last executing test programs: 1m26.150529747s ago: executing program 3 (id=356): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000003c0)={[{@noblock_validity}, {@nodioread_nolock}, {@oldalloc}, {@journal_dev={'journal_dev', 0x3d, 0x1000}}, {@delalloc}, {@nogrpid}]}, 0x1, 0x5c5, &(0x7f0000004b00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000700)='./bus\x00', 0x42, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000cc0)='./file1\x00', 0x2000, 0x1e1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x6, 0x12, r1, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1m25.533169063s ago: executing program 3 (id=361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000680)={@val={0x70}, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x6558, 0x5, 0x0, 0x4}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x7, 0x58, 0x65, 0x0, 0xc0, 0x2f, 0x0, @local, @multicast2}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0xd, 0x1, 0x8, 0x1, 0x0, 0x3, 0x5, 0x8}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x0, {{0xe, 0x2, 0x37, 0x0, 0x1, 0x0, 0x5, 0x3}, 0x2, {0x4000000, 0xda31, 0x1, 0x5, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x72) 1m24.206734747s ago: executing program 3 (id=367): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendmmsg$sock(r0, &(0x7f00000002c0)=[{{&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000380)=[{&(0x7f00000003c0)="fc709c77", 0x4}, {0x0}], 0x2}}], 0x1, 0x20004000) 1m24.107320329s ago: executing program 3 (id=369): r0 = syz_open_dev$video(0x0, 0x1, 0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, 0x0) syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x1e9, &(0x7f00000005c0)="$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") r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0) ptrace(0x10, r4) 1m23.690648409s ago: executing program 3 (id=374): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)="66696c65fc726561646574632f706173737764202f61732f5c7b692f3d302d307865632e617267765b305d3d2273682220657865632e656e76705b2250415448225d3d222f62696e220a", 0x4a) 1m21.746697229s ago: executing program 3 (id=382): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000005f40)='./cgroup.cpu/memory.force_empty\x00', 0x40082, 0x1) write(r0, &(0x7f0000005f80)='0', 0x1) 1m21.333490699s ago: executing program 32 (id=382): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000005f40)='./cgroup.cpu/memory.force_empty\x00', 0x40082, 0x1) write(r0, &(0x7f0000005f80)='0', 0x1) 9.899296829s ago: executing program 4 (id=673): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000280)=0x2) 9.694743614s ago: executing program 4 (id=674): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x55}, 0x2}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000200)="84", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000840) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000640), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) 7.09755582s ago: executing program 4 (id=684): syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x2) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000400)={0x7f, 0x2, 0x3711}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="024476590c252200f800054fa8127e9ad1a226d18dcfb737c69d295b810037ad63dc5cafd75a275ce9dc47d4090000004a30b510f3fd075af3965f4398cb9a6fdc1ec81a1a4d"], 0x24}}, 0x0) connect$bt_rfcomm(r3, &(0x7f0000000500)={0x1f, @any, 0x6}, 0xa) close(r3) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x60000) 5.753533434s ago: executing program 4 (id=686): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)="66696c65fc726561646574632f706173737764202f61732f5c7b692f3d302d307865632e617267765b305d3d2273682220657865632e656e", 0x38) 5.604179688s ago: executing program 1 (id=687): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000e40)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000e80)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1, 0x3, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000002640)='GPL\x00', 0x4, 0xb7, &(0x7f0000002680)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002740), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000002780)={r0, r1}) r3 = syz_open_procfs(0x0, &(0x7f0000002900)='net/kcm\x00') preadv(r3, &(0x7f0000002940)=[{&(0x7f0000002980)=""/191, 0xbf}], 0x1, 0x182, 0xffffffff) 5.485779301s ago: executing program 4 (id=688): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000b40)=0xf) ioctl$TCSBRK(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000b80)=0xc0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000bc0)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000d00)=0xcf) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000d40)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000d80)=0xc0) 5.369115654s ago: executing program 1 (id=690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000002800)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0xb}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x40, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 5.12488801s ago: executing program 1 (id=691): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000280)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000300)="13", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000340)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(r2, 0x84, 0x85, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x7fffffff}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) 4.944623264s ago: executing program 1 (id=692): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x55}, 0x2}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000200)="84", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000840) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000640), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) 3.511474201s ago: executing program 2 (id=699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000002800)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0xb}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x40, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 3.417814913s ago: executing program 2 (id=701): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000300)='7', 0x1) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3e3, &(0x7f0000000000)={0x0, 0xe138, 0x1000, 0x1200001, 0x0, 0x0, 0x0}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 3.332240785s ago: executing program 4 (id=702): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f00000001c0)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@shortname_win95}, {@fat=@showexec}, {@shortname_mixed}, {@numtail}, {@fat=@nfs}, {@utf8no}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@rodir}, {@numtail}, {@numtail}, {@numtail}, {@shortname_win95}, {@shortname_win95}]}, 0x2, 0x28c, &(0x7f0000000440)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000700), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x80002c1, 0x2, 0x0) memfd_create(0x0, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000001080)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) 3.230547088s ago: executing program 0 (id=703): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='ns\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x5, '\x00', 0x0, r3, 0x2, 0x4, 0x2}, 0x50) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000440)='bridge0\x00', 0x10) write(r4, &(0x7f0000000480)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="656e633d6f61657020686173683d626c616b6532732d3232342d67655765726963000200"/78], 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000680)=' hash=', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_cmd={0xe, 0x1, 0x7fff, 0x0, 0x3, 0x3, 0x41, 0x5, 0x8, 0x6, 0x9, 0x4, 0xfff3, 0x80, 0x84, 0x7f, [0x7fffffff, 0x4]}}) 3.105168191s ago: executing program 2 (id=704): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x6534, 0x4) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000180)=[{&(0x7f00000001c0)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x12000, 0x0) 2.144891506s ago: executing program 0 (id=705): syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x2) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000400)={0x7f, 0x2, 0x3711}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="024476590c252200f800054fa8127e9ad1a226d18dcfb737c69d295b810037ad63dc5cafd75a275ce9dc47d4090000004a30b510f3fd075af3965f4398cb9a6fdc1ec81a1a4d"], 0x24}}, 0x0) connect$bt_rfcomm(r3, &(0x7f0000000500)={0x1f, @any, 0x6}, 0xa) close(r3) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x60000) 2.144656755s ago: executing program 2 (id=706): clock_adjtime(0x17, &(0x7f0000000340)={0x4000, 0xf423f, 0x0, 0x9, 0x0, 0x4b, 0x4, 0x0, 0x0, 0xa12, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefe, 0x4, 0x0, 0x0, 0x2, 0x3, 0x80000000000002}) madvise(&(0x7f0000e4f000/0x4000)=nil, 0x4000, 0x10) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x16) bpf$PROG_LOAD(0x5, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000fd8000/0x2000)=nil) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000440), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000700)={0x1, 