last executing test programs: 45.942084231s ago: executing program 4 (id=36): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {@init_itable}, {@sysvgroups}, {@resuid}, {@init_itable}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0x88142, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newtfilter={0x4c, 0x2c, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0xb}, {0xe}, {0xe, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xd8, 0x10}}, @TCA_RATE={0x6, 0x5, {0x5, 0xe}}, @TCA_RATE={0x6, 0x5, {0x19, 0x7f}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x101042, 0x65) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000d80)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000dc0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000e00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000f00), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000f40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f80)=0x6) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000fc0)='dns_resolver\x00', &(0x7f0000001000)={'syz', 0x1}, &(0x7f0000001040)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) 44.134742535s ago: executing program 4 (id=46): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000200), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="000008050000010b007efe"], 0x97) 43.177742692s ago: executing program 4 (id=53): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000440), &(0x7f0000000480)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 43.085719422s ago: executing program 4 (id=55): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./sys\x00', 0x210000, &(0x7f0000000840)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000000900)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000e80)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00), 0x8, &(0x7f0000000f40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000f80), &(0x7f0000000fc0)='./file0\x00', 0x2008820, &(0x7f0000001000)=ANY=[], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='pids.current\x00', 0x26e1, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001080)='./file1\x00', 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 42.11151669s ago: executing program 4 (id=68): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x400000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 36.264003365s ago: executing program 4 (id=90): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000001b00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001b40)='./proc\x00', &(0x7f0000001b80)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001bc0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000001c00)='7', 0x1) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001c40)=ANY=[], 0x20) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) 36.00874629s ago: executing program 32 (id=90): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000001b00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001b40)='./proc\x00', &(0x7f0000001b80)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001bc0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000001c00)='7', 0x1) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001c40)=ANY=[], 0x20) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) 8.205610216s ago: executing program 2 (id=254): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0x7, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x13, 0x7, 0x8, 0xfbee}, 0x8000002, 0x1, 0x3, 0x5, 0xe, 0x6, 0xd, 0x18, 0x5, 0x2, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 8.131364253s ago: executing program 0 (id=257): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='f2fs\x00', 0x48012, &(0x7f0000000240)=',}\x00') getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x0, &(0x7f0000000340)={{0x0, 0xea60}}, &(0x7f0000000280)) r6 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r6, &(0x7f0000002940), 0x40000000000017d, 0x888) timer_create(0x3, 0x0, &(0x7f0000044000)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000002600)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002800)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001600)={0x100, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xb, "97451a24bdc556"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x4c80, &(0x7f0000000600)={r12, r11, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) 7.089706589s ago: executing program 2 (id=263): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x0, &(0x7f0000000780)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c7, &(0x7f00000007c0)="$eJzs3c9vG1kdAPDvTJImm81usrASPwRsWRYKqtZO3N1otaflAkKrlRArThy6IXGjKHYcxU5pQg/p/4BEJU7wJ3BA4oDUE3ducENI5YBUoAI1SByMZjxJ09ROI5p4uvHnI41m3jzb3/fcznuTbxy/AEbW5YjYi4hLEfFJRMwW55Niiw96W/a4Rw9vL+8/vL2cRLf78T+SvD47F0eek3m5eM2piPjBdyN+nDwdt72zu77UaNS3inK109ystnd2/7LWXFqtr9Y3arXFhcX59669Wzuzvr7R/PWD76x9+MPf/fbL9/+w962fZs2aKeqO9uMs9bo+cRgnMx4RH55HsBKMFf25VHZD+L+kEfGZiHgzu/67ZbcGABiGbnc2urNHywDARZfmObAkrRS5gJlI00qll8N7PabTRqvduXqjtb2x0suVzcVEemOtUZ8vcoVzMZFk5YX8+HG5dqx8LSJei4ifTb6UlyvLrcZKmTc+ADDCXj42//97sjf/AwAX3FTZDQAAhs78DwCjx/wPAKPH/A8Ao8f8DwCjx/wPAKPH/A8AI+X7H32Ubd394vuvV27ubK+3br69Um+vV5rby5Xl1tZmZbXVWs2/s6f5rNdrtFqbC+/E9q1qp97uVNs7u9ebre2NzvX8e72v1yeG0isA4CSvvXHvT0lE7L3/Ur7FkbUczNVwsaVlNwAozVjZDQBKM152A4DS+Bkf6LNE7xMGfkTo7sCnGFrgBXflC/L/MKqezP/7IDCMEvl/GF3y/zC6ut3Emv8AMGLk+IFz+P0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXHgz+ZaklWIt8JlI00ol4pWImIuJ5MZaoz4fEa9GxB8nJyaz8kLZjQYAnlP6t6RY/+vK7Fszx2svJf+ZzPcR8ZNffPzzW0udztZCdv6fh+c7d4vztRMDWWoQAEpyME8fzOMHHj28vXywDbM9D77dW1w0i7tfbL2a8RjP91P5jcP0v5Ki3JPdr4ydQfy9OxHx+X79T/LcyFyx8unx+FnsV4YaP30ifprX9fbZe/HZM2gLjJp72fjzQb/rL43L+b7/9T+Vj1DP72D8239q/EsPx7+xAePf5dPGeOf33xtYdyfii+P94ieH8ZMB8d86Zfw/f+krbw6q6/4y4kr0j380VrXT3Ky2d3bfXmsurdZX6xu12uLC4vx7196tVfMcdfUgU/20v79/9dWT+j89IP7UM/r/9VP2/1f//eRHXz0h/je/1v/f//UT4mdz4jdOGX9p+jcDl+/O4q/073/xnMH9v3rK+Pf/urtyyocCAEPQ3tldX2o06lsOhnaQ3bu9AM24cAd3PjXvavY/4Cxe53Pn2NSyRybgvD2+6MtuCQAAAAAAAAAAAAAAMMgw/uCp7D4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwcf0vAAD//1XP1xw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file1\x00', 0x193042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000d40)=[{&(0x7f0000000d80)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86) write$UHID_INPUT(r0, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) 7.041400684s ago: executing program 1 (id=266): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@bsdgroups}, {@nobarrier}, {@noinit_itable}]}, 0xfc, 0x574, &(0x7f0000000340)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==") openat(0xffffffffffffff9c, 0x0, 0x143442, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x21020, 0x0, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000a00)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000a80), 0x58, 0x0) recvmmsg(r2, &(0x7f0000000ac0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x6) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x40) sendfile(r0, r0, 0x0, 0x7f) 5.654798115s ago: executing program 2 (id=270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x478, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xbef3f4b213cd21b6}, @TCA_TBF_PBURST={0x8, 0x7, 0x13ef}, @TCA_TBF_PARMS={0x28, 0x1, {{0xca, 0x2, 0x9, 0xe, 0x7}, {0x8, 0x1, 0x401, 0x6, 0x7, 0xc}, 0x80000000, 0x38000, 0x6e0}}, @TCA_TBF_BURST={0x8, 0x6, 0xc}, @TCA_TBF_RTAB={0x404, 0x2, [0x7f, 0x9, 0xde9, 0xff0000, 0x7, 0x7, 0x1, 0x2, 0x2, 0x0, 0x0, 0xadb, 0xb8, 0x1, 0x3ddc, 0x7, 0x180, 0xfffffffc, 0x3, 0x7, 0x800, 0x6, 0x3, 0x3, 0x2, 0x0, 0xd05, 0x2, 0x80000001, 0x4, 0x9, 0x9, 0x6, 0x5, 0x3, 0x800, 0xff, 0x1, 0xfff, 0x3d, 0x6, 0x1, 0x80, 0xc5b8, 0x8, 0x3, 0xbce, 0x5, 0xffff, 0x9, 0x4, 0x5, 0x2f3, 0x1009, 0xfffffff9, 0x401, 0x7, 0x7, 0x3, 0x8, 0x7e325150, 0x5b2, 0x5, 0x8, 0x9, 0x204, 0xfff, 0x1, 0xfffffffe, 0x2, 0xf, 0x6, 0x0, 0x2, 0x7, 0x8, 0x1, 0x10, 0x80000001, 0x1, 0x5, 0x9, 0x5, 0xfffffffe, 0x80000000, 0x9, 0x5, 0x36, 0x4, 0x80000001, 0x4, 0x98, 0xffff0001, 0x3, 0x3, 0x30, 0x5bf0, 0x5, 0x9, 0x6, 0x2, 0x4e, 0x2, 0xffffff45, 0x3, 0x1ff, 0x6, 0xe, 0xf0, 0x1000, 0x10000, 0x7ff, 0x3, 0x6, 0x8, 0xfffffffb, 0x4, 0x0, 0x2, 0x9, 0x5, 0xe8d, 0x3, 0x75, 0x0, 0x2, 0x7, 0x10001, 0x67, 0x0, 0x9, 0x50a, 0x8001, 0xffff, 0x101, 0x2, 0xa9, 0xffffffff, 0xff, 0xb9, 0x7, 0xb2, 0xe, 0xc0000000, 0x1, 0x6, 0x80000000, 0x0, 0x5, 0x3ff, 0x614ce348, 0x1000, 0x1000, 0x7, 0x101, 0x5, 0xb, 0x1, 0x4, 0x5, 0x4, 0x200, 0xd8, 0xfffffff8, 0x9, 0xca, 0xffffffff, 0x8, 0x5, 0x10001, 0x200, 0x3, 0x7a2, 0x61, 0x7fff, 0x1400, 0x2, 0x5, 0x400, 0x16, 0x5d, 0x4, 0xffffffa3, 0x1, 0xa5d3, 0x17, 0x0, 0xffffffff, 0x2, 0x151e, 0x4, 0x8001, 0x4, 0x3, 0x1, 0x8, 0x3, 0x4, 0x85e, 0x0, 0x7, 0x8c5, 0x1, 0x2, 0xd8, 0x2, 0x8d, 0x1, 0x6, 0xfffffff0, 0xa, 0x5, 0x2, 0x3, 0xe, 0x95, 0x4, 0x9, 0x9, 0xfff, 0x4, 0x6, 0x1, 0x9, 0xf, 0x9, 0x4, 0x80000000, 0x80000000, 0x46c2d87d, 0xffd, 0xfa33, 0x4, 0x800, 0xd, 0xf, 0x7, 0x0, 0x1, 0xc, 0x1, 0x5, 0x3, 0x200, 0x4, 0xfffffffa, 0x5, 0x3ff, 0x10001, 0xffffff00, 0x10001, 0x9, 0x3ff, 0x2, 0xfffffffd, 0x1a02]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x200000c0}, 0x2000c080) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.480014672s ago: executing program 5 (id=272): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/75, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000240)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000400)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x0, @my=0x1}, 0x10) timer_settime(0x0, 0x1, 0x0, 0x0) 5.321108999s ago: executing program 1 (id=273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0x7, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x13, 0x7, 0x8, 0xfbee}, 0x8000002, 0x1, 0x3, 0x5, 0xe, 0x6, 0xd, 0x18, 0x5, 0x2, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5.235174547s ago: executing program 0 (id=274): prlimit64(0x0, 0xe, &(0x7f0000000540)={0x9, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000640)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000006c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000700), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[], 0x50) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4.32794066s ago: executing program 3 (id=275): sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) 4.32351446s ago: executing program 5 (id=276): syz_mount_image$ext4(&(0x7f0000001e00)='ext4\x00', &(0x7f0000001e40)='./file1\x00', 0x1000040, &(0x7f0000001e80)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@dax_inode}, {@noblock_validity}, {@nojournal_checksum}]}, 0x1, 0x5bb, &(0x7f0000001f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000002500)='./file1\x00', 0x2141, 0x59) pwrite64(r0, &(0x7f0000002540)="f6", 0xffffff07, 0x8000c61) 4.309954551s ago: executing program 0 (id=277): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x3ac) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) 4.22006595s ago: executing program 3 (id=278): r0 = socket$netlink(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$netlink(r0, 0x0, 0x0) 4.21988051s ago: executing program 3 (id=279): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000840)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000880)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x3ff}}}, 0x125) 4.156840197s ago: executing program 3 (id=280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000040)=0x1003ff, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001200)='./proc\x00', &(0x7f0000001240)='proc\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000001480)='7', 0x1) keyctl$read(0xb, 0x0, &(0x7f00000014c0)=""/112, 0x349b7f55) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 3.379394506s ago: executing program 5 (id=281): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0xc0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.433701982s ago: executing program 1 (id=282): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000580)={0x9, {"a2e3ad1a4fc752f91b29090955f70e0dd038e7ff7fc6e5539b324c078b089b33393b6d1a0890e0878f0e1ac6e7049b0747959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b313b0d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78659a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fde039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deffcb05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0630060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e70000000001000000e71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab60dd64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c283550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080c0300f8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab22427292510200000002210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7d5e4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c743da2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e5c641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36050000000000060000000000000022e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000fe0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009fda00", 0x1000}}, 0x1006) 2.433240652s ago: executing program 2 (id=283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x478, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xbef3f4b213cd21b6}, @TCA_TBF_PBURST={0x8, 0x7, 0x13ef}, @TCA_TBF_PARMS={0x28, 0x1, {{0xca, 0x2, 0x9, 0xe, 0x7}, {0x8, 0x1, 0x401, 0x6, 0x7, 0xc}, 0x80000000, 0x38000, 0x6e0}}, @TCA_TBF_BURST={0x8, 0x6, 0xc}, @TCA_TBF_RTAB={0x404, 0x2, [0x7f, 0x9, 0xde9, 0xff0000, 0x7, 0x7, 0x1, 0x2, 0x2, 0x0, 0x0, 0xadb, 0xb8, 0x1, 0x3ddc, 0x7, 0x180, 0xfffffffc, 0x3, 0x7, 0x800, 0x6, 0x3, 0x3, 0x2, 0x0, 0xd05, 0x2, 0x80000001, 0x4, 0x9, 0x9, 0x6, 0x5, 0x3, 0x800, 0xff, 0x1, 0xfff, 0x3d, 0x6, 0x1, 0x80, 0xc5b8, 0x8, 0x3, 0xbce, 0x5, 0xffff, 0x9, 0x4, 0x5, 0x2f3, 0x1009, 0xfffffff9, 0x401, 0x7, 0x7, 0x3, 0x8, 0x7e325150, 0x5b2, 0x5, 0x8, 0x9, 0x204, 0xfff, 0x1, 0xfffffffe, 0x2, 0xf, 0x6, 0x0, 0x2, 0x7, 0x8, 0x1, 0x10, 0x80000001, 0x1, 0x5, 0x9, 0x5, 0xfffffffe, 0x80000000, 0x9, 0x5, 0x36, 0x4, 0x80000001, 0x4, 0x98, 0xffff0001, 0x3, 0x3, 0x30, 0x5bf0, 0x5, 0x9, 0x6, 0x2, 0x4e, 0x2, 0xffffff45, 0x3, 0x1ff, 0x6, 0xe, 0xf0, 0x1000, 0x10000, 0x7ff, 0x3, 0x6, 0x8, 0xfffffffb, 0x4, 0x0, 0x2, 0x9, 0x5, 0xe8d, 0x3, 0x75, 0x0, 0x2, 0x7, 0x10001, 0x67, 0x0, 0x9, 0x50a, 0x8001, 0xffff, 0x101, 0x2, 0xa9, 0xffffffff, 0xff, 0xb9, 0x7, 0xb2, 0xe, 0xc0000000, 0x1, 0x6, 0x80000000, 0x0, 0x5, 0x3ff, 0x614ce348, 0x1000, 0x1000, 0x7, 0x101, 0x5, 0xb, 0x1, 0x4, 0x5, 0x4, 0x200, 0xd8, 0xfffffff8, 0x9, 0xca, 0xffffffff, 0x8, 0x5, 0x10001, 0x200, 0x3, 0x7a2, 0x61, 0x7fff, 0x1400, 0x2, 0x5, 0x400, 0x16, 0x5d, 0x4, 0xffffffa3, 0x1, 0xa5d3, 0x17, 0x0, 0xffffffff, 0x2, 0x151e, 0x4, 0x8001, 0x4, 0x3, 0x1, 0x8, 0x3, 0x4, 0x85e, 0x0, 0x7, 0x8c5, 0x1, 0x2, 0xd8, 0x2, 0x8d, 0x1, 0x6, 0xfffffff0, 0xa, 0x5, 0x2, 0x3, 0xe, 0x95, 0x4, 0x9, 0x9, 0xfff, 0x4, 0x6, 0x1, 0x9, 0xf, 0x9, 0x4, 0x80000000, 0x80000000, 0x46c2d87d, 0xffd, 0xfa33, 0x4, 0x800, 0xd, 0xf, 0x7, 0x0, 0x1, 0xc, 0x1, 0x5, 0x3, 0x200, 0x4, 0xfffffffa, 0x5, 0x3ff, 0x10001, 0xffffff00, 0x10001, 0x9, 0x3ff, 0x2, 0xfffffffd, 0x1a02]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x200000c0}, 0x2000c080) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2.431422702s ago: executing program 0 (id=284): r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x48c}) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, 0x0, &(0x7f0000000700)='syzkaller\x00', 0x2}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000740)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711833000000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4dd7}, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet(0xa, 0x801, 0x84) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x1) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2842, 0x0) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r5, 0x0, r6, 0x0, 0x7c1f, 0x8) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TIOCSRS485(r7, 0x542f, &(0x7f0000000180)={0x12, 0x22d4, 0xd}) setns(0xc9, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) 2.313029524s ago: executing program 3 (id=285): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500), 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='27', 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket$inet6(0xa, 0x6, 0x200) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x90) write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='mnt\x00', 0x4, &(0x7f00000003c0)={[{@nodiscard}]}, 0x0, 0x236, &(0x7f0000000540)="$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") 2.035957252s ago: executing program 5 (id=286): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x5e23, @local}, 0x10) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000380)=0x1, 0x4) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e23, 