last executing test programs: 2m34.245328222s ago: executing program 2 (id=154): r0 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0xd, 0x1}) 2m34.219587885s ago: executing program 2 (id=155): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x80002c1, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2800091, &(0x7f0000000b00)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da7310", @ANYRESHEX, @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x55, 0x1be, &(0x7f0000001bc0)="$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") r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='net/mcfilter\x00') preadv(r4, &(0x7f0000000480)=[{&(0x7f0000000500)=""/10, 0xa}], 0x1, 0x5d, 0xdba) 2m31.853537908s ago: executing program 2 (id=162): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$md_new_array(r0, 0x0, 0x0) write$md_new_array(r0, &(0x7f0000001480)={'md', @named={'_syz', 0x0, '2'}}, 0x8) 2m31.476012047s ago: executing program 2 (id=170): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4109, 0x100d}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/128, 0x80}, 0x103}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=""/260, 0x104}, 0x87}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001900)=""/221, 0xdd}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=""/140, 0x8c}, 0x8002}], 0x5, 0x40000002, 0x0) write(r1, &(0x7f0000000300)='10', 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x183001, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 2m29.244077157s ago: executing program 2 (id=175): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r0) syz_read_part_table(0x60d, &(0x7f00000009c0)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") 2m27.822289974s ago: executing program 2 (id=185): syz_clone(0xe8000400, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, 0x0, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f00000024c0)={0x90, 0xffffffffffffffda, r2, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, {0x2, 0x800000000ffff, 0x0, 0x0, 0x20000000000007f, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, r3, r4, 0x3, 0x5}}}, 0x90) semget(0x2, 0x3, 0x104) 2m16.468139422s ago: executing program 3 (id=233): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sec/tomoyo/profile\x00', 0x80801, 0x0) 2m15.963416934s ago: executing program 3 (id=238): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="05000100d3fc14000000aa974bb37c1bf765", 0x12, 0x4000004, &(0x7f00000000c0)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m15.896251971s ago: executing program 3 (id=240): mmap(&(0x7f00002c0000/0x4000)=nil, 0x4000, 0x2, 0x8031, 0xffffffffffffffff, 0x62f0a000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@noload}]}, 0xfe, 0x5a3, &(0x7f0000000180)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="21000000000000002c0012800b00010062726964676500001c000280050017000100000008000500000000000600"], 0x4c}, 0x1, 0x0, 0x0, 0x400c824}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000007c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) recvmmsg(r2, &(0x7f0000000900), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000940), 0xf, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f00000009c0)=0x1) 2m12.803720929s ago: executing program 32 (id=185): syz_clone(0xe8000400, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, 0x0, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f00000024c0)={0x90, 0xffffffffffffffda, r2, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, {0x2, 0x800000000ffff, 0x0, 0x0, 0x20000000000007f, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, r3, r4, 0x3, 0x5}}}, 0x90) semget(0x2, 0x3, 0x104) 2m12.793435821s ago: executing program 3 (id=262): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x10000, &(0x7f00000001c0), 0x1, 0x50b, &(0x7f0000000f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L0mav1v63dMN+RABAADgL64Qtb/9L0w20oXC5GT9GtCh2FsoX19Y/F9EXJur3yMwGsXCpflyKb8gNxrFJL/+OdqUn27Jn86uG380MFLLT85eL89tdfCwy+2r9fmkrf+nflrjdV5gG9pB96EBa9Sr/x++t0k7Amw6v/+wezX1/25Ptqj4SxnYmfz+w+7Vqf/fjs9WvXfBdwZsf1V9GXa11ft/7+dtAtvXYLzZSNdue+54ty2wE3X//XdmADtY75vkh9Z87/9yojrU+a3h6PDEgOF1VdEzMdKhri1JpCOrDSywGBH9rTyyniryIWD3JzwU1lbgULS/NRCrbZV0fo5DRFS6bpV+Kj335/Lhfht/6UbytP6gzB4B5s9E2ehm8/lyPy32ebi7JH7rt/k53wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHaU3wMAAP//hKnQPw==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x8, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) chdir(&(0x7f0000000440)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x42, 0x0) 2m12.171350165s ago: executing program 3 (id=267): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80002, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000b80)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x1f8, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1, 0xff03}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x143603, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000000c0)) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfe, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) pwritev(r1, &(0x7f0000001c40)=[{&(0x7f0000000080)="0090", 0x2}], 0x1, 0xffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x2, 0x3, 0x2, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x40, 0x9, 0x4}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0x1}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, 0x0, &(0x7f0000000180)) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@arena={0x21, 0x0, 0x0, 0x29, 0x0, 0xffffffffffffffff, 0x7b, '\x00', r4, r6, 0x3, 0x4, 0x3}, 0x50) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x40814) unshare(0x80) r8 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r8, &(0x7f00000002c0)=[{{&(0x7f0000000fc0)={0xa, 0x0, 0xa, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000001000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r7}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) 2m11.701491123s ago: executing program 3 (id=271): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000280)=0xa40, 0x4) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/19, 0x13}, 0x5}], 0x1, 0x40010102, 0x0) 2m10.720873084s ago: executing program 33 (id=271): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000280)=0xa40, 0x4) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/19, 0x13}, 0x5}], 0x1, 0x40010102, 0x0) 20.439493526s ago: executing program 5 (id=982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000200)="46000000130001000242424242424242424242424242424242", 0x19) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000007c0)={r0, &(0x7f0000000800)='![\\@\x00', 0x165600, &(0x7f0000000840)={@align=0x4, {0x8, 0x5, 0x7, 0xd}}, 0x2, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)=0x2}) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000900)=0x1) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000940)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2800000009e69cdefcbd7004ffdbdf2c0800010086040008080001000000010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x60008000}, 0x880) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f00000018c0)=ANY=[@ANYBLOB="62020401ff30fffffc000000e37527864500"/29], 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), 0xffffffffffffffff) write(r5, &(0x7f0000001840)="cdda7653d1486203a34b5177552f0bda005f8c51db1ed98d36ae9c483b007405585b1b8e31c47cc6b0d3176f93e8628f30c3edb8e4b4b1793e19eae72b47a1f53da3980034bb", 0x46) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000ffdbdf254c000000080001007063690011000200303030303a30303a31302e3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40044}, 0x410) ioctl(r4, 0x890b, &(0x7f0000000b80)="000000010000000000000002020000000f0000006c61706230") ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000000bc0)={0x0, 0x100000000000009, @start={0x0, 0x1, "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", "abd2b111f5bc4fe850b563013512616ff7805cdf3b773ec0a989349cf722c7a73e9d23af42f70c77f4bab9d2ee106432b6a2670a12b5fb9b6101cf14e3a95a359d922b94dba0bff8947a07991e7036c9c76164b3c7774b23f25eb07f79b082589b9f531b73b80f71dcdd7b227ca07af0f04bdaf67eb9805e0da926077f3accf67e1f24c748c1fcf666174fade25a169c984c56edabf2d8524e8d05001794564b146eb8cc271c010113b0faeea27948ff10deaf64b321be4b4528af3dcd8957c3236438d7ab42850729b0903a106f774c207a8a1ad124cb5b1c137cd57ea6db3d2a295d5f722c680d2233ac73c1a665c50faf8520049fccf3646b5b8fb61acb406fa95194a65db836da2309090323e78ed73d2a2008f0669fbb32d4a689315506a9807e078d172f7b9f6841a480d4c839babba38614aab98bcc3de6ff8270b14b057bd21b3b869aeb7ae1a14efbbbff881c7a71be96b710986eb36b2d0534b19bcdc530bbddd0ba267203c195afec25045913491caf7bd1fcbb8e24918c627be1a96a29563039a4377598bd11bc85784dc3af5ea7b41320d837b291bf21351f11953b4873b9a21ecf2ced32534dcc8ed700f1db6ee0f56979a77a38f8152534fc4b542704a2cd14c62e2222b635123facf4f7a64f8f9d94bc7f9d5ebaa04ca15d0681d0bd5a05e67035c6bb88cced77fabc514e92b9f0702bd078a9df92f3f01006381cd9a718d5400d225cfde10d21d8166b6a56cb420c045dab3a430dcb4bbd7c3a87c26f2d9d654fecfcc1e714783ca4734592d3d25924b4bd48d1931db76561024898cde6aafb668a697474aec60d6552ea39be1b078389bfd5d3096898aa5bce8c667be5a0604ed2b5a13f67a3a91c2aa56c331b9064afa7a0b9b7779363a27dc28b14bbf2c6b7746113a1f095328411753b0c2bd4053845aca0bb16bb16dfef443948740cb4523e4cb03057fee772faee10eb04c6102edd6cac03cf252a77530d4f26f0674557229db59890152447254aa5be232c216f552aa2f10208becb18beee108b93fad4cf4b4014b6e83aa95c6f7baf325734fd3ac7d31c22388c68751d75afbaf183dccb674c59dbf200efb69dd0fa65641b69bc60298638d0443d4f431598504936b4eee64bb384186c37065558e73b89ba78ccc27a68c352a26602d3b7be3bdf7c5861310a78f9e2c615e7224c389ada0f66c11a1f8e40ef35b6b7e691967752e2a792c8d9f7f1f770e886ef9557e1855b9322793ed2956e4d299a31328462972fcdf14b218e80b04e1e4503d736cd46be039d74e484533c9aad562cb0c2a7174fe7d993a85cba9fd79150addaf1580c7b68bd6b51e5e1f3ccaca3b6cce0a52b3814f0721b9829d47f3dc170bccaf8ed22d47bb429181471bf8f717c7bde635aa1b92d66e627694fcc6d2ac073013164cbad668e6c7534c87e75"}, [0x2, 0x0, 0xd0, 0xb, 0x2, 0x1, 0x16f, 0x7, 0xfff, 0x800, 0x8, 0x0, 0x8000, 0x572, 0x7, 0xbf, 0x2, 0x6, 0xda33, 0x2, 0x70d, 0x7, 0x9, 0x46cc, 0x9, 0x9, 0xfffffffffffffffc, 0x5, 0xfe, 0x0, 0x37ae, 0x5, 0x8, 0x8, 0x7ff, 0xffffffff, 0x6, 0x0, 0x9, 0x3, 0x9, 0xe10c, 0x3, 0x1, 0x8, 0x7, 0x2b17, 0x5, 0x1, 0x1, 0x3, 0x64b, 0x230, 0x4ec, 0x2, 0x7ff, 0x4, 0xf6, 0x612, 0x3, 0x9, 0x7f, 0x620f, 0x101]}) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001600), r7) getsockname$packet(r7, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001680)=0x14) recvmsg$can_bcm(r7, &(0x7f00000016c0)={&(0x7f0000001700)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001800)=""/5, 0x5}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/125, 0x7d}, {&(0x7f0000003640)=""/239, 0xef}, {&(0x7f0000003740)=""/249, 0xf9}], 0x5, &(0x7f0000003840)=""/246, 0xf6}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000003980)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x85a406}, 0xc, &(0x7f0000003a00)={&(0x7f0000003a40)={0x14, 0x0, 0x215, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004880}, 0x2000c844) sendmsg$NFT_BATCH(r0, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000003b80)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e61740014000480080001400000000308000240a7"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = socket$unix(0x1, 0x0, 0x0) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)={0x170, 0x12, 0x1, 0x400, 0x0, "", [@nested={0x160, 0x7a, 0x0, 0x1, [@typed={0x8, 0xb0, 0x0, 0x0, @fd=r10}, @nested={0xde, 0x67, 0x0, 0x1, [@generic="9696d684f4f573e43b90b53248f613b93dc9efa3d4d1d3d122e3f1ff6dcf6f6b9d08b40895bf809b2093fdd4c5c02964794fa099cc0e95f4c291a30216a74e049ef1904d9706b59049c803e038a306647f40f3ae5099f798e875d57003a73c19f0048f75393f0c6ddbd43aaf583c1f834a0ca67aa75b16cf1bbbfde1b92ae0e45a1bceaa7d3cdec836cab7588af7cd7fc2d572734a9469c946178fb0b6abe352c26244938f2bada9731db4f6aaf26230ac55adc6c5d0985e8f3676feb541bd0babb05ca4f48c4a70ce411847b38ec02c6b0fd09e2e4c7ad9909f"]}, @generic="4ec7474ea60b92dcf85b0ce4b37acc91f9ee29fee2f28e75a248abb6be39dbb7643a08a03579582dcf6e8b0e9388a503108782f3c82aeafadcd59df5d7a5bd1a08a81fb2337b669adc7cad14cda72778ebd7edfb1036a0ac4dc7d51bf62e9d583426a707a6f4986f8f6c3f9082ee7afaf886e202"]}]}, 0x170}], 0x1}, 0x0) 19.296396524s ago: executing program 5 (id=991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xf8}}, 0x0) 19.067917157s ago: executing program 5 (id=994): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '/de\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x8, 0x20000000, 0x3, 0x1800}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000500), 0x56) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x21}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)}, {&(0x7f0000000680)="9942d6af00007f8f", 0x8}], 0x2}, 0x0) 15.980061705s ago: executing program 5 (id=999): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) chdir(&(0x7f00000001c0)='./file0\x00') setpgid(r1, r1) r2 = getpgid(r1) setpgid(0x0, r2) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='.\x00', 0x1400e, &(0x7f00000004c0), 0x1, 0x44b, &(0x7f0000000980)="$eJzs28tvG0UYAPBvN3Ha0kJNKY8+gEBBRDySvoAeOAACiUORkOAAxyhxq1C3QU2QaFVBi1A5IYTEHXHkX+AEF4Q4IXGFO6pUoV7acjJae9eJHcdtjF1D/PtJ287sI/N93h17dscOYGRNZv8kETsi4veI2Nmotu4w2fjvxrULczevXZhLolZ7+6+kvt/1axfmil2L47bnlak0Iv0siX0d2l06d/7UbLVaOZvXZ5ZPfzCzdO78cwunZ09WTlbOHD527OiRQy++cPj5vuSZxXR978eL+/e88d5Xbx7/oiX/tjz6ZLLbxidrtT43N1x3ryon40MMhA0Zi4jsdJXq/X9njMXKydsZr3861OCAgarVarX653XacfPFGrCJJdFa1+VhVBQf9Nn9b7G0DwJeHuwQZKiuvtK4AcryvpEvjS3jzSFRqe3+tp8mI+Ldi39/ky0xmOcQAAAtfsjGP892Gv+l8cCq/e7J54bKEXFvROyKiPsiYndE3B9R3/fBiHhog+23T5KsHf+kV3pK7DZl47+X8rmt1vFf84FYeSyvNceAC9XKwfw1mYrSlhML1cqhLm38+NpvX663bfX4L1uy9ouxYB7HlfEtrcfMzy7P9pjuGlcvRewd75R/0pwJSCJiT0Ts7bGNhae/27/etlvn30Uf5plq30Y81Tj/F6Mt/0LSfX5yZmtUKwdnTuRXxVq//Hr5rfXa/1f590F2/u/qeP038y8nq+drlzbexuU/Pl/3nqbX638ieadensjXfTS7vHz2UMREcrwR9Or1h1eOLerF/ln+Uwc69/9dsfJK7IuI7CJ+OCIeiYhH89gfi4jHI+JAl/x/fvWJ93vPf7Cy/Oc3dP5XChPRvqZzYezUT9+3NFpek//N7uf/aL00la+5nfe/24mrt6sZAAAA/n/SiNgRSTrdLKfp9HTj+/K7I9Lq4tLyMycWPzwz3/iNQDlKafGkq/E8uJQUzz/LzfqliGh8taDYfiR/bvz12LZ6fXpusTo/7ORhxG1fp/9n/hwbdnTAwPm9Fowu/R9Gl/4Po0v/h9HVof9vG0YcwJ3X6fP/kyHEAdx5bf3ftB+MEPf/MLr0fxhd+j+MpKVtcesfyXctFH+px8M3bSFK/4kwBlaIdPhhbB32i7CJC8N9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwIAAP//wejf7Q==") 13.929449626s ago: executing program 5 (id=1006): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf250c00000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) 13.455775935s ago: executing program 5 (id=1014): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r0, &(0x7f0000001980), 0xd) 12.717333981s ago: executing program 34 (id=1014): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r0, &(0x7f0000001980), 0xd) 6.040619238s ago: executing program 0 (id=1052): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)={0x1c, r1, 0x1, 0x74bd2c, 0x25dfcbfb, {{}, {0x0, 0x800b}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 5.941081888s ago: executing program 0 (id=1054): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r0, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) set_mempolicy(0x1, 0x0, 0x7) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000000500), 0x0) syz_mount_image$fuse(0x0, 0x0, 0x14a0, 0x0, 0x1, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 4.320172956s ago: executing program 6 (id=1059): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@nat={'nat\x00', 0x19, 0x2, 0xa70, [0x20000400, 0x0, 0x0, 0x20000510, 0x20000e40], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, 0xae8) 4.304161187s ago: executing program 6 (id=1060): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x80079a0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x60, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000d86dd60"], 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) clock_getres(0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x9, 0x2, 0x8001) fanotify_mark(0xffffffffffffffff, 0x190, 0x48001052, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x3d) listxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0xa}}, 0x20) 3.701671019s ago: executing program 6 (id=1062): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000700)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a) connect$inet6(r0, &(0x7f0000000900)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) 3.521465508s ago: executing program 6 (id=1063): pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) close(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x2214803, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.368618933s ago: executing program 4 (id=1064): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x8, 0x2, 0x5, 0x3}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x13}, {0x1, 0xb}, {0xffff, 0x1f}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x1, 0x0, 0x3, 0x3, 0xe, 0x8, 0x3, 0x18, 0x9, 0x4, {0x6, 0x10, 0xfffffffc, 0x0, 0xffffffff, 0x20005}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40048e4}, 0x4044890) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f00000005c0), 0x56) sendmsg$kcm(r7, &(0x7f0000000600)={&(0x7f00000006c0)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000780)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31", 0x24}], 0x1}, 0x0) 2.417542051s ago: executing program 4 (id=1068): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000640), 