last executing test programs: 5m8.836720445s ago: executing program 2 (id=3): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="1b00000008001122336455660200", 0xe) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) 5m7.091007538s ago: executing program 2 (id=8): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r0, &(0x7f0000000200)=0x58, 0xa) 5m5.797167239s ago: executing program 2 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff) write(r0, &(0x7f0000000000)='3', 0x4e) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 4m50.602109042s ago: executing program 32 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff) write(r0, &(0x7f0000000000)='3', 0x4e) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 12.990893491s ago: executing program 5 (id=1090): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000100, 0x0) 12.748347687s ago: executing program 5 (id=1093): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000c00)=0x5) setreuid(0xee00, r1) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f000000f600)={{0x0, r1, 0x0, 0x0, 0x0, 0x89, 0xa}, 0xc, 0xd723, 0x0, 0x0, 0x0, 0x0, 0x6}) 12.603195601s ago: executing program 5 (id=1094): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, r2, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c811}, 0x20040884) 5.988212993s ago: executing program 0 (id=1126): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) io_setup(0x6, &(0x7f00000002c0)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000001540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x1000, 0x7, 0x4) 3.880628675s ago: executing program 0 (id=1137): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000980)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix_mp={0x1, 0xfffff109, 0x3132564e, 0x1, 0xc, [{0x27b, 0x1}, {0x7, 0xffffff65}, {0x3ff, 0x7f}, {0x7, 0xa}, {0x0, 0x10001}, {0x8da, 0x2}, {0xbbf3, 0x80000001}, {0x4b82}], 0xd2, 0x7, 0x9, 0x1, 0x2}}) sched_setaffinity(r2, 0x8, &(0x7f0000019980)=0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000199c0)={0x0, 0x0, 0x4450}, 0x8) socket$inet(0x2, 0x4000000000000001, 0x0) dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000300)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) 3.138380983s ago: executing program 0 (id=1139): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000008c0)={0x1, &(0x7f0000000900)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_cancel(0x0, 0x0, 0x0) 3.001285726s ago: executing program 3 (id=1142): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000200)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0xa, 0x1, [0x8]}, 0xa) 2.980311547s ago: executing program 4 (id=1144): futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) 2.923522258s ago: executing program 4 (id=1145): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000004640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004700)={0x18, 0x0, 0x6, {0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket$pppoe(0x18, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.890771439s ago: executing program 3 (id=1146): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x15, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) r2 = dup3(r1, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000200)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r4, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) semget(0x1, 0x5, 0x6b4) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @empty}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000400)={@loopback={0x0, 0x3fc}, 0x0, r8}) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000100), 0x18888, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) 2.323682573s ago: executing program 1 (id=1149): r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x590, 0x200, 0x3f0, 0x200, 0xf8, 0xf8, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}, {}, {}, 0x222}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00, 0x0, 0xff], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x120, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x5, 0x6}, {0x1, 0x5, 0x1}, 0x2, 0x5}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0x0, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) 2.093335308s ago: executing program 1 (id=1150): r0 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000580), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000005c0)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={'streebog256\x00'}}) 2.093130598s ago: executing program 4 (id=1151): getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000001a80)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) syz_clone3(&(0x7f0000000640)={0x1801480, &(0x7f00000006c0), 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000240)={0x7, 0x1c, 0x16, 0x1c, 0x8, 0x47, 0x5, 0x10b}) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040001}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40084) 1.971965631s ago: executing program 0 (id=1152): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) write(r0, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x9, 0xb, 0x81000000, 0xf, 0x5]}, &(0x7f00000000c0)=0x54) socket$pppl2tp(0x18, 0x1, 0x1) 1.966872112s ago: executing program 3 (id=1153): mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write$P9_RAUTH(r0, &(0x7f0000000240)={0x14, 0x67, 0x2, {0x1, 0x0, 0x8}}, 0x14) 1.966717352s ago: executing program 1 (id=1154): socket(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./sys\x00', &(0x7f0000000680)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/bus/usb/devices/usb1/1-0:1.0/usb1-port1/disable\x00', 0x1, 0x8) write(r0, &(0x7f0000000700)='1', 0x1) 1.879434764s ago: executing program 5 (id=1155): socket(0x2, 0x3, 0xff) r0 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2010008, &(0x7f0000000100), 0xff, 0x553, &(0x7f0000000380)="$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") openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000a00)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000a80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000ac0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) ppoll(&(0x7f0000000e40)=[{r4, 0x18}], 0x1, &(0x7f0000000e80)={0x0, 0x3938700}, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000016002507b9409b14ffff00000202be04200506050e130204430009003f0020480a0000f00d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 1.401345165s ago: executing program 3 (id=1156): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000200)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0xa, 0x1, [0x8]}, 0xa) 1.184900461s ago: executing program 1 (id=1157): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700)=0x1, 0x4) connect$inet(r0, &(0x7f0000000740)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000780)=0xffffffffffffffff, 0x4) sendto(r0, &(0x7f00000007c0)="0700bad5da0f7abb94ae529561beed4fbbaba97564c5f39e644541bd3a45cb9835bb2bff7fb568c90f15682d1efb94ac44443ff43aeecb3f5641f57198628519f8fb26ff23ad9413c2fef9d765ff2079940ce299bfb474772f2e6e153a474d5a6391b0", 0xfffffffffffffe68, 0x404c8d5, 0x0, 0xfffffeeb) 1.033205384s ago: executing program 1 (id=1158): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x8800) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc0105b08, &(0x7f0000000080)={0x1, 0x2, 0x3cf3, 0x202000, 0x110001, 0x9}) 926.398477ms ago: executing program 0 (id=1159): r0 = userfaultfd(0x1) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 925.923267ms ago: executing program 4 (id=1160): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2083) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x42000000) 861.825219ms ago: executing program 3 (id=1161): r0 = socket(0xa, 0x3, 0xff) pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x1f, 0x67, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x6, 0xfffffffffffffffd}, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x4000800) 501.275427ms ago: executing program 0 (id=1162): socket$nl_generic(0x10, 0x3, 0x10) mq_open(0x0, 0x8c1, 0x1a2, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f00000001c0)={[{}, {}]}) 258.491863ms ago: executing program 5 (id=1163): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') 251.333153ms ago: executing program 4 (id=1164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x5001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0x601, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {0xfff1, 0xffff}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}]}]}]}}]}, 0x44}}, 0x0) 193.783145ms ago: executing program 5 (id=1165): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, r2, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c811}, 0x20040884) 34.931159ms ago: executing program 4 (id=1166): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/trace_pipe\x00', 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f00000002c0)=0x405, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys_sec\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000540)="94", 0xf000}, {0x0}], 0x2) write$tun(0xffffffffffffffff, 0x0, 0xffe) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000680)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000006c0)={0x3, 0x40, 0xfac3, {{0xa, 0x4e21, 0x9, @empty, 0x9}, {0xa, 0x5, 0x13, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x848a}, r4, 0x1}}, 0x48) read(r0, &(0x7f0000000740)=""/16384, 0x4000) 9.635119ms ago: executing program 1 (id=1167): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000980)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000019980)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000199c0)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r4, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x13, r4, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 0s ago: executing program 3 (id=1168): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000001780)=0x100000b3, 0x4) prlimit64(0x0, 0xe, &(0x7f00000017c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001800)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001840)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000018c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001940), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001980), 0x10106, 0x2, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000019c0), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001a00)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000001a40)={0x1, &(0x7f0000001a80)=[{0x6, 0x4, 0x8, 0xa}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001ac0)='./tracing\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x6, 0x7, &(0x7f0000009e80)=ANY=[@ANYBLOB="bb0400000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf010000040000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000009ec0)='./tracing\x00', &(0x7f0000009f00)='tracefs\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x5) setsockopt(r1, 0x0, 0xb, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000009f40), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd2(0x2, 0x1) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000009f80)={0x0, r5}) syz_mount_image$jfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file2\x00', 0x1000400, &(0x7f0000001bc0)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@usrquota}, {@errors_continue}, {@uid={'uid', 0x3d, 0xee00}}, {@errors_continue}]}, 0x21, 0x61b6, &(0x7f0000001c80)="$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") syz_mount_image$hfs(&(0x7f0000000c00), &(0x7f0000000c40)='./file1\x00', 0x1000812, &(0x7f0000000d40)=ANY=[@ANYBLOB="71756965742c636f6465706167653d63703836302c696f636861727365743d63703836312c00808fead042bd35dc78f7f06333a5e7165b8271e41aee85e59cbb6c2df3d4e4c16b06c73f2e3b34ac8d4813c9c3d9cee1ddb95d1bbcf504e065b3749a1cbd841e685a558598cf0db10b55885946e678d0a71877037a090000000700848879ef1604cadc1faca3aa22a576750d559c4e124d4cb7293e7393b77286fa8c6dc449eda0a03d342382e84d6d3c29ab95cc923fbe25e134d1c421320a3bffaa17fcd6b5178e322cc47133b3811e3d3bc34998dc7ed029834ad591d9d56c41063d8de2d50a2398e73ff2913a9fe8e954a4e4ca99ceb5737e57193c5f47fd63b16c8b34f256dbac0e5ebd009078df2cb1ca0151ad091adbfee5126d8a59fa5438734bc3e8cc7b7edc10716a0a9b711952cdf96586e06fbace21dc04bdb4a1a2072ce5f72cf02e5256ff74be5e07a5f8d6ec2fa867b2a353bf6ea1b533377803804a49a499d51f1cb71e1cea551598939afe8ff8e8472352e2d5193bc866c000"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, &(0x7f0000001380)='./file1\x00', 0xc4042, 0x0) kernel console output (not intermixed with test programs): atman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.602671][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.628600][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.640069][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.647280][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.673210][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.684804][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.691754][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.718411][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.773829][ T4185] device hsr_slave_0 entered promiscuous mode [ 63.780953][ T4185] device hsr_slave_1 entered promiscuous mode [ 63.815365][ T4186] device hsr_slave_0 entered promiscuous mode [ 63.822346][ T4186] device hsr_slave_1 entered promiscuous mode [ 63.829189][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.837113][ T4186] Cannot create hsr debugfs directory [ 63.847460][ T4187] device hsr_slave_0 entered promiscuous mode [ 63.854238][ T4187] device hsr_slave_1 entered promiscuous mode [ 63.860754][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.869145][ T1334] Bluetooth: hci2: command 0x0409 tx timeout [ 63.873044][ T4187] Cannot create hsr debugfs directory [ 63.875897][ T1334] Bluetooth: hci4: command 0x0409 tx timeout [ 63.886727][ T1334] Bluetooth: hci1: command 0x0409 tx timeout [ 63.893195][ T1334] Bluetooth: hci0: command 0x0409 tx timeout [ 63.906600][ T4191] device hsr_slave_0 entered promiscuous mode [ 63.913469][ T4191] device hsr_slave_1 entered promiscuous mode [ 63.919933][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.927987][ T4191] Cannot create hsr debugfs directory [ 63.951174][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 64.302163][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 64.377327][ T1334] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.446603][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.482176][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.493144][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.500242][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.509143][ T4193] device bridge_slave_0 entered promiscuous mode [ 64.523424][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.539580][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.556963][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.564656][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.572612][ T4193] device bridge_slave_1 entered promiscuous mode [ 64.625692][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.647269][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.677886][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.709171][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.758216][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.778937][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.798103][ T3851] infiniband rxe0: set active [ 64.808230][ T4265] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.812585][ T4193] team0: Port device team_slave_0 added [ 64.823671][ T4193] team0: Port device team_slave_1 added [ 