last executing test programs: 3.104528746s ago: executing program 2 (id=472): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xffe3, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x5, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000840)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000595000000002c0004800800010000000001200002800c000100706f6c6963793000080002eb000069cc629ae30000000000", 0x68}], 0x1}, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f3027c0004060000000000bf852c8986626691b01b2d44e4ce28715f5f28"], 0xe0}], 0x1}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000007b000000850000001100000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x160, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_USERDATA={0x52, 0x6, "476730df73646767837938e34b8b5f1b43c50bbb8b8992bf247ed529465d86d0201a1fc0fbf3b29706fc38e7049e33fb408fc9dbcab0aec56d08e751fd6351520eb422b9a448853c83e916760290"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xdf, 0x6, "e4689e1fb549d8c441947ca8abb24380a1cb6ba18935b733ec16d893d3672637f14a6e5400505d86372a54114055f463d6d35b94881fe6c591461653acdaa975bea9ab4d596b99f54636887513163d15f29bb39def22d5079ef2524e321029bcd53b9f1730ab512656eca4635fcd65e92ee1ab06ee8c43545ef093fea9392a36157a36192fb533605e3707188237d75df7f7c92232cc259491fc25b3d948509d003c34d981bddbfe99a860957019f3a8d2e3b5dc0620041d34a208a8a7e44668c5e38832a1363e934a2f15d73d1107a6f821175fde3aa1a9919ff2"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x1e8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000040000f80000000003000000850000002c000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x0, 0xe, 0x0, &(0x7f0000000280)="410c49bc3c388e38d0da5a20564e", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r7 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r7, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40444c4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x2c, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) openat$cgroup_ro(r10, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r8) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, 0x0, 0x8000) 2.831599122s ago: executing program 1 (id=474): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.767036403s ago: executing program 2 (id=475): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000340)=0x8000, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) close(0x3) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x80000000}, @TCA_GRED_LIMIT={0x8, 0x5, 0x71}, @TCA_GRED_PARMS={0x38, 0x1, {0xf, 0x0, 0x9, 0x7, 0x8de3, 0x4, 0x1d, 0x3, 0x80000001, 0x58c, 0x7, 0x15, 0x5, 0xfc, 0x2}}]}}]}, 0x7c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0x20, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @rand_addr=0x64010101}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x8d0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x401) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xcc) r7 = syz_io_uring_setup(0x574b, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/4, 0x4, 0x7) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000640)={0x0}) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) 2.657593696s ago: executing program 3 (id=476): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000300)="060000000300030000", 0x9) 2.584166407s ago: executing program 4 (id=478): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x404c844}, 0x40000) 2.556411939s ago: executing program 1 (id=479): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRES64, @ANYRESDEC=0x0], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000006c0)="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", 0x11f) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0, 0x20000041}}], 0x1, 0xc004) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) shutdown(r4, 0x1) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'ip6tnl0\x00'}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000005a80), 0xce5, 0x2400) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f0000005ac0)=""/114) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2.480000361s ago: executing program 3 (id=480): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x2, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.47970633s ago: executing program 4 (id=481): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000000)={0x60, r1, 0x405, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40084f0}, 0x2400c0c0) 2.443580671s ago: executing program 2 (id=482): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\n', 0x2) close(r1) write(0xffffffffffffffff, &(0x7f00000001c0)='4\n', 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n', 0x2) nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) writev(r6, &(0x7f0000000d40), 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) 1.602357501s ago: executing program 0 (id=484): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_hci(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pipe(&(0x7f0000000080)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000150000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x6) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400), 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.594096731s ago: executing program 1 (id=485): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) close(0x4) r0 = socket(0x8, 0x4, 0x3) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0x400261f3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000047d78480c000600020000000000000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x15, &(0x7f0000000700)=ANY=[@ANYBLOB="4907f8ffffffffff18460000800000ff000000000000000000001811008900"/44, @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000183d0000010000000000000000000000181b0000", @ANYRES32, @ANYBLOB="00000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000400000008500000006000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000080), 0x0}, 0x20) 1.544235673s ago: executing program 3 (id=486): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8992, 0x0) 1.544066013s ago: executing program 4 (id=487): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000300)="060000000300000002", 0x9) 1.509046593s ago: executing program 0 (id=488): socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/500], 0x23c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) r4 = socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079a048000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89f0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, &(0x7f0000000240)) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)="0000003ed3d33b79", 0x8) unshare(0x20400) pipe(&(0x7f0000000100)) 1.455690135s ago: executing program 1 (id=489): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x1e) connect$pptp(r0, &(0x7f0000002340)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x1e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='7', 0x1) read$FUSE(r5, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$setownex(r5, 0xf, &(0x7f00000023c0)={0x2, r6}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 1.440739755s ago: executing program 3 (id=490): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="c5e2329c6601d54de824b8b6bcd1d8a371ab84ad9b49a843a2c3d760c5cd45ccac24e4db7ffdf597e972defd9342e5ee1bc5c0b899695e8a9cc975f757271748033d0c802e2f9e962236856798da7cd8aed3c372c482e4d3434057b01a247bfa0862b786589959a6cf287a8978f7a80d38f7e2875eb35ceda31607762791637ad1d211791c", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf250100000008001900ac1414aa06001a004e23000008001900e000000108001800ac1414bb060003000700000005"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$rds(0x15, 0x5, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)={0x9c, r8, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0xd049, 0x3c}}}}, [@NL80211_ATTR_FRAME_MATCH={0x79, 0x5b, "023d19bbd9a6826bf5c7b99388c9567a9897dcb9fc2cea06edd9176e8bfa63005d9da36cd4b9c5f69796d065cb08d5dde6dd4162b4e6e95288651e5deffb5156588be2e390626753a24794a6c4f190fad9adf07026ebf7dbab586d5876acbcde84a1e90efe7383b0df901ab07aab4b526c6edc4428"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0xb8, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x96, 0x5b, "501e66117c1d487ffcb33046a5768cd97114606e3a4cf5ea210c73371971a6095b8cd0d12ccab9d351f71ba80b0fe03f36e2a40761fe35ee0a151cc45a96f6155144b0ba495e516ef076ff2b8c34261d46dd9729d1d01f048080b744422056b0d5690e01c823dfa6b5b9faf86afe7333bcda08d9211d9811bea46622f78e1201aa53a6cbfe53a2f9e45e3feca2730827abeb"}]}, 0xb8}}, 0x0) sendmmsg(r2, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000640)=[@in6={0xa, 0x4e24, 0x8, @mcast1, 0x6}], 0x1c) 1.331792278s ago: executing program 4 (id=491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x40, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xe}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc001}, 0x24000002) 1.331546788s ago: executing program 4 (id=492): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d1501000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000340)=0x8000, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) close(0x3) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x80000000}, @TCA_GRED_LIMIT={0x8, 0x5, 0x71}, @TCA_GRED_PARMS={0x38, 0x1, {0xf, 0x0, 0x9, 0x7, 0x8de3, 0x4, 0x1d, 0x3, 0x80000001, 0x58c, 0x7, 0x15, 0x5, 0xfc, 0x2}}]}}]}, 0x7c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0x20, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @rand_addr=0x64010101}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x8d0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x401) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xcc) r7 = syz_io_uring_setup(0x574b, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/4, 0x4, 0x7) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000640)={0x0}) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) 1.330567748s ago: executing program 0 (id=493): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) 1.306294438s ago: executing program 2 (id=494): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1.145861212s ago: executing program 0 (id=495): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800"], 0xd0}, 0x1, 0x0, 0x0, 0xb51fe8ad78ecd414}, 0x0) 1.027981015s ago: executing program 2 (id=496): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRES64, @ANYRESDEC=0x0], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000006c0)="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", 0x11f) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0, 0x20000041}}], 0x1, 0xc004) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) shutdown(r4, 0x1) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'ip6tnl0\x00'}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000005a80), 0xce5, 0x2400) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f0000005ac0)=""/114) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 665.912334ms ago: executing program 4 (id=497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r4, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)='Th', 0x2}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38, 0x2004c044}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x40, 0x18, 0x1, 0x1, 0x0, {0x37, 0x1}, [@generic="0e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d79000000"]}, 0x40}}, 0x0) splice(r3, 0x0, r6, 0x0, 0x39000, 0x0) connect$unix(r1, &(0x7f0000000040)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x2d, 0x20040040) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000000, 0x0) recvfrom$unix(r1, 0x0, 0xfffffffffffffdbe, 0x40010020, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10001}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000007c0)={0x0, 0x1}, 0x8) socket$kcm(0x2, 0xa, 0x2) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x8809}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x17c1, 0x8}}}}}}, 0x32) 358.498211ms ago: executing program 0 (id=498): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b23, &(0x7f0000000000)={'wlan1\x00', @random="0011002000"}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x7, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xa0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000), 0x10) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 140.248586ms ago: executing program 3 (id=499): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) close(0x4) r0 = socket(0x8, 0x4, 0x3) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0x400261f3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000047d78480c000600020000000000000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x15, &(0x7f0000000700)=ANY=[@ANYBLOB="4907f8ffffffffff18460000800000ff000000000000000000001811008900"/44, @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000183d0000010000000000000000000000181b0000", @ANYRES32, @ANYBLOB="00000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000400000008500000006000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000080), 0x0}, 0x20) 139.567246ms ago: executing program 1 (id=500): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x3b, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0xa00, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 131.291026ms ago: executing program 2 (id=501): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, 0x0, 0x8000) 32.126359ms ago: executing program 0 (id=502): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000880)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=r1, @ANYBLOB="080003008346"], 0x24}}, 0x0) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) 10.676809ms ago: executing program 1 (id=503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc8}, 0x1, 0x0, 0x0, 0x200c0}, 0x40) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x44800) 0s ago: executing program 3 (id=504): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\n', 0x2) close(r1) write(0xffffffffffffffff, &(0x7f00000001c0)='4\n', 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n', 0x2) nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) writev(r6, &(0x7f0000000d40), 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) kernel console output (not intermixed with test programs): up link [ 62.704506][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.713745][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.720820][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.728770][ T4198] device bridge_slave_0 entered promiscuous mode [ 62.748240][ T4193] team0: Port device team_slave_0 added [ 62.760818][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.770358][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.778321][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.786098][ T4198] device bridge_slave_1 entered promiscuous mode [ 62.798623][ T4193] team0: Port device team_slave_1 added [ 62.806651][ T4190] team0: Port device team_slave_0 added [ 62.846213][ T4190] team0: Port device team_slave_1 added [ 62.865611][ T4195] team0: Port device team_slave_0 added [ 62.892224][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.904616][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.914813][ T4195] team0: Port device team_slave_1 added [ 62.921269][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.928474][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.954386][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.970868][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.977899][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.003816][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.015621][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.022639][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.048688][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.066049][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.073049][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.098984][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.144543][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.151701][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.178083][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.190107][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.197229][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.223208][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.242029][ T4198] team0: Port device team_slave_0 added [ 63.288267][ T4198] team0: Port device team_slave_1 added [ 63.323969][ T4190] device hsr_slave_0 entered promiscuous mode [ 63.331182][ T4190] device hsr_slave_1 entered promiscuous mode [ 63.338120][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.345948][ T4190] Cannot create hsr debugfs directory [ 63.380856][ T4193] device hsr_slave_0 entered promiscuous mode [ 63.387723][ T4193] device hsr_slave_1 entered promiscuous mode [ 63.395263][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.403050][ T4193] Cannot create hsr debugfs directory [ 63.415520][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.422649][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.448989][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.462749][ T4195] device hsr_slave_0 entered promiscuous mode [ 63.469638][ T4195] device hsr_slave_1 entered promiscuous mode [ 63.476622][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.484289][ T4195] Cannot create hsr debugfs directory [ 63.507438][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.514571][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.540591][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.616274][ T4198] device hsr_slave_0 entered promiscuous mode [ 63.623441][ T4198] device hsr_slave_1 entered promiscuous mode [ 63.629972][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.637657][ T4198] Cannot create hsr debugfs directory [ 63.652340][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 63.652348][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 63.652762][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 63.658492][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 63.668747][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 63.783214][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.800090][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.842281][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.856479][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.940091][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.954629][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.977943][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.997995][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.017280][ T4193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.038061][ T4193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.066370][ T4193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.086669][ T4193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.097225][ T4198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.107073][ T4198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.118199][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.149624][ T4198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.174508][ T4198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.195521][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.205089][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.220248][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.229425][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.240622][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.255925][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.267568][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.300075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.310911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.320617][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.328006][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.358170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.366500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.377258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.386367][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.393474][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.401874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.410442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.460455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.472204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.483194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.493753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.503268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.513537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.522197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.530421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.545967][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.559570][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.569504][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.578324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.612970][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.624476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.633722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.654885][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.669885][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.678786][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.695669][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.711105][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.719071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.727996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.737120][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.744237][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.757760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.766312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.780690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.788728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.798242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.807025][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.814109][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.826994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.835736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.844373][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.851467][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.859754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.868725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.877155][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.884226][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.895580][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.921849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.929868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.938140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.946905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.955736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.966270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.975182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.984482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.993316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.002175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.018095][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.041358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.050780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.059450][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.066549][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.075692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.083760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.091924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.100435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.109202][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.116306][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.124451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.133053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.141463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.149966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.158786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.167991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.177945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.186869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.200890][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.217794][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.229136][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.237348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.245741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.254105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.263639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.273051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.281846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.290358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.298998][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.306114][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.314056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.322612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.330820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.340264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.348978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.366236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.379572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.388696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.397242][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.404412][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.419354][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.435435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.469688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.493893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.512083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.520935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.534318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.545476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.554296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.563264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.575902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.585574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.599499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.612572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.640590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.674470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.688880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.700596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.709295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.722782][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.732360][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 65.732507][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 65.738377][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 65.754636][ T4186] device veth0_vlan entered promiscuous mode [ 65.770937][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 65.772101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.777700][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 65.785929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.802949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.810422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.818169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.826551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.835176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.843414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.858946][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.878092][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.902425][ T4186] device veth1_vlan entered promiscuous mode [ 65.919266][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.927505][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.936058][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.945848][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.955083][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.964228][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.973397][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.043023][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.056884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.070559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.086075][ T4186] device veth0_macvtap entered promiscuous mode [ 66.103200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.114760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.124394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.133155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.147130][ T4186] device veth1_macvtap entered promiscuous mode [ 66.168874][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.177998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.187176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.218453][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.234455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.243532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.252505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.261203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.269888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.278673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.288088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.297081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.305818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.314113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.328977][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.339882][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.352780][ T4190] device veth0_vlan entered promiscuous mode [ 66.368781][ T4193] device veth0_vlan entered promiscuous mode [ 66.376760][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.386309][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.396558][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.405264][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.430302][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.439886][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.454883][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.463934][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.480901][ T4190] device veth1_vlan entered promiscuous mode [ 66.490648][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.499104][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.507878][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.554948][ T4193] device veth1_vlan entered promiscuous mode [ 66.569783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.578838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.587125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.597157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.633703][ T4195] device veth0_vlan entered promiscuous mode [ 66.643794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.655922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.664245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.676515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.684638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.720737][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.733322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.742178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.750711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.762192][ T4195] device veth1_vlan entered promiscuous mode [ 66.780470][ T4193] device veth0_macvtap entered promiscuous mode [ 66.830750][ T4193] device veth1_macvtap entered promiscuous mode [ 66.842731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.852454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.860448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.868936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.877255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.886176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.897097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.905808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.914496][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.923362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.935231][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.944465][ T4190] device veth0_macvtap entered promiscuous mode [ 66.951163][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.954980][ T4190] device veth1_macvtap