Block reservation details [ 102.269466][ T5683] ? __fget_files+0x402/0x470 [ 102.274068][ T5684] EXT4-fs (loop0): i_reserved_data_blocks=64 [ 102.279037][ T5683] ? raw6_destroy+0x30/0x30 [ 102.279056][ T5683] ? aa_sock_opt_perm+0x74/0x100 [ 102.279075][ T5683] ? sock_common_setsockopt+0x32/0xb0 [ 102.363029][ T5683] ? sock_common_recvmsg+0x1c0/0x1c0 [ 102.368343][ T5683] __sys_setsockopt+0x2bf/0x3d0 [ 102.373208][ T5683] __x64_sys_setsockopt+0xb1/0xc0 [ 102.378245][ T5683] do_syscall_64+0x4c/0xa0 [ 102.382670][ T5683] ? clear_bhb_loop+0x30/0x80 [ 102.387346][ T5683] ? clear_bhb_loop+0x30/0x80 [ 102.392025][ T5683] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.397925][ T5683] RIP: 0033:0x7fe609716559 [ 102.402348][ T5683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.421961][ T5683] RSP: 002b:00007fe60796d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 102.423970][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.430379][ T5683] RAX: ffffffffffffffda RBX: 00007fe60999cfa0 RCX: 00007fe609716559 [ 102.446394][ T5683] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 102.449441][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.454377][ T5683] RBP: 00007fe6097adb20 R08: 00000000000003c8 R09: 0000000000000000 [ 102.454392][ T5683] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000000 [ 102.454402][ T5683] R13: 00007fe60999d038 R14: 00007fe60999cfa0 R15: 00007fffdfdda558 [ 102.454426][ T5683] [ 102.489995][ T1327] Bluetooth: hci1: command 0x0419 tx timeout [ 102.524096][ T5683] Mem-Info: [ 102.581312][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.600809][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.638905][ T5414] device veth0_vlan entered promiscuous mode [ 102.656170][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.671918][ T5683] active_anon:308 inactive_anon:6791 isolated_anon:0 [ 102.671918][ T5683] active_file:4858 inactive_file:46075 isolated_file:0 [ 102.671918][ T5683] unevictable:17225 dirty:190 writeback:0 [ 102.671918][ T5683] slab_reclaimable:21127 slab_unreclaimable:100368 [ 102.671918][ T5683] mapped:29642 shmem:1725 pagetables:848 bounce:0 [ 102.671918][ T5683] kernel_misc_reclaimable:0 [ 102.671918][ T5683] free:1347122 free_pcp:13596 free_cma:0 [ 102.682604][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.723617][ T5683] Node 0 active_anon:1200kB inactive_anon:26652kB active_file:19232kB inactive_file:184300kB unevictable:67364kB isolated(anon):0kB isolated(file):0kB mapped:118568kB dirty:756kB writeback:0kB shmem:4820kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11076kB pagetables:3492kB all_unreclaimable? no [ 102.797341][ T5414] device veth1_vlan entered promiscuous mode [ 102.801876][ T5683] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 102.900799][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.929196][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.982703][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.027269][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.070372][ T5414] device veth0_macvtap entered promiscuous mode [ 103.079737][ T5683] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 103.111940][ T5683] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 103.117733][ T5683] Node 0 DMA32 free:1469880kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1200kB inactive_anon:37852kB active_file:19232kB inactive_file:184300kB unevictable:67364kB writepending:756kB present:3129332kB managed:2590808kB mlocked:0kB bounce:0kB free_pcp:28588kB local_pcp:9312kB free_cma:0kB [ 103.149864][ T5414] device veth1_macvtap entered promiscuous mode [ 103.413857][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.428742][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.504892][ T5414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.549965][ T5740] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 103.556525][ T5740] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 103.579211][ T5683] lowmem_reserve[]: 0 0 0 0 0 [ 103.584386][ T5414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.607853][ T5683] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 103.609713][ T5740] vhci_hcd vhci_hcd.0: Device attached [ 103.646721][ T5414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.678233][ T5414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.695273][ T5743] vhci_hcd: connection closed [ 103.695398][ T5683] lowmem_reserve[]: [ 103.695618][ T4277] vhci_hcd: stop threads [ 103.700097][ T5683] 0 0 0 0 0 [ 103.711774][ T5683] Node 1 Normal free:3903712kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:14668kB local_pcp:5524kB free_cma:0kB [ 103.715609][ T4277] vhci_hcd: release socket [ 103.757612][ T5414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.769367][ T5683] lowmem_reserve[]: 0 0 0 0 0 [ 103.784108][ T5414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.791464][ T5683] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 103.799276][ T5414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.826689][ T4277] vhci_hcd: disconnect device [ 103.826741][ T5683] Node 0 [ 103.831411][ T5414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.838747][ T5414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.861225][ T5414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.881905][ T5683] DMA32: 416*4kB (UME) 76*8kB (UME) 36*16kB (UME) 192*32kB (UME) 36*64kB (UME) 7*128kB (UE) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 3*2048kB (UME) 354*4096kB (M) = 1473952kB [ 103.895980][ T4265] vhci_hcd: vhci_device speed not set [ 103.905862][ T5414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.922701][ T5414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.933393][ T5414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.944018][ T5414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.957880][ T5683] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 103.959295][ T5414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.979341][ T5414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.989995][ T5414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.000977][ T5683] Node 1 Normal: 80*4kB (UME) 33*8kB (UME) 26*16kB [ 104.001031][ T5414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.008231][ T5414] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.032153][ T5414] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.040873][ T5414] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.057616][ T5683] (UME) 43*32kB (UME) 35*64kB (UME) 24*128kB (UME) 13*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 948*4096kB (M) = 3903752kB [ 104.060692][ T5414] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.086760][ T5683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.108336][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.117330][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.129271][ T5683] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.141720][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.147795][ T5683] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.152333][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.165332][ T5683] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.177578][ T5683] 69110 total pagecache pages [ 104.188500][ T5683] 0 pages in swap cache [ 104.202012][ T5683] Swap cache stats: add 2094, delete 2094, find 907/1041 [ 104.219452][ T5683] Free swap = 124448kB [ 104.229925][ T5683] Total swap = 124996kB [ 104.255123][ T5683] 2097051 pages RAM [ 104.258997][ T5683] 0 pages HighMem/MovableOnly [ 104.313714][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.347678][ T5683] 415362 pages reserved [ 104.352324][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.360687][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.374608][ T5683] 0 pages cma reserved [ 104.458859][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.485878][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.543104][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.583053][ T5776] Invalid argument reading file caps for ./file0 [ 105.225431][ T5787] netlink: 'syz.3.445': attribute type 5 has an invalid length. [ 105.405203][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.454514][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.491508][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.592765][ T5816] netdevsim netdevsim1: Direct firmware load for ÿ failed with error -2 [ 105.657587][ T5816] netdevsim netdevsim1: Falling back to sysfs fallback for: ÿ [ 105.816600][ T5835] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 106.627223][ T5856] loop6: detected capacity change from 0 to 128 [ 108.342730][ T5856] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 108.395230][ T5876] loop1: detected capacity change from 0 to 128 [ 108.405375][ T5873] netlink: 272 bytes leftover after parsing attributes in process `syz.3.475'. [ 108.423112][ T5856] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.455715][ T5873] netlink: 272 bytes leftover after parsing attributes in process `syz.3.475'. [ 108.640595][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.681952][ T5876] FAT-fs (loop1): Filesystem has been set read-only [ 108.688824][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.718937][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.054425][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.301619][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.310177][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.318679][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.327632][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.342826][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.394982][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.461185][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.486522][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.495469][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.504860][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.513980][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.522552][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.531431][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.541397][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.551890][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.561888][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.570349][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.570549][ T5904] autofs4:pid:5904:autofs_fill_super: called with bogus options [ 109.608752][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.647876][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.687401][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.717858][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.759599][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.787785][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.821859][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.986425][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.995083][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.004032][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.021869][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.030757][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.039783][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.049100][ T5876] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.161924][ T25] audit: type=1800 audit(1793326677.559:13): pid=5876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.477" name="file1" dev="loop1" ino=1048663 res=0 errno=0 [ 110.727166][ T5941] netlink: 64 bytes leftover after parsing attributes in process `syz.3.498'. [ 110.792486][ T5941] device syzkaller1 entered promiscuous mode [ 110.906525][ T5941] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 111.134449][ T4277] Bluetooth: hci5: Frame reassembly failed (-84) [ 112.491159][ T5999] netlink: 40 bytes leftover after parsing attributes in process `syz.1.511'. [ 112.607267][ T6006] FAULT_INJECTION: forcing a failure. [ 112.607267][ T6006] name fail_futex, interval 1, probability 0, space 0, times 1 [ 112.631947][ T6010] netlink: 20 bytes leftover after parsing attributes in process `syz.4.516'. [ 112.651933][ T6006] CPU: 0 PID: 6006 Comm: syz.1.515 Not tainted syzkaller #0 [ 112.659266][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 112.669343][ T6006] Call Trace: [ 112.672633][ T6006] [ 112.675587][ T6006] dump_stack_lvl+0x188/0x250 [ 112.680281][ T6006] ? show_regs_print_info+0x20/0x20 [ 112.685493][ T6006] ? load_image+0x410/0x410 [ 112.690010][ T6006] ? __kasan_slab_alloc+0x92/0xc0 [ 112.695043][ T6006] should_fail+0x383/0x4b0 [ 112.699470][ T6006] get_futex_key+0x1a1/0x12d0 [ 112.704160][ T6006] ? __lock_acquire+0x13b3/0x7d40 [ 112.709187][ T6006] ? futex_wait_restart+0x250/0x250 [ 112.714415][ T6006] futex_wake+0x101/0x540 [ 112.718757][ T6006] ? futex_wait+0x680/0x680 [ 112.721904][ T6010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.516'. [ 112.723269][ T6006] ? verify_lock_unused+0x140/0x140 [ 112.723294][ T6006] ? __rtnl_unlock+0x8d/0xa0 [ 112.723314][ T6006] ? verify_lock_unused+0x140/0x140 [ 112.723333][ T6006] ? netdev_run_todo+0xa51/0xac0 [ 112.723352][ T6006] do_futex+0xd83/0x12b0 [ 112.723369][ T6006] ? netdev_refcnt_read+0x50/0x50 [ 112.723386][ T6006] ? __local_bh_enable_ip+0x136/0x1c0 [ 112.723425][ T6006] ? futex_exit_release+0x1c0/0x1c0 [ 112.723448][ T6006] ? __context_tracking_exit+0x4c/0x80 [ 112.723473][ T6006] __se_sys_futex+0x389/0x420 [ 112.723492][ T6006] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 112.723509][ T6006] ? __x64_sys_futex+0xf0/0xf0 [ 112.723531][ T6006] ? __x64_sys_futex+0x1d/0xf0 [ 112.723551][ T6006] do_syscall_64+0x4c/0xa0 [ 112.762302][ T6010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.766817][ T6006] ? clear_bhb_loop+0x30/0x80 [ 112.766847][ T6006] ? clear_bhb_loop+0x30/0x80 [ 112.766867][ T6006] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.832289][ T6006] RIP: 0033:0x7fe696b11559 [ 112.836844][ T6006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.856551][ T6006] RSP: 002b:00007fe694d680e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.864987][ T6006] RAX: ffffffffffffffda RBX: 00007fe696d97fa8 RCX: 00007fe696b11559 [ 112.872979][ T6006] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe696d97fac [ 112.880962][ T6006] RBP: 00007fe696d97fa0 R08: 0021f22781f2679c R09: 0000000000000000 [ 112.888939][ T6006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.896918][ T6006] R13: 00007fe696d98038 R14: 00007fffac94d6e0 R15: 00007fffac94d7c8 [ 112.904913][ T6006] [ 113.221919][ T4343] Bluetooth: hci5: command 0x1003 tx timeout [ 113.228038][ T4205] Bluetooth: hci5: sending frame failed (-49) [ 115.284987][ T6087] netlink: 'syz.1.530': attribute type 16 has an invalid length. [ 115.292968][ T4301] Bluetooth: hci5: command 0x1001 tx timeout [ 115.299134][ T4205] Bluetooth: hci5: sending frame failed (-49) [ 115.312060][ T6087] netlink: 'syz.1.530': attribute type 17 has an invalid length. [ 115.347179][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.360061][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.360203][ T6097] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 115.370539][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.396326][ T6087] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.497282][ T6104] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.778703][ T6149] loop1: detected capacity change from 0 to 1024 [ 116.828124][ T6149] EXT4-fs (loop1): Ignoring removed bh option [ 116.884182][ T25] audit: type=1326 audit(1793326684.299:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.4.557" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f331f559 code=0x7ffc0000 [ 116.887968][ T6149] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 117.007214][ T25] audit: type=1326 audit(1793326684.299:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.4.557" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f331f559 code=0x7ffc0000 [ 117.043135][ T6149] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 117.074189][ T25] audit: type=1326 audit(1793326684.319:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.4.557" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f331f559 code=0x7ffc0000 [ 117.098805][ T25] audit: type=1326 audit(1793326684.319:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.4.557" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f331f559 code=0x7ffc0000 [ 117.123656][ T25] audit: type=1326 