0x74, 0x8581) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000680)=0x3) close_range(r0, 0xffffffffffffffff, 0x0) 2.249285568s ago: executing program 4 (id=1070): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x40010) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f2, 0x0) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fsopen(0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="d800000019008111e0020f060d8107040a60000000000000001455a12a0009000a000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b61602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xf11) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000440)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="04083a00c80052a1f793d3665063f766fd407577d9d66e46d5eee519937c5bcce107d01397ff080644f155f8484aea4a6b91ad109b3bdd329a720e009e5499a81f0c3fad939b1d41381f77cb2ac423"], 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2.159660318s ago: executing program 0 (id=1071): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x7, 0x7ffc0001}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, &(0x7f00000012c0)={0x77359400}) 1.968155588s ago: executing program 0 (id=1072): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000700)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a) connect$inet6(r0, &(0x7f0000000900)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) 1.968054428s ago: executing program 7 (id=1016): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@filter={'filter\x00', 0xe, 0x4, 0x130, [0x0, 0x20000400, 0x20000430, 0x200007f0], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x0, 0x2, 0x8808, 'bridge0\x00', 'syzkaller1\x00', 'ip6gre0\x00', 'nicvf0\x00', @link_local, [0x0, 0xff, 0x0, 0x1fe, 0x0, 0xff], @remote, [0xff, 0xff, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x1a8) 1.877980017s ago: executing program 7 (id=1073): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r0, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) set_mempolicy(0x1, 0x0, 0x7) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000000500), 0x0) syz_mount_image$fuse(0x0, 0x0, 0x14a0, 0x0, 0x1, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 1.728030122s ago: executing program 1 (id=1074): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '/de\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x8, 0x20000000, 0x3, 0x1800}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000500), 0x56) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x21}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)="27030200080314000e00072f01000000000000113cfdcb00000080ed00", 0x1d}, {&(0x7f0000000680)="9942d6af00007f8f", 0x8}], 0x2}, 0x0) 1.502266275s ago: executing program 4 (id=1075): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a0104"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400), &(0x7f00000005c0), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000600)={r0, &(0x7f0000000640), &(0x7f0000000680)=""/31}, 0x20) 1.444675352s ago: executing program 1 (id=1076): r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) sendmmsg$sock(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x18}}], 0x1, 0x840) 1.371749999s ago: executing program 1 (id=1077): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x8, 0x2, 0x5, 0x3}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x13}, {0x1, 0xb}, {0xffff, 0x1f}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x1, 0x0, 0x3, 0x3, 0xe, 0x8, 0x3, 0x18, 0x9, 0x4, {0x6, 0x10, 0xfffffffc, 0x0, 0xffffffff, 0x20005}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40048e4}, 0x4044890) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f00000005c0), 0x56) sendmsg$kcm(r7, &(0x7f0000000600)={&(0x7f00000006c0)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000780)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31", 0x24}], 0x1}, 0x0) 1.212001266s ago: executing program 6 (id=1078): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mincore(&(0x7f0000679000/0x1000)=nil, 0x1000, 0x0) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x651, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000b40)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffffffa, 0x0, 0x0, 0xfffffffd, 0x4}, 0x9c) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x14, r5, 0x321, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x4000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000100)={0x2, 0xffffffffffffffff, 0x80800}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r6, 0x84, 0x84, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @local}}, 0x4e23}, &(0x7f00000003c0)=0x90) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000007c0)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000900)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback, 0xfffffffc}}}, 0x108) r8 = syz_open_procfs(0x0, &(0x7f0000000a40)='net/mcfilter6\x00') preadv(r8, &(0x7f0000000a80)=[{&(0x7f0000000ac0)=""/128, 0x80}], 0x1, 0xba, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@ssrr={0x89, 0x3, 0xb3}, @timestamp={0x44, 0x28, 0x8c, 0x0, 0x6, [0x3, 0x8, 0x10, 0x5, 0x3d, 0x5, 0x1, 0xffffffff, 0xfffffffd]}]}}}}}}}, 0x0) 1.16429614s ago: executing program 1 (id=1079): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xc000003, 0x40000169, &(0x7f0000000080)}) 982.499739ms ago: executing program 1 (id=1080): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @loopback}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xa, 0x3}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0x880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 971.2846ms ago: executing program 0 (id=1081): r0 = io_uring_setup(0x14d8, &(0x7f00000007c0)={0x0, 0x47e8, 0x100, 0x0, 0x313}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 748.061753ms ago: executing program 4 (id=1082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec9700"], 0xfdef) 654.448713ms ago: executing program 1 (id=1083): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = syz_create_resource$futex(&(0x7f0000000080)=0x1) socket$can_bcm(0x1d, 0x2, 0x2) setns(0xc9, 0x0) futex(r1, 0xd, 0x2, 0x0, 0x0, 0x2) futex(r1, 0xd, 0x2, 0x0, 0x0, 0x2) 253.841714ms ago: executing program 0 (id=1084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r1, &(0x7f0000000200)="46000000130001000242424242424242424242424242424242", 0x19) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0xffffffff}, 0x8, 0x10, &(0x7f0000000780)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000007c0)={r0, &(0x7f0000000800)='![\\@\x00', 0x165600, &(0x7f0000000840)={@align=0x4, {0x8, 0x5, 0x7, 0xd}}, 0x2, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)=0x2}) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000900)=0x1) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000940)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2800000009e69cdefcbd7004ffdbdf2c0800010086040008080001000000010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x60008000}, 0x880) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f00000018c0)=ANY=[@ANYBLOB="62020401ff30fffffc000000e37527864500"/29], 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), 0xffffffffffffffff) write(r5, &(0x7f0000001840)="cdda7653d1486203a34b5177552f0bda005f8c51db1ed98d36ae9c483b007405585b1b8e31c47cc6b0d3176f93e8628f30c3edb8e4b4b1793e19eae72b47a1f53da3980034bb", 0x46) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000ffdbdf254c000000080001007063690011000200303030303a30303a31302e3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40044}, 0x410) ioctl(r4, 0x890b, &(0x7f0000000b80)="000000010000000000000002020000000f0000006c61706230") ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000000bc0)={0x0, 0x100000000000009, @start={0x0, 0x1, "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", "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"}, [0x2, 0x0, 0xd0, 0xb, 0x2, 0x1, 0x16f, 0x7, 0xfff, 0x800, 0x8, 0x0, 0x8000, 0x572, 0x7, 0xbf, 0x2, 0x6, 0xda33, 0x2, 0x70d, 0x7, 0x9, 0x46cc, 0x9, 0x9, 0xfffffffffffffffc, 0x5, 0xfe, 0x0, 0x37ae, 0x5, 0x8, 0x8, 0x7ff, 0xffffffff, 0x6, 0x0, 0x9, 0x3, 0x9, 0xe10c, 0x3, 0x1, 0x8, 0x7, 0x2b17, 0x5, 0x1, 0x1, 0x3, 0x64b, 0x230, 0x4ec, 0x2, 0x7ff, 0x4, 0xf6, 0x612, 0x3, 0x9, 0x7f, 0x620f, 0x101]}) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001600), r7) getsockname$packet(r7, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001680)=0x14) recvmsg$can_bcm(r7, &(0x7f00000016c0)={&(0x7f0000001700)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001800)=""/5, 0x5}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/125, 0x7d}, {&(0x7f0000003640)=""/239, 0xef}, {&(0x7f0000003740)=""/249, 0xf9}], 0x5, &(0x7f0000003840)=""/246, 0xf6}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000003980)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x85a406}, 0xc, &(0x7f0000003a00)={&(0x7f0000003a40)={0x14, 0x0, 0x215, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004880}, 0x2000c844) sendmsg$NFT_BATCH(r0, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000003b80)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e61740014000480080001400000000308000240a7"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = socket$unix(0x1, 0x0, 0x0) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)={0x170, 0x12, 0x1, 0x400, 0x0, "", [@nested={0x160, 0x7a, 0x0, 0x1, [@typed={0x8, 0xb0, 0x0, 0x0, @fd=r10}, @nested={0xde, 0x67, 0x0, 0x1, [@generic="9696d684f4f573e43b90b53248f613b93dc9efa3d4d1d3d122e3f1ff6dcf6f6b9d08b40895bf809b2093fdd4c5c02964794fa099cc0e95f4c291a30216a74e049ef1904d9706b59049c803e038a306647f40f3ae5099f798e875d57003a73c19f0048f75393f0c6ddbd43aaf583c1f834a0ca67aa75b16cf1bbbfde1b92ae0e45a1bceaa7d3cdec836cab7588af7cd7fc2d572734a9469c946178fb0b6abe352c26244938f2bada9731db4f6aaf26230ac55adc6c5d0985e8f3676feb541bd0babb05ca4f48c4a70ce411847b38ec02c6b0fd09e2e4c7ad9909f"]}, @generic="4ec7474ea60b92dcf85b0ce4b37acc91f9ee29fee2f28e75a248abb6be39dbb7643a08a03579582dcf6e8b0e9388a503108782f3c82aeafadcd59df5d7a5bd1a08a81fb2337b669adc7cad14cda72778ebd7edfb1036a0ac4dc7d51bf62e9d583426a707a6f4986f8f6c3f9082ee7afaf886e202"]}]}, 0x170}], 0x1}, 0x0) 193.28883ms ago: executing program 6 (id=1085): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000009c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x840, &(0x7f0000000980)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 0s ago: executing program 4 (id=1086): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '/de\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x8, 0x20000000, 0x3, 0x1800}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000500), 0x56) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x21}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)="27030200080314000e00072f01000000000000113cfdcb00000080ed00", 0x1d}, {&(0x7f0000000680)="9942d6af00007f8f", 0x8}], 0x2}, 0x0) kernel console output (not intermixed with test programs): and 0x041b tx timeout [ 97.992744][ T5320] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.001590][ T5320] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.010531][ T5320] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.019250][ T5320] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.042455][ T5320] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.051507][ T5320] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.060555][ T5320] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.069499][ T5320] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.123230][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.153754][ T5323] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.162886][ T5323] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.171622][ T5323] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.180350][ T5323] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.192237][ T5323] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.201328][ T5323] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.210235][ T5323] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.219109][ T5323] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.280725][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.314331][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.339987][ T5146] device veth0_vlan entered promiscuous mode [ 98.353632][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.373828][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.415806][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.446996][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.500569][ T5146] device veth1_vlan entered promiscuous mode [ 98.520751][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.535548][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.561558][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.584557][ T5187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.640406][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.656971][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.667410][ T5350] loop4: detected capacity change from 0 to 256 [ 98.684091][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.733917][ T5146] device veth0_macvtap entered promiscuous mode [ 98.778147][ T5146] device veth1_macvtap entered promiscuous mode [ 99.126592][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.182805][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.514549][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.545289][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.566785][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.586275][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.596082][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.622964][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.646336][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.668139][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.679837][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.703983][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.727740][ T5146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.781635][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.799201][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.837792][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.861940][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.875119][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.916388][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.933469][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.955277][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.966417][ T4966] Bluetooth: hci0: command 0x040f tx timeout [ 99.972481][ T4966] Bluetooth: hci5: command 0x0419 tx timeout [ 99.992272][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.005123][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.024590][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.035238][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.053857][ T5146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.066441][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.074986][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.127303][ T5146] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.135994][ T5146] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.169312][ T5146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.193705][ T5146] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.230567][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.248218][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.331062][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.360356][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.397009][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.434707][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.468409][ T5388] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.477199][ T5388] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.485888][ T5388] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.494623][ T5388] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.569563][ T5388] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.578609][ T5388] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.587580][ T5388] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.596475][ T5388] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.662106][ T5187] device veth0_vlan entered promiscuous mode [ 100.684271][ T5395] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.693289][ T5395] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.702038][ T5395] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.710761][ T5395] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.741318][ T5395] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.750538][ T5395] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.759479][ T5395] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.768721][ T5395] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.870843][ T4603] device hsr_slave_0 left promiscuous mode [ 100.884555][ T4603] device hsr_slave_1 left promiscuous mode [ 100.909515][ T4603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.932074][ T4603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.959359][ T4603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.975780][ T4603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.984163][ T4603] device bridge_slave_1 left