entered promiscuous mode [ 66.970466][ T4198] device veth0_vlan entered promiscuous mode [ 66.979468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.987965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.996258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.009594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.018890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.038614][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.051982][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.064215][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.076749][ T4198] device veth1_vlan entered promiscuous mode [ 67.094188][ T4195] device veth0_macvtap entered promiscuous mode [ 67.101673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.109695][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.119697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.140477][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.151166][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.164510][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.183662][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.194973][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.205966][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.216643][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.228161][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.238716][ T4195] device veth1_macvtap entered promiscuous mode [ 67.246642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.255993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.264841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.274360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.282997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.293189][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.303367][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.312218][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.312779][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.331528][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.340242][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.353935][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.365295][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.375203][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.385736][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.396950][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.404860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.414898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.423989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.463974][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.481147][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.490830][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.501078][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.521645][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.530280][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.557771][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.573752][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.587370][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.606819][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.617277][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.628601][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.639746][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.653182][ T4198] device veth0_macvtap entered promiscuous mode [ 67.661196][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.672288][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.682648][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.694256][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.704345][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.715068][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.726580][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.739328][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.757844][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.766839][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.781619][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.790103][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.802745][ T4198] device veth1_macvtap entered promiscuous mode [ 67.811880][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 67.813845][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.826868][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 67.831604][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 67.833266][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 67.842658][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.845512][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 67.859499][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.868509][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.921769][ T4233] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.944333][ T1496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.954688][ T1496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.982416][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.997661][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.008008][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.018725][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.028821][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.039666][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.049795][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.060702][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.073150][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.085382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.093742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.102332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.110893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.136438][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.136961][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.151869][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.162492][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.165498][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.182385][ T4233] usb 1-1: Using ep0 maxpacket: 32 [ 68.188156][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.198310][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.209040][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.220979][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.236096][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.247708][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.273097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.280994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.289918][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.311765][ T4233] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 68.330162][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.331913][ T1496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.341550][ T4198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.360811][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.362583][ T1496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.377247][ T4198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.386272][ T4198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.395246][ T4198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.417729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.439040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.521811][ T4233] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 68.530880][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 68.535052][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.558572][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.560399][ T4233] usb 1-1: Product: syz [ 68.572145][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.583719][ T4233] usb 1-1: Manufacturer: syz [ 68.591552][ T4233] usb 1-1: SerialNumber: syz [ 68.601561][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.614154][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.628893][ T1496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.640261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.663847][ T4233] usb 1-1: config 0 descriptor?? [ 68.669542][ T1496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.707967][ T4269] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 68.742841][ T4233] hub 1-1:0.0: bad descriptor, ignoring hub [ 68.749139][ T4233] hub: probe of 1-1:0.0 failed with error -5 [ 68.755580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.757596][ T4276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 68.814521][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.844790][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.878153][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.008375][ T4283] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.131588][ T4233] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.184995][ T4288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9'. [ 69.247604][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.269831][ T4290] FAULT_INJECTION: forcing a failure. [ 69.269831][ T4290] name failslab, interval 1, probability 0, space 0, times 1 [ 69.297889][ T4290] CPU: 1 PID: 4290 Comm: syz.4.10 Not tainted syzkaller #0 [ 69.305131][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.315906][ T4290] Call Trace: [ 69.319194][ T4290] [ 69.322120][ T4290] dump_stack_lvl+0x188/0x250 [ 69.326817][ T4290] ? show_regs_print_info+0x20/0x20 [ 69.332200][ T4290] ? load_image+0x410/0x410 [ 69.336734][ T4290] should_fail+0x383/0x4b0 [ 69.341165][ T4290] should_failslab+0x5/0x20 [ 69.345671][ T4290] slab_pre_alloc_hook+0x51/0xc0 [ 69.350617][ T4290] ? __debug_object_init+0x819/0xc80 [ 69.355920][ T4290] kmem_cache_alloc+0x3d/0x280 [ 69.360702][ T4290] __debug_object_init+0x819/0xc80 [ 69.365828][ T4290] ? lock_chain_count+0x20/0x20 [ 69.370706][ T4290] ? debug_object_init+0x10/0x10 [ 69.375661][ T4290] ? memset+0x1e/0x40 [ 69.379650][ T4290] debug_init+0x23/0x1d0 [ 69.383905][ T4290] hrtimer_init+0x2f/0x220 [ 69.388331][ T4290] init_dl_task_timer+0x17/0x50 [ 69.393182][ T4290] sched_fork+0x11a/0x8a0 [ 69.397522][ T4290] copy_process+0x14fe/0x3e70 [ 69.402216][ T4290] ? __pidfd_prepare+0x140/0x140 [ 69.407140][ T4290] ? __lock_acquire+0x7b50/0x7b50 [ 69.412156][ T4290] ? io_fallback_req_func+0x210/0x210 [ 69.417532][ T4290] ? io_fallback_req_func+0x210/0x210 [ 69.422893][ T4290] create_io_thread+0x111/0x180 [ 69.427729][ T4290] ? __se_sys_io_uring_setup+0x19c9/0x2900 [ 69.433521][ T4290] ? copy_process+0x3e70/0x3e70 [ 69.438357][ T4290] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 69.443978][ T4290] ? io_fallback_req_func+0x210/0x210 [ 69.449368][ T4290] __se_sys_io_uring_setup+0x1d6e/0x2900 [ 69.455004][ T4290] ? __x64_sys_io_uring_setup+0x60/0x60 [ 69.460544][ T4290] ? lockdep_hardirqs_on+0x94/0x140 [ 69.465756][ T4290] do_syscall_64+0x4c/0xa0 [ 69.470159][ T4290] ? clear_bhb_loop+0x30/0x80 [ 69.474821][ T4290] ? clear_bhb_loop+0x30/0x80 [ 69.479483][ T4290] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.485375][ T4290] RIP: 0033:0x7f6eb18e8159 [ 69.489780][ T4290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.509372][ T4290] RSP: 002b:00007f6eafb3ffb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 69.517783][ T4290] RAX: ffffffffffffffda RBX: 00002000000005c0 RCX: 00007f6eb18e8159 [ 69.525751][ T4290] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000efe [ 69.533715][ T4290] RBP: 00007f6eb197f03b R08: 0000000000000000 R09: 0000000000000000 [ 69.541679][ T4290] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 69.549640][ T4290] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffee13f88d8 [ 69.557609][ T4290] [ 69.561709][ T4233] usb 2-1: unable to get BOS descriptor or descriptor too short [ 69.661577][ T4233] usb 2-1: config 1 has an invalid interface number: 163 but max is 0 [ 69.673682][ T4233] usb 2-1: config 1 has no interface number 0 [ 69.679800][ T4233] usb 2-1: config 1 interface 163 has no altsetting 0 [ 69.770072][ T4297] FAULT_INJECTION: forcing a failure. [ 69.770072][ T4297] name failslab, interval 1, probability 0, space 0, times 0 [ 69.789836][ T4297] CPU: 0 PID: 4297 Comm: syz.4.12 Not tainted syzkaller #0 [ 69.792952][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 69.797067][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.812140][ T4297] Call Trace: [ 69.815429][ T4297] [ 69.818366][ T4297] dump_stack_lvl+0x188/0x250 [ 69.823065][ T4297] ? show_regs_print_info+0x20/0x20 [ 69.828275][ T4297] ? load_image+0x410/0x410 [ 69.832797][ T4297] should_fail+0x383/0x4b0 [ 69.837224][ T4297] should_failslab+0x5/0x20 [ 69.841727][ T4297] slab_pre_alloc_hook+0x51/0xc0 [ 69.846665][ T4297] ? anon_vma_clone+0xbc/0x4d0 [ 69.851427][ T4297] kmem_cache_alloc+0x3d/0x280 [ 69.856208][ T4297] anon_vma_clone+0xbc/0x4d0 [ 69.860819][ T4297] __split_vma+0x1ab/0x410 [ 69.865247][ T4297] __do_munmap+0x38a/0xe10 [ 69.869673][ T4297] mmap_region+0x977/0x1730 [ 69.874196][ T4297] ? file_mmap_ok+0x11f/0x170 [ 69.878879][ T4297] do_mmap+0x801/0xe30 [ 69.882958][ T4297] vm_mmap_pgoff+0x1c1/0x2d0 [ 69.887556][ T4297] ? account_locked_vm+0xe0/0xe0 [ 69.892508][ T4297] ksys_mmap_pgoff+0x4e2/0x790 [ 69.892791][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 69.897278][ T4297] ? mmap_region+0x1730/0x1730 [ 69.907994][ T4297] ? lockdep_hardirqs_on+0x94/0x140 [ 69.913203][ T4297] do_syscall_64+0x4c/0xa0 [ 69.917620][ T4297] ? clear_bhb_loop+0x30/0x80 [ 69.922303][ T4297] ? clear_bhb_loop+0x30/0x80 [ 69.926986][ T4297] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.932883][ T4297] RIP: 0033:0x7f6eb18e8159 [ 69.937304][ T4297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.956912][ T4297] RSP: 002b:00007f6eafb40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 69.965340][ T4297] RAX: ffffffffffffffda RBX: 00007f6eb1b6ffa0 RCX: 00007f6eb18e8159 [ 69.973324][ T4297] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000ffd000 [ 69.981332][ T4297] RBP: 00007f6eb197f03b R08: 0000000000000006 R09: 0000000000000000 [ 69.989318][ T4297] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 69.997295][ T4297] R13: 00007f6eb1b70038 R14: 00007f6eb1b6ffa0 R15: 00007ffee13f88d8 [ 70.005280][ T4297] [ 70.014117][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 70.020161][ T4232] Bluetooth: hci0: command 0x0419 tx timeout [ 70.027053][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 70.041664][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.054932][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 70.062387][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 70.063850][ T4233] usb 2-1: New USB device found, idVendor=06cd, idProduct=0103, bcdDevice=3c.0e [ 70.072734][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 70.094429][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 70.105987][ T23] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 70.106443][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.115087][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.136893][ T4233] usb 2-1: Product: syz [ 70.142285][ T4233] usb 2-1: Manufacturer: syz [ 70.146932][ T4233] usb 2-1: SerialNumber: syz [ 70.193357][ T23] hub 4-1:1.0: bad descriptor, ignoring hub [ 70.201606][ T23] hub: probe of 4-1:1.0 failed with error -5 [ 70.208157][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 70.214419][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 70.230172][ T4231] usb 1-1: USB disconnect, device number 2 [ 70.239188][ T23] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 70.248172][ T23] cdc_wdm 4-1:1.0: Unknown control protocol [ 70.338593][ T4300] FAULT_INJECTION: forcing a failure. [ 70.338593][ T4300] name failslab, interval 1, probability 0, space 0, times 0 [ 70.356882][ T4300] CPU: 0 PID: 4300 Comm: syz.4.13 Not tainted syzkaller #0 [ 70.364111][ T4300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.366091][ T4277] ODEBUG: Out of memory. ODEBUG disabled [ 70.374199][ T4300] Call Trace: [ 70.374207][ T4300] [ 70.374215][ T4300] dump_stack_lvl+0x188/0x250 [ 70.374244][ T4300] ? show_regs_print_info+0x20/0x20 [ 70.374263][ T4300] ? load_image+0x410/0x410 [ 70.374284][ T4300] ? __might_sleep+0xf0/0xf0 [ 70.374301][ T4300] ? __lock_acquire+0x7b50/0x7b50 [ 70.374329][ T4300] should_fail+0x383/0x4b0 [ 