audit(1793326684.349:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.4.557" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f48f331f559 code=0x7ffc0000 [ 117.173430][ T25] audit: type=1326 audit(1793326684.349:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.4.557" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f331f559 code=0x7ffc0000 [ 117.200517][ T25] audit: type=1326 audit(1793326684.349:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.4.557" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f331f559 code=0x7ffc0000 [ 117.234427][ T25] audit: type=1326 audit(1793326684.349:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.4.557" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f331f559 code=0x7ffc0000 [ 117.491069][ T4301] Bluetooth: hci5: command 0x1009 tx timeout [ 117.526952][ T25] audit: type=1326 audit(1793326684.349:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.4.557" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f331f559 code=0x7ffc0000 [ 118.062438][ T25] audit: type=1326 audit(1793326684.349:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.4.557" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48f331f559 code=0x7ffc0000 [ 118.104149][ T6190] netlink: 'syz.4.563': attribute type 10 has an invalid length. [ 118.185976][ T6190] team0: Device hsr_slave_0 failed to register rx_handler [ 118.339571][ T6208] FAULT_INJECTION: forcing a failure. [ 118.339571][ T6208] name failslab, interval 1, probability 0, space 0, times 0 [ 118.367067][ T6208] CPU: 0 PID: 6208 Comm: syz.3.570 Not tainted syzkaller #0 [ 118.374398][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 118.384464][ T6208] Call Trace: [ 118.387755][ T6208] [ 118.390695][ T6208] dump_stack_lvl+0x188/0x250 [ 118.395417][ T6208] ? show_regs_print_info+0x20/0x20 [ 118.400629][ T6208] ? load_image+0x410/0x410 [ 118.405149][ T6208] ? __might_sleep+0xf0/0xf0 [ 118.409753][ T6208] ? __lock_acquire+0x7d40/0x7d40 [ 118.414799][ T6208] should_fail+0x383/0x4b0 [ 118.419241][ T6208] should_failslab+0x5/0x20 [ 118.423753][ T6208] slab_pre_alloc_hook+0x51/0xc0 [ 118.428714][ T6208] ? __d_alloc+0x27/0x6d0 [ 118.433059][ T6208] kmem_cache_alloc+0x3d/0x280 [ 118.437837][ T6208] __d_alloc+0x27/0x6d0 [ 118.442002][ T6208] ? d_alloc_pseudo+0xe/0x70 [ 118.446607][ T6208] d_alloc_pseudo+0x19/0x70 [ 118.451119][ T6208] alloc_file_pseudo+0xe0/0x200 [ 118.455985][ T6208] ? alloc_empty_file_noaccount+0x80/0x80 [ 118.461718][ T6208] ? alloc_anon_inode+0x22e/0x300 [ 118.466753][ T6208] ? memcpy+0x3c/0x60 [ 118.470739][ T6208] ? alloc_anon_inode+0x22e/0x300 [ 118.475777][ T6208] aio_setup_ring+0x1f7/0xda0 [ 118.480470][ T6208] ? pcpu_alloc+0x11e6/0x16d0 [ 118.485164][ T6208] ? free_ioctx_reqs+0x180/0x180 [ 118.490119][ T6208] ? percpu_ref_init+0x210/0x340 [ 118.495068][ T6208] ? free_ioctx_users+0x1c0/0x1c0 [ 118.500109][ T6208] ioctx_alloc+0x316/0x770 [ 118.504542][ T6208] __se_sys_io_setup+0x7b/0x190 [ 118.509403][ T6208] do_syscall_64+0x4c/0xa0 [ 118.513827][ T6208] ? clear_bhb_loop+0x30/0x80 [ 118.518514][ T6208] ? clear_bhb_loop+0x30/0x80 [ 118.523205][ T6208] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.529114][ T6208] RIP: 0033:0x7fe609716559 [ 118.533543][ T6208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.553156][ T6208] RSP: 002b:00007fe60796d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 118.561600][ T6208] RAX: ffffffffffffffda RBX: 00007fe60999cfa0 RCX: 00007fe609716559 [ 118.569589][ T6208] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 118.577572][ T6208] RBP: 00007fe6097adb20 R08: 0000000000000000 R09: 0000000000000000 [ 118.585556][ T6208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.593536][ T6208] R13: 00007fe60999d038 R14: 00007fe60999cfa0 R15: 00007fffdfdda558 [ 118.601534][ T6208] [ 119.458932][ T6236] loop6: detected capacity change from 0 to 512 [ 119.583342][ T6249] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 119.584007][ T6236] EXT4-fs (loop6): 1 truncate cleaned up [ 119.617750][ T6236] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 120.662895][ T6276] capability: warning: `syz.1.587' uses 32-bit capabilities (legacy support in use) [ 120.707835][ T6276] program syz.1.587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.079664][ T6326] device syzkaller0 entered promiscuous mode [ 122.237651][ T6349] block device autoloading is deprecated and will be removed. [ 122.266918][ T6356] loop1: detected capacity change from 0 to 1764 [ 123.873658][ T6426] syz.1.638 (6426): /proc/6424/oom_adj is deprecated, please use /proc/6424/oom_score_adj instead. [ 124.001017][ T6429] rxe_eth0 speed is unknown, defaulting to 1000 [ 124.039780][ T6433] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 124.046340][ T6433] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 124.067256][ T6433] vhci_hcd vhci_hcd.0: Device attached [ 124.081132][ T6437] vhci_hcd: connection closed [ 124.081642][ T4424] vhci_hcd: stop threads [ 124.091397][ T4424] vhci_hcd: release socket [ 124.097793][ T4424] vhci_hcd: disconnect device [ 124.160778][ T6429] ip6gre0 speed is unknown, defaulting to 1000 [ 125.472488][ T6459] bond0: (slave gretap0): Error -99 calling set_mac_address [ 125.598255][ T6478] netlink: 48 bytes leftover after parsing attributes in process `syz.3.648'. [ 125.890381][ T6494] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 125.896938][ T6494] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 125.907396][ T6494] vhci_hcd vhci_hcd.0: Device attached [ 125.920561][ T6500] vhci_hcd: connection closed [ 125.924916][ T6457] vhci_hcd: stop threads [ 125.937107][ T6457] vhci_hcd: release socket [ 125.949332][ T6457] vhci_hcd: disconnect device [ 127.673022][ T1327] logitech-hidpp-device 0003:046D:C082.0001: Device not connected [ 128.328368][ T6555] TC_ACT_REPEAT abuse ? [ 129.370487][ T6561] loop6: detected capacity change from 0 to 1024 [ 129.383912][ T6564] loop1: detected capacity change from 0 to 512 [ 129.648823][ T6564] EXT4-fs (loop1): Ignoring removed orlov option [ 129.694962][ T6561] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 129.784974][ T6564] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 130.114388][ T6561] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,init_itable,sysvgroups,resuid=0x0000000000000000,init_itable,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 130.185624][ T6564] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.674: Allocating blocks 41-42 which overlap fs metadata [ 130.241824][ T6564] __quota_error: 9 callbacks suppressed [ 130.241843][ T6564] Quota error (device loop1): write_blk: dquota write failed [ 130.313200][ T6564] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 130.332815][ T6585] loop0: detected capacity change from 0 to 512 [ 130.486573][ T6564] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 130.580475][ T6564] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.674: Failed to acquire dquot type 1 [ 130.600235][ T6589] loop6: detected capacity change from 0 to 1024 [ 130.638130][ T6564] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 130.661127][ T6585] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.703681][ T6564] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.674: corrupted inode contents [ 130.720124][ T6585] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.738609][ T6589] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 2: comm syz.6.681: lblock 2 mapped to illegal pblock 2 (length 1) [ 130.775584][ T6564] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #12: comm syz.1.674: mark_inode_dirty error [ 130.868763][ T6589] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 130.904495][ T6564] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.674: corrupted inode contents [ 130.958811][ T6589] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 48: comm syz.6.681: lblock 0 mapped to illegal pblock 48 (length 1) [ 131.007303][ T6589] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 131.039059][ T6589] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.681: Failed to acquire dquot type 0 [ 131.058678][ T6564] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.674: mark_inode_dirty error [ 131.122506][ T6564] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.674: corrupted inode contents [ 131.158840][ T6589] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 131.234686][ T6589] EXT4-fs error (device loop6): ext4_evict_inode:284: inode #11: comm syz.6.681: mark_inode_dirty error [ 131.256438][ T6564] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 131.332643][ T6564] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.674: corrupted inode contents [ 131.344902][ T6589] EXT4-fs warning (device loop6): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 131.375796][ T6589] EXT4-fs (loop6): 1 orphan inode deleted [ 131.386056][ T6589] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 131.408931][ T6564] EXT4-fs error (device loop1): ext4_truncate:4286: inode #12: comm syz.1.674: mark_inode_dirty error [ 131.615786][ T6564] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 131.727848][ T6564] EXT4-fs (loop1): 1 truncate cleaned up [ 131.860687][ T6564] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,noblock_validity,inode_readahead_blks=0x0000000000200000,noload,noinit_itable,abort,orlov,nouid32,auto_da_alloc=0x00000000000085962,errors=continue. Quota mode: writeback. [ 132.058630][ T6325] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 2: comm kworker/u4:14: lblock 2 mapped to illegal pblock 2 (length 1) [ 132.129853][ T6325] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 132.152421][ T6325] EXT4-fs error (device loop6): ext4_write_dquot:6216: comm kworker/u4:14: Failed to commit dquot type 0 [ 132.206873][ T6325] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 132.257247][ T6325] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 132.307116][ T6325] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 132.322344][ T6325] EXT4-fs error (device loop6): ext4_release_dquot:6272: comm kworker/u4:14: Failed to release dquot type 0 [ 132.387047][ T5414] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 132.452549][ T5414] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 132.480640][ T6645] Illegal XDP return value 4294967274, expect packet loss! [ 132.517408][ T5414] EXT4-fs error (device loop6): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 132.651610][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.658124][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.890260][ T6658] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 132.896814][ T6658] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 132.914331][ T6658] vhci_hcd vhci_hcd.0: Device attached [ 132.944084][ T6664] vhci_hcd: connection closed [ 133.066933][ T6325] vhci_hcd: stop threads [ 133.078751][ T6325] vhci_hcd: release socket [ 133.092254][ T6325] vhci_hcd: disconnect device [ 133.160860][ T1327] vhci_hcd: vhci_device speed not set [ 134.130230][ T6690] mmap: syz.0.704 (6690) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 134.335545][ T6707] loop1: detected capacity change from 0 to 512 [ 134.364874][ T6708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.714'. [ 134.661666][ T6707] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.708257][ T6707] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.082633][ T6722] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 135.089186][ T6722] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 135.195331][ T6722] vhci_hcd vhci_hcd.0: Device attached [ 135.237440][ T6724] vhci_hcd: connection closed [ 135.243342][ T1186] vhci_hcd: stop threads [ 135.268832][ T1186] vhci_hcd: release socket [ 135.290766][ T1186] vhci_hcd: disconnect device [ 135.486355][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 135.506342][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 135.516341][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 135.536327][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 135.699203][ T6757] loop0: detected capacity change from 0 to 512 [ 135.812173][ T6757] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 135.826687][ T6757] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.913529][ T6782] loop0: detected capacity change from 0 to 512 [ 137.817421][ T6801] loop1: detected capacity change from 0 to 512 [ 137.898823][ T6801] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.922704][ T6805] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 137.922983][ T6801] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.929264][ T6805] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 137.942455][ T6805] vhci_hcd vhci_hcd.0: Device attached [ 138.175341][ T6815] vhci_hcd: connection closed [ 138.177962][ T6325] vhci_hcd: stop threads [ 138.260574][ T6325] vhci_hcd: release socket [ 138.329057][ T6325] vhci_hcd: disconnect device [ 138.796071][ T6835] synth uevent: /bus/acpi: unknown uevent action string [ 139.763494][ T6849] netlink: 3560 bytes leftover after parsing attributes in process `syz.6.757'. [ 139.786396][ T6852] loop0: detected capacity change from 0 to 128 [ 139.807288][ T6858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.756'. [ 139.835455][ T6852] EXT4-fs (loop0): Ignoring removed nobh option [ 139.841951][ T6852] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 140.602139][ T6871] loop1: detected capacity change from 0 to 512 [ 140.643065][ T6863] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 140.649618][ T6863] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 140.680035][ T6863] vhci_hcd vhci_hcd.0: Device attached [ 140.710347][ T6867] vhci_hcd: connection closed [ 140.710763][ T5840] vhci_hcd: stop threads [ 140.804433][ T6871] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 140.813616][ T5840] vhci_hcd: release socket [ 140.816365][ T6871] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.856501][ T5840] vhci_hcd: disconnect device [ 140.863786][ T21] vhci_hcd: vhci_device speed not set [ 141.867113][ T6900] syz.1.768 (6900) used greatest stack depth: 17632 bytes left [ 141.873690][ T6907] crypto_alloc_aead failed rc=-2 [ 142.047847][ T6936] loop1: detected capacity change from 0 to 512 [ 142.824215][ T6945] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 142.830777][ T6945] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 142.864752][ T6945] vhci_hcd vhci_hcd.0: Device attached [ 142.890288][ T6936] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.062889][ T4266] vhci_hcd: vhci_device speed not set [ 143.110868][ T6936] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.132749][ T4266] usb 45-1: new full-speed USB device number 4 using vhci_hcd [ 143.166497][ T6948] vhci_hcd: connection closed [ 143.167349][ T6457] vhci_hcd: stop threads [ 143.236675][ T6457] vhci_hcd: release socket [ 143.335042][ T6457] vhci_hcd: disconnect device [ 143.771539][ T6973] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.784'. [ 143.801295][ T6973] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 145.534898][ T7010] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 145.541462][ T7010] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 145.725788][ T7010] vhci_hcd vhci_hcd.0: Device attached [ 145.922968][ T4301] vhci_hcd: vhci_device speed not set [ 145.992378][ T4301] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 146.058974][ T7013] vhci_hcd: connection closed [ 146.059753][ T4911] vhci_hcd: stop threads [ 146.196768][ T4911] vhci_hcd: release socket [ 146.272205][ T4911] vhci_hcd: disconnect device [ 146.511315][ T7041] FAULT_INJECTION: forcing a failure. [ 146.511315][ T7041] name failslab, interval 1, probability 0, space 0, times 0 [ 146.706406][ T7041] CPU: 1 PID: 7041 Comm: syz.3.806 Not tainted syzkaller #0 [ 146.713741][ T7041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 146.723806][ T7041] Call Trace: [ 146.727088][ T7041] [ 146.730018][ T7041] dump_stack_lvl+0x188/0x250 [ 146.734702][ T7041] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 146.740344][ T7041] ? show_regs_print_info+0x20/0x20 [ 146.745557][ T7041] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 146.751210][ T7041] should_fail+0x383/0x4b0 [ 146.755638][ T7041] should_failslab+0x5/0x20 [ 146.760142][ T7041] slab_pre_alloc_hook+0x51/0xc0 [ 146.765078][ T7041] ? __kernfs_new_node+0xe3/0x6b0 [ 146.770107][ T7041] kmem_cache_alloc+0x3d/0x280 [ 146.774878][ T7041] __kernfs_new_node+0xe3/0x6b0 [ 146.779741][ T7041] ? __lock_acquire+0x7d40/0x7d40 [ 146.784773][ T7041] ? kernfs_new_node+0x250/0x250 [ 146.789730][ T7041] ? kernfs_activate+0x1eb/0x210 [ 146.794677][ T7041] kernfs_new_node+0x148/0x250 [ 146.799462][ T7041] __kernfs_create_file+0x47/0x2e0 [ 146.804582][ T7041] sysfs_add_file_mode_ns+0x2d2/0x390 [ 146.809968][ T7041] sysfs_merge_group+0x182/0x320 [ 146.814919][ T7041] ? sysfs_remove_groups+0xa0/0xa0 [ 146.820040][ T7041] ? sysfs_create_groups+0x9c/0x120 [ 146.825244][ T7041] dpm_sysfs_add+0xce/0x270 [ 146.829758][ T7041] device_add+0x745/0x1050 [ 146.834183][ T7041] rfkill_register+0x16c/0x970 [ 146.838963][ T7041] nfc_register_device+0x139/0x300 [ 146.844089][ T7041] nci_register_device+0x89f/0x9f0 [ 146.849212][ T7041] ? nci_free_device+0x90/0x90 [ 146.853997][ T7041] ? nci_hci_allocate+0x1dd/0x2a0 [ 146.859029][ T7041] ? nci_allocate_device+0x241/0x350 [ 146.864319][ T7041] virtual_ncidev_open+0x55/0xc0 [ 146.869269][ T7041] ? virtual_ncidev_ioctl+0x90/0x90 [ 146.874470][ T7041] misc_open+0x31f/0x390 [ 146.878720][ T7041] chrdev_open+0x585/0x5f0 [ 146.883146][ T7041] ? cd_forget+0x160/0x160 [ 146.887564][ T7041] ? fsnotify_perm+0x3a7/0x560 [ 146.892330][ T7041] ? cd_forget+0x160/0x160 [ 146.896745][ T7041] do_dentry_open+0x7f7/0xf90 [ 146.901427][ T7041] ? vfs_open+0x2b/0x80 [ 146.905590][ T7041] path_openat+0x2718/0x2fb0 [ 146.910211][ T7041] ? __kasan_slab_alloc+0xa9/0xc0 [ 146.915248][ T7041] ? do_filp_open+0x400/0x400 [ 146.919969][ T7041] do_filp_open+0x1df/0x400 [ 146.924480][ T7041] ? vfs_tmpfile+0x300/0x300 [ 146.929096][ T7041] ? _raw_spin_unlock+0x24/0x40 [ 146.933945][ T7041] ? alloc_fd+0x59e/0x650 [ 146.938282][ T7041] do_sys_openat2+0x14b/0x500 [ 146.942965][ T7041] ? __lock_acquire+0x7d40/0x7d40 [ 146.947997][ T7041] ? do_sys_open+0xe0/0xe0 [ 146.952422][ T7041] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 146.958414][ T7041] ? lock_chain_count+0x20/0x20 [ 146.963277][ T7041] __x64_sys_openat+0x135/0x160 [ 146.968136][ T7041] do_syscall_64+0x4c/0xa0 [ 146.972555][ T7041] ? clear_bhb_loop+0x30/0x80 [ 146.977241][ T7041] ? clear_bhb_loop+0x30/0x80 [ 146.981936][ T7041] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.987843][ T7041] RIP: 0033:0x7fe609716559 [ 146.992273][ T7041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.011894][ T7041] RSP: 002b:00007fe60796d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 147.020325][ T7041] RAX: ffffffffffffffda RBX: 00007fe60999cfa0 RCX: 00007fe609716559 [ 147.028305][ T7041] RDX: 0000000000000002 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 147.036375][ T7041] RBP: 00007fe6097adb20 R08: 0000000000000000 R09: 0000000000000000 [ 147.044358][ T7041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.052347][ T7041] R13: 00007fe60999d038 R14: 00007fe60999cfa0 R15: 00007fffdfdda558 [ 147.060346][ T7041] [ 147.152623][ T7063] ip_tables: iptables: counters copy to user failed while replacing table [ 148.279197][ T7095] loop0: detected capacity change from 0 to 512 [ 148.360071][ T7095] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.820: inode has both inline data and extents flags [ 148.397976][ T7100] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 148.404534][ T7100] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 148.408012][ T4266] vhci_hcd: vhci_device speed not set [ 148.413190][ T7100] vhci_hcd vhci_hcd.0: Device attached [ 148.426042][ T7103] vhci_hcd: connection closed [ 148.428356][ T7095] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.820: couldn't read orphan inode 15 (err -117) [ 148.444850][ T4771] vhci_hcd: stop threads [ 148.444864][ T4771] vhci_hcd: release socket [ 148.444880][ T4771] vhci_hcd: disconnect device [ 148.466279][ T7095] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 149.304416][ T7118] netlink: 'syz.3.825': attribute type 4 has an invalid length. [ 149.354362][ T7118] netlink: 152 bytes leftover after parsing attributes in process `syz.3.825'. [ 150.095528][ T7116] rxe_eth0 speed is unknown, defaulting to 1000 [ 150.503698][ T7116] ip6gre0 speed is unknown, defaulting to 1000 [ 151.283093][ T4301] vhci_hcd: vhci_device speed not set [ 152.858541][ T7201] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 152.865098][ T7201] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 152.915239][ T7201] vhci_hcd vhci_hcd.0: Device attached [ 152.936625][ T7205] vhci_hcd: connection closed [ 152.936829][ T4771] vhci_hcd: stop threads [ 152.974684][ T4771] vhci_hcd: release socket [ 152.995957][ T4771] vhci_hcd: disconnect device [ 153.050969][ T7202] rxe_eth0 speed is unknown, defaulting to 1000 [ 154.035242][ T25] audit: type=1326 audit(1793326727.451:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.6.857" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b71b9559 code=0x7ffc0000 [ 154.046067][ T7202] ip6gre0 speed is unknown, defaulting to 1000 [ 154.073104][ T7234] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 154.120165][ T25] audit: type=1326 audit(1793326727.451:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.6.857" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b71b9559 code=0x7ffc0000 [ 154.242190][ T25] audit: type=1326 audit(1793326727.451:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.6.857" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b71b9559 code=0x7ffc0000 [ 154.406888][ T25] audit: type=1326 audit(1793326727.451:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.6.857" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fe2b71b9559 code=0x7ffc0000 [ 154.701001][ T25] audit: type=1326 audit(1793326727.451:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.6.857" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b71b9559 code=0x7ffc0000 [ 154.823720][ T7252] loop6: detected capacity change from 0 to 512 [ 154.847391][ T25] audit: type=1326 audit(1793326727.451:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.6.857" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b71b9559 code=0x7ffc0000 [ 154.880216][ T7252] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 154.967705][ T7252] EXT4-fs (loop6): 1 truncate cleaned up [ 154.973683][ T4265] Bluetooth: hci3: command 0x0409 tx timeout [ 154.987301][ T7252] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,grpid,debug_want_extra_isize=0x0000000000000068,lazytime,nodioread_nolock,minixdf,,errors=continue. Quota mode: none. [ 155.008341][ T25] audit: type=1326 audit(1793326727.451:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.6.857" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe2b71b9559 code=0x7ffc0000 [ 155.018003][ T7202] chnl_net:caif_netlink_parms(): no params data found [ 156.200077][ T25] audit: type=1326 audit(1793326727.451:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.6.857" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe2b71b9559 code=0x7ffc0000 [ 156.237975][ T7202] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.292368][ T7202] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.299484][ T25] audit: type=1800 audit(1793326728.521:41): pid=7252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.861" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 156.300822][ T7202] device bridge_slave_0 entered promiscuous mode [ 156.415764][ T7202] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.442247][ T7202] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.480834][ T7202] device bridge_slave_1 entered promiscuous mode [ 156.553273][ T7202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.585210][ T7202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.666694][ T7202] team0: Port device team_slave_0 added [ 156.799144][ T7202] team0: Port device team_slave_1 added [ 156.982628][ T7202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.011900][ T7202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.042215][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 157.219581][ T7202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.324940][ T7202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.331968][ T7202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.410713][ T7299] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 157.417269][ T7299] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 157.459456][ T7299] vhci_hcd vhci_hcd.0: Device attached [ 