64.876459][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.883537][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.909753][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.922535][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.940152][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.948849][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.961028][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.973608][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.980585][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.007286][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.023386][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.068326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.078103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.102699][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.140651][ T4193] device hsr_slave_0 entered promiscuous mode [ 65.148988][ T4193] device hsr_slave_1 entered promiscuous mode [ 65.155853][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.163750][ T4193] Cannot create hsr debugfs directory [ 65.173400][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.184579][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.213869][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.229935][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.240233][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.247684][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.256556][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.266213][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.279487][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.301825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.310965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.319862][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.326990][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.353445][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.376858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.394011][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.419822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.429829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.438919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.447913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.460800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.480652][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.491644][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.515433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.527813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.540412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.565925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.603761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.615369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.625086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.636316][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.652093][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.702340][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.711158][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.720440][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.729743][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.736858][ T4215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.745934][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.756016][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.764775][ T4215] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.771832][ T4215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.779735][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.788487][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.796338][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.807426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.815137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.844725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.854985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.868979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.877780][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.884878][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.892818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.901581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.910001][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.917112][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.924782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.933606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.943320][ T2286] Bluetooth: hci0: command 0x041b tx timeout [ 65.950269][ T2286] Bluetooth: hci1: command 0x041b tx timeout [ 65.950760][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.956705][ T2286] Bluetooth: hci4: command 0x041b tx timeout [ 65.969505][ T2286] Bluetooth: hci2: command 0x041b tx timeout [ 66.007438][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.017604][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.023301][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 66.026483][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.042037][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.050795][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.060286][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.068987][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.078348][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.086736][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.096710][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.105383][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.114430][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.122747][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.131394][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.139823][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.148603][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.156973][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.165195][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.184088][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.203697][ T4193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.231456][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.242058][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.253448][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.277320][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.288743][ T4193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.301961][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.316047][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.330353][ T4185] device veth0_vlan entered promiscuous mode [ 66.351705][ T4193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.361806][ T4193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.378901][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.391692][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.425674][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.437989][ T4185] device veth1_vlan entered promiscuous mode [ 66.456138][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.464731][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.472371][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.480943][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.489798][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.498519][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.506206][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.518304][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.527548][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.536194][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.543303][ T4215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.551725][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.585333][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.612267][ T4185] device veth0_macvtap entered promiscuous mode [ 66.659294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.671832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.681715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.691337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.703482][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.710591][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.719188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.729062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.742336][ T4185] device veth1_macvtap entered promiscuous mode [ 66.751280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.760593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.808798][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.824141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.842537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.851453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.860214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.870082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.879095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.887860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.895327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.902742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.921449][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.935187][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.942590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.951858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.968777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.978951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.999952][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.012205][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.032707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.042282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.053183][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.062039][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.072319][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.081719][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.123237][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.133861][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.146134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.160241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.182828][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.258370][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.275474][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.286775][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.296006][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.309369][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.318109][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.331185][ T4191] device veth0_vlan entered promiscuous mode [ 67.342762][ T4186] device veth0_vlan entered promiscuous mode [ 67.352042][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.361020][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.372329][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.395900][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.404743][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.414897][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.424731][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.433566][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.440612][ T4215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.448761][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.457570][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.470165][ T4215] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.477260][ T4215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.491690][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.500052][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.507674][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.518569][ T4191] device veth1_vlan entered promiscuous mode [ 67.537137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.555927][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.588858][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.598501][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.609264][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.619787][ T4186] device veth1_vlan entered promiscuous mode [ 67.646456][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.653733][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.663669][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.682015][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.699129][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.727674][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.737982][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.748307][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.761507][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.770074][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.782061][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.791032][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.829885][ T4215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.831872][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.854006][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.854273][ T4215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.862617][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.889062][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.901478][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.911112][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.920053][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.928984][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.945081][ T4186] device veth0_macvtap entered promiscuous mode [ 67.957692][ T4191] device veth0_macvtap entered promiscuous mode [ 67.996685][ T4186] device veth1_macvtap entered promiscuous mode [ 68.017445][ T4191] device veth1_macvtap entered promiscuous mode [ 68.025135][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 68.043492][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 68.049724][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 68.063329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.071373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.086716][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 68.087976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.102066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.110818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.111503][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 68.119808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.148553][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.161779][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.175916][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.186007][ T4187] device veth0_vlan entered promiscuous mode [ 68.194276][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.205470][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.217011][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.224799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.232793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.240874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.249751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.258846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.267840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.282491][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.293953][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.304243][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.314783][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.327455][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.352783][ T4187] device veth1_vlan entered promiscuous mode [ 68.362583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.373875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.383271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.391866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.399518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.408856][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.420453][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.430642][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.442213][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.454083][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.472048][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.481031][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.490233][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.499205][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.537005][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.549620][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.561731][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.586815][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.598115][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.609794][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.621679][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.701349][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.725088][ T4187] device veth0_macvtap entered promiscuous mode [ 68.751098][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.794940][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.827695][ T4187] device veth1_macvtap entered promiscuous mode [ 68.851116][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.870339][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.889963][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.892919][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #92!!! [ 68.909423][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.924660][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.944368][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.955417][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.967400][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.982287][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.012366][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.027947][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.045534][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.054113][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.059347][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.061947][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.086885][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.100942][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.111759][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.123129][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.134231][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.145388][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.167924][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.189992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.202296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.213750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.253427][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.262210][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.263223][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.297055][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.298402][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.319889][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.334147][ T4193] device veth0_vlan entered promiscuous mode [ 69.352474][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.366411][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.379659][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.422633][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.446748][ T4193] device veth1_vlan entered promiscuous mode [ 69.456834][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.476285][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.490465][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.504154][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.523546][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.585114][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.618348][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.642664][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.658201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.681711][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.691336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.716378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.725220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.774379][ T4193] device veth0_macvtap entered promiscuous mode [ 69.835832][ T4193] device veth1_macvtap entered promiscuous mode [ 70.802929][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.822931][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.832921][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.842922][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.852923][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.862986][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.872922][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.882921][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.892937][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 71.375978][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 71.396392][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.402985][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.416395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.416675][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.433505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.451488][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 71.463795][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 71.473619][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 71.479705][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.498962][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 71.548052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.720043][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.740098][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.754365][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.766833][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.871708][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.052709][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.214857][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.401523][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.458286][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.545232][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.577985][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.606264][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.637423][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.668939][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.712567][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.743533][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.762656][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.783117][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.808515][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.809403][ T4348] FAULT_INJECTION: forcing a failure. [ 72.809403][ T4348] name failslab, interval 1, probability 0, space 0, times 1 [ 72.835307][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.859592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.868131][ T4348] CPU: 1 PID: 4348 Comm: syz.2.11 Not tainted syzkaller #0 [ 72.875363][ T4348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 72.885453][ T4348] Call Trace: [ 72.889104][ T4348] [ 72.892065][ T4348] dump_stack_lvl+0x188/0x250 [ 72.896772][ T4348] ? show_regs_print_info+0x20/0x20 [ 72.902006][ T4348] ? load_image+0x410/0x410 [ 72.906545][ T4348] ? __might_sleep+0xf0/0xf0 [ 72.911157][ T4348] ? __lock_acquire+0x7d40/0x7d40 [ 72.916215][ T4348] should_fail+0x383/0x4b0 [ 72.920664][ T4348] should_failslab+0x5/0x20 [ 72.925208][ T4348] slab_pre_alloc_hook+0x51/0xc0 [ 72.930440][ T4348] __kmalloc_node+0x6d/0x3a0 [ 72.935055][ T4348] ? memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 72.941074][ T4348] memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 72.946915][ T4348] new_slab+0x100/0x4b0 [ 72.951117][ T4348] ___slab_alloc+0x807/0xdd0 [ 72.951299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.955721][ T4348] ? new_inode_pseudo+0x77/0x210 [ 72.955752][ T4348] ? new_inode_pseudo+0x77/0x210 [ 72.955774][ T4348] kmem_cache_alloc+0xf0/0x280 [ 72.978506][ T4348] ? lookup_one_common+0x460/0x460 [ 72.983659][ T4348] new_inode_pseudo+0x77/0x210 [ 72.988464][ T4348] new_inode+0x25/0x1d0 [ 72.992669][ T4348] ? start_creating+0x1aa/0x200 [ 72.997548][ T4348] __create_dir+0x6a/0x530 [ 73.001989][ T4348] ? tracefs_create_dir+0x39/0x50 [ 73.007049][ T4348] event_create_dir+0x84b/0xe80 [ 73.011949][ T4348] ? trace_create_new_event+0x2bf/0x3d0 [ 73.017521][ T4348] event_trace_add_tracer+0x1a3/0x390 [ 73.022939][ T4348] trace_array_create_dir+0x77/0x120 [ 73.028254][ T4348] trace_array_create+0x6fa/0xc00 [ 73.033317][ T4348] instance_mkdir+0xc8/0x120 [ 73.037947][ T4348] tracefs_syscall_mkdir+0xb7/0x110 [ 73.043186][ T4348] vfs_mkdir+0x386/0x570 [ 73.047470][ T4348] do_mkdirat+0x1dd/0x5c0 [ 73.051827][ T4348] ? vfs_mkdir+0x570/0x570 [ 73.056276][ T4348] __x64_sys_mkdirat+0x85/0x90 [ 73.061065][ T4348] do_syscall_64+0x4c/0xa0 [ 73.065592][ T4348] ? clear_bhb_loop+0x30/0x80 [ 73.070306][ T4348] ? clear_bhb_loop+0x30/0x80 [ 73.075020][ T4348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.078829][ T4283] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.080971][ T4348] RIP: 0033:0x7f78b45e8559 [ 73.080997][ T4348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.112593][ T4348] RSP: 002b:00007f78b2840028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 73.121043][ T4348] RAX: ffffffffffffffda RBX: 00007f78b486ffa0 RCX: 00007f78b45e8559 [ 73.129040][ T4348] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 73.137051][ T4348] RBP: 00007f78b467f8b0 R08: 0000000000000000 R09: 0000000000000000 [ 73.145055][ T4348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.153063][ T4348] R13: 00007f78b4870038 R14: 00007f78b486ffa0 R15: 00007ffea0a8a338 [ 73.161178][ T4348] [ 73.172487][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.184335][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.193241][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.201962][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.345737][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.377416][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.393615][ T4283] usb 4-1: Using ep0 maxpacket: 32 [ 73.402285][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.444112][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.468201][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.477704][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.554087][ T4283] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.630749][ T4356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'. [ 74.457639][ T4283] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 74.466753][ T4283] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 74.478123][ T4283] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 74.495338][ T4283] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 74.505842][ T4283] usb 4-1: config 1 interface 1 has no altsetting 0 [ 74.791839][ T4367] overlayfs: unrecognized mount option "verity=require" or missing value [ 75.800687][ T4363] sched: RT throttling activated [ 76.296125][ T4377] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 76.296125][ T4377] program syz.3.15 not setting count and/or reply_len properly [ 77.941930][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.823509][ T4283] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 78.832606][ T4283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.663305][ T4283] usb 4-1: can't set config #1, error -71 [ 80.308403][ T4283] usb 4-1: USB disconnect, device number 2 [ 81.029436][ T4424] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.299003][ T4431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25'. [ 81.633159][ T4444] overlayfs: unrecognized mount option "verity=require" or missing value [ 81.704493][ T4443] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 81.704493][ T4443] program syz.3.28 not setting count and/or reply_len properly [ 84.875994][ T4472] zram0: detected capacity change from 0 to 8 [ 86.061729][ T4485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.38'. [ 86.853281][ T7] cfg80211: failed to load regulatory.db [ 87.097102][ T4494] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 87.097102][ T4494] program syz.3.40 not setting count and/or reply_len properly [ 88.539706][ T4504] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.131775][ T26] audit: type=1326 audit(1792023482.114:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.1.49" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63e2c2559 code=0x7ffc0000 [ 90.260891][ T26] audit: type=1326 audit(1792023482.154:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.1.49" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63e2c2559 code=0x7ffc0000 [ 90.513685][ T23] Bluetooth: hci5: command 0x0409 tx timeout [ 90.653949][ T4533] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 90.653949][ T4533] program syz.0.52 not setting count and/or reply_len properly [ 91.416857][ T4504] chnl_net:caif_netlink_parms(): no params data found [ 92.392612][ T4504] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.401153][ T4504] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.409535][ T4504] device bridge_slave_0 entered promiscuous mode [ 92.418388][ T4504] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.426370][ T4504] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.434719][ T4504] device bridge_slave_1 entered promiscuous mode [ 92.460161][ T4504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.472237][ T4504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.583300][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 93.710751][ T4504] team0: Port device team_slave_0 added [ 93.768468][ T4504] team0: Port device team_slave_1 added [ 93.945871][ T4504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.990840][ T4504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.083120][ T4504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.154053][ T4504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.161044][ T4504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.243022][ T4504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.285356][ T155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.410321][ T155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.460139][ T4504] device hsr_slave_0 entered promiscuous mode [ 94.492780][ T4504] device hsr_slave_1 entered promiscuous mode [ 94.517554][ T4504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.535632][ T4504] Cannot create hsr debugfs directory [ 94.564538][ T155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.663118][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 94.686289][ T155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.852816][ T4563] kAFS: unable to lookup cell '.' [ 95.747540][ T4567] FAULT_INJECTION: forcing a failure. [ 95.747540][ T4567] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 95.761848][ T4567] CPU: 0 PID: 4567 Comm: syz.3.61 Not tainted syzkaller #0 [ 95.769091][ T4567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 95.779172][ T4567] Call Trace: [ 95.782470][ T4567] [ 95.785421][ T4567] dump_stack_lvl+0x188/0x250 [ 95.790125][ T4567] ? show_regs_print_info+0x20/0x20 [ 95.795352][ T4567] ? load_image+0x410/0x410 [ 95.799882][ T4567] ? mark_lock+0x94/0x320 [ 95.804231][ T4567] should_fail+0x383/0x4b0 [ 95.808678][ T4567] prepare_alloc_pages+0x1e3/0x5b0 [ 95.813822][ T4567] __alloc_pages+0x11b/0x480 [ 95.818445][ T4567] ? zone_statistics+0x170/0x170 [ 95.823411][ T4567] ? rcu_lock_acquire+0x30/0x30 [ 95.828284][ T4567] ? alloc_pages+0x452/0x560 [ 95.832899][ T4567] __get_free_pages+0x8/0x30 [ 95.837515][ T4567] __tlb_remove_page_size+0x1f2/0x3f0 [ 95.842915][ T4567] unmap_page_range+0xfcf/0x2410 [ 95.847920][ T4567] unmap_vmas+0x131/0x250 [ 95.852277][ T4567] ? unmap_page_range+0x2410/0x2410 [ 95.857489][ T4567] ? __mutex_lock_common+0x435/0x2400 [ 95.862887][ T4567] ? exit_mm_release+0x16/0x30 [ 95.867682][ T4567] exit_mmap+0x3b9/0x640 [ 95.871959][ T4567] ? vm_brk+0x20/0x20 [ 95.875972][ T4567] ? uprobe_clear_state+0x2f6/0x460 [ 95.881192][ T4567] __mmput+0x115/0x390 [ 95.885280][ T4567] exit_mm+0x632/0x7b0 [ 95.889367][ T4567] ? perf_pmu_migrate_context+0xb70/0xb70 [ 95.895115][ T4567] ? do_exit+0x2110/0x2110 [ 95.899629][ T4567] ? __ia32_sys_timer_delete+0x40/0x40 [ 95.905104][ T4567] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 95.910593][ T4567] ? tty_audit_exit+0x149/0x1f0 [ 95.915469][ T4567] do_exit+0x5b8/0x2110 [ 95.919650][ T4567] ? put_task_struct+0x80/0x80 [ 95.924429][ T4567] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 95.930598][ T4567] ? _raw_spin_lock_irq+0xb7/0xf0 [ 95.935672][ T4567] do_group_exit+0x12c/0x2f0 [ 95.940296][ T4567] ? lockdep_hardirqs_on+0x94/0x140 [ 95.945524][ T4567] get_signal+0x7eb/0x12e0 [ 95.949965][ T4567] arch_do_signal_or_restart+0xe6/0x12a0 [ 95.955614][ T4567] ? futex_exit_release+0x1c0/0x1c0 [ 95.960808][ T4567] ? get_sigframe_size+0x10/0x10 [ 95.965744][ T4567] ? __context_tracking_exit+0x4c/0x80 [ 95.971241][ T4567] ? exit_to_user_mode_loop+0x3b/0x130 [ 95.976738][ T4567] exit_to_user_mode_loop+0x9e/0x130 [ 95.982049][ T4567] exit_to_user_mode_prepare+0xee/0x180 [ 95.987612][ T4567] syscall_exit_to_user_mode+0x16/0x40 [ 95.993079][ T4567] do_syscall_64+0x58/0xa0 [ 95.997491][ T4567] ? clear_bhb_loop+0x30/0x80 [ 96.002157][ T4567] ? clear_bhb_loop+0x30/0x80 [ 96.006824][ T4567] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.012712][ T4567] RIP: 0033:0x7f8d73c24559 [ 96.017129][ T4567] Code: Unable to access opcode bytes at RIP 0x7f8d73c2452f. [ 96.024482][ T4567] RSP: 002b:00007f8d71e7c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 96.032892][ T4567] RAX: 0000000000000001 RBX: 00007f8d73eabfa8 RCX: 00007f8d73c24559 [ 96.040858][ T4567] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8d73eabfac [ 96.048831][ T4567] RBP: 00007f8d73eabfa0 R08: 002a33673ebd11d2 R09: 0000000000000000 [ 96.056803][ T4567] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 96.064767][ T4567] R13: 00007f8d73eac038 R14: 00007fff8a16b000 R15: 00007fff8a16b0e8 [ 96.072744][ T4567] [ 96.329707][ T4504] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.401726][ T4504] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.742932][ T4275] Bluetooth: hci5: command 0x0419 tx timeout [ 97.517413][ T4504] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.546078][ T4504] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.782111][ T4504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.838734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.854294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.893449][ T4504] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.922018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.945062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.996148][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.003321][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.043815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.066651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.105090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.128739][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.135919][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.155214][ T4590] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 98.155214][ T4590] program syz.0.64 not setting count and/or reply_len properly [ 98.996678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.355288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.796694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.815223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.886876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.366614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.386565][ T4619] kAFS: unable to lookup cell '.' [ 102.053757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.131507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.173970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.225166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.247305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.363887][ T4634] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 102.363887][ T4634] program syz.4.76 not setting count and/or reply_len properly [ 106.352082][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.439565][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.719235][ T4504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.384320][ T4691] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 107.384320][ T4691] program syz.0.88 not setting count and/or reply_len properly [ 108.149474][ T155] device hsr_slave_0 left promiscuous mode [ 108.209513][ T155] device hsr_slave_1 left promiscuous mode [ 108.255339][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.316290][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.388156][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.441301][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.488082][ T155] device bridge_slave_1 left promiscuous mode [ 108.526198][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.657825][ T155] device bridge_slave_0 left promiscuous mode [ 108.697985][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.835734][ T155] device veth1_macvtap left promiscuous mode [ 108.850222][ T155] device veth0_macvtap left promiscuous mode [ 108.872194][ T155] device veth1_vlan left promiscuous mode [ 108.891061][ T155] device veth0_vlan left promiscuous mode [ 112.746910][ T4732] kAFS: unable to lookup cell '.' [ 113.039604][ T4724] loop4: detected capacity change from 0 to 32768 [ 113.258470][ T4724] XFS (loop4): Mounting V5 Filesystem [ 114.039383][ T4724] XFS (loop4): Internal error (!rhead->h_version || (be32_to_cpu(rhead->h_version) & (~XLOG_VERSION_OKBITS))) at line 2948 of file fs/xfs/xfs_log_recover.c. Caller xlog_valid_rec_header+0x195/0x360 [ 114.081246][ T4724] CPU: 1 PID: 4724 Comm: syz.4.95 Not tainted syzkaller #0 [ 114.088578][ T4724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 114.098643][ T4724] Call Trace: [ 114.101936][ T4724] [ 114.104881][ T4724] dump_stack_lvl+0x188/0x250 [ 114.109567][ T4724] ? show_regs_print_info+0x20/0x20 [ 114.114758][ T4724] ? xfs_rw_bdev+0x460/0x4d0 [ 114.119351][ T4724] xfs_corruption_error+0x117/0x170 [ 114.124551][ T4724] ? xlog_valid_rec_header+0x195/0x360 [ 114.130000][ T4724] xlog_valid_rec_header+0x1e9/0x360 [ 114.135291][ T4724] ? xlog_valid_rec_header+0x195/0x360 [ 114.140762][ T4724] xlog_do_recovery_pass+0x881/0xd10 [ 114.146043][ T4724] ? lock_chain_count+0x20/0x20 [ 114.150883][ T4724] ? xlog_do_io+0x340/0x340 [ 114.155384][ T4724] ? xlog_verify_head+0xf3/0x430 [ 114.160327][ T4724] ? kfree+0xef/0x2a0 [ 114.164314][ T4724] xlog_verify_head+0x137/0x430 [ 114.169176][ T4724] xlog_find_tail+0x6b8/0xa50 [ 114.173851][ T4724] xlog_recover+0x48/0x3e0 [ 114.178272][ T4724] xfs_log_mount+0x375/0x690 [ 114.182873][ T4724] xfs_mountfs+0xafc/0x1ae0 [ 114.187412][ T4724] ? xfs_default_resblks+0x70/0x70 [ 114.192532][ T4724] ? rcu_is_watching+0x11/0xa0 [ 114.197291][ T4724] ? trace_xfs_inode_timestamp_range+0x84/0x1d0 [ 114.203530][ T4724] xfs_fs_fill_super+0x119b/0x13e0 [ 114.208638][ T4724] get_tree_bdev+0x3e6/0x610 [ 114.213221][ T4724] ? xfs_mount_set_dax_mode+0x100/0x100 [ 114.218779][ T4724] vfs_get_tree+0x88/0x270 [ 114.223200][ T4724] do_new_mount+0x247/0xa40 [ 114.227707][ T4724] __se_sys_mount+0x2e3/0x3d0 [ 114.232373][ T4724] ? __x64_sys_mount+0xc0/0xc0 [ 114.237146][ T4724] ? lockdep_hardirqs_on+0x94/0x140 [ 114.242377][ T4724] ? __x64_sys_mount+0x1c/0xc0 [ 114.247158][ T4724] do_syscall_64+0x4c/0xa0 [ 114.251576][ T4724] ? clear_bhb_loop+0x30/0x80 [ 114.256243][ T4724] ? clear_bhb_loop+0x30/0x80 [ 114.260910][ T4724] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.266801][ T4724] RIP: 0033:0x7fe56bfe97ca [ 114.271219][ T4724] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.290818][ T4724] RSP: 002b:00007fe56a23fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 114.299235][ T4724] RAX: ffffffffffffffda RBX: 00007fe56a23fee0 RCX: 00007fe56bfe97ca [ 114.307201][ T4724] RDX: 00002000000000c0 RSI: 0000200000000280 RDI: 00007fe56a23fea0 [ 114.315181][ T4724] RBP: 00002000000000c0 R08: 00007fe56a23fee0 R09: 0000000000008000 [ 114.323146][ T4724] R10: 0000000000008000 R11: 0000000000000246 R12: 0000200000000280 [ 114.331111][ T4724] R13: 00007fe56a23fea0 R14: 00000000000097a7 R15: 0000200000000180 [ 114.339085][ T4724] [ 114.353156][ T4724] XFS (loop4): Corruption detected. Unmount and run xfs_repair [ 114.389261][ T4724] XFS (loop4): xlog_valid_rec_header: unrecognised log version (0). [ 114.428724][ T4724] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 114.594816][ T4724] XFS (loop4): Starting recovery (logdev: internal) [ 114.614533][ T155] team0 (unregistering): Port device team_slave_1 removed [ 114.671597][ T155] team0 (unregistering): Port device team_slave_0 removed [ 114.710498][ T4724] XFS (loop4): Ending recovery (logdev: internal) [ 114.742316][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.758192][ T4724] XFS (loop4): Quotacheck needed: Please wait. [ 114.913930][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.928718][ T4724] XFS (loop4): Quotacheck: Done. [ 115.721411][ T4191] XFS (loop4): Unmounting Filesystem [ 116.817246][ T4772] kAFS: unable to lookup cell '.' [ 119.177852][ T155] bond0 (unregistering): Released all slaves [ 119.247656][ T4759] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 119.278413][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.303572][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.498411][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.544443][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.600837][ T4504] device veth0_vlan entered promiscuous mode [ 119.635964][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.685454][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.746824][ T4504] device veth1_vlan entered promiscuous mode [ 120.143065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 120.157241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 121.024874][ T4813] sctp: [Deprecated]: syz.1.114 (pid 4813) Use of int in max_burst socket option deprecated. [ 121.024874][ T4813] Use struct sctp_assoc_value instead [ 121.142042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.434469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.484242][ T4504] device veth0_macvtap entered promiscuous mode [ 121.496864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 121.644238][ T4504] device veth1_macvtap entered promiscuous mode [ 121.734823][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.228129][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.198499][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.242883][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.262960][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.314075][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.347726][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.374085][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.415537][ T4504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.451905][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.478023][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.634930][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.690132][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.824770][ T4835] kAFS: unable to lookup cell '.' [ 123.854763][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.068226][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.246481][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.424025][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.550522][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.561379][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.572822][ T4504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.582933][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.592200][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.604219][ T4504] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.614154][ T4504] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.623632][ T4504] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.632351][ T4504] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.884001][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.891887][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.933194][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.016859][ T4359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.032536][ T4359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.076024][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.062050][ T4859] overlayfs: unrecognized mount option "verity=require" or missing value [ 130.335880][ T4896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.134'. [ 132.218277][ T26] audit: type=1326 audit(1792023524.204:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.0.139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd4001559 code=0x7ffc0000 [ 132.293605][ T26] audit: type=1326 audit(1792023524.204:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.0.139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4dd4001559 code=0x7ffc0000 [ 132.897664][ T26] audit: type=1326 audit(1792023524.204:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.0.139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd4001559 code=0x7ffc0000 [ 132.987209][ T4931] kAFS: unable to lookup cell '.' [ 133.446847][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.450187][ T26] audit: type=1326 audit(1792023524.204:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.0.139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4dd4001559 code=0x7ffc0000 [ 133.453218][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.558107][ T26] audit: type=1326 audit(1792023524.204:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.0.139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd4001559 code=0x7ffc0000 [ 135.838752][ T26] audit: type=1326 audit(1792023524.204:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.0.139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f4dd4001559 code=0x7ffc0000 [ 136.472691][ T4953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.147'. [ 137.261609][ T26] audit: type=1326 audit(1792023524.204:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.0.139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd4001559 