70.414603][ T4300] should_failslab+0x5/0x20 [ 70.419122][ T4300] slab_pre_alloc_hook+0x51/0xc0 [ 70.424081][ T4300] kmem_cache_alloc_trace+0x47/0x290 [ 70.429377][ T4300] ? __se_sys_mount+0x157/0x3d0 [ 70.434250][ T4300] __se_sys_mount+0x157/0x3d0 [ 70.438938][ T4300] ? __x64_sys_mount+0xc0/0xc0 [ 70.443709][ T4300] ? lockdep_hardirqs_on+0x94/0x140 [ 70.448915][ T4300] ? __x64_sys_mount+0x1c/0xc0 [ 70.453689][ T4300] do_syscall_64+0x4c/0xa0 [ 70.458112][ T4300] ? clear_bhb_loop+0x30/0x80 [ 70.462792][ T4300] ? clear_bhb_loop+0x30/0x80 [ 70.467482][ T4300] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.473382][ T4300] RIP: 0033:0x7f6eb18e8159 [ 70.477809][ T4300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.497421][ T4300] RSP: 002b:00007f6eafb40028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.505856][ T4300] RAX: ffffffffffffffda RBX: 00007f6eb1b6ffa0 RCX: 00007f6eb18e8159 [ 70.513836][ T4300] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.521814][ T4300] RBP: 00007f6eb197f03b R08: 0000200000000200 R09: 0000000000000000 [ 70.529797][ T4300] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 70.537779][ T4300] R13: 00007f6eb1b70038 R14: 00007f6eb1b6ffa0 R15: 00007ffee13f88d8 [ 70.545787][ T4300] [ 70.570198][ T4279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 70.608620][ T4279] FAULT_INJECTION: forcing a failure. [ 70.608620][ T4279] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 70.637971][ T4279] CPU: 0 PID: 4279 Comm: syz.1.2 Not tainted syzkaller #0 [ 70.645131][ T4279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.655191][ T4279] Call Trace: [ 70.658475][ T4279] [ 70.661404][ T4279] dump_stack_lvl+0x188/0x250 [ 70.666092][ T4279] ? show_regs_print_info+0x20/0x20 [ 70.671299][ T4279] ? load_image+0x410/0x410 [ 70.675813][ T4279] ? __lock_acquire+0x7b50/0x7b50 [ 70.680851][ T4279] ? __lock_acquire+0x7b50/0x7b50 [ 70.685884][ T4279] should_fail+0x383/0x4b0 [ 70.690314][ T4279] prepare_alloc_pages+0x1e3/0x5b0 [ 70.695438][ T4279] __alloc_pages+0x11b/0x480 [ 70.700028][ T4279] ? unwind_get_return_address+0x49/0x80 [ 70.705673][ T4279] ? zone_statistics+0x170/0x170 [ 70.710644][ T4279] ? alloc_pages+0x452/0x560 [ 70.715239][ T4279] stack_depot_save+0x356/0x460 [ 70.720103][ T4279] __kasan_kmalloc+0xc6/0xe0 [ 70.724696][ T4279] ? __kasan_kmalloc+0xaf/0xe0 [ 70.729469][ T4279] ? memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 70.735463][ T4279] ? new_slab+0x100/0x4b0 [ 70.739801][ T4279] ? ___slab_alloc+0x807/0xdd0 [ 70.744563][ T4279] ? kmem_cache_alloc+0xf0/0x280 [ 70.749503][ T4279] ? sk_prot_alloc+0x57/0x210 [ 70.754188][ T4279] ? sk_alloc+0x2f/0x310 [ 70.758437][ T4279] ? smc_sock_alloc+0x4b/0x480 [ 70.763202][ T4279] ? smc_create+0xb9/0x360 [ 70.767618][ T4279] ? __sock_create+0x473/0x910 [ 70.772384][ T4279] ? __sys_socket+0xe2/0x170 [ 70.776975][ T4279] ? __x64_sys_socket+0x76/0x80 [ 70.781824][ T4279] ? do_syscall_64+0x4c/0xa0 [ 70.786418][ T4279] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.792533][ T4279] memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 70.798362][ T4279] new_slab+0x100/0x4b0 [ 70.802289][ T4235] usb 4-1: USB disconnect, device number 2 [ 70.802530][ T4279] ___slab_alloc+0x807/0xdd0 [ 70.812923][ T4279] ? sk_prot_alloc+0x57/0x210 [ 70.817621][ T4279] ? sk_prot_alloc+0x57/0x210 [ 70.822299][ T4279] kmem_cache_alloc+0xf0/0x280 [ 70.827069][ T4279] sk_prot_alloc+0x57/0x210 [ 70.831587][ T4279] ? sk_alloc+0x1d/0x310 [ 70.835838][ T4279] sk_alloc+0x2f/0x310 [ 70.839922][ T4279] smc_sock_alloc+0x4b/0x480 [ 70.844515][ T4279] smc_create+0xb9/0x360 [ 70.848769][ T4279] __sock_create+0x473/0x910 [ 70.853378][ T4279] __sys_socket+0xe2/0x170 [ 70.857802][ T4279] __x64_sys_socket+0x76/0x80 [ 70.862484][ T4279] do_syscall_64+0x4c/0xa0 [ 70.866906][ T4279] ? clear_bhb_loop+0x30/0x80 [ 70.871592][ T4279] ? clear_bhb_loop+0x30/0x80 [ 70.876271][ T4279] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.882171][ T4279] RIP: 0033:0x7fceee4b8159 [ 70.886594][ T4279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.906295][ T4279] RSP: 002b:00007fceec710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 70.914722][ T4279] RAX: ffffffffffffffda RBX: 00007fceee73ffa0 RCX: 00007fceee4b8159 [ 70.922684][ T4279] RDX: 0000000000000001 RSI: 0000000000080801 RDI: 000000000000002b [ 70.930638][ T4279] RBP: 00007fceee54f03b R08: 0000000000000000 R09: 0000000000000000 [ 70.938593][ T4279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.946573][ T4279] R13: 00007fceee740038 R14: 00007fceee73ffa0 R15: 00007ffeef7ce158 [ 70.954542][ T4279] [ 71.072421][ T4233] keyspan 2-1:1.163: Keyspan - (without firmware) converter detected [ 71.104669][ T4233] usb 2-1: USB disconnect, device number 2 [ 71.124394][ T4304] md: md0 stopped. [ 71.129534][ T4233] keyspan 2-1:1.163: device disconnected [ 71.220182][ T4305] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 71.254483][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.261266][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.374857][ T4277] Set syz1 is full, maxelem 65536 reached [ 71.453872][ T4309] FAULT_INJECTION: forcing a failure. [ 71.453872][ T4309] name failslab, interval 1, probability 0, space 0, times 0 [ 71.491383][ T4309] CPU: 1 PID: 4309 Comm: syz.3.16 Not tainted syzkaller #0 [ 71.498620][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.508803][ T4309] Call Trace: [ 71.512080][ T4309] [ 71.515036][ T4309] dump_stack_lvl+0x188/0x250 [ 71.519729][ T4309] ? show_regs_print_info+0x20/0x20 [ 71.524921][ T4309] ? load_image+0x410/0x410 [ 71.529437][ T4309] ? __might_sleep+0xf0/0xf0 [ 71.534014][ T4309] ? __lock_acquire+0x7b50/0x7b50 [ 71.539045][ T4309] should_fail+0x383/0x4b0 [ 71.543473][ T4309] should_failslab+0x5/0x20 [ 71.547977][ T4309] slab_pre_alloc_hook+0x51/0xc0 [ 71.552903][ T4309] kmem_cache_alloc_trace+0x47/0x290 [ 71.558172][ T4309] ? snd_info_text_entry_open+0xc6/0x2a0 [ 71.563801][ T4309] snd_info_text_entry_open+0xc6/0x2a0 [ 71.569352][ T4309] ? snd_info_entry_mmap+0x130/0x130 [ 71.574647][ T4309] proc_reg_open+0x200/0x500 [ 71.579358][ T4309] ? proc_reg_mmap+0x280/0x280 [ 71.584235][ T4309] do_dentry_open+0x7f7/0xf90 [ 71.588927][ T4309] ? vfs_open+0x2b/0x80 [ 71.593105][ T4309] path_openat+0x2718/0x2fb0 [ 71.597742][ T4309] ? do_filp_open+0x400/0x400 [ 71.602445][ T4309] do_filp_open+0x1df/0x400 [ 71.606952][ T4309] ? vfs_tmpfile+0x300/0x300 [ 71.611558][ T4309] ? _raw_spin_unlock+0x24/0x40 [ 71.616414][ T4309] ? alloc_fd+0x59e/0x650 [ 71.620747][ T4309] do_sys_openat2+0x14b/0x500 [ 71.625412][ T4309] ? __lock_acquire+0x7b50/0x7b50 [ 71.630425][ T4309] ? do_sys_open+0xe0/0xe0 [ 71.634829][ T4309] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 71.640815][ T4309] ? lock_chain_count+0x20/0x20 [ 71.645663][ T4309] __x64_sys_openat+0x135/0x160 [ 71.650501][ T4309] do_syscall_64+0x4c/0xa0 [ 71.654920][ T4309] ? clear_bhb_loop+0x30/0x80 [ 71.659640][ T4309] ? clear_bhb_loop+0x30/0x80 [ 71.664302][ T4309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.670183][ T4309] RIP: 0033:0x7f0c392f9159 [ 71.674603][ T4309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.694215][ T4309] RSP: 002b:00007f0c37551028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 71.702640][ T4309] RAX: ffffffffffffffda RBX: 00007f0c39580fa0 RCX: 00007f0c392f9159 [ 71.710602][ T4309] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 71.718577][ T4309] RBP: 00007f0c3939003b R08: 0000000000000000 R09: 0000000000000000 [ 71.726537][ T4309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.734506][ T4309] R13: 00007f0c39581038 R14: 00007f0c39580fa0 R15: 00007ffe99321458 [ 71.742518][ T4309] [ 71.963952][ T4318] netlink: 56 bytes leftover after parsing attributes in process `syz.0.20'. [ 74.279003][ T4349] process 'syz.1.28' launched '/dev/fd/5' with NULL argv: empty string added [ 74.331489][ T4349] FAULT_INJECTION: forcing a failure. [ 74.331489][ T4349] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 74.383236][ T4349] CPU: 1 PID: 4349 Comm: syz.1.28 Not tainted syzkaller #0 [ 74.390473][ T4349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.400520][ T4349] Call Trace: [ 74.403789][ T4349] [ 74.406704][ T4349] dump_stack_lvl+0x188/0x250 [ 74.411384][ T4349] ? show_regs_print_info+0x20/0x20 [ 74.416571][ T4349] ? load_image+0x410/0x410 [ 74.421054][ T4349] ? __lock_acquire+0x7b50/0x7b50 [ 74.426093][ T4349] should_fail+0x383/0x4b0 [ 74.430498][ T4349] prepare_alloc_pages+0x1e3/0x5b0 [ 74.435603][ T4349] __alloc_pages+0x11b/0x480 [ 74.440180][ T4349] ? zone_statistics+0x170/0x170 [ 74.445127][ T4349] ? alloc_pages+0x452/0x560 [ 74.449722][ T4349] __pmd_alloc+0xa6/0x750 [ 74.454038][ T4349] ? __lock_acquire+0x7b50/0x7b50 [ 74.459054][ T4349] ? do_raw_spin_lock+0x128/0x2f0 [ 74.464060][ T4349] ? __pud_alloc+0x140/0x140 [ 74.468740][ T4349] ? __rwlock_init+0x140/0x140 [ 74.473522][ T4349] ? count_memcg_event_mm+0x324/0x370 [ 74.478904][ T4349] ? do_raw_spin_unlock+0x11d/0x230 [ 74.484109][ T4349] ? _raw_spin_unlock+0x24/0x40 [ 74.488950][ T4349] ? __pud_alloc+0x122/0x140 [ 74.493531][ T4349] handle_mm_fault+0xbd3/0x4440 [ 74.498372][ T4349] ? get_page+0xe0/0xe0 [ 74.502512][ T4349] ? follow_page_mask+0x272/0x12b0 [ 74.507611][ T4349] ? vma_is_secretmem+0x9/0x40 [ 74.512359][ T4349] ? check_vma_flags+0x359/0x470 [ 74.517294][ T4349] __get_user_pages+0x952/0x11e0 [ 74.522233][ T4349] ? populate_vma_page_range+0x290/0x290 [ 74.527860][ T4349] ? preempt_schedule+0xbc/0xd0 [ 74.532701][ T4349] ? __might_sleep+0xf0/0xf0 [ 74.537282][ T4349] ? read_lock_is_recursive+0x10/0x10 [ 74.542637][ T4349] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 74.547996][ T4349] __get_user_pages_remote+0x1c2/0x730 [ 74.553438][ T4349] ? irq_work_queue+0xb8/0x140 [ 74.558207][ T4349] ? get_user_pages_remote+0x55/0xa0 [ 74.563480][ T4349] get_arg_page+0x11b/0x350 [ 74.567970][ T4349] ? copy_string_kernel+0x280/0x280 [ 74.573151][ T4349] ? load_image+0x410/0x410 [ 74.577643][ T4349] copy_string_kernel+0x14d/0x280 [ 74.582653][ T4349] do_execveat_common+0x360/0x6b0 [ 74.587666][ T4349] __x64_sys_execveat+0xc0/0xe0 [ 74.592507][ T4349] do_syscall_64+0x4c/0xa0 [ 74.596927][ T4349] ? clear_bhb_loop+0x30/0x80 [ 74.601590][ T4349] ? clear_bhb_loop+0x30/0x80 [ 74.606271][ T4349] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.612169][ T4349] RIP: 0033:0x7fceee4b8159 [ 74.616567][ T4349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.636158][ T4349] RSP: 002b:00007fceec710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 74.644561][ T4349] RAX: ffffffffffffffda RBX: 00007fceee73ffa0 RCX: 00007fceee4b8159 [ 74.652532][ T4349] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 74.660489][ T4349] RBP: 00007fceee54f03b R08: 0000000000001000 R09: 0000000000000000 [ 74.668449][ T4349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.676408][ T4349] R13: 00007fceee740038 R14: 00007fceee73ffa0 R15: 00007ffeef7ce158 [ 74.684411][ T4349] [ 75.574845][ T4369] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 75.915957][ T4372] 9pnet: Insufficient options for proto=fd [ 76.854931][ T4395] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.097904][ T4401] nvme_fabrics: unknown parameter or missing value 'trsvci' in ctrl creation request [ 77.113203][ T4403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.50'. [ 77.204888][ T4407] netlink: 40 bytes leftover after parsing attributes in process `syz.4.47'. [ 77.259094][ T4403] serio: Serial port ptm0 [ 77.283364][ T4411] netlink: 40 bytes leftover after parsing attributes in process `syz.4.47'. [ 77.288595][ T4413] netlink: 48 bytes leftover after parsing attributes in process `syz.0.50'. [ 77.361135][ T4407] netlink: 40 bytes leftover after parsing attributes in process `syz.4.47'. [ 77.396093][ T4411] netlink: 40 bytes leftover after parsing attributes in process `syz.4.47'. [ 77.530478][ T4407] netlink: 40 bytes leftover after parsing attributes in process `syz.4.47'. [ 77.707407][ T4411] netlink: 40 bytes leftover after parsing attributes in process `syz.4.47'. [ 78.775223][ T4427] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.789953][ T4431] FAULT_INJECTION: forcing a failure. [ 78.789953][ T4431] name failslab, interval 1, probability 0, space 0, times 0 [ 78.860251][ T4431] CPU: 1 PID: 4431 Comm: syz.0.56 Not tainted syzkaller #0 [ 78.867494][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.877560][ T4431] Call Trace: [ 78.880850][ T4431] [ 78.883783][ T4431] dump_stack_lvl+0x188/0x250 [ 78.888476][ T4431] ? show_regs_print_info+0x20/0x20 [ 78.893675][ T4431] ? load_image+0x410/0x410 [ 78.898190][ T4431] ? __might_sleep+0xf0/0xf0 [ 78.902781][ T4431] ? __lock_acquire+0x7b50/0x7b50 [ 78.907817][ T4431] should_fail+0x383/0x4b0 [ 78.912253][ T4431] should_failslab+0x5/0x20 [ 78.916765][ T4431] slab_pre_alloc_hook+0x51/0xc0 [ 78.921714][ T4431] kmem_cache_alloc_node+0x47/0x2c0 [ 78.926914][ T4431] ? alloc_vmap_area+0x199/0x1b30 [ 78.931945][ T4431] ? __x64_sys_openat+0x135/0x160 [ 78.936986][ T4431] alloc_vmap_area+0x199/0x1b30 [ 78.941874][ T4431] ? vm_map_ram+0xba0/0xba0 [ 78.946399][ T4431] __get_vm_area_node+0x14f/0x2d0 [ 78.951442][ T4431] __vmalloc_node_range+0xef/0x8b0 [ 78.956558][ T4431] ? n_tty_open+0x19/0x150 [ 78.960982][ T4431] ? read_lock_is_recursive+0x10/0x10 [ 78.966371][ T4431] ? remove_wait_queue+0x120/0x120 [ 78.971497][ T4431] ? n_tty_open+0x19/0x150 [ 78.975919][ T4431] vzalloc+0x75/0x80 [ 78.979823][ T4431] ? n_tty_open+0x19/0x150 [ 78.984241][ T4431] n_tty_open+0x19/0x150 [ 78.988488][ T4431] tty_ldisc_setup+0xbf/0x250 [ 78.993165][ T4431] tty_init_dev+0x239/0x470 [ 78.997685][ T4431] tty_open+0x7e8/0xcd0 [ 79.001860][ T4431] ? __lock_acquire+0x7b50/0x7b50 [ 79.006910][ T4431] ? tty_compat_ioctl+0x570/0x570 [ 79.011956][ T4431] ? do_raw_spin_unlock+0x11d/0x230 [ 79.017174][ T4431] chrdev_open+0x585/0x5f0 [ 79.021600][ T4431] ? cd_forget+0x160/0x160 [ 79.026026][ T4431] ? fsnotify_perm+0x3a7/0x560 [ 79.030794][ T4431] ? cd_forget+0x160/0x160 [ 79.035211][ T4431] do_dentry_open+0x7f7/0xf90 [ 79.039892][ T4431] ? vfs_open+0x2b/0x80 [ 79.044058][ T4431] path_openat+0x2718/0x2fb0 [ 79.048678][ T4431] ? __kasan_slab_alloc+0xa9/0xc0 [ 79.053710][ T4431] ? do_filp_open+0x400/0x400 [ 79.058413][ T4431] do_filp_open+0x1df/0x400 [ 79.062921][ T4431] ? vfs_tmpfile+0x300/0x300 [ 79.067532][ T4431] ? _raw_spin_unlock+0x24/0x40 [ 79.072385][ T4431] ? alloc_fd+0x59e/0x650 [ 79.076725][ T4431] do_sys_openat2+0x14b/0x500 [ 79.081403][ T4431] ? __lock_acquire+0x7b50/0x7b50 [ 79.086432][ T4431] ? do_sys_open+0xe0/0xe0 [ 79.090937][ T4431] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 79.096932][ T4431] ? lock_chain_count+0x20/0x20 [ 79.101800][ T4431] __x64_sys_openat+0x135/0x160 [ 79.106664][ T4431] do_syscall_64+0x4c/0xa0 [ 79.111078][ T4431] ? clear_bhb_loop+0x30/0x80 [ 79.115753][ T4431] ? clear_bhb_loop+0x30/0x80 [ 79.120434][ T4431] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.126329][ T4431] RIP: 0033:0x7f0f0bd06159 [ 79.130757][ T4431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.150364][ T4431] RSP: 002b:00007f0f09f5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 79.158792][ T4431] RAX: ffffffffffffffda RBX: 00007f0f0bf8dfa0 RCX: 00007f0f0bd06159 [ 79.166782][ T4431] RDX: 0000000000000c00 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 79.174765][ T4431] RBP: 00007f0f0bd9d03b R08: 0000000000000000 R09: 0000000000000000 [ 79.182743][ T4431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.190719][ T4431] R13: 00007f0f0bf8e038 R14: 00007f0f0bf8dfa0 R15: 00007ffe503e6588 [ 79.198711][ T4431] [ 79.221558][ T4427] device-mapper: table: 248:0: thin-pool: Error creating metadata object [ 79.223492][ T4431] syz.0.56: vmalloc error: size 9120, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 79.261543][ T4427] device-mapper: ioctl: error adding target to table [ 79.271754][ T4431] CPU: 1 PID: 4431 Comm: syz.0.56 Not tainted syzkaller #0 [ 79.278986][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.289053][ T4431] Call Trace: [ 79.292338][ T4431] [ 79.295271][ T4431] dump_stack_lvl+0x188/0x250 [ 79.299967][ T4431] ? rcu_lock_release+0x5/0x20 [ 79.304741][ T4431] ? show_regs_print_info+0x20/0x20 [ 79.309955][ T4431] ? load_image+0x410/0x410 [ 79.314480][ T4431] warn_alloc+0x245/0x320 [ 79.318828][ T4431] ? zone_watermark_ok_safe+0x250/0x250 [ 79.324392][ T4431] ? __get_vm_area_node+0x164/0x2d0 [ 79.329695][ T4431] ? kfree+0xef/0x2a0 [ 79.333701][ T4431] __vmalloc_node_range+0x2b1/0x8b0 [ 79.338911][ T4431] ? read_lock_is_recursive+0x10/0x10 [ 79.344295][ T4431] ? remove_wait_queue+0x120/0x120 [ 79.349433][ T4431] ? n_tty_open+0x19/0x150 [ 79.353870][ T4431] vzalloc+0x75/0x80 [ 79.357780][ T4431] ? n_tty_open+0x19/0x150 [ 79.362214][ T4431] n_tty_open+0x19/0x150 [ 79.366737][ T4431] tty_ldisc_setup+0xbf/0x250 [ 79.371435][ T4431] tty_init_dev+0x239/0x470 [ 79.375955][ T4431] tty_open+0x7e8/0xcd0 [ 79.380130][ T4431] ? __lock_acquire+0x7b50/0x7b50 [ 79.385169][ T4431] ? tty_compat_ioctl+0x570/0x570 [ 79.390206][ T4431] ? do_raw_spin_unlock+0x11d/0x230 [ 79.395417][ T4431] chrdev_open+0x585/0x5f0 [ 79.399849][ T4431] ? cd_forget+0x160/0x160 [ 79.404281][ T4431] ? fsnotify_perm+0x3a7/0x560 [ 79.409052][ T4431] ? cd_forget+0x160/0x160 [ 79.413473][ T4431] do_dentry_open+0x7f7/0xf90 [ 79.418155][ T4431] ? vfs_open+0x2b/0x80 [ 79.422322][ T4431] path_openat+0x2718/0x2fb0 [ 79.426945][ T4431] ? __kasan_slab_alloc+0xa9/0xc0 [ 79.431982][ T4431] ? do_filp_open+0x400/0x400 [ 79.436682][ T4431] do_filp_open+0x1df/0x400 [ 79.441190][ T4431] ? vfs_tmpfile+0x300/0x300 [ 79.445807][ T4431] ? _raw_spin_unlock+0x24/0x40 [ 79.450665][ T4431] ? alloc_fd+0x59e/0x650 [ 79.455012][ T4431] do_sys_openat2+0x14b/0x500 [ 79.459698][ T4431] ? __lock_acquire+0x7b50/0x7b50 [ 79.464740][ T4431] ? do_sys_open+0xe0/0xe0 [ 79.469164][ T4431] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 79.475155][ T4431] ? lock_chain_count+0x20/0x20 [ 79.480064][ T4431] __x64_sys_openat+0x135/0x160 [ 79.484942][ T4431] do_syscall_64+0x4c/0xa0 [ 79.489362][ T4431] ? clear_bhb_loop+0x30/0x80 [ 79.494053][ T4431] ? clear_bhb_loop+0x30/0x80 [ 79.498735][ T4431] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.504642][ T4431] RIP: 0033:0x7f0f0bd06159 [ 79.509064][ T4431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.528681][ T4431] RSP: 002b:00007f0f09f5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 79.537109][ T4431] RAX: ffffffffffffffda RBX: 00007f0f0bf8dfa0 RCX: 00007f0f0bd06159 [ 79.545181][ T4431] RDX: 0000000000000c00 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 79.553164][ T4431] RBP: 00007f0f0bd9d03b R08: 0000000000000000 R09: 0000000000000000 [ 79.561227][ T4431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.569203][ T4431] R13: 00007f0f0bf8e038 R14: 00007f0f0bf8dfa0 R15: 00007ffe503e6588 [ 79.577183][ T4431] [ 79.660373][ T4443] FAULT_INJECTION: forcing a failure. [ 79.660373][ T4443] name failslab, interval 1, probability 0, space 0, times 0 [ 79.686157][ T4431] Mem-Info: [ 79.689327][ T4431] active_anon:281 inactive_anon:5593 isolated_anon:0 [ 79.689327][ T4431] active_file:4596 inactive_file:40504 isolated_file:0 [ 79.689327][ T4431] unevictable:768 dirty:1791 writeback:0 [ 79.689327][ T4431] slab_reclaimable:20266 slab_unreclaimable:95733 [ 79.689327][ T4431] mapped:29648 shmem:1652 pagetables:621 bounce:0 [ 79.689327][ T4431] kernel_misc_reclaimable:0 [ 79.689327][ T4431] free:1380983 free_pcp:13846 free_cma:0 [ 79.700597][ T4443] CPU: 1 PID: 4443 Comm: syz.3.62 Not tainted syzkaller #0 [ 79.738232][ T4443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.748296][ T4443] Call Trace: [ 79.751579][ T4443] [ 79.754514][ T4443] dump_stack_lvl+0x188/0x250 [ 79.759210][ T4443] ? show_regs_print_info+0x20/0x20 [ 79.764432][ T4443] ? load_image+0x410/0x410 [ 79.769043][ T4443] ? __might_sleep+0xf0/0xf0 [ 79.773644][ T4443] should_fail+0x383/0x4b0 [ 79.778074][ T4443] should_failslab+0x5/0x20 [ 79.782575][ T4443] slab_pre_alloc_hook+0x51/0xc0 [ 79.787504][ T4443] ? zswap_frontswap_store+0x403/0x1530 [ 79.793048][ T4443] kmem_cache_alloc+0x3d/0x280 [ 79.797805][ T4443] zswap_frontswap_store+0x403/0x1530 [ 79.803175][ T4443] ? page_swapcount+0x224/0x300 [ 79.808012][ T4443] ? zswap_frontswap_init+0x100/0x100 [ 79.813371][ T4443] ? __rwlock_init+0x140/0x140 [ 79.818126][ T4443] ? _raw_spin_unlock+0x24/0x40 [ 79.822961][ T4443] ? page_swapcount+0x224/0x300 [ 79.827803][ T4443] __frontswap_store+0x331/0x4a0 [ 79.832730][ T4443] swap_writepage+0x5f/0xa0 [ 79.837226][ T4443] shrink_page_list+0x43a8/0x6de0 [ 79.842265][ T4443] ? reclaim_clean_pages_from_list+0xaf0/0xaf0 [ 79.848409][ T4443] ? __lock_acquire+0x13dc/0x7b50 [ 79.853423][ T4443] ? verify_lock_unused+0x140/0x140 [ 79.858633][ T4443] reclaim_pages+0x712/0x990 [ 79.863226][ T4443] ? isolate_lru_page+0xbd0/0xbd0 [ 79.868244][ T4443] ? do_raw_spin_unlock+0x11d/0x230 [ 79.873432][ T4443] madvise_cold_or_pageout_pte_range+0x1680/0x1ea0 [ 79.879957][ T4443] ? rcu_lock_release+0x20/0x20 [ 79.884804][ T4443] ? __lock_acquire+0x7b50/0x7b50 [ 79.889823][ T4443] walk_pgd_range+0xb28/0x1370 [ 79.894620][ T4443] __walk_page_range+0x136/0x590 [ 79.899548][ T4443] ? vmacache_find+0x238/0x590 [ 79.904300][ T4443] ? find_vma+0xd2/0x230 [ 79.908531][ T4443] walk_page_range+0x3a3/0x550 [ 79.913285][ T4443] ? local_lock_release+0x97/0x170 [ 79.918381][ T4443] ? page_mapped_in_vma+0x520/0x520 [ 79.923575][ T4443] do_madvise+0x16a6/0x2aa0 [ 79.928071][ T4443] ? get_nr_vmemmap_pages_cb+0x40/0x40 [ 79.933526][ T4443] ? verify_lock_unused+0x140/0x140 [ 79.938710][ T4443] ? verify_lock_unused+0x140/0x140 [ 79.943917][ T4443] ? __context_tracking_exit+0x4c/0x80 [ 79.949364][ T4443] ? __lock_acquire+0x7b50/0x7b50 [ 79.954380][ T4443] ? lock_chain_count+0x20/0x20 [ 79.959223][ T4443] __x64_sys_madvise+0xa2/0xb0 [ 79.963974][ T4443] do_syscall_64+0x4c/0xa0 [ 79.968376][ T4443] ? clear_bhb_loop+0x30/0x80 [ 79.973042][ T4443] ? clear_bhb_loop+0x30/0x80 [ 79.977706][ T4443] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.983582][ T4443] RIP: 0033:0x7f0c392f9159 [ 79.987982][ T4443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.007569][ T4443] RSP: 002b:00007f0c37551028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 80.015967][ T4443] RAX: ffffffffffffffda RBX: 00007f0c39580fa0 RCX: 00007f0c392f9159 [ 80.023921][ T4443] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000 [ 80.031900][ T4443] RBP: 00007f0c3939003b R08: 0000000000000000 R09: 0000000000000000 [ 80.039944][ T4443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.047898][ T4443] R13: 00007f0c39581038 R14: 00007f0c39580fa0 R15: 00007ffe99321458 [ 80.055863][ T4443] [ 80.090886][ T4431] Node 0 active_anon:1052kB inactive_anon:21704kB active_file:18300kB inactive_file:161904kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118524kB dirty:7168kB writeback:0kB shmem:4448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10356kB pagetables:2500kB all_unreclaimable? no [ 80.144271][ T4431] Node 1 active_anon:32kB inactive_anon:512kB active_file:196kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 80.177712][ T4431] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 80.235841][ T4431] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 80.264918][ T4451] block device autoloading is deprecated and will be removed. [ 80.275850][ T4431] Node 0 DMA32 free:1596896kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1052kB inactive_anon:21904kB active_file:18300kB inactive_file:161904kB unevictable:1536kB writepending:7168kB present:3129332kB managed:2606512kB mlocked:0kB bounce:0kB free_pcp:42588kB local_pcp:20976kB free_cma:0kB [ 80.313871][ T4431] lowmem_reserve[]: 0 0 0 0 0 [ 80.336604][ T4431] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 80.370292][ T4431] lowmem_reserve[]: 0 0 0 0 0 [ 80.376424][ T4431] Node 1 Normal free:3910584kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:196kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:13268kB local_pcp:7932kB free_cma:0kB [ 80.394178][ T4455] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.415506][ T4431] lowmem_reserve[]: 0 0 0 0 0 [ 80.420703][ T4431] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 80.452610][ T4431] Node 0 DMA32: 240*4kB (UME) 38*8kB (UME) 35*16kB (UME) 20*32kB (UME) 9*64kB (ME) 10*128kB (ME) 6*256kB (UM) 8*512kB (ME) 4*1024kB (UM) 1*2048kB (E) 386*4096kB (M) = 1597152kB [ 80.561510][ T2301] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.569257][ T4431] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 80.660691][ T4431] Node 1 Normal: 87*4kB (UME) 26*8kB (UME) 24*16kB (UME) 47*32kB (UME) 27*64kB (UME) 15*128kB (UME) 10*256kB (UE) 3*512kB (U) 1*1024kB (E) 2*2048kB (ME) 951*4096kB (M) = 3910604kB [ 80.817744][ T4431] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 80.828941][ T4458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 80.861782][ T4458] device macsec0 entered promiscuous mode [ 80.927858][ T4431] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 80.983998][ T4431] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 81.001529][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.065348][ T4431] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 81.123148][ T4431] 46732 total pagecache pages [ 81.151990][ T4431] 0 pages in swap cache [ 81.176058][ T4431] Swap cache stats: add 66, delete 66, find 11/27 [ 81.214769][ T4431] Free swap = 124728kB [ 81.245666][ T4431] Total swap = 124996kB [ 81.261720][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 81.275503][ T4431] 2097051 pages RAM [ 81.296916][ T4431] 0 pages HighMem/MovableOnly [ 81.332769][ T4431] 411500 pages reserved [ 81.355187][ T4431] 0 pages cma reserved [ 81.382480][ T13] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 81.391832][ T4431] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 81.407321][ T13] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.474608][ T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.495413][ T1109] cfg80211: failed to load regulatory.db [ 81.560570][ T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.575816][ T13] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.589248][ T13] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.615052][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.731551][ T2301] usb 3-1: Using ep0 maxpacket: 32 [ 81.941858][ T13] usb 2-1: usb_control_msg returned -32 [ 81.947816][ T13] usbtmc 2-1:16.0: can't read capabilities [ 82.617144][ T13] usb 2-1: USB disconnect, device number 3 [ 82.681926][ T2301] usb 3-1: config 0 interface 0 has no altsetting 0 [ 82.691796][ T2301] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 82.704790][ T2301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.720937][ T2301] usb 3-1: config 0 descriptor?? [ 82.759616][ T4473] device syzkaller1 entered promiscuous mode [ 82.821030][ T4473] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 82.827969][ T4473] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 82.867525][ T4473] vhci_hcd vhci_hcd.0: Device attached [ 82.979773][ T4483] vhci_hcd: connection closed [ 82.982514][ T4244] vhci_hcd: stop threads [ 83.046726][ T4244] vhci_hcd: release socket [ 83.053260][ T4244] vhci_hcd: disconnect device [ 83.081460][ T4233] vhci_hcd: vhci_device speed not set [ 83.141418][ T2301] usbhid 3-1:0.0: can't add hid device: -71 [ 83.147554][ T2301] usbhid: probe of 3-1:0.0 failed with error -71 [ 83.156541][ T2301] usb 3-1: USB disconnect, device number 2 [ 83.379569][ T4493] device netdevsim0 entered promiscuous mode [ 84.450743][ T4500] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.726714][ T4465] blk_update_request: I/O error, dev sda, sector 704822 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 84.738564][ T4465] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88103) [ 84.750372][ T4465] blk_update_request: I/O error, dev sda, sector 704854 op 0x1:(WRITE) flags 0x0 phys_seg 5 prio class 0 [ 84.761624][ T4465] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88162) [ 84.774871][ T1169] Buffer I/O error on device sda1, logical block 88064 [ 84.799889][ T1169] Buffer I/O error on device sda1, logical block 88068 [ 84.910790][ T1169] Buffer I/O error on device sda1, logical block 88069 [ 85.046735][ T1169] Buffer I/O error on device sda1, logical block 88070 [ 85.185519][ T1169] Buffer I/O error on device sda1, logical block 88071 [ 85.288123][ T4505] sctp: failed to load transform for md5: -2 [ 85.329750][ T1169] Buffer I/O error on device sda1, logical block 88072 [ 85.479183][ T1169] Buffer I/O error on device sda1, logical block 88073 [ 85.567063][ T4465] blk_update_request: I/O error, dev sda, sector 705310 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 0 [ 85.578402][ T4465] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88209) [ 85.614916][ T4465] blk_update_request: I/O error, dev sda, sector 705686 op 0x1:(WRITE) flags 0x0 phys_seg 4 prio class 0 [ 85.627074][ T4465] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88263) [ 85.639513][ T4465] blk_update_request: I/O error, dev sda, sector 706126 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 0 [ 85.641750][ T1169] Buffer I/O error on device sda1, logical block 88074 [ 85.650794][ T4465] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88312) [ 85.675743][ T4465] blk_update_request: I/O error, dev sda, sector 706510 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 85.687250][ T4465] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88316) [ 85.698922][ T4465] blk_update_request: I/O error, dev sda, sector 706542 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 0 [ 85.710175][ T4465] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88336) [ 85.721941][ T4465] blk_update_request: I/O error, dev sda, sector 706710 op 0x1:(WRITE) flags 0x0 phys_seg 12 prio class 0 [ 85.733767][ T4465] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88380) [ 85.761408][ T1169] Buffer I/O error on device sda1, logical block 88075 [ 85.776705][ T1169] Buffer I/O error on device sda1, logical block 88076 [ 85.846157][ T4465] blk_update_request: I/O error, dev sda, sector 707054 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 85.857504][ T4465] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88387) [ 85.869758][ T4465] blk_update_request: I/O error, dev sda, sector 707110 op 0x1:(WRITE) flags 0x0 phys_seg 5 prio class 0 [ 85.881324][ T4465] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88409) [ 86.786830][ T3521] Aborting journal on device sda1-8. [ 86.798535][ T1236] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 86.810540][ T3521] JBD2: Error -5 detected when updating journal superblock for sda1-8. [ 86.827638][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 86.852769][ T4540] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.87: Detected aborted journal [ 86.879177][ T1236] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 86.901581][ T4174] EXT4-fs (sda1): I/O error while writing superblock [ 86.913052][ T4541] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.88: Detected aborted journal [ 86.929363][ T4540] EXT4-fs (sda1): previous I/O error to superblock detected [ 86.944364][ T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 86.958695][ T4540] EXT4-fs (sda1): I/O error while writing superblock [ 86.972350][ T4541] EXT4-fs (sda1): previous I/O error to superblock detected [ 86.980244][ T1236] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 86.997206][ T4174] EXT4-fs (sda1): Remounting filesystem read-only [ 87.009819][ T4541] EXT4-fs (sda1): Remounting filesystem read-only [ 87.017911][ T4521] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd-run-hook: reading directory lblock 0 [ 87.033136][ T4541] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.88: Detected aborted journal [ 87.044042][ T4540] EXT4-fs (sda1): Remounting filesystem read-only [ 87.071049][ T4540] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.87: Detected aborted journal [ 87.085869][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 87.093082][ T13] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 87.106366][ T4521] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd-run-hook: reading directory lblock 0 [ 87.129842][ T4541] EXT4-fs (sda1): previous I/O error to superblock detected [ 87.137476][ T4540] EXT4-fs (sda1): previous I/O error to superblock detected [ 87.144892][ T4174] EXT4-fs (sda1): previous I/O error to superblock detected [ 87.163474][ T4507] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 87.172361][ T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 87.178334][ T4521] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm dhcpcd-run-hook: reading directory lblock 0 [ 87.181738][ T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 87.202953][ T4540] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.87: Detected aborted journal [ 87.224709][ T4541] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 87.239692][ T4197] Bluetooth: Wrong link type (-22) [ 87.282887][ T4545] tmpfs: Unknown parameter 'quota' [ 87.543187][ T4551] FAULT_INJECTION: forcing a failure. [ 87.543187][ T4551] name failslab, interval 1, probability 0, space 0, times 0 [ 87.579573][ T4556] FAULT_INJECTION: forcing a failure. [ 87.579573][ T4556] name failslab, interval 1, probability 0, space 0, times 0 [ 87.601517][ T4551] CPU: 0 PID: 4551 Comm: syz.2.90 Not tainted syzkaller #0 [ 87.608928][ T4551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.618991][ T4551] Call Trace: [ 87.622273][ T4551] [ 87.625198][ T4551] dump_stack_lvl+0x188/0x250 [ 87.629887][ T4551] ? show_regs_print_info+0x20/0x20 [ 87.635094][ T4551] ? load_image+0x410/0x410 [ 87.639606][ T4551] ? __might_sleep+0xf0/0xf0 [ 87.644197][ T4551] ? __lock_acquire+0x7b50/0x7b50 [ 87.649224][ T4551] should_fail+0x383/0x4b0 [ 87.653652][ T4551] should_failslab+0x5/0x20 [ 87.658170][ T4551] slab_pre_alloc_hook+0x51/0xc0 [ 87.663112][ T4551] __kmalloc_node+0x6d/0x3a0 [ 87.667709][ T4551] ? memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 87.673704][ T4551] memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 87.679526][ T4551] slab_post_alloc_hook+0xba/0x380 [ 87.684645][ T4551] ? copy_net_ns+0x13c/0x5b0 [ 87.689221][ T4551] kmem_cache_alloc+0x15d/0x280 [ 87.694051][ T4551] copy_net_ns+0x13c/0x5b0 [ 87.698449][ T4551] create_new_namespaces+0x3ce/0x700 [ 87.703986][ T4551] unshare_nsproxy_namespaces+0x116/0x160 [ 87.709703][ T4551] ksys_unshare+0x4f6/0x8e0 [ 87.714186][ T4551] ? __lock_acquire+0x7b50/0x7b50 [ 87.719193][ T4551] ? sighand_ctor+0x40/0x40 [ 87.723676][ T4551] ? lock_chain_count+0x20/0x20 [ 87.728518][ T4551] ? syscall_enter_from_user_mode+0x21/0x70 [ 87.734393][ T4551] __x64_sys_unshare+0x34/0x40 [ 87.739137][ T4551] do_syscall_64+0x4c/0xa0 [ 87.743533][ T4551] ? clear_bhb_loop+0x30/0x80 [ 87.748188][ T4551] ? clear_bhb_loop+0x30/0x80 [ 87.752843][ T4551] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.758711][ T4551] RIP: 0033:0x7fdb5c177159 [ 87.763110][ T4551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.782713][ T4551] RSP: 002b:00007fdb5a3cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 87.791110][ T4551] RAX: ffffffffffffffda RBX: 00007fdb5c3fefa0 RCX: 00007fdb5c177159 [ 87.799062][ T4551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 87.807016][ T4551] RBP: 00007fdb5c20e03b R08: 0000000000000000 R09: 0000000000000000 [ 87.814995][ T4551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.822947][ T4551] R13: 00007fdb5c3ff038 R14: 00007fdb5c3fefa0 R15: 00007ffc9d47ac58 [ 87.831009][ T4551] [ 87.851166][ T4556] CPU: 0 PID: 4556 Comm: syz.3.91 Not tainted syzkaller #0 [ 87.858406][ T4556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.868463][ T4556] Call Trace: [ 87.871730][ T4556] [ 87.874674][ T4556] dump_stack_lvl+0x188/0x250 [ 87.879340][ T4556] ? show_regs_print_info+0x20/0x20 [ 87.884518][ T4556] ? load_image+0x410/0x410 [ 87.889023][ T4556] ? __might_sleep+0xf0/0xf0 [ 87.893597][ T4556] ? __lock_acquire+0x7b50/0x7b50 [ 87.898608][ T4556] should_fail+0x383/0x4b0 [ 87.903011][ T4556] should_failslab+0x5/0x20 [ 87.907533][ T4556] slab_pre_alloc_hook+0x51/0xc0 [ 87.912452][ T4556] ? __proc_create+0x36f/0x8b0 [ 87.917202][ T4556] kmem_cache_alloc+0x3d/0x280 [ 87.921973][ T4556] __proc_create+0x36f/0x8b0 [ 87.926546][ T4556] ? proc_symlink+0x210/0x210 [ 87.931201][ T4556] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 87.937083][ T4556] ? _raw_spin_unlock+0x40/0x40 [ 87.941936][ T4556] ? _find_next_bit+0x1f0/0x200 [ 87.946803][ T4556] proc_create_reg+0x87/0x100 [ 87.951515][ T4556] proc_create_net_data+0x95/0x1a0 [ 87.956614][ T4556] ? bpf_iter_fini_seq_net+0xb0/0xb0 [ 87.961886][ T4556] netlink_net_init+0x52/0x60 [ 87.966545][ T4556] ops_init+0x360/0x5f0 [ 87.970686][ T4556] setup_net+0x39e/0xa10 [ 87.974910][ T4556] ? copy_net_ns+0x5b0/0x5b0 [ 87.979482][ T4556] ? copy_net_ns+0x324/0x5b0 [ 87.984074][ T4556] ? down_read_killable+0x1ce/0x340 [ 87.989260][ T4556] copy_net_ns+0x33e/0x5b0 [ 87.993673][ T4556] create_new_namespaces+0x3ce/0x700 [ 87.998947][ T4556] unshare_nsproxy_namespaces+0x116/0x160 [ 88.004675][ T4556] ksys_unshare+0x4f6/0x8e0 [ 88.009184][ T4556] ? __lock_acquire+0x7b50/0x7b50 [ 88.014190][ T4556] ? sighand_ctor+0x40/0x40 [ 88.018759][ T4556] ? lock_chain_count+0x20/0x20 [ 88.023594][ T4556] ? syscall_enter_from_user_mode+0x21/0x70 [ 88.029470][ T4556] __x64_sys_unshare+0x34/0x40 [ 88.034216][ T4556] do_syscall_64+0x4c/0xa0 [ 88.038616][ T4556] ? clear_bhb_loop+0x30/0x80 [ 88.043276][ T4556] ? clear_bhb_loop+0x30/0x80 [ 88.047934][ T4556] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.053807][ T4556] RIP: 0033:0x7f0c392f9159 [ 88.058238][ T4556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.077825][ T4556] RSP: 002b:00007f0c37551028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 88.086232][ T4556] RAX: ffffffffffffffda RBX: 00007f0c39580fa0 RCX: 00007f0c392f9159 [ 88.094188][ T4556] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 88.102161][ T4556] RBP: 00007f0c3939003b R08: 0000000000000000 R09: 0000000000000000 [ 88.110114][ T4556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.118063][ T4556] R13: 00007f0c39581038 R14: 00007f0c39580fa0 R15: 00007ffe99321458 [ 88.126035][ T4556] [ 88.499261][ T4509] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 88.621775][ T4509] pci 0000:00:03.0: reg 0x10: [io 0xc000-0xc03f] [ 88.652254][ T26] audit: type=1326 audit(1789066131.093:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.3.92" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c392f9159 code=0x7ffc0000 [ 88.720499][ T4509] pci 0000:00:03.0: reg 0x14: [mem 0xfe800000-0xfe80007f] [ 88.762134][ T26] audit: type=1326 audit(1789066131.173:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4560 comm="syz.3.92" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c392f9159 code=0x7ffc0000 [ 89.035076][ T4509] virtio-pci 0000:00:03.0: can't enable device: BAR 0 [io 0xc000-0xc03f] not claimed [ 89.058360][ T4509] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 89.447369][ T4587] netlink: 128 bytes leftover after parsing attributes in process `syz.3.101'. [ 89.464988][ T4589] nvme_fabrics: unknown parameter or missing value 'nq' in ctrl creation request [ 89.650730][ T4597] ======================================================= [ 89.650730][ T4597] WARNING: The mand mount option has been deprecated and [ 89.650730][ T4597] and is ignored by this kernel. Remove the mand [ 89.650730][ T4597] option from the mount to silence this warning. [ 89.650730][ T4597] ======================================================= [ 89.685802][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.692023][ T4595] capability: warning: `syz.2.106' uses deprecated v2 capabilities in a way that may be insecure [ 89.803419][ T4597] jffs2: notice: (4597) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 89.936267][ T4614] netlink: 'syz.4.112': attribute type 1 has an invalid length. [ 89.982072][ T4614] netlink: 224 bytes leftover after parsing attributes in process `syz.4.112'. [ 91.104163][ T4635] netlink: 128 bytes leftover after parsing attributes in process `syz.4.117'. [ 91.397111][ T4641] device syzkaller0 entered promiscuous mode [ 91.685518][ T4661] Zero length message leads to an empty skb [ 91.853216][ T4674] EXT4-fs error: 195 callbacks suppressed [ 91.853230][ T4674] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.129: Detected aborted journal [ 91.877972][ T4672] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.128: Detected aborted journal [ 91.913277][ T4672] EXT4-fs: 147 callbacks suppressed [ 91.913291][ T4672] EXT4-fs (sda1): Remounting filesystem read-only [ 91.921933][ T4674] EXT4-fs (sda1): Remounting filesystem read-only [ 91.940917][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 91.965459][ T4174] EXT4-fs (sda1): Remounting filesystem read-only [ 91.979261][ T4674] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.129: Detected aborted journal [ 91.996247][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 92.023573][ T4174] EXT4-fs (sda1): Remounting filesystem read-only [ 92.030844][ T4674] EXT4-fs (sda1): Remounting filesystem read-only [ 92.043430][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 92.053262][ T4677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 92.056718][ T4174] EXT4-fs (sda1): Remounting filesystem read-only [ 92.092204][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 92.103899][ T4174] EXT4-fs (sda1): Remounting filesystem read-only [ 92.110563][ T4674] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.129: Detected aborted journal [ 92.130586][ T4679] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.130: Detected aborted journal [ 92.146581][ T4674] EXT4-fs (sda1): Remounting filesystem read-only [ 92.150848][ T4679] EXT4-fs (sda1): Remounting filesystem read-only [ 92.163488][ T4674] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.129: Detected aborted journal [ 92.164784][ T4679] EXT4-fs (sda1): Remounting filesystem read-only [ 92.260841][ T4682] device syzkaller0 entered promiscuous mode [ 93.013448][ T4718] netlink: 52 bytes leftover after parsing attributes in process `syz.2.144'. [ 93.534580][ T4744] device syzkaller0 entered promiscuous mode [ 94.169560][ T21] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.152512][ T4726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.358703][ T4810] md: array md0 already has disks! [ 96.411703][ T4810] tmpfs: Unknown parameter 'quota' [ 96.712645][ T4826] device syzkaller0 entered promiscuous mode [ 96.821560][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.868469][ T4834] EXT4-fs error: 143 callbacks suppressed [ 96.868484][ T4834] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.184: Detected aborted journal [ 96.947125][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 96.984434][ T4174] EXT4-fs: 124 callbacks suppressed [ 96.984447][ T4174] EXT4-fs (sda1): Remounting filesystem read-only [ 97.066522][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 97.075647][ T4834] EXT4-fs (sda1): Remounting filesystem read-only [ 97.127590][ T4174] EXT4-fs (sda1): Remounting filesystem read-only [ 97.173433][ T4834] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.184: Detected aborted journal [ 97.177127][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 97.190152][ T4834] EXT4-fs (sda1): Remounting filesystem read-only [ 97.218795][ T4174] EXT4-fs (sda1): Remounting filesystem read-only [ 97.232843][ T4839] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.186: Detected aborted journal [ 97.236978][ T4840] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.187: Detected aborted journal [ 97.251173][ T4841] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.185: Detected aborted journal [ 97.263533][ T4842] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.188: Detected aborted journal [ 97.292286][ T4839] EXT4-fs (sda1): Remounting filesystem read-only [ 97.293064][ T4842] EXT4-fs (sda1): Remounting filesystem read-only [ 97.302210][ T4839] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.186: Detected aborted journal [ 97.305963][ T4840] EXT4-fs (sda1): Remounting filesystem read-only [ 97.322633][ T4841] EXT4-fs (sda1): Remounting filesystem read-only [ 97.335929][ T4840] EXT4-fs (sda1): Remounting filesystem read-only [ 97.349022][ T4844] netlink: 'syz.0.185': attribute type 13 has an invalid length. [ 97.569074][ T4848] tmpfs: Unknown parameter 'quota' [ 97.591066][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.611981][ T4855] netlink: 2 bytes leftover after parsing attributes in process `syz.4.190'. [ 97.628232][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.642161][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.819751][ T4847] netlink: 116 bytes leftover after parsing attributes in process `syz.3.187'. [ 97.956406][ T4863] lo speed is unknown, defaulting to 1000 [ 97.994847][ T4863] lo speed is unknown, defaulting to 1000 [ 98.019598][ T4863] lo speed is unknown, defaulting to 1000 [ 98.020825][ T4868] syz.3.194 uses obsolete (PF_INET,SOCK_PACKET) [ 98.070443][ T4863] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 98.204185][ T4863] lo speed is unknown, defaulting to 1000 [ 98.223748][ T4863] lo speed is unknown, defaulting to 1000 [ 98.270741][ T4863] lo speed is unknown, defaulting to 1000 [ 98.292434][ T4863] lo speed is unknown, defaulting to 1000 [ 98.344283][ T4863] lo speed is unknown, defaulting to 1000 [ 98.353713][ T4891] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.456423][ T4896] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 98.602600][ T4900] md: array md0 already has disks! [ 98.621910][ T4900] tmpfs: Unknown parameter 'quota' [ 98.960898][ T4916] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.445903][ T4930] md: array md0 already has disks! [ 100.480554][ T4930] tmpfs: Unknown parameter 'quota' [ 100.578378][ T4931] device syzkaller0 entered promiscuous mode [ 101.183243][ T4964] md: array md0 already has disks! [ 101.212313][ T4964] tmpfs: Unknown parameter 'quota' [ 101.489914][ T4983] netlink: 52 bytes leftover after parsing attributes in process `syz.3.232'. [ 101.526287][ T4986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.540323][ T4981] netlink: 'syz.2.234': attribute type 6 has an invalid length. [ 101.596841][ T4981] netlink: 'syz.2.234': attribute type 7 has an invalid length. [ 101.621146][ T4981] netlink: 'syz.2.234': attribute type 8 has an invalid length. [ 101.895213][ T5000] EXT4-fs error: 185 callbacks suppressed [ 101.895227][ T5000] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.241: Detected aborted journal [ 101.924958][ T5000] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.241: Detected aborted journal [ 101.940918][ T5002] md: array md0 already has disks! [ 101.954480][ T5003] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.243: Detected aborted journal [ 101.959888][ T5001] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.242: Detected aborted journal [ 101.975800][ T5002] tmpfs: Unknown parameter 'quota' [ 102.001704][ T5001] EXT4-fs: 168 callbacks suppressed [ 102.001717][ T5001] EXT4-fs (sda1): Remounting filesystem read-only [ 102.029186][ T5001] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.242: Detected aborted journal [ 102.065473][ T5005] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.244: Detected aborted journal [ 102.067537][ T5006] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.245: Detected aborted journal [ 102.076440][ T5003] EXT4-fs (sda1): Remounting filesystem read-only [ 102.077509][ T5001] EXT4-fs (sda1): Remounting filesystem read-only [ 102.093979][ T5006] EXT4-fs (sda1): Remounting filesystem read-only [ 102.094444][ T21] usb 2-1: device descriptor read/64, error -110 [ 102.106940][ T5006] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.245: Detected aborted journal [ 102.112078][ T5003] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.243: Detected aborted journal [ 102.114123][ T5006] EXT4-fs (sda1): Remounting filesystem read-only [ 102.135749][ T5005] EXT4-fs (sda1): Remounting filesystem read-only [ 102.150673][ T5005] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.244: Detected aborted journal [ 102.171389][ T5003] EXT4-fs (sda1): Remounting filesystem read-only [ 102.206371][ T5003] EXT4-fs (sda1): Remounting filesystem read-only [ 102.216154][ T5010] EXT4-fs (sda1): Remounting filesystem read-only [ 102.223546][ T5005] EXT4-fs (sda1): Remounting filesystem read-only [ 102.421398][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 102.462391][ T5020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 102.562407][ T5027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 102.591395][ T21] usb 2-1: device descriptor read/64, error -32 [ 102.731861][ T21] usb usb2-port1: attempt power cycle [ 103.073212][ T5048] device syzkaller0 entered promiscuous mode [ 103.183826][ T21] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.281483][ T21] usb 2-1: device descriptor read/8, error -32 [ 103.555273][ T21] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 