0x1, @loopback, 0x5}, 0x1c) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000400)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x5ea3, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') pread64(r3, &(0x7f00000004c0)=""/195, 0xc3, 0x100) 2.003480836s ago: executing program 2 (id=287): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)={0x10000, 0x101, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, 0x0, 0x1, 0xffffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x18}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) write(r4, &(0x7f0000000180)='1', 0x1) 1.789007138s ago: executing program 1 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000540)={0x9, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000640)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000006c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000700), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[], 0x50) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.788635847s ago: executing program 5 (id=289): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048004807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.536711333s ago: executing program 0 (id=290): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe4f}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x29ca5}]}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 635.019315ms ago: executing program 1 (id=291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x8d}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0) 458.422523ms ago: executing program 2 (id=292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0x7, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x13, 0x7, 0x8, 0xfbee}, 0x8000002, 0x1, 0x3, 0x5, 0xe, 0x6, 0xd, 0x18, 0x5, 0x2, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 457.596873ms ago: executing program 5 (id=293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x478, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xbef3f4b213cd21b6}, @TCA_TBF_PBURST={0x8, 0x7, 0x13ef}, @TCA_TBF_PARMS={0x28, 0x1, {{0xca, 0x2, 0x9, 0xe, 0x7}, {0x8, 0x1, 0x401, 0x6, 0x7, 0xc}, 0x80000000, 0x38000, 0x6e0}}, @TCA_TBF_BURST={0x8, 0x6, 0xc}, @TCA_TBF_RTAB={0x404, 0x2, [0x7f, 0x9, 0xde9, 0xff0000, 0x7, 0x7, 0x1, 0x2, 0x2, 0x0, 0x0, 0xadb, 0xb8, 0x1, 0x3ddc, 0x7, 0x180, 0xfffffffc, 0x3, 0x7, 0x800, 0x6, 0x3, 0x3, 0x2, 0x0, 0xd05, 0x2, 0x80000001, 0x4, 0x9, 0x9, 0x6, 0x5, 0x3, 0x800, 0xff, 0x1, 0xfff, 0x3d, 0x6, 0x1, 0x80, 0xc5b8, 0x8, 0x3, 0xbce, 0x5, 0xffff, 0x9, 0x4, 0x5, 0x2f3, 0x1009, 0xfffffff9, 0x401, 0x7, 0x7, 0x3, 0x8, 0x7e325150, 0x5b2, 0x5, 0x8, 0x9, 0x204, 0xfff, 0x1, 0xfffffffe, 0x2, 0xf, 0x6, 0x0, 0x2, 0x7, 0x8, 0x1, 0x10, 0x80000001, 0x1, 0x5, 0x9, 0x5, 0xfffffffe, 0x80000000, 0x9, 0x5, 0x36, 0x4, 0x80000001, 0x4, 0x98, 0xffff0001, 0x3, 0x3, 0x30, 0x5bf0, 0x5, 0x9, 0x6, 0x2, 0x4e, 0x2, 0xffffff45, 0x3, 0x1ff, 0x6, 0xe, 0xf0, 0x1000, 0x10000, 0x7ff, 0x3, 0x6, 0x8, 0xfffffffb, 0x4, 0x0, 0x2, 0x9, 0x5, 0xe8d, 0x3, 0x75, 0x0, 0x2, 0x7, 0x10001, 0x67, 0x0, 0x9, 0x50a, 0x8001, 0xffff, 0x101, 0x2, 0xa9, 0xffffffff, 0xff, 0xb9, 0x7, 0xb2, 0xe, 0xc0000000, 0x1, 0x6, 0x80000000, 0x0, 0x5, 0x3ff, 0x614ce348, 0x1000, 0x1000, 0x7, 0x101, 0x5, 0xb, 0x1, 0x4, 0x5, 0x4, 0x200, 0xd8, 0xfffffff8, 0x9, 0xca, 0xffffffff, 0x8, 0x5, 0x10001, 0x200, 0x3, 0x7a2, 0x61, 0x7fff, 0x1400, 0x2, 0x5, 0x400, 0x16, 0x5d, 0x4, 0xffffffa3, 0x1, 0xa5d3, 0x17, 0x0, 0xffffffff, 0x2, 0x151e, 0x4, 0x8001, 0x4, 0x3, 0x1, 0x8, 0x3, 0x4, 0x85e, 0x0, 0x7, 0x8c5, 0x1, 0x2, 0xd8, 0x2, 0x8d, 0x1, 0x6, 0xfffffff0, 0xa, 0x5, 0x2, 0x3, 0xe, 0x95, 0x4, 0x9, 0x9, 0xfff, 0x4, 0x6, 0x1, 0x9, 0xf, 0x9, 0x4, 0x80000000, 0x80000000, 0x46c2d87d, 0xffd, 0xfa33, 0x4, 0x800, 0xd, 0xf, 0x7, 0x0, 0x1, 0xc, 0x1, 0x5, 0x3, 0x200, 0x4, 0xfffffffa, 0x5, 0x3ff, 0x10001, 0xffffff00, 0x10001, 0x9, 0x3ff, 0x2, 0xfffffffd, 0x1a02]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x200000c0}, 0x2000c080) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 416.024307ms ago: executing program 0 (id=294): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x3ac) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) 229.780776ms ago: executing program 1 (id=295): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1603, 0x0) r1 = socket$kcm(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) fcntl$setpipe(r1, 0x407, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) socket$nl_route(0x10, 0x3, 0x0) mount$9p_rdma(&(0x7f0000000340), &(0x7f0000000380)='.\x00', &(0x7f00000003c0), 0x1008840, &(0x7f0000000400)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000480), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10021) ioctl$FBIOBLANK(r0, 0x4611, 0x4) write(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 3 (id=296): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0xc0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts. [ 58.924429][ T4176] cgroup: Unknown subsys name 'net' [ 59.024470][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.540433][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.169943][ T4201] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.176078][ T4193] rdma_rxe: rxe_register_device failed with error -23 [ 62.178592][ T4201] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.188057][ T4196] rdma_rxe: rxe_register_device failed with error -23 [ 62.192139][ T4201] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.213718][ T4193] rdma_rxe: failed to add rxe_eth0 [ 62.231065][ T4188] rdma_rxe: rxe_register_device failed with error -23 [ 62.231437][ T4196] rdma_rxe: failed to add rxe_eth0 [ 62.259380][ T4189] rdma_rxe: rxe_register_device failed with error -23 [ 62.293796][ T4188] rdma_rxe: failed to add rxe_eth0 [ 62.295246][ T4189] rdma_rxe: failed to add rxe_eth0 [ 62.404917][ T1343] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.402954][ T4201] infiniband rxe0: set active [ 62.428553][ T4201] infiniband rxe0: added rxe_eth0 [ 62.509137][ T4201] RDS/IB: rxe0: added [ 62.526118][ T4201] smc: adding ib device rxe0 with port count 1 [ 62.544290][ T4201] smc: ib device rxe0 port 1 has pnetid [ 62.584632][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.588033][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 62.618952][ T4201] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.755615][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 62.783559][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 62.841196][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 62.855100][ T4201] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.911430][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.930052][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.957656][ T4196] device bridge_slave_0 entered promiscuous mode [ 62.991303][ T4201] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.010407][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.036350][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.044596][ T4196] device bridge_slave_1 entered promiscuous mode [ 63.103023][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.110320][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.118632][ T4193] device bridge_slave_0 entered promiscuous mode [ 63.151935][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.159354][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.167506][ T4193] device bridge_slave_1 entered promiscuous mode [ 63.176706][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.195592][ T4201] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.196170][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.209068][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.217740][ T4189] device bridge_slave_0 entered promiscuous mode [ 63.242893][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.261170][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.268483][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.277020][ T4189] device bridge_slave_1 entered promiscuous mode [ 63.286712][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.335815][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.347981][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.355073][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.364080][ T4188] device bridge_slave_0 entered promiscuous mode [ 63.379232][ T4196] team0: Port device team_slave_0 added [ 63.387132][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.406042][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.413282][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.421125][ T4188] device bridge_slave_1 entered promiscuous mode [ 63.430252][ T4196] team0: Port device team_slave_1 added [ 63.437728][ T4201] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.451093][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.489193][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.496171][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.523263][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.543825][ T4193] team0: Port device team_slave_0 added [ 63.559557][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.568631][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.594972][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.619462][ T4189] team0: Port device team_slave_0 added [ 63.626841][ T4193] team0: Port device team_slave_1 added [ 63.634412][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.663231][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.673988][ T4189] team0: Port device team_slave_1 added [ 63.696602][ T4196] device hsr_slave_0 entered promiscuous mode [ 63.703568][ T4196] device hsr_slave_1 entered promiscuous mode [ 63.743147][ T4188] team0: Port device team_slave_0 added [ 63.758786][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.765762][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.791875][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.806745][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.813706][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.839685][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.852265][ T4188] team0: Port device team_slave_1 added [ 63.858838][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.865806][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.892292][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.927995][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.934977][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.961258][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.005589][ T4193] device hsr_slave_0 entered promiscuous mode [ 64.012407][ T4193] device hsr_slave_1 entered promiscuous mode [ 64.019291][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.027235][ T4193] Cannot create hsr debugfs directory [ 64.061672][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.068977][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.094924][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.130436][ T4189] device hsr_slave_0 entered promiscuous mode [ 64.137272][ T4189] device hsr_slave_1 entered promiscuous mode [ 64.143988][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.151884][ T4189] Cannot create hsr debugfs directory [ 64.172784][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.180158][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.207265][ T1343] Bluetooth: hci0: command 0x0409 tx timeout [ 64.211008][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.213845][ T1343] Bluetooth: hci4: command 0x0409 tx timeout [ 64.298352][ T1343] Bluetooth: hci3: command 0x0409 tx timeout [ 64.304428][ T1343] Bluetooth: hci2: command 0x0409 tx timeout [ 64.310881][ T1343] Bluetooth: hci1: command 0x0409 tx timeout [ 64.325139][ T4188] device hsr_slave_0 entered promiscuous mode [ 64.332372][ T4188] device hsr_slave_1 entered promiscuous mode [ 64.339083][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.347414][ T4188] Cannot create hsr debugfs directory [ 64.467127][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 64.579857][ T4193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.611005][ T4193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.620416][ T4193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.631092][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.638376][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.646142][ T4201] device bridge_slave_0 entered promiscuous mode [ 64.659289][ T4193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.668638][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.676287][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.684016][ T4201] device bridge_slave_1 entered promiscuous mode [ 64.735740][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.753948][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.773430][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.784249][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.800024][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.808913][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.837836][ T4201] team0: Port device team_slave_0 added [ 64.864232][ T4201] team0: Port device team_slave_1 added [ 64.883686][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.903204][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.912291][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.930052][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.937230][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.964919][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.981632][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.988685][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.015473][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.029018][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.094447][ T4201] device hsr_slave_0 entered promiscuous mode [ 65.101539][ T4201] device hsr_slave_1 entered promiscuous mode [ 65.109031][ T4201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.116692][ T4201] Cannot create hsr debugfs directory [ 65.134222][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.151545][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.184703][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.229774][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.245007][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.263066][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.274006][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.289009][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.299864][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.308669][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.318356][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.328153][ T1365] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.335464][ T1365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.354213][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.386608][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.394635][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.403935][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.412433][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.422721][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.431581][ T1365] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.438733][ T1365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.447295][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.455876][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.464727][ T1365] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.471790][ T1365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.479706][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.488372][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.503340][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.511373][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.520415][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.529508][ T1365] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.536614][ T1365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.544160][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.573639][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.589135][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.612479][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.624303][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.634329][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.643525][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.652482][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.660778][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.698951][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.708026][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.720906][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.729778][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.738998][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.748237][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.756761][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.765156][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.779708][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.795010][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.808622][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.825408][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.834432][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.845009][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.858379][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.867669][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.877151][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.907980][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.917938][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.929448][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.938355][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.945403][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.953928][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.963791][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.972767][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.979904][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.988710][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.033545][ T4201] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.060833][ T4201] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.085915][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.108941][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.128272][ T4201] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.141195][ T4201] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.160322][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.173938][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.184337][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.204459][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.216439][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.225336][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.274345][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.281810][ T4253] Bluetooth: hci0: command 0x041b tx timeout [ 66.288307][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.295804][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.303671][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.312491][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.321208][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.329950][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.338627][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.346489][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.355561][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.356806][ T4253] Bluetooth: hci1: command 0x041b tx timeout [ 66.368751][ T4253] Bluetooth: hci2: command 0x041b tx timeout [ 66.374859][ T4253] Bluetooth: hci3: command 0x041b tx timeout [ 66.375734][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.381430][ T4253] Bluetooth: hci4: command 0x041b tx timeout [ 66.427810][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.435300][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.444504][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.454429][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.464684][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.471810][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.481008][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.489831][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.498468][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.505600][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.513574][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.549425][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.569484][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.610912][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.629065][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.643162][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.659089][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.668519][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.681612][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.692054][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.708341][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.736196][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.777246][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.793598][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.806825][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.824795][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.841000][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.884485][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.912029][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.919547][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.929505][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.938315][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.945757][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.967967][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.983811][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.993057][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.002434][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.011539][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.018687][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.028075][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.037789][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.047410][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.054491][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.062403][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.099927][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.108069][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.116194][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.125900][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.135566][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.144501][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.158966][ T4193] device veth0_vlan entered promiscuous mode [ 67.170534][ T4196] device veth0_vlan entered promiscuous mode [ 67.188522][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.199063][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.208522][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.217429][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.225752][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.235859][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.244793][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.254619][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.263457][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.271555][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.279426][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.295563][ T4193] device veth1_vlan entered promiscuous mode [ 67.313500][ T4201] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.324631][ T4201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.343315][ T4196] device veth1_vlan entered promiscuous mode [ 67.350720][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.359056][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.367713][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.375869][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.384414][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.393341][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.402594][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.410425][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.418022][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.426526][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.434857][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.442904][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.450776][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.464603][ T4189] device veth0_vlan entered promiscuous mode [ 67.472890][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.532393][ T4189] device veth1_vlan entered promiscuous mode [ 67.543236][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.552606][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.562212][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.571579][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.580869][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.591504][ T4193] device veth0_macvtap entered promiscuous mode [ 67.624348][ T4193] device veth1_macvtap entered promiscuous mode [ 67.634905][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.658514][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.673422][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.681781][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.691547][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.700722][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.711442][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.721882][ T4196] device veth0_macvtap entered promiscuous mode [ 67.744484][ T4189] device veth0_macvtap entered promiscuous mode [ 67.752075][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.760574][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.769570][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.778922][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.798881][ T4196] device veth1_macvtap entered promiscuous mode [ 67.823603][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.833742][ T4189] device veth1_macvtap entered promiscuous mode [ 67.852313][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.861512][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.870483][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.880787][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.900773][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.911878][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.923865][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.937752][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.950104][ T4188] device veth0_vlan entered promiscuous mode [ 67.968742][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.976128][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.984920][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.993918][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.002417][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.012167][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.021003][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.031949][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.041096][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.049221][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.060186][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.072222][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.082937][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.095063][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.105922][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.116991][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.128186][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.137439][ T4188] device veth1_vlan entered promiscuous mode [ 68.144831][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.154090][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.162864][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.171701][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.182262][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.192693][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.204695][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.214726][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.225344][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.237035][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.247216][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.256045][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.265514][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.274528][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.289163][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.299566][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.308629][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.317923][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.333671][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.342385][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.353520][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.363074][ T1109] Bluetooth: hci0: command 0x040f tx timeout [ 68.369328][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.379066][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.387933][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.438182][ T4253] Bluetooth: hci4: command 0x040f tx timeout [ 68.444292][ T4253] Bluetooth: hci3: command 0x040f tx timeout [ 68.453641][ T4253] Bluetooth: hci2: command 0x040f tx timeout [ 68.460471][ T4253] Bluetooth: hci1: command 0x040f tx timeout [ 68.471393][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.479571][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.488522][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.574810][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.590151][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.599335][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.609870][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.618509][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.626844][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.635823][ T4188] device veth0_macvtap entered promiscuous mode [ 68.664611][ T4201] device veth0_vlan entered promiscuous mode [ 68.671267][ T4262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.686433][ T4262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.693000][ T4188] device veth1_macvtap entered promiscuous mode [ 68.718155][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.726171][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.734691][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.783472][ T4201] device veth1_vlan entered promiscuous mode [ 68.793701][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.824217][ T1365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.833539][ T4262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.833767][ T1365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.841922][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.841939][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.851427][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.875289][ T4262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.878034][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.895210][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.905946][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.916158][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.929084][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.940972][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.956965][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.965252][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.980127][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.988449][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.997978][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.020397][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.031244][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.042144][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.053040][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.063255][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.073808][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.086144][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.110217][ T4262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.112130][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.133948][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.135487][ T4262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.143660][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.159729][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.171925][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.190108][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.201358][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.243378][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.259031][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.284628][ T4201] device veth0_macvtap entered promiscuous mode [ 69.303479][ T4201] device veth1_macvtap entered promiscuous mode [ 69.320520][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.344439][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.381884][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.400448][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.467514][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.518917][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.555559][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.576449][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.586979][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.597640][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.680605][ T4301] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 69.691670][ T4301] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 69.761461][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.786097][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.409420][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.457288][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.548254][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 70.558543][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 70.564356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.573876][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 70.586020][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 70.592621][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 70.607816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.639389][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.651690][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.661938][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.672991][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.683684][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.694502][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.709806][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.721805][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.744489][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.773938][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.788002][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.809643][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.821165][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.836063][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.953948][ T4201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.991684][ T4201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.065367][ T4201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.084569][ T4201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.291533][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.321036][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.327886][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.378587][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.521250][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.012975][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.029643][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.579918][ T4328] FAULT_INJECTION: forcing a failure. [ 72.579918][ T4328] name failslab, interval 1, probability 0, space 0, times 1 [ 72.626402][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.631278][ T4328] CPU: 0 PID: 4328 Comm: syz.3.4 Not tainted syzkaller #0 [ 72.640765][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.650854][ T4328] Call Trace: [ 72.654164][ T4328] [ 72.657113][ T4328] dump_stack_lvl+0x188/0x250 [ 72.661819][ T4328] ? show_regs_print_info+0x20/0x20 [ 72.667045][ T4328] ? load_image+0x410/0x410 [ 72.671587][ T4328] ? __lock_acquire+0x7d40/0x7d40 [ 72.676646][ T4328] should_fail+0x383/0x4b0 [ 72.681095][ T4328] should_failslab+0x5/0x20 [ 72.681779][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.685620][ T4328] slab_pre_alloc_hook+0x51/0xc0 [ 72.685651][ T4328] kmem_cache_alloc_trace+0x47/0x290 [ 72.685669][ T4328] ? fsnotify_alloc_group+0x70/0x3b0 [ 72.685696][ T4328] fsnotify_alloc_group+0x70/0x3b0 [ 72.685721][ T4328] do_inotify_init+0x51/0x450 [ 72.685749][ T4328] __x64_sys_inotify_init1+0x33/0x40 [ 72.685772][ T4328] do_syscall_64+0x4c/0xa0 [ 72.685790][ T4328] ? clear_bhb_loop+0x30/0x80 [ 72.685810][ T4328] ? clear_bhb_loop+0x30/0x80 [ 72.685831][ T4328] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.685851][ T4328] RIP: 0033:0x7ff319c29559 [ 72.685873][ T4328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.685890][ T4328] RSP: 002b:00007ff317e80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 72.685914][ T4328] RAX: ffffffffffffffda RBX: 00007ff319eaffa0 RCX: 00007ff319c29559 [ 72.724219][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.724288][ T4328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 72.747151][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.748375][ T4328] RBP: 00007ff319cc0b20 R08: 0000000000000000 R09: 0000000000000000 [ 72.748395][ T4328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.748408][ T4328] R13: 00007ff319eb0038 R14: 00007ff319eaffa0 R15: 00007fff200fbe28 [ 72.830944][ T4328] [ 73.582701][ T4337] ======================================================= [ 73.582701][ T4337] WARNING: The mand mount option has been deprecated and [ 73.582701][ T4337] and is ignored by this kernel. Remove the mand [ 73.582701][ T4337] option from the mount to silence this warning. [ 73.582701][ T4337] ======================================================= [ 73.612619][ T4340] ODEBUG: Out of memory. ODEBUG disabled [ 74.154156][ T4285] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.182320][ T4343] FAULT_INJECTION: forcing a failure. [ 74.182320][ T4343] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 74.182744][ T4343] CPU: 1 PID: 4343 Comm: syz.2.3 Not tainted syzkaller #0 [ 74.182767][ T4343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 74.182779][ T4343] Call Trace: [ 74.182786][ T4343] [ 74.182795][ T4343] dump_stack_lvl+0x188/0x250 [ 74.182828][ T4343] ? show_regs_print_info+0x20/0x20 [ 74.182852][ T4343] ? load_image+0x410/0x410 [ 74.182879][ T4343] ? __lock_acquire+0x7d40/0x7d40 [ 74.182902][ T4343] ? __vmalloc_node_range+0x2dd/0x8b0 [ 74.182922][ T4343] ? vzalloc+0x75/0x80 [ 74.182947][ T4343] should_fail+0x383/0x4b0 [ 74.182976][ T4343] prepare_alloc_pages+0x1e3/0x5b0 [ 74.183007][ T4343] __alloc_pages+0x11b/0x480 [ 74.183032][ T4343] ? zone_statistics+0x170/0x170 [ 74.183066][ T4343] ? alloc_pages+0x452/0x560 [ 74.183092][ T4343] __vmalloc_node_range+0x4b1/0x8b0 [ 74.183124][ T4343] ? vidtv_s302m_encoder_init+0x174/0x770 [ 74.183146][ T4343] vzalloc+0x75/0x80 [ 74.183165][ T4343] ? vidtv_s302m_encoder_init+0x174/0x770 [ 74.183183][ T4343] vidtv_s302m_encoder_init+0x174/0x770 [ 74.183207][ T4343] ? vidtv_pes_write_into+0x11e0/0x11e0 [ 74.183246][ T4343] vidtv_channel_s302m_init+0x357/0x830 [ 74.183286][ T4343] vidtv_channels_init+0x41/0x90 [ 74.183306][ T4343] vidtv_mux_init+0x4d0/0x1950 [ 74.183325][ T4343] ? __mutex_lock_common+0x435/0x2400 [ 74.183356][ T4343] vidtv_start_feed+0x368/0x590 [ 74.183388][ T4343] ? vidtv_i2c_func+0x10/0x10 [ 74.183410][ T4343] ? vidtv_stop_feed+0x250/0x250 [ 74.183438][ T4343] ? _raw_spin_lock_irq+0xb7/0xf0 [ 74.183455][ T4343] ? _raw_spin_lock_irqsave+0x100/0x100 [ 74.183476][ T4343] ? _raw_spin_unlock_irq+0x1f/0x40 [ 74.183500][ T4343] dmx_section_feed_start_filtering+0x4f3/0x680 [ 74.183541][ T4343] dvb_dmxdev_filter_start+0xc62/0x1060 [ 74.183573][ T4343] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 74.183602][ T4343] dvb_demux_do_ioctl+0x463/0x530 [ 74.183632][ T4343] dvb_usercopy+0x191/0x2b0 [ 74.183655][ T4343] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 74.183679][ T4343] ? dvb_generic_ioctl+0xb0/0xb0 [ 74.183727][ T4343] ? dvb_demux_poll+0x210/0x210 [ 74.183751][ T4343] dvb_demux_ioctl+0x25/0x30 [ 74.183773][ T4343] __se_sys_ioctl+0xfa/0x170 [ 74.183796][ T4343] do_syscall_64+0x4c/0xa0 [ 74.183812][ T4343] ? clear_bhb_loop+0x30/0x80 [ 74.183830][ T4343] ? clear_bhb_loop+0x30/0x80 [ 74.183852][ T4343] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.183873][ T4343] RIP: 0033:0x7fdea54c6559 [ 74.183894][ T4343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.183910][ T4343] RSP: 002b:00007fdea371d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.183935][ T4343] RAX: ffffffffffffffda RBX: 00007fdea574cfa0 RCX: 00007fdea54c6559 [ 74.183950][ T4343] RDX: 00002000000003c0 RSI: 00000000403c6f2b RDI: 0000000000000007 [ 74.183963][ T4343] RBP: 00007fdea555db20 R08: 0000000000000000 R09: 0000000000000000 [ 74.183976][ T4343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.183988][ T4343] R13: 00007fdea574d038 R14: 00007fdea574cfa0 R15: 00007fffdcf43328 [ 74.184019][ T4343] [ 75.308683][ T4358] loop3: detected capacity change from 0 to 1024 [ 75.360775][ T4197] Bluetooth: Wrong link type (-22) [ 75.375112][ T4363] FAULT_INJECTION: forcing a failure. [ 75.375112][ T4363] name failslab, interval 1, probability 0, space 0, times 0 [ 75.375143][ T4363] CPU: 1 PID: 4363 Comm: syz.2.16 Not tainted syzkaller #0 [ 75.375164][ T4363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 75.375176][ T4363] Call Trace: [ 75.375184][ T4363] [ 75.375192][ T4363] dump_stack_lvl+0x188/0x250 [ 75.375224][ T4363] ? show_regs_print_info+0x20/0x20 [ 75.375248][ T4363] ? load_image+0x410/0x410 [ 75.375275][ T4363] ? __might_sleep+0xf0/0xf0 [ 75.375297][ T4363] ? __lock_acquire+0x7d40/0x7d40 [ 75.375327][ T4363] should_fail+0x383/0x4b0 [ 75.375355][ T4363] should_failslab+0x5/0x20 [ 75.375374][ T4363] slab_pre_alloc_hook+0x51/0xc0 [ 75.375397][ T4363] kmem_cache_alloc_trace+0x47/0x290 [ 75.375415][ T4363] ? vidtv_psi_service_desc_init+0x9e/0x510 [ 75.375447][ T4363] vidtv_psi_service_desc_init+0x9e/0x510 [ 75.375471][ T4363] ? vidtv_psi_sdt_service_init+0x196/0x270 [ 75.375498][ T4363] vidtv_channel_s302m_init+0x125/0x830 [ 75.375533][ T4363] vidtv_channels_init+0x41/0x90 [ 75.375555][ T4363] vidtv_mux_init+0x4d0/0x1950 [ 75.375575][ T4363] ? __mutex_lock_common+0x435/0x2400 [ 75.375606][ T4363] vidtv_start_feed+0x368/0x590 [ 75.375636][ T4363] ? vidtv_i2c_func+0x10/0x10 [ 75.375658][ T4363] ? vidtv_stop_feed+0x250/0x250 [ 75.375686][ T4363] ? _raw_spin_lock_irq+0xb7/0xf0 [ 75.375705][ T4363] ? _raw_spin_lock_irqsave+0x100/0x100 [ 75.375726][ T4363] ? _raw_spin_unlock_irq+0x1f/0x40 [ 75.375751][ T4363] dmx_section_feed_start_filtering+0x4f3/0x680 [ 75.375781][ T4363] dvb_dmxdev_filter_start+0xc62/0x1060 [ 75.375813][ T4363] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 75.375840][ T4363] dvb_demux_do_ioctl+0x463/0x530 [ 75.375868][ T4363] dvb_usercopy+0x191/0x2b0 [ 75.375891][ T4363] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 75.375914][ T4363] ? dvb_generic_ioctl+0xb0/0xb0 [ 75.375960][ T4363] ? dvb_demux_poll+0x210/0x210 [ 75.375992][ T4363] dvb_demux_ioctl+0x25/0x30 [ 75.376016][ T4363] __se_sys_ioctl+0xfa/0x170 [ 75.376039][ T4363] do_syscall_64+0x4c/0xa0 [ 75.376057][ T4363] ? clear_bhb_loop+0x30/0x80 [ 75.376076][ T4363] ? clear_bhb_loop+0x30/0x80 [ 75.376098][ T4363] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.376118][ T4363] RIP: 0033:0x7fdea54c6559 [ 75.376137][ T4363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.376154][ T4363] RSP: 002b:00007fdea371d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.376179][ T4363] RAX: ffffffffffffffda RBX: 00007fdea574cfa0 RCX: 00007fdea54c6559 [ 75.376194][ T4363] RDX: 00002000000003c0 RSI: 00000000403c6f2b RDI: 000000000000000a [ 75.376209][ T4363] RBP: 00007fdea555db20 R08: 0000000000000000 R09: 0000000000000000 [ 75.376228][ T4363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.376240][ T4363] R13: 00007fdea574d038 R14: 00007fdea574cfa0 R15: 00007fffdcf43328 [ 75.376272][ T4363] [ 75.444669][ T4358] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,dioread_lock,nodioread_nolock,noquota,debug_want_extra_isize=0x0000000000000080,grpquota,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: writeback. [ 77.397704][ T4351] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.398827][ T4351] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.443206][ T4395] loop3: detected capacity change from 0 to 4096 [ 77.484927][ T4397] FAULT_INJECTION: forcing a failure. [ 77.484927][ T4397] name failslab, interval 1, probability 0, space 0, times 0 [ 77.496993][ T4399] loop2: detected capacity change from 0 to 8 [ 77.515674][ T4397] CPU: 0 PID: 4397 Comm: syz.0.24 Not tainted syzkaller #0 [ 77.717205][ T4397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 77.717220][ T4397] Call Trace: [ 77.717228][ T4397] [ 77.717237][ T4397] dump_stack_lvl+0x188/0x250 [ 77.717265][ T4397] ? show_regs_print_info+0x20/0x20 [ 77.717284][ T4397] ? load_image+0x410/0x410 [ 77.717304][ T4397] ? __lock_acquire+0x7d40/0x7d40 [ 77.717324][ T4397] ? lockdep_softirqs_off+0x430/0x430 [ 77.717346][ T4397] should_fail+0x383/0x4b0 [ 77.717368][ T4397] should_failslab+0x5/0x20 [ 77.717383][ T4397] slab_pre_alloc_hook+0x51/0xc0 [ 77.717400][ T4397] __kmalloc+0x6b/0x340 [ 77.717413][ T4397] ? __netlink_kernel_create+0x1f8/0x7d0 [ 77.717435][ T4397] __netlink_kernel_create+0x1f8/0x7d0 [ 77.717451][ T4397] ? __netlink_kernel_create+0x6ce/0x7d0 [ 77.717470][ T4397] ? netlink_set_err+0x3c0/0x3c0 [ 77.717487][ T4397] ? netlink_set_err+0x3c0/0x3c0 [ 77.717503][ T4397] ? genl_pernet_init+0xa4/0x170 [ 77.717523][ T4397] genl_pernet_init+0xb6/0x170 [ 77.717539][ T4397] ? ctrl_dumppolicy_done+0x40/0x40 [ 77.717554][ T4397] ? rtnetlink_net_init+0xbd/0x140 [ 77.717569][ T4397] ? genl_pernet_exit+0x60/0x60 [ 77.717586][ T4397] ? genl_rcv+0x40/0x40 [ 77.717602][ T4397] ? rtnetlink_rcv+0x20/0x20 [ 77.717625][ T4397] ops_init+0x360/0x5f0 [ 77.717649][ T4397] setup_net+0x39e/0xa10 [ 77.717668][ T4397] ? copy_net_ns+0x5b0/0x5b0 [ 77.717687][ T4397] ? copy_net_ns+0x324/0x5b0 [ 77.717703][ T4397] ? down_read_killable+0x1ce/0x340 [ 77.717724][ T4397] copy_net_ns+0x33e/0x5b0 [ 77.717744][ T4397] create_new_namespaces+0x3ce/0x700 [ 77.717772][ T4397] unshare_nsproxy_namespaces+0x116/0x160 [ 77.717791][ T4397] ksys_unshare+0x4f6/0x8e0 [ 77.717807][ T4397] ? __lock_acquire+0x7d40/0x7d40 [ 77.717829][ T4397] ? sighand_ctor+0x40/0x40 [ 77.717844][ T4397] ? lock_chain_count+0x20/0x20 [ 77.717865][ T4397] ? syscall_enter_from_user_mode+0x21/0x70 [ 77.717885][ T4397] __x64_sys_unshare+0x34/0x40 [ 77.717899][ T4397] do_syscall_64+0x4c/0xa0 [ 77.717912][ T4397] ? clear_bhb_loop+0x30/0x80 [ 77.717926][ T4397] ? clear_bhb_loop+0x30/0x80 [ 77.717942][ T4397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.717958][ T4397] RIP: 0033:0x7f44974a7559 [ 77.717975][ T4397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.717995][ T4397] RSP: 002b:00007f44956fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 77.718014][ T4397] RAX: ffffffffffffffda RBX: 00007f449772dfa0 RCX: 00007f44974a7559 [ 77.718025][ T4397] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004c000680 [ 77.718035][ T4397] RBP: 00007f449753eb20 R08: 0000000000000000 R09: 0000000000000000 [ 77.718045][ T4397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.718054][ T4397] R13: 00007f449772e038 R14: 00007f449772dfa0 R15: 00007ffca1c3a698 [ 77.718077][ T4397] [ 77.737625][ T4395] EXT4-fs (loop3): Test dummy encryption mode enabled [ 77.896421][ T26] audit: type=1800 audit(1793272369.595:2): pid=4399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.25" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 78.223474][ T4395] EXT4-fs (loop3): Test dummy encryption mode enabled [ 78.278903][ T4395] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,block_validity,,errors=continue. Quota mode: writeback. [ 79.337722][ T1343] Bluetooth: hci0: command 0x0c3a tx timeout [ 79.362800][ T4421] syz.3.28 uses obsolete (PF_INET,SOCK_PACKET) [ 79.393903][ T4421] FAULT_INJECTION: forcing a failure. [ 79.393903][ T4421] name failslab, interval 1, probability 0, space 0, times 0 [ 79.408624][ T4421] CPU: 1 PID: 4421 Comm: syz.3.28 Not tainted syzkaller #0 [ 79.415954][ T4421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 79.426022][ T4421] Call Trace: [ 79.429322][ T4421] [ 79.432268][ T4421] dump_stack_lvl+0x188/0x250 [ 79.436940][ T4421] ? show_regs_print_info+0x20/0x20 [ 79.442215][ T4421] ? load_image+0x410/0x410 [ 79.446721][ T4421] ? __might_sleep+0xf0/0xf0 [ 79.451313][ T4421] ? __lock_acquire+0x7d40/0x7d40 [ 79.456344][ T4421] should_fail+0x383/0x4b0 [ 79.460764][ T4421] should_failslab+0x5/0x20 [ 79.465262][ T4421] slab_pre_alloc_hook+0x51/0xc0 [ 79.470240][ T4421] __kmalloc_node_track_caller+0x68/0x3a0 [ 79.475983][ T4421] ? __ip6_append_data+0x26b7/0x38f0 [ 79.481263][ T4421] ? __alloc_skb+0xf4/0x750 [ 79.485764][ T4421] ? __ip6_append_data+0x26b7/0x38f0 [ 79.491040][ T4421] __alloc_skb+0x22c/0x750 [ 79.495455][ T4421] __ip6_append_data+0x26b7/0x38f0 [ 79.500607][ T4421] ? ip6_setup_cork+0x11e0/0x11e0 [ 79.505652][ T4421] ? ip6_setup_cork+0xc68/0x11e0 [ 79.510604][ T4421] ip6_append_data+0x1d4/0x310 [ 79.515359][ T4421] ? rawv6_send_hdrinc+0x1650/0x1650 [ 79.520649][ T4421] ? rawv6_send_hdrinc+0x1650/0x1650 [ 79.525971][ T4421] rawv6_sendmsg+0x1220/0x1710 [ 79.530759][ T4421] ? __might_sleep+0xf0/0xf0 [ 79.535364][ T4421] ? compat_rawv6_ioctl+0x60/0x60 [ 79.540388][ T4421] ? aa_sk_perm+0x7dc/0x910 [ 79.544891][ T4421] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 79.551300][ T4421] ? sock_rps_record_flow+0x17/0x3b0 [ 79.556584][ T4421] ? inet_sendmsg+0x7a/0x2a0 [ 79.561165][ T4421] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 79.566452][ T4421] ? inet_send_prepare+0x250/0x250 [ 79.571586][ T4421] ____sys_sendmsg+0x5be/0x8f0 [ 79.576386][ T4421] ? __sys_sendmsg_sock+0x30/0x30 [ 79.581441][ T4421] ? preempt_schedule+0xbc/0xd0 [ 79.586323][ T4421] ? import_iovec+0x6f/0xa0 [ 79.590821][ T4421] ___sys_sendmsg+0x236/0x2e0 [ 79.595495][ T4421] ? __sys_sendmsg+0x290/0x290 [ 79.600279][ T4421] __sys_sendmmsg+0x2ba/0x500 [ 79.604953][ T4421] ? __ia32_sys_sendmsg+0x80/0x80 [ 79.609982][ T4421] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 79.615959][ T4421] ? lock_chain_count+0x20/0x20 [ 79.620817][ T4421] __x64_sys_sendmmsg+0x9c/0xb0 [ 79.625686][ T4421] do_syscall_64+0x4c/0xa0 [ 79.630093][ T4421] ? clear_bhb_loop+0x30/0x80 [ 79.634780][ T4421] ? clear_bhb_loop+0x30/0x80 [ 79.639451][ T4421] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.645340][ T4421] RIP: 0033:0x7ff319c29559 [ 79.649876][ T4421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.669488][ T4421] RSP: 002b:00007ff317e5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 79.677926][ T4421] RAX: ffffffffffffffda RBX: 00007ff319eb0090 RCX: 00007ff319c29559 [ 79.685912][ T4421] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 79.693892][ T4421] RBP: 00007ff319cc0b20 R08: 0000000000000000 R09: 0000000000000000 [ 79.701855][ T4421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.709822][ T4421] R13: 00007ff319eb0128 R14: 00007ff319eb0090 R15: 00007fff200fbe28 [ 79.717818][ T4421] [ 79.863032][ T4428] loop2: detected capacity change from 0 to 256 [ 79.993888][ T4351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.130825][ T4351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.893010][ T4351] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.903646][ T4351] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.916207][ T4351] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.935131][ T4351] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.994926][ T4440] loop2: detected capacity change from 0 to 1024 [ 81.028925][ T4440] EXT4-fs (loop2): Ignoring removed bh option [ 81.098491][ T4440] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 81.175482][ T4351] syz.1.15 (4351) used greatest stack depth: 19888 bytes left [ 81.368702][ T4451] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 81.396467][ T4287] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.462284][ T4453] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 82.067678][ T4459] loop4: detected capacity change from 0 to 1024 [ 82.167626][ T4466] loop0: detected capacity change from 0 to 1024 [ 82.210113][ T4459] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 82.308995][ T4459] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,init_itable,sysvgroups,resuid=0x0000000000000000,init_itable,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 82.426151][ T4466] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.523921][ T26] audit: type=1326 audit(1793272374.285:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4475 comm="syz.3.42" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff319c29559 code=0x0 [ 82.569110][ T4466] overlayfs: failed to resolve './bus': -2 [ 83.343931][ T4501] loop1: detected capacity change from 0 to 128 [ 83.541853][ T4501] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.596436][ T4501] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.042534][ T4259] Bluetooth: hci0: command 0x0c20 tx timeout [ 84.605654][ T4539] loop4: detected capacity change from 0 to 1024 [ 84.675097][ T4544] FAULT_INJECTION: forcing a failure. [ 84.675097][ T4544] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.677236][ T4548] loop0: detected capacity change from 0 to 512 [ 84.714840][ T4544] CPU: 0 PID: 4544 Comm: syz.2.56 Not tainted syzkaller #0 [ 84.722102][ T4544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 84.732183][ T4544] Call Trace: [ 84.735664][ T4544] [ 84.738619][ T4544] dump_stack_lvl+0x188/0x250 [ 84.743336][ T4544] ? show_regs_print_info+0x20/0x20 [ 84.748568][ T4544] ? load_image+0x410/0x410 [ 84.753120][ T4544] ? __lock_acquire+0x7d40/0x7d40 [ 84.758184][ T4544] should_fail+0x383/0x4b0 [ 84.762637][ T4544] _copy_from_iter+0x234/0x1160 [ 84.767520][ T4544] ? __lock_acquire+0x7d40/0x7d40 [ 84.772582][ T4544] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 84.777969][ T4544] ? __virt_addr_valid+0x3c6/0x470 [ 84.783127][ T4544] ? __phys_addr_symbol+0x2b/0x70 [ 84.788157][ T4544] ? __check_object_size+0x30c/0x410 [ 84.793457][ T4544] netlink_sendmsg+0x758/0xbe0 [ 84.798237][ T4544] ? netlink_getsockopt+0x570/0x570 [ 84.803436][ T4544] ? aa_sock_msg_perm+0x94/0x150 [ 84.808375][ T4544] ? apparmor_socket_sendmsg+0x88/0x230 [ 84.813920][ T4544] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 84.819208][ T4544] ? security_socket_sendmsg+0x7c/0xa0 [ 84.824667][ T4544] ? netlink_getsockopt+0x570/0x570 [ 84.829867][ T4544] ____sys_sendmsg+0x5be/0x8f0 [ 84.834647][ T4544] ? __sys_sendmsg_sock+0x30/0x30 [ 84.839832][ T4544] ? import_iovec+0x6f/0xa0 [ 84.844360][ T4544] ___sys_sendmsg+0x236/0x2e0 [ 84.849056][ T4544] ? __sys_sendmsg+0x290/0x290 [ 84.853886][ T4544] __se_sys_sendmsg+0x1b7/0x2a0 [ 84.858745][ T4544] ? __x64_sys_sendmsg+0x80/0x80 [ 84.863686][ T4544] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 84.869692][ T4544] ? lockdep_hardirqs_on+0x94/0x140 [ 84.874901][ T4544] do_syscall_64+0x4c/0xa0 [ 84.879313][ T4544] ? clear_bhb_loop+0x30/0x80 [ 84.883992][ T4544] ? clear_bhb_loop+0x30/0x80 [ 84.888669][ T4544] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.894595][ T4544] RIP: 0033:0x7fdea54c6559 [ 84.899023][ T4544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.918628][ T4544] RSP: 002b:00007fdea371d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.927044][ T4544] RAX: ffffffffffffffda RBX: 00007fdea574cfa0 RCX: 00007fdea54c6559 [ 84.935041][ T4544] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000003 [ 84.943011][ T4544] RBP: 00007fdea555db20 R08: 0000000000000000 R09: 0000000000000000 [ 84.951072][ T4544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.959041][ T4544] R13: 00007fdea574d038 R14: 00007fdea574cfa0 R15: 00007fffdcf43328 [ 84.967470][ T4544] [ 85.038591][ T4539] EXT4-fs (loop4): mounted filesystem without journal. Opts: dax=never,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,lazytime,init_itable,. Quota mode: none. [ 85.099730][ T4548] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.58: missing EA_INODE flag [ 85.165056][ T4548] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.58: error while reading EA inode 2 err=-117 [ 85.177859][ T4548] EXT4-fs (loop0): 1 orphan inode deleted [ 85.183639][ T4548] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,noquota,,errors=continue. Quota mode: writeback. [ 85.305325][ T4539] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #12: block 7: comm syz.4.55: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 85.348320][ T4539] EXT4-fs (loop4): Remounting filesystem read-only [ 85.360240][ T4568] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #12: block 7: comm syz.4.55: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 85.394636][ T4568] EXT4-fs (loop4): Remounting filesystem read-only [ 85.534280][ T4196] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /11/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 85.550106][ T4588] loop0: detected capacity change from 0 to 2048 [ 85.576540][ T4196] EXT4-fs (loop4): Remounting filesystem read-only [ 85.584399][ T4196] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /11/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 85.601435][ T4591] device syzkaller0 entered promiscuous mode [ 85.655973][ T4196] EXT4-fs (loop4): Remounting filesystem read-only [ 85.678038][ T4196] EXT4-fs error (device loop4): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 85.744410][ T4196] EXT4-fs (loop4): Remounting filesystem read-only [ 85.783468][ T4196] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 85.843944][ T4196] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /11/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 85.889759][ T4196] EXT4-fs (loop4): Remounting filesystem read-only [ 85.890753][ T4588] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.901855][ T4196] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /11/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 85.951393][ T4196] EXT4-fs (loop4): Remounting filesystem read-only [ 85.981274][ T4604] netlink: set zone limit has 8 unknown bytes [ 86.014214][ T4605] tipc: Enabling of bearer rejected, failed to enable media [ 86.078417][ T4196] EXT4-fs error (device loop4): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 86.119192][ T4588] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.559747][ T4196] EXT4-fs (loop4): Remounting filesystem read-only [ 86.590299][ T4588] fs-verity: sha512 using implementation "sha512-avx2" [ 86.616426][ T4196] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 86.671709][ T4196] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /11/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 86.699218][ T7] cfg80211: failed to load regulatory.db [ 86.731643][ T4196] EXT4-fs (loop4): Remounting filesystem read-only [ 86.764269][ T4196] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /11/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 86.825980][ T4196] EXT4-fs (loop4): Remounting filesystem read-only [ 86.855411][ T4196] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 86.881572][ T4196] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 86.945180][ T4196] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 86.950886][ T4196] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 86.952376][ T4196] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 86.963867][ T4196] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 86.965466][ T4196] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 86.971436][ T4196] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 87.066655][ T4627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.81'. [ 87.067427][ T4627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.81'. [ 87.068468][ T4627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.81'. [ 87.159533][ T4628] loop1: detected capacity change from 0 to 128 [ 88.316234][ C1] sched: RT throttling activated [ 89.882567][ T1365] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.088139][ T1365] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.278260][ T1365] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.109402][ T26] audit: type=1800 audit(1793272382.445:4): pid=4655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.87" name="/" dev="pipefs" ino=34029 res=0 errno=0 [ 91.528135][ T1365] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.709792][ T4667] Bluetooth: (null): Invalid header checksum [ 92.762255][ T4693] loop0: detected capacity change from 0 to 1024 [ 92.861260][ T4693] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 92.883527][ T4698] IPVS: Error joining to the multicast group [ 92.942987][ T4693] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 92.976113][ T4695] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.995053][ T4693] EXT4-fs (loop0): orphan cleanup on readonly fs [ 93.128528][ T4693] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #3: block 3: comm syz.0.100: lblock 3 mapped to illegal pblock 3 (length 1) [ 93.196760][ T4693] Quota error (device loop0): write_blk: dquota write failed [ 93.204198][ T4693] Quota error (device loop0): find_free_dqentry: Can't write quota data block 3 [ 93.286057][ T4693] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 93.313478][ T4723] loop1: detected capacity change from 0 to 512 [ 93.316637][ T4693] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.100: Failed to acquire dquot type 0 [ 93.357136][ T4693] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 3: comm syz.0.100: lblock 3 mapped to illegal pblock 3 (length 1) [ 93.422068][ T4693] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 93.473043][ T4693] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.100: Failed to acquire dquot type 0 [ 93.524539][ T4723] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.546451][ T4723] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.551322][ T4693] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.100: Freeing blocks not in datazone - block = 0, count = 4096 [ 93.574710][ T4693] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 3: comm syz.0.100: lblock 3 mapped to illegal pblock 3 (length 1) [ 93.608588][ T4693] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 93.627248][ T4693] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.100: Failed to acquire dquot type 0 [ 93.646486][ T4693] EXT4-fs (loop0): 1 orphan inode deleted [ 93.662721][ T4693] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000006,max_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000000400000,journal_dev=0x0000000000000001,auto_da_alloc,jqfmt=vfsold,dax=never,dax=never,,errors=continue. Quota mode: writeback. [ 93.663861][ T4742] device syzkaller0 entered promiscuous mode [ 93.773582][ T4693] EXT4-fs (loop0): shut down requested (0) [ 93.953860][ T4742] tipc: Started in network mode [ 93.986324][ T4742] tipc: Node identity a2561cfedaad, cluster identity 4711 [ 93.993734][ T4742] tipc: Enabled bearer , priority 0 [ 94.071724][ T4759] tipc: Resetting bearer [ 94.116624][ T4695] chnl_net:caif_netlink_parms(): no params data found [ 94.130644][ T4771] FAULT_INJECTION: forcing a failure. [ 94.130644][ T4771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.164651][ T4771] CPU: 1 PID: 4771 Comm: syz.1.114 Not tainted syzkaller #0 [ 94.171997][ T4771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 94.182083][ T4771] Call Trace: [ 94.185391][ T4771] [ 94.188352][ T4771] dump_stack_lvl+0x188/0x250 [ 94.193070][ T4771] ? show_regs_print_info+0x20/0x20 [ 94.198302][ T4771] ? load_image+0x410/0x410 [ 94.202929][ T4771] ? __lock_acquire+0x7d40/0x7d40 [ 94.207998][ T4771] should_fail+0x383/0x4b0 [ 94.212454][ T4771] _copy_from_user+0x2e/0x170 [ 94.217171][ T4771] pppol2tp_setsockopt+0x157/0x680 [ 94.222328][ T4771] ? pppol2tp_getname+0x2230/0x2230 [ 94.227554][ T4771] ? aa_sock_opt_perm+0x74/0x100 [ 94.232521][ T4771] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 94.238204][ T4771] ? security_socket_setsockopt+0x7a/0xa0 [ 94.243957][ T4771] ? pppol2tp_getname+0x2230/0x2230 [ 94.249187][ T4771] __sys_setsockopt+0x2bf/0x3d0 [ 94.254073][ T4771] __x64_sys_setsockopt+0xb1/0xc0 [ 94.259142][ T4771] do_syscall_64+0x4c/0xa0 [ 94.263593][ T4771] ? clear_bhb_loop+0x30/0x80 [ 94.268302][ T4771] ? clear_bhb_loop+0x30/0x80 [ 94.273008][ T4771] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.278926][ T4771] RIP: 0033:0x7fa04917e559 [ 94.283455][ T4771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.303084][ T4771] RSP: 002b:00007fa0473d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 94.311541][ T4771] RAX: ffffffffffffffda RBX: 00007fa049404fa0 RCX: 00007fa04917e559 [ 94.319547][ T4771] RDX: 0000000000000002 RSI: 0000000000000111 RDI: 0000000000000003 [ 94.327549][ T4771] RBP: 00007fa049215b20 R08: 0000000000000004 R09: 0000000000000000 [ 94.335552][ T4771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.343561][ T4771] R13: 00007fa049405038 R14: 00007fa049404fa0 R15: 00007ffff7bc6c68 [ 94.351585][ T4771] [ 94.361346][ T4740] tipc: Resetting bearer [ 94.392144][ T4740] tipc: Disabling bearer [ 94.413501][ T4781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 94.487782][ T4781] Zero length message leads to an empty skb [ 94.626203][ T4287] hid-generic 0043:1B18:0C10.0001: unknown main item tag 0x0 [ 94.645057][ T4287] hid-generic 