157.494326][ T7202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.504982][ T7305] vhci_hcd: connection closed [ 157.505531][ T4771] vhci_hcd: stop threads [ 157.537668][ T4771] vhci_hcd: release socket [ 157.573117][ T4771] vhci_hcd: disconnect device [ 157.594143][ T7202] device hsr_slave_0 entered promiscuous mode [ 157.630904][ T7202] device hsr_slave_1 entered promiscuous mode [ 157.660432][ T7202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.688487][ T7202] Cannot create hsr debugfs directory [ 159.122397][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 159.422128][ T7202] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 159.458663][ T7202] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 159.466724][ T7338] autofs4:pid:7338:autofs_fill_super: called with bogus options [ 159.505923][ T7202] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 159.563031][ T7202] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 160.482972][ T7202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.534916][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.561918][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.610808][ T7202] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.654343][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.702856][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.734373][ T4743] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.741505][ T4743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.809318][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.871835][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.908450][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.908826][ T7376] device-mapper: ioctl: Unable to rename non-existent device, syzd0 to uuid syzd3 [ 160.938545][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.945697][ T4278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.002495][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.039292][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.061091][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.098182][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.207881][ T26] Bluetooth: hci3: command 0x0419 tx timeout [ 161.225438][ T7387] FAULT_INJECTION: forcing a failure. [ 161.225438][ T7387] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 161.420286][ T7387] CPU: 1 PID: 7387 Comm: syz.3.888 Not tainted syzkaller #0 [ 161.427615][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 161.437774][ T7387] Call Trace: [ 161.441062][ T7387] [ 161.443994][ T7387] dump_stack_lvl+0x188/0x250 [ 161.448682][ T7387] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 161.454330][ T7387] ? show_regs_print_info+0x20/0x20 [ 161.459544][ T7387] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 161.465206][ T7387] ? dump_stack+0x5/0x20 [ 161.469467][ T7387] should_fail+0x383/0x4b0 [ 161.473900][ T7387] prepare_alloc_pages+0x1e3/0x5b0 [ 161.479034][ T7387] __alloc_pages+0x11b/0x480 [ 161.483633][ T7387] ? zone_statistics+0x170/0x170 [ 161.488575][ T7387] ? preempt_schedule+0xbc/0xd0 [ 161.493447][ T7387] pcpu_populate_chunk+0x15d/0xc80 [ 161.498576][ T7387] ? _find_next_bit+0x1a9/0x200 [ 161.503434][ T7387] pcpu_alloc+0xcb6/0x16d0 [ 161.507868][ T7387] bpf_map_alloc_percpu+0xc5/0x150 [ 161.512987][ T7387] htab_map_alloc+0xce5/0x1670 [ 161.517793][ T7387] map_create+0x481/0x2330 [ 161.522218][ T7387] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 161.527683][ T7387] ? bpf_lsm_bpf+0x5/0x10 [ 161.532020][ T7387] __sys_bpf+0x30a/0x6f0 [ 161.536442][ T7387] ? bpf_link_show_fdinfo+0x380/0x380 [ 161.541836][ T7387] __x64_sys_bpf+0x78/0x90 [ 161.546257][ T7387] do_syscall_64+0x4c/0xa0 [ 161.550679][ T7387] ? clear_bhb_loop+0x30/0x80 [ 161.555355][ T7387] ? clear_bhb_loop+0x30/0x80 [ 161.560033][ T7387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.565929][ T7387] RIP: 0033:0x7fe609716559 [ 161.570345][ T7387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.589952][ T7387] RSP: 002b:00007fe60796d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.598383][ T7387] RAX: ffffffffffffffda RBX: 00007fe60999cfa0 RCX: 00007fe609716559 [ 161.606367][ T7387] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 4400000000000000 [ 161.614348][ T7387] RBP: 00007fe6097adb20 R08: 0000000000000000 R09: 0000000000000000 [ 161.622327][ T7387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.630392][ T7387] R13: 00007fe60999d038 R14: 00007fe60999cfa0 R15: 00007fffdfdda558 [ 161.638388][ T7387] [ 161.720056][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.760180][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.803216][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.857048][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.918979][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.942655][ T7407] EXT4-fs warning (device sda1): ext4_group_extend:1831: need to use ext2online to resize further [ 161.964278][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.000019][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.014253][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.231873][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.254910][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.298790][ T7202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.538832][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.556407][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.613763][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.634387][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.652645][ T7202] device veth0_vlan entered promiscuous mode [ 164.661437][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.676717][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.897202][ T7202] device veth1_vlan entered promiscuous mode [ 165.421936][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.455396][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 165.483227][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.513188][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.551977][ T7202] device veth0_macvtap entered promiscuous mode [ 165.570089][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.595338][ T7202] device veth1_macvtap entered promiscuous mode [ 165.641836][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.685378][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.719653][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.753261][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.782678][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.804378][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.829966][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.852262][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.866995][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.884791][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.918272][ T7202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.951377][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.981833][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.004810][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.025363][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.042314][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.053085][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.063202][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.073884][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.083778][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.096026][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.122816][ T7202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.131937][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.141506][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.150624][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.160202][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.169925][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.919'. [ 166.179111][ T7518] bridge0: port 3(bond0) entered blocking state [ 166.186135][ T7518] bridge0: port 3(bond0) entered disabled state [ 166.327480][ T7518] device bond0 entered promiscuous mode [ 166.343496][ T7518] device bond_slave_0 entered promiscuous mode [ 166.349925][ T7518] device bond_slave_1 entered promiscuous mode [ 