promiscuous mode [ 100.999054][ T4603] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.006500][ T5423] ip_tables: iptables: counters copy to user failed while replacing table [ 101.033214][ T4603] device bridge_slave_0 left promiscuous mode [ 101.041703][ T4603] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.070787][ T4603] device veth1_macvtap left promiscuous mode [ 101.078840][ T4603] device veth0_macvtap left promiscuous mode [ 101.084997][ T4603] device veth1_vlan left promiscuous mode [ 101.091700][ T4603] device veth0_vlan left promiscuous mode [ 101.243261][ T4603] team0 (unregistering): Port device team_slave_1 removed [ 101.259290][ T4603] team0 (unregistering): Port device team_slave_0 removed [ 101.275060][ T4603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.292154][ T4603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.348435][ T4603] bond0 (unregistering): Released all slaves [ 101.376634][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.384523][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.432193][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.446730][ T5187] device veth1_vlan entered promiscuous mode [ 101.468813][ T456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.504332][ T456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.534109][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.598903][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.601329][ T4202] Bluetooth: hci2: link tx timeout [ 101.612036][ T4202] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 101.631861][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.642486][ T5187] device veth0_macvtap entered promiscuous mode [ 101.663148][ T5430] bond1: (slave vlan2): making interface the new active one [ 101.696871][ T5430] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 101.701922][ T5434] rdma_rxe: rxe_register_device failed with error -23 [ 101.719618][ T5187] device veth1_macvtap entered promiscuous mode [ 101.739541][ T5434] rdma_rxe: failed to add bond0 [ 101.784519][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.803163][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.829645][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.862265][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.874176][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.896045][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.917044][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.932704][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.943907][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.987404][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.026020][ T5187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.045419][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.053050][ T1109] Bluetooth: hci0: command 0x0419 tx timeout [ 102.061993][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.074579][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.083622][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.096078][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.114069][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.114308][ T5462] loop5: detected capacity change from 0 to 1024 [ 102.131376][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.143480][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.157916][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.181762][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.203901][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.222656][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.235342][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.255425][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.282927][ T5187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.301952][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.322614][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.369804][ T5462] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: none. [ 102.390871][ T5187] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.410527][ T5187] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.459019][ T5462] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.474352][ T5462] usb usb5: usbfs: interface 0 claimed by hub while 'syz.5.332' sets config #1 [ 102.485149][ T5187] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.522317][ T5187] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.696985][ T5478] device syzkaller0 entered promiscuous mode [ 102.735795][ T456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.770798][ T456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.838535][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.857891][ T5480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 102.911013][ T4607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.932687][ T4607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.974632][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.123115][ T5502] bond1: option mode: unable to set because the bond device has slaves [ 103.154513][ T5502] rdma_rxe: rxe_register_device failed with error -23 [ 103.189344][ T5502] rdma_rxe: failed to add bond0 [ 103.217817][ T5506] loop6: detected capacity change from 0 to 256 [ 103.309474][ T5513] loop5: detected capacity change from 0 to 256 [ 105.434695][ T5548] device syzkaller0 entered promiscuous mode [ 105.474677][ T5557] loop5: detected capacity change from 0 to 16 [ 105.555498][ T5557] erofs: (device loop5): mounted with root inode @ nid 36. [ 106.458290][ T5576] bond1: option mode: unable to set because the bond device has slaves [ 106.490471][ T5575] loop4: detected capacity change from 0 to 512 [ 106.553630][ T5576] rdma_rxe: already configured on bond0 [ 106.625960][ T5575] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 106.678027][ T5575] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.212789][ T5613] device syzkaller0 entered promiscuous mode [ 109.256490][ T5639] bond1: option mode: unable to set because the bond device has slaves [ 109.326473][ T5639] rdma_rxe: already configured on bond0 [ 109.583855][ T5643] loop1: detected capacity change from 0 to 512 [ 109.718685][ T5646] device syzkaller0 entered promiscuous mode [ 109.729127][ T5643] EXT4-fs (loop1): Ignoring removed orlov option [ 109.735596][ T5643] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 109.813329][ T5643] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 109.905742][ T5656] loop4: detected capacity change from 0 to 16 [ 110.029620][ T4603] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.090190][ T5643] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #16: comm syz.1.370: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 110.382895][ T5643] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.370: couldn't read orphan inode 16 (err -117) [ 110.572093][ T5643] EXT4-fs (loop1): 1 orphan inode deleted [ 110.668866][ T5643] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,nombcache,debug_want_extra_isize=0x000000000000002a,commit=0x0000000000000005,orlov,lazytime,,errors=continue. Quota mode: none. [ 111.339718][ T5656] erofs: (device loop4): mounted with root inode @ nid 36. [ 111.441495][ T4603] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.125691][ T5673] veth1_vlan: default FDB implementation only supports local addresses [ 112.390866][ T4603] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.549348][ T5688] device syzkaller0 entered promiscuous mode [ 112.777841][ T4603] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.558790][ T5716] netem: change failed [ 113.567829][ T5716] tipc: Started in network mode [ 113.582510][ T5716] tipc: Node identity 42babd703a8b, cluster identity 4711 [ 113.607876][ T5716] tipc: Enabled bearer , priority 0 [ 113.634871][ T5716] tipc: Resetting bearer [ 113.644490][ T5720] device syzkaller0 entered promiscuous mode [ 113.659916][ T5712] tipc: Disabling bearer [ 113.769111][ T5731] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 114.539008][ T5742] device syzkaller0 entered promiscuous mode [ 114.640171][ T5751] process 'syz.0.398' launched './file2' with NULL argv: empty string added [ 114.971876][ T5757] block device autoloading is deprecated and will be removed. [ 115.267139][ T5783] loop9: detected capacity change from 0 to 524287998 [ 116.137412][ T4263] asus 0005:0B05:8502.0001: No inputs registered, leaving [ 116.190150][ T4263] asus 0005:0B05:8502.0001: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 116.361357][ T5803] fido_id[5803]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 116.388813][ T5814] device syzkaller0 entered promiscuous mode [ 116.751568][ T5819] FAULT_INJECTION: forcing a failure. [ 116.751568][ T5819] name failslab, interval 1, probability 0, space 0, times 0 [ 116.916907][ T5819] CPU: 1 PID: 5819 Comm: syz.4.419 Not tainted syzkaller #0 [ 116.924235][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 116.934292][ T5819] Call Trace: [ 116.937568][ T5819] [ 116.940495][ T5819] dump_stack_lvl+0x188/0x250 [ 116.945189][ T5819] ? show_regs_print_info+0x20/0x20 [ 116.950392][ T5819] ? load_image+0x410/0x410 [ 116.954910][ T5819] ? __lock_acquire+0x7d40/0x7d40 [ 116.959949][ T5819] ? process_measurement+0x17a1/0x1c20 [ 116.965421][ T5819] should_fail+0x383/0x4b0 [ 116.969849][ T5819] should_failslab+0x5/0x20 [ 116.974354][ T5819] slab_pre_alloc_hook+0x51/0xc0 [ 116.979296][ T5819] ? vm_area_dup+0x1e/0xb0 [ 116.983715][ T5819] kmem_cache_alloc+0x3d/0x280 [ 116.988485][ T5819] vm_area_dup+0x1e/0xb0 [ 116.992730][ T5819] __split_vma+0xb1/0x410 [ 116.997062][ T5819] ? find_vma+0x1df/0x230 [ 117.001398][ T5819] __do_munmap+0x38a/0xe10 [ 117.005822][ T5819] ? mmap_region+0x831/0x1730 [ 117.010513][ T5819] mmap_region+0x977/0x1730 [ 117.015046][ T5819] ? get_unmapped_area+0x2f0/0x360 [ 117.020168][ T5819] ? file_mmap_ok+0x11f/0x170 [ 117.024860][ T5819] do_mmap+0x801/0xe30 [ 117.028951][ T5819] vm_mmap_pgoff+0x1c1/0x2d0 [ 117.033558][ T5819] ? account_locked_vm+0xe0/0xe0 [ 117.038512][ T5819] ? __lock_acquire+0x7d40/0x7d40 [ 117.043553][ T5819] ksys_mmap_pgoff+0x5c9/0x790 [ 117.048334][ T5819] ? mmap_region+0x1730/0x1730 [ 117.053110][ T5819] ? lockdep_hardirqs_on+0x94/0x140 [ 117.058312][ T5819] do_syscall_64+0x4c/0xa0 [ 117.062725][ T5819] ? clear_bhb_loop+0x30/0x80 [ 117.067409][ T5819] ? clear_bhb_loop+0x30/0x80 [ 117.072090][ T5819] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.077989][ T5819] RIP: 0033:0x7ff040400b19 [ 117.082413][ T5819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.102024][ T5819] RSP: 002b:00007ff03e657028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 117.110441][ T5819] RAX: ffffffffffffffda RBX: 00007ff040686fa0 RCX: 00007ff040400b19 [ 117.118415][ T5819] RDX: 000000000000000c RSI: 0000000000400000 RDI: 0000200000c00000 [ 117.126390][ T5819] RBP: 00007ff040498af8 R08: ffffffffffffffff R09: 0000000000000000 [ 117.134368][ T5819] R10: 000000000006c033 R11: 0000000000000246 R12: 0000000000000000 [ 117.142341][ T5819] R13: 00007ff040687038 R14: 00007ff040686fa0 R15: 00007ffca9636fd8 [ 117.150335][ T5819] [ 117.153487][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.214054][ T4603] device hsr_slave_0 left promiscuous mode [ 117.236001][ T4603] device hsr_slave_1 left promiscuous mode [ 117.306524][ T4603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.320717][ T4603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.320919][ T5840] loop4: detected capacity change from 0 to 128 [ 117.334688][ T4603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.342657][ T4603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.350547][ T4603] device bridge_slave_1 left promiscuous mode [ 117.357524][ T4603] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.398600][ T4603] device bridge_slave_0 left promiscuous mode [ 117.405310][ T4603] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.412568][ T5840] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 117.473058][ T4603] device veth1_macvtap left promiscuous mode [ 117.492642][ T5840] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.494275][ T4603] device veth0_macvtap left promiscuous mode [ 117.527182][ T4603] device veth1_vlan left promiscuous mode [ 117.539841][ T4603] device veth0_vlan left promiscuous mode [ 117.567347][ T5564] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.577252][ T1698] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 117.763164][ T4603] team0 (unregistering): Port device team_slave_1 removed [ 117.774507][ T4603] team0 (unregistering): Port device team_slave_0 removed [ 117.785943][ T4603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.805098][ T4603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.862962][ T4603] bond0 (unregistering): Released all slaves [ 117.885660][ T5863] netlink: 24 bytes leftover after parsing attributes in process `syz.4.427'. [ 117.909154][ T5863] netlink: 24 bytes leftover after parsing attributes in process `syz.4.427'. [ 118.006708][ T1698] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.023164][ T5870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.430'. [ 118.033168][ T1698] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 118.046476][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.428'. [ 118.166470][ T1698] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.177877][ T5881] No such timeout policy "syz1" [ 118.185805][ T1698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 118.209536][ T1698] usb 6-1: SerialNumber: syz [ 118.264340][ T1698] usb 6-1: bad CDC descriptors [ 119.347260][ T1698] usb 6-1: USB disconnect, device number 2 [ 119.459958][ T5904] device syzkaller0 entered promiscuous mode [ 119.579437][ T4202] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 119.589420][ T4202] CPU: 1 PID: 4202 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 119.596974][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 119.607041][ T4202] Workqueue: hci3 hci_rx_work [ 119.611746][ T4202] Call Trace: [ 119.615023][ T4202] [ 119.617953][ T4202] dump_stack_lvl+0x188/0x250 [ 119.622641][ T4202] ? show_regs_print_info+0x20/0x20 [ 119.627850][ T4202] ? load_image+0x410/0x410 [ 119.632374][ T4202] sysfs_create_dir_ns+0x26a/0x290 [ 119.637495][ T4202] ? sysfs_warn_dup+0xa0/0xa0 [ 119.642172][ T4202] ? kthread+0x42e/0x520 [ 119.646421][ T4202] ? do_raw_spin_unlock+0x11d/0x230 [ 119.651630][ T4202] kobject_add_internal+0x5ba/0xcd0 [ 119.656840][ T4202] kobject_add+0x160/0x230 [ 119.661267][ T4202] ? kobject_init+0x1c0/0x1c0 [ 119.665947][ T4202] ? __raw_spin_lock_init+0x41/0x100 [ 119.671238][ T4202] ? klist_children_get+0x50/0x50 [ 119.676269][ T4202] ? get_device_parent+0x121/0x3e0 [ 119.681389][ T4202] device_add+0x470/0x1050 [ 119.685804][ T4202] ? device_initialize+0x2a5/0x4d0 [ 119.690927][ T4202] hci_conn_add_sysfs+0xd1/0x1e0 [ 119.695874][ T4202] le_conn_complete_evt+0xc55/0x14d0 [ 119.701179][ T4202] ? cs_le_create_conn+0x5e0/0x5e0 [ 119.706298][ T4202] ? __mutex_trylock_common+0x15c/0x260 [ 119.711858][ T4202] hci_le_meta_evt+0x285/0x3ca0 [ 119.716723][ T4202] ? hci_event_packet+0x363/0x1310 [ 119.721845][ T4202] ? __lock_acquire+0x7d40/0x7d40 [ 119.726888][ T4202] ? hci_remote_host_features_evt+0x240/0x240 [ 119.732965][ T4202] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 119.738610][ T4202] ? mark_lock+0x94/0x320 [ 119.742943][ T4202] ? mutex_unlock+0x10/0x10 [ 119.747457][ T4202] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 119.753449][ T4202] ? lock_chain_count+0x20/0x20 [ 119.758305][ T4202] ? __rwlock_init+0x140/0x140 [ 119.763082][ T4202] hci_event_packet+0xe0b/0x1310 [ 119.768032][ T4202] ? _raw_spin_unlock+0x40/0x40 [ 119.772899][ T4202] ? rcu_lock_release+0x20/0x20 [ 119.777764][ T4202] ? hci_send_to_monitor+0x9c/0x4a0 [ 119.782971][ T4202] hci_rx_work+0x255/0xa10 [ 119.787404][ T4202] process_one_work+0x867/0xff0 [ 119.792278][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 119.797917][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 119.803208][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 119.808238][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 119.813797][ T4202] ? wq_worker_running+0x97/0x170 [ 119.818831][ T4202] worker_thread+0xad7/0x12a0 [ 119.823542][ T4202] kthread+0x42e/0x520 [ 119.827616][ T4202] ? rcu_lock_release+0x20/0x20 [ 119.832470][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 119.837074][ T4202] ret_from_fork+0x1f/0x30 [ 119.841510][ T4202] [ 119.847478][ T4202] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 119.861664][ T4202] Bluetooth: hci3: failed to register connection device [ 122.956601][ T5963] device syzkaller0 entered promiscuous mode [ 123.143422][ T5973] Cannot find add_set index 0 as target [ 123.924018][ T5979] device syzkaller0 entered promiscuous mode [ 124.133162][ T5989] block device autoloading is deprecated and will be removed. [ 124.194626][ T5995] bond1: option mode: unable to set because the bond device has slaves [ 124.233969][ T5995] rdma_rxe: rxe_register_device failed with error -23 [ 124.274082][ T5995] rdma_rxe: failed to add bond0 [ 124.429018][ T5997] block nbd5: shutting down sockets [ 124.563946][ T6021] loop1: detected capacity change from 0 to 512 [ 124.614171][ T6021] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 