103.585894][ T5076] netlink: 52 bytes leftover after parsing attributes in process `syz.3.274'. [ 103.638536][ T5074] lo speed is unknown, defaulting to 1000 [ 103.647805][ T5077] netlink: 'syz.0.273': attribute type 1 has an invalid length. [ 103.649379][ T5078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'. [ 103.655926][ T21] usb 2-1: device descriptor read/8, error -32 [ 103.690090][ T5077] netlink: 'syz.0.273': attribute type 2 has an invalid length. [ 103.802100][ T21] usb usb2-port1: unable to enumerate USB device [ 103.941261][ T5090] netlink: 36 bytes leftover after parsing attributes in process `syz.1.276'. [ 104.527818][ T5153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.284'. [ 104.737931][ T5161] netlink: 44 bytes leftover after parsing attributes in process `syz.4.287'. [ 104.761972][ T5163] block nbd2: not configured, cannot reconfigure [ 105.158373][ T5185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.297'. [ 106.173762][ T5231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 106.490243][ T5243] netlink: 'syz.1.321': attribute type 2 has an invalid length. [ 106.605376][ T5247] netlink: 80 bytes leftover after parsing attributes in process `syz.3.323'. [ 106.662446][ T5247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.323'. [ 106.679446][ T5247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.323'. [ 106.690049][ T5249] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.908532][ T5260] EXT4-fs error: 261 callbacks suppressed [ 106.908546][ T5260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.330: Detected aborted journal [ 106.929733][ T5263] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:9: reading directory lblock 0 [ 106.935599][ T5264] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.331: Detected aborted journal [ 106.959043][ T5258] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.328: Detected aborted journal [ 106.990446][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 107.007172][ T5264] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.331: Detected aborted journal [ 107.020713][ T5264] EXT4-fs: 220 callbacks suppressed [ 107.021078][ T5264] EXT4-fs (sda1): Remounting filesystem read-only [ 107.039056][ T5267] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:1: reading directory lblock 0 [ 107.136767][ T5270] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:1: reading directory lblock 0 [ 107.167582][ T4174] EXT4-fs (sda1): Remounting filesystem read-only [ 107.248098][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 107.284062][ T5273] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:13: reading directory lblock 0 [ 107.362768][ T4174] EXT4-fs (sda1): Remounting filesystem read-only [ 107.421875][ T5276] EXT4-fs (sda1): Remounting filesystem read-only [ 107.461615][ T5276] EXT4-fs (sda1): Remounting filesystem read-only [ 107.475014][ T5278] EXT4-fs (sda1): Remounting filesystem read-only [ 107.484388][ T5278] EXT4-fs (sda1): Remounting filesystem read-only [ 107.518374][ T5277] fuse: Unknown parameter 'group_i00000000000000000000' [ 107.526526][ T5276] EXT4-fs (sda1): Remounting filesystem read-only [ 107.535915][ T5280] EXT4-fs (sda1): Remounting filesystem read-only [ 107.556925][ T5282] EXT4-fs (sda1): Remounting filesystem read-only [ 107.930179][ T5305] device vlan2 entered promiscuous mode [ 107.962664][ T5305] device hsr_slave_0 left promiscuous mode [ 108.048311][ T5309] netlink: 'syz.0.345': attribute type 1 has an invalid length. [ 108.110357][ T5313] fuse: Unknown parameter 'group_i00000000000000000000' [ 108.113138][ T5309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.149506][ T5312] bond1 (unregistering): Released all slaves [ 108.458693][ T5288] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 108.604870][ T5336] __nla_validate_parse: 2 callbacks suppressed [ 108.604886][ T5336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.355'. [ 108.642622][ T5336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.355'. [ 108.651977][ T5336] netlink: 31 bytes leftover after parsing attributes in process `syz.0.355'. [ 108.672725][ T5338] fuse: Unknown parameter 'group_i00000000000000000000' [ 108.719971][ T5345] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 108.760379][ T5348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'. [ 108.803139][ T5352] netlink: 132 bytes leftover after parsing attributes in process `syz.0.361'. [ 108.817483][ T5348] bridge1: port 1(erspan0) entered blocking state [ 108.818593][ T5352] netlink: 64 bytes leftover after parsing attributes in process `syz.0.361'. [ 108.824743][ T5348] bridge1: port 1(erspan0) entered disabled state [ 108.841140][ T5348] device erspan0 entered promiscuous mode [ 108.848330][ T5348] bridge1: port 1(erspan0) entered blocking state [ 108.855170][ T5348] bridge1: port 1(erspan0) entered forwarding state [ 109.156379][ T5365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'. [ 109.185361][ T5365] device macsec0 entered promiscuous mode [ 110.043186][ T5371] netlink: 48 bytes leftover after parsing attributes in process `syz.4.369'. [ 110.063480][ T5371] netlink: 48 bytes leftover after parsing attributes in process `syz.4.369'. [ 110.202450][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'. [ 110.269690][ T5388] device syzkaller0 entered promiscuous mode [ 110.279898][ T5389] device dummy0 entered promiscuous mode [ 110.289287][ T5389] device gretap0 entered promiscuous mode [ 110.347966][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 110.791309][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 110.811310][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 111.963459][ T4174] EXT4-fs error: 152 callbacks suppressed [ 111.963471][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 112.082021][ T5410] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.386: Detected aborted journal [ 112.093106][ T5410] EXT4-fs: 136 callbacks suppressed [ 112.093152][ T5410] EXT4-fs (sda1): Remounting filesystem read-only [ 112.857735][ T5419] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.387: Detected aborted journal [ 112.868742][ T5419] EXT4-fs (sda1): Remounting filesystem read-only [ 112.878137][ T5419] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.387: Detected aborted journal [ 112.887926][ T4174] EXT4-fs (sda1): Remounting filesystem read-only [ 112.889154][ T5419] EXT4-fs (sda1): Remounting filesystem read-only [ 112.897504][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 112.944972][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 112.950317][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 112.963540][ T4174] EXT4-fs (sda1): Remounting filesystem read-only [ 112.969491][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 112.978439][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 112.997345][ T4174] EXT4-fs (sda1): Remounting filesystem read-only [ 113.003316][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 113.003964][ T4174] EXT4-fs (sda1): Remounting filesystem read-only [ 113.029419][ T5421] EXT4-fs (sda1): Remounting filesystem read-only [ 113.033957][ T5422] EXT4-fs (sda1): Remounting filesystem read-only [ 113.046305][ T5422] EXT4-fs (sda1): Remounting filesystem read-only [ 113.206999][ T5435] device syzkaller0 entered promiscuous mode [ 115.034500][ T5472] __nla_validate_parse: 2 callbacks suppressed [ 115.034516][ T5472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 115.086310][ T5474] device syzkaller0 entered promiscuous mode [ 115.096611][ T5477] tipc: Started in network mode [ 115.104613][ T5477] tipc: Node identity , cluster identity 4711 [ 115.126314][ T5477] tipc: Failed to set node id, please configure manually [ 115.133881][ T5477] tipc: Enabling of bearer rejected, failed to enable media [ 115.146109][ T5482] binder: 5481:5482 ioctl c0306201 200000000680 returned -14 [ 115.443895][ T5486] syzkaller0: renamed from gre1 [ 115.817341][ T5510] netlink: 'syz.2.418': attribute type 4 has an invalid length. [ 116.016591][ T5522] binder: 5520:5522 ioctl c0306201 200000000680 returned -14 [ 116.265495][ T5531] device syzkaller0 entered promiscuous mode [ 116.448727][ T5543] Illegal XDP return value 4294967274, expect packet loss! [ 116.491264][ T5551] fuse: Bad value for 'fd' [ 116.496912][ T5515] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.506980][ T5515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.557072][ T5553] FAULT_INJECTION: forcing a failure. [ 116.557072][ T5553] name fail_futex, interval 1, probability 0, space 0, times 1 [ 116.584965][ T5553] CPU: 1 PID: 5553 Comm: syz.1.435 Not tainted syzkaller #0 [ 116.592298][ T5553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.602367][ T5553] Call Trace: [ 116.605660][ T5553] [ 116.608588][ T5553] dump_stack_lvl+0x188/0x250 [ 116.613272][ T5553] ? show_regs_print_info+0x20/0x20 [ 116.618513][ T5553] ? load_image+0x410/0x410 [ 116.623018][ T5553] ? mark_lock+0x94/0x320 [ 116.627342][ T5553] should_fail+0x383/0x4b0 [ 116.631745][ T5553] get_futex_key+0x1a1/0x12d0 [ 116.636414][ T5553] ? futex_wait_restart+0x250/0x250 [ 116.641594][ T5553] ? __lock_acquire+0x13dc/0x7b50 [ 116.646616][ T5553] futex_wake+0x101/0x540 [ 116.650939][ T5553] ? futex_wait+0x680/0x680 [ 116.655429][ T5553] ? verify_lock_unused+0x140/0x140 [ 116.660615][ T5553] ? verify_lock_unused+0x140/0x140 [ 116.665804][ T5553] do_futex+0xd83/0x12b0 [ 116.670036][ T5553] ? rcu_lock_release+0x5/0x20 [ 116.674796][ T5553] ? futex_exit_release+0x1c0/0x1c0 [ 116.679983][ T5553] ? __context_tracking_exit+0x4c/0x80 [ 116.685440][ T5553] __se_sys_futex+0x389/0x420 [ 116.690107][ T5553] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 116.696073][ T5553] ? __x64_sys_futex+0xf0/0xf0 [ 116.700826][ T5553] ? __x64_sys_futex+0x1d/0xf0 [ 116.705578][ T5553] do_syscall_64+0x4c/0xa0 [ 116.709981][ T5553] ? clear_bhb_loop+0x30/0x80 [ 116.714644][ T5553] ? clear_bhb_loop+0x30/0x80 [ 116.719316][ T5553] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.725196][ T5553] RIP: 0033:0x7fceee4b8159 [ 116.729599][ T5553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.749190][ T5553] RSP: 002b:00007fceec7100e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 116.757592][ T5553] RAX: ffffffffffffffda RBX: 00007fceee73ffa8 RCX: 00007fceee4b8159 [ 116.765549][ T5553] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fceee73ffac [ 116.773508][ T5553] RBP: 00007fceee73ffa0 R08: 001ed069898847c4 R09: 0000000000000000 [ 116.781479][ T5553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.789435][ T5553] R13: 00007fceee740038 R14: 00007ffeef7ce070 R15: 00007ffeef7ce158 [ 116.797400][ T5553] [ 116.806420][ T5553] binder: 5552:5553 ioctl c0306201 200000000680 returned -14 [ 116.897921][ T5563] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 116.975229][ T5567] EXT4-fs error: 142 callbacks suppressed [ 116.975245][ T5567] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.440: Detected aborted journal [ 116.984017][ T5568] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.441: Detected aborted journal [ 117.016704][ T5567] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.440: Detected aborted journal [ 117.032495][ T5568] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.441: Detected aborted journal [ 117.045936][ T5571] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.442: Detected aborted journal [ 117.058231][ T5568] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.441: Detected aborted journal [ 117.088705][ T5571] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.442: Detected aborted journal [ 117.103823][ T5571] EXT4-fs: 132 callbacks suppressed [ 117.103837][ T5571] EXT4-fs (sda1): Remounting filesystem read-only [ 117.104299][ T5562] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.439: Detected aborted journal [ 117.129775][ T5568] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.441: Detected aborted journal [ 117.139923][ T5573] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.443: Detected aborted journal [ 117.142529][ T5568] EXT4-fs (sda1): Remounting filesystem read-only [ 117.159030][ T5568] EXT4-fs (sda1): Remounting filesystem read-only [ 117.165886][ T5562] EXT4-fs (sda1): Remounting filesystem read-only [ 117.172988][ T5568] EXT4-fs (sda1): Remounting filesystem read-only [ 117.183044][ T5574] EXT4-fs (sda1): Remounting filesystem read-only [ 117.207088][ T5573] EXT4-fs (sda1): Remounting filesystem read-only [ 117.207204][ T5562] EXT4-fs (sda1): Remounting filesystem read-only [ 117.217514][ T5573] EXT4-fs (sda1): Remounting filesystem read-only [ 117.230505][ T5568] EXT4-fs (sda1): Remounting filesystem read-only [ 117.242341][ T5570] netlink: 'syz.1.441': attribute type 2 has an invalid length. [ 117.266889][ T5570] netlink: 224 bytes leftover after parsing attributes in process `syz.1.441'. [ 117.351991][ T5570] netlink: 'syz.1.441': attribute type 10 has an invalid length. [ 117.399906][ T5570] team0: Port device dummy0 added [ 117.440536][ T5584] FAULT_INJECTION: forcing a failure. [ 117.440536][ T5584] name failslab, interval 1, probability 0, space 0, times 0 [ 117.516786][ T5584] CPU: 1 PID: 5584 Comm: syz.3.448 Not tainted syzkaller #0 [ 117.524207][ T5584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.534273][ T5584] Call Trace: [ 117.537561][ T5584] [ 117.540506][ T5584] dump_stack_lvl+0x188/0x250 [ 117.545213][ T5584] ? show_regs_print_info+0x20/0x20 [ 117.550437][ T5584] ? load_image+0x410/0x410 [ 117.554991][ T5584] should_fail+0x383/0x4b0 [ 117.559434][ T5584] should_failslab+0x5/0x20 [ 117.563960][ T5584] slab_pre_alloc_hook+0x51/0xc0 [ 117.568917][ T5584] ? anon_vma_clone+0xbc/0x4d0 [ 117.573707][ T5584] kmem_cache_alloc+0x3d/0x280 [ 117.578515][ T5584] anon_vma_clone+0xbc/0x4d0 [ 117.583138][ T5584] __split_vma+0x1ab/0x410 [ 117.587583][ T5584] __do_munmap+0x38a/0xe10 [ 117.592026][ T5584] mmap_region+0x977/0x1730 [ 117.596563][ T5584] ? file_mmap_ok+0x11f/0x170 [ 117.601260][ T5584] do_mmap+0x801/0xe30 [ 117.605355][ T5584] vm_mmap_pgoff+0x1c1/0x2d0 [ 117.609971][ T5584] ? account_locked_vm+0xe0/0xe0 [ 117.614942][ T5584] ksys_mmap_pgoff+0x4e2/0x790 [ 117.619735][ T5584] ? mmap_region+0x1730/0x1730 [ 117.624532][ T5584] ? lockdep_hardirqs_on+0x94/0x140 [ 117.629839][ T5584] do_syscall_64+0x4c/0xa0 [ 117.634271][ T5584] ? clear_bhb_loop+0x30/0x80 [ 117.638963][ T5584] ? clear_bhb_loop+0x30/0x80 [ 117.643660][ T5584] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.649571][ T5584] RIP: 0033:0x7f0c392f9159 [ 117.653999][ T5584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.673611][ T5584] RSP: 002b:00007f0c37551028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 117.682021][ T5584] RAX: ffffffffffffffda RBX: 00007f0c39580fa0 RCX: 00007f0c392f9159 [ 117.690028][ T5584] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000ffd000 [ 117.697993][ T5584] RBP: 00007f0c3939003b R08: 0000000000000006 R09: 0000000000000000 [ 117.705951][ T5584] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 117.713910][ T5584] R13: 00007f0c39581038 R14: 00007f0c39580fa0 R15: 00007ffe99321458 [ 117.721906][ T5584] [ 117.725913][ T5601] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 117.758262][ T5584] binder: 5583:5584 ioctl c0306201 200000000680 returned -14 [ 117.939337][ T5604] device syzkaller0 entered promiscuous mode [ 118.098958][ T5615] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.335195][ T23] hid-generic 0005:0008:0009.