code=0x7ffc0000 [ 138.651562][ T4973] syz.1.151 uses obsolete (PF_INET,SOCK_PACKET) [ 139.027755][ T4977] FAULT_INJECTION: forcing a failure. [ 139.027755][ T4977] name failslab, interval 1, probability 0, space 0, times 0 [ 139.093914][ T4979] kAFS: unable to lookup cell '.' [ 139.283132][ T4977] CPU: 1 PID: 4977 Comm: syz.3.153 Not tainted syzkaller #0 [ 139.290490][ T4977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 139.300578][ T4977] Call Trace: [ 139.303885][ T4977] [ 139.306840][ T4977] dump_stack_lvl+0x188/0x250 [ 139.311553][ T4977] ? show_regs_print_info+0x20/0x20 [ 139.316794][ T4977] ? load_image+0x410/0x410 [ 139.321335][ T4977] ? __lock_acquire+0x7d40/0x7d40 [ 139.326388][ T4977] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 139.332406][ T4977] should_fail+0x383/0x4b0 [ 139.336856][ T4977] should_failslab+0x5/0x20 [ 139.341382][ T4977] slab_pre_alloc_hook+0x51/0xc0 [ 139.346349][ T4977] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 139.352707][ T4977] ? proc_alloc_inode+0x19/0xa0 [ 139.357590][ T4977] kmem_cache_alloc+0x3d/0x280 [ 139.362382][ T4977] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 139.368746][ T4977] proc_alloc_inode+0x19/0xa0 [ 139.373462][ T4977] ? proc_invalidate_siblings_dcache+0x650/0x650 [ 139.379819][ T4977] new_inode_pseudo+0x5f/0x210 [ 139.384614][ T4977] new_inode+0x25/0x1d0 [ 139.388806][ T4977] proc_pid_make_inode+0x20/0x1a0 [ 139.393868][ T4977] proc_pid_instantiate+0x50/0x2b0 [ 139.399015][ T4977] proc_pid_lookup+0x2c4/0x3d0 [ 139.403811][ T4977] proc_root_lookup+0x1c/0x50 [ 139.408519][ T4977] __lookup_slow+0x29d/0x410 [ 139.413140][ T4977] ? lookup_one_len+0x2d0/0x2d0 [ 139.418024][ T4977] ? step_into+0xac6/0xcd0 [ 139.422473][ T4977] ? down_read+0x1aa/0x2e0 [ 139.426920][ T4977] lookup_slow+0x53/0x70 [ 139.431193][ T4977] walk_component+0x314/0x460 [ 139.435909][ T4977] link_path_walk+0x688/0xde0 [ 139.440638][ T4977] ? handle_lookup_down+0x130/0x130 [ 139.445876][ T4977] path_lookupat+0x83/0x420 [ 139.450419][ T4977] filename_lookup+0x21e/0x550 [ 139.455218][ T4977] ? __lock_acquire+0x7d40/0x7d40 [ 139.460272][ T4977] ? hashlen_string+0x110/0x110 [ 139.465168][ T4977] ? rcu_lock_release+0x20/0x20 [ 139.470055][ T4977] ? noop_direct_IO+0x10/0x10 [ 139.474778][ T4977] ? strncpy_from_user+0x1f4/0x350 [ 139.479922][ T4977] ? getname_flags+0x1f9/0x4f0 [ 139.484722][ T4977] user_path_at_empty+0x40/0x190 [ 139.489821][ T4977] __se_sys_mount+0x2a4/0x3d0 [ 139.494562][ T4977] ? __x64_sys_mount+0xc0/0xc0 [ 139.499370][ T4977] ? lockdep_hardirqs_on+0x94/0x140 [ 139.504603][ T4977] ? __x64_sys_mount+0x1c/0xc0 [ 139.509408][ T4977] do_syscall_64+0x4c/0xa0 [ 139.513856][ T4977] ? clear_bhb_loop+0x30/0x80 [ 139.518591][ T4977] ? clear_bhb_loop+0x30/0x80 [ 139.523299][ T4977] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.529222][ T4977] RIP: 0033:0x7f8d73c24559 [ 139.533666][ T4977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.553301][ T4977] RSP: 002b:00007f8d71e7c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 139.561749][ T4977] RAX: ffffffffffffffda RBX: 00007f8d73eabfa0 RCX: 00007f8d73c24559 [ 139.569751][ T4977] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000000 [ 139.577752][ T4977] RBP: 00007f8d73cbb8b0 R08: 0000000000000000 R09: 0000000000000000 [ 139.585755][ T4977] R10: 00000000002504e0 R11: 0000000000000246 R12: 0000000000000000 [ 139.593763][ T4977] R13: 00007f8d73eac038 R14: 00007f8d73eabfa0 R15: 00007fff8a16b0e8 [ 139.601781][ T4977] [ 142.626358][ T5001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.161'. [ 145.218004][ T5024] kAFS: unable to lookup cell '.' [ 146.993510][ T5039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.173'. [ 148.627470][ T5050] capability: warning: `syz.5.159' uses 32-bit capabilities (legacy support in use) [ 154.540050][ T5106] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 154.605535][ T5105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.188'. [ 155.751062][ T5115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.140091][ T5166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.205'. [ 160.192342][ T5168] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 164.345081][ T5207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 166.310600][ T5249] CIFS mount error: No usable UNC path provided in device string! [ 166.310600][ T5249] [ 166.321022][ T5249] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 167.996044][ T5255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.230'. [ 168.450062][ T5243] loop0: detected capacity change from 0 to 32768 [ 168.787284][ T5243] XFS (loop0): Mounting V5 Filesystem [ 168.884608][ T5243] XFS (loop0): Internal error (!rhead->h_version || (be32_to_cpu(rhead->h_version) & (~XLOG_VERSION_OKBITS))) at line 2948 of file fs/xfs/xfs_log_recover.c. Caller xlog_valid_rec_header+0x195/0x360 [ 168.917738][ T5243] CPU: 1 PID: 5243 Comm: syz.0.227 Not tainted syzkaller #0 [ 168.925168][ T5243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 168.935253][ T5243] Call Trace: [ 168.938560][ T5243] [ 168.941515][ T5243] dump_stack_lvl+0x188/0x250 [ 168.946228][ T5243] ? show_regs_print_info+0x20/0x20 [ 168.951470][ T5243] ? xfs_rw_bdev+0x460/0x4d0 [ 168.956087][ T5243] xfs_corruption_error+0x117/0x170 [ 168.961352][ T5243] ? xlog_valid_rec_header+0x195/0x360 [ 168.966937][ T5243] xlog_valid_rec_header+0x1e9/0x360 [ 168.972253][ T5243] ? xlog_valid_rec_header+0x195/0x360 [ 168.977746][ T5243] xlog_do_recovery_pass+0x881/0xd10 [ 168.983080][ T5243] ? lock_chain_count+0x20/0x20 [ 168.987963][ T5243] ? xlog_do_io+0x340/0x340 [ 168.992510][ T5243] ? xlog_verify_head+0xf3/0x430 [ 168.997474][ T5243] ? kfree+0xef/0x2a0 [ 169.001483][ T5243] xlog_verify_head+0x137/0x430 [ 169.006386][ T5243] xlog_find_tail+0x6b8/0xa50 [ 169.011103][ T5243] xlog_recover+0x48/0x3e0 [ 169.015556][ T5243] xfs_log_mount+0x375/0x690 [ 169.020183][ T5243] xfs_mountfs+0xafc/0x1ae0 [ 169.024733][ T5243] ? xfs_default_resblks+0x70/0x70 [ 169.029885][ T5243] ? rcu_is_watching+0x11/0xa0 [ 169.034679][ T5243] ? trace_xfs_inode_timestamp_range+0x84/0x1d0 [ 169.040957][ T5243] xfs_fs_fill_super+0x119b/0x13e0 [ 169.046107][ T5243] get_tree_bdev+0x3e6/0x610 [ 169.050736][ T5243] ? xfs_mount_set_dax_mode+0x100/0x100 [ 169.056315][ T5243] vfs_get_tree+0x88/0x270 [ 169.060850][ T5243] do_new_mount+0x247/0xa40 [ 169.065440][ T5243] __se_sys_mount+0x2e3/0x3d0 [ 169.070159][ T5243] ? __x64_sys_mount+0xc0/0xc0 [ 169.074958][ T5243] ? lockdep_hardirqs_on+0x94/0x140 [ 169.080192][ T5243] ? __x64_sys_mount+0x1c/0xc0 [ 169.084986][ T5243] do_syscall_64+0x4c/0xa0 [ 169.089443][ T5243] ? clear_bhb_loop+0x30/0x80 [ 169.094148][ T5243] ? clear_bhb_loop+0x30/0x80 [ 169.098851][ T5243] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.104775][ T5243] RIP: 0033:0x7f4dd40027ca [ 169.109226][ T5243] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.128865][ T5243] RSP: 002b:00007f4dd2258e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 169.137309][ T5243] RAX: ffffffffffffffda RBX: 00007f4dd2258ee0 RCX: 00007f4dd40027ca [ 169.145301][ T5243] RDX: 00002000000000c0 RSI: 0000200000000280 RDI: 00007f4dd2258ea0 [ 169.153289][ T5243] RBP: 00002000000000c0 R08: 00007f4dd2258ee0 R09: 0000000000008000 [ 169.161269][ T5243] R10: 0000000000008000 R11: 0000000000000246 R12: 0000200000000280 [ 169.169238][ T5243] R13: 00007f4dd2258ea0 R14: 00000000000097a7 R15: 0000200000000180 [ 169.177229][ T5243] [ 169.241410][ T5289] kAFS: unable to lookup cell '.' [ 169.541114][ T4192] Bluetooth: hci5: link tx timeout [ 169.548197][ T4192] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.930671][ T5243] XFS (loop0): Corruption detected. Unmount and run xfs_repair [ 169.971021][ T5243] XFS (loop0): xlog_valid_rec_header: unrecognised log version (0). [ 170.077153][ T5243] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 170.196205][ T5243] XFS (loop0): Starting recovery (logdev: internal) [ 170.210742][ T5307] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 170.292937][ T5243] XFS (loop0): Ending recovery (logdev: internal) [ 170.320991][ T5243] XFS (loop0): Quotacheck needed: Please wait. [ 170.375874][ T5243] XFS (loop0): Quotacheck: Done. [ 170.551474][ T5311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'. [ 170.570443][ T4185] XFS (loop0): Unmounting Filesystem [ 171.551694][ T26] audit: type=1326 audit(1792023563.534:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5319 comm="syz.4.248" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe56bfe8559 code=0x0 [ 171.622923][ T4278] Bluetooth: hci5: command 0x0406 tx timeout [ 171.793221][ T5329] FAULT_INJECTION: forcing a failure. [ 171.793221][ T5329] name failslab, interval 1, probability 0, space 0, times 0 [ 171.806561][ T5329] CPU: 1 PID: 5329 Comm: syz.5.240 Not tainted syzkaller #0 [ 171.813884][ T5329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 171.823964][ T5329] Call Trace: [ 171.827266][ T5329] [ 171.830216][ T5329] dump_stack_lvl+0x188/0x250 [ 171.834927][ T5329] ? show_regs_print_info+0x20/0x20 [ 171.840183][ T5329] ? load_image+0x410/0x410 [ 171.844715][ T5329] ? __might_sleep+0xf0/0xf0 [ 171.849326][ T5329] ? __lock_acquire+0x7d40/0x7d40 [ 171.854374][ T5329] ? verify_lock_unused+0x140/0x140 [ 171.859602][ T5329] should_fail+0x383/0x4b0 [ 171.864057][ T5329] should_failslab+0x5/0x20 [ 171.868586][ T5329] slab_pre_alloc_hook+0x51/0xc0 [ 171.873634][ T5329] ? __kernfs_new_node+0xa8/0x6b0 [ 171.878686][ T5329] __kmalloc_track_caller+0x69/0x330 [ 171.883993][ T5329] ? __kernfs_new_node+0xa8/0x6b0 [ 171.889049][ T5329] kstrdup_const+0x51/0x90 [ 171.893489][ T5329] __kernfs_new_node+0xa8/0x6b0 [ 171.898359][ T5329] ? widen_string+0x3b/0x320 [ 171.902981][ T5329] ? kernfs_new_node+0x250/0x250 [ 171.907958][ T5329] ? snprintf+0xe5/0x140 [ 171.912228][ T5329] kernfs_new_node+0x148/0x250 [ 171.917027][ T5329] __kernfs_create_file+0x47/0x2e0 [ 171.922189][ T5329] cgroup_addrm_files+0xac3/0x1020 [ 171.927538][ T5329] ? rcu_lock_release+0x20/0x20 [ 171.932419][ T5329] ? __lock_acquire+0x7d40/0x7d40 [ 171.937520][ T5329] css_populate_dir+0x155/0x350 [ 171.942400][ T5329] cgroup_apply_control_enable+0x641/0xb00 [ 171.948247][ T5329] cgroup_mkdir+0xcbd/0xeb0 [ 171.952782][ T5329] ? css_task_iter_end+0x280/0x280 [ 171.957918][ T5329] ? do_raw_spin_unlock+0x11d/0x230 [ 171.963156][ T5329] ? kernfs_iop_permission+0x22d/0x310 [ 171.968644][ T5329] ? css_task_iter_end+0x280/0x280 [ 171.973779][ T5329] kernfs_iop_mkdir+0x23d/0x3d0 [ 171.978923][ T5329] vfs_mkdir+0x386/0x570 [ 171.983216][ T5329] do_mkdirat+0x1dd/0x5c0 [ 171.987607][ T5329] ? vfs_mkdir+0x570/0x570 [ 171.992059][ T5329] __x64_sys_mkdirat+0x85/0x90 [ 171.996858][ T5329] do_syscall_64+0x4c/0xa0 [ 172.001308][ T5329] ? clear_bhb_loop+0x30/0x80 [ 172.006012][ T5329] ? clear_bhb_loop+0x30/0x80 [ 172.010722][ T5329] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.016641][ T5329] RIP: 0033:0x7f6fbd5ee559 [ 172.021087][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.040720][ T5329] RSP: 002b:00007f6fbb846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 172.049158][ T5329] RAX: ffffffffffffffda RBX: 00007f6fbd875fa0 RCX: 00007f6fbd5ee559 [ 172.057152][ T5329] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 172.065229][ T5329] RBP: 00007f6fbd6858b0 R08: 0000000000000000 R09: 0000000000000000 [ 172.073229][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.081202][ T5329] R13: 00007f6fbd876038 R14: 00007f6fbd875fa0 R15: 00007ffcb9d08078 [ 172.089212][ T5329] [ 172.115865][ T5329] cgroup: cgroup_addrm_files: failed to add effective_mems, err=-12 [ 172.124466][ T5331] ======================================================= [ 172.124466][ T5331] WARNING: The mand mount option has been deprecated and [ 172.124466][ T5331] and is ignored by this kernel. Remove the mand [ 172.124466][ T5331] option from the mount to silence this warning. [ 172.124466][ T5331] ======================================================= [ 172.197591][ T26] audit: type=1326 audit(1792023564.184:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5319 comm="syz.4.248" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56bfe8559 code=0x7ffc0000 [ 172.264162][ T5334] overlayfs: overlapping lowerdir path [ 172.300910][ T26] audit: type=1326 audit(1792023564.184:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5319 comm="syz.4.248" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56bfe8559 code=0x7ffc0000 [ 172.429829][ T26] audit: type=1326 audit(1792023564.184:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5319 comm="syz.4.248" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe56bfa8d8e code=0x7ffc0000 [ 172.494725][ T26] audit: type=1326 audit(1792023564.184:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5319 comm="syz.4.248" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe56bfa8d8e code=0x7ffc0000 [ 173.071628][ T5345] program syz.0.244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.122449][ T26] audit: type=1326 audit(1792023564.184:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5319 comm="syz.4.248" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe56bfa8d8e code=0x7ffc0000 [ 173.164975][ T5345] binder: BINDER_SET_CONTEXT_MGR already set [ 173.171458][ T5345] binder: 5341:5345 ioctl 4018620d 200000004a80 returned -16 [ 173.232989][ T26] audit: type=1326 audit(1792023564.184:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5319 comm="syz.4.248" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe56bfa8d8e code=0x7ffc0000 [ 173.294238][ T26] audit: type=1326 audit(1792023564.184:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5319 comm="syz.4.248" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe56bfa8d8e code=0x7ffc0000 [ 173.340014][ T26] audit: type=1326 audit(1792023564.184:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5319 comm="syz.4.248" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe56bfa8d8e code=0x7ffc0000 [ 173.393220][ T26] audit: type=1326 audit(1792023564.184:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5319 comm="syz.4.248" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe56bfa8d8e code=0x7ffc0000 [ 176.790411][ T5402] fuse: Bad value for 'fd' [ 176.873640][ T5403] kAFS: unable to lookup cell '.' [ 180.189075][ T5453] kAFS: unable to lookup cell '.' [ 180.318834][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 180.318849][ T26] audit: type=1326 audit(1792023572.304:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.4.264" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe56bfe8559 code=0x0 [ 181.855866][ T5448] loop0: detected capacity change from 0 to 32768 [ 182.106381][ T5448] XFS (loop0): Mounting V5 Filesystem [ 182.449248][ T5448] XFS (loop0): Internal error (!rhead->h_version || (be32_to_cpu(rhead->h_version) & (~XLOG_VERSION_OKBITS))) at line 2948 of file fs/xfs/xfs_log_recover.c. Caller xlog_valid_rec_header+0x195/0x360 [ 182.918454][ T5448] CPU: 1 PID: 5448 Comm: syz.0.278 Not tainted syzkaller #0 [ 182.925824][ T5448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 182.935912][ T5448] Call Trace: [ 182.939221][ T5448] [ 182.942178][ T5448] dump_stack_lvl+0x188/0x250 [ 182.946976][ T5448] ? show_regs_print_info+0x20/0x20 [ 182.952214][ T5448] ? xfs_rw_bdev+0x460/0x4d0 [ 182.956841][ T5448] xfs_corruption_error+0x117/0x170 [ 182.962063][ T5448] ? xlog_valid_rec_header+0x195/0x360 [ 182.967548][ T5448] xlog_valid_rec_header+0x1e9/0x360 [ 182.972851][ T5448] ? xlog_valid_rec_header+0x195/0x360 [ 182.978341][ T5448] xlog_do_recovery_pass+0x881/0xd10 [ 182.983660][ T5448] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 