0x4, 0x8}) pwritev(r4, &(0x7f0000000740)=[{&(0x7f0000000780)="f7", 0x1}], 0x300, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4c004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000005c0)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x11, r5, 0x1, 0xf, 0x6, @broadcast}, 0x14) pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r7, &(0x7f00000006c0)=ANY=[], 0xfffffd8c) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="0a000000040001800400038018000280140001800800011cac14"], 0x34}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) listen(r8, 0x0) 722.631952ms ago: executing program 0 (id=707): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)="66696c65fc726561646574632f706173737764202f61732f5c7b692f3d302d307865632e617267765b305d3d2273682220657865632e656e", 0x38) 714.843071ms ago: executing program 2 (id=708): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000e40)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000e80)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1, 0x3, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000002640)='GPL\x00', 0x4, 0xb7, &(0x7f0000002680)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002740), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000002780)={r0, r1}) r3 = syz_open_procfs(0x0, &(0x7f0000002900)='net/kcm\x00') preadv(r3, &(0x7f0000002940)=[{&(0x7f0000002980)=""/191, 0xbf}], 0x1, 0x182, 0xffffffff) 528.465267ms ago: executing program 0 (id=709): unshare(0x22020600) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) 402.0632ms ago: executing program 2 (id=710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000002800)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0xb}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x40, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 362.86718ms ago: executing program 1 (id=711): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000280)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000300)="13", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000340)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(r2, 0x84, 0x85, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x7fffffff}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) 274.860833ms ago: executing program 0 (id=712): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000b40)=0xf) ioctl$TCSBRK(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000b80)=0xc0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000bc0)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000d00)=0xcf) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000d40)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000d80)=0xc0) 18.753929ms ago: executing program 1 (id=713): mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./sys\x00', 0x149) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/zram0/disksize\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT], 0xf5) 0s ago: executing program 0 (id=714): prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000e00), 0x39, 0x10, &(0x7f0000000e40), 0xfffffffffffffd00}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000ec0)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000f00)=r0) setns(0xc9, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000001c0)=0x474c, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x800001d, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. [ 83.417978][ T5764] cgroup: Unknown subsys name 'net' [ 83.556692][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.412809][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.092891][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.104413][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.112373][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.120596][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.128932][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.136359][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.187279][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.195635][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.204071][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.212691][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.220788][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.228507][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.251293][ T5776] (null): rxe_set_mtu: Set mtu to 1024 [ 88.264629][ T5780] (null): rxe_set_mtu: Set mtu to 1024 [ 88.276246][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.285110][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.294230][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.297927][ T5776] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.365450][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.373682][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.381767][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.390222][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.398499][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.406063][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.453128][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.472547][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.481918][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.521623][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.540757][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.548820][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.561572][ T5787] (null): rxe_set_mtu: Set mtu to 1024 [ 88.602254][ T5787] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.642925][ T5786] (null): rxe_set_mtu: Set mtu to 1024 [ 88.653563][ T5786] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.794184][ T5780] infiniband rxe0: set active [ 88.802349][ T5766] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.809035][ T5780] infiniband rxe0: added rxe_eth0 [ 88.898453][ T5780] RDS/IB: rxe0: added [ 88.903174][ T5780] smc: adding ib device rxe0 with port count 1 [ 88.910033][ T5780] smc: ib device rxe0 port 1 has pnetid [ 88.916952][ T27] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.953917][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.003608][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 89.215415][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.359041][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.366264][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.391838][ T5776] bridge_slave_0: entered allmulticast mode [ 89.409377][ T5776] bridge_slave_0: entered promiscuous mode [ 89.439223][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.446415][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.468830][ T5776] bridge_slave_1: entered allmulticast mode [ 89.489105][ T5776] bridge_slave_1: entered promiscuous mode [ 89.498520][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 89.542883][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.586441][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.612754][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 89.649927][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.851923][ T5776] team0: Port device team_slave_0 added [ 89.943010][ T5776] team0: Port device team_slave_1 added [ 90.001523][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.009975][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.017184][ T5787] bridge_slave_0: entered allmulticast mode [ 90.024941][ T5787] bridge_slave_0: entered promiscuous mode [ 90.040279][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.049135][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.075782][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.089294][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.096297][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.122369][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.133972][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.148407][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.155656][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.163443][ T5779] Bluetooth: hci0: command tx timeout [ 90.197626][ T5787] bridge_slave_1: entered allmulticast mode [ 90.204738][ T5787] bridge_slave_1: entered promiscuous mode [ 90.279738][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.318405][ T5779] Bluetooth: hci1: command tx timeout [ 90.348915][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.372823][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.380896][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.392084][ T5786] bridge_slave_0: entered allmulticast mode [ 90.400091][ T5786] bridge_slave_0: entered promiscuous mode [ 90.428870][ T5776] hsr_slave_0: entered promiscuous mode [ 90.436429][ T5776] hsr_slave_1: entered promiscuous mode [ 90.454400][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.463777][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.471350][ T5786] bridge_slave_1: entered allmulticast mode [ 90.479279][ T5786] bridge_slave_1: entered