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 118.365074][ T5628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 118.488696][ T5632] udevd[5632]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 118.634728][ T5644] binder: BINDER_SET_CONTEXT_MGR already set [ 118.670019][ T5644] binder: 5642:5644 ioctl 4018620d 200000000100 returned -16 [ 118.715499][ T5644] FAULT_INJECTION: forcing a failure. [ 118.715499][ T5644] name failslab, interval 1, probability 0, space 0, times 0 [ 118.743710][ T5648] IPv6: NLM_F_CREATE should be specified when creating new route [ 118.751880][ T5644] CPU: 1 PID: 5644 Comm: syz.4.468 Not tainted syzkaller #0 [ 118.759272][ T5644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.769336][ T5644] Call Trace: [ 118.772623][ T5644] [ 118.775552][ T5644] dump_stack_lvl+0x188/0x250 [ 118.780241][ T5644] ? show_regs_print_info+0x20/0x20 [ 118.785449][ T5644] ? load_image+0x410/0x410 [ 118.789976][ T5644] should_fail+0x383/0x4b0 [ 118.791474][ T5648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.472'. [ 118.794404][ T5644] should_failslab+0x5/0x20 [ 118.807743][ T5644] slab_pre_alloc_hook+0x51/0xc0 [ 118.812697][ T5644] ? anon_vma_clone+0xbc/0x4d0 [ 118.817479][ T5644] kmem_cache_alloc+0x3d/0x280 [ 118.822341][ T5644] anon_vma_clone+0xbc/0x4d0 [ 118.826947][ T5644] __split_vma+0x1ab/0x410 [ 118.831374][ T5644] __do_munmap+0x38a/0xe10 [ 118.835808][ T5644] mmap_region+0x977/0x1730 [ 118.840336][ T5644] ? file_mmap_ok+0x11f/0x170 [ 118.845023][ T5644] do_mmap+0x801/0xe30 [ 118.849106][ T5644] vm_mmap_pgoff+0x1c1/0x2d0 [ 118.853700][ T5644] ? account_locked_vm+0xe0/0xe0 [ 118.858641][ T5644] ksys_mmap_pgoff+0x4e2/0x790 [ 118.863403][ T5644] ? mmap_region+0x1730/0x1730 [ 118.868182][ T5644] ? lockdep_hardirqs_on+0x94/0x140 [ 118.873396][ T5644] do_syscall_64+0x4c/0xa0 [ 118.877822][ T5644] ? clear_bhb_loop+0x30/0x80 [ 118.882524][ T5644] ? clear_bhb_loop+0x30/0x80 [ 118.887210][ T5644] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.893119][ T5644] RIP: 0033:0x7f6eb18e8159 [ 118.897543][ T5644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.917154][ T5644] RSP: 002b:00007f6eafb40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 118.925581][ T5644] RAX: ffffffffffffffda RBX: 00007f6eb1b6ffa0 RCX: 00007f6eb18e8159 [ 118.933600][ T5644] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000ffd000 [ 118.941580][ T5644] RBP: 00007f6eb197f03b R08: 0000000000000006 R09: 0000000000000000 [ 118.949563][ T5644] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 118.957543][ T5644] R13: 00007f6eb1b70038 R14: 00007f6eb1b6ffa0 R15: 00007ffee13f88d8 [ 118.965546][ T5644] [ 118.983315][ T5647] binder: BINDER_SET_CONTEXT_MGR already set [ 118.997710][ T5655] device syzkaller0 entered promiscuous mode [ 118.998035][ T5647] binder: 5642:5647 ioctl 4018620d 200000001000 returned -16 [ 119.282314][ T5658] 9pnet: Insufficient options for proto=fd [ 120.165802][ T5676] netlink: 160 bytes leftover after parsing attributes in process `syz.0.483'. [ 120.238782][ T5679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'. [ 120.290107][ T5679] device macsec0 entered promiscuous mode [ 120.337214][ T5686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'. [ 120.386105][ T5690] platform regulatory.0: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -5 [ 120.419641][ T5690] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -5 [ 120.431108][ T5690] platform regulatory.0: loading /lib/firmware/syzkaller/regulatory.db failed with error -5 [ 120.457342][ T5696] binder: BINDER_SET_CONTEXT_MGR already set [ 120.489642][ T5700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 120.496961][ T5690] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -5 [ 120.504791][ T5696] binder: 5695:5696 ioctl 4018620d 200000000100 returned -16 [ 120.529253][ T5702] FAULT_INJECTION: forcing a failure. [ 120.529253][ T5702] name failslab, interval 1, probability 0, space 0, times 0 [ 120.560161][ T5702] CPU: 0 PID: 5702 Comm: syz.1.489 Not tainted syzkaller #0 [ 120.567489][ T5702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.577547][ T5702] Call Trace: [ 120.580827][ T5702] [ 120.583758][ T5702] dump_stack_lvl+0x188/0x250 [ 120.588448][ T5702] ? show_regs_print_info+0x20/0x20 [ 120.593652][ T5702] ? load_image+0x410/0x410 [ 120.598182][ T5702] should_fail+0x383/0x4b0 [ 120.602613][ T5702] should_failslab+0x5/0x20 [ 120.607122][ T5702] slab_pre_alloc_hook+0x51/0xc0 [ 120.612064][ T5702] ? anon_vma_clone+0xbc/0x4d0 [ 120.616827][ T5702] kmem_cache_alloc+0x3d/0x280 [ 120.621599][ T5702] anon_vma_clone+0xbc/0x4d0 [ 120.626201][ T5702] __split_vma+0x1ab/0x410 [ 120.630630][ T5702] __do_munmap+0x38a/0xe10 [ 120.635060][ T5702] mmap_region+0x977/0x1730 [ 120.639614][ T5702] ? file_mmap_ok+0x11f/0x170 [ 120.644305][ T5702] do_mmap+0x801/0xe30 [ 120.648396][ T5702] vm_mmap_pgoff+0x1c1/0x2d0 [ 120.653011][ T5702] ? account_locked_vm+0xe0/0xe0 [ 120.657972][ T5702] ksys_mmap_pgoff+0x4e2/0x790 [ 120.662758][ T5702] ? mmap_region+0x1730/0x1730 [ 120.667546][ T5702] ? lockdep_hardirqs_on+0x94/0x140 [ 120.672126][ T5690] platform regulatory.0: Direct firmware load for regulatory.db failed with error -5 [ 120.672762][ T5702] do_syscall_64+0x4c/0xa0 [ 120.683044][ T5690] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 120.686620][ T5702] ? clear_bhb_loop+0x30/0x80 [ 120.699854][ T5702] ? clear_bhb_loop+0x30/0x80 [ 120.704550][ T5702] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.710463][ T5702] RIP: 0033:0x7fceee4b8159 [ 120.714905][ T5702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.734529][ T5702] RSP: 002b:00007fceec6ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 120.742955][ T5702] RAX: ffffffffffffffda RBX: 00007fceee740090 RCX: 00007fceee4b8159 [ 120.750928][ T5702] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000ffd000 [ 120.758907][ T5702] RBP: 00007fceee54f03b R08: 0000000000000006 R09: 0000000000000000 [ 120.766894][ T5702] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 120.774892][ T5702] R13: 00007fceee740128 R14: 00007fceee740090 R15: 00007ffeef7ce158 [ 120.782886][ T5702] [ 120.800862][ T5709] netlink: 160 bytes leftover after parsing attributes in process `syz.0.495'. [ 120.802080][ T5696] binder: BINDER_SET_CONTEXT_MGR already set [ 120.819281][ T5696] binder: 5695:5696 ioctl 4018620d 200000001000 returned -16 [ 120.853767][ T5699] 9pnet: Insufficient options for proto=fd [ 121.868439][ T5728] [ 121.870798][ T5728] ====================================================== [ 121.877810][ T5728] WARNING: possible circular locking dependency detected [ 121.884839][ T5728] syzkaller #0 Not tainted [ 121.889248][ T5728] ------------------------------------------------------ [ 121.896262][ T5728] syz.0.502/5728 is trying to acquire lock: [ 121.902146][ T5728] ffff888020ad6350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x8c8/0xcc0 [ 121.911282][ T5728] [ 121.911282][ T5728] but task is already holding lock: [ 121.918629][ T5728] ffff888020ad75d8 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 121.929236][ T5728] [ 121.929236][ T5728] which lock already depends on the new lock. [ 121.929236][ T5728] [ 121.939626][ T5728] [ 121.939626][ T5728] the existing dependency chain (in reverse order) is: [ 121.948625][ T5728] [ 121.948625][ T5728] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 121.957306][ T5728] __mutex_lock_common+0x1e5/0x2400 [ 121.963027][ T5728] mutex_lock_nested+0x17/0x20 [ 121.968310][ T5728] nfc_urelease_event_work+0x120/0x310 [ 121.974286][ T5728] process_one_work+0x867/0xff0 [ 121.979659][ T5728] worker_thread+0xad7/0x12a0 [ 121.984853][ T5728] kthread+0x42e/0x520 [ 121.989433][ T5728] ret_from_fork+0x1f/0x30 [ 121.994362][ T5728] [ 121.994362][ T5728] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 122.002175][ T5728] __mutex_lock_common+0x1e5/0x2400 [ 122.007893][ T5728] mutex_lock_nested+0x17/0x20 [ 122.013171][ T5728] nfc_register_device+0x38/0x300 [ 122.018706][ T5728] nci_register_device+0x89f/0x9f0 [ 122.024330][ T5728] virtual_ncidev_open+0x55/0xc0 [ 122.029787][ T5728] misc_open+0x31f/0x390 [ 122.034547][ T5728] chrdev_open+0x585/0x5f0 [ 122.039480][ T5728] do_dentry_open+0x7f7/0xf90 [ 122.044667][ T5728] path_openat+0x2718/0x2fb0 [ 122.049770][ T5728] do_filp_open+0x1df/0x400 [ 122.054785][ T5728] do_sys_openat2+0x14b/0x500 [ 122.059996][ T5728] __x64_sys_openat+0x135/0x160 [ 122.065360][ T5728] do_syscall_64+0x4c/0xa0 [ 122.070291][ T5728] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.076707][ T5728] [ 122.076707][ T5728] -> #1 (nci_mutex){+.+.}-{3:3}: [ 122.083824][ T5728] __mutex_lock_common+0x1e5/0x2400 [ 122.089572][ T5728] mutex_lock_nested+0x17/0x20 [ 122.094849][ T5728] virtual_nci_close+0x13/0x40 [ 122.100134][ T5728] nci_dev_up+0x976/0xd90 [ 122.105008][ T5728] nfc_dev_up+0x15d/0x310 [ 122.109852][ T5728] nfc_genl_dev_up+0x85/0xd0 [ 122.114954][ T5728] genl_rcv_msg+0xd0b/0xfa0 [ 122.119979][ T5728] netlink_rcv_skb+0x1e9/0x430 [ 122.125260][ T5728] genl_rcv+0x24/0x40 [ 122.129764][ T5728] netlink_unicast+0x78f/0x940 [ 122.135044][ T5728] netlink_sendmsg+0x8ba/0xbe0 [ 122.140326][ T5728] ____sys_sendmsg+0x5be/0x8f0 [ 122.145603][ T5728] ___sys_sendmsg+0x236/0x2e0 [ 122.150791][ T5728] __se_sys_sendmsg+0x1b7/0x2a0 [ 122.156155][ T5728] do_syscall_64+0x4c/0xa0 [ 122.161095][ T5728] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.167506][ T5728] [ 122.167506][ T5728] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 122.175147][ T5728] __lock_acquire+0x2c66/0x7b50 [ 122.180605][ T5728] lock_acquire+0x19e/0x400 [ 122.185624][ T5728] __mutex_lock_common+0x1e5/0x2400 [ 122.191338][ T5728] mutex_lock_nested+0x17/0x20 [ 122.196621][ T5728] nci_start_poll+0x8c8/0xcc0 [ 122.201813][ T5728] nfc_start_poll+0x141/0x2c0 [ 122.207002][ T5728] nfc_genl_start_poll+0x1d7/0x340 [ 122.212627][ T5728] genl_rcv_msg+0xd0b/0xfa0 [ 122.217643][ T5728] netlink_rcv_skb+0x1e9/0x430 [ 122.222921][ T5728] genl_rcv+0x24/0x40 [ 122.227425][ T5728] netlink_unicast+0x78f/0x940 [ 122.232703][ T5728] netlink_sendmsg+0x8ba/0xbe0 [ 122.237984][ T5728] ____sys_sendmsg+0x5be/0x8f0 [ 122.243263][ T5728] ___sys_sendmsg+0x236/0x2e0 [ 122.248454][ T5728] __se_sys_sendmsg+0x1b7/0x2a0 [ 122.253816][ T5728] do_syscall_64+0x4c/0xa0 [ 122.258746][ T5728] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.265152][ T5728] [ 122.265152][ T5728] other info that might help us debug this: [ 122.265152][ T5728] [ 122.275368][ T5728] Chain exists of: [ 122.275368][ T5728] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 122.275368][ T5728] [ 122.289615][ T5728] Possible unsafe locking scenario: [ 122.289615][ T5728] [ 122.297054][ T5728] CPU0 CPU1 [ 122.302404][ T5728] ---- ---- [ 122.307766][ T5728] lock(&genl_data->genl_data_mutex); [ 122.313213][ T5728] lock(nfc_devlist_mutex); [ 122.320313][ T5728] lock(&genl_data->genl_data_mutex); [ 122.328282][ T5728] lock(&ndev->req_lock); [ 122.332696][ T5728] [ 122.332696][ T5728] *** DEADLOCK *** [ 122.332696][ T5728] [ 122.340829][ T5728] 4 locks held by syz.0.502/5728: [ 122.345844][ T5728] #0: ffffffff8d4a9db0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 122.354026][ T5728] #1: ffffffff8d4a9c08 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x161/0xfa0 [ 122.362981][ T5728] #2: ffff888020ad75d8 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 122.374025][ T5728] #3: ffff888020ad7190 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x4f/0x2c0 [ 122.383155][ T5728] [ 122.383155][ T5728] stack backtrace: [ 122.389033][ T5728] CPU: 1 PID: 5728 Comm: syz.0.502 Not tainted syzkaller #0 [ 122.396306][ T5728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.406353][ T5728] Call Trace: [ 122.409633][ T5728] [ 122.412559][ T5728] dump_stack_lvl+0x188/0x250 [ 122.417234][ T5728] ? load_image+0x410/0x410 [ 122.421733][ T5728] ? show_regs_print_info+0x20/0x20 [ 122.426929][ T5728] ? print_circular_bug+0x12b/0x1a0 [ 122.432132][ T5728] check_noncircular+0x296/0x330 [ 122.437062][ T5728] ? add_chain_block+0x9b0/0x9b0 [ 122.442083][ T5728] ? lockdep_lock+0xf1/0x1f0 [ 122.446770][ T5728] ? mark_lock+0x94/0x320 [ 122.451094][ T5728] ? _find_first_zero_bit+0xd1/0xf0 [ 122.456286][ T5728] __lock_acquire+0x2c66/0x7b50 [ 122.461144][ T5728] ? verify_lock_unused+0x140/0x140 [ 122.466345][ T5728] lock_acquire+0x19e/0x400 [ 122.470841][ T5728] ? nci_start_poll+0x8c8/0xcc0 [ 122.475691][ T5728] ? __might_sleep+0xf0/0xf0 [ 122.480281][ T5728] ? read_lock_is_recursive+0x10/0x10 [ 122.485651][ T5728] ? lock_chain_count+0x20/0x20 [ 122.490499][ T5728] __mutex_lock_common+0x1e5/0x2400 [ 122.495693][ T5728] ? nci_start_poll+0x8c8/0xcc0 [ 122.500542][ T5728] ? finish_lock_switch+0x12d/0x290 [ 122.505737][ T5728] ? finish_task_switch+0x1e4/0x650 [ 122.510943][ T5728] ? nci_start_poll+0x8c8/0xcc0 [ 122.515808][ T5728] ? mutex_lock_io_nested+0x60/0x60 [ 122.521028][ T5728] ? preempt_schedule+0xbc/0xd0 [ 122.525885][ T5728] ? __mutex_trylock_common+0x15c/0x260 [ 122.531441][ T5728] mutex_lock_nested+0x17/0x20 [ 122.536208][ T5728] nci_start_poll+0x8c8/0xcc0 [ 122.540890][ T5728] ? nci_dev_down+0x40/0x40 [ 122.545405][ T5728] ? __mutex_lock_common+0x435/0x2400 [ 122.550781][ T5728] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 122.556762][ T5728] ? __cond_resched+0xd0/0xd0 [ 122.561446][ T5728] ? nfc_start_poll+0x4f/0x2c0 [ 122.566203][ T5728] ? lock_chain_count+0x20/0x20 [ 122.571057][ T5728] ? mutex_lock_io_nested+0x60/0x60 [ 122.576262][ T5728] nfc_start_poll+0x141/0x2c0 [ 122.580947][ T5728] nfc_genl_start_poll+0x1d7/0x340 [ 122.586056][ T5728] genl_rcv_msg+0xd0b/0xfa0 [ 122.590561][ T5728] ? genl_bind+0x370/0x370 [ 122.594980][ T5728] ? verify_lock_unused+0x140/0x140 [ 122.600175][ T5728] ? verify_lock_unused+0x140/0x140 [ 122.605377][ T5728] ? nfc_genl_dev_down+0xd0/0xd0 [ 122.610313][ T5728] netlink_rcv_skb+0x1e9/0x430 [ 122.615074][ T5728] ? genl_bind+0x370/0x370 [ 122.619485][ T5728] ? netlink_ack+0xb10/0xb10 [ 122.624076][ T5728] ? down_read+0x1aa/0x2e0 [ 122.628493][ T5728] genl_rcv+0x24/0x40 [ 122.632475][ T5728] netlink_unicast+0x78f/0x940 [ 122.637242][ T5728] netlink_sendmsg+0x8ba/0xbe0 [ 122.642032][ T5728] ? netlink_getsockopt+0x570/0x570 [ 122.647316][ T5728] ? aa_sock_msg_perm+0x94/0x150 [ 122.652253][ T5728] ? apparmor_socket_sendmsg+0x88/0x230 [ 122.657800][ T5728] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 122.663096][ T5728] ? security_socket_sendmsg+0x7c/0xa0 [ 122.668557][ T5728] ? netlink_getsockopt+0x570/0x570 [ 122.673762][ T5728] ____sys_sendmsg+0x5be/0x8f0 [ 122.678536][ T5728] ? __sys_sendmsg_sock+0x30/0x30 [ 122.683562][ T5728] ? import_iovec+0x6f/0xa0 [ 122.688061][ T5728] ___sys_sendmsg+0x236/0x2e0 [ 122.692828][ T5728] ? __sys_sendmsg+0x290/0x290 [ 122.697603][ T5728] __se_sys_sendmsg+0x1b7/0x2a0 [ 122.702455][ T5728] ? __x64_sys_sendmsg+0x80/0x80 [ 122.707390][ T5728] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 122.713370][ T5728] ? lockdep_hardirqs_on+0x94/0x140 [ 122.718581][ T5728] do_syscall_64+0x4c/0xa0 [ 122.722996][ T5728] ? clear_bhb_loop+0x30/0x80 [ 122.727675][ T5728] ? clear_bhb_loop+0x30/0x80 [ 122.732351][ T5728] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.738248][ T5728] RIP: 0033:0x7f0f0bd06159 [ 122.742658][ T5728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.762273][ T5728] RSP: 002b:00007f0f09f3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.770688][ T5728] RAX: ffffffffffffffda RBX: 00007f0f0bf8e090 RCX: 00007f0f0bd06159 [ 122.778655][ T5728] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 122.786625][ T5728] RBP: 00007f0f0bd9d03b R08: 0000000000000000 R09: 0000000000000000 [ 122.794594][ T5728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.802565][ T5728] R13: 00007f0f0bf8e128 R14: 00007f0f0bf8e090 R15: 00007ffe503e6588 [ 122.810542][ T5728] [ 122.877096][ T5735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.504'. [ 122.900721][ T5734] EXT4-fs error: 191 callbacks suppressed [ 122.900773][ T5735] device macsec0 entered promiscuous mode [ 122.913461][ T5734] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.501: Detected aborted journal [ 122.996580][ T5734] EXT4-fs: 164 callbacks suppressed [ 122.996661][ T5734] EXT4-fs (sda1): Remounting filesystem read-only [ 123.029810][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 123.069819][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 123.087520][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 123.087836][ T5719] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.502: Detected aborted journal [ 123.100309][ T5734] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.501: Detected aborted journal [ 123.111226][ T5719] EXT4-fs (sda1): Remounting filesystem read-only [ 123.123110][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 123.138701][ T5734] EXT4-fs (sda1): Remounting filesystem read-only [ 123.147155][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 123.152941][ T5719] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.502: Detected aborted journal [ 123.170342][ T5719] EXT4-fs (sda1): Remounting filesystem read-only [ 123.171747][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0 [ 124.725723][ T5728] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.735082][ T5719] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512