last executing test programs: 17.697124055s ago: executing program 0 (id=210): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) 17.025545673s ago: executing program 0 (id=295): bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000500)={'dummy0\x00', @random='\x00\x00\x00\x00\x00 '}) 16.56732375s ago: executing program 0 (id=299): removexattr(&(0x7f00000017c0)='./cgroup\x00', &(0x7f0000001800)=@known='security.apparmor\x00') 16.440536993s ago: executing program 0 (id=301): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x4c, &(0x7f0000000280)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESOCT], 0x1, 0x3a2, &(0x7f00000002c0)="$eJzs3U1rY+UXAPDTzPRl+v+36UIEFfFhdm5CW7/AFJkBsaDUiYyzEO/YdAy905QkVDKIzkJw6zdwP7h0J4hfoAvdu3PXjctZDBPJW5t0Yiv2JQ7+fhDuSZ5zkufmksvZhHNw59sH21uN0lbWjMKNFIWIKDyJWOpGPVP9Y6Ebz8SwR/Fm8c5vr3/w0d1319bXb26kdGvt9lurKaXFN376/Ivvr//c/N+HPyz+OBv7Sx8f/LH6+/7L+68cPLv9WbWRqo20U2umLN2r1ZrZvbySNquN7VJK7+eVrFFJ1Z1GpT6yvpXXdndbKdvZXJjfrVcajZTttNJ2pZWatdSst1J2P6vupFKplBbmg9OUH29sZGu9eO6EvBuXtSEuQL2+lnV+w7PPrZQfT2RDAMBEnan/Hyyc2v/fLQz1/3Pxl/3/dOj/z8X030sb7v//8ZvwL9fp/2f6v99R+n8AAAAAAAAAAAAAAHgRPGm3i+12uzg4tgd/Eu4/n/D2uGDPXf9jj0nvj4s19Me9uYj8m73yXrl37K2vbUU18qjEchTjaee2MNCLb72zfnM5dS3FwoOvuvXXf4koXxmtX4liLI2vX+nVp8P66BynY364fjU+iZfG16+OrZ+J5e+G6ktRjF8/jVrksdm9vR3Vf7mS0tvvrR+rn+3mAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDfUEoDr0Vv7v1eOeJa7PXn95eOEpZG5+P36g/n6y9HMZ6On8+/PHY+/9V49epkzx0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhqth9tZnlfqlxUMZv5neT4VM73gpKqpXvqjY0vXYjR59rT3OWNQODUnCkevXOuf5JjkZ+12uxvc//rctzp3uZfyLMF0RJyQ0+5/gWf/rP9HxPArV0ZzZiPiLB/RPuksOsFiJyic63d45VIu0yTuRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBZh0O/O0+mJr0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJqXRerid5XmlfoHBpM8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgRfJnAAAA///+Owi8") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000680)={@id={0x2, 0x0, @d}}) sched_setscheduler(r0, 0x1, &(0x7f00000006c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) statfs(&(0x7f00000007c0)='./cgroup\x00', &(0x7f0000000800)=""/216) connect$unix(r2, &(0x7f0000000900)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r2, &(0x7f00000009c0), 0x4000087, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x46042, 0x179) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x540a, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000ac0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, &(0x7f0000000b00)=0x701, 0x4) setreuid(0xee01, 0xee01) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000b40)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) unshare(0x2020600) 4.081849224s ago: executing program 0 (id=365): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x8, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.563339599s ago: executing program 3 (id=373): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0xd, 0x0, 0x4000000}, 0xc080) 2.45318224s ago: executing program 1 (id=375): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x3f, 0x40008d0, &(0x7f0000000180)={0xa, 0x4e24, 0x36c2, @loopback={0xff00000000000000}, 0x2}, 0x1c) 2.231193953s ago: executing program 0 (id=376): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x4c, &(0x7f0000000280)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESOCT], 0x1, 0x3a2, &(0x7f00000002c0)="$eJzs3U1rY+UXAPDTzPRl+v+36UIEFfFhdm5CW7/AFJkBsaDUiYyzEO/YdAy905QkVDKIzkJw6zdwP7h0J4hfoAvdu3PXjctZDBPJW5t0Yiv2JQ7+fhDuSZ5zkufmksvZhHNw59sH21uN0lbWjMKNFIWIKDyJWOpGPVP9Y6Ebz8SwR/Fm8c5vr3/w0d1319bXb26kdGvt9lurKaXFN376/Ivvr//c/N+HPyz+OBv7Sx8f/LH6+/7L+68cPLv9WbWRqo20U2umLN2r1ZrZvbySNquN7VJK7+eVrFFJ1Z1GpT6yvpXXdndbKdvZXJjfrVcajZTttNJ2pZWatdSst1J2P6vupFKplBbmg9OUH29sZGu9eO6EvBuXtSEuQL2+lnV+w7PPrZQfT2RDAMBEnan/Hyyc2v/fLQz1/3Pxl/3/dOj/z8X030sb7v//8ZvwL9fp/2f6v99R+n8AAAAAAAAAAAAAAHgRPGm3i+12uzg4tgd/Eu4/n/D2uGDPXf9jj0nvj4s19Me9uYj8m73yXrl37K2vbUU18qjEchTjaee2MNCLb72zfnM5dS3FwoOvuvXXf4koXxmtX4liLI2vX+nVp8P66BynY364fjU+iZfG16+OrZ+J5e+G6ktRjF8/jVrksdm9vR3Vf7mS0tvvrR+rn+3mAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDfUEoDr0Vv7v1eOeJa7PXn95eOEpZG5+P36g/n6y9HMZ6On8+/PHY+/9V49epkzx0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhqth9tZnlfqlxUMZv5neT4VM73gpKqpXvqjY0vXYjR59rT3OWNQODUnCkevXOuf5JjkZ+12uxvc//rctzp3uZfyLMF0RJyQ0+5/gWf/rP9HxPArV0ZzZiPiLB/RPuksOsFiJyic63d45VIu0yTuRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBZh0O/O0+mJr0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJqXRerid5XmlfoHBpM8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgRfJnAAAA///+Owi8") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000680)={@id={0x2, 0x0, @d}}) sched_setscheduler(r0, 0x1, &(0x7f00000006c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) statfs(&(0x7f00000007c0)='./cgroup\x00', &(0x7f0000000800)=""/216) connect$unix(r2, &(0x7f0000000900)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r2, &(0x7f00000009c0), 0x4000087, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x46042, 0x179) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x540a, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000ac0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, &(0x7f0000000b00)=0x701, 0x4) setreuid(0xee01, 0xee01) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000b40)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) unshare(0x2020600) 2.231084513s ago: executing program 1 (id=377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000200)=0x2) 2.057792221s ago: executing program 3 (id=379): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000006000000020000000100000f030000000200000001000000030000004494a5000000000300000f010000000200000061b8000009000000050000000000000001feffff0100000007000000db0000000000002e"], &(0x7f00000006c0)=""/2, 0x6a, 0x2, 0x1}, 0x28) 1.96494103s ago: executing program 2 (id=380): r0 = io_uring_setup(0x6618, &(0x7f0000000740)={0x0, 0x314e, 0x800, 0x1}) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000800)={0x29a, 0x2, 0x2, '\x00', 0x4}, 0x1) 1.903311016s ago: executing program 3 (id=381): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='100', 0x3) mkdirat(0xffffffffffffff9c, 0x0, 0xe) r1 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r1, 0x40305839, 0x0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f0000000380)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r3) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000900)={r4, 0x2}, &(0x7f0000000940)=ANY=[], &(0x7f0000000a00)="7fd9", 0x0) 1.903182486s ago: executing program 1 (id=382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4880) 1.849637432s ago: executing program 2 (id=383): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000500)='atkbd', 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000dc0)={0x2, {{0xa, 0x4e21, 0x80, @mcast1, 0x7}}, {{0xa, 0x4e22, 0x3, @remote, 0xe}}}, 0x108) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x77, 0x0, &(0x7f0000000380)={0x1, 0x400001, [0xa35, 0xeab, 0xa6c, 0x197]}) 1.496685678s ago: executing program 1 (id=384): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xf, &(0x7f0000000d80)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) set_mempolicy(0x6, 0x0, 0xe0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x4) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0x0, &(0x7f00000005c0)) 1.223233036s ago: executing program 2 (id=385): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002a80), 0x80082, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)="bf9d65", 0x3}], 0x1) 1.052300403s ago: executing program 2 (id=387): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x202, 0x6ec84c46fd8a304) write(r0, &(0x7f0000000300)='27', 0x2) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x4c80, &(0x7f0000000440)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) 1.051023653s ago: executing program 4 (id=388): r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000340)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000440)=@abs, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/icmp\x00') preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000600)=""/174, 0xae}], 0x1, 0x180, 0x9) 753.190704ms ago: executing program 4 (id=389): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f00000005c0)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000600)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000880)=[{0x34, 0x0, [0x2, 0x6, 0x4, 0x56b, 0xffffffff, 0x4, 0x0, 0xfffffff9, 0x9, 0x400, 0xfffffff9, 0x6, 0x7, 0x1, 0x2, 0x1]}, {0x20, 0x0, [0x5, 0x5, 0x3, 0x8000, 0x10000, 0x4, 0x19, 0x200000, 0x6, 0x1, 0x7, 0x7fff, 0xe, 0x4, 0xbe9, 0x7fffffff]}], r1, 0x1, 0x1, 0x90}}, 0x20) 753.058124ms ago: executing program 4 (id=390): mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1000, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x80800, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/fscaps', 0x2000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000500)='.\x00', &(0x7f0000000540), 0x40, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 752.984944ms ago: executing program 3 (id=391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x40c0}, 0x20000080) 724.143377ms ago: executing program 4 (id=392): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={r1, &(0x7f0000000540), 0x0, 0x4}, 0x20) 690.75571ms ago: executing program 4 (id=393): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1234, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x48, 0x1, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}, @local}, @echo_reply={0x0, 0x0, 0x0, 0x1234, 0x1}}}}}, 0x0) 610.173828ms ago: executing program 4 (id=394): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='27', 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000001c0)={0x0, 0xa6, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r2, 0x9df36cc7d1878f77, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4080) unshare(0x40000000) 608.902378ms ago: executing program 2 (id=395): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) close_range(r0, r0, 0x6) 550.429094ms ago: executing program 1 (id=396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000002c0)={0x48, r1, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x4}]}]}]}, 0x48}}, 0x894) 425.859947ms ago: executing program 2 (id=397): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 154.469405ms ago: executing program 3 (id=398): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r0, &(0x7f0000000a00)={&(0x7f0000000a40)=@llc={0x1a, 0xf, 0xa3, 0x8, 0x9, 0xe3, @multicast}, 0x80, 0x0}, 0x0) 79.486242ms ago: executing program 1 (id=399): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x6, @random="00dbfe062a9d"}, 0x10) close(0x3) 0s ago: executing program 3 (id=400): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001200), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001480)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="010027bd7000050000001e00000008000300", @ANYRES32=r2, @ANYBLOB='d\x00/'], 0xa0}, 0x1, 0x0, 0x0, 0x4815}, 0x800) kernel console output (not intermixed with test programs): o interfaces have a carrier [ 49.676754][ T3855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.686838][ T3855] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. syzkaller login: [ 72.874525][ T4177] cgroup: Unknown subsys name 'net' [ 72.988677][ T4177] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.536483][ T4177] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 75.780461][ T4193] rdma_rxe: rxe_register_device failed with error -23 [ 75.789093][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.816086][ T4197] rdma_rxe: rxe_register_device failed with error -23 [ 75.829014][ T4196] rdma_rxe: rxe_register_device failed with error -23 [ 75.836781][ T4196] rdma_rxe: failed to add rxe_eth0 [ 75.842671][ T4193] rdma_rxe: failed to add rxe_eth0 [ 75.857827][ T4197] rdma_rxe: failed to add rxe_eth0 [ 75.859017][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.873300][ T4201] rdma_rxe: rxe_register_device failed with error -23 [ 75.881843][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.904337][ T4201] rdma_rxe: failed to add rxe_eth0 [ 76.104983][ T1109] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.103451][ T4189] infiniband rxe0: set active [ 76.123669][ T4189] infiniband rxe0: added rxe_eth0 [ 76.220523][ T4189] RDS/IB: rxe0: added [ 76.225412][ T4189] smc: adding ib device rxe0 with port count 1 [ 76.262388][ T4189] smc: ib device rxe0 port 1 has pnetid [ 76.287411][ T4194] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.310515][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.363156][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 76.405291][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 76.439375][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 76.496087][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 76.593205][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.638982][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.646251][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.661250][ T4193] device bridge_slave_0 entered promiscuous mode [ 76.683438][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.695322][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.703975][ T4197] device bridge_slave_0 entered promiscuous mode [ 76.727602][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.734704][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.746878][ T4193] device bridge_slave_1 entered promiscuous mode [ 76.762848][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.773842][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.783471][ T4197] device bridge_slave_1 entered promiscuous mode [ 76.798330][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.845155][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.857004][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.865694][ T4201] device bridge_slave_0 entered promiscuous mode [ 76.898278][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.907582][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.914669][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.924809][ T4201] device bridge_slave_1 entered promiscuous mode [ 76.936088][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.942739][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.966392][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.973773][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.987113][ T4196] device bridge_slave_0 entered promiscuous mode [ 76.997218][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.008730][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.029840][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.041209][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.047906][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.055031][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.067983][ T4196] device bridge_slave_1 entered promiscuous mode [ 77.077421][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.097811][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.179533][ T4193] team0: Port device team_slave_0 added [ 77.194881][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.219514][ T4193] team0: Port device team_slave_1 added [ 77.228375][ T4201] team0: Port