0043:1B18:0C10.0001: unknown main item tag 0x1 [ 94.647885][ T4695] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.669033][ T4287] input: syz0 as /devices/virtual/misc/uhid/0043:1B18:0C10.0001/input/input5 [ 94.707841][ T4695] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.724796][ T4287] hid-generic 0043:1B18:0C10.0001: input,hidraw0: HID v0.00 Device [syz0] on syz0 [ 94.767064][ T4695] device bridge_slave_0 entered promiscuous mode [ 94.787344][ T4695] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.834669][ T4695] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.842207][ T4252] Bluetooth: hci3: command 0x0409 tx timeout [ 94.908625][ T4695] device bridge_slave_1 entered promiscuous mode [ 94.961955][ T1365] device hsr_slave_0 left promiscuous mode [ 95.023821][ T1365] device hsr_slave_1 left promiscuous mode [ 95.053166][ T1365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.074430][ T4808] fido_id[4808]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 95.092921][ T1365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.125157][ T1365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.151987][ T1365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.169031][ T1365] device bridge_slave_1 left promiscuous mode [ 95.187740][ T1365] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.214674][ T1365] device bridge_slave_0 left promiscuous mode [ 95.239960][ T1365] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.324751][ T1365] device veth1_macvtap left promiscuous mode [ 95.345816][ T1365] device veth0_macvtap left promiscuous mode [ 95.367242][ T1365] device veth1_vlan left promiscuous mode [ 95.388508][ T1365] device veth0_vlan left promiscuous mode [ 95.721051][ T1365] team0 (unregistering): Port device team_slave_1 removed [ 95.737597][ T1365] team0 (unregistering): Port device team_slave_0 removed [ 95.753036][ T1365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.768103][ T1365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.890013][ T1365] bond0 (unregistering): Released all slaves [ 96.005409][ T4695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.007916][ T4695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.062680][ T4695] team0: Port device team_slave_0 added [ 96.081419][ T4695] team0: Port device team_slave_1 added [ 96.157925][ T4695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.157943][ T4695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.157975][ T4695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.159778][ T4695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.159793][ T4695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.159817][ T4695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.196598][ T4858] loop3: detected capacity change from 0 to 1024 [ 96.310237][ T4695] device hsr_slave_0 entered promiscuous mode [ 96.311056][ T4695] device hsr_slave_1 entered promiscuous mode [ 96.312338][ T4861] device syzkaller0 entered promiscuous mode [ 96.342853][ T4858] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.371748][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.381781][ T4861] tipc: Started in network mode [ 96.500347][ T4861] tipc: Node identity 32cf958298fc, cluster identity 4711 [ 96.516646][ T4861] tipc: Enabled bearer , priority 0 [ 96.698824][ T4860] tipc: Resetting bearer [ 96.735494][ T4860] tipc: Disabling bearer [ 97.326269][ T4252] Bluetooth: hci3: command 0x041b tx timeout [ 97.348218][ T4695] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.434230][ T4695] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.537475][ T4695] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.582147][ T4695] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.625411][ T4911] loop0: detected capacity change from 0 to 512 [ 97.632601][ T4899] device syzkaller0 entered promiscuous mode [ 97.652306][ T4899] tipc: Enabled bearer , priority 0 [ 97.687755][ T4911] EXT4-fs (loop0): invalid journal inode [ 97.696382][ T4911] EXT4-fs (loop0): can't get journal size [ 97.711564][ T4899] tipc: Resetting bearer [ 97.747536][ T4911] EXT4-fs (loop0): 1 truncate cleaned up [ 97.753378][ T4911] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 97.753460][ T4898] tipc: Resetting bearer [ 97.825611][ T4898] tipc: Disabling bearer [ 98.004430][ T4695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.041986][ T4695] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.067095][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.078132][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.118964][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.133124][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.194234][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.201572][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.032719][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.043108][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.045985][ T4924] ip_tables: iptables: counters copy to user failed while replacing table [ 99.054368][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.067246][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.396486][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 99.516012][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.688203][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.731211][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.860080][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.909502][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.943254][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.973081][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.983363][ T4937] block device autoloading is deprecated and will be removed. [ 100.005678][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.055691][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.117272][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.157654][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.353588][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.476290][ T4252] Bluetooth: hci3: command 0x0419 tx timeout [ 102.526998][ T4982] ip_tables: iptables: counters copy to user failed while replacing table [ 103.098000][ T4991] netlink: 87 bytes leftover after parsing attributes in process `syz.1.163'. [ 103.257517][ T4695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.298773][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.310681][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.475181][ T5017] loop1: detected capacity change from 0 to 256 [ 103.829386][ T5031] ip_tables: iptables: counters copy to user failed while replacing table [ 104.847703][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.886751][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.898368][ T5053] FAULT_INJECTION: forcing a failure. [ 104.898368][ T5053] name failslab, interval 1, probability 0, space 0, times 0 [ 104.967851][ T5053] CPU: 1 PID: 5053 Comm: syz.2.176 Not tainted syzkaller #0 [ 104.975203][ T5053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 104.985285][ T5053] Call Trace: [ 104.988619][ T5053] [ 104.991560][ T5053] dump_stack_lvl+0x188/0x250 [ 104.996480][ T5053] ? show_regs_print_info+0x20/0x20 [ 105.001705][ T5053] ? load_image+0x410/0x410 [ 105.006225][ T5053] ? __might_sleep+0xf0/0xf0 [ 105.010861][ T5053] ? __lock_acquire+0x7d40/0x7d40 [ 105.015902][ T5053] should_fail+0x383/0x4b0 [ 105.020357][ T5053] should_failslab+0x5/0x20 [ 105.024860][ T5053] slab_pre_alloc_hook+0x51/0xc0 [ 105.029809][ T5053] kmem_cache_alloc_trace+0x47/0x290 [ 105.035096][ T5053] ? __list_lru_init+0x535/0xac0 [ 105.040067][ T5053] __list_lru_init+0x535/0xac0 [ 105.044855][ T5053] alloc_super+0x7b6/0x970 [ 105.049279][ T5053] ? kill_litter_super+0xa0/0xa0 [ 105.054227][ T5053] sget_fc+0x2d4/0x6f0 [ 105.058299][ T5053] ? kill_litter_super+0xa0/0xa0 [ 105.063242][ T5053] ? proc_reconfigure+0x370/0x370 [ 105.068272][ T5053] get_tree_nodev+0x26/0x160 [ 105.072868][ T5053] vfs_get_tree+0x88/0x270 [ 105.077311][ T5053] vfs_fsconfig_locked+0x22f/0x400 [ 105.082430][ T5053] __se_sys_fsconfig+0x69e/0x7e0 [ 105.087382][ T5053] ? __x64_sys_fsconfig+0xc0/0xc0 [ 105.092502][ T5053] ? lockdep_hardirqs_on+0x94/0x140 [ 105.097706][ T5053] ? __x64_sys_fsconfig+0x1c/0xc0 [ 105.102735][ T5053] do_syscall_64+0x4c/0xa0 [ 105.107156][ T5053] ? clear_bhb_loop+0x30/0x80 [ 105.111835][ T5053] ? clear_bhb_loop+0x30/0x80 [ 105.116537][ T5053] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.122429][ T5053] RIP: 0033:0x7fdea54c6559 [ 105.126847][ T5053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.146459][ T5053] RSP: 002b:00007fdea371d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 105.154880][ T5053] RAX: ffffffffffffffda RBX: 00007fdea574cfa0 RCX: 00007fdea54c6559 [ 105.162872][ T5053] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000008 [ 105.170845][ T5053] RBP: 00007fdea555db20 R08: 0000000000000000 R09: 0000000000000000 [ 105.178816][ T5053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.186886][ T5053] R13: 00007fdea574d038 R14: 00007fdea574cfa0 R15: 00007fffdcf43328 [ 105.194875][ T5053] [ 105.347364][ T5069] loop3: detected capacity change from 0 to 1024 [ 105.380979][ T5069] EXT4-fs (loop3): Ignoring removed oldalloc option [ 105.385335][ T5051] loop1: detected capacity change from 0 to 8192 [ 105.414593][ T5069] EXT4-fs (loop3): Ignoring removed orlov option [ 105.454522][ T4205] loop1: AHDI p1 p4 [ 105.462025][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.468657][ T5069] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,oldalloc,orlov,dioread_lock,,errors=continue. Quota mode: none. [ 105.481430][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.516957][ T5051] loop1: AHDI p1 p4 [ 105.526668][ T4695] device veth0_vlan entered promiscuous mode [ 105.557953][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.575737][ T5069] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.622495][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.636074][ T4695] device veth1_vlan entered promiscuous mode [ 105.744973][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.766921][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 105.836734][ T5088] FAULT_INJECTION: forcing a failure. [ 105.836734][ T5088] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 105.863198][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.872525][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.885283][ T4695] device veth0_macvtap entered promiscuous mode [ 105.917392][ T4695] device veth1_macvtap entered promiscuous mode [ 105.927603][ T5088] CPU: 0 PID: 5088 Comm: syz.1.183 Not tainted syzkaller #0 [ 105.934930][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.945032][ T5088] Call Trace: [ 105.948331][ T5088] [ 105.951277][ T5088] dump_stack_lvl+0x188/0x250 [ 105.955990][ T5088] ? show_regs_print_info+0x20/0x20 [ 105.961211][ T5088] ? load_image+0x410/0x410 [ 105.965824][ T5088] ? __lock_acquire+0x13b3/0x7d40 [ 105.970880][ T5088] ? verify_lock_unused+0x140/0x140 [ 105.976114][ T5088] should_fail+0x383/0x4b0 [ 105.980555][ T5088] prepare_alloc_pages+0x1e3/0x5b0 [ 105.985701][ T5088] __alloc_pages+0x11b/0x480 [ 105.990312][ T5088] ? zone_statistics+0x170/0x170 [ 105.995284][ T5088] ? alloc_pages+0x452/0x560 [ 105.999902][ T5088] new_slab+0xc0/0x4b0 [ 106.003994][ T5088] ___slab_alloc+0x807/0xdd0 [ 106.008623][ T5088] ? ioctx_alloc+0x105/0x770 [ 106.013238][ T5088] ? ioctx_alloc+0x105/0x770 [ 106.017846][ T5088] kmem_cache_alloc+0xf0/0x280 [ 106.022654][ T5088] ioctx_alloc+0x105/0x770 [ 106.027108][ T5088] ? __might_fault+0xb3/0x110 [ 106.031815][ T5088] __se_sys_io_setup+0x7b/0x190 [ 106.036706][ T5088] do_syscall_64+0x4c/0xa0 [ 106.041153][ T5088] ? clear_bhb_loop+0x30/0x80 [ 106.045854][ T5088] ? clear_bhb_loop+0x30/0x80 [ 106.050553][ T5088] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.056464][ T5088] RIP: 0033:0x7fa04917e559 [ 106.060898][ T5088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.080633][ T5088] RSP: 002b:00007fa0473d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 106.089085][ T5088] RAX: ffffffffffffffda RBX: 00007fa049404fa0 RCX: 00007fa04917e559 [ 106.097074][ T5088] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 106.105059][ T5088] RBP: 00007fa049215b20 R08: 0000000000000000 R09: 0000000000000000 [ 106.113131][ T5088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.121117][ T5088] R13: 00007fa049405038 R14: 00007fa049404fa0 R15: 00007ffff7bc6c68 [ 106.129129][ T5088] [ 106.439406][ T4695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.542007][ T4695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.607706][ T4695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.656583][ T4695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.701010][ T4695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.719811][ T4695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.752960][ T4695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.865159][ T4695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.879372][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 106.907491][ T4695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.948201][ T4695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.966162][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 106.977063][ T4695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.023595][ T4695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.043368][ T4695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.056816][ T4695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.086435][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.128096][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.167047][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.197118][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.220611][ T5104] ip_tables: iptables: counters copy to user failed while replacing table [ 107.241447][ T4695] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.259703][ T4695] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.294219][ T4695] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.309834][ T4695] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.488365][ T5108] FAULT_INJECTION: forcing a failure. [ 107.488365][ T5108] name failslab, interval 1, probability 0, space 0, times 0 [ 107.565640][ T5108] CPU: 0 PID: 5108 Comm: syz.0.186 Not tainted syzkaller #0 [ 107.572984][ T5108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 107.583067][ T5108] Call Trace: [ 107.586377][ T5108] [ 107.589334][ T5108] dump_stack_lvl+0x188/0x250 [ 107.594052][ T5108] ? show_regs_print_info+0x20/0x20 [ 107.599287][ T5108] ? load_image+0x410/0x410 [ 107.603925][ T5108] ? mroute_clean_tables+0xaf0/0xaf0 [ 107.609248][ T5108] should_fail+0x383/0x4b0 [ 107.613705][ T5108] should_failslab+0x5/0x20 [ 107.618249][ T5108] slab_pre_alloc_hook+0x51/0xc0 [ 107.623221][ T5108] ? skb_clone+0x1bd/0x350 [ 107.627669][ T5108] kmem_cache_alloc+0x3d/0x280 [ 107.632463][ T5108] skb_clone+0x1bd/0x350 [ 107.636731][ T5108] ? ip6_finish_output2+0x3f9/0x1640 [ 107.642082][ T5108] ip6_finish_output2+0x40b/0x1640 [ 107.647253][ T5108] ? nf_hook+0x360/0x360 [ 107.651522][ T5108] ? ip6_mtu+0x2fb/0x3d0 [ 107.655784][ T5108] ? ip6_finish_output+0x627/0x790 [ 107.660924][ T5108] ip6_send_skb+0x1af/0x350 [ 107.665468][ T5108] rawv6_push_pending_frames+0x665/0x820 [ 107.671139][ T5108] ? rawv6_send_hdrinc+0x1650/0x1650 [ 107.676452][ T5108] ? raw6_getfrag+0x2c0/0x2c0 [ 107.681155][ T5108] ? rawv6_send_hdrinc+0x1650/0x1650 [ 107.686484][ T5108] rawv6_sendmsg+0x1298/0x1710 [ 107.691305][ T5108] ? __might_sleep+0xf0/0xf0 [ 107.695932][ T5108] ? compat_rawv6_ioctl+0x60/0x60 [ 107.701015][ T5108] ? aa_sk_perm+0x7dc/0x910 [ 107.705567][ T5108] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 107.712021][ T5108] ? sock_rps_record_flow+0x17/0x3b0 [ 107.717277][ T4319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.717336][ T5108] ? inet_sendmsg+0x7a/0x2a0 [ 107.729747][ T5108] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 107.735152][ T5108] ? inet_send_prepare+0x250/0x250 [ 107.735984][ T4319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.740290][ T5108] ____sys_sendmsg+0x5be/0x8f0 [ 107.740324][ T5108] ? __sys_sendmsg_sock+0x30/0x30 [ 107.740350][ T5108] ? preempt_schedule+0xbc/0xd0 [ 107.740375][ T5108] ? import_iovec+0x6f/0xa0 [ 107.749277][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.752503][ T5108] ___sys_sendmsg+0x236/0x2e0 [ 107.752542][ T5108] ? __sys_sendmsg+0x290/0x290 [ 107.764142][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.766958][ T5108] __sys_sendmmsg+0x2ba/0x500 [ 107.766992][ T5108] ? __ia32_sys_sendmsg+0x80/0x80 [ 