124.681399][ T6021] EXT4-fs (loop1): 1 truncate cleaned up [ 124.712600][ T6021] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,nolazytime,discard,max_batch_time=0x0000000000000200,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: none. [ 125.136525][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 125.136557][ T26] audit: type=1326 audit(1793640824.153:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.5.472" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57cb94cb19 code=0x0 [ 125.838817][ T6067] bond1: option mode: unable to set because the bond device has slaves [ 125.946323][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.6.478'. [ 126.569816][ T6078] device syzkaller0 entered promiscuous mode [ 126.841491][ T6096] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.851082][ T6096] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.859829][ T6096] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.868563][ T6096] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.885319][ T6096] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.894332][ T6096] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.903235][ T6096] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.912135][ T6096] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.951081][ T6100] loop4: detected capacity change from 0 to 512 [ 126.956032][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.488'. [ 127.063953][ T6096] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.072877][ T6096] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.081666][ T6096] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.090518][ T6096] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.113222][ T6100] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.133766][ T6096] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.142892][ T6096] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.151813][ T6096] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.160714][ T6096] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.186362][ T6100] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.241568][ T6112] bond1: option mode: unable to set because the bond device has slaves [ 127.339914][ T6119] rdma_rxe: already configured on bond0 [ 128.643515][ T6153] device syzkaller0 entered promiscuous mode [ 129.275391][ T6181] loop1: detected capacity change from 0 to 512 [ 130.171789][ T6187] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.180607][ T6187] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.189373][ T6187] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.198813][ T6187] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.237516][ T6181] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 130.268495][ T6187] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.277474][ T6187] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.286409][ T6187] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.295951][ T6187] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.358041][ T6181] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,barrier=0x000000000000000d,minixdf,stripe=0x0000000000000001,resuid=0x0000000000000000,jqfmt=vfsv1,grpjquota=,i_version,,errors=continue. Quota mode: writeback. [ 130.382502][ T6181] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.431818][ T6194] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.440826][ T6194] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.449642][ T6194] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.458386][ T6194] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.518347][ T6209] loop5: detected capacity change from 0 to 2048 [ 130.570267][ T6194] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.579399][ T6194] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.588325][ T6194] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.597238][ T6194] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.643789][ T6209] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,. Quota mode: writeback. [ 131.127961][ T6222] loop1: detected capacity change from 0 to 512 [ 131.297715][ T6222] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.422126][ T6222] EXT4-fs (loop1): 1 truncate cleaned up [ 131.438798][ T6222] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 131.615683][ T6238] device syzkaller0 entered promiscuous mode [ 131.762242][ T6253] netlink: 'syz.0.521': attribute type 1 has an invalid length. [ 131.787375][ T6241] netlink: 32 bytes leftover after parsing attributes in process `syz.1.518'. [ 131.814938][ T6253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.823027][ T6260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.521'. [ 131.891285][ T6261] loop4: detected capacity change from 0 to 512 [ 131.912596][ T6260] device bond2 entered promiscuous mode [ 132.318871][ T6261] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.524234][ T6261] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.619454][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.625773][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.676922][ T6253] bond2: (slave dummy0): making interface the new active one [ 132.692807][ T6261] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 132.702185][ T6253] device dummy0 entered promiscuous mode [ 132.717602][ T6253] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 132.765821][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 132.809819][ T6260] netlink: 'syz.0.521': attribute type 10 has an invalid length. [ 132.826981][ T6260] netlink: 40 bytes leftover after parsing attributes in process `syz.0.521'. [ 132.849194][ T6260] bond2: (slave dummy0): Releasing active interface [ 133.102464][ T6280] bond1: (slave vlan2): making interface the new active one [ 133.151874][ T6296] rdma_rxe: rxe_register_device failed with error -23 [ 133.187896][ T6280] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 133.197976][ T6296] rdma_rxe: failed to add bond0 [ 133.299175][ T6311] loop1: detected capacity change from 0 to 1024 [ 133.432709][ T6313] netlink: 32 bytes leftover after parsing attributes in process `syz.5.535'. [ 133.460978][ T6311] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,grpquota,grpid,nombcache,,errors=continue. Quota mode: writeback. [ 133.561952][ T6311] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.590476][ T6320] device syzkaller0 entered promiscuous mode [ 135.032388][ T6360] bond1: option mode: unable to set because the bond device has slaves [ 135.362518][ T6361] rdma_rxe: rxe_register_device failed with error -23 [ 135.510296][ T6361] rdma_rxe: failed to add bond0 [ 135.565523][ T6367] loop1: detected capacity change from 0 to 512 [ 135.659996][ T6367] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.549: bg 0: block 5: invalid block bitmap [ 135.764897][ T6367] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 135.835324][ T6383] netlink: 32 bytes leftover after parsing attributes in process `syz.6.548'. [ 135.985219][ T6367] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.549: invalid indirect mapped block 3 (level 2) [ 136.515923][ T6367] EXT4-fs (loop1): 1 orphan inode deleted [ 136.542415][ T6367] EXT4-fs (loop1): 1 truncate cleaned up [ 136.550574][ T6367] EXT4-fs (loop1): mounted filesystem without journal. Opts: commit=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 137.416476][ T6414] device syzkaller0 entered promiscuous mode [ 137.504704][ T6423] bond1: option mode: unable to set because the bond device has slaves [ 137.641972][ T6423] rdma_rxe: rxe_register_device failed with error -23 [ 137.715827][ T6423] rdma_rxe: failed to add bond0 [ 139.240641][ T6441] netlink: 200 bytes leftover after parsing attributes in process `syz.0.568'. [ 140.712446][ T6475] device syzkaller0 entered promiscuous mode [ 140.947612][ T6484] netlink: 200 bytes leftover after parsing attributes in process `syz.5.581'. [ 141.057816][ T6486] bond1: (slave vlan2): making interface the new active one [ 141.066877][ T6492] rdma_rxe: rxe_register_device failed with error -23 [ 141.073769][ T6492] rdma_rxe: failed to add bond0 [ 141.102341][ T6486] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 141.394764][ T6503] loop5: detected capacity change from 0 to 4096 [ 141.406286][ T5521] Bluetooth: hci2: command 0x0406 tx timeout [ 141.563151][ T6503] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 141.583367][ T6503] EXT4-fs (loop5): Test dummy encryption mode enabled [ 141.600714][ T6513] FAULT_INJECTION: forcing a failure. [ 141.600714][ T6513] name failslab, interval 1, probability 0, space 0, times 0 [ 141.645120][ T6503] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,init_itable=0x0000000000000001,nodelalloc,minixdf,nolazytime,,errors=continue. Quota mode: writeback. [ 141.645195][ T6513] CPU: 1 PID: 6513 Comm: syz.6.587 Not tainted syzkaller #0 [ 141.673850][ T6513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 141.683909][ T6513] Call Trace: [ 141.687189][ T6513] [ 141.690126][ T6513] dump_stack_lvl+0x188/0x250 [ 141.694825][ T6513] ? show_regs_print_info+0x20/0x20 [ 141.700035][ T6513] ? load_image+0x410/0x410 [ 141.704551][ T6513] ? __lock_acquire+0x7d40/0x7d40 [ 141.709599][ T6513] should_fail+0x383/0x4b0 [ 141.714033][ T6513] should_failslab+0x5/0x20 [ 141.718546][ T6513] slab_pre_alloc_hook+0x51/0xc0 [ 141.723492][ T6513] kmem_cache_alloc_node+0x47/0x2c0 [ 141.728696][ T6513] ? __alloc_skb+0xf4/0x750 [ 141.733205][ T6513] ? __lock_acquire+0x7d40/0x7d40 [ 141.738247][ T6513] __alloc_skb+0xf4/0x750 [ 141.742592][ T6513] sk_stream_alloc_skb+0x204/0xb50 [ 141.747721][ T6513] tcp_connect+0x16d6/0x4970 [ 141.752349][ T6513] ? prandom_u32+0x217/0x250 [ 141.756951][ T6513] tcp_v6_connect+0x11cf/0x1a10 [ 141.761820][ T6513] ? tcp_v6_pre_connect+0xf0/0xf0 [ 141.766869][ T6513] ? mark_lock+0x94/0x320 [ 141.771208][ T6513] __inet_stream_connect+0x244/0xd80 [ 141.776501][ T6513] ? lock_chain_count+0x20/0x20 [ 141.781364][ T6513] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 141.787359][ T6513] ? __local_bh_enable_ip+0x136/0x1c0 [ 141.792773][ T6513] ? inet_dgram_connect+0x340/0x340 [ 141.797979][ T6513] ? __local_bh_enable_ip+0x136/0x1c0 [ 141.803355][ T6513] ? _local_bh_enable+0xa0/0xa0 [ 141.808222][ T6513] inet_stream_connect+0x62/0xa0 [ 141.813162][ T6513] ? __inet_stream_connect+0xd80/0xd80 [ 141.818628][ T6513] __sys_connect+0x3cb/0x450 [ 141.823224][ T6513] ? __sys_connect_file+0x170/0x170 [ 141.828457][ T6513] __x64_sys_connect+0x76/0x80 [ 141.833228][ T6513] do_syscall_64+0x4c/0xa0 [ 141.837648][ T6513] ? clear_bhb_loop+0x30/0x80 [ 141.842332][ T6513] ? clear_bhb_loop+0x30/0x80 [ 141.847018][ T6513] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.847376][ T6503] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 141.852915][ T6513] RIP: 0033:0x7f7b546cdb19 [ 141.864588][ T6513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.884194][ T6513] RSP: 002b:00007f7b52924028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 141.892617][ T6513] RAX: ffffffffffffffda RBX: 00007f7b54953fa0 RCX: 00007f7b546cdb19 [ 141.900590][ T6513] RDX: 000000000000001c RSI: 0000200000000840 RDI: 0000000000000004 [ 141.908568][ T6513] RBP: 00007f7b54765af8 R08: 0000000000000000 R09: 0000000000000000 [ 141.916544][ T6513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.924520][ T6513] R13: 00007f7b54954038 R14: 00007f7b54953fa0 R15: 00007ffc8745b968 [ 141.932511][ T6513] [ 142.163876][ T6530] loop5: detected capacity change from 0 to 512 [ 142.247408][ T6530] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 142.283422][ T6530] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.903938][ T6538] loop4: detected capacity change from 0 to 256 [ 143.179655][ T6545] device syzkaller0 entered promiscuous mode [ 143.263400][ T6551] netlink: 200 bytes leftover after parsing attributes in process `syz.5.592'. [ 143.499217][ T6560] bond1: (slave vlan2): making interface the new active one [ 143.594970][ T6560] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 144.115053][ T6560] rdma_rxe: rxe_register_device failed with error -23 [ 144.146615][ T6560] rdma_rxe: failed to add bond0 [ 144.883393][ T6588] loop6: detected capacity change from 0 to 512 [ 145.465610][ T6588] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 145.509183][ T6588] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.635329][ T6588] capability: warning: `syz.6.601' uses 32-bit capabilities (legacy support in use) [ 146.021225][ T6609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.605'. [ 148.349786][ T6666] netlink: 16 bytes leftover after parsing attributes in process `syz.5.618'. [ 148.381393][ T6684] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 148.389864][ T6681] fuse: Bad value for 'fd' [ 148.416831][ T6684] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.442256][ T6684] infiniband syz0: set active [ 148.453307][ T6684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.473646][ T6684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.483330][ T6684] device bridge_slave_0 left promiscuous mode [ 148.490927][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.666087][ T6684] device bridge_slave_1 left promiscuous mode [ 148.683380][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.038406][ T6684] bond0: (slave bond_slave_0): Releasing backup interface [ 149.045960][ T6684] rdma_rxe: ignoring netdev event = 12 for bond0 [ 149.058297][ T6684] bond0: (slave bond_slave_1): Releasing backup interface [ 149.065753][ T6684] rdma_rxe: ignoring netdev event = 8 for bond0 [ 149.072594][ T6684] rdma_rxe: ignoring netdev event = 18 for bond0 [ 149.079760][ T6684] rdma_rxe: ignoring netdev event = 12 for bond0 [ 149.110396][ T6684] team0: Port device team_slave_0 removed [ 149.125297][ T6684] team0: Port device team_slave_1 removed [ 149.132508][ T6684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.140870][ T6684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.151896][ T6684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.159601][ T6684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.174573][ T6684] bond1: (slave vlan2): Releasing active interface [ 149.187125][ T5521] bond0 speed is unknown, defaulting to 1000 [ 149.209222][ T145] infiniband syz0: set down [ 149.218885][ T21] bond0 speed is unknown, defaulting to 1000 [ 149.235280][ T145] rdma_rxe: ignoring netdev event = 22 for bond0 [ 149.245761][ T4265] bond0 speed is unknown, defaulting to 1000 [ 149.337738][ T21] bond0 speed is unknown, defaulting to 1000 [ 150.244894][ T6723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.638'. [ 151.253883][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'. [ 151.269793][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'. [ 151.281882][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'. [ 151.293203][ T6768] FAULT_INJECTION: forcing a failure. [ 151.293203][ T6768] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 151.307431][ T6768] CPU: 0 PID: 6768 Comm: syz.4.650 Not tainted syzkaller #0 [ 151.314723][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 151.324782][ T6768] Call Trace: [ 151.328060][ T6768] [ 151.330991][ T6768] dump_stack_lvl+0x188/0x250 [ 151.335679][ T6768] ? verify_lock_unused+0x140/0x140 [ 151.340887][ T6768] ? show_regs_print_info+0x20/0x20 [ 151.346090][ T6768] ? load_image+0x410/0x410 [ 151.350609][ T6768] ? mark_lock+0x94/0x320 [ 151.354947][ T6768] should_fail+0x383/0x4b0 [ 151.359378][ T6768] prepare_alloc_pages+0x1e3/0x5b0 [ 151.364511][ T6768] __alloc_pages+0x11b/0x480 [ 151.369113][ T6768] ? zone_statistics+0x170/0x170 [ 151.374060][ T6768] ? rcu_lock_acquire+0x30/0x30 [ 151.378922][ T6768] ? alloc_pages+0x452/0x560 [ 151.383524][ T6768] __get_free_pages+0x8/0x30 [ 151.388118][ T6768] __tlb_remove_page_size+0x1f2/0x3f0 [ 151.393514][ T6768] unmap_page_range+0xfcf/0x2410 [ 151.398490][ T6768] unmap_vmas+0x131/0x250 [ 151.402830][ T6768] ? unmap_page_range+0x2410/0x2410 [ 151.408030][ T6768] ? __mutex_lock_common+0x435/0x2400 [ 151.413410][ T6768] ? exit_mm_release+0x16/0x30 [ 151.418188][ T6768] exit_mmap+0x3b9/0x640 [ 151.422438][ T6768] ? vm_brk+0x20/0x20 [ 151.426440][ T6768] ? uprobe_clear_state+0x2f6/0x460 [ 151.431650][ T6768] __mmput+0x115/0x390 [ 151.435730][ T6768] exit_mm+0x632/0x7b0 [ 151.439801][ T6768] ? perf_pmu_migrate_context+0xb70/0xb70 [ 151.445531][ T6768] ? do_exit+0x2100/0x2100 [ 151.449948][ T6768] ? __ia32_sys_timer_delete+0x40/0x40 [ 151.455415][ T6768] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 151.460884][ T6768] ? tty_audit_exit+0x149/0x1f0 [ 151.465740][ T6768] do_exit+0x5b8/0x2100 [ 151.469909][ T6768] ? put_task_struct+0x80/0x80 [ 151.474680][ T6768] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 151.480673][ T6768] ? _raw_spin_lock_irq+0xb7/0xf0 [ 151.485705][ T6768] do_group_exit+0x12c/0x2f0 [ 151.490301][ T6768] ? lockdep_hardirqs_on+0x94/0x140 [ 151.495513][ T6768] get_signal+0x7eb/0x12e0 [ 151.499955][ T6768] arch_do_signal_or_restart+0xe6/0x12a0 [ 151.505610][ T6768] ? futex_exit_release+0x1c0/0x1c0 [ 151.510816][ T6768] ? get_sigframe_size+0x10/0x10 [ 151.515764][ T6768] ? __context_tracking_exit+0x4c/0x80 [ 151.521246][ T6768] ? exit_to_user_mode_loop+0x3b/0x130 [ 151.526711][ T6768] exit_to_user_mode_loop+0x9e/0x130 [ 151.532002][ T6768] exit_to_user_mode_prepare+0xee/0x180 [ 151.537555][ T6768] syscall_exit_to_user_mode+0x16/0x40 [ 151.543020][ T6768] do_syscall_64+0x58/0xa0 [ 151.547437][ T6768] ? clear_bhb_loop+0x30/0x80 [ 151.552122][ T6768] ? clear_bhb_loop+0x30/0x80 [ 151.556807][ T6768] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.562702][ T6768] RIP: 0033:0x7ff040400b19 [ 151.567119][ T6768] Code: Unable to access opcode bytes at RIP 0x7ff040400aef. [ 151.574481][ T6768] RSP: 002b:00007ff03e6570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 151.582907][ T6768] RAX: 0000000000000001 RBX: 00007ff040686fa8 RCX: 00007ff040400b19 [ 151.590880][ T6768] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff040686fac [ 151.598852][ T6768] RBP: 00007ff040686fa0 R08: 000f1f902610d824 R09: 0000000000000000 [ 151.606825][ T6768] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 151.614797][ T6768] R13: 00007ff040687038 R14: 00007ffca9636ef0 R15: 00007ffca9636fd8 [ 151.622784][ T6768] [ 152.254233][ T6800] FAULT_INJECTION: forcing a failure. [ 152.254233][ T6800] name failslab, interval 1, probability 0, space 0, times 0 [ 152.276820][ T6800] CPU: 0 PID: 6800 Comm: syz.1.655 Not tainted syzkaller #0 [ 152.284164][ T6800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 152.294231][ T6800] Call Trace: [ 152.297521][ T6800] [ 152.300461][ T6800] dump_stack_lvl+0x188/0x250 [ 152.305162][ T6800] ? show_regs_print_info+0x20/0x20 [ 152.310376][ T6800] ? load_image+0x410/0x410 [ 152.314895][ T6800] ? __lock_acquire+0x7d40/0x7d40 [ 152.319934][ T6800] ? fuse_dev_alloc+0x8e/0x2b0 [ 152.324713][ T6800] ? fuse_fill_super+0x173/0x1f0 [ 152.329660][ T6800] ? get_tree_nodev+0xb0/0x160 [ 152.334435][ T6800] ? fuse_get_tree+0x2d7/0x4d0 [ 152.339219][ T6800] should_fail+0x383/0x4b0 [ 152.343656][ T6800] should_failslab+0x5/0x20 [ 152.348169][ T6800] slab_pre_alloc_hook+0x51/0xc0 [ 152.353120][ T6800] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 152.358850][ T6800] ? bdi_alloc+0x4b/0x130 [ 152.363199][ T6800] bdi_alloc+0x4b/0x130 [ 152.367350][ T6800] super_setup_bdi_name+0xa5/0x200 [ 152.372475][ T6800] ? fuse_fill_super_common+0x4d3/0x10a0 [ 152.378125][ T6800] ? vfs_get_tree+0x270/0x270 [ 152.382824][ T6800] ? do_raw_spin_unlock+0x11d/0x230 [ 152.388042][ T6800] fuse_fill_super_common+0x610/0x10a0 [ 152.393524][ T6800] ? up_write+0x1b6/0x410 [ 152.397876][ T6800] fuse_fill_super+0x173/0x1f0 [ 152.402664][ T6800] ? fuse_reconfigure+0xb0/0xb0 [ 152.407530][ T6800] get_tree_nodev+0xb0/0x160 [ 152.412141][ T6800] fuse_get_tree+0x2d7/0x4d0 [ 152.416749][ T6800] vfs_get_tree+0x88/0x270 [ 152.421183][ T6800] do_new_mount+0x247/0xa50 [ 152.425706][ T6800] __se_sys_mount+0x2e3/0x3d0 [ 152.430397][ T6800] ? __x64_sys_mount+0xc0/0xc0 [ 152.435179][ T6800] ? lockdep_hardirqs_on+0x94/0x140 [ 152.440384][ T6800] ? __x64_sys_mount+0x1c/0xc0 [ 152.445164][ T6800] do_syscall_64+0x4c/0xa0 [ 152.449588][ T6800] ? clear_bhb_loop+0x30/0x80 [ 152.454274][ T6800] ? clear_bhb_loop+0x30/0x80 [ 152.458964][ T6800] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.464866][ T6800] RIP: 0033:0x7fda6adbfb19 [ 152.469291][ T6800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.488905][ T6800] RSP: 002b:00007fda69016028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 152.497326][ T6800] RAX: ffffffffffffffda RBX: 00007fda6b045fa0 RCX: 00007fda6adbfb19 [ 152.505304][ T6800] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 152.513281][ T6800] RBP: 00007fda6ae57af8 R08: 0000200000000180 R09: 0000000000000000 [ 152.521257][ T6800] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.529225][ T6800] R13: 00007fda6b046038 R14: 00007fda6b045fa0 R15: 00007ffcceefff08 [ 152.537203][ T6800] [ 153.384237][ T6843] loop5: detected capacity change from 0 to 8 [ 153.553479][ T26] audit: type=1800 audit(1793640852.563:206): pid=6843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.672" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 153.673774][ T6852] loop1: detected capacity change from 0 to 2048 [ 153.763030][ T6852] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 154.253873][ T26] audit: type=1800 audit(1793640853.283:207): pid=6872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.675" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 154.652142][ T6887] netlink: 'syz.0.686': attribute type 1 has an invalid length. [ 155.284906][ T6897] No such timeout policy "syz1" [ 155.328265][ T6887] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.359741][ T6892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.686'. [ 155.405354][ T6892] device bond3 entered promiscuous mode [ 155.416393][ T6895] device dummy0 left promiscuous mode [ 155.514429][ T6895] bond3: (slave dummy0): making interface the new active one [ 155.537678][ T6895] device dummy0 entered promiscuous mode [ 155.553970][ T6895] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 155.604247][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 155.773584][ T6929] loop6: detected capacity change from 0 to 512 [ 155.826876][ T6929] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 155.854319][ T6929] EXT4-fs (loop6): Unrecognized mount option "smackfsroot=802.15.4 MA" or missing value [ 156.602116][ T6954] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 156.654717][ T6944] netlink: 100 bytes leftover after parsing attributes in process `syz.6.708'. [ 156.852804][ T6944] netlink: 100 bytes leftover after parsing attributes in process `syz.6.708'. [ 158.225874][ T6983] FAULT_INJECTION: forcing a failure. [ 158.225874][ T6983] name failslab, interval 1, probability 0, space 0, times 0 [ 158.239412][ T6983] CPU: 1 PID: 6983 Comm: syz.5.719 Not tainted syzkaller #0 [ 158.246712][ T6983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 158.256770][ T6983] Call Trace: [ 158.260048][ T6983] [ 158.262982][ T6983] dump_stack_lvl+0x188/0x250 [ 158.267671][ T6983] ? verify_lock_unused+0x140/0x140 [ 158.272880][ T6983] ? show_regs_print_info+0x20/0x20 [ 158.278085][ T6983] ? load_image+0x410/0x410 [ 158.282605][ T6983] ? rcu_lock_release+0x9/0x20 [ 158.287380][ T6983] should_fail+0x383/0x4b0 [ 158.291809][ T6983] should_failslab+0x5/0x20 [ 158.296314][ T6983] slab_pre_alloc_hook+0x51/0xc0 [ 158.301264][ T6983] __kmalloc+0x6b/0x340 [ 158.305420][ T6983] ? fib6_info_alloc+0x2e/0xe0 [ 158.310197][ T6983] fib6_info_alloc+0x2e/0xe0 [ 158.314794][ T6983] ip6_route_info_create+0x455/0x1220 [ 158.320185][ T6983] addrconf_f6i_alloc+0x1ec/0x430 [ 158.325216][ T6983] ? ip6_route_del+0x14f0/0x14f0 [ 158.330179][ T6983] ? do_raw_read_unlock+0x70/0x70 [ 158.335222][ T6983] ? __ipv6_dev_ac_inc+0x5f/0x820 [ 158.340263][ T6983] __ipv6_dev_ac_inc+0x248/0x820 [ 158.345225][ T6983] ipv6_sock_ac_join+0x4a3/0x6b0 [ 158.350185][ T6983] ipv6_setsockopt+0x236d/0x3cc0 [ 158.355135][ T6983] ? finish_lock_switch+0x12d/0x290 [ 158.359193][ T6984] netlink: 20 bytes leftover after parsing attributes in process `syz.6.720'. [ 158.360354][ T6983] ? ipv6_update_options+0x400/0x400 [ 158.374973][ T6983] ? __schedule+0x11cb/0x4350 [ 158.379690][ T6983] ? futex_wait_queue_me+0x16e/0x440 [ 158.384988][ T6983] ? __might_sleep+0xf0/0xf0 [ 158.389585][ T6983] ? __lock_acquire+0x7d40/0x7d40 [ 158.394620][ T6983] ? mark_lock+0x94/0x320 [ 158.398959][ T6983] ? __lock_acquire+0x12df/0x7d40 [ 158.404015][ T6983] ? __lock_acquire+0x13b3/0x7d40 [ 158.409056][ T6983] ? verify_lock_unused+0x140/0x140 [ 158.414266][ T6983] ? aa_label_sk_perm+0x3e6/0x540 [ 158.419314][ T6983] ? aa_sk_perm+0x910/0x910 [ 158.423852][ T6983] ? rcu_lock_release+0x9/0x20 [ 158.428633][ T6983] tcp_setsockopt+0x229/0x1e60 [ 158.433414][ T6983] ? aa_sk_perm+0x7dc/0x910 [ 158.437929][ T6983] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 158.443319][ T6983] ? aa_af_perm+0x340/0x340 [ 158.447838][ T6983] ? __fget_files+0x402/0x470 [ 158.452528][ T6983] ? aa_sock_opt_perm+0x74/0x100 [ 158.457477][ T6983] ? sock_common_setsockopt+0x32/0xb0 [ 158.462862][ T6983] ? sock_common_recvmsg+0x1c0/0x1c0 [ 158.468164][ T6983] __sys_setsockopt+0x2bf/0x3d0 [ 158.473028][ T6983] __x64_sys_setsockopt+0xb1/0xc0 [ 158.478065][ T6983] do_syscall_64+0x4c/0xa0 [ 158.482487][ T6983] ? clear_bhb_loop+0x30/0x80 [ 158.487170][ T6983] ? clear_bhb_loop+0x30/0x80 [ 158.491849][ T6983] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.497751][ T6983] RIP: 0033:0x7f57cb94cb19 [ 158.502172][ T6983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.521782][ T6983] RSP: 002b:00007f57c9ba3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 158.530206][ T6983] RAX: ffffffffffffffda RBX: 00007f57cbbd2fa0 RCX: 00007f57cb94cb19 [ 158.538183][ T6983] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000004 [ 158.546159][ T6983] RBP: 00007f57cb9e4af8 R08: 0000000000000020 R09: 0000000000000000 [ 158.554153][ T6983] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 158.562134][ T6983] R13: 00007f57cbbd3038 R14: 00007f57cbbd2fa0 R15: 00007fff87828238 [ 158.570128][ T6983] [ 158.689715][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.723'. [ 159.490630][ T7010] loop5: detected capacity change from 0 to 128 [ 159.586784][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 159.734283][ T7028] rxe_eth0 speed is unknown, defaulting to 1000 [ 160.170663][ T7028] bond0 speed is unknown, defaulting to 1000 [ 160.842158][ T7010] FAT-fs (loop5): Filesystem has been set read-only [ 161.132978][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.297633][ T7029] rxe_eth0 speed is unknown, defaulting to 1000 [ 161.335165][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.353946][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.374321][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.390558][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.409911][ T7044] netlink: 100 bytes leftover after parsing attributes in process `syz.4.731'. [ 161.469889][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.637391][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.650078][ T7044] netlink: 100 bytes leftover after parsing attributes in process `syz.4.731'. [ 161.769927][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.853310][ T7067] bond1: option mode: unable to set because the bond device has slaves [ 161.863411][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.922531][ T7029] bond0 speed is unknown, defaulting to 1000 [ 161.948635][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.970226][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 161.993270][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 162.021841][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 162.043138][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 162.096924][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 162.105399][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 162.136165][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 162.264954][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 162.596175][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 162.762519][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 162.771085][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 162.779557][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 162.788046][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 162.796513][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 162.804943][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 162.813422][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 162.823022][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 162.831512][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 162.840214][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 162.849048][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 162.874721][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 162.896038][ T7079] loop6: detected capacity change from 0 to 1024 [ 162.897788][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 162.914963][ T7067] rdma_rxe: rxe_register_device failed with error -23 [ 162.929836][ T7067] rdma_rxe: failed to add bond0 [ 162.940048][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 162.969819][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 163.007480][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 163.027262][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 163.051154][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 163.062410][ T7079] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: none. [ 163.075423][ T7079] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.076959][ T7085] loop1: detected capacity change from 0 to 128 [ 163.120374][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 163.129089][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 163.137622][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 163.146190][ T7010] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 163.154855][ T26] audit: type=1800 audit(1793640862.183:208): pid=7010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.725" name="file1" dev="loop5" ino=1048652 res=0 errno=0 [ 163.202220][ T7079] netlink: 44 bytes leftover after parsing attributes in process `syz.6.738'. [ 163.216688][ T7085] EXT4-fs (loop1): Test dummy encryption mode enabled [ 163.291209][ T7085] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,test_dummy_encryption,. Quota mode: none. [ 163.504861][ T7085] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.069604][ T7085] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 165.750762][ T7115] device syzkaller0 entered promiscuous mode [ 165.856537][ T7083] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 166.012526][ T7126] loop5: detected capacity change from 0 to 512 [ 166.102751][ T7125] netlink: 100 bytes leftover after parsing attributes in process `syz.1.748'. [ 166.132191][ T7126] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 166.179842][ T7137] bond1: option mode: unable to set because the bond device has slaves [ 166.221872][ T7137] rdma_rxe: rxe_register_device failed with error -23 [ 166.248869][ T7137] rdma_rxe: failed to add bond0 [ 166.321017][ T7125] netlink: 100 bytes leftover after parsing attributes in process `syz.1.748'. [ 166.339987][ T7126] EXT4-fs (loop5): 1 truncate cleaned up [ 166.356030][ T7126] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000010,,errors=continue. Quota mode: none. [ 167.159449][ T7154] loop6: detected capacity change from 0 to 1024 [ 167.288482][ T7154] EXT4-fs (loop6): Ignoring removed oldalloc option [ 167.322508][ T7154] EXT4-fs (loop6): Ignoring removed orlov option [ 167.413272][ T7154] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 167.547965][ T7154] System zones: 0-1, 3-8 [ 167.593273][ T7154] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,oldalloc,orlov,dioread_lock,,errors=continue. Quota mode: none. [ 168.009914][ T7154] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.544235][ T7184] loop4: detected capacity change from 0 to 256 [ 168.684630][ T7186] device syzkaller0 entered promiscuous mode [ 168.708614][ T5523] EXT4-fs error (device loop6): ext4_map_blocks:741: inode #15: comm kworker/u4:12: lblock 0 mapped to illegal pblock 0 (length 6) [ 168.728266][ T5523] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 168.810363][ T5523] EXT4-fs (loop6): This should not happen!! Data will be lost [ 168.810363][ T5523] [ 168.831775][ T5523] EXT4-fs error (device loop6): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:12: lblock 8 mapped to illegal pblock 8 (length 8) [ 168.838540][ T7188] bond1: option mode: unable to set because the bond device has slaves [ 168.920822][ T7188] rdma_rxe: rxe_register_device failed with error -23 [ 168.923287][ T5523] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 168.948366][ T7188] rdma_rxe: failed to add bond0 [ 168.971000][ T5523] EXT4-fs (loop6): This should not happen!! Data will be lost [ 168.971000][ T5523] [ 169.977490][ T7215] loop1: detected capacity change from 0 to 512 [ 170.083712][ T7215] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 170.132659][ T7215] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,min_batch_time=0x0000000000000000,nombcache,,errors=continue. Quota mode: writeback. [ 170.156427][ T7215] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.180405][ T7219] loop6: detected capacity change from 0 to 4096 [ 170.251324][ T7219] EXT4-fs (loop6): Test dummy encryption mode enabled [ 170.271768][ T7219] EXT4-fs (loop6): inline encryption not supported [ 170.411319][ T7237] tipc: Enabling of bearer rejected, failed to enable media [ 170.456608][ T7219] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 170.688806][ T7219] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 171.019745][ T4265] Bluetooth: hci1: command 0x0406 tx timeout [ 171.028435][ T4265] Bluetooth: hci3: command 0x0406 tx timeout [ 171.036963][ T7219] EXT4-fs (loop6): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,inlinecrypt,jqfmt=vfsv1,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 171.205044][ T7255] loop4: detected capacity change from 0 to 512 [ 171.283463][ T7241] device-mapper: cache: Origin device (ram2) discard unsupported: Disabling discard passdown. [ 171.427542][ T7255] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 173.160162][ T7255] EXT4-fs (loop4): 