182.989339][ T5448] ? xlog_do_io+0x340/0x340 [ 182.993918][ T5448] ? xlog_verify_head+0xf3/0x430 [ 182.998898][ T5448] ? kfree+0xef/0x2a0 [ 183.002924][ T5448] xlog_verify_head+0x137/0x430 [ 183.007831][ T5448] xlog_find_tail+0x6b8/0xa50 [ 183.012553][ T5448] xlog_recover+0x48/0x3e0 [ 183.017030][ T5448] xfs_log_mount+0x375/0x690 [ 183.021648][ T5448] xfs_mountfs+0xafc/0x1ae0 [ 183.026180][ T5448] ? xfs_default_resblks+0x70/0x70 [ 183.031324][ T5448] ? rcu_is_watching+0x11/0xa0 [ 183.036110][ T5448] ? trace_xfs_inode_timestamp_range+0x84/0x1d0 [ 183.042365][ T5448] xfs_fs_fill_super+0x119b/0x13e0 [ 183.047491][ T5448] get_tree_bdev+0x3e6/0x610 [ 183.052096][ T5448] ? xfs_mount_set_dax_mode+0x100/0x100 [ 183.057650][ T5448] vfs_get_tree+0x88/0x270 [ 183.062079][ T5448] do_new_mount+0x247/0xa40 [ 183.066600][ T5448] __se_sys_mount+0x2e3/0x3d0 [ 183.071290][ T5448] ? __x64_sys_mount+0xc0/0xc0 [ 183.076079][ T5448] ? lockdep_hardirqs_on+0x94/0x140 [ 183.081286][ T5448] ? __x64_sys_mount+0x1c/0xc0 [ 183.086061][ T5448] do_syscall_64+0x4c/0xa0 [ 183.090493][ T5448] ? clear_bhb_loop+0x30/0x80 [ 183.095171][ T5448] ? clear_bhb_loop+0x30/0x80 [ 183.099856][ T5448] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 183.105754][ T5448] RIP: 0033:0x7f4dd40027ca [ 183.110267][ T5448] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.129878][ T5448] RSP: 002b:00007f4dd2258e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 183.138394][ T5448] RAX: ffffffffffffffda RBX: 00007f4dd2258ee0 RCX: 00007f4dd40027ca [ 183.146382][ T5448] RDX: 00002000000000c0 RSI: 0000200000000280 RDI: 00007f4dd2258ea0 [ 183.154378][ T5448] RBP: 00002000000000c0 R08: 00007f4dd2258ee0 R09: 0000000000008000 [ 183.162352][ T5448] R10: 0000000000008000 R11: 0000000000000246 R12: 0000200000000280 [ 183.170325][ T5448] R13: 00007f4dd2258ea0 R14: 00000000000097a7 R15: 0000200000000180 [ 183.178494][ T5448] [ 183.241427][ T4192] Bluetooth: hci5: hardware error 0x18 [ 183.337992][ T5448] XFS (loop0): Corruption detected. Unmount and run xfs_repair [ 183.357691][ T5448] XFS (loop0): xlog_valid_rec_header: unrecognised log version (0). [ 183.533723][ T5448] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 184.804347][ T5448] XFS (loop0): Starting recovery (logdev: internal) [ 185.235883][ T5448] XFS (loop0): Ending recovery (logdev: internal) [ 185.348059][ T5448] XFS (loop0): Quotacheck needed: Please wait. [ 186.818693][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 186.825259][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 187.821945][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 187.998839][ T5448] XFS (loop0): Quotacheck: Done. [ 188.104660][ T5545] FAULT_INJECTION: forcing a failure. [ 188.104660][ T5545] name failslab, interval 1, probability 0, space 0, times 0 [ 188.133217][ T5545] CPU: 1 PID: 5545 Comm: syz.4.299 Not tainted syzkaller #0 [ 188.140578][ T5545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 188.142194][ T5539] kAFS: unable to lookup cell '.' [ 188.150658][ T5545] Call Trace: [ 188.150671][ T5545] [ 188.150679][ T5545] dump_stack_lvl+0x188/0x250 [ 188.150709][ T5545] ? show_regs_print_info+0x20/0x20 [ 188.150728][ T5545] ? load_image+0x410/0x410 [ 188.150750][ T5545] ? __lock_acquire+0x7d40/0x7d40 [ 188.150778][ T5545] should_fail+0x383/0x4b0 [ 188.150803][ T5545] should_failslab+0x5/0x20 [ 188.150821][ T5545] slab_pre_alloc_hook+0x51/0xc0 [ 188.195369][ T5545] ? __se_sys_mount+0x9b/0x3d0 [ 188.200272][ T5545] __kmalloc_track_caller+0x69/0x330 [ 188.205580][ T5545] ? __se_sys_mount+0x9b/0x3d0 [ 188.210353][ T5545] ? strnlen_user+0x19b/0x250 [ 188.215118][ T5545] strndup_user+0x71/0x150 [ 188.219548][ T5545] __se_sys_mount+0x9b/0x3d0 [ 188.224139][ T5545] ? __x64_sys_mount+0xc0/0xc0 [ 188.228905][ T5545] ? lockdep_hardirqs_on+0x94/0x140 [ 188.234097][ T5545] ? __x64_sys_mount+0x1c/0xc0 [ 188.238871][ T5545] do_syscall_64+0x4c/0xa0 [ 188.243284][ T5545] ? clear_bhb_loop+0x30/0x80 [ 188.247969][ T5545] ? clear_bhb_loop+0x30/0x80 [ 188.252651][ T5545] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 188.258540][ T5545] RIP: 0033:0x7fe56bfe8559 [ 188.262969][ T5545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.282774][ T5545] RSP: 002b:00007fe56a240028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 188.291232][ T5545] RAX: ffffffffffffffda RBX: 00007fe56c26ffa0 RCX: 00007fe56bfe8559 [ 188.299335][ T5545] RDX: 0000200000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.307338][ T5545] RBP: 00007fe56c07f8b0 R08: 0000000000000000 R09: 0000000000000000 [ 188.315341][ T5545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.323350][ T5545] R13: 00007fe56c270038 R14: 00007fe56c26ffa0 R15: 00007fff39ba0458 [ 188.331389][ T5545] [ 188.415397][ T4185] XFS (loop0): Unmounting Filesystem [ 188.881849][ T5564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.303'. [ 188.990931][ T5569] Unsupported ieee802154 address type: 0 [ 191.156536][ T4201] Bluetooth: hci2: link tx timeout [ 191.162320][ T4201] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.948906][ T5613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.314'. [ 191.981030][ T5615] kAFS: unable to lookup cell '.' [ 192.244944][ T5628] netlink: 'syz.4.317': attribute type 10 has an invalid length. [ 193.989591][ T4553] Bluetooth: hci2: command 0x0406 tx timeout [ 194.383049][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.389404][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.585443][ T5628] team0: Port device netdevsim0 added [ 194.593368][ T5634] netlink: 'syz.4.317': attribute type 10 has an invalid length. [ 194.725355][ T5639] WARNING! power/level is deprecated; use power/control instead [ 196.183843][ T5660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.325'. [ 196.317700][ T5664] process 'syz.1.328' launched './file0' with NULL argv: empty string added [ 197.813258][ T5678] kAFS: unable to lookup cell '.' [ 198.101385][ T5694] fuseblk: Bad value for 'fd' [ 198.393511][ T5704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'. [ 198.422513][ T5707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 198.472590][ T5707] netlink: 64 bytes leftover after parsing attributes in process `syz.3.319'. [ 198.541923][ T5707] device geneve2 entered promiscuous mode [ 198.873810][ T5724] kAFS: unable to lookup cell '.' [ 199.020023][ T5731] nvme_fcloop: unknown parameter or missing value 'ww' [ 199.307505][ T5741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.352'. [ 202.060802][ T5786] tmpfs: Bad value for 'mpol' [ 202.397614][ T5796] 9pnet: p9_fd_create_tcp (5796): problem connecting socket to 127.0.0.1 [ 203.210561][ T5802] FAULT_INJECTION: forcing a failure. [ 203.210561][ T5802] name failslab, interval 1, probability 0, space 0, times 0 [ 203.238344][ T5805] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 203.251860][ T5802] CPU: 0 PID: 5802 Comm: syz.5.366 Not tainted syzkaller #0 [ 203.259280][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 203.269363][ T5802] Call Trace: [ 203.272668][ T5802] [ 203.275628][ T5802] dump_stack_lvl+0x188/0x250 [ 203.280368][ T5802] ? show_regs_print_info+0x20/0x20 [ 203.285596][ T5802] ? load_image+0x410/0x410 [ 203.290105][ T5802] ? __might_sleep+0xf0/0xf0 [ 203.294702][ T5802] ? __lock_acquire+0x7d40/0x7d40 [ 203.299729][ T5802] should_fail+0x383/0x4b0 [ 203.304163][ T5802] should_failslab+0x5/0x20 [ 203.308702][ T5802] slab_pre_alloc_hook+0x51/0xc0 [ 203.313654][ T5802] __kmalloc+0x6b/0x340 [ 203.317827][ T5802] ? xfrm_state_init+0xe0/0x470 [ 203.322678][ T5802] xfrm_state_init+0xe0/0x470 [ 203.327354][ T5802] xfrm_net_init+0x1a3/0xe70 [ 203.331940][ T5802] ? policy_hash_direct+0x5b0/0x5b0 [ 203.337149][ T5802] ops_init+0x360/0x5f0 [ 203.341320][ T5802] setup_net+0x39e/0xa10 [ 203.345556][ T5802] ? copy_net_ns+0x5b0/0x5b0 [ 203.350136][ T5802] ? copy_net_ns+0x324/0x5b0 [ 203.354727][ T5802] ? down_read_killable+0x1ce/0x340 [ 203.359948][ T5802] copy_net_ns+0x33e/0x5b0 [ 203.364363][ T5802] create_new_namespaces+0x3ce/0x700 [ 203.369659][ T5802] unshare_nsproxy_namespaces+0x116/0x160 [ 203.375379][ T5802] ksys_unshare+0x4f6/0x8e0 [ 203.379881][ T5802] ? __lock_acquire+0x7d40/0x7d40 [ 203.385076][ T5802] ? sighand_ctor+0x40/0x40 [ 203.389572][ T5802] ? lock_chain_count+0x20/0x20 [ 203.394417][ T5802] ? syscall_enter_from_user_mode+0x21/0x70 [ 203.400313][ T5802] __x64_sys_unshare+0x34/0x40 [ 203.405111][ T5802] do_syscall_64+0x4c/0xa0 [ 203.409557][ T5802] ? clear_bhb_loop+0x30/0x80 [ 203.414262][ T5802] ? clear_bhb_loop+0x30/0x80 [ 203.418965][ T5802] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 203.424861][ T5802] RIP: 0033:0x7f6fbd5ee559 [ 203.429310][ T5802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.448920][ T5802] RSP: 002b:00007f6fbb846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 203.457337][ T5802] RAX: ffffffffffffffda RBX: 00007f6fbd875fa0 RCX: 00007f6fbd5ee559 [ 203.465306][ T5802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 203.473270][ T5802] RBP: 00007f6fbd6858b0 R08: 0000000000000000 R09: 0000000000000000 [ 203.481236][ T5802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.489205][ T5802] R13: 00007f6fbd876038 R14: 00007f6fbd875fa0 R15: 00007ffcb9d08078 [ 203.497192][ T5802] [ 203.631511][ T5804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 209.643497][ T26] audit: type=1326 audit(1792023602.634:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.1.382" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63e2c2559 code=0x7fc00000 [ 209.763069][ T26] audit: type=1326 audit(1792023602.654:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.1.382" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fe63e2c2559 code=0x7fc00000 [ 209.817003][ T4192] Bluetooth: Wrong link type (-22) [ 209.870364][ T5865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.383'. [ 209.910380][ T26] audit: type=1326 audit(1792023602.654:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.1.382" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63e2c2559 code=0x7fc00000 [ 210.018256][ T5869] kAFS: unable to lookup cell '.' [ 210.093947][ T5873] netlink: 'syz.4.387': attribute type 8 has an invalid length. [ 210.668822][ T5879] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 211.525382][ T5879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.719512][ T5886] netdevsim netdevsim4: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 213.409309][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.397'. [ 213.672224][ T5911] kAFS: unable to lookup cell '.' [ 215.969916][ T5902] device hsr_slave_1 left promiscuous mode [ 216.002608][ T5927] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.010678][ T5927] netlink: 6 bytes leftover after parsing attributes in process `syz.3.403'. [ 216.260570][ T5938] netlink: 16 bytes leftover after parsing attributes in process `syz.4.407'. [ 218.304712][ T5948] netlink: 14 bytes leftover after parsing attributes in process `syz.0.412'. [ 218.474785][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.416'. [ 221.811598][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.423'. [ 222.694926][ T5986] FAULT_INJECTION: forcing a failure. [ 222.694926][ T5986] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 222.708360][ T5986] CPU: 1 PID: 5986 Comm: syz.0.427 Not tainted syzkaller #0 [ 222.715669][ T5986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 222.725750][ T5986] Call Trace: [ 222.729031][ T5986] [ 222.731957][ T5986] dump_stack_lvl+0x188/0x250 [ 222.736646][ T5986] ? show_regs_print_info+0x20/0x20 [ 222.741881][ T5986] ? load_image+0x410/0x410 [ 222.746394][ T5986] should_fail+0x383/0x4b0 [ 222.750816][ T5986] prepare_alloc_pages+0x1e3/0x5b0 [ 222.755938][ T5986] __alloc_pages+0x11b/0x480 [ 222.760534][ T5986] ? zone_statistics+0x170/0x170 [ 222.765484][ T5986] ? rcu_lock_acquire+0x30/0x30 [ 222.770337][ T5986] ? alloc_pages+0x452/0x560 [ 222.774934][ T5986] __get_free_pages+0x8/0x30 [ 222.779527][ T5986] __tlb_remove_page_size+0x1f2/0x3f0 [ 222.784913][ T5986] unmap_page_range+0xfcf/0x2410 [ 222.789870][ T5986] unmap_vmas+0x131/0x250 [ 222.794226][ T5986] ? unmap_page_range+0x2410/0x2410 [ 222.799424][ T5986] ? __mutex_lock_common+0x435/0x2400 [ 222.804799][ T5986] ? exit_mm_release+0x16/0x30 [ 222.809578][ T5986] exit_mmap+0x3b9/0x640 [ 222.813836][ T5986] ? vm_brk+0x20/0x20 [ 222.817833][ T5986] ? uprobe_clear_state+0x2f6/0x460 [ 222.823035][ T5986] __mmput+0x115/0x390 [ 222.827109][ T5986] exit_mm+0x632/0x7b0 [ 222.831174][ T5986] ? perf_pmu_migrate_context+0xb70/0xb70 [ 222.836908][ T5986] ? do_exit+0x2110/0x2110 [ 222.841325][ T5986] ? __ia32_sys_timer_delete+0x40/0x40 [ 222.846869][ T5986] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 222.852330][ T5986] ? tty_audit_exit+0x149/0x1f0 [ 222.857444][ T5986] do_exit+0x5b8/0x2110 [ 222.861604][ T5986] ? put_task_struct+0x80/0x80 [ 222.866366][ T5986] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 222.872354][ T5986] ? _raw_spin_lock_irq+0xb7/0xf0 [ 222.877385][ T5986] do_group_exit+0x12c/0x2f0 [ 222.881971][ T5986] ? lockdep_hardirqs_on+0x94/0x140 [ 222.887188][ T5986] get_signal+0x7eb/0x12e0 [ 222.891618][ T5986] arch_do_signal_or_restart+0xe6/0x12a0 [ 222.897274][ T5986] ? futex_exit_release+0x1c0/0x1c0 [ 222.902474][ T5986] ? get_sigframe_size+0x10/0x10 [ 222.907412][ T5986] ? __context_tracking_exit+0x4c/0x80 [ 222.912883][ T5986] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 222.918871][ T5986] ? exit_to_user_mode_loop+0x3b/0x130 [ 222.924344][ T5986] exit_to_user_mode_loop+0x9e/0x130 [ 222.929630][ T5986] exit_to_user_mode_prepare+0xee/0x180 [ 222.935173][ T5986] syscall_exit_to_user_mode+0x16/0x40 [ 222.940648][ T5986] do_syscall_64+0x58/0xa0 [ 222.945062][ T5986] ? clear_bhb_loop+0x30/0x80 [ 222.949744][ T5986] ? clear_bhb_loop+0x30/0x80 [ 222.954421][ T5986] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 222.960312][ T5986] RIP: 0033:0x7f4dd4001559 [ 222.964731][ T5986] Code: Unable to access opcode bytes at RIP 0x7f4dd400152f. [ 222.972090][ T5986] RSP: 002b:00007f4dd22590e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 222.980528][ T5986] RAX: fffffffffffffe00 RBX: 00007f4dd4288fa8 RCX: 00007f4dd4001559 [ 222.988502][ T5986] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4dd4288fa8 [ 222.996492][ T5986] RBP: 00007f4dd4288fa0 R08: 0000000000000000 R09: 0000000000000000 [ 223.004467][ T5986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.012464][ T5986] R13: 00007f4dd4289038 R14: 00007fffe3383630 R15: 00007fffe3383718 [ 223.020449][ T5986] [ 223.684030][ T6000] Zero length message leads to an empty skb [ 223.690920][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.429'. [ 223.799637][ T6007] 9pnet: Insufficient options for proto=fd [ 225.807747][ T6024] kAFS: unable to lookup cell '.' [ 226.146526][ T6042] Bluetooth: hci0: invalid length 0, exp 2 for type 4 [ 227.354568][ T6052] FAULT_INJECTION: forcing a failure. [ 227.354568][ T6052] name failslab, interval 1, probability 0, space 0, times 0 [ 227.381024][ T6054] netlink: 104 bytes leftover after parsing attributes in process `syz.5.452'. [ 227.412240][ T6052] CPU: 1 PID: 6052 Comm: syz.4.451 Not tainted syzkaller #0 [ 227.419692][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 227.430241][ T6052] Call Trace: [ 227.433524][ T6052] [ 227.436457][ T6052] dump_stack_lvl+0x188/0x250 [ 227.441136][ T6052] ? show_regs_print_info+0x20/0x20 [ 227.446337][ T6052] ? load_image+0x410/0x410 [ 227.450941][ T6052] ? __might_sleep+0xf0/0xf0 [ 227.455527][ T6052] ? __lock_acquire+0x7d40/0x7d40 [ 227.460553][ T6052] should_fail+0x383/0x4b0 [ 227.464975][ T6052] should_failslab+0x5/0x20 [ 