device team_slave_0 added [ 77.236454][ T4197] team0: Port device team_slave_0 added [ 77.250869][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.291516][ T4201] team0: Port device team_slave_1 added [ 77.300096][ T4197] team0: Port device team_slave_1 added [ 77.334190][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.361170][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.377750][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.427543][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.489140][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.496224][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.547565][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.563598][ T4196] team0: Port device team_slave_0 added [ 77.570768][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.578882][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.605304][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.617551][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.624534][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.651978][ T4194] Bluetooth: hci0: command 0x0409 tx timeout [ 77.659628][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.681096][ T4196] team0: Port device team_slave_1 added [ 77.687559][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.694651][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.722471][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.733601][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 77.754590][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.762657][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.790312][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.822858][ T1109] Bluetooth: hci3: command 0x0409 tx timeout [ 77.834648][ T1109] Bluetooth: hci2: command 0x0409 tx timeout [ 77.888019][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 77.908746][ T4193] device hsr_slave_0 entered promiscuous mode [ 77.916930][ T4193] device hsr_slave_1 entered promiscuous mode [ 77.931775][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.939896][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.965999][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.984855][ T4197] device hsr_slave_0 entered promiscuous mode [ 77.992152][ T4197] device hsr_slave_1 entered promiscuous mode [ 77.999920][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.008523][ T4197] Cannot create hsr debugfs directory [ 78.014315][ T3855] infiniband rxe0: set active [ 78.026235][ T4201] device hsr_slave_0 entered promiscuous mode [ 78.037320][ T4201] device hsr_slave_1 entered promiscuous mode [ 78.047357][ T4201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.058935][ T4201] Cannot create hsr debugfs directory [ 78.064987][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.072058][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.098482][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.114250][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.243642][ T4196] device hsr_slave_0 entered promiscuous mode [ 78.250815][ T4196] device hsr_slave_1 entered promiscuous mode [ 78.258811][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.266854][ T4196] Cannot create hsr debugfs directory [ 78.451349][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 78.583353][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.600419][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.609763][ T4189] device bridge_slave_0 entered promiscuous mode [ 78.619875][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.627055][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.638933][ T4189] device bridge_slave_1 entered promiscuous mode [ 78.661527][ T4201] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.684281][ T4201] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.695706][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.709277][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.720682][ T4201] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.736143][ T4201] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.774146][ T4189] team0: Port device team_slave_0 added [ 78.783784][ T4189] team0: Port device team_slave_1 added [ 78.792488][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.804879][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.832156][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.854526][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.861722][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.888691][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.907139][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.915003][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.943530][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.956105][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.050469][ T4189] device hsr_slave_0 entered promiscuous mode [ 79.059241][ T4189] device hsr_slave_1 entered promiscuous mode [ 79.066462][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.074581][ T4189] Cannot create hsr debugfs directory [ 79.152335][ T4193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.174859][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.200673][ T4193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.247297][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.262292][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.271483][ T4193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.281687][ T4193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.299451][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.336103][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.345303][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.355586][ T3091] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.362999][ T3091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.385179][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.402887][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.411661][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.421175][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.430374][ T3091] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.437568][ T3091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.446141][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.467001][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.475196][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.487411][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.516896][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.526654][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.537930][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.548817][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.558977][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.569042][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.578222][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.587871][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.595851][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.604512][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.613433][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.628899][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.637330][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.647339][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.674980][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.694635][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.709305][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.719459][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.726665][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.742722][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 79.780885][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.793288][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.803372][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.813575][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.816253][ T4261] Bluetooth: hci1: command 0x041b tx timeout [ 79.820723][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.825652][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.844599][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.882144][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.894465][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 79.903251][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 79.912871][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.921831][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.930961][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.940564][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.949320][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.964649][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.972123][ T4261] Bluetooth: hci4: command 0x041b tx timeout [ 79.979713][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.995765][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.007553][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.026997][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.043952][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.059832][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.078106][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.103513][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.156853][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.182230][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.212778][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.242194][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.261099][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.269483][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.296431][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.316146][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.333790][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.340928][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.349850][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.359657][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.368334][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.375430][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.383829][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.393690][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.421406][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.431283][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.442483][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.453459][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.466837][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.480522][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.490404][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.517684][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.536120][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.549660][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.567447][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.576154][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.585328][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.593668][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.602287][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.610974][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.620016][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.630859][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.641414][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.650260][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.661403][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.671821][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.680963][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.688367][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.731666][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.742887][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.754186][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.763221][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.770371][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.781107][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.826440][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.856656][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.875461][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.886198][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.902185][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.911219][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.920657][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.931055][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.940818][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.950433][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.959841][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.968959][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.983872][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.015147][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.039204][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.067156][ T4201] device veth0_vlan entered promiscuous mode [ 81.075339][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.086657][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.096551][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.106504][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.122098][ T4197] device veth0_vlan entered promiscuous mode [ 81.141945][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.157183][ T4201] device veth1_vlan entered promiscuous mode [ 81.166514][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.175856][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.184808][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.195061][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.205358][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.221327][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.233177][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.244423][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.257235][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.278929][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.290562][ T4197] device veth1_vlan entered promiscuous mode [ 81.318379][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.326633][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.338682][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.346745][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.357291][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.367271][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.377048][ T1217] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.384442][ T1217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.394198][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.466789][ T4197] device veth0_macvtap entered promiscuous mode [ 