1 truncate cleaned up [ 173.206271][ T7255] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000010,,errors=continue. Quota mode: none. [ 173.422432][ T7280] bond1: option mode: unable to set because the bond device has slaves [ 173.517633][ T7280] rdma_rxe: rxe_register_device failed with error -23 [ 173.530045][ T7283] netlink: 100 bytes leftover after parsing attributes in process `syz.1.778'. [ 173.580588][ T7280] rdma_rxe: failed to add bond0 [ 174.776513][ T7315] ip_tables: iptables: counters copy to user failed while replacing table [ 174.928375][ T7325] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 175.291954][ T7344] loop4: detected capacity change from 0 to 4096 [ 175.306754][ T7333] device-mapper: cache: Origin device (ram12) discard unsupported: Disabling discard passdown. [ 175.327985][ T7339] rdma_rxe: rxe_register_device failed with error -23 [ 175.331661][ T7338] netlink: 100 bytes leftover after parsing attributes in process `syz.0.794'. [ 175.343332][ T7339] rdma_rxe: failed to add bond0 [ 175.365982][ T7344] EXT4-fs (loop4): Test dummy encryption mode enabled [ 175.404596][ T7344] EXT4-fs (loop4): inline encryption not supported [ 175.426330][ T7344] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 175.436452][ T7344] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 175.471454][ T7344] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,inlinecrypt,jqfmt=vfsv1,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 175.834197][ T7379] device syzkaller0 entered promiscuous mode [ 178.446762][ T26] audit: type=1326 audit(1793640877.473:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.0.811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ee62eb19 code=0x7ffc0000 [ 178.946807][ T26] audit: type=1326 audit(1793640877.673:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.0.811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ee62eb19 code=0x7ffc0000 [ 179.042759][ T26] audit: type=1326 audit(1793640877.673:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.0.811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ee62eb19 code=0x7ffc0000 [ 179.071471][ T26] audit: type=1326 audit(1793640877.673:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.0.811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f60ee62eb19 code=0x7ffc0000 [ 179.181725][ T7415] device syzkaller0 entered promiscuous mode [ 179.186294][ T26] audit: type=1326 audit(1793640877.673:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.0.811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ee62eb19 code=0x7ffc0000 [ 179.266338][ T26] audit: type=1326 audit(1793640877.673:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.0.811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ee62eb19 code=0x7ffc0000 [ 179.303411][ T26] audit: type=1326 audit(1793640877.673:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.0.811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ee62eb19 code=0x7ffc0000 [ 179.306828][ T4265] sony 0005:054C:03D5.0002: UNIQ does not contain a MAC address; duplicate check skipped [ 179.350056][ T7418] device syzkaller0 entered promiscuous mode [ 179.382500][ T26] audit: type=1326 audit(1793640877.673:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.0.811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f60ee62eb19 code=0x7ffc0000 [ 179.422086][ T26] audit: type=1326 audit(1793640877.673:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.0.811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ee62eb19 code=0x7ffc0000 [ 179.424902][ T4265] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0002/input/input6 [ 179.456541][ T26] audit: type=1326 audit(1793640877.673:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.0.811" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ee62eb19 code=0x7ffc0000 [ 179.514388][ T4265] sony 0005:054C:03D5.0002: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 179.663091][ T7437] loop6: detected capacity change from 0 to 256 [ 179.756803][ T7443] fido_id[7443]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 180.620127][ T7454] loop1: detected capacity change from 0 to 4096 [ 180.909006][ T7454] EXT4-fs (loop1): Test dummy encryption mode enabled [ 181.099705][ T7454] EXT4-fs (loop1): inline encryption not supported [ 181.156521][ T7454] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 181.231855][ T7454] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 181.438583][ T7454] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,inlinecrypt,jqfmt=vfsv1,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 182.396462][ T7497] loop4: detected capacity change from 0 to 512 [ 184.926146][ T7497] EXT4-fs (loop4): inline encryption not supported [ 184.959138][ T7520] loop5: detected capacity change from 0 to 256 [ 185.034440][ T7497] EXT4-fs (loop4): 1 orphan inode deleted [ 185.096435][ T7497] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,inlinecrypt,usrquota,jqfmt=vfsv1,jqfmt=vfsv0,delalloc,journal_dev=0x000000000000844d,barrier=0x000000000000562a,i_version,,errors=continue. Quota mode: writeback. [ 185.579192][ T7532] rxe_eth0 speed is unknown, defaulting to 1000 [ 185.663602][ T7532] bond0 speed is unknown, defaulting to 1000 [ 186.396510][ T7535] loop1: detected capacity change from 0 to 128 [ 186.549309][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 186.605672][ T7535] FAT-fs (loop1): Filesystem has been set read-only [ 186.676422][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 187.282785][ T7540] rxe_eth0 speed is unknown, defaulting to 1000 [ 187.301701][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 187.342718][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 187.460471][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 187.516383][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 187.546771][ T7551] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.596688][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 187.608428][ T7551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.626109][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 187.651507][ T7551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.671494][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 187.717031][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 187.733349][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 187.844898][ T7551] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.857801][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 187.869182][ T7551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.877054][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 187.885695][ T7551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.905152][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 187.932987][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 187.951180][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.6.849'. [ 187.951320][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 187.973566][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 187.985514][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 188.001905][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 188.035404][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 188.036297][ T7540] bond0 speed is unknown, defaulting to 1000 [ 188.053089][ T7568] device syzkaller0 entered promiscuous mode [ 188.071352][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 188.148211][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 188.160057][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.6.852'. [ 188.181120][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 188.196760][ T7576] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.205511][ T7576] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.214447][ T7576] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.214545][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 188.223171][ T7576] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.263743][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.852'. [ 188.305251][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 188.355800][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 188.403477][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 188.434827][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 188.443818][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 188.485125][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 188.510551][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 188.576126][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 188.607518][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 188.654845][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 188.723244][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 188.758112][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 188.799671][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 188.824950][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 189.213011][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 189.228252][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 189.242422][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 189.254630][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 189.272932][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 189.322942][ T7535] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 189.354796][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 189.354808][ T26] audit: type=1800 audit(1793640895.382:279): pid=7535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.837" name="file1" dev="loop1" ino=1048655 res=0 errno=0 [ 189.392788][ T7625] loop6: detected capacity change from 0 to 256 [ 189.427917][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 189.440923][ T7627] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.449878][ T7627] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.458604][ T7627] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.467306][ T7627] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.905907][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 190.361948][ T7643] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.370884][ T7643] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.379643][ T7643] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.388469][ T7643] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.543529][ T4267] Bluetooth: hci0: command 0x0405 tx timeout [ 190.550563][ T7651] netlink: 96 bytes leftover after parsing attributes in process `syz.6.869'. [ 190.582082][ T7663] FAULT_INJECTION: forcing a failure. [ 190.582082][ T7663] name fail_futex, interval 1, probability 0, space 0, times 1 [ 190.605152][ T7663] CPU: 1 PID: 7663 Comm: syz.1.873 Not tainted syzkaller #0 [ 190.612466][ T7663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 190.622582][ T7663] Call Trace: [ 190.625847][ T7663] [ 190.628763][ T7663] dump_stack_lvl+0x188/0x250 [ 190.633431][ T7663] ? show_regs_print_info+0x20/0x20 [ 190.638616][ T7663] ? load_image+0x410/0x410 [ 190.643138][ T7663] ? register_lock_class+0xc0/0x880 [ 190.648327][ T7663] ? is_dynamic_key+0x1f0/0x1f0 [ 190.653168][ T7663] should_fail+0x383/0x4b0 [ 190.657582][ T7663] get_futex_key+0x1a0/0x1200 [ 190.662280][ T7663] ? __lock_acquire+0x13b3/0x7d40 [ 190.667320][ T7663] ? futex_wait_restart+0x250/0x250 [ 190.672547][ T7663] futex_wake+0x101/0x540 [ 190.676892][ T7663] ? futex_wait+0x680/0x680 [ 190.681408][ T7663] ? verify_lock_unused+0x140/0x140 [ 190.686595][ T7663] ? verify_lock_unused+0x140/0x140 [ 190.691785][ T7663] do_futex+0xd83/0x12b0 [ 190.696036][ T7663] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 190.702043][ T7663] ? futex_exit_release+0x1c0/0x1c0 [ 190.707238][ T7663] ? __context_tracking_exit+0x4c/0x80 [ 190.712718][ T7663] __se_sys_futex+0x389/0x420 [ 190.717384][ T7663] ? __x64_sys_futex+0xf0/0xf0 [ 190.722135][ T7663] ? __x64_sys_futex+0x1d/0xf0 [ 190.726882][ T7663] do_syscall_64+0x4c/0xa0 [ 190.731280][ T7663] ? clear_bhb_loop+0x30/0x80 [ 190.735940][ T7663] ? clear_bhb_loop+0x30/0x80 [ 190.740600][ T7663] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 190.746478][ T7663] RIP: 0033:0x7fda6adbfb19 [ 190.750878][ T7663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.770479][ T7663] RSP: 002b:00007fda690160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 190.778907][ T7663] RAX: ffffffffffffffda RBX: 00007fda6b045fa8 RCX: 00007fda6adbfb19 [ 190.786888][ T7663] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fda6b045fac [ 190.794864][ T7663] RBP: 00007fda6b045fa0 R08: 0020527fcb32b412 R09: 0000000000000000 [ 190.802819][ T7663] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 190.810781][ T7663] R13: 00007fda6b046038 R14: 00007ffcceeffe20 R15: 00007ffcceefff08 [ 190.818775][ T7663] [ 190.869792][ T7675] netlink: 'syz.6.875': attribute type 3 has an invalid length. [ 191.963575][ T7697] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.972460][ T7697] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.981220][ T7697] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.989972][ T7697] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.037360][ T7703] device syzkaller0 entered promiscuous mode [ 192.052631][ T7706] bond1: option mode: unable to set because the bond device has slaves [ 192.097630][ T7706] rdma_rxe: rxe_register_device failed with error -23 [ 192.115696][ T7706] rdma_rxe: failed to add bond0 [ 193.826172][ T7735] device-mapper: table: 248:3: snapshot: Cannot get COW device [ 193.882666][ T7735] device-mapper: ioctl: error adding target to table [ 194.136620][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.143082][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.345874][ T7775] rdma_rxe: already configured on bond0 [ 195.097852][ T7784] device dummy0 entered promiscuous mode [ 195.816090][ T7794] FAULT_INJECTION: forcing a failure. [ 195.816090][ T7794] name failslab, interval 1, probability 0, space 0, times 10 [ 195.880917][ T7794] CPU: 1 PID: 7794 Comm: syz.1.909 Not tainted syzkaller #0 [ 195.888235][ T7794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 195.898294][ T7794] Call Trace: [ 195.901572][ T7794] [ 195.904501][ T7794] dump_stack_lvl+0x188/0x250 [ 195.909193][ T7794] ? show_regs_print_info+0x20/0x20 [ 195.914406][ T7794] ? load_image+0x410/0x410 [ 195.918918][ T7794] ? __might_sleep+0xf0/0xf0 [ 195.923522][ T7794] ? __lock_acquire+0x7d40/0x7d40 [ 195.928580][ T7794] should_fail+0x383/0x4b0 [ 195.933014][ T7794] should_failslab+0x5/0x20 [ 195.937529][ T7794] slab_pre_alloc_hook+0x51/0xc0 [ 195.942477][ T7794] ? fuse_get_req+0x459/0xb20 [ 195.947167][ T7794] kmem_cache_alloc+0x3d/0x280 [ 195.951949][ T7794] fuse_get_req+0x459/0xb20 [ 195.956475][ T7794] ? fuse_simple_request+0x1b30/0x1b30 [ 195.961960][ T7794] fuse_simple_background+0x1ba/0x800 [ 195.967343][ T7794] cuse_channel_open+0x418/0x610 [ 195.972284][ T7794] ? fuse_dax_writepages+0xe0/0xe0 [ 195.977401][ T7794] misc_open+0x31f/0x390 [ 195.981657][ T7794] chrdev_open+0x585/0x5f0 [ 195.986087][ T7794] ? cd_forget+0x160/0x160 [ 195.990516][ T7794] ? fsnotify_perm+0x3a7/0x560 [ 195.995291][ T7794] ? cd_forget+0x160/0x160 [ 195.999716][ T7794] do_dentry_open+0x7f7/0xf90 [ 196.004398][ T7794] ? vfs_open+0x2b/0x80 [ 196.008561][ T7794] path_openat+0x2718/0x2fb0 [ 196.013193][ T7794] ? __kasan_slab_alloc+0xa9/0xc0 [ 196.018251][ T7794] ? do_filp_open+0x400/0x400 [ 196.022954][ T7794] do_filp_open+0x1df/0x400 [ 196.027466][ T7794] ? vfs_tmpfile+0x300/0x300 [ 196.032083][ T7794] ? _raw_spin_unlock+0x24/0x40 [ 196.036938][ T7794] ? alloc_fd+0x59e/0x650 [ 196.041283][ T7794] do_sys_openat2+0x14b/0x500 [ 196.045970][ T7794] ? __lock_acquire+0x7d40/0x7d40 [ 196.051007][ T7794] ? do_sys_open+0xe0/0xe0 [ 196.055431][ T7794] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 196.061424][ T7794] ? lock_chain_count+0x20/0x20 [ 196.066290][ T7794] __x64_sys_openat+0x135/0x160 [ 196.071150][ T7794] do_syscall_64+0x4c/0xa0 [ 196.075568][ T7794] ? clear_bhb_loop+0x30/0x80 [ 196.080253][ T7794] ? clear_bhb_loop+0x30/0x80 [ 196.084938][ T7794] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 196.090839][ T7794] RIP: 0033:0x7fda6adbfb19 [ 196.095260][ T7794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.114869][ T7794] RSP: 002b:00007fda69016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 196.123289][ T7794] RAX: ffffffffffffffda RBX: 00007fda6b045fa0 RCX: 00007fda6adbfb19 [ 196.131262][ T7794] RDX: 0000000000000002 RSI: 00002000000005c0 RDI: ffffffffffffff9c [ 196.139218][ T7794] RBP: 00007fda6ae57af8 R08: 0000000000000000 R09: 0000000000000000 [ 196.147173][ T7794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.155127][ T7794] R13: 00007fda6b046038 R14: 00007fda6b045fa0 R15: 00007ffcceefff08 [ 196.163095][ T7794] [ 196.473284][ T7806] bond1: option mode: unable to set because the bond device has slaves [ 196.496469][ T7806] rdma_rxe: rxe_register_device failed with error -23 [ 196.503871][ T7806] rdma_rxe: failed to add bond0 [ 196.599919][ T7815] loop6: detected capacity change from 0 to 256 [ 196.662452][ T7815] FAT-fs (loop6): Unrecognized mount option "iocharse" or missing value [ 197.409684][ T7836] syz.1.927: vmalloc error: size 2199023255701, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 197.433686][ T7836] CPU: 