227.469554][ T6052] slab_pre_alloc_hook+0x51/0xc0 [ 227.474542][ T6052] ? security_inode_alloc+0x30/0x110 [ 227.480738][ T6052] kmem_cache_alloc+0x3d/0x280 [ 227.485630][ T6052] security_inode_alloc+0x30/0x110 [ 227.490970][ T6052] inode_init_always+0x8e5/0xc90 [ 227.495932][ T6052] new_inode_pseudo+0x8e/0x210 [ 227.500703][ T6052] new_inode+0x25/0x1d0 [ 227.504889][ T6052] proc_pid_make_inode+0x20/0x1a0 [ 227.509914][ T6052] proc_task_instantiate+0x50/0x2b0 [ 227.515134][ T6052] proc_task_lookup+0x33c/0x4a0 [ 227.520002][ T6052] __lookup_slow+0x29d/0x410 [ 227.524598][ T6052] ? lookup_one_len+0x2d0/0x2d0 [ 227.529455][ T6052] ? down_read+0x1aa/0x2e0 [ 227.533884][ T6052] lookup_slow+0x53/0x70 [ 227.538133][ T6052] walk_component+0x314/0x460 [ 227.542852][ T6052] link_path_walk+0x688/0xde0 [ 227.547546][ T6052] ? handle_lookup_down+0x130/0x130 [ 227.552772][ T6052] path_openat+0x28e/0x2fb0 [ 227.557317][ T6052] ? __kasan_slab_alloc+0xa9/0xc0 [ 227.562358][ T6052] ? do_filp_open+0x400/0x400 [ 227.567043][ T6052] do_filp_open+0x1df/0x400 [ 227.571562][ T6052] ? vfs_tmpfile+0x300/0x300 [ 227.576146][ T6052] ? noop_direct_IO+0x10/0x10 [ 227.580824][ T6052] ? _raw_spin_unlock+0x24/0x40 [ 227.585668][ T6052] ? alloc_fd+0x59e/0x650 [ 227.590011][ T6052] do_sys_openat2+0x14b/0x500 [ 227.594703][ T6052] ? __lock_acquire+0x7d40/0x7d40 [ 227.599722][ T6052] ? do_sys_open+0xe0/0xe0 [ 227.604129][ T6052] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 227.610100][ T6052] ? lock_chain_count+0x20/0x20 [ 227.615737][ T6052] __x64_sys_openat+0x135/0x160 [ 227.620612][ T6052] do_syscall_64+0x4c/0xa0 [ 227.625056][ T6052] ? clear_bhb_loop+0x30/0x80 [ 227.629825][ T6052] ? clear_bhb_loop+0x30/0x80 [ 227.634593][ T6052] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 227.640527][ T6052] RIP: 0033:0x7fe56bfa8d8e [ 227.644940][ T6052] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 227.664722][ T6052] RSP: 002b:00007fe56a23fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 227.673147][ T6052] RAX: ffffffffffffffda RBX: 00007fe56a2406c0 RCX: 00007fe56bfa8d8e [ 227.681117][ T6052] RDX: 0000000000000002 RSI: 00007fe56a23ff90 RDI: ffffffffffffff9c [ 227.689102][ T6052] RBP: 00007fe56c07f8b0 R08: 0000000000000000 R09: 0000000000000000 [ 227.697073][ T6052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.705040][ T6052] R13: 00007fe56c270038 R14: 00007fe56c26ffa0 R15: 00007fff39ba0458 [ 227.713041][ T6052] [ 227.804328][ T6056] kAFS: unable to lookup cell '.' [ 228.589898][ T6085] tmpfs: Unknown parameter 'quota' [ 229.752243][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'. [ 229.864260][ T6107] bond0: (slave bond_slave_1): Releasing backup interface [ 230.824357][ T6115] kAFS: unable to lookup cell '.' [ 231.005382][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.479'. [ 233.193855][ T6151] kAFS: unable to lookup cell '.' [ 233.244479][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.491'. [ 233.307144][ T6157] jffs2: notice: (6157) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 233.357247][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 233.377178][ T6165] netlink: 'syz.3.495': attribute type 1 has an invalid length. [ 234.124055][ T6165] netlink: 'syz.3.495': attribute type 2 has an invalid length. [ 234.255387][ T6163] device hsr_slave_1 left promiscuous mode [ 234.291063][ T6175] netdevsim netdevsim3: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 234.949564][ T4192] Bluetooth: hci2: link tx timeout [ 235.038220][ T4192] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 235.063966][ T6189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.501'. [ 235.450259][ T6196] 9pnet: p9_fd_create_tcp (6196): problem connecting socket to 127.0.0.1 [ 236.231522][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'. [ 236.290832][ T6197] kAFS: unable to lookup cell '.' [ 236.397186][ T6209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.507'. [ 237.310981][ T6230] netdevsim netdevsim5: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 239.817355][ T6246] 9pnet: Insufficient options for proto=fd [ 239.832374][ T6248] tmpfs: Unknown parameter 'quota' [ 240.608358][ T6243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.518'. [ 242.443160][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.526'. [ 242.464955][ T6266] netlink: 64 bytes leftover after parsing attributes in process `syz.4.526'. [ 242.524790][ T6266] device geneve2 entered promiscuous mode [ 243.608388][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.5.532'. [ 243.647044][ T6277] kAFS: unable to lookup cell '.' [ 243.656432][ T6284] netlink: 'syz.0.533': attribute type 10 has an invalid length. [ 243.724574][ T6284] team0: Port device netdevsim0 added [ 243.758180][ T6285] netlink: 'syz.0.533': attribute type 10 has an invalid length. [ 244.873336][ T6291] fuse: Bad value for 'fd' [ 250.566793][ T6328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.545'. [ 254.503219][ T6362] autofs4:pid:6362:autofs_fill_super: called with bogus options [ 255.470065][ T6369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.560'. [ 255.707332][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.713821][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.348285][ T6381] jffs2: notice: (6381) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 258.703730][ T6403] device sit0 entered promiscuous mode [ 263.185281][ T6503] kAFS: unable to lookup cell '.' [ 263.520918][ T6511] overlayfs: failed to clone upperpath [ 265.055148][ T6529] FAULT_INJECTION: forcing a failure. [ 265.055148][ T6529] name failslab, interval 1, probability 0, space 0, times 0 [ 265.129901][ T6529] CPU: 1 PID: 6529 Comm: syz.0.623 Not tainted syzkaller #0 [ 265.137266][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 265.147366][ T6529] Call Trace: [ 265.150650][ T6529] [ 265.153579][ T6529] dump_stack_lvl+0x188/0x250 [ 265.158261][ T6529] ? show_regs_print_info+0x20/0x20 [ 265.163482][ T6529] ? load_image+0x410/0x410 [ 265.168017][ T6529] ? __might_sleep+0xf0/0xf0 [ 265.172700][ T6529] ? __lock_acquire+0x7d40/0x7d40 [ 265.177729][ T6529] should_fail+0x383/0x4b0 [ 265.182278][ T6529] should_failslab+0x5/0x20 [ 265.187037][ T6529] slab_pre_alloc_hook+0x51/0xc0 [ 265.192979][ T6529] kmem_cache_alloc_trace+0x47/0x290 [ 265.198384][ T6529] ? keyring_restrict+0x11f/0x530 [ 265.203417][ T6529] keyring_restrict+0x11f/0x530 [ 265.208476][ T6529] ? keyring_search_rcu+0x280/0x280 [ 265.213767][ T6529] ? keyring_search+0x3c0/0x3c0 [ 265.219902][ T6529] keyctl_restrict_keyring+0x152/0x220 [ 265.225660][ T6529] ? keyctl_session_to_parent+0x9c0/0x9c0 [ 265.231514][ T6529] ? rcu_is_watching+0x11/0xa0 [ 265.236356][ T6529] __se_sys_keyctl+0x6a1/0xa20 [ 265.241191][ T6529] ? __x64_sys_keyctl+0xc0/0xc0 [ 265.246061][ T6529] ? __context_tracking_exit+0x4c/0x80 [ 265.251548][ T6529] ? __lock_acquire+0x7d40/0x7d40 [ 265.256615][ T6529] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 265.262618][ T6529] ? lock_chain_count+0x20/0x20 [ 265.268129][ T6529] ? lockdep_hardirqs_on+0x94/0x140 [ 265.273356][ T6529] ? __x64_sys_keyctl+0x1c/0xc0 [ 265.278385][ T6529] do_syscall_64+0x4c/0xa0 [ 265.282842][ T6529] ? clear_bhb_loop+0x30/0x80 [ 265.287635][ T6529] ? clear_bhb_loop+0x30/0x80 [ 265.292353][ T6529] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 265.298316][ T6529] RIP: 0033:0x7f4dd4001559 [ 265.302866][ T6529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.323065][ T6529] RSP: 002b:00007f4dd2259028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 265.331611][ T6529] RAX: ffffffffffffffda RBX: 00007f4dd4288fa0 RCX: 00007f4dd4001559 [ 265.339697][ T6529] RDX: 0000000000000000 RSI: 00000000039e3d07 RDI: 000000000000001d [ 265.347934][ T6529] RBP: 00007f4dd40988b0 R08: 0000000000000000 R09: 0000000000000000 [ 265.355933][ T6529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.363902][ T6529] R13: 00007f4dd4289038 R14: 00007f4dd4288fa0 R15: 00007fffe3383718 [ 265.371891][ T6529] [ 269.671329][ T6588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.650'. [ 271.442769][ T6621] sctp: [Deprecated]: syz.1.658 (pid 6621) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.442769][ T6621] Use struct sctp_sack_info instead [ 271.690260][ T6615] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.700593][ T6615] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.471888][ T6615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.559798][ T6615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.846783][ T6615] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.863286][ T6615] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.872355][ T6615] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.884243][ T6615] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.943759][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.660'. [ 273.990511][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.5.661'. [ 275.886550][ T6668] jffs2: notice: (6668) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 277.285114][ T6686] kAFS: unable to lookup cell '.' [ 277.631745][ T6695] netlink: 40 bytes leftover after parsing attributes in process `syz.3.684'. [ 278.757651][ T6706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.675'. [ 278.785025][ T6707] fuse: Bad value for 'fd' [ 278.877690][ T6712] fuse: Bad value for 'fd' [ 279.894643][ T6717] kAFS: unable to lookup cell '.' [ 281.156539][ T6743] jffs2: notice: (6743) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 282.077916][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.702'. [ 282.438013][ T6758] mmap: syz.0.707 (6758) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 282.496314][ T6760] kAFS: unable to lookup cell '.' [ 282.766342][ T6765] IPVS: Scheduler module ip_vs_mh not found [ 282.792232][ T6770] IPVS: length: 4096 != 24 [ 283.592706][ T6777] netlink: 12 bytes leftover after parsing attributes in process `syz.5.714'. [ 284.607105][ T6796] kAFS: unable to lookup cell '.' [ 290.745968][ T6823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.730'. [ 292.620143][ T4192] Bluetooth: hci2: link tx timeout [ 292.625899][ T4192] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.634370][ T4192] Bluetooth: hci2: link tx timeout [ 292.639663][ T4192] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 294.050548][ T6879] netlink: 12 bytes leftover after parsing attributes in process `syz.5.746'. [ 294.899642][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 295.465702][ T6909] FAULT_INJECTION: forcing a failure. [ 295.465702][ T6909] name failslab, interval 1, probability 0, space 0, times 0 [ 295.479058][ T6909] CPU: 0 PID: 6909 Comm: syz.0.756 Not tainted syzkaller #0 [ 295.486466][ T6909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 295.496552][ T6909] Call Trace: [ 295.499851][ T6909] [ 295.502799][ T6909] dump_stack_lvl+0x188/0x250 [ 295.507501][ T6909] ? show_regs_print_info+0x20/0x20 [ 295.512718][ T6909] ? load_image+0x410/0x410 [ 295.517254][ T6909] ? __might_sleep+0xf0/0xf0 [ 295.521864][ T6909] ? __lock_acquire+0x7d40/0x7d40 [ 295.526929][ T6909] should_fail+0x383/0x4b0 [ 295.531381][ T6909] should_failslab+0x5/0x20 [ 295.535911][ T6909] slab_pre_alloc_hook+0x51/0xc0 [ 295.540880][ T6909] __kmalloc+0x6b/0x340 [ 295.545065][ T6909] ? security_cred_alloc_blank+0x42/0x120 [ 295.550815][ T6909] ? rcu_is_watching+0x11/0xa0 [ 295.555614][ T6909] security_cred_alloc_blank+0x42/0x120 [ 295.561195][ T6909] cred_alloc_blank+0x83/0xd0 [ 295.565903][ T6909] keyctl_session_to_parent+0x3e/0x9c0 [ 295.571401][ T6909] __se_sys_keyctl+0x578/0xa20 [ 295.576203][ T6909] ? __x64_sys_keyctl+0xc0/0xc0 [ 295.581184][ T6909] ? __context_tracking_exit+0x4c/0x80 [ 295.586676][ T6909] ? __lock_acquire+0x7d40/0x7d40 [ 295.591780][ T6909] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 295.597792][ T6909] ? lock_chain_count+0x20/0x20 [ 295.602679][ T6909] ? lockdep_hardirqs_on+0x94/0x140 [ 295.607911][ T6909] ? __x64_sys_keyctl+0x1c/0xc0 [ 295.612787][ T6909] do_syscall_64+0x4c/0xa0 [ 295.617217][ T6909] ? clear_bhb_loop+0x30/0x80 [ 295.621896][ T6909] ? clear_bhb_loop+0x30/0x80 [ 295.626576][ T6909] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 295.632470][ T6909] RIP: 0033:0x7f4dd4001559 [ 295.636886][ T6909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.656588][ T6909] RSP: 002b:00007f4dd2259028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 295.665039][ T6909] RAX: ffffffffffffffda RBX: 00007f4dd4288fa0 RCX: 00007f4dd4001559 [ 295.673013][ T6909] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 295.680986][ T6909] RBP: 00007f4dd40988b0 R08: 0000000000000000 R09: 0000000000000000 [ 295.688954][ T6909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.696928][ T6909] R13: 00007f4dd4289038 R14: 00007f4dd4288fa0 R15: 00007fffe3383718 [ 295.704913][ T6909] [ 295.713648][ T6902] IPVS: Scheduler module ip_vs_mh not found [ 297.034486][ T6910] IPVS: length: 4096 != 24 [ 297.056790][ T6921] jffs2: notice: (6921) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 299.499507][ T6948] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 299.866616][ T6950] rxe_eth0 speed is unknown, defaulting to 1000 [ 306.237248][ T6990] ip_tables: iptables: counters copy to user failed while replacing table [ 308.216261][ T7038] netlink: 'syz.5.794': attribute type 29 has an invalid length. [ 308.428591][ T7038] netlink: 'syz.5.794': attribute type 29 has an invalid length. [ 308.527283][ T7039] netlink: 'syz.5.794': attribute type 29 has an invalid length. [ 309.229300][ T7050] netlink: 'syz.0.797': attribute type 1 has an invalid length. [ 309.630159][ T7054] jffs2: notice: (7054) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 309.916049][ T7054] overlayfs: missing 'lowerdir' [ 312.422666][ T7089] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 312.578250][ T7094] netlink: 20 bytes leftover after parsing attributes in process `syz.4.813'. [ 313.530502][ T7108] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 314.909662][ T7142] netlink: 'syz.1.830': attribute type 10 has an invalid length. [ 314.965478][ T7143] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 315.026672][ T7143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 315.086385][ T7143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 315.223627][ T7143] device bridge_slave_0 left promiscuous mode [ 315.231186][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.534020][ T7143] device bridge_slave_1 left promiscuous mode [ 315.557403][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.651375][ T7143] bond0: (slave bond_slave_0): Releasing backup interface [ 315.702092][ T7143] bond0: (slave bond_slave_1): Releasing backup interface [ 315.850931][ T7143] team0: Port device team_slave_0 removed [ 315.894741][ T7143] team0: Port device team_slave_1 removed [ 315.911524][ T7143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.930464][ T7143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.952589][ T7143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.972097][ T7143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.199387][ T7143] syz.1.830 (7143) used greatest stack depth: 20144 bytes left [ 317.157080][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.163482][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.456205][ T7182] fuse: Bad value for 'fd' [ 318.309213][ T7187] kAFS: unable to lookup cell '.' [ 318.437483][ T7192] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 320.397418][ T7236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.044029][ T7280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.435802][ T7284] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 