81.475101][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.488882][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.498356][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.507045][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.514215][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.523012][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.532401][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.542819][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.553762][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.563147][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.573044][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.582691][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.611255][ T4193] device veth0_vlan entered promiscuous mode [ 81.619526][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.632141][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.643360][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.653700][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.664779][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.673186][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.681330][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.701433][ T4197] device veth1_macvtap entered promiscuous mode [ 81.714650][ T4201] device veth0_macvtap entered promiscuous mode [ 81.725430][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.735458][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.747174][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.757422][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.767071][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.776561][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.787198][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.796164][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.806421][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.814383][ T4261] Bluetooth: hci0: command 0x040f tx timeout [ 81.824336][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.838255][ T4201] device veth1_macvtap entered promiscuous mode [ 81.853987][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.863481][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.872961][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.883301][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.893227][ T4193] device veth1_vlan entered promiscuous mode [ 81.900122][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 81.927358][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.943923][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.955425][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.970112][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.979108][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 81.990280][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 82.016150][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.035395][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.044729][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.057139][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.059278][ T4259] Bluetooth: hci4: command 0x040f tx timeout [ 82.085431][ T4193] device veth0_macvtap entered promiscuous mode [ 82.103283][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.116318][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.126934][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.144201][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.164466][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.173797][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.192039][ T4193] device veth1_macvtap entered promiscuous mode [ 82.201159][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.214914][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.239478][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.271999][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.281230][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.298919][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.314362][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.334909][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.353390][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.373052][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.406559][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.427420][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.447101][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.464207][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.476363][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.488414][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.497129][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.508584][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.517374][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.546613][ T4201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.556276][ T4201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.565638][ T4201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.575039][ T4201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.590702][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.602103][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.614251][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.626184][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.639028][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.646450][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.654823][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.662521][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.671557][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.686742][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.748471][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.756509][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.785616][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.796761][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.806389][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.815439][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.840974][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.851450][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.861031][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.872196][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.883060][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.974909][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.983813][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.985508][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.004814][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.018793][ T4189] device veth0_vlan entered promiscuous mode [ 83.034781][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.047310][ T4196] device veth0_vlan entered promiscuous mode [ 83.053214][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.064393][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.074831][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.085002][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.094363][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.104781][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.113869][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.151340][ T4196] device veth1_vlan entered promiscuous mode [ 83.172507][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.195448][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.210738][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.229414][ T4189] device veth1_vlan entered promiscuous mode [ 83.272134][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.287369][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.305196][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.320127][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.331279][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.341505][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.414937][ T4196] device veth0_macvtap entered promiscuous mode [ 83.424061][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.435334][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.446037][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.463467][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.478436][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.493269][ T4302] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 83.518635][ T4302] bond1: (slave lo): Enslaving as an active interface with an up link [ 83.537041][ T4302] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 83.556992][ T4196] device veth1_macvtap entered promiscuous mode [ 83.568760][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.595421][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.609275][ T4302] syz.3.4 (4302) used greatest stack depth: 20976 bytes left [ 83.617105][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.626608][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.637994][ T4189] device veth0_macvtap entered promiscuous mode [ 83.709432][ T4189] device veth1_macvtap entered promiscuous mode [ 83.723889][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.736994][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.747894][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.759836][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.771076][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.784259][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.802956][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.875113][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.887382][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.898172][ T4259] Bluetooth: hci0: command 0x0419 tx timeout [ 83.900965][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.917007][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.929682][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.941791][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.953401][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.964869][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.976340][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.979145][ T4259] Bluetooth: hci1: command 0x0419 tx timeout [ 83.996114][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.009997][ T3091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.018692][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.034645][ T3091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.039724][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.051962][ T4259] Bluetooth: hci2: command 0x0419 tx timeout [ 84.058853][ T4259] Bluetooth: hci3: command 0x0419 tx timeout [ 84.077432][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.091680][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.107659][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.135990][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.145953][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 84.162821][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.162843][ T4310] loop9: detected capacity change from 0 to 16384 [ 84.187362][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.218449][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.244309][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.314901][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.338644][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.351094][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.366153][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.379279][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.406545][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.434345][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.459194][ T4310] loop_set_status: loop9 () has still dirty pages (nrpages=2) [ 84.480876][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.546140][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.572208][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.601817][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.644104][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.686868][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.733513][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.775352][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.820715][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.885750][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.943454][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.977269][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.003810][ T4324] FAULT_INJECTION: forcing a failure. [ 85.003810][ T4324] name failslab, interval 1, probability 0, space 0, times 1 [ 85.041139][ T4324] CPU: 1 PID: 4324 Comm: syz.1.2 Not tainted syzkaller #0 [ 85.048326][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 85.058466][ T4324] Call Trace: [ 85.061792][ T4324] [ 85.064755][ T4324] dump_stack_lvl+0x188/0x250 [ 85.069517][ T4324] ? show_regs_print_info+0x20/0x20 [ 85.074782][ T4324] ? load_image+0x410/0x410 [ 85.079343][ T4324] ? __lock_acquire+0x7d40/0x7d40 [ 85.084531][ T4324] should_fail+0x383/0x4b0 [ 85.089007][ T4324] should_failslab+0x5/0x20 [ 85.093564][ T4324] slab_pre_alloc_hook+0x51/0xc0 [ 85.098561][ T4324] __kmalloc_node+0x6d/0x3a0 [ 85.103210][ T4324] ? crypto_create_tfm_node+0x72/0x340 [ 85.108729][ T4324] crypto_create_tfm_node+0x72/0x340 [ 85.114071][ T4324] crypto_spawn_tfm2+0x58/0x90 [ 85.119142][ T4324] pkcs1pad_init_tfm+0x44/0x120 [ 85.124046][ T4324] crypto_create_tfm_node+0xfa/0x340 [ 85.129400][ T4324] crypto_alloc_tfm_node+0x177/0x360 [ 85.134762][ T4324] public_key_verify_signature+0x27b/0xd40 [ 85.140635][ T4324] ? __kasan_kmalloc+0xaf/0xe0 [ 85.145564][ T4324] ? asymmetric_key_generate_id+0x52/0xd0 [ 85.151534][ T4324] ? x509_cert_parse+0x53a/0x7a0 [ 85.156554][ T4324] ? x509_key_preparse+0x60/0x5d0 [ 85.161747][ T4324] ? asymmetric_key_preparse+0xa5/0x140 [ 85.167345][ T4324] ? key_create_or_update+0x405/0xa50 [ 85.172773][ T4324] ? __se_sys_add_key+0x34b/0x410 [ 85.177851][ T4324] ? do_syscall_64+0x4c/0xa0 [ 85.182510][ T4324] ? public_key_free+0x80/0x80 [ 85.187385][ T4324] ? asymmetric_key_id_same+0x63/0xe0 [ 85.192836][ T4324] x509_check_for_self_signed+0x317/0x420 [ 85.198631][ T4324] x509_cert_parse+0x59c/0x7a0 [ 85.203451][ T4324] x509_key_preparse+0x60/0x5d0 [ 85.208363][ T4324] ? down_read+0x1aa/0x2e0 [ 85.212976][ T4324] asymmetric_key_preparse+0xa5/0x140 [ 85.218403][ T4324] key_create_or_update+0x405/0xa50 [ 85.223656][ T4324] ? key_type_put+0x20/0x20 [ 85.228229][ T4324] ? __might_fault+0xb3/0x110 [ 85.232959][ T4324] __se_sys_add_key+0x34b/0x410 [ 85.237878][ T4324] ? __x64_sys_add_key+0xc0/0xc0 [ 85.242982][ T4324] ? lockdep_hardirqs_on+0x94/0x140 [ 85.248265][ T4324] ? __x64_sys_add_key+0x1c/0xc0 [ 85.253251][ T4324] do_syscall_64+0x4c/0xa0 [ 85.257712][ T4324] ? clear_bhb_loop+0x30/0x80 [ 85.262437][ T4324] ? clear_bhb_loop+0x30/0x80 [ 85.267164][ T4324] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.273135][ T4324] RIP: 0033:0x7f8d3b695559 [ 85.277603][ T4324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.297260][ T4324] RSP: 002b:00007f8d398ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 85.305729][ T4324] RAX: ffffffffffffffda RBX: 00007f8d3b91bfa0 RCX: 00007f8d3b695559 [ 85.313754][ T4324] RDX: 0000200000000500 RSI: 0000000000000000 RDI: 0000200000000440 [ 85.321854][ T4324] RBP: 00007f8d3b72cb50 R08: ffffffffffffffff R09: 0000000000000000 [ 85.329920][ T4324] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 