0 PID: 7836 Comm: syz.1.927 Not tainted syzkaller #0 [ 197.441003][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 197.451068][ T7836] Call Trace: [ 197.454353][ T7836] [ 197.457289][ T7836] dump_stack_lvl+0x188/0x250 [ 197.461985][ T7836] ? rcu_lock_release+0x5/0x20 [ 197.466765][ T7836] ? show_regs_print_info+0x20/0x20 [ 197.471979][ T7836] ? load_image+0x410/0x410 [ 197.476509][ T7836] warn_alloc+0x245/0x320 [ 197.480862][ T7836] ? zone_watermark_ok_safe+0x250/0x250 [ 197.486414][ T7836] ? __mutex_lock_common+0x435/0x2400 [ 197.491810][ T7836] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 197.497456][ T7836] __vmalloc_node_range+0x2b1/0x8b0 [ 197.502679][ T7836] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 197.507732][ T7836] vmalloc+0x75/0x80 [ 197.511650][ T7836] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 197.516695][ T7836] dvb_dvr_do_ioctl+0x12a/0x220 [ 197.521565][ T7836] dvb_usercopy+0x191/0x2b0 [ 197.526084][ T7836] ? dvb_dvr_release+0x3d0/0x3d0 [ 197.531036][ T7836] ? dvb_generic_ioctl+0xb0/0xb0 [ 197.536007][ T7836] ? dvb_dvr_poll+0x230/0x230 [ 197.540695][ T7836] dvb_dvr_ioctl+0x25/0x30 [ 197.545153][ T7836] __se_sys_ioctl+0xfa/0x170 [ 197.549758][ T7836] do_syscall_64+0x4c/0xa0 [ 197.554188][ T7836] ? clear_bhb_loop+0x30/0x80 [ 197.558875][ T7836] ? clear_bhb_loop+0x30/0x80 [ 197.563565][ T7836] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.569468][ T7836] RIP: 0033:0x7fda6adbfb19 [ 197.573891][ T7836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.593505][ T7836] RSP: 002b:00007fda69016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.601933][ T7836] RAX: ffffffffffffffda RBX: 00007fda6b045fa0 RCX: 00007fda6adbfb19 [ 197.609912][ T7836] RDX: 0000020000000095 RSI: 0000000000006f2d RDI: 0000000000000003 [ 197.617888][ T7836] RBP: 00007fda6ae57af8 R08: 0000000000000000 R09: 0000000000000000 [ 197.625863][ T7836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.633838][ T7836] R13: 00007fda6b046038 R14: 00007fda6b045fa0 R15: 00007ffcceefff08 [ 197.641839][ T7836] [ 197.699386][ T7836] Mem-Info: [ 197.715275][ T7836] active_anon:301 inactive_anon:7721 isolated_anon:0 [ 197.715275][ T7836] active_file:15060 inactive_file:39922 isolated_file:0 [ 197.715275][ T7836] unevictable:768 dirty:214 writeback:0 [ 197.715275][ T7836] slab_reclaimable:21594 slab_unreclaimable:102358 [ 197.715275][ T7836] mapped:30427 shmem:2517 pagetables:738 bounce:0 [ 197.715275][ T7836] kernel_misc_reclaimable:0 [ 197.715275][ T7836] free:1357553 free_pcp:9237 free_cma:0 [ 197.768429][ T7850] No such timeout policy "syz1" [ 197.847876][ T7836] Node 0 active_anon:1172kB inactive_anon:33072kB active_file:60040kB inactive_file:159688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124508kB dirty:856kB writeback:0kB shmem:10788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11928kB pagetables:2952kB all_unreclaimable? no [ 197.927637][ T7836] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 198.001357][ T7863] FAULT_INJECTION: forcing a failure. [ 198.001357][ T7863] name failslab, interval 1, probability 0, space 0, times 9 [ 198.017357][ T7836] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 198.046764][ T7863] CPU: 0 PID: 7863 Comm: syz.5.939 Not tainted syzkaller #0 [ 198.054068][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 198.064129][ T7863] Call Trace: [ 198.067411][ T7863] [ 198.070346][ T7863] dump_stack_lvl+0x188/0x250 [ 198.075041][ T7863] ? show_regs_print_info+0x20/0x20 [ 198.080260][ T7863] ? load_image+0x410/0x410 [ 198.084782][ T7863] ? __lock_acquire+0x7d40/0x7d40 [ 198.089830][ T7863] should_fail+0x383/0x4b0 [ 198.094269][ T7863] should_failslab+0x5/0x20 [ 198.098786][ T7863] slab_pre_alloc_hook+0x51/0xc0 [ 198.103733][ T7863] ? security_inode_alloc+0x30/0x110 [ 198.109031][ T7863] kmem_cache_alloc+0x3d/0x280 [ 198.113811][ T7863] security_inode_alloc+0x30/0x110 [ 198.118937][ T7863] inode_init_always+0x8e5/0xc90 [ 198.123893][ T7863] new_inode_pseudo+0x8e/0x210 [ 198.128672][ T7863] new_inode+0x25/0x1d0 [ 198.132853][ T7863] shmem_get_inode+0x304/0xa40 [ 198.137643][ T7863] __shmem_file_setup+0x155/0x290 [ 198.142680][ T7863] shmem_zero_setup+0x8e/0x1c0 [ 198.147466][ T7863] mmap_region+0x135d/0x1730 [ 198.152096][ T7863] do_mmap+0x801/0xe30 [ 198.156184][ T7863] ? vm_mmap_pgoff+0x16c/0x2d0 [ 198.160957][ T7863] vm_mmap_pgoff+0x1c1/0x2d0 [ 198.165568][ T7863] ? account_locked_vm+0xe0/0xe0 [ 198.170514][ T7863] ? __context_tracking_exit+0x4c/0x80 [ 198.175986][ T7863] ? __lock_acquire+0x7d40/0x7d40 [ 198.181034][ T7863] ksys_mmap_pgoff+0x140/0x790 [ 198.185820][ T7863] ? mmap_region+0x1730/0x1730 [ 198.190599][ T7863] ? lockdep_hardirqs_on+0x94/0x140 [ 198.191271][ T7866] device syzkaller0 entered promiscuous mode [ 198.195809][ T7863] do_syscall_64+0x4c/0xa0 [ 198.206176][ T7863] ? clear_bhb_loop+0x30/0x80 [ 198.210860][ T7863] ? clear_bhb_loop+0x30/0x80 [ 198.215551][ T7863] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 198.221454][ T7863] RIP: 0033:0x7f57cb94cb19 [ 198.225892][ T7863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.245508][ T7863] RSP: 002b:00007f57c9ba3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 198.253933][ T7863] RAX: ffffffffffffffda RBX: 00007f57cbbd2fa0 RCX: 00007f57cb94cb19 [ 198.261934][ T7863] RDX: 0000000001000003 RSI: 000000000000c000 RDI: 0000200000ff4000 [ 198.269909][ T7863] RBP: 00007f57cb9e4af8 R08: ffffffffffffffff R09: 00000000ffffe000 [ 198.277885][ T7863] R10: 0000000000020031 R11: 0000000000000246 R12: 0000000000000000 [ 198.285861][ T7863] R13: 00007f57cbbd3038 R14: 00007f57cbbd2fa0 R15: 00007fff87828238 [ 198.293852][ T7863] [ 198.333508][ T7836] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 198.339608][ T7836] Node 0 DMA32 free:1489120kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1172kB inactive_anon:38372kB active_file:60040kB inactive_file:159688kB unevictable:1536kB writepending:856kB present:3129332kB managed:2590800kB mlocked:0kB bounce:0kB free_pcp:33032kB local_pcp:16224kB free_cma:0kB [ 198.412496][ T7836] lowmem_reserve[]: 0 0 0 0 0 [ 198.435402][ T7836] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 198.481399][ T7836] lowmem_reserve[]: 0 0 0 0 0 [ 198.496383][ T7836] Node 1 Normal free:3917700kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:3956kB local_pcp:3252kB free_cma:0kB [ 198.553345][ T7836] lowmem_reserve[]: 0 0 0 0 0 [ 198.558271][ T7836] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 198.571606][ T7836] Node 0 DMA32: 796*4kB (UME) 902*8kB (UME) 1230*16kB (UME) 1418*32kB (UME) 1047*64kB (UME) 613*128kB (UME) 363*256kB (UM) 181*512kB (UME) 65*1024kB (UM) 34*2048kB (UME) 231*4096kB (UM) = 1488896kB [ 198.643915][ T7884] ip_tables: iptables: counters copy to user failed while replacing table [ 198.654286][ T7836] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 198.676576][ T7836] Node 1 Normal: 113*4kB (UME) 40*8kB (UME) 24*16kB (UME) 172*32kB (UME) 68*64kB (UME) 17*128kB (UE) 8*256kB (UME) 4*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 951*4096kB (M) = 3917700kB [ 198.731813][ T7836] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.748045][ T7836] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 198.762505][ T7836] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.787620][ T7836] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 198.800601][ T7836] 59528 total pagecache pages [ 198.805827][ T7836] 15 pages in swap cache [ 198.811575][ T7836] Swap cache stats: add 12875, delete 12860, find 223/263 [ 198.846245][ T7836] Free swap = 124572kB [ 198.856364][ T7836] Total swap = 124996kB [ 198.871254][ T7836] 2097051 pages RAM [ 198.902155][ T7836] 0 pages HighMem/MovableOnly [ 198.914329][ T7836] 415364 pages reserved [ 198.918977][ T7836] 0 pages cma reserved [ 198.974202][ T7898] loop5: detected capacity change from 0 to 512 [ 198.992008][ T7898] EXT4-fs (loop5): Ignoring removed orlov option [ 199.010928][ T7898] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 199.068146][ T7902] device syzkaller0 entered promiscuous mode [ 199.092823][ T7898] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #16: comm syz.5.952: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 199.122808][ T7898] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.952: couldn't read orphan inode 16 (err -117) [ 199.154230][ T7898] EXT4-fs (loop5): 1 orphan inode deleted [ 199.167315][ T7898] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,nombcache,debug_want_extra_isize=0x000000000000002a,commit=0x0000000000000005,orlov,lazytime,,errors=continue. Quota mode: none. [ 199.419193][ T7909] loop9: detected capacity change from 0 to 524287998 [ 200.455207][ T26] audit: type=1326 audit(1793640906.482:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.5.957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cb94cb19 code=0x7ffc0000 [ 200.850783][ T26] audit: type=1326 audit(1793640906.552:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.5.957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f57cb94cb19 code=0x7ffc0000 [ 200.904078][ T7936] device syzkaller0 entered promiscuous mode [ 200.953363][ T26] audit: type=1326 audit(1793640906.552:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.5.957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f57cb94cb19 code=0x7ffc0000 [ 201.636221][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 201.970425][ T7950] loop6: detected capacity change from 0 to 512 [ 202.054576][ T7950] EXT4-fs (loop6): Ignoring removed orlov option [ 202.066309][ T7950] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 202.119854][ T7950] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #16: comm syz.6.969: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 202.154205][ T7950] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.969: couldn't read orphan inode 16 (err -117) [ 202.185428][ T7950] EXT4-fs (loop6): 1 orphan inode deleted [ 202.214858][ T7950] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,nombcache,debug_want_extra_isize=0x000000000000002a,commit=0x0000000000000005,orlov,lazytime,,errors=continue. Quota mode: none. [ 202.240174][ T7960] No such timeout policy "syz1" [ 202.418403][ T7969] block device autoloading is deprecated and will be removed. [ 205.906237][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 205.916247][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 205.926232][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 205.936231][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 205.946231][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 205.956232][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 205.966231][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 205.976230][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 205.986231][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 206.353696][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'. [ 206.367042][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'. [ 207.341955][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'. [ 207.365934][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'. [ 208.108504][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'. [ 208.351323][ T8047] loop5: detected capacity change from 0 to 512 [ 208.363148][ T8055] FAULT_INJECTION: forcing a failure. [ 208.363148][ T8055] name fail_futex, interval 1, probability 0, space 0, times 0 [ 208.393401][ T8055] CPU: 1 PID: 8055 Comm: syz.6.1000 Not tainted syzkaller #0 [ 208.400795][ T8055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 208.410852][ T8055] Call Trace: [ 208.414134][ T8055] [ 208.417072][ T8055] dump_stack_lvl+0x188/0x250 [ 208.421764][ T8055] ? show_regs_print_info+0x20/0x20 [ 208.426972][ T8055] ? load_image+0x410/0x410 [ 208.431496][ T8055] ? cgroup_rstat_updated+0xce/0x350 [ 208.436791][ T8055] ? place_entity+0x4f0/0x4f0 [ 208.441484][ T8055] should_fail+0x383/0x4b0 [ 208.445916][ T8055] get_futex_key+0x1a0/0x1200 [ 208.450608][ T8055] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 208.456603][ T8055] ? futex_wait_restart+0x250/0x250 [ 208.461812][ T8055] ? lock_chain_count+0x20/0x20 [ 208.466685][ T8055] futex_wait_setup+0x4b/0x520 [ 208.471460][ T8055] ? lockdep_hardirqs_on+0x94/0x140 [ 208.476665][ T8055] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 208.482573][ T8055] futex_wait+0x22f/0x680 [ 208.486916][ T8055] ? __lock_acquire+0x13b3/0x7d40 [ 208.491957][ T8055] ? do_futex+0x12b0/0x12b0 [ 208.496508][ T8055] ? verify_lock_unused+0x140/0x140 [ 208.501718][ T8055] ? verify_lock_unused+0x140/0x140 [ 208.506931][ T8055] do_futex+0xdc2/0x12b0 [ 208.511193][ T8055] ? vfs_write+0xaa6/0xd70 [ 208.515626][ T8055] ? futex_exit_release+0x1c0/0x1c0 [ 208.520835][ T8055] ? __context_tracking_exit+0x4c/0x80 [ 208.526306][ T8055] __se_sys_futex+0x389/0x420 [ 208.530998][ T8055] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 208.536994][ T8055] ? __x64_sys_futex+0xf0/0xf0 [ 208.541770][ T8055] ? __x64_sys_futex+0x1d/0xf0 [ 208.546542][ T8055] do_syscall_64+0x4c/0xa0 [ 208.550962][ T8055] ? clear_bhb_loop+0x30/0x80 [ 208.555649][ T8055] ? clear_bhb_loop+0x30/0x80 [ 208.560333][ T8055] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.566233][ T8055] RIP: 0033:0x7f7b546cdb19 [ 208.570650][ T8055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.590258][ T8055] RSP: 002b:00007f7b529240e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 208.598677][ T8055] RAX: ffffffffffffffda RBX: 00007f7b54953fa8 RCX: 00007f7b546cdb19 [ 208.606651][ T8055] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7b54953fa8 [ 208.614629][ T8055] RBP: 00007f7b54953fa0 R08: 0000000000000000 R09: 0000000000000000 [ 208.622602][ T8055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.630573][ T8055] R13: 00007f7b54954038 R14: 00007ffc8745b880 R15: 00007ffc8745b968 [ 208.638567][ T8055] [ 208.694343][ T8047] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 208.739087][ T8068] loop1: detected capacity change from 0 to 256 [ 208.747253][ T8047] EXT4-fs (loop5): 1 truncate cleaned up [ 208.773874][ T8047] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 209.677061][ T8080] device syzkaller0 entered promiscuous mode [ 209.795840][ T8091] loop6: detected capacity change from 0 to 512 [ 209.901193][ T8091] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 210.169914][ T4602] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.464170][ T8091] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1013: bg 0: block 104: invalid block bitmap [ 210.543871][ T8091] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 210.590403][ T8091] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1013: invalid indirect mapped block 1 (level 1) [ 210.617185][ T8091] EXT4-fs (loop6): 1 truncate cleaned up [ 210.622861][ T8091] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 210.647837][ T4602] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.712497][ T4602] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.757995][ T8101] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 210.802347][ T4602] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.863288][ T8107] loop6: detected capacity change from 0 to 256 [ 211.013111][ T4602] tipc: Left network mode [ 211.032867][ T8109] rxe_eth0 speed is unknown, defaulting to 1000 [ 211.391048][ T8109] bond0 speed is unknown, defaulting to 1000 [ 212.177555][ T8109] chnl_net:caif_netlink_parms(): no params data found [ 212.223154][ T8146] device syzkaller0 entered promiscuous mode [ 212.359424][ T4602] device hsr_slave_0 left promiscuous mode [ 212.398005][ T4602] device hsr_slave_1 left promiscuous mode [ 212.405764][ T4602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.443750][ T4602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.453207][ T4602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.467122][ T4602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.474753][ T4602] device bridge_slave_1 left promiscuous mode [ 212.503105][ T4602] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.535352][ T4602] device bridge_slave_0 left promiscuous mode [ 212.563052][ T4602] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.595169][ T4602] device veth1_macvtap left promiscuous mode [ 212.601761][ T4602] device veth0_macvtap left promiscuous mode [ 212.616425][ T4602] device veth1_vlan left promiscuous mode [ 212.622216][ T4602] device veth0_vlan left promiscuous mode [ 212.926326][ T1109] Bluetooth: hci4: command 0x0409 tx timeout [ 213.435543][ T4602] bond2 (unregistering): Released all slaves [ 213.452372][ T4602] bond1 (unregistering): (slave vlan2): Releasing active interface [ 213.466067][ T4602] bond1 (unregistering): Released all slaves [ 213.568516][ T4602] team0 (unregistering): Port device team_slave_1 removed [ 213.583271][ T4602] team0 (unregistering): Port device team_slave_0 removed [ 213.598414][ T4602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.616061][ T4602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.703342][ T4602] bond0 (unregistering): Released all slaves [ 213.751795][ T8109] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.776365][ T8109] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.789586][ T8109] device bridge_slave_0 entered promiscuous mode [ 213.809970][ T8109] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.817366][ T8109] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.857609][ T8109] device bridge_slave_1 entered promiscuous mode [ 213.918646][ T8109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.935012][ T8165] block device autoloading is deprecated and will be removed. [ 213.963879][ T8109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.055902][ T8109] team0: Port device team_slave_0 added [ 214.064231][ T8109] team0: Port device team_slave_1 added [ 214.084167][ T8109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.100930][ T8109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.135470][ T8109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.153345][ T8109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.161300][ T8109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.187272][ T8109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.437706][ T8126] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 215.007298][ T4966] Bluetooth: hci4: command 0x041b tx timeout [ 215.060757][ T8109] device hsr_slave_0 entered promiscuous mode [ 215.265929][ T8109] device hsr_slave_1 entered promiscuous mode [ 215.480327][ T8109] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 215.503836][ T8109] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 215.543915][ T8109] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 215.600071][ T8109] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 215.729152][ T8191] device syzkaller0 entered promiscuous mode [ 216.025914][ T8109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.042293][ T8197] loop4: detected capacity change from 0 to 2048 [ 216.075371][ T8199] loop6: detected capacity change from 0 to 1024 [ 216.101660][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.115987][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.148226][ T8197] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 216.177075][ T8109] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.183841][ T8199] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 2: comm syz.6.1042: lblock 2 mapped to illegal pblock 2 (length 1) [ 216.214914][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.263745][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.278016][ T8197] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.303427][ T4600] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.310535][ T4600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.330551][ T8199] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 216.348679][ T8210] binder: 8209:8210 ioctl c0306201 200000000340 returned -14 [ 216.376335][ T8199] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 48: comm syz.6.1042: lblock 0 mapped to illegal pblock 48 (length 1) [ 216.398429][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.413152][ T8199] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 216.434965][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.447146][ T8199] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.1042: Failed to acquire dquot type 0 [ 216.464283][ T4600] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.471392][ T4600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.497176][ T8199] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 216.535746][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.577076][ T8199] EXT4-fs error (device loop6): ext4_evict_inode:284: inode #11: comm syz.6.1042: mark_inode_dirty error [ 216.634651][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.652572][ T8199] EXT4-fs warning (device loop6): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 216.652760][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.681321][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.701847][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.716505][ T8199] EXT4-fs (loop6): 1 orphan inode deleted [ 216.722618][ T8199] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 216.733694][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.754392][ T1493] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 216.804345][ T1493] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 216.834104][ T1493] EXT4-fs error (device loop6): ext4_release_dquot:6272: comm kworker/u4:4: Failed to release dquot type 0 [ 216.855671][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.872016][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.893350][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.909351][ T1493] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 216.932399][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.953312][ T1493] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 216.965843][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.982874][ T1493] EXT4-fs error (device loop6): ext4_release_dquot:6272: comm kworker/u4:4: Failed to release dquot type 0 [ 217.023489][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.044550][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.062958][ T5187] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 217.086316][ T5521] Bluetooth: hci4: command 0x040f tx timeout [ 217.115357][ T5187] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 217.181402][ T5187] EXT4-fs error (device loop6): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 217.421689][ T8247] device syzkaller0 entered promiscuous mode [ 217.549234][ T6270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.561548][ T8252] loop1: detected capacity change from 0 to 4096 [ 217.581494][ T6270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.615708][ T8109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.659372][ T8252] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 217.735770][ T8264] qrtr: Invalid version 0 [ 218.784518][ T8281] FAULT_INJECTION: forcing a failure. [ 218.784518][ T8281] name failslab, interval 1, probability 0, space 0, times 8 [ 218.840134][ T8281] CPU: 0 PID: 8281 Comm: syz.1.1057 Not tainted syzkaller #0 [ 218.847540][ T8281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 218.857600][ T8281] Call Trace: [ 218.860884][ T8281] [ 218.863822][ T8281] dump_stack_lvl+0x188/0x250 [ 218.868520][ T8281] ? show_regs_print_info+0x20/0x20 [ 218.873737][ T8281] ? load_image+0x410/0x410 [ 218.878258][ T8281] ? __lock_acquire+0x7d40/0x7d40 [ 218.883298][ T8281] ? do_raw_spin_unlock+0x11d/0x230 [ 218.888511][ T8281] should_fail+0x383/0x4b0 [ 218.892943][ T8281] should_failslab+0x5/0x20 [ 218.897453][ T8281] slab_pre_alloc_hook+0x51/0xc0 [ 218.902406][ T8281] ? vm_area_alloc+0x20/0xe0 [ 218.907007][ T8281] kmem_cache_alloc+0x3d/0x280 [ 218.911787][ T8281] vm_area_alloc+0x20/0xe0 [ 218.916212][ T8281] mmap_region+0xbd2/0x1730 [ 218.920734][ T8281] ? get_unmapped_area+0x2f0/0x360 [ 218.925861][ T8281] do_mmap+0x801/0xe30 [ 218.929948][ T8281] ? vm_mmap_pgoff+0x16c/0x2d0 [ 218.934724][ T8281] vm_mmap_pgoff+0x1c1/0x2d0 [ 218.939333][ T8281] ? account_locked_vm+0xe0/0xe0 [ 218.944281][ T8281] ? __context_tracking_exit+0x4c/0x80 [ 218.949752][ T8281] ? __lock_acquire+0x7d40/0x7d40 [ 218.954796][ T8281] ksys_mmap_pgoff+0x140/0x790 [ 218.959574][ T8281] ? mmap_region+0x1730/0x1730 [ 218.964348][ T8281] ? lockdep_hardirqs_on+0x94/0x140 [ 218.969556][ T8281] do_syscall_64+0x4c/0xa0 [ 218.973982][ T8281] ? clear_bhb_loop+0x30/0x80 [ 218.978666][ T8281] ? clear_bhb_loop+0x30/0x80 [ 218.982081][ T6575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.983349][ T8281] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 218.997276][ T8281] RIP: 0033:0x7fda6adbfb19 [ 219.001698][ T8281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.021314][ T8281] RSP: 002b:00007fda69016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 219.029733][ T8281] RAX: ffffffffffffffda RBX: 00007fda6b045fa0 RCX: 00007fda6adbfb19 [ 219.035874][ T6575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.037707][ T8281] RDX: 0000000001000007 RSI: 000000000000c000 RDI: 0000200000ff4000 [ 219.037725][ T8281] RBP: 00007fda6ae57af8 R08: ffffffffffffffff R09: 00000000ffffe000 [ 219.037739][ T8281] R10: 0000000000020031 R11: 0000000000000246 R12: 0000000000000000 [ 219.037752][ T8281] R13: 00007fda6b046038 R14: 00007fda6b045fa0 R15: 00007ffcceefff08 [ 219.037783][ T8281] [ 219.061333][ T8109] device veth0_vlan entered promiscuous mode [ 219.161901][ T6575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.169966][ T4966] Bluetooth: hci4: command 0x0419 tx timeout [ 219.182668][ T6575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.215812][ T8109] device veth1_vlan entered promiscuous mode [ 219.241758][ T6575] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.316651][ T6575] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.355022][ T6575] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 219.476846][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 219.519932][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.583654][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.667965][ T8109] device veth0_macvtap entered promiscuous mode [ 219.688128][ T8298] device syzkaller0 entered promiscuous mode [ 219.713007][ T8109] device veth1_macvtap entered promiscuous mode [ 219.778077][ T8109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.818811][ T8109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.849115][ T8109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.882527][ T8109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.916498][ T8109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.946282][ T8109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.995473][ T8109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.016574][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.056950][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.096071][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.121797][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.158818][ T8109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.201704][ T8109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.226354][ T8109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.267700][ T8109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.304304][ T8109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.351567][ T8109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.371947][ T8109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.404317][ T8109] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.448297][ T8109] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.496288][ T8109] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.552155][ T8109] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.602565][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.766082][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.066798][ T4607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.074641][ T4607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.138373][ T6270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 221.205566][ T8340] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1070'. [ 221.243905][ T26] audit: type=1326 audit(1793640927.272:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.0.1071" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ee62eb19 code=0x7ffc0000 [ 221.270579][ T6270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.288765][ T6270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.307249][ T6049] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 221.348392][ T26] audit: type=1326 audit(1793640927.272:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.0.1071" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ee62eb19 code=0x7ffc0000 [ 221.427280][ T26] audit: type=1326 audit(1793640927.272:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.0.1071" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ee62eb19 code=0x7ffc0000 [ 221.474878][ T26] audit: type=1326 audit(1793640927.272:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.0.1071" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ee62eb19 code=0x7ffc0000 [ 221.514075][ T26] audit: type=1326 audit(1793640927.302:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.0.1071" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f60ee62eb19 code=0x7ffc0000 [ 221.551163][ T26] audit: type=1326 audit(1793640927.302:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.0.1071" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ee62eb19 code=0x7ffc0000 [ 221.582460][ T26] audit: type=1326 audit(1793640927.302:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.0.1071" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ee62eb19 code=0x7ffc0000 [ 221.625320][ T26] audit: type=1326 audit(1793640927.302:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.0.1071" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ee62eb19 code=0x7ffc0000 [ 221.704128][ T26] audit: type=1326 audit(1793640927.302:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.0.1071" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ee62eb19 code=0x7ffc0000 [ 221.725906][ T8365] device syzkaller0 entered promiscuous mode [ 221.773381][ T26] audit: type=1326 audit(1793640927.302:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.0.1071" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f60ee62eb19 code=0x7ffc0000 [ 221.854712][ T26] audit: type=1326 audit(1793640927.302:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.0.1071" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ee62eb19 code=0x7ffc0000 [ 222.062449][ T8376] device syzkaller0 entered promiscuous mode [ 223.327120][ T8405] device syzkaller0 entered promiscuous mode [ 223.379723][ T8405] [ 223.382732][ T8405] ============================= [ 223.387658][ T8405] WARNING: suspicious RCU usage [ 223.392509][ T8405] syzkaller #0 Not tainted [ 223.396968][ T8405] ----------------------------- [ 223.401812][ T8405] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage! [ 223.402593][ T8409] device syzkaller0 entered promiscuous mode [ 223.410178][ T8405] [ 223.410178][ T8405] other info that might help us debug this: [ 223.410178][ T8405] [ 223.410248][ T8405] [ 223.410248][ T8405] rcu_scheduler_active = 2, debug_locks = 1 [ 223.410264][ T8405] 4 locks held by syz.6.1085/8405: [ 223.410277][ T8405] #0: ffffffff8d11f000 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 223.410341][ T8405] #1: ffff88807e01d108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 223.458925][ T8405] #2: ffff88807e01d148 (dev->qdisc_running_key ?: &qdisc_running_key){+...}-{0:0}, at: packet_sendmsg+0x3bbd/0x4e70 [ 223.471266][ T8405] #3: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 223.480636][ T8405] [ 223.480636][ T8405] stack backtrace: [ 223.486573][ T8405] CPU: 1 PID: 8405 Comm: syz.6.1085 Not tainted syzkaller #0 [ 223.493954][ T8405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 223.504014][ T8405] Call Trace: [ 223.507293][ T8405] [ 223.510225][ T8405] dump_stack_lvl+0x188/0x250 [ 223.514924][ T8405] ? show_regs_print_info+0x20/0x20 [ 223.520144][ T8405] ? lockdep_rcu_suspicious+0x110/0x180 [ 223.525703][ T8405] qdisc_lookup+0xa6/0x640 [ 223.530134][ T8405] qdisc_tree_reduce_backlog+0x188/0x480 [ 223.535784][ T8405] fq_codel_enqueue+0xf62/0x1610 [ 223.540755][ T8405] ? INET_ECN_set_ce+0x960/0x960 [ 223.545715][ T8405] netem_dequeue+0xd4c/0x1410 [ 223.550430][ T8405] ? netem_enqueue+0x37f0/0x37f0 [ 223.555384][ T8405] __qdisc_run+0x22f/0x14b0 [ 223.559904][ T8405] ? qdisc_purge_queue+0x3d0/0x3d0 [ 223.565040][ T8405] __dev_queue_xmit+0xdce/0x2e50 [ 223.570007][ T8405] ? dev_queue_xmit+0x20/0x20 [ 223.574692][ T8405] ? packet_parse_headers+0x887/0xa90 [ 223.580083][ T8405] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 223.585640][ T8405] ? memcpy+0x3c/0x60 [ 223.589635][ T8405] packet_sendmsg+0x3bbd/0x4e70 [ 223.594505][ T8405] ? aa_sk_perm+0x910/0x910 [ 223.599059][ T8405] ? aa_sk_perm+0x7dc/0x910 [ 223.603586][ T8405] ? packet_getsockopt+0x9a0/0x9a0 [ 223.608712][ T8405] ? unpack_trans_table+0x390/0x1690 [ 223.614013][ T8405] ? apparmor_socket_sendmsg+0x88/0x230 [ 223.619575][ T8405] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 223.624873][ T8405] ? security_socket_sendmsg+0x7c/0xa0 [ 223.630347][ T8405] __sys_sendto+0x46d/0x620 [ 223.634859][ T8405] ? __ia32_sys_getpeername+0x80/0x80 [ 223.640270][ T8405] ? lock_chain_count+0x20/0x20 [ 223.645139][ T8405] __x64_sys_sendto+0xda/0xf0 [ 223.649830][ T8405] do_syscall_64+0x4c/0xa0 [ 223.654254][ T8405] ? clear_bhb_loop+0x30/0x80 [ 223.658941][ T8405] ? clear_bhb_loop+0x30/0x80 [ 223.663625][ T8405] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.669524][ T8405] RIP: 0033:0x7f7b546cdb19 [ 223.673951][ T8405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.693576][ T8405] RSP: 002b:00007f7b52924028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 223.701996][ T8405] RAX: ffffffffffffffda RBX: 00007f7b54953fa0 RCX: 00007f7b546cdb19 [ 223.709976][ T8405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 223.717949][ T8405] RBP: 00007f7b54765af8 R08: 0000200000000980 R09: 0000000000000014 [ 223.725925][ T8405] R10: 0000000000000840 R11: 0000000000000246 R12: 0000000000000000 [ 223.733902][ T8405] R13: 00007f7b54954038 R14: 00007f7b54953fa0 R15: 00007ffc8745b968 [ 223.741897][ T8405]