107.767036][ T5108] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 107.807187][ T5108] ? lock_chain_count+0x20/0x20 [ 107.812054][ T5108] __x64_sys_sendmmsg+0x9c/0xb0 [ 107.816914][ T5108] do_syscall_64+0x4c/0xa0 [ 107.821329][ T5108] ? clear_bhb_loop+0x30/0x80 [ 107.826003][ T5108] ? clear_bhb_loop+0x30/0x80 [ 107.830682][ T5108] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.836571][ T5108] RIP: 0033:0x7f44974a7559 [ 107.840987][ T5108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.860593][ T5108] RSP: 002b:00007f44956fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 107.869008][ T5108] RAX: ffffffffffffffda RBX: 00007f449772dfa0 RCX: 00007f44974a7559 [ 107.876979][ T5108] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 107.884947][ T5108] RBP: 00007f449753eb20 R08: 0000000000000000 R09: 0000000000000000 [ 107.892929][ T5108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.900898][ T5108] R13: 00007f449772e038 R14: 00007f449772dfa0 R15: 00007ffca1c3a698 [ 107.908881][ T5108] [ 107.914004][ T5078] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 107.932687][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.943031][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.016996][ T5120] loop2: detected capacity change from 0 to 1024 [ 108.157448][ T5124] loop1: detected capacity change from 0 to 4096 [ 108.226146][ T5124] EXT4-fs (loop1): Test dummy encryption mode enabled [ 108.261295][ T5124] EXT4-fs (loop1): inline encryption not supported [ 108.271009][ T5124] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 108.295102][ T5120] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: none. [ 108.335883][ T5120] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.425653][ T5140] loop3: detected capacity change from 0 to 1024 [ 108.514650][ T5140] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 108.540195][ T5124] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 108.580718][ T5124] System zones: 0-5 [ 108.594653][ T5140] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 108.603803][ T5140] EXT4-fs (loop3): orphan cleanup on readonly fs [ 108.612020][ T5140] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.190: Freeing blocks not in datazone - block = 0, count = 4096 [ 108.629246][ T5140] EXT4-fs (loop3): Remounting filesystem read-only [ 108.635926][ T5140] EXT4-fs (loop3): 1 orphan inode deleted [ 108.641794][ T5140] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,i_version,barrier=0x0000000000000009,quota,jqfmt=vfsv0,. Quota mode: writeback. [ 108.646733][ T5124] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,user_xattr,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 108.907067][ T5148] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.189: Freeing blocks not in datazone - block = 0, count = 16 [ 109.507148][ T5154] ip_tables: iptables: counters copy to user failed while replacing table [ 109.813393][ T5158] overlayfs: failed to resolve './bus': -2 [ 109.882277][ T5164] device syzkaller0 entered promiscuous mode [ 109.937640][ T5164] tipc: Started in network mode [ 109.943011][ T5164] tipc: Node identity fe91d3350cbb, cluster identity 4711 [ 109.987321][ T5164] tipc: Enabled bearer , priority 0 [ 110.012258][ T5162] tipc: Resetting bearer [ 110.047707][ T5162] tipc: Disabling bearer [ 110.084225][ T5178] device syzkaller0 entered promiscuous mode [ 110.192805][ T5183] loop5: detected capacity change from 0 to 512 [ 110.225206][ T5186] FAULT_INJECTION: forcing a failure. [ 110.225206][ T5186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.225240][ T5186] CPU: 0 PID: 5186 Comm: syz.1.200 Not tainted syzkaller #0 [ 110.225259][ T5186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 110.225269][ T5186] Call Trace: [ 110.225276][ T5186] [ 110.225285][ T5186] dump_stack_lvl+0x188/0x250 [ 110.225316][ T5186] ? show_regs_print_info+0x20/0x20 [ 110.225340][ T5186] ? load_image+0x410/0x410 [ 110.225365][ T5186] ? __lock_acquire+0x7d40/0x7d40 [ 110.225390][ T5186] ? __lock_acquire+0x7d40/0x7d40 [ 110.225410][ T5186] ? do_raw_spin_lock+0x128/0x2f0 [ 110.225433][ T5186] should_fail+0x383/0x4b0 [ 110.225457][ T5186] _copy_to_user+0x2e/0x130 [ 110.225477][ T5186] __se_sys_getrlimit+0x1b4/0x240 [ 110.225499][ T5186] ? lock_chain_count+0x20/0x20 [ 110.225521][ T5186] ? __x64_sys_getrlimit+0x60/0x60 [ 110.225546][ T5186] ? lockdep_hardirqs_on+0x94/0x140 [ 110.225572][ T5186] do_syscall_64+0x4c/0xa0 [ 110.225588][ T5186] ? clear_bhb_loop+0x30/0x80 [ 110.225606][ T5186] ? clear_bhb_loop+0x30/0x80 [ 110.225627][ T5186] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.225647][ T5186] RIP: 0033:0x7fa04917e559 [ 110.225667][ T5186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.225684][ T5186] RSP: 002b:00007fa0473d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000061 [ 110.225709][ T5186] RAX: ffffffffffffffda RBX: 00007fa049404fa0 RCX: 00007fa04917e559 [ 110.225725][ T5186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000b [ 110.225738][ T5186] RBP: 00007fa049215b20 R08: 0000000000000000 R09: 0000000000000000 [ 110.225752][ T5186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.225774][ T5186] R13: 00007fa049405038 R14: 00007fa049404fa0 R15: 00007ffff7bc6c68 [ 110.225805][ T5186] [ 110.300182][ T5183] EXT4-fs (loop5): Ignoring removed bh option [ 110.300300][ T5183] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 110.301347][ T5183] EXT4-fs (loop5): Unrecognized mount option "=" or missing value [ 110.869427][ T5210] ip_tables: iptables: counters copy to user failed while replacing table [ 112.939250][ T5304] loop1: detected capacity change from 0 to 128 [ 112.987345][ T5304] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.987467][ T5304] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.762300][ T5321] FAULT_INJECTION: forcing a failure. [ 113.762300][ T5321] name failslab, interval 1, probability 0, space 0, times 0 [ 113.893585][ T5321] CPU: 1 PID: 5321 Comm: syz.3.217 Not tainted syzkaller #0 [ 113.900939][ T5321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 113.911026][ T5321] Call Trace: [ 113.914329][ T5321] [ 113.917289][ T5321] dump_stack_lvl+0x188/0x250 [ 113.922088][ T5321] ? show_regs_print_info+0x20/0x20 [ 113.927312][ T5321] ? load_image+0x410/0x410 [ 113.931842][ T5321] ? __lock_acquire+0x7d40/0x7d40 [ 113.936894][ T5321] ? lockdep_hardirqs_on+0x94/0x140 [ 113.942116][ T5321] should_fail+0x383/0x4b0 [ 113.946561][ T5321] should_failslab+0x5/0x20 [ 113.951083][ T5321] slab_pre_alloc_hook+0x51/0xc0 [ 113.956102][ T5321] __kmalloc+0x6b/0x340 [ 113.960303][ T5321] ? asymmetric_key_generate_id+0x52/0xd0 [ 113.966065][ T5321] asymmetric_key_generate_id+0x52/0xd0 [ 113.971643][ T5321] x509_cert_parse+0x53a/0x7a0 [ 113.976458][ T5321] x509_key_preparse+0x60/0x5d0 [ 113.981435][ T5321] ? down_read+0x1aa/0x2e0 [ 113.985899][ T5321] asymmetric_key_preparse+0xa5/0x140 [ 113.991310][ T5321] key_create_or_update+0x432/0xa40 [ 113.996529][ T5321] ? security_key_permission+0x7c/0xa0 [ 114.002008][ T5321] ? key_type_put+0x20/0x20 [ 114.006529][ T5321] ? lookup_user_key_possessed+0x40/0x40 [ 114.012196][ T5321] ? __might_fault+0xb3/0x110 [ 114.016900][ T5321] __se_sys_add_key+0x34b/0x410 [ 114.021772][ T5321] ? __x64_sys_add_key+0xc0/0xc0 [ 114.026935][ T5321] ? lockdep_hardirqs_on+0x94/0x140 [ 114.032131][ T5321] ? __x64_sys_add_key+0x1c/0xc0 [ 114.037078][ T5321] do_syscall_64+0x4c/0xa0 [ 114.041499][ T5321] ? clear_bhb_loop+0x30/0x80 [ 114.046299][ T5321] ? clear_bhb_loop+0x30/0x80 [ 114.050977][ T5321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.056871][ T5321] RIP: 0033:0x7ff319c29559 [ 114.061396][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.081001][ T5321] RSP: 002b:00007ff317e80028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 114.089414][ T5321] RAX: ffffffffffffffda RBX: 00007ff319eaffa0 RCX: 00007ff319c29559 [ 114.097490][ T5321] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000000 [ 114.105463][ T5321] RBP: 00007ff319cc0b20 R08: ffffffffffffffff R09: 0000000000000000 [ 114.113432][ T5321] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 114.121399][ T5321] R13: 00007ff319eb0038 R14: 00007ff319eaffa0 R15: 00007fff200fbe28 [ 114.129383][ T5321] [ 114.184122][ T5328] ip_tables: iptables: counters copy to user failed while replacing table [ 115.026069][ T5355] device syzkaller0 entered promiscuous mode [ 115.122136][ T5355] tipc: Started in network mode [ 115.137628][ T5366] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 115.147674][ T5366] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 115.219274][ T5364] ip_tables: iptables: counters copy to user failed while replacing table [ 115.244826][ T5355] tipc: Node identity 92d2e4aae2b4, cluster identity 4711 [ 115.395472][ T5355] tipc: Enabled bearer , priority 0 [ 115.417062][ T5368] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 115.435805][ T5368] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 115.845748][ T5350] tipc: Resetting bearer [ 115.913574][ T5350] tipc: Disabling bearer [ 115.987361][ T5379] device syzkaller0 entered promiscuous mode [ 116.019969][ T5385] loop3: detected capacity change from 0 to 128 [ 116.150612][ T26] audit: type=1800 audit(1793272407.915:5): pid=5394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.234" name="memory_backed" dev="configfs" ino=36121 res=0 errno=0 [ 116.174476][ T5385] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.187412][ T26] audit: type=1326 audit(1793272407.955:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.1.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04917e559 code=0x7ffc0000 [ 116.211256][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.221215][ T5391] ip_tables: iptables: counters copy to user failed while replacing table [ 116.246297][ T26] audit: type=1800 audit(1793272407.995:7): pid=5399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.234" name="power" dev="configfs" ino=36130 res=0 errno=0 [ 116.246512][ T5385] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.309842][ T26] audit: type=1326 audit(1793272407.995:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.1.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04917e559 code=0x7ffc0000 [ 116.354079][ T26] audit: type=1326 audit(1793272407.995:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.1.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa04917e559 code=0x7ffc0000 [ 116.378036][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.423956][ T5406] FAULT_INJECTION: forcing a failure. [ 116.423956][ T5406] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 116.446132][ T5406] CPU: 1 PID: 5406 Comm: syz.0.237 Not tainted syzkaller #0 [ 116.453483][ T5406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 116.463565][ T5406] Call Trace: [ 116.466869][ T5406] [ 116.469818][ T5406] dump_stack_lvl+0x188/0x250 [ 116.474532][ T5406] ? show_regs_print_info+0x20/0x20 [ 116.479756][ T5406] ? load_image+0x410/0x410 [ 116.484286][ T5406] ? __lock_acquire+0x7d40/0x7d40 [ 116.489347][ T5406] should_fail+0x383/0x4b0 [ 116.493791][ T5406] prepare_alloc_pages+0x1e3/0x5b0 [ 116.498943][ T5406] __alloc_pages+0x11b/0x480 [ 116.503571][ T5406] ? zone_statistics+0x170/0x170 [ 116.508546][ T5406] ? count_memcg_event_mm+0x324/0x370 [ 116.513940][ T5406] ? remove_device_exclusive_entry+0xac0/0xac0 [ 116.520114][ T5406] ? __lock_acquire+0x13b3/0x7d40 [ 116.525176][ T5406] alloc_pages_vma+0x2bc/0x790 [ 116.529980][ T5406] handle_mm_fault+0x23be/0x4440 [ 116.534957][ T5406] ? get_page+0xe0/0xe0 [ 116.539149][ T5406] ? vmacache_find+0x53c/0x590 [ 116.543940][ T5406] ? vmacache_update+0xa0/0x100 [ 116.548911][ T5406] ? find_vma+0x1df/0x230 [ 116.553269][ T5406] do_user_addr_fault+0x494/0xc90 [ 116.558336][ T5406] exc_page_fault+0x60/0x100 [ 116.562959][ T5406] asm_exc_page_fault+0x22/0x30 [ 116.567841][ T5406] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 116.569587][ T26] audit: type=1326 audit(1793272407.995:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.1.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa04917e559 code=0x7ffc0000 [ 116.574459][ T5406] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 116.617999][ T5406] RSP: 0018:ffffc9000306fb60 EFLAGS: 00050206 [ 116.624111][ T5406] RAX: ffffffff83e93b01 RBX: 0000000000001000 RCX: 0000000000000378 [ 116.632116][ T5406] RDX: 0000000000001000 RSI: ffff88805a230c88 RDI: 0000200000005000 [ 116.640201][ T5406] RBP: 0000000000000000 R08: ffff88805a230fff R09: 1ffff1100b4461ff [ 116.648223][ T5406] R10: dffffc0000000000 R11: ffffed100b446200 R12: 00007ffffffff000 [ 116.656231][ T5406] R13: 0000200000005378 R14: ffff88805a230000 R15: 0000200000004378 [ 116.664252][ T5406] ? _copy_to_user+0x1/0x130 [ 116.668889][ T5406] _copy_to_user+0xf0/0x130 [ 116.673436][ T5406] pagemap_read+0x432/0x600 [ 116.677985][ T5406] ? clear_refs_write+0x650/0x650 [ 116.683044][ T5406] ? end_current_label_crit_section+0x14b/0x170 [ 116.689327][ T5406] ? common_file_perm+0x171/0x1c0 [ 116.694393][ T5406] ? fsnotify_perm+0x254/0x560 [ 116.699193][ T5406] ? clear_refs_write+0x650/0x650 [ 116.704262][ T5406] vfs_read+0x2ff/0xd50 [ 116.708468][ T5406] ? __lock_acquire+0x7d40/0x7d40 [ 116.713532][ T5406] ? kernel_read+0x1e0/0x1e0 [ 116.718171][ T5406] ? __fget_files+0x402/0x470 [ 116.722903][ T5406] ? __fdget+0x18b/0x210 [ 116.727175][ T5406] ? __x64_sys_pread64+0xf3/0x220 [ 116.732336][ T5406] __x64_sys_pread64+0x197/0x220 [ 116.737309][ T5406] ? ksys_pread64+0x1c0/0x1c0 [ 116.742018][ T5406] ? lockdep_hardirqs_on+0x94/0x140 [ 116.747250][ T5406] do_syscall_64+0x4c/0xa0 [ 116.751700][ T5406] ? clear_bhb_loop+0x30/0x80 [ 116.756412][ T5406] ? clear_bhb_loop+0x30/0x80 [ 116.761119][ T5406] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.767131][ T5406] RIP: 0033:0x7f44974a7559 [ 116.771574][ T5406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.791219][ T5406] RSP: 002b:00007f44956fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 116.799672][ T5406] RAX: ffffffffffffffda RBX: 00007f449772dfa0 RCX: 00007f44974a7559 [ 116.807680][ T5406] RDX: 0000000000019000 RSI: 0000200000000380 RDI: 0000000000000004 [ 116.815684][ T5406] RBP: 00007f449753eb20 R08: 0000000000000000 R09: 0000000000000000 [ 116.823685][ T5406] R10: 0000000000100008 R11: 0000000000000246 R12: 0000000000000000 [ 116.831687][ T5406] R13: 00007f449772e038 R14: 00007f449772dfa0 R15: 00007ffca1c3a698 [ 116.839792][ T5406] [ 117.841873][ T5429] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.849741][ T5429] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.735393][ T5459] ip_tables: iptables: counters copy to user failed while replacing table [ 118.801863][ T5429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.845606][ T5429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.202965][ T5429] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.212347][ T5429] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.221351][ T5429] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.230291][ T5429] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.321456][ T5448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'. [ 119.480601][ T5478] netlink: 'syz.3.256': attribute type 3 has an invalid length. [ 119.527393][ T5480] netlink: 52 bytes leftover after parsing attributes in process `syz.5.255'. [ 120.613704][ T5512] loop2: detected capacity change from 0 to 512 [ 120.636560][ T5517] loop1: detected capacity change from 0 to 1024 [ 121.220969][ T5517] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nobarrier,noinit_itable,,errors=continue. Quota mode: none. [ 121.243146][ T5512] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 121.497158][ T5512] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.528289][ T5528] device syzkaller0 entered promiscuous mode [ 121.560192][ T5528] 0: reclassify loop, rule prio 0, protocol 700 [ 121.588567][ T5531] device syzkaller0 entered promiscuous mode [ 122.603205][ T5550] device syzkaller0 entered promiscuous mode [ 123.420408][ T5570] loop5: detected capacity change from 0 to 1024 [ 123.507813][ T5570] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,dax=inode,noblock_validity,nojournal_checksum,,errors=continue. Quota mode: none. [ 123.525738][ T5570] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.541319][ T5570] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.276: corrupted xattr block 128 [ 123.560041][ T5581] FAULT_INJECTION: forcing a failure. [ 123.560041][ T5581] name failslab, interval 1, probability 0, space 0, times 0 [ 123.575345][ T5581] CPU: 0 PID: 5581 Comm: syz.3.280 Not tainted syzkaller #0 [ 123.582687][ T5581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 123.592769][ T5581] Call Trace: [ 123.596079][ T5581] [ 123.599038][ T5581] dump_stack_lvl+0x188/0x250 [ 123.603749][ T5581] ? show_regs_print_info+0x20/0x20 [ 123.608978][ T5581] ? load_image+0x410/0x410 [ 123.613611][ T5581] ? __might_sleep+0xf0/0xf0 [ 123.618226][ T5581] ? __lock_acquire+0x7d40/0x7d40 [ 123.623417][ T5581] should_fail+0x383/0x4b0 [ 123.627880][ T5581] should_failslab+0x5/0x20 [ 123.632413][ T5581] slab_pre_alloc_hook+0x51/0xc0 [ 123.637383][ T5581] __kmalloc_node_track_caller+0x68/0x3a0 [ 123.643136][ T5581] ? __ip6_append_data+0x26b7/0x38f0 [ 123.648486][ T5581] ? __alloc_skb+0xf4/0x750 [ 123.653009][ T5581] ? __ip6_append_data+0x26b7/0x38f0 [ 123.658301][ T5581] __alloc_skb+0x22c/0x750 [ 123.662760][ T5581] __ip6_append_data+0x26b7/0x38f0 [ 123.667951][ T5581] ? ip6_setup_cork+0x11e0/0x11e0 [ 123.673022][ T5581] ? ip6_setup_cork+0xc68/0x11e0 [ 123.678005][ T5581] ip6_append_data+0x1d4/0x310 [ 123.682803][ T5581] ? rawv6_send_hdrinc+0x1650/0x1650 [ 123.688126][ T5581] ? rawv6_send_hdrinc+0x1650/0x1650 [ 123.693451][ T5581] rawv6_sendmsg+0x1220/0x1710 [ 123.698268][ T5581] ? __might_sleep+0xf0/0xf0 [ 123.702888][ T5581] ? compat_rawv6_ioctl+0x60/0x60 [ 123.707958][ T5581] ? aa_sk_perm+0x7dc/0x910 [ 123.712616][ T5581] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 123.719072][ T5581] ? sock_rps_record_flow+0x17/0x3b0 [ 123.724392][ T5581] ? inet_sendmsg+0x7a/0x2a0 [ 123.729000][ T5581] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 123.734311][ T5581] ? inet_send_prepare+0x250/0x250 [ 123.739455][ T5581] ____sys_sendmsg+0x5be/0x8f0 [ 123.744274][ T5581] ? __sys_sendmsg_sock+0x30/0x30 [ 123.749415][ T5581] ? preempt_schedule+0xbc/0xd0 [ 123.754297][ T5581] ? import_iovec+0x6f/0xa0 [ 123.758839][ T5581] ___sys_sendmsg+0x236/0x2e0 [ 123.763559][ T5581] ? __sys_sendmsg+0x290/0x290 [ 123.768411][ T5581] __sys_sendmmsg+0x2ba/0x500 [ 123.773124][ T5581] ? __ia32_sys_sendmsg+0x80/0x80 [ 123.778208][ T5581] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 123.784246][ T5581] ? lock_chain_count+0x20/0x20 [ 123.789146][ T5581] __x64_sys_sendmmsg+0x9c/0xb0 [ 123.794033][ T5581] do_syscall_64+0x4c/0xa0 [ 123.798476][ T5581] ? clear_bhb_loop+0x30/0x80 [ 123.803201][ T5581] ? clear_bhb_loop+0x30/0x80 [ 123.807918][ T5581] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.813925][ T5581] RIP: 0033:0x7ff319c29559 [ 123.818367][ T5581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.837996][ T5581] RSP: 002b:00007ff317e5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 123.846444][ T5581] RAX: ffffffffffffffda RBX: 00007ff319eb0090 RCX: 00007ff319c29559 [ 123.854441][ T5581] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 123.862433][ T5581] RBP: 00007ff319cc0b20 R08: 0000000000000000 R09: 0000000000000000 [ 123.870440][ T5581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.878441][ T5581] R13: 00007ff319eb0128 R14: 00007ff319eb0090 R15: 00007fff200fbe28 [ 123.886468][ T5581] [ 124.071385][ T5571] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.079367][ T5571] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.271763][ T157] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:3: bg 0: block 112: padding at end of block bitmap is not set [ 124.293556][ T157] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 2048 with error 28 [ 124.308157][ T157] EXT4-fs (loop5): This should not happen!! Data will be lost [ 124.308157][ T157] [ 124.319103][ T157] EXT4-fs (loop5): Total free blocks count 0 [ 124.325128][ T157] EXT4-fs (loop5): Free/Dirty block details [ 124.331216][ T157] EXT4-fs (loop5): free_blocks=0 [ 124.336312][ T157] EXT4-fs (loop5): dirty_blocks=8192 [ 124.341616][ T157] EXT4-fs (loop5): Block reservation details [ 124.347846][ T157] EXT4-fs (loop5): i_reserved_data_blocks=512 [ 124.389518][ T157] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 133124 with max blocks 2048 with error 28 [ 124.402775][ T157] EXT4-fs (loop5): This should not happen!! Data will be lost [ 124.402775][ T157] [ 124.662100][ T5571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.716336][ T5571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.061176][ T5571] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.070529][ T5571] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.079741][ T5571] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.089937][ T5571] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.207094][ T5584] device syzkaller0 entered promiscuous mode [ 125.277331][ T5595] device syzkaller0 entered promiscuous mode [ 125.283872][ T5595] tipc: Enabled bearer , priority 0 [ 125.342702][ T5593] tipc: Resetting bearer [ 125.397985][ T5593] tipc: Disabling bearer [ 125.682187][ T5599] loop3: detected capacity change from 0 to 4096 [ 125.888553][ T5599] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.128157][ T5599] FAULT_INJECTION: forcing a failure. [ 127.128157][ T5599] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 127.174887][ T5599] CPU: 0 PID: 5599 Comm: syz.3.285 Not tainted syzkaller #0 [ 127.182228][ T5599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 127.192316][ T5599] Call Trace: [ 127.195625][ T5599] [ 127.198586][ T5599] dump_stack_lvl+0x188/0x250 [ 127.203306][ T5599] ? show_regs_print_info+0x20/0x20 [ 127.208537][ T5599] ? load_image+0x410/0x410 [ 127.213076][ T5599] ? __lock_acquire+0x7d40/0x7d40 [ 127.218155][ T5599] should_fail+0x383/0x4b0 [ 127.222608][ T5599] prepare_alloc_pages+0x1e3/0x5b0 [ 127.227765][ T5599] __alloc_pages+0x11b/0x480 [ 127.232393][ T5599] ? zone_statistics+0x170/0x170 [ 127.237373][ T5599] ? count_memcg_event_mm+0x324/0x370 [ 127.242778][ T5599] ? remove_device_exclusive_entry+0xac0/0xac0 [ 127.248985][ T5599] alloc_pages_vma+0x2bc/0x790 [ 127.253798][ T5599] handle_mm_fault+0x23be/0x4440 [ 127.258788][ T5599] ? get_page+0xe0/0xe0 [ 127.262990][ T5599] ? vmacache_find+0x238/0x590 [ 127.267792][ T5599] ? find_vma+0xd2/0x230 [ 127.272079][ T5599] do_user_addr_fault+0x494/0xc90 [ 127.272980][ T5628] device syzkaller0 entered promiscuous mode [ 127.277149][ T5599] exc_page_fault+0x60/0x100 [ 127.277180][ T5599] asm_exc_page_fault+0x22/0x30 [ 127.277199][ T5599] RIP: 0033:0x7ff319ae0358 [ 127.277218][ T5599] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 127.277233][ T5599] RSP: 002b:00007ff317e7f470 EFLAGS: 00010282 [ 127.277255][ T5599] RAX: 0000000000003004 RBX: 00007ff317e7f530 RCX: 00000000000000f5 [ 127.277269][ T5599] RDX: 00000000000000ff RSI: 0000000000000400 RDI: 00007ff317e7f5d0 [ 127.277283][ T5599] RBP: 0000000000000102 R08: 00007ff30fa60000 R09: 00000000000000f4 [ 127.277296][ T5599] R10: 0000200000000542 R11: 0000000000000234 R12: 0000000000000301 [ 127.324457][ T5628] tipc: Enabled bearer , priority 0 [ 127.330935][ T5599] R13: 00007ff319ce11e0 R14: 0000000000000013 R15: 00007ff317e7f5d0 [ 127.330975][ T5599] [ 127.374587][ T5599] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 127.619080][ T5628] tipc: Resetting bearer [ 127.627914][ T5625] tipc: Resetting bearer [ 127.641812][ T4188] [ 127.644208][ T4188] ====================================================== [ 127.651251][ T4188] WARNING: possible circular locking dependency detected [ 127.658290][ T4188] syzkaller #0 Not tainted [ 127.662727][ T4188] ------------------------------------------------------ [ 127.669766][ T4188] syz-executor/4188 is trying to acquire lock: [ 127.675938][ T4188] ffff88805f9c0268 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 127.684862][ T4188] [ 127.684862][ T4188] but task is already holding lock: [ 127.692245][ T4188] ffff8880636aa060 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x994/0x1190 [ 127.701602][ T4188] [ 127.701602][ T4188] which lock already depends on the new lock. [ 127.701602][ T4188] [ 127.712016][ T4188] [ 127.712016][ T4188] the existing dependency chain (in reverse order) is: [ 127.721030][ T4188] [ 127.721030][ T4188] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 127.728862][ T4188] down_write+0x38/0x60 [ 127.733540][ T4188] ext4_map_blocks+0x8c4/0x1a50 [ 127.738911][ T4188] ext4_getblk+0x176/0x670 [ 127.743888][ T4188] ext4_bread+0x26/0x180 [ 127.743912][ T4188] ext4_quota_write+0x237/0x580 [ 127.743930][ T4188] do_insert_tree+0x1193/0x19c0 [ 127.743945][ T4188] do_insert_tree+0x5c4/0x19c0 [ 127.743959][ T4188] do_insert_tree+0x5c4/0x19c0 [ 127.743973][ T4188] do_insert_tree+0x5c4/0x19c0 [ 127.743987][ T4188] qtree_write_dquot+0x354/0x4a0 [ 127.744002][ T4188] v2_write_dquot+0x108/0x190 [ 127.744019][ T4188] dquot_acquire+0x2d5/0x520 [ 127.744036][ T4188] ext4_acquire_dquot+0x2e3/0x4a0 [ 127.744052][ T4188] dqget+0x713/0xbb0 [ 127.744068][ T4188] __dquot_initialize+0x3a9/0xd00 [ 127.744084][ T4188] ext4_process_orphan+0x4c/0x2e0 [ 127.744100][ T4188] ext4_orphan_cleanup+0xc96/0x14f0 [ 127.744115][ T4188] ext4_fill_super+0x8c65/0x93f0 [ 127.744130][ T4188] mount_bdev+0x28a/0x3c0 [ 127.744146][ T4188] legacy_get_tree+0xe6/0x180 [ 127.744164][ T4188] vfs_get_tree+0x88/0x270 [ 127.744190][ T4188] do_new_mount+0x247/0xa40 [ 127.744207][ T4188] __se_sys_mount+0x2e3/0x3d0 [ 127.744224][ T4188] do_syscall_64+0x4c/0xa0 [ 127.744238][ T4188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.744257][ T4188] [ 127.744257][ T4188] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 127.744288][ T4188] down_read+0x44/0x2e0 [ 127.744304][ T4188] v2_read_dquot+0x4a/0x110 [ 127.744321][ T4188] dquot_acquire+0x152/0x520 [ 127.744337][ T4188] ext4_acquire_dquot+0x2e3/0x4a0 [ 127.744354][ T4188] dqget+0x713/0xbb0 [ 127.744369][ T4188] __dquot_initialize+0x3a9/0xd00 [ 127.744386][ T4188] ext4_process_orphan+0x4c/0x2e0 [ 127.744401][ T4188] ext4_orphan_cleanup+0xc96/0x14f0 [ 127.744417][ T4188] ext4_fill_super+0x8c65/0x93f0 [ 127.744433][ T4188] mount_bdev+0x28a/0x3c0 [ 127.744449][ T4188] legacy_get_tree+0xe6/0x180 [ 127.744465][ T4188] vfs_get_tree+0x88/0x270 [ 127.744482][ T4188] do_new_mount+0x247/0xa40 [ 127.744498][ T4188] __se_sys_mount+0x2e3/0x3d0 [ 127.744514][ T4188] do_syscall_64+0x4c/0xa0 [ 127.744528][ T4188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.744544][ T4188] [ 127.744544][ T4188] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 127.744572][ T4188] __lock_acquire+0x38f7/0x7d40 [ 127.744598][ T4188] lock_acquire+0x19f/0x400 [ 127.744616][ T4188] __mutex_lock_common+0x1e5/0x2400 [ 127.744634][ T4188] mutex_lock_nested+0x17/0x20 [ 127.744651][ T4188] dquot_commit+0x5a/0x410 [ 127.744668][ T4188] ext4_write_dquot+0x1f0/0x360 [ 127.744684][ T4188] mark_all_dquot_dirty+0xf9/0x400 [ 127.744702][ T4188] __dquot_free_space+0x7c3/0xb80 [ 127.744720][ T4188] ext4_free_blocks+0x1b1b/0x24c0 [ 127.744739][ T4188] ext4_ext_remove_space+0x22bd/0x41a0 [ 127.744758][ T4188] ext4_ext_truncate+0x182/0x230 [ 127.744775][ T4188] ext4_truncate+0xa41/0x1190 [ 127.744791][ T4188] ext4_evict_inode+0xb0f/0x1050 [ 127.744807][ T4188] evict+0x4b6/0x8b0 [ 127.744843][ T4188] vfs_rmdir+0x392/0x410 [ 127.744861][ T4188] do_rmdir+0x27f/0x710 [ 127.744877][ T4188] __x64_sys_unlinkat+0xc0/0xe0 [ 127.744894][ T4188] do_syscall_64+0x4c/0xa0 [ 127.744909][ T4188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.744926][ T4188] [ 127.744926][ T4188] other info that might help us debug this: [ 127.744926][ T4188] [ 127.744932][ T4188] Chain exists of: [ 127.744932][ T4188] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 127.744932][ T4188] [ 127.744970][ T4188] Possible unsafe locking scenario: [ 127.744970][ T4188] [ 127.744975][ T4188] CPU0 CPU1 [ 127.744980][ T4188] ---- ---- [ 127.744985][ T4188] lock(&ei->i_data_sem/2); [ 127.745002][ T4188] lock(&s->s_dquot.dqio_sem); [ 127.745017][ T4188] lock(&ei->i_data_sem/2); [ 127.745035][ T4188] lock(&dquot->dq_lock); [ 127.745047][ T4188] [ 127.745047][ T4188] *** DEADLOCK *** [ 127.745047][ T4188] [ 127.745052][ T4188] 5 locks held by syz-executor/4188: [ 127.745062][ T4188] #0: ffff88801c8d8460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 127.745114][ T4188] #1: ffff88805fa997e0 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: do_rmdir+0x1b0/0x710 [ 127.745168][ T4188] #2: ffff88801c8d8650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x41f/0x1050 [ 127.745220][ T4188] #3: ffff8880636aa060 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x994/0x1190 [ 127.745267][ T4188] #4: ffffffff8d2416f8 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 127.745314][ T4188] [ 127.745314][ T4188] stack backtrace: [ 127.745320][ T4188] CPU: 0 PID: 4188 Comm: syz-executor Not tainted syzkaller #0 [ 127.745338][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 127.745349][ T4188] Call Trace: [ 127.745356][ T4188] [ 127.745362][ T4188] dump_stack_lvl+0x188/0x250 [ 127.745384][ T4188] ? load_image+0x410/0x410 [ 127.745403][ T4188] ? show_regs_print_info+0x20/0x20 [ 127.745426][ T4188] ? print_circular_bug+0x12b/0x1a0 [ 127.745445][ T4188] check_noncircular+0x2f8/0x400 [ 127.745464][ T4188] ? print_deadlock_bug+0x5d0/0x5d0 [ 127.745480][ T4188] ? lockdep_lock+0xf1/0x1f0 [ 127.745502][ T4188] ? mark_lock+0x94/0x320 [ 127.745517][ T4188] ? _find_first_zero_bit+0xd1/0xf0 [ 127.745538][ T4188] __lock_acquire+0x38f7/0x7d40 [ 127.745561][ T4188] ? hlock_conflict+0x59/0x1f0 [ 127.745579][ T4188] ? check_path+0x40/0x40 [ 127.745597][ T4188] ? verify_lock_unused+0x140/0x140 [ 127.745615][ T4188] ? check_noncircular+0x186/0x400 [ 127.745634][ T4188] ? print_deadlock_bug+0x5d0/0x5d0 [ 127.745650][ T4188] ? lockdep_lock+0xf1/0x1f0 [ 127.745669][ T4188] ? lockdep_unlock+0x143/0x2e0 [ 127.745691][ T4188] lock_acquire+0x19f/0x400 [ 127.745709][ T4188] ? dquot_commit+0x5a/0x410 [ 127.745729][ T4188] ? __might_sleep+0xf0/0xf0 [ 127.745747][ T4188] ? read_lock_is_recursive+0x10/0x10 [ 127.745771][ T4188] __mutex_lock_common+0x1e5/0x2400 [ 127.745789][ T4188] ? dquot_commit+0x5a/0x410 [ 127.745811][ T4188] ? dquot_commit+0x5a/0x410 [ 127.745830][ T4188] ? __might_sleep+0xf0/0xf0 [ 127.745847][ T4188] ? mutex_lock_io_nested+0x60/0x60 [ 127.745871][ T4188] mutex_lock_nested+0x17/0x20 [ 127.745890][ T4188] dquot_commit+0x5a/0x410 [ 127.745910][ T4188] ext4_write_dquot+0x1f0/0x360 [ 127.745932][ T4188] mark_all_dquot_dirty+0xf9/0x400 [ 127.745953][ T4188] __dquot_free_space+0x7c3/0xb80 [ 127.745980][ T4188] ext4_free_blocks+0x1b1b/0x24c0 [ 127.746010][ T4188] ? ext4_mb_discard_preallocations_should_retry+0x690/0x690 [ 127.746037][ T4188] ? do_raw_read_unlock+0x39/0x70 [ 127.746054][ T4188] ? _raw_read_unlock+0x24/0x40 [ 127.746069][ T4188] ? ext4_is_pending+0x176/0x1c0 [ 127.746091][ T4188] ext4_ext_remove_space+0x22bd/0x41a0 [ 127.746128][ T4188] ? ext4_ext_index_trans_blocks+0xf0/0xf0 [ 127.746148][ T4188] ? ext4_es_remove_extent+0x29f/0x430 [ 127.746179][ T4188] ext4_ext_truncate+0x182/0x230 [ 127.746199][ T4188] ext4_truncate+0xa41/0x1190 [ 127.746217][ T4188] ? __ext4_mark_inode_dirty+0x6c0/0x6c0 [ 127.746237][ T4188] ext4_evict_inode+0xb0f/0x1050 [ 127.746257][ T4188] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 127.746275][ T4188] ? do_raw_spin_unlock+0x11d/0x230 [ 127.746292][ T4188] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 127.746310][ T4188] evict+0x4b6/0x8b0 [ 127.746329][ T4188] ? __rwlock_init+0x140/0x140 [ 127.746347][ T4188] ? proc_nr_inodes+0x320/0x320 [ 127.746367][ T4188] ? do_raw_spin_unlock+0x11d/0x230 [ 127.746385][ T4188] ? _raw_spin_unlock+0x24/0x40 [ 127.746401][ T4188] ? iput+0x6ea/0x880 [ 127.746421][ T4188] vfs_rmdir+0x392/0x410 [ 127.746440][ T4188] do_rmdir+0x27f/0x710 [ 127.746459][ T4188] ? d_delete_notify+0x150/0x150 [ 127.746481][ T4188] ? getname_flags+0x1f9/0x4f0 [ 127.746500][ T4188] __x64_sys_unlinkat+0xc0/0xe0 [ 127.746520][ T4188] do_syscall_64+0x4c/0xa0 [ 127.746536][ T4188] ? clear_bhb_loop+0x30/0x80 [ 127.746552][ T4188] ? clear_bhb_loop+0x30/0x80 [ 127.746570][ T4188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.746588][ T4188] RIP: 0033:0x7ff319c28677 [ 127.746605][ T4188] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.746621][ T4188] RSP: 002b:00007fff200f8eb8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 127.746641][ T4188] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007ff319c28677 [ 127.746654][ T4188] RDX: 0000000000000200 RSI: 00007fff200fa060 RDI: 00000000ffffff9c [ 127.746666][ T4188] RBP: 00007ff319cbff63 R08: 0000000000008550 R09: 00000000ffffffff [ 127.746677][ T4188] R10: 0000000000000100 R11: 0000000000000207 R12: 00007fff200fa060 [ 127.746688][ T4188] R13: 00007ff319cbff63 R14: 000000000001f19d R15: 00007fff200fc220 [ 127.746706][ T4188] [ 127.750559][ T5625] tipc: Disabling bearer [ 128.622106][ T7] tipc: Node number set to 1885791402 [ 128.743808][ T5660] device syzkaller0 entered promiscuous mode [ 132.757541][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.763896][ T1435] ieee802154 phy1 wpan1: encryption failed: -22