promiscuous mode [ 90.483995][ T5779] Bluetooth: hci2: command tx timeout [ 90.538537][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.565359][ T5787] team0: Port device team_slave_0 added [ 90.575315][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.609803][ T5787] team0: Port device team_slave_1 added [ 90.637635][ T5779] Bluetooth: hci3: command tx timeout [ 90.671986][ T5786] team0: Port device team_slave_0 added [ 90.709391][ T5786] team0: Port device team_slave_1 added [ 90.729228][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.736245][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.762568][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.777037][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.784277][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.810253][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.874184][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.881275][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.907311][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.951876][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.959140][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.986740][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.110832][ T5787] hsr_slave_0: entered promiscuous mode [ 91.118137][ T5787] hsr_slave_1: entered promiscuous mode [ 91.126438][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.134466][ T5787] Cannot create hsr debugfs directory [ 91.161257][ T5786] hsr_slave_0: entered promiscuous mode [ 91.168182][ T5786] hsr_slave_1: entered promiscuous mode [ 91.176099][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.188707][ T5786] Cannot create hsr debugfs directory [ 91.281718][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 91.415147][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.452836][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.493898][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.507859][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.560395][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.568397][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.575910][ T5780] bridge_slave_0: entered allmulticast mode [ 91.583432][ T5780] bridge_slave_0: entered promiscuous mode [ 91.594958][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.602465][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.610259][ T5780] bridge_slave_1: entered allmulticast mode [ 91.624431][ T5780] bridge_slave_1: entered promiscuous mode [ 91.719691][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.732049][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.786346][ T5780] team0: Port device team_slave_0 added [ 91.805715][ T5780] team0: Port device team_slave_1 added [ 91.858116][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.866734][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.898658][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.913934][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.925985][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.933932][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.960495][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.989250][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.008726][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.028120][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.103357][ T5780] hsr_slave_0: entered promiscuous mode [ 92.110494][ T5780] hsr_slave_1: entered promiscuous mode [ 92.117172][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.125600][ T5780] Cannot create hsr debugfs directory [ 92.196153][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.238247][ T5779] Bluetooth: hci0: command tx timeout [ 92.245356][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.280341][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.317279][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.375619][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.398142][ T5779] Bluetooth: hci1: command tx timeout [ 92.521528][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.550379][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.557827][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.568832][ T5779] Bluetooth: hci2: command tx timeout [ 92.600502][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.607712][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.635176][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.658287][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.672778][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.684206][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.717884][ T5779] Bluetooth: hci3: command tx timeout [ 92.729596][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.783038][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.800087][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.820883][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.828087][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.863161][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.870377][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.890739][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.929610][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.936800][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.946966][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.954166][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.208288][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.264580][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.341018][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.348279][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.383124][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.390382][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.486415][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.534930][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.708785][ T5776] veth0_vlan: entered promiscuous mode [ 93.724069][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.746441][ T5776] veth1_vlan: entered promiscuous mode [ 93.759069][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.900396][ T5787] veth0_vlan: entered promiscuous mode [ 93.933638][ T5776] veth0_macvtap: entered promiscuous mode [ 93.944021][ T5787] veth1_vlan: entered promiscuous mode [ 93.953921][ T5786] veth0_vlan: entered promiscuous mode [ 93.963887][ T5776] veth1_macvtap: entered promiscuous mode [ 94.026342][ T5786] veth1_vlan: entered promiscuous mode [ 94.039822][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.059072][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.081867][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.105055][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.115883][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.124874][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.135606][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.151182][ T5787] veth0_macvtap: entered promiscuous mode [ 94.181036][ T5787] veth1_macvtap: entered promiscuous mode [ 94.216189][ T5786] veth0_macvtap: entered promiscuous mode [ 94.266299][ T5786] veth1_macvtap: entered promiscuous mode [ 94.276255][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.291217][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.303570][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.318866][ T5779] Bluetooth: hci0: command tx timeout [ 94.373584][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.384983][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.397077][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.423151][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.433926][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.445405][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.456264][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.470729][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.488287][ T5779] Bluetooth: hci1: command tx timeout [ 94.499358][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.508429][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.517584][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.526343][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.544141][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.550258][ T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.564590][ T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.574284][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.584343][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.595009][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.607202][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.616760][ T5780] veth0_vlan: entered promiscuous mode [ 94.638495][ T5779] Bluetooth: hci2: command tx timeout [ 94.660038][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.669578][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.679324][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.689836][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.732604][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.741958][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.756029][ T5780] veth1_vlan: entered promiscuous mode [ 94.798428][ T5779] Bluetooth: hci3: command tx timeout [ 94.922483][ T2891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.937777][ T2891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.048701][ T5780] veth0_macvtap: entered promiscuous mode [ 95.066803][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.085610][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.106287][ T2891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.115468][ T5780] veth1_macvtap: entered promiscuous mode [ 95.135320][ T2891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.219039][ T2891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.238130][ T2891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.252553][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.272356][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.286216][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.301797][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.312520][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.324404][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.345373][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.375840][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.394758][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.408303][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.419529][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.429675][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.442685][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.455475][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.473187][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.496673][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.506005][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.522549][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.790900][ T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.828233][ T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.913337][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.951990][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.355475][ T5883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 96.398260][ T5779] Bluetooth: hci0: command tx timeout [ 96.479580][ T5887] syz.1.8[5887]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 96.494782][ T5887] loop1: detected capacity change from 0 to 8 [ 96.514874][ T5887] unable to read inode lookup table [ 96.560823][ T5779] Bluetooth: hci1: command tx timeout [ 96.721027][ T5779] Bluetooth: hci2: command tx timeout [ 96.878725][ T5779] Bluetooth: hci3: command tx timeout [ 97.018565][ T5896] netlink: 52 bytes leftover after parsing attributes in process `syz.1.13'. [ 97.453161][ T5900] nvme nvme0: failed to connect socket: -111 [ 97.486160][ T179] cfg80211: failed to load regulatory.db [ 97.606129][ T5906] loop3: detected capacity change from 0 to 8 [ 97.621918][ T5907] Zero length message leads to an empty skb [ 98.184857][ T5906] SQUASHFS error: zlib decompression failed, data probably corrupt [ 98.240294][ T5906] SQUASHFS error: Failed to read block 0x4e8: -5 [ 98.286079][ T28] audit: type=1800 audit(1792317001.601:2): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.16" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 98.490177][ T5914] loop3: detected capacity change from 0 to 128 [ 98.580458][ T5914] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.634098][ T5918] loop1: detected capacity change from 0 to 512 [ 98.662640][ T5914] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.782783][ T5920] loop0: detected capacity change from 0 to 128 [ 98.829738][ T5920] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.867944][ T5920] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.913143][ T5918] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 98.997685][ T5918] FAT-fs (loop1): Filesystem has been set read-only [ 99.034709][ T5787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.241814][ T5927] process 'syz.3.22' launched './file2' with NULL argv: empty string added [ 99.337595][ T5780] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.356287][ T5928] loop2: detected capacity change from 0 to 1024 [ 99.388225][ T5932] Bluetooth: MGMT ver 1.22 [ 99.423921][ T5927] loop3: detected capacity change from 0 to 128 [ 99.504232][ T5927] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.619637][ T5928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.626187][ T5927] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.976904][ T5787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.146669][ T5944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.23'. [ 100.158480][ T5916] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 100.202700][ T5945] xt_cgroup: no path or classid specified [ 100.517907][ T27] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.619706][ T5950] loop1: detected capacity change from 0 to 128 [ 100.732723][ T5950] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.809083][ T5955] loop0: detected capacity change from 0 to 256 [ 100.898806][ T5950] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.915133][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.071364][ T5776] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.104040][ T5960] loop3: detected capacity change from 0 to 1024 [ 101.136533][ T5960] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.209147][ T5964] ======================================================= [ 101.209147][ T5964] WARNING: The mand mount option has been deprecated and [ 101.209147][ T5964] and is ignored by this kernel. Remove the mand [ 101.209147][ T5964] option from the mount to silence this warning. [ 101.209147][ T5964] ======================================================= [ 101.244029][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.308855][ T5960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.577333][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.670405][ T5981] loop0: detected capacity change from 0 to 128 [ 101.732295][ T5981] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.756816][ T5974] Invalid ELF header magic: != ELF [ 101.804462][ T5981] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 102.144507][ T5780] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.164078][ T5991] loop3: detected capacity change from 0 to 1024 [ 102.244311][ T5991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.670281][ T6002] netlink: 20 bytes leftover after parsing attributes in process `syz.3.39'. [ 103.721290][ T6003] xt_cgroup: no path or classid specified [ 104.006280][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.277371][ C0] sched: RT throttling activated [ 104.285372][ T6010] loop1: detected capacity change from 0 to 256 [ 105.206193][ T6019] loop0: detected capacity change from 0 to 128 [ 105.368178][ T6019] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.460129][ T6019] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.759669][ T5780] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.232935][ T6035] loop3: detected capacity change from 0 to 128 [ 106.280685][ T6034] netlink: 52 bytes leftover after parsing attributes in process `syz.2.48'. [ 106.461069][ T6035] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.527102][ T6035] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.234902][ T6035] fscrypt (loop3, inode 12): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 107.868429][ T5787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.265953][ T6061] loop0: detected capacity change from 0 to 1024 [ 108.331893][ T6061] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.647162][ T6061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.183310][ T6071] loop2: detected capacity change from 0 to 512 [ 109.307195][ T6071] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.411845][ T6071] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.58: bad orphan inode 32 [ 109.426077][ T6071] EXT4-fs (loop2): Remounting filesystem read-only [ 109.432902][ T6071] ext4_test_bit(bit=31, block=2) = 0 [ 109.447014][ T6071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.473527][ T6071] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.837137][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.036681][ T6078] 9pnet_fd: Insufficient options for proto=fd [ 112.123910][ T6115] 9pnet_fd: Insufficient options for proto=fd [ 112.402666][ T6126] loop0: detected capacity change from 0 to 256 [ 112.693069][ T6132] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 114.934623][ T6143] loop1: detected capacity change from 0 to 512 [ 114.948494][ T6143] EXT4-fs: Ignoring removed nobh option [ 115.044532][ T6143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.133398][ T6143] ext4 filesystem being mounted at /25/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.397138][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.414834][ T6152] 9pnet_fd: Insufficient options for proto=fd [ 115.975657][ T6163] loop0: detected capacity change from 0 to 512 [ 116.333052][ T6163] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 116.423679][ T6178] loop3: detected capacity change from 0 to 512 [ 116.519896][ T6178] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.562483][ T6163] FAT-fs (loop0): Filesystem has been set read-only [ 116.650327][ T6178] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.99: bad orphan inode 32 [ 116.661476][ T6178] EXT4-fs (loop3): Remounting filesystem read-only [ 116.668223][ T6178] ext4_test_bit(bit=31, block=2) = 0 [ 116.681439][ T6178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.702790][ T6178] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.539033][ T6183] syz.1.102 uses obsolete (PF_INET,SOCK_PACKET) [ 117.699692][ T6185] loop3: detected capacity change from 0 to 128 [ 117.818827][ T6185] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.959704][ T6185] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.003195][ T6194] 9pnet_fd: Insufficient options for proto=fd [ 118.171922][ T5787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.683771][ T6208] loop2: detected capacity change from 0 to 512 [ 120.160336][ T6221] warning: `syz.1.118' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 120.534567][ T6208] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 120.557441][ T6208] FAT-fs (loop2): Filesystem has been set read-only [ 124.463492][ T6264] netlink: 17 bytes leftover after parsing attributes in process `syz.1.136'. [ 129.123893][ T6322] FAULT_INJECTION: forcing a failure. [ 129.123893][ T6322] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 129.149678][ T6322] CPU: 1 PID: 6322 Comm: syz.0.156 Not tainted syzkaller #0 [ 129.157065][ T6322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.167199][ T6322] Call Trace: [ 129.170553][ T6322] [ 129.173544][ T6322] dump_stack_lvl+0x18c/0x250 [ 129.178296][ T6322] ? show_regs_print_info+0x20/0x20 [ 129.183562][ T6322] ? load_image+0x420/0x420 [ 129.188144][ T6322] ? __might_fault+0xaa/0x120 [ 129.192884][ T6322] ? __lock_acquire+0x7eb0/0x7eb0 [ 129.197971][ T6322] ? set_fd_set+0x4a/0x90 [ 129.202377][ T6322] should_fail_ex+0x394/0x4c0 [ 129.207125][ T6322] _copy_to_user+0x2f/0xa0 [ 129.211614][ T6322] put_timespec64+0xc9/0x130 [ 129.216274][ T6322] ? get_timespec64+0x1b0/0x1b0 [ 129.221240][ T6322] poll_select_finish+0x472/0x5e0 [ 129.226341][ T6322] ? pollwake+0x210/0x210 [ 129.230762][ T6322] ? sigprocmask+0x190/0x190 [ 129.235425][ T6322] ? put_timespec64+0xd9/0x130 [ 129.240268][ T6322] __se_sys_pselect6+0x289/0x340 [ 129.245308][ T6322] ? __x64_sys_pselect6+0xf0/0xf0 [ 129.250415][ T6322] ? __x64_sys_pselect6+0x21/0xf0 [ 129.255522][ T6322] do_syscall_64+0x55/0xb0 [ 129.259996][ T6322] ? clear_bhb_loop+0x40/0x90 [ 129.264737][ T6322] ? clear_bhb_loop+0x40/0x90 [ 129.269480][ T6322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.275464][ T6322] RIP: 0033:0x7ff0f1f9e559 [ 129.279937][ T6322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.299658][ T6322] RSP: 002b:00007ff0f2e87028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 129.308138][ T6322] RAX: ffffffffffffffda RBX: 00007ff0f2225fa0 RCX: 00007ff0f1f9e559 [ 129.316194][ T6322] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.324228][ T6322] RBP: 00007ff0f2035ab8 R08: 0000200000000280 R09: 0000000000000000 [ 129.332261][ T6322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.340297][ T6322] R13: 00007ff0f2226038 R14: 00007ff0f2225fa0 R15: 00007ffdb7e89c38 [ 129.348359][ T6322] [ 130.458725][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 133.122942][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.131468][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.213089][ T6365] syzkaller0: entered promiscuous mode [ 133.233947][ T6365] syzkaller0: entered allmulticast mode [ 134.132368][ T6377] 9pnet_fd: Insufficient options for proto=fd [ 134.760530][ T5779] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 134.770706][ T5779] CPU: 1 PID: 5779 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 134.778411][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 134.788522][ T5779] Workqueue: hci2 hci_rx_work [ 134.793336][ T5779] Call Trace: [ 134.796661][ T5779] [ 134.799646][ T5779] dump_stack_lvl+0x18c/0x250 [ 134.804384][ T5779] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 134.810081][ T5779] ? show_regs_print_info+0x20/0x20 [ 134.815332][ T5779] ? load_image+0x420/0x420 [ 134.819903][ T5779] ? sysfs_create_dir_ns+0x243/0x2a0 [ 134.825267][ T5779] sysfs_create_dir_ns+0x26e/0x2a0 [ 134.830433][ T5779] ? __lock_acquire+0x7eb0/0x7eb0 [ 134.835524][ T5779] ? sysfs_warn_dup+0xa0/0xa0 [ 134.840261][ T5779] ? do_raw_spin_unlock+0x121/0x230 [ 134.845542][ T5779] kobject_add_internal+0x617/0xc90 [ 134.850805][ T5779] kobject_add+0x164/0x240 [ 134.855274][ T5779] ? preempt_schedule_thunk+0x1a/0x30 [ 134.860718][ T5779] ? kobject_init+0x1d0/0x1d0 [ 134.865466][ T5779] ? get_device_parent+0x366/0x390 [ 134.870678][ T5779] device_add+0x3fa/0xc40 [ 134.875078][ T5779] hci_conn_add_sysfs+0xd5/0x1e0 [ 134.880127][ T5779] le_conn_complete_evt+0xe9a/0x1480 [ 134.885504][ T5779] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 134.891807][ T5779] ? lockdep_hardirqs_on+0x98/0x150 [ 134.897064][ T5779] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 134.902762][ T5779] ? skb_pull_data+0xf0/0x1f0 [ 134.907542][ T5779] hci_le_conn_complete_evt+0x187/0x440 [ 134.913256][ T5779] ? hci_remote_host_features_evt+0x150/0x150 [ 134.919383][ T5779] hci_event_packet+0x7b4/0x1280 [ 134.924406][ T5779] ? __lock_acquire+0x7eb0/0x7eb0 [ 134.929520][ T5779] ? lock_chain_count+0x20/0x20 [ 134.934465][ T5779] ? bis_list+0x290/0x290 [ 134.938855][ T5779] ? kcov_remote_start+0x513/0x810 [ 134.944025][ T5779] ? lockdep_hardirqs_on+0x98/0x150 [ 134.949304][ T5779] ? hci_send_to_monitor+0xd7/0x4f0 [ 134.954587][ T5779] hci_rx_work+0x43a/0xd60 [ 134.959084][ T5779] ? process_scheduled_works+0x975/0x1600 [ 134.964863][ T5779] process_scheduled_works+0xa60/0x1600 [ 134.970508][ T5779] ? worker_attach_to_pool+0x370/0x370 [ 134.976043][ T5779] ? assign_work+0x3cc/0x5d0 [ 134.980711][ T5779] worker_thread+0xa5e/0xfe0 [ 134.985394][ T5779] kthread+0x2fa/0x390 [ 134.989522][ T5779] ? pr_cont_work+0x550/0x550 [ 134.994267][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 134.998910][ T5779] ret_from_fork+0x48/0x80 [ 135.003569][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 135.008222][ T5779] ret_from_fork_asm+0x11/0x20 [ 135.013064][ T5779] [ 135.118800][ T5779] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 135.221330][ T5779] Bluetooth: hci2: failed to register connection device [ 135.549823][ T6397] loop0: detected capacity change from 0 to 32768 [ 136.832809][ T6403] syzkaller0: entered promiscuous mode [ 136.879236][ T6403] syzkaller0: entered allmulticast mode [ 137.887006][ T6397] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR [ 138.128956][ T6397] device-mapper: table: 248:0: thin-pool: Error creating pool's kcopyd client (-ENOMEM) [ 138.172570][ T6397] device-mapper: ioctl: error adding target to table [ 139.474273][ T6435] syzkaller0: entered promiscuous mode [ 139.507673][ T6435] syzkaller0: entered allmulticast mode [ 142.033632][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 143.787982][ T6467] syzkaller0: entered promiscuous mode [ 143.793535][ T6467] syzkaller0: entered allmulticast mode [ 144.388970][ T6472] 9pnet_fd: Insufficient options for proto=fd [ 144.675126][ T6480] FAULT_INJECTION: forcing a failure. [ 144.675126][ T6480] name failslab, interval 1, probability 0, space 0, times 1 [ 144.720207][ T6480] CPU: 0 PID: 6480 Comm: syz.0.213 Not tainted syzkaller #0 [ 144.727632][ T6480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 144.737826][ T6480] Call Trace: [ 144.741148][ T6480] [ 144.744132][ T6480] dump_stack_lvl+0x18c/0x250 [ 144.748866][ T6480] ? show_regs_print_info+0x20/0x20 [ 144.754135][ T6480] ? load_image+0x420/0x420 [ 144.758705][ T6480] ? __might_sleep+0xe0/0xe0 [ 144.763369][ T6480] ? __lock_acquire+0x7eb0/0x7eb0 [ 144.768469][ T6480] should_fail_ex+0x394/0x4c0 [ 144.773225][ T6480] should_failslab+0x9/0x20 [ 144.777788][ T6480] slab_pre_alloc_hook+0x59/0x300 [ 144.782865][ T6480] ? aa_path_link+0xf80/0xf80 [ 144.787595][ T6480] ? kernfs_fop_read_iter+0x171/0x680 [ 144.793022][ T6480] ? kernfs_fop_read_iter+0x171/0x680 [ 144.798451][ T6480] __kmem_cache_alloc_node+0x53/0x250 [ 144.803901][ T6480] ? kernfs_fop_read_iter+0x171/0x680 [ 144.809337][ T6480] __kmalloc+0xa7/0x240 [ 144.813559][ T6480] kernfs_fop_read_iter+0x171/0x680 [ 144.818820][ T6480] vfs_read+0x486/0x990 [ 144.823053][ T6480] ? kernel_read+0x1e0/0x1e0 [ 144.827761][ T6480] ? __fget_files+0x3fc/0x460 [ 144.832519][ T6480] ? __fdget_pos+0x2a3/0x330 [ 144.837274][ T6480] ? ksys_read+0x74/0x260 [ 144.841672][ T6480] ksys_read+0x151/0x260 [ 