326.264679][ T7294] jffs2: notice: (7294) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 326.354549][ T7298] fuse: Bad value for 'fd' [ 326.495766][ T7304] jffs2: notice: (7304) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 326.609724][ T7309] kAFS: unable to lookup cell '.' [ 327.097105][ T7316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.604244][ T7327] jffs2: notice: (7327) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 329.852579][ T7343] kAFS: bad VL server IP address [ 332.980118][ T7364] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 333.263319][ T7382] CIFS: Attempting to mount \\127.0.0.1\share [ 333.276125][ T7382] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 333.375821][ T7382] CIFS: VFS: Could not allocate crypto cmac(aes) [ 333.383806][ T7382] CIFS: VFS: cifs_mount failed w/return code = -512 [ 333.824875][ T7393] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 339.591850][ T7497] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 341.550209][ T7538] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 347.588231][ T7616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.976'. [ 351.559085][ T7691] netlink: 104 bytes leftover after parsing attributes in process `syz.1.996'. [ 354.038665][ T7739] rdma_rxe: ignoring netdev event = 23 for rxe_eth0 [ 354.048186][ T7739] rdma_rxe: rxe_eth0 changed mtu to 1316 [ 354.056085][ T7739] infiniband rxe0: set active [ 354.079676][ T4265] rxe_eth0 speed is unknown, defaulting to 1000 [ 354.906137][ T7745] ODEBUG: Out of memory. ODEBUG disabled [ 355.229319][ T7745] syz.0.1012 (7745): drop_caches: 2 [ 355.994424][ T7768] FAULT_INJECTION: forcing a failure. [ 355.994424][ T7768] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 356.008069][ T7768] CPU: 0 PID: 7768 Comm: syz.4.1022 Not tainted syzkaller #0 [ 356.015476][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 356.025563][ T7768] Call Trace: [ 356.028926][ T7768] [ 356.031935][ T7768] dump_stack_lvl+0x188/0x250 [ 356.036772][ T7768] ? show_regs_print_info+0x20/0x20 [ 356.042000][ T7768] ? load_image+0x410/0x410 [ 356.046536][ T7768] ? uncharge_page+0x490/0x490 [ 356.051425][ T7768] should_fail+0x383/0x4b0 [ 356.055910][ T7768] prepare_alloc_pages+0x1e3/0x5b0 [ 356.061091][ T7768] __alloc_pages+0x11b/0x480 [ 356.065725][ T7768] ? zone_statistics+0x170/0x170 [ 356.070694][ T7768] ? rcu_lock_acquire+0x30/0x30 [ 356.075594][ T7768] ? alloc_pages+0x452/0x560 [ 356.080221][ T7768] __get_free_pages+0x8/0x30 [ 356.084861][ T7768] __tlb_remove_page_size+0x1f2/0x3f0 [ 356.090272][ T7768] unmap_page_range+0xfcf/0x2410 [ 356.095270][ T7768] unmap_vmas+0x131/0x250 [ 356.099633][ T7768] ? unmap_page_range+0x2410/0x2410 [ 356.104972][ T7768] ? __mutex_lock_common+0x435/0x2400 [ 356.110425][ T7768] ? exit_mm_release+0x16/0x30 [ 356.115264][ T7768] exit_mmap+0x3b9/0x640 [ 356.119549][ T7768] ? vm_brk+0x20/0x20 [ 356.123580][ T7768] ? uprobe_clear_state+0x2f6/0x460 [ 356.128845][ T7768] __mmput+0x115/0x390 [ 356.132953][ T7768] exit_mm+0x632/0x7b0 [ 356.137133][ T7768] ? perf_pmu_migrate_context+0xb70/0xb70 [ 356.142892][ T7768] ? do_exit+0x2110/0x2110 [ 356.147337][ T7768] ? __ia32_sys_timer_delete+0x40/0x40 [ 356.152853][ T7768] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 356.158361][ T7768] ? tty_audit_exit+0x149/0x1f0 [ 356.163272][ T7768] do_exit+0x5b8/0x2110 [ 356.167463][ T7768] ? put_task_struct+0x80/0x80 [ 356.172253][ T7768] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 356.178278][ T7768] ? _raw_spin_lock_irq+0xb7/0xf0 [ 356.183350][ T7768] do_group_exit+0x12c/0x2f0 [ 356.187974][ T7768] ? lockdep_hardirqs_on+0x94/0x140 [ 356.193212][ T7768] get_signal+0x7eb/0x12e0 [ 356.197713][ T7768] arch_do_signal_or_restart+0xe6/0x12a0 [ 356.203421][ T7768] ? futex_exit_release+0x1c0/0x1c0 [ 356.208661][ T7768] ? get_sigframe_size+0x10/0x10 [ 356.213726][ T7768] ? __context_tracking_exit+0x4c/0x80 [ 356.219238][ T7768] ? exit_to_user_mode_loop+0x3b/0x130 [ 356.224725][ T7768] exit_to_user_mode_loop+0x9e/0x130 [ 356.230038][ T7768] exit_to_user_mode_prepare+0xee/0x180 [ 356.235607][ T7768] syscall_exit_to_user_mode+0x16/0x40 [ 356.241097][ T7768] do_syscall_64+0x58/0xa0 [ 356.245538][ T7768] ? clear_bhb_loop+0x30/0x80 [ 356.250239][ T7768] ? clear_bhb_loop+0x30/0x80 [ 356.254948][ T7768] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 356.260880][ T7768] RIP: 0033:0x7fe56bfe8559 [ 356.265394][ T7768] Code: Unable to access opcode bytes at RIP 0x7fe56bfe852f. [ 356.272780][ T7768] RSP: 002b:00007fe56a2400e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 356.281285][ T7768] RAX: 0000000000000001 RBX: 00007fe56c26ffa8 RCX: 00007fe56bfe8559 [ 356.289281][ T7768] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe56c26ffac [ 356.297443][ T7768] RBP: 00007fe56c26ffa0 R08: 003875bea3e18002 R09: 0000000000000000 [ 356.305451][ T7768] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 356.313461][ T7768] R13: 00007fe56c270038 R14: 00007fff39ba0370 R15: 00007fff39ba0458 [ 356.321484][ T7768] [ 357.506697][ T6923] Bluetooth: hci2: command 0x0405 tx timeout [ 357.631347][ T7797] IPv6: addrconf: prefix option has invalid lifetime [ 360.984227][ T7849] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 361.855216][ T7853] syz.4.1052 (7853): drop_caches: 2 [ 362.971850][ T7832] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.981129][ T7832] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.990156][ T7832] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.999072][ T7832] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.193968][ T7885] batman_adv: batadv0: Adding interface: syz_tun [ 363.200739][ T7885] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.242546][ T7885] batman_adv: batadv0: Interface activated: syz_tun [ 365.333026][ T7938] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1082'. [ 366.324929][ T7979] futex_wake_op: syz.3.1098 tries to shift op by 144; fix this program [ 372.052859][ T8042] kAFS: unable to lookup cell '.' [ 373.272156][ T8057] batman_adv: batadv0: Adding interface: syz_tun [ 373.312781][ T8057] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.452859][ T8057] batman_adv: batadv0: Interface activated: syz_tun [ 373.847411][ T8071] 9pnet: Insufficient options for proto=fd [ 375.529524][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1143'. [ 375.904015][ T8106] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 376.075495][ T8106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.142647][ T8106] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.190904][ T8106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 376.457957][ T8106] syz.4.1145 (8106) used greatest stack depth: 19664 bytes left [ 376.486614][ T26] audit: type=1326 audit(1792023769.424:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.0.1139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd4001559 code=0x7ffc0000 [ 377.532565][ T26] audit: type=1326 audit(1792023769.424:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.0.1139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd4001559 code=0x7ffc0000 [ 377.559627][ T26] audit: type=1326 audit(1792023769.424:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.0.1139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd4001559 code=0x7ffc0000 [ 377.591779][ T26] audit: type=1326 audit(1792023769.424:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.0.1139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f4dd4001559 code=0x7ffc0000 [ 377.601055][ T8150] rxe_eth0 speed is unknown, defaulting to 1000 [ 377.897542][ T26] audit: type=1326 audit(1792023769.424:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.0.1139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd4001559 code=0x7ffc0000 [ 378.000868][ T26] audit: type=1326 audit(1792023769.424:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.0.1139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4dd4001559 code=0x7ffc0000 [ 378.072457][ T26] audit: type=1326 audit(1792023769.424:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.0.1139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4dd4001559 code=0x7ffc0000 [ 378.495273][ T8170] ------------[ cut here ]------------ [ 378.501167][ T8170] WARNING: CPU: 1 PID: 8170 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xac0/0xcd0 [ 378.511512][ T8170] Modules linked in: [ 378.515404][ T8170] CPU: 1 PID: 8170 Comm: syz.4.1166 Not tainted syzkaller #0 [ 378.522767][ T8170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 378.532833][ T8170] RIP: 0010:rb_get_reader_page+0xac0/0xcd0 [ 378.538660][ T8170] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 d7 67 42 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 65 69 42 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18 [ 378.558414][ T8170] RSP: 0018:ffffc90002e3f7c0 EFLAGS: 00010002 [ 378.564489][ T8170] RAX: 1ffff11002f39f01 RBX: 1ffff11027fc77d6 RCX: ffffffff817c009b [ 378.572462][ T8170] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888017870408 [ 378.580435][ T8170] RBP: ffffc90002e3f960 R08: ffff88801787040b R09: 1ffff11002f0e081 [ 378.588405][ T8170] R10: dffffc0000000000 R11: ffffed1002f0e082 R12: ffff8880179cf810 [ 378.596399][ T8170] R13: 0000000000000068 R14: 1ffff11027fc77d3 R15: ffff888017870400 [ 378.604384][ T8170] FS: 00007fe56a2406c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 378.613310][ T8170] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.619896][ T8170] CR2: 00007fe56bfd16c0 CR3: 000000007aad1000 CR4: 00000000003506e0 [ 378.627883][ T8170] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 378.635849][ T8170] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 378.643815][ T8170] Call Trace: [ 378.647104][ T8170] [ 378.650041][ T8170] ? ring_buffer_read_page+0x12c0/0x12c0 [ 378.655692][ T8170] ? do_raw_spin_lock+0x128/0x2f0 [ 378.660716][ T8170] ? __rwlock_init+0x140/0x140 [ 378.665478][ T8170] rb_buffer_peek+0x5c/0x780 [ 378.670063][ T8170] ring_buffer_peek+0x1de/0x400 [ 378.674922][ T8170] ? ring_buffer_iter_empty+0x340/0x340 [ 378.680470][ T8170] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 378.686459][ T8170] ? __lock_acquire+0x7d40/0x7d40 [ 378.691507][ T8170] ? lock_chain_count+0x20/0x20 [ 378.696355][ T8170] __find_next_entry+0x350/0x6b0 [ 378.701304][ T8170] ? lockdep_hardirqs_on+0x94/0x140 [ 378.706528][ T8170] ? trace_find_next_entry+0x3a0/0x3a0 [ 378.712010][ T8170] tracing_read_pipe+0x3b1/0xae0 [ 378.716953][ T8170] ? s_show+0x300/0x300 [ 378.721125][ T8170] vfs_read+0x2ff/0xd50 [ 378.725287][ T8170] ? __lock_acquire+0x7d40/0x7d40 [ 378.730316][ T8170] ? kernel_read+0x1e0/0x1e0 [ 378.734912][ T8170] ? mutex_lock_nested+0x17/0x20 [ 378.739863][ T8170] ? __fdget_pos+0x2bf/0x370 [ 378.744445][ T8170] ? ksys_read+0x70/0x260 [ 378.748766][ T8170] ksys_read+0x153/0x260 [ 378.753007][ T8170] ? vfs_write+0xd70/0xd70 [ 378.757426][ T8170] ? lockdep_hardirqs_on+0x94/0x140 [ 378.762634][ T8170] do_syscall_64+0x4c/0xa0 [ 378.767043][ T8170] ? clear_bhb_loop+0x30/0x80 [ 378.771711][ T8170] ? clear_bhb_loop+0x30/0x80 [ 378.776423][ T8170] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 378.782331][ T8170] RIP: 0033:0x7fe56bfe8559 [ 378.786759][ T8170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.806505][ T8170] RSP: 002b:00007fe56a240028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 378.815046][ T8170] RAX: ffffffffffffffda RBX: 00007fe56c26ffa0 RCX: 00007fe56bfe8559 [ 378.823023][ T8170] RDX: 0000000000004000 RSI: 0000200000000740 RDI: 0000000000000003 [ 378.831110][ T8170] RBP: 00007fe56c07f8b0 R08: 0000000000000000 R09: 0000000000000000 [ 378.839101][ T8170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.847076][ T8170] R13: 00007fe56c270038 R14: 00007fe56c26ffa0 R15: 00007fff39ba0458 [ 378.855075][ T8170] [ 378.858114][ T8170] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 378.865382][ T8170] CPU: 1 PID: 8170 Comm: syz.4.1166 Not tainted syzkaller #0 [ 378.872750][ T8170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 378.882824][ T8170] Call Trace: [ 378.886121][ T8170] [ 378.889067][ T8170] dump_stack_lvl+0x188/0x250 [ 378.893751][ T8170] ? show_regs_print_info+0x20/0x20 [ 378.898941][ T8170] ? load_image+0x410/0x410 [ 378.903446][ T8170] panic+0x2f8/0x850 [ 378.907360][ T8170] ? bpf_jit_dump+0xd0/0xd0 [ 378.911863][ T8170] ? rb_get_reader_page+0xac0/0xcd0 [ 378.917061][ T8170] __warn+0x248/0x2b0 [ 378.921037][ T8170] ? rb_get_reader_page+0xac0/0xcd0 [ 378.926235][ T8170] report_bug+0x1b9/0x2e0 [ 378.930586][ T8170] handle_bug+0x3a/0x70 [ 378.934742][ T8170] exc_invalid_op+0x16/0x40 [ 378.939238][ T8170] asm_exc_invalid_op+0x16/0x20 [ 378.944087][ T8170] RIP: 0010:rb_get_reader_page+0xac0/0xcd0 [ 378.949893][ T8170] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 d7 67 42 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 65 69 42 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18 [ 378.969492][ T8170] RSP: 0018:ffffc90002e3f7c0 EFLAGS: 00010002 [ 378.975554][ T8170] RAX: 1ffff11002f39f01 RBX: 1ffff11027fc77d6 RCX: ffffffff817c009b [ 378.983527][ T8170] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888017870408 [ 378.991511][ T8170] RBP: ffffc90002e3f960 R08: ffff88801787040b R09: 1ffff11002f0e081 [ 378.999478][ T8170] R10: dffffc0000000000 R11: ffffed1002f0e082 R12: ffff8880179cf810 [ 379.007445][ T8170] R13: 0000000000000068 R14: 1ffff11027fc77d3 R15: ffff888017870400 [ 379.015432][ T8170] ? rb_get_reader_page+0xabb/0xcd0 [ 379.020669][ T8170] ? ring_buffer_read_page+0x12c0/0x12c0 [ 379.026314][ T8170] ? do_raw_spin_lock+0x128/0x2f0 [ 379.031331][ T8170] ? __rwlock_init+0x140/0x140 [ 379.036097][ T8170] rb_buffer_peek+0x5c/0x780 [ 379.040726][ T8170] ring_buffer_peek+0x1de/0x400 [ 379.045571][ T8170] ? ring_buffer_iter_empty+0x340/0x340 [ 379.051110][ T8170] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 379.057085][ T8170] ? __lock_acquire+0x7d40/0x7d40 [ 379.062119][ T8170] ? lock_chain_count+0x20/0x20 [ 379.066967][ T8170] __find_next_entry+0x350/0x6b0 [ 379.071901][ T8170] ? lockdep_hardirqs_on+0x94/0x140 [ 379.077125][ T8170] ? trace_find_next_entry+0x3a0/0x3a0 [ 379.082594][ T8170] tracing_read_pipe+0x3b1/0xae0 [ 379.087532][ T8170] ? s_show+0x300/0x300 [ 379.091705][ T8170] vfs_read+0x2ff/0xd50 [ 379.095944][ T8170] ? __lock_acquire+0x7d40/0x7d40 [ 379.100965][ T8170] ? kernel_read+0x1e0/0x1e0 [ 379.105561][ T8170] ? mutex_lock_nested+0x17/0x20 [ 379.110497][ T8170] ? __fdget_pos+0x2bf/0x370 [ 379.115094][ T8170] ? ksys_read+0x70/0x260 [ 379.119415][ T8170] ksys_read+0x153/0x260 [ 379.123655][ T8170] ? vfs_write+0xd70/0xd70 [ 379.128067][ T8170] ? lockdep_hardirqs_on+0x94/0x140 [ 379.133273][ T8170] do_syscall_64+0x4c/0xa0 [ 379.137683][ T8170] ? clear_bhb_loop+0x30/0x80 [ 379.142369][ T8170] ? clear_bhb_loop+0x30/0x80 [ 379.147048][ T8170] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 379.152943][ T8170] RIP: 0033:0x7fe56bfe8559 [ 379.157366][ T8170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.176981][ T8170] RSP: 002b:00007fe56a240028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 379.185388][ T8170] RAX: ffffffffffffffda RBX: 00007fe56c26ffa0 RCX: 00007fe56bfe8559 [ 379.193352][ T8170] RDX: 0000000000004000 RSI: 0000200000000740 RDI: 0000000000000003 [ 379.201330][ T8170] RBP: 00007fe56c07f8b0 R08: 0000000000000000 R09: 0000000000000000 [ 379.209291][ T8170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.217263][ T8170] R13: 00007fe56c270038 R14: 00007fe56c26ffa0 R15: 00007fff39ba0458 [ 379.225261][ T8170] [ 379.228488][ T8170] Kernel Offset: disabled [ 379.233217][ T8170] Rebooting in 86400 seconds..