85.338021][ T4324] R13: 00007f8d3b91c038 R14: 00007f8d3b91bfa0 R15: 00007ffefdcf2578 [ 85.346059][ T4324] [ 85.359844][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.396069][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.417821][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.435576][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.542911][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.603126][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.686521][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.741710][ T3091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.770463][ T4332] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET) [ 85.788397][ T3091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.828054][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.957753][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.001571][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.042871][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.374613][ T3091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.453579][ T3091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.493840][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.902563][ T4360] loop0: detected capacity change from 0 to 164 [ 86.998892][ T4360] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 87.157352][ T4368] loop1: detected capacity change from 0 to 736 [ 87.323968][ T4373] netlink: 188 bytes leftover after parsing attributes in process `syz.3.15'. [ 87.438173][ T4374] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.544952][ T4380] loop0: detected capacity change from 0 to 164 [ 87.714462][ T4380] Zero length message leads to an empty skb [ 87.733957][ T4384] FAULT_INJECTION: forcing a failure. [ 87.733957][ T4384] name failslab, interval 1, probability 0, space 0, times 0 [ 87.775414][ T4384] CPU: 0 PID: 4384 Comm: syz.1.20 Not tainted syzkaller #0 [ 87.784042][ T4384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 87.795474][ T4384] Call Trace: [ 87.798859][ T4384] [ 87.801885][ T4384] dump_stack_lvl+0x188/0x250 [ 87.806631][ T4384] ? show_regs_print_info+0x20/0x20 [ 87.811902][ T4384] ? load_image+0x410/0x410 [ 87.816455][ T4384] ? mark_lock+0x94/0x320 [ 87.820831][ T4384] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 87.826963][ T4384] should_fail+0x383/0x4b0 [ 87.831460][ T4384] should_failslab+0x5/0x20 [ 87.836638][ T4384] slab_pre_alloc_hook+0x51/0xc0 [ 87.841972][ T4384] __kmalloc+0x6b/0x340 [ 87.846185][ T4384] ? ___neigh_create+0x6fa/0x2210 [ 87.851269][ T4384] ? _local_bh_enable+0xa0/0xa0 [ 87.856279][ T4384] ___neigh_create+0x6fa/0x2210 [ 87.861347][ T4384] ? neigh_ifdown+0x30/0x30 [ 87.866210][ T4384] arp_req_set+0x4c0/0x760 [ 87.870793][ T4384] ? arp_req_delete+0x330/0x330 [ 87.875980][ T4384] ? tomoyo_path_number_perm+0x55c/0x6b0 [ 87.881935][ T4384] ? full_name_hash+0x8e/0xe0 [ 87.887253][ T4384] arp_ioctl+0x3f8/0x530 [ 87.891615][ T4384] ? neigh_release+0x80/0x80 [ 87.896259][ T4384] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 87.902293][ T4384] ? do_vfs_ioctl+0x1d5e/0x1f40 [ 87.907196][ T4384] inet_ioctl+0x378/0x460 [ 87.911568][ T4384] ? inet_shutdown+0x370/0x370 [ 87.916384][ T4384] ? kfree+0xef/0x2a0 [ 87.920418][ T4384] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 87.926074][ T4384] sock_do_ioctl+0xfb/0x320 [ 87.930637][ T4384] ? sock_show_fdinfo+0xb0/0xb0 [ 87.936818][ T4384] sock_ioctl+0x48a/0x700 [ 87.941222][ T4384] ? sock_poll+0x420/0x420 [ 87.945883][ T4384] ? bpf_lsm_file_ioctl+0x5/0x10 [ 87.951164][ T4384] ? security_file_ioctl+0x7c/0xa0 [ 87.956326][ T4384] ? sock_poll+0x420/0x420 [ 87.960884][ T4384] __se_sys_ioctl+0xfa/0x170 [ 87.965626][ T4384] do_syscall_64+0x4c/0xa0 [ 87.970488][ T4384] ? clear_bhb_loop+0x30/0x80 [ 87.975218][ T4384] ? clear_bhb_loop+0x30/0x80 [ 87.980238][ T4384] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.986575][ T4384] RIP: 0033:0x7f8d3b695559 [ 87.991039][ T4384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.010695][ T4384] RSP: 002b:00007f8d398ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.019881][ T4384] RAX: ffffffffffffffda RBX: 00007f8d3b91bfa0 RCX: 00007f8d3b695559 [ 88.028035][ T4384] RDX: 0000200000000880 RSI: 0000000000008955 RDI: 0000000000000003 [ 88.036076][ T4384] RBP: 00007f8d3b72cb50 R08: 0000000000000000 R09: 0000000000000000 [ 88.044974][ T4384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.053120][ T4384] R13: 00007f8d3b91c038 R14: 00007f8d3b91bfa0 R15: 00007ffefdcf2578 [ 88.062396][ T4384] [ 88.474260][ T4390] loop0: detected capacity change from 0 to 1024 [ 88.522302][ T4390] ======================================================= [ 88.522302][ T4390] WARNING: The mand mount option has been deprecated and [ 88.522302][ T4390] and is ignored by this kernel. Remove the mand [ 88.522302][ T4390] option from the mount to silence this warning. [ 88.522302][ T4390] ======================================================= [ 88.680093][ T4390] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.23: lblock 2 mapped to illegal pblock 2 (length 1) [ 88.704259][ T4390] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 88.737705][ T4390] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.23: lblock 0 mapped to illegal pblock 48 (length 1) [ 88.785872][ T4390] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 88.812082][ T4390] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.23: Failed to acquire dquot type 0 [ 88.845168][ T4390] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 88.889907][ T4390] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.23: mark_inode_dirty error [ 88.921391][ T4390] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 88.931960][ T4399] netlink: 32 bytes leftover after parsing attributes in process `syz.4.26'. [ 88.962246][ T4390] EXT4-fs (loop0): 1 orphan inode deleted [ 88.982518][ T4362] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 89.003899][ T4390] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000200,nodiscard,stripe=0x0000000000000004,nobarrier,,errors=continue. Quota mode: none. [ 89.040816][ T4362] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 89.050109][ T4401] ip_tables: iptables: counters copy to user failed while replacing table [ 89.066168][ T4362] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:6: Failed to release dquot type 0 [ 89.084950][ T4401] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.139712][ T4404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'. [ 89.168223][ T25] audit: type=1326 audit(1793462128.988:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.0.23" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad5a4a6559 code=0x0 [ 89.369358][ T4408] loop1: detected capacity change from 0 to 512 [ 89.456651][ T4408] EXT4-fs (loop1): Ignoring removed nobh option [ 89.473569][ T4189] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 89.530197][ T4189] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 89.546875][ T4408] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.29: invalid indirect mapped block 256 (level 2) [ 89.596645][ T4189] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 89.625250][ T4414] loop3: detected capacity change from 0 to 512 [ 89.641901][ T4408] EXT4-fs (loop1): 2 truncates cleaned up [ 89.649002][ T4408] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 89.675561][ T4408] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.29: bg 0: block 5: invalid block bitmap [ 89.748849][ T4414] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.32: bad orphan inode 15 [ 89.789823][ T4414] ext4_test_bit(bit=14, block=5) = 0 [ 89.795212][ T4414] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 89.882976][ T4423] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 90.410965][ T4439] block device autoloading is deprecated and will be removed. [ 90.431959][ T4439] md: md2 stopped. [ 90.438471][ T4439] md: md2 stopped. [ 90.556172][ T13] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.550731][ T4458] loop2: detected capacity change from 0 to 16 [ 92.178810][ T4458] erofs: (device loop2): mounted with root inode @ nid 36. [ 92.205939][ T4456] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 92.300598][ T1112] cfg80211: failed to load regulatory.db [ 95.090488][ T4482] loop2: detected capacity change from 0 to 32768 [ 95.206797][ T4526] loop1: detected capacity change from 0 to 16 [ 95.379495][ T4526] erofs: (device loop1): mounted with root inode @ nid 36. [ 95.427839][ T4526] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 95.991217][ T4482] (syz.2.53,4482,0):ocfs2_initialize_super:2311 ERROR: status = -12 [ 96.051323][ T4482] (syz.2.53,4482,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 96.239031][ T4529] Êù [ 96.382458][ T4503] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.393706][ T4503] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.780444][ T4535] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.453962][ T4503] device bridge_slave_0 left promiscuous mode [ 98.462399][ T4503] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.526226][ T4503] device bridge_slave_1 left promiscuous mode [ 98.533354][ T4503] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.582509][ T4503] bond0: (slave bond_slave_0): Releasing backup interface [ 98.638832][ T4503] bond0: (slave bond_slave_1): Releasing backup interface [ 98.707735][ T4503] team0: Port device team_slave_0 removed [ 98.753753][ T4503] team0: Port device team_slave_1 removed [ 98.763395][ T4503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.788189][ T4503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.804965][ T4503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.821027][ T4503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.302799][ T4503] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.312067][ T4503] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.321933][ T4503] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.332129][ T4503] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.495703][ T4503] syz.4.59 (4503) used greatest stack depth: 19584 bytes left [ 101.024864][ T4579] device syz_tun entered promiscuous mode [ 101.063851][ T4579] device macsec1 entered promiscuous mode [ 101.135918][ T4579] device syz_tun left promiscuous mode [ 101.157682][ T4583] loop4: detected capacity change from 0 to 512 [ 101.217479][ C0] sched: RT throttling activated [ 101.278680][ T4583] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 101.496219][ T4583] FAULT_INJECTION: forcing a failure. [ 101.496219][ T4583] name failslab, interval 1, probability 0, space 0, times 0 [ 101.539871][ T4583] CPU: 0 PID: 4583 Comm: syz.4.80 Not tainted syzkaller #0 [ 101.547151][ T4583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 101.557418][ T4583] Call Trace: [ 101.560766][ T4583] [ 101.563735][ T4583] dump_stack_lvl+0x188/0x250 [ 101.568499][ T4583] ? show_regs_print_info+0x20/0x20 [ 101.573756][ T4583] ? load_image+0x410/0x410 [ 101.578312][ T4583] ? __might_sleep+0xf0/0xf0 [ 101.583030][ T4583] ? __lock_acquire+0x7d40/0x7d40 [ 101.588107][ T4583] should_fail+0x383/0x4b0 [ 101.592575][ T4583] should_failslab+0x5/0x20 [ 101.597117][ T4583] slab_pre_alloc_hook+0x51/0xc0 [ 101.602103][ T4583] ? __proc_create+0x36f/0x8b0 [ 101.606924][ T4583] kmem_cache_alloc+0x3d/0x280 [ 101.611745][ T4583] __proc_create+0x36f/0x8b0 [ 101.616468][ T4583] ? proc_symlink+0x210/0x210 [ 101.621212][ T4583] proc_mkdir+0x3b/0x110 [ 101.625506][ T4583] cache_register_net+0x22f/0x480 [ 101.630587][ T4583] nfsd_idmap_init+0x157/0x1e0 [ 101.635392][ T4583] ? nfsd_init_net+0x34/0x1e0 [ 101.640232][ T4583] nfsd_init_net+0x47/0x1e0 [ 101.644791][ T4583] ops_init+0x360/0x5f0 [ 101.648998][ T4583] setup_net+0x39e/0xa10 [ 101.653303][ T4583] ? copy_net_ns+0x5b0/0x5b0 [ 101.657944][ T4583] ? copy_net_ns+0x324/0x5b0 [ 101.662587][ T4583] ? down_read_killable+0x1ce/0x340 [ 101.667838][ T4583] copy_net_ns+0x33e/0x5b0 [ 101.672310][ T4583] create_new_namespaces+0x3ce/0x700 [ 101.677651][ T4583] unshare_nsproxy_namespaces+0x116/0x160 [ 101.683417][ T4583] ksys_unshare+0x4f6/0x8e0 [ 101.687963][ T4583] ? __lock_acquire+0x7d40/0x7d40 [ 101.693073][ T4583] ? sighand_ctor+0x40/0x40 [ 101.697615][ T4583] ? lock_chain_count+0x20/0x20 [ 101.702512][ T4583] ? syscall_enter_from_user_mode+0x21/0x70 [ 101.708488][ T4583] __x64_sys_unshare+0x34/0x40 [ 101.713301][ T4583] do_syscall_64+0x4c/0xa0 [ 101.717760][ T4583] ? clear_bhb_loop+0x30/0x80 [ 101.722484][ T4583] ? clear_bhb_loop+0x30/0x80 [ 101.727204][ T4583] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.733242][ T4583] RIP: 0033:0x7f29f3a83559 [ 101.737706][ T4583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.757870][ T4583] RSP: 002b:00007f29f1cda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 101.766341][ T4583] RAX: ffffffffffffffda RBX: 00007f29f3d09fa0 RCX: 00007f29f3a83559 [ 101.774535][ T4583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 101.782645][ T4583] RBP: 00007f29f3b1ab50 R08: 0000000000000000 R09: 0000000000000000 [ 101.790691][ T4583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.798701][ T4583] R13: 00007f29f3d0a038 R14: 00007f29f3d09fa0 R15: 00007ffe9d15d4b8 [ 101.806729][ T4583] [ 101.936929][ T4600] device syzkaller0 entered promiscuous mode [ 101.961993][ T4600] simple: /de_1 [ 102.009839][ T4602] sg_write: data in/out 221184/136 bytes for SCSI command 0x0-- guessing data in; [ 102.009839][ T4602] program syz.1.86 not setting count and/or reply_len properly [ 102.293403][ T4567] loop3: detected capacity change from 0 to 32768 [ 104.287984][ T4642] FAULT_INJECTION: forcing a failure. [ 104.287984][ T4642] name failslab, interval 1, probability 0, space 0, times 0 [ 104.350808][ T4642] CPU: 1 PID: 4642 Comm: syz.0.99 Not tainted syzkaller #0 [ 104.358111][ T4642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 104.368667][ T4642] Call Trace: [ 104.371989][ T4642] [ 104.375204][ T4642] dump_stack_lvl+0x188/0x250 [ 104.380052][ T4642] ? show_regs_print_info+0x20/0x20 [ 104.385325][ T4642] ? load_image+0x410/0x410 [ 104.390020][ T4642] ? __might_sleep+0xf0/0xf0 [ 104.394662][ T4642] ? __lock_acquire+0x7d40/0x7d40 [ 104.399763][ T4642] should_fail+0x383/0x4b0 [ 104.404505][ T4642] should_failslab+0x5/0x20 [ 104.410212][ T4642] slab_pre_alloc_hook+0x51/0xc0 [ 104.415597][ T4642] ? register_ip_vs_app_inc+0x81/0x430 [ 104.421235][ T4642] __kmalloc_track_caller+0x69/0x330 [ 104.426597][ T4642] ? register_ip_vs_app_inc+0x81/0x430 [ 104.432219][ T4642] kmemdup+0x22/0x50 [ 104.436173][ T4642] register_ip_vs_app_inc+0x81/0x430 [ 104.441619][ T4642] __ip_vs_ftp_init+0x13a/0x2c0 [ 104.446620][ T4642] ops_init+0x360/0x5f0 [ 104.450837][ T4642] setup_net+0x39e/0xa10 [ 104.455462][ T4642] ? copy_net_ns+0x5b0/0x5b0 [ 104.460138][ T4642] ? copy_net_ns+0x324/0x5b0 [ 104.464872][ T4642] ? down_read_killable+0x1ce/0x340 [ 104.470325][ T4642] copy_net_ns+0x33e/0x5b0 [ 104.474913][ T4642] create_new_namespaces+0x3ce/0x700 [ 104.480449][ T4642] unshare_nsproxy_namespaces+0x116/0x160 [ 104.486860][ T4642] ksys_unshare+0x4f6/0x8e0 [ 104.491417][ T4642] ? __lock_acquire+0x7d40/0x7d40 [ 104.496704][ T4642] ? sighand_ctor+0x40/0x40 [ 104.501273][ T4642] ? lock_chain_count+0x20/0x20 [ 104.506459][ T4642] ? syscall_enter_from_user_mode+0x21/0x70 [ 104.512634][ T4642] __x64_sys_unshare+0x34/0x40 [ 104.517722][ T4642] do_syscall_64+0x4c/0xa0 [ 104.522195][ T4642] ? clear_bhb_loop+0x30/0x80 [ 104.527001][ T4642] ? clear_bhb_loop+0x30/0x80 [ 104.531813][ T4642] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.538227][ T4642] RIP: 0033:0x7fad5a4a6559 [ 104.542684][ T4642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.563723][ T4642] RSP: 002b:00007fad586fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 104.572307][ T4642] RAX: ffffffffffffffda RBX: 00007fad5a72cfa0 RCX: 00007fad5a4a6559 [ 104.580368][ T4642] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 104.589173][ T4642] RBP: 00007fad5a53db50 R08: 0000000000000000 R09: 0000000000000000 [ 104.597388][ T4642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.605601][ T4642] R13: 00007fad5a72d038 R14: 00007fad5a72cfa0 R15: 00007fffdd7f72c8 [ 104.614469][ T4642] [ 104.918333][ T4521] kernel write not supported for file 39/net/vlan/vlan0 (pid: 4521 comm: kworker/1:9) [ 106.824364][ T4695] loop0: detected capacity change from 0 to 2048 [ 106.836454][ T4667] loop4: detected capacity change from 0 to 32768 [ 106.921343][ T4667] JBD2: Ignoring recovery information on journal [ 106.960725][ T4695] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.993822][ T4667] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 107.215544][ T4667] jffs2: notice: (4667) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 107.491889][ T4196] ocfs2: Unmounting device (7,4) on (node local) [ 107.645529][ T4729] FAULT_INJECTION: forcing a failure. [ 107.645529][ T4729] name failslab, interval 1, probability 0, space 0, times 0 [ 107.692093][ T4653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.697748][ T4729] CPU: 1 PID: 4729 Comm: syz.0.114 Not tainted syzkaller #0 [ 107.708566][ T4729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 107.718753][ T4729] Call Trace: [ 107.722075][ T4729] [ 107.725064][ T4729] dump_stack_lvl+0x188/0x250 [ 107.729810][ T4729] ? show_regs_print_info+0x20/0x20 [ 107.735108][ T4729] ? load_image+0x410/0x410 [ 107.739743][ T4729] ? __might_sleep+0xf0/0xf0 [ 107.744470][ T4729] ? __lock_acquire+0x7d40/0x7d40 [ 107.749657][ T4729] should_fail+0x383/0x4b0 [ 107.754166][ T4729] should_failslab+0x5/0x20 [ 107.758721][ T4729] slab_pre_alloc_hook+0x51/0xc0 [ 107.763704][ T4729] ? x509_get_sig_params+0x1f6/0x630 [ 107.769066][ T4729] __kmalloc_track_caller+0x69/0x330 [ 107.774609][ T4729] ? x509_get_sig_params+0x1f6/0x630 [ 107.780757][ T4729] kmemdup+0x22/0x50 [ 107.784893][ T4729] x509_get_sig_params+0x1f6/0x630 [ 107.790121][ T4729] x509_cert_parse+0x4ab/0x7a0 [ 107.794946][ T4729] x509_key_preparse+0x60/0x5d0 [ 107.799948][ T4729] ? down_read+0x1aa/0x2e0 [ 107.804527][ T4729] asymmetric_key_preparse+0xa5/0x140 [ 107.809974][ T4729] key_create_or_update+0x405/0xa50 [ 107.815323][ T4729] ? key_type_put+0x20/0x20 [ 107.819904][ T4729] ? __might_fault+0xb3/0x110 [ 107.824654][ T4729] __se_sys_add_key+0x34b/0x410 [ 107.829567][ T4729] ? __x64_sys_add_key+0xc0/0xc0 [ 107.834699][ T4729] ? lockdep_hardirqs_on+0x94/0x140 [ 107.839954][ T4729] ? __x64_sys_add_key+0x1c/0xc0 [ 107.845004][ T4729] do_syscall_64+0x4c/0xa0 [ 107.849515][ T4729] ? clear_bhb_loop+0x30/0x80 [ 107.854244][ T4729] ? clear_bhb_loop+0x30/0x80 [ 107.858990][ T4729] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.864930][ T4729] RIP: 0033:0x7fad5a4a6559 [ 107.869505][ T4729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.889421][ T4729] RSP: 002b:00007fad586fd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 107.898029][ T4729] RAX: ffffffffffffffda RBX: 00007fad5a72cfa0 RCX: 00007fad5a4a6559 [ 107.906730][ T4729] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 107.914963][ T4729] RBP: 00007fad5a53db50 R08: ffffffffffffffff R09: 0000000000000000 [ 107.922990][ T4729] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 107.931185][ T4729] R13: 00007fad5a72d038 R14: 00007fad5a72cfa0 R15: 00007fffdd7f72c8 [ 107.939226][ T4729] [ 107.976687][ T4732] loop4: detected capacity change from 0 to 2048 [ 108.115027][ T4732] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.246728][ T4743] loop2: detected capacity change from 0 to 1024 [ 108.309434][ T4745] loop3: detected capacity change from 0 to 8192 [ 108.369677][ T4743] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 108.386653][ T4745] loop3: p1 < > p3 < p5 > p4 [ 108.427811][ T4743] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 108.479090][ T4745] loop3: p4 size 3081 extends beyond EOD, truncated [ 108.487087][ T4745] loop3: p5 size 3081 extends beyond EOD, truncated [ 108.503171][ T4743] EXT4-fs (loop2): orphan cleanup on readonly fs [ 108.569332][ T4743] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.117: Freeing blocks not in datazone - block = 0, count = 4096 [ 108.937755][ T4743] EXT4-fs (loop2): Remounting filesystem read-only [ 108.968468][ T4743] EXT4-fs (loop2): 1 orphan inode deleted [ 108.974276][ T4743] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,i_version,barrier=0x0000000000000009,quota,jqfmt=vfsv0,. Quota mode: writeback. [ 109.040454][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 109.056129][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 109.107112][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 109.121510][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 109.281174][ T4743] EXT4-fs error (device loop2): ext4_lookup:1860: inode #15: comm syz.2.117: iget: bad i_size value: 1970324836974602 [ 109.536545][ T4773] device syzkaller0 entered promiscuous mode [ 109.753340][ T4784] tipc: Started in network mode [ 109.773120][ T4784] tipc: Node identity _, cluster identity 4711 [ 109.797603][ T4784] tipc: Enabling of bearer rejected, failed to enable media [ 109.843402][ T4756] loop4: detected capacity change from 0 to 32768 [ 110.180671][ T4756] JBD2: Ignoring recovery information on journal [ 110.429571][ T4756] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 110.549403][ T4805] device syzkaller0 entered promiscuous mode [ 110.605273][ T4756] jffs2: notice: (4756) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 110.827153][ T4196] ocfs2: Unmounting device (7,4) on (node local) [ 110.959721][ T4819] netlink: 'syz.1.145': attribute type 33 has an invalid length. [ 111.017795][ T4819] netlink: 152 bytes leftover after parsing attributes in process `syz.1.145'. [ 111.843474][ T4825] loop4: detected capacity change from 0 to 512 [ 111.899227][ T4825] EXT4-fs (loop4): Ignoring removed nobh option [ 111.989417][ T4825] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,usrquota,nobh,,errors=continue. Quota mode: writeback. [ 112.027798][ T4825] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.091533][ T4825] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #2: block 3: comm syz.4.143: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65296, size=2048 fake=0 [ 112.995885][ T4521] Bluetooth: hci5: command 0x1003 tx timeout [ 113.007100][ T4190] Bluetooth: hci5: sending frame failed (-49) [ 113.171534][ T4855] netlink: 'syz.3.156': attribute type 4 has an invalid length. [ 113.180909][ T4855] netlink: 206236 bytes leftover after parsing attributes in process `syz.3.156'. [ 113.263314][ T4857] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 114.126782][ T4862] loop4: detected capacity change from 0 to 512 [ 114.508225][ T4871] FAULT_INJECTION: forcing a failure. [ 114.508225][ T4871] name failslab, interval 1, probability 0, space 0, times 0 [ 114.736218][ T4871] CPU: 0 PID: 4871 Comm: syz.1.159 Not tainted syzkaller #0 [ 114.743723][ T4871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 114.753926][ T4871] Call Trace: [ 114.757246][ T4871] [ 114.760214][ T4871] dump_stack_lvl+0x188/0x250 [ 114.764940][ T4871] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 114.770616][ T4871] ? show_regs_print_info+0x20/0x20 [ 114.775858][ T4871] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 114.781547][ T4871] should_fail+0x383/0x4b0 [ 114.786008][ T4871] should_failslab+0x5/0x20 [ 114.790545][ T4871] slab_pre_alloc_hook+0x51/0xc0 [ 114.795528][ T4871] kmem_cache_alloc_trace+0x47/0x290 [ 114.800859][ T4871] ? __list_lru_init+0x535/0xac0 [ 114.805845][ T4871] __list_lru_init+0x535/0xac0 [ 114.810664][ T4871] alloc_super+0x787/0x970 [ 114.815122][ T4871] ? kernfs_get_tree+0x6b0/0x6b0 [ 114.820348][ T4871] sget_fc+0x2d4/0x6f0 [ 114.824463][ T4871] ? kernfs_test_super+0x100/0x100 [ 114.829628][ T4871] kernfs_get_tree+0x15c/0x6b0 [ 114.834436][ T4871] ? apparmor_capable+0x12c/0x190 [ 114.839506][ T4871] sysfs_get_tree+0x42/0x110 [ 114.844143][ T4871] vfs_get_tree+0x88/0x270 [ 114.848627][ T4871] do_new_mount+0x247/0xa50 [ 114.853176][ T4871] __se_sys_mount+0x2e3/0x3d0 [ 114.857899][ T4871] ? __x64_sys_mount+0xc0/0xc0 [ 114.863089][ T4871] ? lockdep_hardirqs_on+0x94/0x140 [ 114.868341][ T4871] ? __x64_sys_mount+0x1c/0xc0 [ 114.873147][ T4871] do_syscall_64+0x4c/0xa0 [ 114.877599][ T4871] ? clear_bhb_loop+0x30/0x80 [ 114.882335][ T4871] ? clear_bhb_loop+0x30/0x80 [ 114.887064][ T4871] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.893044][ T4871] RIP: 0033:0x7f8d3b695559 [ 114.897519][ T4871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.917165][ T4871] RSP: 002b:00007f8d398ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 114.925632][ T4871] RAX: ffffffffffffffda RBX: 00007f8d3b91bfa0 RCX: 00007f8d3b695559 [ 114.933727][ T4871] RDX: 0000200000001140 RSI: 0000200000001100 RDI: 0000000000000000 [ 114.941730][ T4871] RBP: 00007f8d3b72cb50 R08: 0000000000000000 R09: 0000000000000000 [ 114.949737][ T4871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.957825][ T4871] R13: 00007f8d3b91c038 R14: 00007f8d3b91bfa0 R15: 00007ffefdcf2578 [ 114.965865][ T4871] [ 115.087862][ T4521] Bluetooth: hci5: command 0x1001 tx timeout [ 115.094037][ T4190] Bluetooth: hci5: sending frame failed (-49) [ 115.304140][ T4874] db_root: cannot be changed: target drivers registered [ 115.595341][ T4882] loop1: detected capacity change from 0 to 8192 [ 115.910563][ T4882] attempt to access beyond end of device [ 115.910563][ T4882] loop1: rw=0, want=57848, limit=8192 [ 116.003170][ T4882] Buffer I/O error on dev loop1, logical block 57847, async page read [ 116.103789][ T4882] attempt to access beyond end of device [ 116.103789][ T4882] loop1: rw=0, want=57848, limit=8192 [ 116.198748][ T4882] Buffer I/O error on dev loop1, logical block 57847, async page read [ 116.275485][ T25] audit: type=1800 audit(1793462156.098:3): pid=4882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.164" name="file2" dev="loop1" ino=1048625 res=0 errno=0 [ 116.637515][ T4901] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 117.169368][ T4521] Bluetooth: hci5: command 0x1009 tx timeout [ 117.632253][ T25] audit: type=1326 audit(1793462157.458:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.2.170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327698c559 code=0x7ffc0000 [ 117.664697][ T4907] base or size exceeds the MTRR width [ 117.693177][ T25] audit: type=1326 audit(1793462157.488:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.2.170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327698c559 code=0x7ffc0000 [ 117.757532][ T25] audit: type=1326 audit(1793462157.488:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.2.170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327698c559 code=0x7ffc0000 [ 117.814836][ T25] audit: type=1326 audit(1793462157.488:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.2.170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327698c559 code=0x7ffc0000 [ 118.022990][ T25] audit: type=1326 audit(1793462157.498:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.2.170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f327698c559 code=0x7ffc0000 [ 118.048693][ T25] audit: type=1326 audit(1793462157.498:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.2.170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327698c559 code=0x7ffc0000 [ 118.073054][ T25] audit: type=1326 audit(1793462157.498:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.2.170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327698c559 code=0x7ffc0000 [ 118.166777][ T25] audit: type=1326 audit(1793462157.498:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.2.170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f327698c559 code=0x7ffc0000 [ 118.636960][ T25] audit: type=1326 audit(1793462157.498:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.2.170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f327698c559 code=0x7ffc0000 [ 119.450494][ T4925] FAULT_INJECTION: forcing a failure. [ 119.450494][ T4925] name failslab, interval 1, probability 0, space 0, times 0 [ 119.477834][ T4925] CPU: 0 PID: 4925 Comm: syz.3.176 Not tainted syzkaller #0 [ 119.485878][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 119.497173][ T4925] Call Trace: [ 119.500498][ T4925] [ 119.504273][ T4925] dump_stack_lvl+0x188/0x250 [ 119.509930][ T4925] ? show_regs_print_info+0x20/0x20 [ 119.515204][ T4925] ? load_image+0x410/0x410 [ 119.520931][ T4925] ? __lock_acquire+0x7d40/0x7d40 [ 119.526041][ T4925] should_fail+0x383/0x4b0 [ 119.530529][ T4925] should_failslab+0x5/0x20 [ 119.535432][ T4925] slab_pre_alloc_hook+0x51/0xc0 [ 119.541307][ T4925] __kmalloc+0x6b/0x340 [ 119.546619][ T4925] ? public_key_verify_signature+0x2f7/0xd40 [ 119.553856][ T4925] public_key_verify_signature+0x2f7/0xd40 [ 119.560509][ T4925] ? __kasan_kmalloc+0xaf/0xe0 [ 119.565685][ T4925] ? asymmetric_key_generate_id+0x52/0xd0 [ 119.572286][ T4925] ? x509_cert_parse+0x53a/0x7a0 [ 119.577313][ T4925] ? x509_key_preparse+0x60/0x5d0 [ 119.583774][ T4925] ? asymmetric_key_preparse+0xa5/0x140 [ 119.590823][ T4925] ? key_create_or_update+0x405/0xa50 [ 119.596355][ T4925] ? public_key_free+0x80/0x80 [ 119.601275][ T4925] ? asymmetric_key_id_same+0x63/0xe0 [ 119.607353][ T4925] x509_check_for_self_signed+0x317/0x420 [ 119.613987][ T4925] x509_cert_parse+0x59c/0x7a0 [ 119.618927][ T4925] x509_key_preparse+0x60/0x5d0 [ 119.624203][ T4925] ? down_read+0x1aa/0x2e0 [ 119.629383][ T4925] asymmetric_key_preparse+0xa5/0x140 [ 119.635027][ T4925] key_create_or_update+0x405/0xa50 [ 119.640381][ T4925] ? key_type_put+0x20/0x20 [ 119.645008][ T4925] ? __might_fault+0xb3/0x110 [ 119.649826][ T4925] __se_sys_add_key+0x34b/0x410 [ 119.655059][ T4925] ? __x64_sys_add_key+0xc0/0xc0 [ 119.660507][ T4925] ? lockdep_hardirqs_on+0x94/0x140 [ 119.665961][ T4925] ? __x64_sys_add_key+0x1c/0xc0 [ 119.670962][ T4925] do_syscall_64+0x4c/0xa0 [ 119.675540][ T4925] ? clear_bhb_loop+0x30/0x80 [ 119.680354][ T4925] ? clear_bhb_loop+0x30/0x80 [ 119.685104][ T4925] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.691230][ T4925] RIP: 0033:0x7f870e903559 [ 119.696330][ T4925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.716662][ T4925] RSP: 002b:00007f870cb5a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 119.725704][ T4925] RAX: ffffffffffffffda RBX: 00007f870eb89fa0 RCX: 00007f870e903559 [ 119.734973][ T4925] RDX: 0000200000000500 RSI: 0000000000000000 RDI: 0000200000000440 [ 119.743639][ T4925] RBP: 00007f870e99ab50 R08: ffffffffffffffff R09: 0000000000000000 [ 119.751664][ T4925] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 119.759696][ T4925] R13: 00007f870eb8a038 R14: 00007f870eb89fa0 R15: 00007fff5ec838e8 [ 119.767739][ T4925] [ 120.569444][ T4940] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 121.382399][ T4944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'. [ 121.716768][ T4960] FAULT_INJECTION: forcing a failure. [ 121.716768][ T4960] name failslab, interval 1, probability 0, space 0, times 0 [ 121.777685][ T4960] CPU: 1 PID: 4960 Comm: syz.0.189 Not tainted syzkaller #0 [ 121.785146][ T4960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 121.795256][ T4960] Call Trace: [ 121.798722][ T4960] [ 121.801733][ T4960] dump_stack_lvl+0x188/0x250 [ 121.806505][ T4960] ? show_regs_print_info+0x20/0x20 [ 121.812068][ T4960] ? load_image+0x410/0x410 [ 121.816672][ T4960] ? mark_lock+0x94/0x320 [ 121.821057][ T4960] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 121.827234][ T4960] should_fail+0x383/0x4b0 [ 121.832309][ T4960] should_failslab+0x5/0x20 [ 121.837581][ T4960] slab_pre_alloc_hook+0x51/0xc0 [ 121.843048][ T4960] __kmalloc+0x6b/0x340 [ 121.847283][ T4960] ? ___neigh_create+0x6fa/0x2210 [ 121.852349][ T4960] ? _local_bh_enable+0xa0/0xa0 [ 121.857487][ T4960] ___neigh_create+0x6fa/0x2210 [ 121.862966][ T4960] ? neigh_ifdown+0x30/0x30 [ 121.868044][ T4960] arp_req_set+0x4c0/0x760 [ 121.873351][ T4960] ? arp_req_delete+0x330/0x330 [ 121.878692][ T4960] ? tomoyo_path_number_perm+0x55c/0x6b0 [ 121.884395][ T4960] ? full_name_hash+0x8e/0xe0 [ 121.889532][ T4960] arp_ioctl+0x3f8/0x530 [ 121.893970][ T4960] ? neigh_release+0x80/0x80 [ 121.898702][ T4960] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 121.905305][ T4960] ? do_vfs_ioctl+0x1d5e/0x1f40 [ 121.910302][ T4960] inet_ioctl+0x378/0x460 [ 121.915491][ T4960] ? inet_shutdown+0x370/0x370 [ 121.921006][ T4960] ? kfree+0xef/0x2a0 [ 121.925057][ T4960] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 121.931424][ T4960] sock_do_ioctl+0xfb/0x320 [ 121.937125][ T4960] ? sock_show_fdinfo+0xb0/0xb0 [ 121.942203][ T4960] sock_ioctl+0x48a/0x700 [ 121.947458][ T4960] ? sock_poll+0x420/0x420 [ 121.952865][ T4960] ? bpf_lsm_file_ioctl+0x5/0x10 [ 121.957958][ T4960] ? security_file_ioctl+0x7c/0xa0 [ 121.963869][ T4960] ? sock_poll+0x420/0x420 [ 121.968627][ T4960] __se_sys_ioctl+0xfa/0x170 [ 121.973571][ T4960] do_syscall_64+0x4c/0xa0 [ 121.978049][ T4960] ? clear_bhb_loop+0x30/0x80 [ 121.983213][ T4960] ? clear_bhb_loop+0x30/0x80 [ 121.988178][ T4960] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.994243][ T4960] RIP: 0033:0x7fad5a4a6559 [ 121.998791][ T4960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.018533][ T4960] RSP: 002b:00007fad586fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.027317][ T4960] RAX: ffffffffffffffda RBX: 00007fad5a72cfa0 RCX: 00007fad5a4a6559 [ 122.035653][ T4960] RDX: 0000200000000880 RSI: 0000000000008955 RDI: 0000000000000003 [ 122.043899][ T4960] RBP: 00007fad5a53db50 R08: 0000000000000000 R09: 0000000000000000 [ 122.052091][ T4960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.060235][ T4960] R13: 00007fad5a72d038 R14: 00007fad5a72cfa0 R15: 00007fffdd7f72c8 [ 122.068284][ T4960] [ 122.747396][ T4969] rxe_eth0 speed is unknown, defaulting to 1000 [ 123.210788][ T4978] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.079326][ T4981] netlink: 188 bytes leftover after parsing attributes in process `syz.0.196'. [ 124.462563][ T4989] loop2: detected capacity change from 0 to 128 [ 124.636337][ T4989] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a002c018, mo2=0002] [ 124.685627][ T4989] System zones: 1-3, 19-19, 35-36 [ 124.779878][ T4989] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,nodelalloc,,errors=continue. Quota mode: none. [ 124.817683][ T4989] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.956154][ T5006] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 125.956409][ T4362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.100205][ T4362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.230114][ T4362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.370096][ T4362] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.671903][ T5028] rxe_eth0 speed is unknown, defaulting to 1000 [ 126.915196][ T5035] capability: warning: `syz.2.215' uses deprecated v2 capabilities in a way that may be insecure [ 127.018895][ T5035] ucma_write: process 126 (syz.2.215) changed security contexts after opening file descriptor, this is not allowed. [ 127.056171][ T5039] loop4: detected capacity change from 0 to 128 [ 127.133025][ T5039] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.159032][ T5039] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.225110][ T5045] loop2: detected capacity change from 0 to 736 [ 127.635973][ T5028] chnl_net:caif_netlink_parms(): no params data found [ 127.741597][ T5061] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 127.939239][ T5055] tun0: tun_chr_ioctl cmd 1074812118 [ 128.613115][ T5068] loop1: detected capacity change from 0 to 512 [ 128.617696][ T4264] Bluetooth: hci0: command 0x0409 tx timeout [ 128.718340][ T5075] loop2: detected capacity change from 0 to 1024 [ 128.781031][ T5075] EXT4-fs (loop2): Ignoring removed bh option [ 128.813231][ T5028] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.855168][ T5028] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.868325][ T5075] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,nodioread_nolock,noquota,delalloc,auto_da_alloc,bsddf,bh,,errors=continue. Quota mode: none. [ 128.954484][ T5028] device bridge_slave_0 entered promiscuous mode [ 128.980700][ T5075] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.001330][ T5028] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.052918][ T5028] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.099188][ T5028] device bridge_slave_1 entered promiscuous mode [ 129.155392][ T5096] sg_write: data in/out 344028/136 bytes for SCSI command 0x0-- guessing data in; [ 129.155392][ T5096] program syz.1.226 not setting count and/or reply_len properly [ 129.294590][ T5092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 129.334780][ T5101] loop2: detected capacity change from 0 to 2048 [ 129.414590][ T4182] loop2: p1 < > p2 p3 p4 < p5 p6 > [ 129.437070][ T4182] loop2: partition table partially beyond EOD, truncated [ 129.469600][ T5028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.484977][ T4182] loop2: p1 start 3405774849 is beyond EOD, truncated [ 129.502827][ T4182] loop2: p3 start 4225 is beyond EOD, truncated [ 129.512485][ T4182] loop2: p6 start 4225 is beyond EOD, truncated [ 129.547210][ T5101] loop2: p1 < > p2 p3 p4 < p5 p6 > [ 129.560973][ T5028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.572372][ T5101] loop2: partition table partially beyond EOD, truncated [ 129.594386][ T5101] loop2: p1 start 3405774849 is beyond EOD, truncated [ 129.670719][ T5101] loop2: p3 start 4225 is beyond EOD, truncated [ 129.673695][ T5115] netlink: 32 bytes leftover after parsing attributes in process `syz.3.232'. [ 129.738599][ T5028] team0: Port device team_slave_0 added [ 129.868249][ T5028] team0: Port device team_slave_1 added [ 129.917132][ T5101] loop2: p6 start 4225 is beyond EOD, truncated [ 129.980070][ T5028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.037510][ T5028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.249677][ T5028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.267049][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 130.281515][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 130.295249][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 130.325006][ T4362] device hsr_slave_0 left promiscuous mode [ 130.687745][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 130.698269][ T4362] device hsr_slave_1 left promiscuous mode [ 130.708065][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.739327][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 130.759400][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.772471][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 130.805011][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.834897][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.845774][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 130.908310][ T4362] device bridge_slave_1 left promiscuous mode [ 130.951249][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.043229][ T5136] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 131.055209][ T4362] device bridge_slave_0 left promiscuous mode [ 131.079060][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.163895][ T4362] device veth1_macvtap left promiscuous mode [ 131.184316][ T4362] device veth0_macvtap left promiscuous mode [ 131.209003][ T4362] device veth1_vlan left promiscuous mode [ 131.225348][ T4362] device veth0_vlan left promiscuous mode [ 131.772584][ T4362] team0 (unregistering): Port device team_slave_1 removed [ 131.791320][ T4362] team0 (unregistering): Port device team_slave_0 removed [ 131.811667][ T4362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.843586][ T4362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.006769][ T4362] bond0 (unregistering): Released all slaves [ 132.010042][ T5150] loop4: detected capacity change from 0 to 512 [ 132.037148][ T5150] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 132.076759][ T5150] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 132.091040][ T5150] EXT4-fs (loop4): 1 truncate cleaned up [ 132.096767][ T5150] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.114763][ T5028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.128526][ T5028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.162042][ T5028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.345451][ T5028] device hsr_slave_0 entered promiscuous mode [ 132.388380][ T5028] device hsr_slave_1 entered promiscuous mode [ 132.402752][ T5028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.413466][ T5028] Cannot create hsr debugfs directory [ 132.498984][ T5160] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 132.768357][ T1112] Bluetooth: hci0: command 0x040f tx timeout [ 133.800097][ T5178] loop4: detected capacity change from 0 to 2048 [ 134.047808][ T5178] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.293279][ T4444] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 134.357804][ T4444] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 134.407612][ T4444] EXT4-fs (loop4): This should not happen!! Data will be lost [ 134.407612][ T4444] [ 134.439792][ T4444] EXT4-fs (loop4): Total free blocks count 0 [ 134.465642][ T4444] EXT4-fs (loop4): Free/Dirty block details [ 134.516786][ T5206] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 134.534966][ T4444] EXT4-fs (loop4): free_blocks=4096 [ 134.620464][ T4444] EXT4-fs (loop4): dirty_blocks=512 [ 134.793629][ T4444] EXT4-fs (loop4): Block reservation details [ 134.965172][ T4444] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 134.990884][ T1112] Bluetooth: hci0: command 0x0419 tx timeout [ 135.539415][ T5220] FAULT_INJECTION: forcing a failure. [ 135.539415][ T5220] name failslab, interval 1, probability 0, space 0, times 0 [ 135.562382][ T5222] loop3: detected capacity change from 0 to 512 [ 135.618616][ T5220] CPU: 1 PID: 5220 Comm: syz.4.257 Not tainted syzkaller #0 [ 135.626225][ T5220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 135.628211][ T5222] EXT4-fs (loop3): Ignoring removed bh option [ 135.636730][ T5220] Call Trace: [ 135.648355][ T5220] [ 135.651518][ T5220] dump_stack_lvl+0x188/0x250 [ 135.656919][ T5220] ? show_regs_print_info+0x20/0x20 [ 135.662241][ T5220] ? load_image+0x410/0x410 [ 135.667124][ T5220] ? __might_sleep+0xf0/0xf0 [ 135.671781][ T5220] ? __lock_acquire+0x7d40/0x7d40 [ 135.677128][ T5220] should_fail+0x383/0x4b0 [ 135.681903][ T5220] should_failslab+0x5/0x20 [ 135.686623][ T5220] slab_pre_alloc_hook+0x51/0xc0 [ 135.691609][ T5220] ? __mpol_dup+0x76/0x320 [ 135.696444][ T5220] kmem_cache_alloc+0x3d/0x280 [ 135.701972][ T5220] __mpol_dup+0x76/0x320 [ 135.706362][ T5220] ? vma_dup_policy+0xa0/0xa0 [ 135.711117][ T5220] ? mpol_set_shared_policy+0xb5/0xe90 [ 135.717110][ T5220] ? rcu_is_watching+0x11/0xa0 [ 135.722110][ T5220] ? kmem_cache_alloc+0x189/0x280 [ 135.727299][ T5220] mpol_set_shared_policy+0xca/0xe90 [ 135.732924][ T5220] mbind_range+0x829/0x9b0 [ 135.738124][ T5220] __se_sys_mbind+0x51c/0x770 [ 135.743226][ T5220] ? __x64_sys_mbind+0xf0/0xf0 [ 135.749163][ T5220] ? lock_chain_count+0x20/0x20 [ 135.755252][ T5220] ? __x64_sys_mbind+0x1d/0xf0 [ 135.760975][ T5220] do_syscall_64+0x4c/0xa0 [ 135.765706][ T5220] ? clear_bhb_loop+0x30/0x80 [ 135.770555][ T5220] ? clear_bhb_loop+0x30/0x80 [ 135.775898][ T5220] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.782372][ T5220] RIP: 0033:0x7f29f3a83559 [ 135.786837][ T5220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.807359][ T5220] RSP: 002b:00007f29f1cda028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 135.816183][ T5220] RAX: ffffffffffffffda RBX: 00007f29f3d09fa0 RCX: 00007f29f3a83559 [ 135.824807][ T5220] RDX: 0000000000000005 RSI: 0000000000600000 RDI: 0000200000000000 [ 135.832851][ T5220] RBP: 00007f29f3b1ab50 R08: 0000000000000008 R09: 0000000000000000 [ 135.841049][ T5220] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000 [ 135.849782][ T5220] R13: 00007f29f3d0a038 R14: 00007f29f3d09fa0 R15: 00007ffe9d15d4b8 [ 135.857840][ T5220] [ 135.875746][ T5224] block device autoloading is deprecated and will be removed. [ 135.941256][ T5222] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c128, mo2=0002] [ 135.989431][ T5222] System zones: 1-12 [ 136.033676][ T5222] EXT4-fs (loop3): 1 truncate cleaned up [ 136.078617][ T5222] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,debug,bh,noload,errors=remount-ro,usrjquota=,. Quota mode: none. [ 136.473957][ T5222] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: none. [ 136.688184][ T5235] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c128, mo2=0002] [ 136.731612][ T5235] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: none. [ 136.748437][ T5028] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 136.796181][ T5028] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 136.870515][ T5028] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 136.907148][ T5245] FAULT_INJECTION: forcing a failure. [ 136.907148][ T5245] name failslab, interval 1, probability 0, space 0, times 0 [ 136.921325][ T5028] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 137.027618][ T5245] CPU: 0 PID: 5245 Comm: syz.2.269 Not tainted syzkaller #0 [ 137.035299][ T5245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 137.045396][ T5245] Call Trace: [ 137.048716][ T5245] [ 137.051741][ T5245] dump_stack_lvl+0x188/0x250 [ 137.056640][ T5245] ? show_regs_print_info+0x20/0x20 [ 137.061898][ T5245] ? load_image+0x410/0x410 [ 137.066466][ T5245] ? __lock_acquire+0x7d40/0x7d40 [ 137.071862][ T5245] ? rcu_lock_release+0x5/0x20 [ 137.076687][ T5245] should_fail+0x383/0x4b0 [ 137.081162][ T5245] should_failslab+0x5/0x20 [ 137.085746][ T5245] slab_pre_alloc_hook+0x51/0xc0 [ 137.090737][ T5245] kmem_cache_alloc_trace+0x47/0x290 [ 137.096254][ T5245] ? mirred_init_net+0x61/0x190 [ 137.101166][ T5245] mirred_init_net+0x61/0x190 [ 137.106011][ T5245] ops_init+0x360/0x5f0 [ 137.110499][ T5245] setup_net+0x39e/0xa10 [ 137.114796][ T5245] ? copy_net_ns+0x5b0/0x5b0 [ 137.119472][ T5245] ? copy_net_ns+0x324/0x5b0 [ 137.124205][ T5245] ? down_read_killable+0x1ce/0x340 [ 137.129483][ T5245] copy_net_ns+0x33e/0x5b0 [ 137.133958][ T5245] create_new_namespaces+0x3ce/0x700 [ 137.139314][ T5245] unshare_nsproxy_namespaces+0x116/0x160 [ 137.145195][ T5245] ksys_unshare+0x4f6/0x8e0 [ 137.149755][ T5245] ? __lock_acquire+0x7d40/0x7d40 [ 137.154834][ T5245] ? sighand_ctor+0x40/0x40 [ 137.159397][ T5245] ? lock_chain_count+0x20/0x20 [ 137.164511][ T5245] ? syscall_enter_from_user_mode+0x21/0x70 [ 137.170594][ T5245] __x64_sys_unshare+0x34/0x40 [ 137.175499][ T5245] do_syscall_64+0x4c/0xa0 [ 137.179966][ T5245] ? clear_bhb_loop+0x30/0x80 [ 137.184782][ T5245] ? clear_bhb_loop+0x30/0x80 [ 137.189496][ T5245] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.195431][ T5245] RIP: 0033:0x7f327698c559 [ 137.199896][ T5245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.219967][ T5245] RSP: 002b:00007f3274be3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 137.228528][ T5245] RAX: ffffffffffffffda RBX: 00007f3276c12fa0 RCX: 00007f327698c559 [ 137.236584][ T5245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 137.244596][ T5245] RBP: 00007f3276a23b50 R08: 0000000000000000 R09: 0000000000000000 [ 137.252626][ T5245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.260645][ T5245] R13: 00007f3276c13038 R14: 00007f3276c12fa0 R15: 00007ffd2087cc08 [ 137.268673][ T5245] [ 137.352059][ T5255] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 138.003453][ T5028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.128074][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.136261][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.194201][ T5028] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.241951][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.274388][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.298507][ T4537] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.305644][ T4537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.355892][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.370155][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.376513][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.410923][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.819944][ T4537] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.827142][ T4537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.301930][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.365083][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.414437][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.466850][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.524935][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.566063][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.600292][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.614562][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.626102][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.641318][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.671468][ T5028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.708530][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.788722][ T5300] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 140.103452][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.234605][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.056210][ T5324] netlink: 44 bytes leftover after parsing attributes in process `syz.4.289'. [ 141.083857][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.084014][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.142747][ T5028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.206735][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.207539][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.276139][ T5333] loop4: detected capacity change from 0 to 512 [ 141.292641][ T5028] device veth0_vlan entered promiscuous mode [ 141.604008][ T5333] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 141.624350][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.625429][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.626347][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.626966][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.632441][ T5329] rxe_eth0 speed is unknown, defaulting to 1000 [ 141.854662][ T5333] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.290: bg 0: block 4: invalid block bitmap [ 141.899047][ T5333] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 141.913395][ T5333] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.290: invalid indirect mapped block 1 (level 1) [ 141.913693][ T5028] device veth1_vlan entered promiscuous mode [ 141.915119][ T5333] EXT4-fs (loop4): 1 truncate cleaned up [ 141.915145][ T5333] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.938668][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.939358][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.949185][ T5028] device veth0_macvtap entered promiscuous mode [ 141.953549][ T5028] device veth1_macvtap entered promiscuous mode [ 141.971521][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.971595][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.971608][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.971624][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.971635][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.971651][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.973273][ T5028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.976230][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.976253][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.976265][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.976280][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.976291][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.976306][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.008471][ T5028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.009133][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.009895][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.010573][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.012039][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.012691][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.013296][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.025160][ T5028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.025257][ T5028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.025290][ T5028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.025343][ T5028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.274282][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.274306][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.274549][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.409492][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.409517][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.409789][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.703297][ T5358] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.826816][ T5373] loop1: detected capacity change from 0 to 512 [ 143.911216][ T5373] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 143.930009][ T5373] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.300: bad orphan inode 131083 [ 143.930410][ T5373] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000005,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 143.959000][ T5380] loop0: detected capacity change from 0 to 512 [ 144.501722][ T5394] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 145.316734][ T5383] loop4: detected capacity change from 0 to 8192 [ 145.359476][ T5399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 145.428411][ T5396] rxe_eth0 speed is unknown, defaulting to 1000 [ 145.550311][ T25] audit: type=1800 audit(1793462185.378:13): pid=5383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.303" name="file1" dev="loop4" ino=1048635 res=0 errno=0 [ 145.616199][ T5402] loop3: detected capacity change from 0 to 2048 [ 145.753789][ T5402] loop3: p1 < > p2 p3 p4 < p5 p6 > [ 145.753841][ T5402] loop3: partition table partially beyond EOD, truncated [ 145.754072][ T5402] loop3: p1 start 3405774849 is beyond EOD, truncated [ 145.755383][ T5402] loop3: p3 start 4225 is beyond EOD, truncated [ 145.765533][ T5402] loop3: p6 start 4225 is beyond EOD, truncated [ 145.994273][ T25] audit: type=1800 audit(1793462185.818:14): pid=5411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.301" name="file1" dev="loop0" ino=1048636 res=0 errno=0 [ 149.095132][ T5471] loop1: detected capacity change from 0 to 512 [ 149.120728][ T5471] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 149.147887][ T5471] EXT4-fs (loop1): 1 truncate cleaned up [ 149.147918][ T5471] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,auto_da_alloc,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,jqfmt=vfsv1,. Quota mode: none. [ 149.572447][ T5476] EXT4-fs error (device loop1): __ext4_expand_extra_isize:5893: inode #12: comm syz.1.323: bad extra_isize 62 (inode size 256) [ 149.581459][ T5476] EXT4-fs (loop1): Remounting filesystem read-only [ 150.293675][ T5481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.324'. [ 150.571684][ T5498] netlink: 'syz.1.333': attribute type 1 has an invalid length. [ 151.457117][ T5498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.521044][ T5501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'. [ 151.566881][ T5503] bond1: (slave ip6erspan0): making interface the new active one [ 151.611002][ T5503] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 151.667769][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 151.802120][ T5511] loop1: detected capacity change from 0 to 128 [ 151.860201][ T5514] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.898963][ T5511] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 151.945803][ T5511] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 151.960050][ T5514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.009856][ T5514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.173694][ T3091] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 152.418095][ T5516] block device autoloading is deprecated and will be removed. [ 152.923730][ T5526] loop2: detected capacity change from 0 to 1764 [ 153.039917][ T5526] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 153.771791][ T5542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'. [ 153.828006][ T5542] device syz_tun entered promiscuous mode [ 153.850993][ T5542] device macvlan2 entered promiscuous mode [ 153.877399][ T5542] device syz_tun left promiscuous mode [ 156.024347][ T5574] loop1: detected capacity change from 0 to 512 [ 156.200648][ T5574] EXT4-fs (loop1): Ignoring removed bh option [ 156.235632][ T5574] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 156.249980][ T5574] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 156.262008][ T5574] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.362: Corrupt directory, running e2fsck is recommended [ 156.284244][ T5574] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 156.325076][ T5574] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.362: corrupted in-inode xattr [ 156.396136][ T5574] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.362: couldn't read orphan inode 15 (err -117) [ 156.432758][ T5574] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,jqfmt=vfsold,errors=continue,grpjquota=.errors=continue,resuid=0x0000000000000000,bh,noload,,,errors=continue. Quota mode: writeback. [ 156.509913][ T5574] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 156.545925][ T5574] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 156.576490][ T5574] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.362: Corrupt directory, running e2fsck is recommended [ 156.610893][ T5595] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 156.654726][ T5596] loop2: detected capacity change from 0 to 512 [ 156.685526][ T5595] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 156.720914][ T5595] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.362: Corrupt directory, running e2fsck is recommended [ 156.771657][ T5574] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 157.156381][ T5599] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 157.637298][ T5596] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 157.649262][ T5574] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 157.661138][ T5574] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.362: Corrupt directory, running e2fsck is recommended [ 157.668173][ T5596] FAT-fs (loop2): Filesystem has been set read-only [ 157.856784][ T5604] all (unregistering): Released all slaves [ 158.109527][ T5616] loop0: detected capacity change from 0 to 512 [ 158.372646][ T5626] FAULT_INJECTION: forcing a failure. [ 158.372646][ T5626] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 158.438417][ T5626] CPU: 1 PID: 5626 Comm: syz.3.381 Not tainted syzkaller #0 [ 158.445810][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 158.455920][ T5626] Call Trace: [ 158.459245][ T5626] [ 158.462216][ T5626] dump_stack_lvl+0x188/0x250 [ 158.466951][ T5626] ? show_regs_print_info+0x20/0x20 [ 158.472322][ T5626] ? load_image+0x410/0x410 [ 158.476923][ T5626] ? __lock_acquire+0x7d40/0x7d40 [ 158.482128][ T5626] should_fail+0x383/0x4b0 [ 158.486601][ T5626] prepare_alloc_pages+0x1e3/0x5b0 [ 158.491877][ T5626] __alloc_pages+0x11b/0x480 [ 158.496813][ T5626] ? unwind_get_return_address+0x49/0x80 [ 158.502505][ T5626] ? zone_statistics+0x170/0x170 [ 158.507502][ T5626] ? alloc_pages+0x452/0x560 [ 158.512143][ T5626] stack_depot_save+0x356/0x460 [ 158.517045][ T5626] save_stack+0x12f/0x230 [ 158.521436][ T5626] ? __reset_page_owner+0x180/0x180 [ 158.526676][ T5626] ? get_page_from_freelist+0x24f6/0x2670 [ 158.532616][ T5626] ? __alloc_pages+0x1ee/0x480 [ 158.537445][ T5626] ? stack_depot_save+0x356/0x460 [ 158.542515][ T5626] ? kasan_set_track+0x62/0x70 [ 158.547328][ T5626] ? kasan_set_free_info+0x1f/0x40 [ 158.552488][ T5626] ? ____kasan_slab_free+0xd5/0x110 [ 158.557766][ T5626] ? slab_free_freelist_hook+0xec/0x170 [ 158.563393][ T5626] ? kfree+0xef/0x2a0 [ 158.567499][ T5626] ? mpi_free+0x9c/0x120 [ 158.571783][ T5626] ? rsa_enc+0x1f7/0x3c0 [ 158.576156][ T5626] ? software_key_eds_op+0x712/0xb30 [ 158.581480][ T5626] ? keyctl_pkey_e_d_s+0x208/0x300 [ 158.586638][ T5626] ? __se_sys_keyctl+0x6c6/0xa20 [ 158.591637][ T5626] ? do_syscall_64+0x4c/0xa0 [ 158.596278][ T5626] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.602392][ T5626] ? lock_chain_count+0x20/0x20 [ 158.607287][ T5626] ? preempt_count_add+0x8d/0x190 [ 158.612360][ T5626] __set_page_owner+0x41/0x2d0 [ 158.617290][ T5626] ? post_alloc_hook+0x106/0x220 [ 158.622282][ T5626] get_page_from_freelist+0x24f6/0x2670 [ 158.627884][ T5626] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 158.633946][ T5626] ? __lock_acquire+0x7d40/0x7d40 [ 