144.845985][ T6480] ? vfs_write+0x9a0/0x9a0 [ 144.850468][ T6480] ? lockdep_hardirqs_on+0x98/0x150 [ 144.855744][ T6480] do_syscall_64+0x55/0xb0 [ 144.860261][ T6480] ? clear_bhb_loop+0x40/0x90 [ 144.865001][ T6480] ? clear_bhb_loop+0x40/0x90 [ 144.869745][ T6480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.875726][ T6480] RIP: 0033:0x7ff0f1f5ed8e [ 144.880251][ T6480] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 144.899954][ T6480] RSP: 002b:00007ff0f2e86f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.908430][ T6480] RAX: ffffffffffffffda RBX: 00007ff0f2e876c0 RCX: 00007ff0f1f5ed8e [ 144.916460][ T6480] RDX: 00000000009bf000 RSI: 00007ff0f23945a0 RDI: 0000000000000005 [ 144.924489][ T6480] RBP: 00007ff0f23535a0 R08: 0000000000000000 R09: 0000000000000000 [ 144.932508][ T6480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a00000 [ 144.940540][ T6480] R13: 0000000000041000 R14: 00007ff0f2225fa0 R15: 00007ffdb7e89c38 [ 144.948583][ T6480] [ 145.050541][ T6482] gre0: entered promiscuous mode [ 145.061281][ T6482] gre0: entered allmulticast mode [ 146.271129][ T6500] overlayfs: failed to resolve 'work': -2 [ 146.438434][ T6508] 9pnet_fd: Insufficient options for proto=fd [ 147.495917][ T6529] overlayfs: failed to resolve 'upper': -2 [ 147.592197][ T6477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.977125][ T6532] gre0: entered promiscuous mode [ 147.991912][ T6532] gre0: entered allmulticast mode [ 148.078870][ T6538] 9pnet_fd: Insufficient options for proto=fd [ 149.280197][ T6550] overlayfs: failed to resolve 'upper': -2 [ 149.401323][ T6556] netlink: 'syz.2.241': attribute type 83 has an invalid length. [ 149.756024][ T6570] loop0: detected capacity change from 0 to 32768 [ 151.388360][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 151.394991][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 153.504291][ T6634] loop2: detected capacity change from 0 to 256 [ 154.542472][ T6640] FAULT_INJECTION: forcing a failure. [ 154.542472][ T6640] name failslab, interval 1, probability 0, space 0, times 0 [ 154.555470][ T6640] CPU: 0 PID: 6640 Comm: syz.3.275 Not tainted syzkaller #0 [ 154.562830][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 154.572938][ T6640] Call Trace: [ 154.576257][ T6640] [ 154.579225][ T6640] dump_stack_lvl+0x18c/0x250 [ 154.583987][ T6640] ? show_regs_print_info+0x20/0x20 [ 154.589237][ T6640] ? load_image+0x420/0x420 [ 154.593806][ T6640] ? __might_sleep+0xe0/0xe0 [ 154.598480][ T6640] ? __lock_acquire+0x7eb0/0x7eb0 [ 154.603558][ T6640] should_fail_ex+0x394/0x4c0 [ 154.608286][ T6640] should_failslab+0x9/0x20 [ 154.612833][ T6640] slab_pre_alloc_hook+0x59/0x300 [ 154.617899][ T6640] ? aa_path_link+0xf80/0xf80 [ 154.622811][ T6640] ? kernfs_fop_read_iter+0x171/0x680 [ 154.628236][ T6640] ? kernfs_fop_read_iter+0x171/0x680 [ 154.633642][ T6640] __kmem_cache_alloc_node+0x53/0x250 [ 154.639158][ T6640] ? kernfs_fop_read_iter+0x171/0x680 [ 154.644566][ T6640] __kmalloc+0xa7/0x240 [ 154.648764][ T6640] kernfs_fop_read_iter+0x171/0x680 [ 154.654004][ T6640] vfs_read+0x486/0x990 [ 154.658208][ T6640] ? kernel_read+0x1e0/0x1e0 [ 154.662905][ T6640] ? __fget_files+0x3fc/0x460 [ 154.667636][ T6640] ? __fdget_pos+0x2a3/0x330 [ 154.672284][ T6640] ? ksys_read+0x74/0x260 [ 154.676677][ T6640] ksys_read+0x151/0x260 [ 154.680967][ T6640] ? vfs_write+0x9a0/0x9a0 [ 154.685431][ T6640] ? lockdep_hardirqs_on+0x98/0x150 [ 154.690709][ T6640] do_syscall_64+0x55/0xb0 [ 154.695180][ T6640] ? clear_bhb_loop+0x40/0x90 [ 154.699891][ T6640] ? clear_bhb_loop+0x40/0x90 [ 154.704606][ T6640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.710542][ T6640] RIP: 0033:0x7fb8ead5ed8e [ 154.714990][ T6640] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 154.734633][ T6640] RSP: 002b:00007fb8ebcf7f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 154.743100][ T6640] RAX: ffffffffffffffda RBX: 00007fb8ebcf86c0 RCX: 00007fb8ead5ed8e [ 154.751111][ T6640] RDX: 00000000009b8000 RSI: 00007fb8eb19b5a0 RDI: 0000000000000005 [ 154.759122][ T6640] RBP: 00007fb8eb1535a0 R08: 0000000000000000 R09: 0000000000000000 [ 154.767124][ T6640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a00000 [ 154.775128][ T6640] R13: 0000000000048000 R14: 00007fb8eb025fa0 R15: 00007ffc9e044ad8 [ 154.783147][ T6640] [ 157.247637][ T5779] Bluetooth: hci1: link tx timeout [ 157.253387][ T5779] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 157.462725][ T6686] FAULT_INJECTION: forcing a failure. [ 157.462725][ T6686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.533234][ T6686] CPU: 1 PID: 6686 Comm: syz.2.291 Not tainted syzkaller #0 [ 157.540617][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 157.550719][ T6686] Call Trace: [ 157.554046][ T6686] [ 157.557021][ T6686] dump_stack_lvl+0x18c/0x250 [ 157.561754][ T6686] ? show_regs_print_info+0x20/0x20 [ 157.567006][ T6686] ? load_image+0x420/0x420 [ 157.571567][ T6686] ? __might_fault+0xaa/0x120 [ 157.576295][ T6686] ? __lock_acquire+0x7eb0/0x7eb0 [ 157.581380][ T6686] should_fail_ex+0x394/0x4c0 [ 157.586125][ T6686] _copy_to_iter+0x1ce/0x1110 [ 157.590903][ T6686] ? __virt_addr_valid+0x10c/0x380 [ 157.596184][ T6686] ? iov_iter_init+0x1e0/0x1e0 [ 157.601010][ T6686] ? __virt_addr_valid+0x10c/0x380 [ 157.606198][ T6686] ? __virt_addr_valid+0x10c/0x380 [ 157.611370][ T6686] ? __virt_addr_valid+0x10c/0x380 [ 157.616541][ T6686] ? __check_object_size+0x4fc/0xa40 [ 157.621903][ T6686] kernfs_fop_read_iter+0x4be/0x680 [ 157.627167][ T6686] vfs_read+0x486/0x990 [ 157.631385][ T6686] ? kernel_read+0x1e0/0x1e0 [ 157.636047][ T6686] ? __fget_files+0x3fc/0x460 [ 157.640801][ T6686] ? __fdget_pos+0x2a3/0x330 [ 157.645447][ T6686] ? ksys_read+0x74/0x260 [ 157.649837][ T6686] ksys_read+0x151/0x260 [ 157.654154][ T6686] ? vfs_write+0x9a0/0x9a0 [ 157.658635][ T6686] ? lockdep_hardirqs_on+0x98/0x150 [ 157.663891][ T6686] do_syscall_64+0x55/0xb0 [ 157.668351][ T6686] ? clear_bhb_loop+0x40/0x90 [ 157.673076][ T6686] ? clear_bhb_loop+0x40/0x90 [ 157.677807][ T6686] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.683783][ T6686] RIP: 0033:0x7fd566f5ed8e [ 157.688244][ T6686] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 157.707901][ T6686] RSP: 002b:00007fd567ee1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.716370][ T6686] RAX: ffffffffffffffda RBX: 00007fd567ee26c0 RCX: 00007fd566f5ed8e [ 157.724387][ T6686] RDX: 00000000009bd000 RSI: 00007fd5673965a0 RDI: 0000000000000005 [ 157.732405][ T6686] RBP: 00007fd5673535a0 R08: 0000000000000000 R09: 0000000000000000 [ 157.740418][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a00000 [ 157.748431][ T6686] R13: 0000000000043000 R14: 00007fd567225fa0 R15: 00007ffca58f7e38 [ 157.756473][ T6686] [ 159.363529][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 161.227810][ T6738] FAULT_INJECTION: forcing a failure. [ 161.227810][ T6738] name failslab, interval 1, probability 0, space 0, times 0 [ 161.334515][ T6738] CPU: 1 PID: 6738 Comm: syz.0.310 Not tainted syzkaller #0 [ 161.341896][ T6738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 161.352008][ T6738] Call Trace: [ 161.355330][ T6738] [ 161.358329][ T6738] dump_stack_lvl+0x18c/0x250 [ 161.363071][ T6738] ? show_regs_print_info+0x20/0x20 [ 161.368324][ T6738] ? load_image+0x420/0x420 [ 161.372927][ T6738] ? __might_sleep+0xe0/0xe0 [ 161.377626][ T6738] ? __lock_acquire+0x7eb0/0x7eb0 [ 161.382718][ T6738] should_fail_ex+0x394/0x4c0 [ 161.387467][ T6738] should_failslab+0x9/0x20 [ 161.392025][ T6738] slab_pre_alloc_hook+0x59/0x300 [ 161.397104][ T6738] ? security_prepare_creds+0x4b/0x130 [ 161.402612][ T6738] ? security_prepare_creds+0x4b/0x130 [ 161.408235][ T6738] __kmem_cache_alloc_node+0x53/0x250 [ 161.413677][ T6738] ? security_prepare_creds+0x4b/0x130 [ 161.419198][ T6738] __kmalloc+0xa7/0x240 [ 161.423423][ T6738] security_prepare_creds+0x4b/0x130 [ 161.428763][ T6738] prepare_creds+0x427/0x5d0 [ 161.433541][ T6738] lookup_user_key+0x316/0x1140 [ 161.438455][ T6738] ? lookup_user_key_possessed+0x40/0x40 [ 161.444143][ T6738] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 161.450191][ T6738] ? __might_fault+0xaa/0x120 [ 161.454922][ T6738] ? _copy_from_user+0xa5/0xe0 [ 161.459741][ T6738] __se_sys_add_key+0x315/0x410 [ 161.464659][ T6738] ? __x64_sys_add_key+0xc0/0xc0 [ 161.469664][ T6738] ? lockdep_hardirqs_on+0x98/0x150 [ 161.474910][ T6738] ? __x64_sys_add_key+0x20/0xc0 [ 161.479942][ T6738] do_syscall_64+0x55/0xb0 [ 161.484407][ T6738] ? clear_bhb_loop+0x40/0x90 [ 161.489139][ T6738] ? clear_bhb_loop+0x40/0x90 [ 161.493872][ T6738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.499826][ T6738] RIP: 0033:0x7ff0f1f9e559 [ 161.504288][ T6738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.523952][ T6738] RSP: 002b:00007ff0f2e87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 161.532423][ T6738] RAX: ffffffffffffffda RBX: 00007ff0f2225fa0 RCX: 00007ff0f1f9e559 [ 161.540535][ T6738] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000 [ 161.548556][ T6738] RBP: 