166.358077][ T7518] bridge0: port 3(bond0) entered blocking state [ 166.364940][ T7518] bridge0: port 3(bond0) entered forwarding state [ 166.374640][ T7202] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.440900][ T7202] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.478374][ T7202] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.542151][ T7202] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.688096][ T7533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.927'. [ 167.056604][ T7533] netlink: 'syz.3.927': attribute type 2 has an invalid length. [ 167.284130][ T7533] netlink: 'syz.3.927': attribute type 2 has an invalid length. [ 167.368245][ T7533] netlink: 'syz.3.927': attribute type 1 has an invalid length. [ 167.388313][ T7533] netlink: 148 bytes leftover after parsing attributes in process `syz.3.927'. [ 167.439698][ T4719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.478249][ T4719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.505452][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 167.600087][ T4719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.613913][ T4719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.645849][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 167.897233][ T7578] loop6: detected capacity change from 0 to 256 [ 168.050348][ T7586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.943'. [ 168.322782][ T7605] device syzkaller0 entered promiscuous mode [ 168.353722][ T7605] 0: reclassify loop, rule prio 0, protocol 800 [ 168.466733][ T7615] device vlan2 entered promiscuous mode [ 168.480851][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.954'. [ 168.490435][ T7615] device hsr_slave_0 left promiscuous mode [ 168.567291][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.6.956'. [ 168.640330][ T7626] FAULT_INJECTION: forcing a failure. [ 168.640330][ T7626] name failslab, interval 1, probability 0, space 0, times 0 [ 168.663517][ T7626] CPU: 0 PID: 7626 Comm: syz.3.958 Not tainted syzkaller #0 [ 168.670851][ T7626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 168.680915][ T7626] Call Trace: [ 168.684205][ T7626] [ 168.687142][ T7626] dump_stack_lvl+0x188/0x250 [ 168.691837][ T7626] ? show_regs_print_info+0x20/0x20 [ 168.696440][ T7621] loop7: detected capacity change from 0 to 8192 [ 168.697047][ T7626] ? load_image+0x410/0x410 [ 168.707866][ T7626] ? __might_sleep+0xf0/0xf0 [ 168.712474][ T7626] ? __lock_acquire+0x7d40/0x7d40 [ 168.717519][ T7626] should_fail+0x383/0x4b0 [ 168.721955][ T7626] should_failslab+0x5/0x20 [ 168.726475][ T7626] slab_pre_alloc_hook+0x51/0xc0 [ 168.731426][ T7626] ? __proc_create+0x36f/0x8b0 [ 168.736204][ T7626] kmem_cache_alloc+0x3d/0x280 [ 168.740990][ T7626] __proc_create+0x36f/0x8b0 [ 168.745601][ T7626] ? proc_symlink+0x210/0x210 [ 168.750304][ T7626] proc_create_data+0xa0/0x2d0 [ 168.755086][ T7626] cache_register_net+0x27a/0x480 [ 168.760132][ T7626] ip_map_cache_create+0x6f/0xf0 [ 168.765088][ T7626] sunrpc_init_net+0x45/0x170 [ 168.769771][ T7626] ops_init+0x360/0x5f0 [ 168.773952][ T7626] setup_net+0x39e/0xa10 [ 168.778211][ T7626] ? copy_net_ns+0x5b0/0x5b0 [ 168.782819][ T7626] ? copy_net_ns+0x324/0x5b0 [ 168.787420][ T7626] ? down_read_killable+0x1ce/0x340 [ 168.792631][ T7626] copy_net_ns+0x33e/0x5b0 [ 168.797065][ T7626] create_new_namespaces+0x3ce/0x700 [ 168.802378][ T7626] unshare_nsproxy_namespaces+0x116/0x160 [ 168.808113][ T7626] ksys_unshare+0x4f6/0x8e0 [ 168.812665][ T7626] ? __lock_acquire+0x7d40/0x7d40 [ 168.817719][ T7626] ? sighand_ctor+0x40/0x40 [ 168.822226][ T7626] ? lock_chain_count+0x20/0x20 [ 168.827099][ T7626] ? syscall_enter_from_user_mode+0x21/0x70 [ 168.833026][ T7626] __x64_sys_unshare+0x34/0x40 [ 168.837807][ T7626] do_syscall_64+0x4c/0xa0 [ 168.842230][ T7626] ? clear_bhb_loop+0x30/0x80 [ 168.846916][ T7626] ? clear_bhb_loop+0x30/0x80 [ 168.851600][ T7626] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.857502][ T7626] RIP: 0033:0x7fe609716559 [ 168.861934][ T7626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.881551][ T7626] RSP: 002b:00007fe60796d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 168.889997][ T7626] RAX: ffffffffffffffda RBX: 00007fe60999cfa0 RCX: 00007fe609716559 [ 168.897981][ T7626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 168.905972][ T7626] RBP: 00007fe6097adb20 R08: 0000000000000000 R09: 0000000000000000 [ 168.913955][ T7626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.921945][ T7626] R13: 00007fe60999d038 R14: 00007fe60999cfa0 R15: 00007fffdfdda558 [ 168.929980][ T7626] [ 168.972827][ T7635] device syzkaller1 entered promiscuous mode [ 169.197566][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.964'. [ 169.356830][ T7655] ip_tables: iptables: counters copy to user failed while replacing table [ 169.399202][ T7655] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 169.681528][ T7684] [ 169.683901][ T7684] ====================================================== [ 169.691027][ T7684] WARNING: possible circular locking dependency detected [ 169.698072][ T7684] syzkaller #0 Not tainted [ 169.702503][ T7684] ------------------------------------------------------ [ 169.709526][ T7684] syz.6.980/7684 is trying to acquire lock: [ 169.715427][ T7684] ffff88802c30c158 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 169.727033][ T7684] [ 169.727033][ T7684] but task is already holding lock: [ 169.734399][ T7684] ffff88802c30a2e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 169.743379][ T7684] [ 169.743379][ T7684] which lock already depends on the new lock. [ 169.743379][ T7684] [ 169.753783][ T7684] [ 169.753783][ T7684] the existing dependency chain (in reverse order) is: [ 169.762886][ T7684] [ 169.762886][ T7684] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 169.770645][ T7684] lock_sock_nested+0x44/0x100 [ 169.775939][ T7684] smc_listen_out+0xd4/0x3c0 [ 169.781057][ T7684] smc_listen_work+0x52a/0xd10 [ 169.786356][ T7684] process_one_work+0x867/0xff0 [ 169.791743][ T7684] worker_thread+0xad7/0x12a0 [ 169.796954][ T7684] kthread+0x42e/0x520 [ 169.801551][ T7684] ret_from_fork+0x1f/0x30 [ 169.806516][ T7684] [ 169.806516][ T7684] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 169.816704][ T7684] __lock_acquire+0x38f7/0x7d40 [ 169.822104][ T7684] lock_acquire+0x19f/0x400 [ 169.827148][ T7684] __flush_work+0x116/0x210 [ 169.832185][ T7684] __cancel_work_timer+0x3f4/0x560 [ 169.837824][ T7684] smc_clcsock_release+0x5c/0xe0 [ 169.843294][ T7684] __smc_release+0x644/0x7b0 [ 169.848413][ T7684] smc_close_non_accepted+0xd1/0x1f0 [ 169.854442][ T7684] smc_close_active+0xae2/0xea0 [ 169.859822][ T7684] __smc_release+0x9c/0x7b0 [ 169.864858][ T7684] smc_release+0x2c1/0x520 [ 169.869807][ T7684] sock_close+0xbf/0x210 [ 169.874588][ T7684] __fput+0x212/0x8c0 [ 169.879103][ T7684] task_work_run+0x125/0x1a0 [ 169.884227][ T7684] exit_to_user_mode_loop+0x10f/0x130 [ 169.890128][ T7684] exit_to_user_mode_prepare+0xee/0x180 [ 169.896210][ T7684] syscall_exit_to_user_mode+0x16/0x40 [ 169.902207][ T7684] do_syscall_64+0x58/0xa0 [ 169.907154][ T7684] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.913580][ T7684] [ 169.913580][ T7684] other info that might help us debug this: [ 169.913580][ T7684] [ 169.923809][ T7684] Possible unsafe locking scenario: [ 169.923809][ T7684] [ 169.931259][ T7684] CPU0 CPU1 [ 169.936668][ T7684] ---- ---- [ 169.940253][ T7686] loop7: detected capacity change from 0 to 1024 [ 169.942033][ T7684] lock(sk_lock-AF_SMC/1); [ 169.952857][ T7684] lock((work_completion)(&new_smc->smc_listen_work)); [ 169.962319][ T7684] lock(sk_lock-AF_SMC/1); [ 169.969354][ T7684] lock((work_completion)(&new_smc->smc_listen_work)); [ 169.976298][ T7684] [ 169.976298][ T7684] *** DEADLOCK *** [ 169.976298][ T7684] [ 169.984441][ T7684] 2 locks held by syz.6.980/7684: [ 169.989466][ T7684] #0: ffff8880568f4a10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 169.999662][ T7684] #1: ffff88802c30a2e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 170.009091][ T7684] [ 170.009091][ T7684] stack backtrace: [ 170.014989][ T7684] CPU: 1 PID: 7684 Comm: syz.6.980 Not tainted syzkaller #0 [ 170.022277][ T7684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 170.032340][ T7684] Call Trace: [ 170.035620][ T7684] [ 170.038553][ T7684] dump_stack_lvl+0x188/0x250 [ 170.043241][ T7684] ? load_image+0x410/0x410 [ 170.047757][ T7684] ? show_regs_print_info+0x20/0x20 [ 170.052970][ T7684] ? print_circular_bug+0x12b/0x1a0 [ 170.058182][ T7684] check_noncircular+0x2f8/0x400 [ 170.063137][ T7684] ? deref_stack_reg+0xd0/0x120 [ 170.068033][ T7684] ? look_up_lock_class+0x71/0x110 [ 170.073158][ T7684] ? print_deadlock_bug+0x5d0/0x5d0 [ 170.078363][ T7684] ? lockdep_lock+0xf1/0x1f0 [ 170.082978][ T7684] ? lock_release+0xb5/0x8a0 [ 170.087583][ T7684] ? mark_lock+0x94/0x320 [ 170.091922][ T7684] ? _find_first_zero_bit+0xd1/0xf0 [ 170.097138][ T7684] __lock_acquire+0x38f7/0x7d40 [ 170.102003][ T7684] ? deref_stack_reg+0xd0/0x120 [ 170.106876][ T7684] ? verify_lock_unused+0x140/0x140 [ 170.112092][ T7684] ? mark_lock+0x94/0x320 [ 170.116434][ T7684] ? __lock_acquire+0x13b3/0x7d40 [ 170.121474][ T7684] ? lockdep_lock+0xf1/0x1f0 [ 170.126074][ T7684] lock_acquire+0x19f/0x400 [ 170.130589][ T7684] ? __flush_work+0xfa/0x210 [ 170.135197][ T7684] ? read_lock_is_recursive+0x10/0x10 [ 170.140587][ T7684] __flush_work+0x116/0x210 [ 170.145099][ T7684] ? __flush_work+0xfa/0x210 [ 170.149699][ T7684] ? flush_work+0x20/0x20 [ 170.154040][ T7684] ? try_to_grab_pending+0xfb/0x820 [ 170.159253][ T7684] ? mark_lock+0x94/0x320 [ 170.163598][ T7684] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 170.169596][ T7684] ? lock_chain_count+0x20/0x20 [ 170.174466][ T7684] ? mark_lock+0x94/0x320 [ 170.178805][ T7684] ? __cancel_work_timer+0x36a/0x560 [ 170.184107][ T7684] __cancel_work_timer+0x3f4/0x560 [ 170.189233][ T7684] ? cancel_work_sync+0x20/0x20 [ 170.194101][ T7684] ? __local_bh_enable_ip+0x136/0x1c0 [ 170.199488][ T7684] ? lockdep_hardirqs_on+0x94/0x140 [ 170.204712][ T7684] ? __local_bh_enable_ip+0x136/0x1c0 [ 170.210096][ T7684] ? _local_bh_enable+0xa0/0xa0 [ 170.214965][ T7684] smc_clcsock_release+0x5c/0xe0 [ 170.219920][ T7684] __smc_release+0x644/0x7b0 [ 170.224531][ T7684] smc_close_non_accepted+0xd1/0x1f0 [ 170.229833][ T7684] smc_close_active+0xae2/0xea0 [ 170.234698][ T7684] ? sock_no_sendpage_locked+0x1a0/0x1a0 [ 170.240346][ T7684] __smc_release+0x9c/0x7b0 [ 170.244867][ T7684] smc_release+0x2c1/0x520 [ 170.249296][ T7684] sock_close+0xbf/0x210 [ 170.253567][ T7684] ? sock_mmap+0x90/0x90 [ 170.257819][ T7684] __fput+0x212/0x8c0 [ 170.261811][ T7684] task_work_run+0x125/0x1a0 [ 170.266415][ T7684] exit_to_user_mode_loop+0x10f/0x130 [ 170.271817][ T7684] exit_to_user_mode_prepare+0xee/0x180 [ 170.277382][ T7684] syscall_exit_to_user_mode+0x16/0x40 [ 170.282858][ T7684] do_syscall_64+0x58/0xa0 [ 170.287385][ T7684] ? clear_bhb_loop+0x30/0x80 [ 170.292083][ T7684] ? clear_bhb_loop+0x30/0x80 [ 170.296773][ T7684] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.302761][ T7684] RIP: 0033:0x7fe2b71b9559 [ 170.307182][ T7684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 170.326799][ T7684] RSP: 002b:00007fe2b5410028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 170.335221][ T7684] RAX: 0000000000000000 RBX: 00007fe2b743ffa0 RCX: 00007fe2b71b9559 [ 170.343205][ T7684] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 170.351186][ T7684] RBP: 00007fe2b7250b20 R08: 0000000000000000 R09: 0000000000000000 [ 170.359162][ T7684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.367135][ T7684] R13: 00007fe2b7440038 R14: 00007fe2b743ffa0 R15: 00007ffd9d380eb8 [ 170.375168][ T7684] [ 171.388897][ T4719] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.467080][ T4719] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.535408][ T4719] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.585617][ T4719] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.658978][ T4719] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.687036][ T4719] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.737123][ T4719] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.795953][ T4719] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.443875][ T4719] IPVS: stopping backup sync thread 7234 ... [ 172.846319][ T4719] device hsr_slave_0 left promiscuous mode [ 172.853051][ T4719] device hsr_slave_1 left promiscuous mode [ 172.859479][ T4719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.869126][ T4719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.877093][ T4719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.887140][ T4719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.895061][ T4719] device bond0 left promiscuous mode [ 172.900397][ T4719] device bond_slave_0 left promiscuous mode [ 172.908391][ T4719] device bond_slave_1 left promiscuous mode [ 172.914728][ T4719] bridge0: port 3(bond0) entered disabled state [ 172.922029][ T4719] device bridge_slave_1 left promiscuous mode [ 172.930429][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.938620][ T4719] device bridge_slave_0 left promiscuous mode [ 172.948169][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.959604][ T4719] device hsr_slave_0 left promiscuous mode [ 172.968385][ T4719] device hsr_slave_1 left promiscuous mode [ 172.975069][ T4719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.984705][ T4719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.993063][ T4719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.000601][ T4719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.008459][ T4719] device bridge_slave_1 left promiscuous mode [ 173.015408][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.023807][ T4719] device bridge_slave_0 left promiscuous mode [ 173.029930][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.039720][ T4719] device veth1_macvtap left promiscuous mode [ 173.045853][ T4719] device veth0_macvtap left promiscuous mode [ 173.051853][ T4719] device veth1_vlan left promiscuous mode [ 173.058060][ T4719] device veth0_vlan left promiscuous mode [ 173.065198][ T4719] device veth1_macvtap left promiscuous mode [ 173.071237][ T4719] device veth0_macvtap left promiscuous mode [ 173.077311][ T4719] device veth1_vlan left promiscuous mode [ 173.083086][ T4719] device veth0_vlan left promiscuous mode [ 173.188270][ T4719] team0 (unregistering): Port device team_slave_1 removed [ 173.198638][ T4719] team0 (unregistering): Port device team_slave_0 removed [ 173.208748][ T4719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.220066][ T4719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.258786][ T4719] bond0 (unregistering): Released all slaves [ 173.300844][ T4719] team0 (unregistering): Port device team_slave_1 removed [ 173.311054][ T4719] team0 (unregistering): Port device team_slave_0 removed [ 173.323075][ T4719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.335344][ T4719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.371595][ T4719] bond0 (unregistering): Released all slaves [ 174.277298][ T4719] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.316730][ T4719] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.365778][ T4719] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.426462][ T4719] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.563013][ T4719] tipc: Left network mode [ 175.323571][ T4719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.331228][ T4719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.339485][ T4719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.347162][ T4719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.354981][ T4719] device bridge_slave_1 left promiscuous mode [ 175.361155][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.372707][ T4719] device bridge_slave_0 left promiscuous mode [ 175.378909][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.389129][ T4719] device veth1_macvtap left promiscuous mode [ 175.396373][ T4719] device veth0_macvtap left promiscuous mode [ 175.403937][ T4719] device veth1_vlan left promiscuous mode [ 175.410470][ T4719] device veth0_vlan left promiscuous mode [ 175.513226][ T4719] team0 (unregistering): Port device team_slave_1 removed [ 175.523114][ T4719] team0 (unregistering): Port device team_slave_0 removed [ 175.534265][ T4719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.545396][ T4719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.578597][ T4719] bond0 (unregistering): Released all slaves