158.639025][ T5626] ? __alloc_pages+0x480/0x480 [ 158.643846][ T5626] ? prepare_alloc_pages+0x359/0x5b0 [ 158.649195][ T5626] __alloc_pages+0x1ee/0x480 [ 158.653834][ T5626] ? unwind_get_return_address+0x49/0x80 [ 158.659515][ T5626] ? zone_statistics+0x170/0x170 [ 158.664974][ T5626] ? alloc_pages+0x452/0x560 [ 158.669686][ T5626] stack_depot_save+0x356/0x460 [ 158.674704][ T5626] ? kfree+0xef/0x2a0 [ 158.679165][ T5626] kasan_set_track+0x62/0x70 [ 158.684026][ T5626] ? kasan_set_track+0x4b/0x70 [ 158.688926][ T5626] ? kasan_set_free_info+0x1f/0x40 [ 158.694095][ T5626] ? ____kasan_slab_free+0xd5/0x110 [ 158.699347][ T5626] ? slab_free_freelist_hook+0xec/0x170 [ 158.704946][ T5626] ? kfree+0xef/0x2a0 [ 158.709074][ T5626] ? mpi_free+0x9c/0x120 [ 158.713365][ T5626] ? rsa_enc+0x1f7/0x3c0 [ 158.718208][ T5626] ? software_key_eds_op+0x712/0xb30 [ 158.723573][ T5626] ? keyctl_pkey_e_d_s+0x208/0x300 [ 158.728743][ T5626] ? __se_sys_keyctl+0x6c6/0xa20 [ 158.733731][ T5626] ? do_syscall_64+0x4c/0xa0 [ 158.738375][ T5626] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.744590][ T5626] kasan_set_free_info+0x1f/0x40 [ 158.749768][ T5626] ____kasan_slab_free+0xd5/0x110 [ 158.755059][ T5626] slab_free_freelist_hook+0xec/0x170 [ 158.760531][ T5626] ? mpi_free+0x9c/0x120 [ 158.764827][ T5626] kfree+0xef/0x2a0 [ 158.768692][ T5626] ? __phys_addr+0xb6/0x170 [ 158.773241][ T5626] mpi_free+0x9c/0x120 [ 158.777388][ T5626] rsa_enc+0x1f7/0x3c0 [ 158.781508][ T5626] ? rsa_exit+0x20/0x20 [ 158.785719][ T5626] ? __init_swait_queue_head+0xa4/0x140 [ 158.791318][ T5626] software_key_eds_op+0x712/0xb30 [ 158.796486][ T5626] ? stack_depot_save+0x41b/0x460 [ 158.801584][ T5626] ? software_key_query+0x830/0x830 [ 158.807197][ T5626] ? asymmetric_key_eds_op+0xe9/0x130 [ 158.812627][ T5626] keyctl_pkey_e_d_s+0x208/0x300 [ 158.817630][ T5626] ? keyctl_pkey_params_get+0x4c0/0x4c0 [ 158.823382][ T5626] ? do_futex+0xd83/0x12b0 [ 158.827903][ T5626] __se_sys_keyctl+0x6c6/0xa20 [ 158.832723][ T5626] ? __x64_sys_keyctl+0xc0/0xc0 [ 158.837634][ T5626] ? __context_tracking_exit+0x4c/0x80 [ 158.843283][ T5626] ? __lock_acquire+0x7d40/0x7d40 [ 158.848516][ T5626] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 158.854557][ T5626] ? lock_chain_count+0x20/0x20 [ 158.859475][ T5626] ? lockdep_hardirqs_on+0x94/0x140 [ 158.864762][ T5626] ? __x64_sys_keyctl+0x1c/0xc0 [ 158.869753][ T5626] do_syscall_64+0x4c/0xa0 [ 158.874238][ T5626] ? clear_bhb_loop+0x30/0x80 [ 158.879158][ T5626] ? clear_bhb_loop+0x30/0x80 [ 158.884063][ T5626] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.890016][ T5626] RIP: 0033:0x7f870e903559 [ 158.894736][ T5626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.915263][ T5626] RSP: 002b:00007f870cb5a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 158.923835][ T5626] RAX: ffffffffffffffda RBX: 00007f870eb89fa0 RCX: 00007f870e903559 [ 158.932358][ T5626] RDX: 0000200000000940 RSI: 0000200000000900 RDI: 0000000000000019 [ 158.940374][ T5626] RBP: 00007f870e99ab50 R08: 0000000000000000 R09: 0000000000000000 [ 158.948957][ T5626] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000000 [ 158.957043][ T5626] R13: 00007f870eb8a038 R14: 00007f870eb89fa0 R15: 00007fff5ec838e8 [ 158.965075][ T5626] [ 159.012065][ T5633] loop1: detected capacity change from 0 to 512 [ 159.099063][ T5633] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 159.150292][ T5633] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.178574][ T5641] FAULT_INJECTION: forcing a failure. [ 159.178574][ T5641] name failslab, interval 1, probability 0, space 0, times 0 [ 159.242900][ T5641] CPU: 1 PID: 5641 Comm: syz.2.387 Not tainted syzkaller #0 [ 159.250283][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 159.260496][ T5641] Call Trace: [ 159.263817][ T5641] [ 159.266817][ T5641] dump_stack_lvl+0x188/0x250 [ 159.271638][ T5641] ? show_regs_print_info+0x20/0x20 [ 159.276927][ T5641] ? load_image+0x410/0x410 [ 159.281479][ T5641] ? __lock_acquire+0x7d40/0x7d40 [ 159.286739][ T5641] should_fail+0x383/0x4b0 [ 159.291216][ T5641] should_failslab+0x5/0x20 [ 159.295758][ T5641] slab_pre_alloc_hook+0x51/0xc0 [ 159.300763][ T5641] ? mempool_free+0x320/0x320 [ 159.305488][ T5641] ? mempool_init_node+0x1e5/0x480 [ 159.310665][ T5641] kmem_cache_alloc+0x3d/0x280 [ 159.315480][ T5641] ? mempool_free+0x320/0x320 [ 159.320327][ T5641] mempool_init_node+0x1e5/0x480 [ 159.325317][ T5641] ? mempool_alloc_slab+0x60/0x60 [ 159.330384][ T5641] ? mempool_free+0x320/0x320 [ 159.335116][ T5641] mempool_init+0x36/0x50 [ 159.339516][ T5641] bioset_init+0x282/0x6d0 [ 159.343991][ T5641] blk_alloc_queue+0xaf/0x580 [ 159.348717][ T5641] __blk_mq_alloc_disk+0x43/0x150 [ 159.353950][ T5641] ? loop_add+0x263/0x890 [ 159.358377][ T5641] loop_add+0x288/0x890 [ 159.362593][ T5641] loop_control_ioctl+0x124/0x550 [ 159.367676][ T5641] ? xor_init+0x60/0x60 [ 159.371903][ T5641] ? bpf_lsm_file_ioctl+0x5/0x10 [ 159.377188][ T5641] ? security_file_ioctl+0x7c/0xa0 [ 159.382358][ T5641] ? xor_init+0x60/0x60 [ 159.386589][ T5641] __se_sys_ioctl+0xfa/0x170 [ 159.391328][ T5641] do_syscall_64+0x4c/0xa0 [ 159.395807][ T5641] ? clear_bhb_loop+0x30/0x80 [ 159.400737][ T5641] ? clear_bhb_loop+0x30/0x80 [ 159.405785][ T5641] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.412436][ T5641] RIP: 0033:0x7f327698c559 [ 159.416910][ T5641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.436583][ T5641] RSP: 002b:00007f3274be3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.445059][ T5641] RAX: ffffffffffffffda RBX: 00007f3276c12fa0 RCX: 00007f327698c559 [ 159.453093][ T5641] RDX: 0000200000000440 RSI: 0000000000004c80 RDI: 0000000000000004 [ 159.461140][ T5641] RBP: 00007f3276a23b50 R08: 0000000000000000 R09: 0000000000000000 [ 159.469263][ T5641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.477286][ T5641] R13: 00007f3276c13038 R14: 00007f3276c12fa0 R15: 00007ffd2087cc08 [ 159.485441][ T5641] [ 159.709911][ T5657] FAULT_INJECTION: forcing a failure. [ 159.709911][ T5657] name failslab, interval 1, probability 0, space 0, times 0 [ 159.741122][ T25] audit: type=1800 audit(1793462199.558:15): pid=5659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.376" name="file1" dev="loop0" ino=1048643 res=0 errno=0 [ 159.795290][ T5657] CPU: 0 PID: 5657 Comm: syz.4.394 Not tainted syzkaller #0 [ 159.803218][ T5657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 159.814610][ T5657] Call Trace: [ 159.817926][ T5657] [ 159.820928][ T5657] dump_stack_lvl+0x188/0x250 [ 159.825759][ T5657] ? show_regs_print_info+0x20/0x20 [ 159.831008][ T5657] ? load_image+0x410/0x410 [ 159.835559][ T5657] ? __might_sleep+0xf0/0xf0 [ 159.841442][ T5657] ? __lock_acquire+0x7d40/0x7d40 [ 159.846538][ T5657] should_fail+0x383/0x4b0 [ 159.851132][ T5657] should_failslab+0x5/0x20 [ 159.855685][ T5657] slab_pre_alloc_hook+0x51/0xc0 [ 159.860703][ T5657] ? create_new_namespaces+0x34/0x700 [ 159.866146][ T5657] kmem_cache_alloc+0x3d/0x280 [ 159.871161][ T5657] create_new_namespaces+0x34/0x700 [ 159.876736][ T5657] ? apparmor_capable+0x12c/0x190 [ 159.881959][ T5657] ? bpf_lsm_capable+0x5/0x10 [ 159.887019][ T5657] ? security_capable+0x85/0xb0 [ 159.891934][ T5657] unshare_nsproxy_namespaces+0x116/0x160 [ 159.897742][ T5657] ksys_unshare+0x4f6/0x8e0 [ 159.902393][ T5657] ? __lock_acquire+0x7d40/0x7d40 [ 159.907518][ T5657] ? sighand_ctor+0x40/0x40 [ 159.912115][ T5657] ? lock_chain_count+0x20/0x20 [ 159.917066][ T5657] ? syscall_enter_from_user_mode+0x21/0x70 [ 159.923018][ T5657] __x64_sys_unshare+0x34/0x40 [ 159.927836][ T5657] do_syscall_64+0x4c/0xa0 [ 159.932417][ T5657] ? clear_bhb_loop+0x30/0x80 [ 159.937252][ T5657] ? clear_bhb_loop+0x30/0x80 [ 159.941985][ T5657] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.947928][ T5657] RIP: 0033:0x7f29f3a83559 [ 159.952397][ T5657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.972172][ T5657] RSP: 002b:00007f29f1cda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 159.980810][ T5657] RAX: ffffffffffffffda RBX: 00007f29f3d09fa0 RCX: 00007f29f3a83559 [ 159.988873][ T5657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 159.996922][ T5657] RBP: 00007f29f3b1ab50 R08: 0000000000000000 R09: 0000000000000000 [ 160.004937][ T5657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.012967][ T5657] R13: 00007f29f3d0a038 R14: 00007f29f3d09fa0 R15: 00007ffe9d15d4b8 [ 160.021014][ T5657] [ 160.246288][ T5671] netlink: 32 bytes leftover after parsing attributes in process `syz.3.400'. [ 160.274889][ T5669] [ 160.277618][ T5669] ====================================================== [ 160.284684][ T5669] WARNING: possible circular locking dependency detected [ 160.291791][ T5669] syzkaller #0 Not tainted [ 160.296238][ T5669] ------------------------------------------------------ [ 160.303367][ T5669] syz.1.399/5669 is trying to acquire lock: [ 160.309282][ T5669] ffff88802b901f98 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 160.320726][ T5669] [ 160.320726][ T5669] but task is already holding lock: [ 160.328110][ T5669] ffff88802b900120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 160.337122][ T5669] [ 160.337122][ T5669] which lock already depends on the new lock. [ 160.337122][ T5669] [ 160.347734][ T5669] [ 160.347734][ T5669] the existing dependency chain (in reverse order) is: [ 160.356770][ T5669] [ 160.356770][ T5669] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 160.364569][ T5669] lock_sock_nested+0x44/0x100 [ 160.369902][ T5669] smc_listen_out+0xd4/0x3c0 [ 160.375147][ T5669] smc_listen_work+0x52a/0xd10 [ 160.380497][ T5669] process_one_work+0x867/0xff0 [ 160.385904][ T5669] worker_thread+0xad7/0x12a0 [ 160.391170][ T5669] kthread+0x42e/0x520 [ 160.395793][ T5669] ret_from_fork+0x1f/0x30 [ 160.400840][ T5669] [ 160.400840][ T5669] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 160.411048][ T5669] __lock_acquire+0x38f7/0x7d40 [ 160.416468][ T5669] lock_acquire+0x19f/0x400 [ 160.421711][ T5669] __flush_work+0x116/0x210 [ 160.426802][ T5669] __cancel_work_timer+0x3f4/0x560 [ 160.432472][ T5669] smc_clcsock_release+0x5c/0xe0 [ 160.437966][ T5669] __smc_release+0x644/0x7b0 [ 160.443170][ T5669] smc_close_non_accepted+0xd1/0x1f0 [ 160.449141][ T5669] smc_close_active+0xae2/0xea0 [ 160.454780][ T5669] __smc_release+0x9c/0x7b0 [ 160.459849][ T5669] smc_release+0x2c1/0x520 [ 160.464938][ T5669] sock_close+0xbf/0x210 [ 160.469842][ T5669] __fput+0x212/0x8c0 [ 160.474400][ T5669] task_work_run+0x125/0x1a0 [ 160.479738][ T5669] exit_to_user_mode_loop+0x10f/0x130 [ 160.485678][ T5669] exit_to_user_mode_prepare+0xee/0x180 [ 160.491920][ T5669] syscall_exit_to_user_mode+0x16/0x40 [ 160.497942][ T5669] do_syscall_64+0x58/0xa0 [ 160.502917][ T5669] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.509397][ T5669] [ 160.509397][ T5669] other info that might help us debug this: [ 160.509397][ T5669] [ 160.519826][ T5669] Possible unsafe locking scenario: [ 160.519826][ T5669] [ 160.527398][ T5669] CPU0 CPU1 [ 160.532899][ T5669] ---- ---- [ 160.538416][ T5669] lock(sk_lock-AF_SMC/1); [ 160.542973][ T5669] lock((work_completion)(&new_smc->smc_listen_work)); [ 160.552476][ T5669] lock(sk_lock-AF_SMC/1); [ 160.559545][ T5669] lock((work_completion)(&new_smc->smc_listen_work)); [ 160.566518][ T5669] [ 160.566518][ T5669] *** DEADLOCK *** [ 160.566518][ T5669] [ 160.574690][ T5669] 2 locks held by syz.1.399/5669: [ 160.579755][ T5669] #0: ffff88805c81a610 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 160.590012][ T5669] #1: ffff88802b900120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 160.599592][ T5669] [ 160.599592][ T5669] stack backtrace: [ 160.605510][ T5669] CPU: 1 PID: 5669 Comm: syz.1.399 Not tainted syzkaller #0 [ 160.612832][ T5669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 160.623182][ T5669] Call Trace: [ 160.626598][ T5669] [ 160.629587][ T5669] dump_stack_lvl+0x188/0x250 [ 160.634308][ T5669] ? load_image+0x410/0x410 [ 160.639077][ T5669] ? show_regs_print_info+0x20/0x20 [ 160.644338][ T5669] ? print_circular_bug+0x12b/0x1a0 [ 160.649576][ T5669] check_noncircular+0x2f8/0x400 [ 160.654582][ T5669] ? deref_stack_reg+0xd0/0x120 [ 160.659472][ T5669] ? look_up_lock_class+0x71/0x110 [ 160.664623][ T5669] ? print_deadlock_bug+0x5d0/0x5d0 [ 160.669947][ T5669] ? lockdep_lock+0xf1/0x1f0 [ 160.674583][ T5669] ? lock_release+0xb5/0x8a0 [ 160.679212][ T5669] ? mark_lock+0x94/0x320 [ 160.683595][ T5669] ? _find_first_zero_bit+0xd1/0xf0 [ 160.688842][ T5669] __lock_acquire+0x38f7/0x7d40 [ 160.693737][ T5669] ? deref_stack_reg+0xd0/0x120 [ 160.698663][ T5669] ? verify_lock_unused+0x140/0x140 [ 160.704002][ T5669] ? mark_lock+0x94/0x320 [ 160.708371][ T5669] ? __lock_acquire+0x13b3/0x7d40 [ 160.713528][ T5669] ? lockdep_lock+0xf1/0x1f0 [ 160.718155][ T5669] lock_acquire+0x19f/0x400 [ 160.722721][ T5669] ? __flush_work+0xfa/0x210 [ 160.727457][ T5669] ? read_lock_is_recursive+0x10/0x10 [ 160.732879][ T5669] __flush_work+0x116/0x210 [ 160.737465][ T5669] ? __flush_work+0xfa/0x210 [ 160.742098][ T5669] ? flush_work+0x20/0x20 [ 160.746472][ T5669] ? try_to_grab_pending+0xfb/0x820 [ 160.751859][ T5669] ? mark_lock+0x94/0x320 [ 160.756221][ T5669] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 160.762238][ T5669] ? lock_chain_count+0x20/0x20 [ 160.767127][ T5669] ? mark_lock+0x94/0x320 [ 160.771488][ T5669] ? __cancel_work_timer+0x36a/0x560 [ 160.776895][ T5669] __cancel_work_timer+0x3f4/0x560 [ 160.782060][ T5669] ? cancel_work_sync+0x20/0x20 [ 160.786949][ T5669] ? __local_bh_enable_ip+0x136/0x1c0 [ 160.792373][ T5669] ? lockdep_hardirqs_on+0x94/0x140 [ 160.797614][ T5669] ? __local_bh_enable_ip+0x136/0x1c0 [ 160.803033][ T5669] ? _local_bh_enable+0xa0/0xa0 [ 160.807921][ T5669] smc_clcsock_release+0x5c/0xe0 [ 160.812916][ T5669] __smc_release+0x644/0x7b0 [ 160.817548][ T5669] smc_close_non_accepted+0xd1/0x1f0 [ 160.822900][ T5669] smc_close_active+0xae2/0xea0 [ 160.827791][ T5669] ? sock_no_sendpage_locked+0x1a0/0x1a0 [ 160.833486][ T5669] __smc_release+0x9c/0x7b0 [ 160.838033][ T5669] smc_release+0x2c1/0x520 [ 160.842484][ T5669] sock_close+0xbf/0x210 [ 160.846755][ T5669] ? sock_mmap+0x90/0x90 [ 160.851048][ T5669] __fput+0x212/0x8c0 [ 160.855205][ T5669] task_work_run+0x125/0x1a0 [ 160.859840][ T5669] exit_to_user_mode_loop+0x10f/0x130 [ 160.865271][ T5669] exit_to_user_mode_prepare+0xee/0x180 [ 160.870850][ T5669] syscall_exit_to_user_mode+0x16/0x40 [ 160.876357][ T5669] do_syscall_64+0x58/0xa0 [ 160.880800][ T5669] ? clear_bhb_loop+0x30/0x80 [ 160.885521][ T5669] ? clear_bhb_loop+0x30/0x80 [ 160.890237][ T5669] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.896164][ T5669] RIP: 0033:0x7f8d3b695559 [ 160.900615][ T5669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.920253][ T5669] RSP: 002b:00007f8d398ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 160.928744][ T5669] RAX: 0000000000000000 RBX: 00007f8d3b91bfa0 RCX: 00007f8d3b695559 [ 160.936837][ T5669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 160.944841][ T5669] RBP: 00007f8d3b72cb50 R08: 0000000000000000 R09: 0000000000000000 [ 160.952866][ T5669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.960915][ T5669] R13: 00007f8d3b91c038 R14: 00007f8d3b91bfa0 R15: 00007ffefdcf2578 [ 160.968934][ T5669]