00007ff0f2035ab8 R08: fffffffffffffffe R09: 0000000000000000 [ 161.556571][ T6738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.564614][ T6738] R13: 00007ff0f2226038 R14: 00007ff0f2225fa0 R15: 00007ffdb7e89c38 [ 161.572654][ T6738] [ 161.863629][ T6742] overlayfs: failed to resolve 'lower2': -2 [ 163.717743][ T6764] syzkaller0: entered promiscuous mode [ 163.733024][ T6764] syzkaller0: entered allmulticast mode [ 163.814454][ T6766] FAULT_INJECTION: forcing a failure. [ 163.814454][ T6766] name failslab, interval 1, probability 0, space 0, times 0 [ 163.907135][ T6766] CPU: 1 PID: 6766 Comm: syz.1.320 Not tainted syzkaller #0 [ 163.914617][ T6766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 163.924738][ T6766] Call Trace: [ 163.928074][ T6766] [ 163.931058][ T6766] dump_stack_lvl+0x18c/0x250 [ 163.935813][ T6766] ? show_regs_print_info+0x20/0x20 [ 163.941085][ T6766] ? load_image+0x420/0x420 [ 163.945678][ T6766] ? unwind_get_return_address+0x91/0xc0 [ 163.951390][ T6766] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 163.957374][ T6766] should_fail_ex+0x394/0x4c0 [ 163.962148][ T6766] should_failslab+0x9/0x20 [ 163.966731][ T6766] slab_pre_alloc_hook+0x59/0x300 [ 163.971802][ T6766] ? stack_trace_snprint+0xf0/0xf0 [ 163.976971][ T6766] kmem_cache_alloc_node+0x5e/0x310 [ 163.982227][ T6766] ? __alloc_skb+0x103/0x2c0 [ 163.986875][ T6766] __alloc_skb+0x103/0x2c0 [ 163.991344][ T6766] sctp_ulpevent_make_sender_dry_event+0x2f/0x7e0 [ 163.997826][ T6766] ? sctp_wait_for_connect+0x38d/0x6d0 [ 164.003329][ T6766] ? sctp_sendmsg_to_asoc+0x1385/0x17f0 [ 164.008935][ T6766] ? sctp_sendmsg+0x1afa/0x27b0 [ 164.013837][ T6766] ? ____sys_sendmsg+0x61b/0x980 [ 164.018826][ T6766] ? ___sys_sendmsg+0x2a6/0x360 [ 164.023719][ T6766] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 164.028786][ T6766] ? do_syscall_64+0x55/0xb0 [ 164.033417][ T6766] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.039564][ T6766] sctp_sf_do_no_pending_tsn+0x26/0x100 [ 164.045197][ T6766] sctp_do_sm+0x23b/0x5b70 [ 164.049676][ T6766] ? sctp_pname+0x60/0x60 [ 164.054056][ T6766] ? mark_lock+0x94/0x320 [ 164.058444][ T6766] ? sctp_generate_fwdtsn+0x8fb/0xa40 [ 164.063897][ T6766] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 164.069880][ T6766] ? rcu_is_watching+0x15/0xb0 [ 164.074694][ T6766] sctp_do_sm+0x1bbe/0x5b70 [ 164.079259][ T6766] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 164.085224][ T6766] ? skb_pull+0xb9/0x1c0 [ 164.089507][ T6766] ? sctp_inq_pop+0xc32/0x1030 [ 164.094316][ T6766] ? read_tsc+0x9/0x20 [ 164.098692][ T6766] sctp_assoc_bh_rcv+0x3f2/0x630 [ 164.103675][ T6766] sctp_backlog_rcv+0x15c/0x360 [ 164.108572][ T6766] __release_sock+0x1ea/0x460 [ 164.113298][ T6766] release_sock+0x5f/0x1c0 [ 164.117751][ T6766] sctp_wait_for_connect+0x38d/0x6d0 [ 164.123080][ T6766] ? sctp_connect_add_peer+0x5a0/0x5a0 [ 164.128570][ T6766] ? wake_bit_function+0x200/0x200 [ 164.133717][ T6766] ? sctp_datamsg_put+0x4b3/0x510 [ 164.138796][ T6766] ? sctp_primitive_SEND+0x98/0xc0 [ 164.143955][ T6766] sctp_sendmsg_to_asoc+0x1385/0x17f0 [ 164.149391][ T6766] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 164.155265][ T6766] ? __sctp_connect+0xd80/0xd80 [ 164.160164][ T6766] ? __local_bh_enable_ip+0x13a/0x1c0 [ 164.165574][ T6766] ? _local_bh_enable+0xa0/0xa0 [ 164.170455][ T6766] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 164.176301][ T6766] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 164.182239][ T6766] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 164.187824][ T6766] ? security_sctp_bind_connect+0x89/0xb0 [ 164.193593][ T6766] sctp_sendmsg+0x1afa/0x27b0 [ 164.198312][ T6766] ? sctp_getsockopt+0xb60/0xb60 [ 164.203286][ T6766] ? aa_af_perm+0x330/0x330 [ 164.207845][ T6766] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 164.214390][ T6766] ? sock_rps_record_flow+0x19/0x3f0 [ 164.219741][ T6766] ? inet_sendmsg+0x7e/0x2a0 [ 164.224364][ T6766] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 164.229698][ T6766] ? inet_send_prepare+0x250/0x250 [ 164.234844][ T6766] ____sys_sendmsg+0x61b/0x980 [ 164.239652][ T6766] ? __asan_memset+0x22/0x40 [ 164.244287][ T6766] ? __sys_sendmsg_sock+0x30/0x30 [ 164.249361][ T6766] ? __import_iovec+0x5f2/0x850 [ 164.254285][ T6766] ? import_iovec+0x73/0xa0 [ 164.258943][ T6766] ___sys_sendmsg+0x2a6/0x360 [ 164.263683][ T6766] ? __sys_sendmsg+0x2b0/0x2b0 [ 164.268542][ T6766] __se_sys_sendmsg+0x1d0/0x2c0 [ 164.273436][ T6766] ? __x64_sys_sendmsg+0x80/0x80 [ 164.278433][ T6766] ? lockdep_hardirqs_on+0x98/0x150 [ 164.283671][ T6766] do_syscall_64+0x55/0xb0 [ 164.288133][ T6766] ? clear_bhb_loop+0x40/0x90 [ 164.292841][ T6766] ? clear_bhb_loop+0x40/0x90 [ 164.297552][ T6766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.303487][ T6766] RIP: 0033:0x7f7fe8d9e559 [ 164.307951][ T6766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.327586][ T6766] RSP: 002b:00007f7fe9c1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.336041][ T6766] RAX: ffffffffffffffda RBX: 00007f7fe9025fa0 RCX: 00007f7fe8d9e559 [ 164.344045][ T6766] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000005 [ 164.352067][ T6766] RBP: 00007f7fe8e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 164.360078][ T6766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.368091][ T6766] R13: 00007f7fe9026038 R14: 00007f7fe9025fa0 R15: 00007ffc29438d88 [ 164.376114][ T6766] [ 164.684043][ T6774] overlayfs: failed to resolve 'lower1': -2 [ 168.969850][ T5779] Bluetooth: hci0: link tx timeout [ 168.975525][ T5779] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.027152][ T6803] syzkaller0: entered promiscuous mode [ 169.058694][ T6803] syzkaller0: entered allmulticast mode [ 169.608835][ T6810] overlayfs: failed to resolve 'lower1': -2 [ 171.049014][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 171.528350][ T6832] syzkaller0: entered promiscuous mode [ 171.533913][ T6832] syzkaller0: entered allmulticast mode [ 171.744855][ T6838] overlayfs: failed to resolve 'lower1': -2 [ 173.112961][ T6864] loop3: detected capacity change from 0 to 1024 [ 173.133066][ T6864] EXT4-fs: Ignoring removed oldalloc option [ 173.201613][ T6864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 173.214089][ T6864] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.236327][ T28] audit: type=1804 audit(1792317076.551:3): pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.356" name="/newroot/88/file1/file1" dev="loop3" ino=15 res=1 errno=0 [ 173.293364][ T6864] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.356: bg 0: block 112: padding at end of block bitmap is not set [ 173.388401][ T6864] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 173.437429][ T6864] EXT4-fs (loop3): This should not happen!! Data will be lost [ 173.437429][ T6864] [ 173.460924][ T6864] EXT4-fs (loop3): Total free blocks count 0 [ 173.480452][ T6864] EXT4-fs (loop3): Free/Dirty block details [ 173.495183][ T6864] EXT4-fs (loop3): free_blocks=0 [ 173.507719][ T6864] EXT4-fs (loop3): dirty_blocks=64 [ 173.517812][ T6864] EXT4-fs (loop3): Block reservation details [ 173.527812][ T6864] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 173.632680][ T6873] overlayfs: failed to resolve 'lower1': -2 [ 173.683730][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 175.115161][ T6901] loop3: detected capacity change from 0 to 8 [ 175.212960][ T6905] overlayfs: failed to resolve 'lower1': -2 [ 175.416548][ T5787] SQUASHFS error: Unable to read directory block [631:72] [ 175.481953][ T5787] SQUASHFS error: Unable to read inode 0xe3 [ 175.608399][ T5787] SQUASHFS error: Unable to read inode 0xe3 [ 177.034588][ T6930] FAULT_INJECTION: forcing a failure. [ 177.034588][ T6930] name failslab, interval 1, probability 0, space 0, times 0 [ 177.067694][ T6930] CPU: 0 PID: 6930 Comm: syz.0.379 Not tainted syzkaller #0 [ 177.075088][ T6930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 177.085206][ T6930] Call Trace: [ 177.088882][ T6930] [ 177.091862][ T6930] dump_stack_lvl+0x18c/0x250 [ 177.096641][ T6930] ? show_regs_print_info+0x20/0x20 [ 177.101897][ T6930] ? load_image+0x420/0x420 [ 177.106463][ T6930] ? __might_sleep+0xe0/0xe0 [ 177.111123][ T6930] ? __lock_acquire+0x7eb0/0x7eb0 [ 177.116298][ T6930] should_fail_ex+0x394/0x4c0 [ 177.121058][ T6930] should_failslab+0x9/0x20 [ 177.125704][ T6930] slab_pre_alloc_hook+0x59/0x300 [ 177.130786][ T6930] ? io_alloc_hash_table+0x2d/0xb0 [ 177.137006][ T6930] ? io_alloc_hash_table+0x2d/0xb0 [ 177.142264][ T6930] __kmem_cache_alloc_node+0x53/0x250 [ 177.147740][ T6930] ? io_alloc_hash_table+0x2d/0xb0 [ 177.152942][ T6930] __kmalloc+0xa7/0x240 [ 177.157276][ T6930] io_alloc_hash_table+0x2d/0xb0 [ 177.162285][ T6930] io_ring_ctx_alloc+0x132/0xc10 [ 177.167338][ T6930] io_uring_create+0x2df/0x1330 [ 177.172254][ T6930] ? __might_fault+0xc6/0x120 [ 177.177025][ T6930] ? __might_fault+0xaa/0x120 [ 177.181764][ T6930] __se_sys_io_uring_setup+0x29f/0x2b0 [ 177.187276][ T6930] ? __x64_sys_io_uring_setup+0x60/0x60 [ 177.192898][ T6930] ? lockdep_hardirqs_on+0x98/0x150 [ 177.198165][ T6930] do_syscall_64+0x55/0xb0 [ 177.202633][ T6930] ? clear_bhb_loop+0x40/0x90 [ 177.207367][ T6930] ? clear_bhb_loop+0x40/0x90 [ 177.212104][ T6930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.218069][ T6930] RIP: 0033:0x7ff0f1f9e559 [ 177.222537][ T6930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.242202][ T6930] RSP: 002b:00007ff0f2e86fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 177.250676][ T6930] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007ff0f1f9e559 [ 177.258699][ T6930] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 00000000000003e3 [ 177.266725][ T6930] RBP: 00007ff0f2035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 177.274750][ T6930] R10: 0000200000000100 R11: 0000000000000206 R12: 00002000000000c0 [ 177.282774][ T6930] R13: 0000200000000100 R14: 0000200000000080 R15: 00007ffdb7e89c38 [ 177.290823][ T6930] [ 177.564359][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.698945][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.854813][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.986829][ T6942] loop2: detected capacity change from 0 to 2048 [ 178.019287][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.059119][ T6942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.103847][ T6942] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.382295][ T33] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm kworker/u4:2: bg 0: block 345: padding at end of block bitmap is not set [ 178.472631][ T33] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 79 with max blocks 1 with error 117 [ 178.533214][ T33] EXT4-fs (loop2): This should not happen!! Data will be lost [ 178.533214][ T33] [ 178.613650][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.065597][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 179.083059][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 179.092775][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 179.105442][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 179.238979][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 179.246506][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 180.839682][ T5779] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 180.849988][ T5779] Bluetooth: hci3: Injecting HCI hardware error event [ 180.858634][ T5779] Bluetooth: hci3: hardware error 0x00 [ 181.367516][ T51] Bluetooth: hci2: command tx timeout [ 181.708569][ T6966] rxe_eth0 speed is unknown, defaulting to 1000 [ 182.013165][ T51] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 183.437439][ T51] Bluetooth: hci2: command tx timeout [ 183.444967][ T5779] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 184.156498][ T60] hsr_slave_0: left promiscuous mode [ 184.207002][ T60] hsr_slave_1: left promiscuous mode [ 184.236242][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.266301][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.305309][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.340766][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.375665][ T60] bridge_slave_1: left allmulticast mode [ 184.405864][ T60] bridge_slave_1: left promiscuous mode [ 184.440511][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.490622][ T60] bridge_slave_0: left allmulticast mode [ 184.514351][ T60] bridge_slave_0: left promiscuous mode [ 184.546635][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.712223][ T60] veth1_macvtap: left promiscuous mode [ 184.731712][ T60] veth0_macvtap: left promiscuous mode [ 184.742116][ T60] veth1_vlan: left promiscuous mode [ 184.750618][ T60] veth0_vlan: left promiscuous mode [ 185.517472][ T5779] Bluetooth: hci2: command tx timeout [ 186.043755][ T60] team0 (unregistering): Port device team_slave_1 removed [ 186.081653][ T5779] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 186.090572][ T5779] Bluetooth: hci1: Injecting HCI hardware error event [ 186.099657][ T51] Bluetooth: hci1: hardware error 0x00 [ 186.156397][ T60] team0 (unregistering): Port device team_slave_0 removed [ 186.222432][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.274626][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.736079][ T7061] overlayfs: failed to resolve 'upper': -2 [ 187.604275][ T5779] Bluetooth: hci2: command tx timeout [ 187.819528][ T60] bond0 (unregistering): Released all slaves [ 188.034090][ T6966] chnl_net:caif_netlink_parms(): no params data found [ 188.163174][ T51] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 188.269162][ T7082] overlayfs: failed to resolve 'upper': -2 [ 188.440819][ T6966] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.452345][ T6966] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.461666][ T6966] bridge_slave_0: entered allmulticast mode [ 188.474119][ T6966] bridge_slave_0: entered promiscuous mode [ 188.485681][ T6966] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.493603][ T6966] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.501192][ T6966] bridge_slave_1: entered allmulticast mode [ 188.509588][ T6966] bridge_slave_1: entered promiscuous mode [ 188.634691][ T6966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.675797][ T6966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.748961][ T6966] team0: Port device team_slave_0 added [ 188.774485][ T6966] team0: Port device team_slave_1 added [ 188.859105][ T6966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.871855][ T6966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.916843][ T6966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.953093][ T6966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.977123][ T6966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.200221][ T6966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.083491][ T6966] hsr_slave_0: entered promiscuous mode [ 190.129651][ T6966] hsr_slave_1: entered promiscuous mode [ 190.156848][ T6966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.208925][ T6966] Cannot create hsr debugfs directory [ 190.548722][ T7121] overlayfs: failed to resolve 'work': -2 [ 190.890875][ T6966] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 190.977967][ T6966] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 191.005671][ T6966] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 191.049444][ T6966] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 192.033420][ T6966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.163394][ T6966] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.251367][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.259606][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.302239][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.309491][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.355547][ T7152] overlayfs: failed to resolve 'work': -2 [ 193.694577][ T6966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.617256][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.623809][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.687504][ T7196] FAULT_INJECTION: forcing a failure. [ 194.687504][ T7196] name fail_futex, interval 1, probability 0, space 0, times 1 [ 194.748645][ T7196] CPU: 1 PID: 7196 Comm: syz.1.450 Not tainted syzkaller #0 [ 194.756088][ T7196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 194.766202][ T7196] Call Trace: [ 194.769531][ T7196] [ 194.772505][ T7196] dump_stack_lvl+0x18c/0x250 [ 194.777239][ T7196] ? show_regs_print_info+0x20/0x20 [ 194.782496][ T7196] ? load_image+0x420/0x420 [ 194.787086][ T7196] should_fail_ex+0x394/0x4c0 [ 194.791832][ T7196] get_futex_key+0x136/0x1030 [ 194.796560][ T7196] ? finish_task_switch+0x25d/0x8f0 [ 194.801814][ T7196] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 194.807945][ T7196] ? futex_setup_timer+0xc0/0xc0 [ 194.812947][ T7196] futex_wake+0x127/0x4f0 [ 194.817425][ T7196] ? futex_wake_mark+0x150/0x150 [ 194.822419][ T7196] ? __schedule+0x15b6/0x4660 [ 194.827167][ T7196] do_futex+0x35d/0x3e0 [ 194.831415][ T7196] ? __ia32_sys_get_robust_list+0x110/0x110 [ 194.837394][ T7196] __se_sys_futex+0x3a9/0x440 [ 194.842135][ T7196] ? __x64_sys_futex+0xf0/0xf0 [ 194.846974][ T7196] ? __x64_sys_futex+0x21/0xf0 [ 194.851815][ T7196] do_syscall_64+0x55/0xb0 [ 194.856282][ T7196] ? clear_bhb_loop+0x40/0x90 [ 194.861041][ T7196] ? clear_bhb_loop+0x40/0x90 [ 194.865799][ T7196] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.871766][ T7196] RIP: 0033:0x7f7fe8d9e559 [ 194.876235][ T7196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.895975][ T7196] RSP: 002b:00007f7fe9c1a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 194.904425][ T7196] RAX: ffffffffffffffda RBX: 00007f7fe9025fa8 RCX: 00007f7fe8d9e559 [ 194.912461][ T7196] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7fe9025fac [ 194.920479][ T7196] RBP: 00007f7fe9025fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 194.928498][ T7196] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 194.936517][ T7196] R13: 00007f7fe9026038 R14: 00007ffc29438ca0 R15: 00007ffc29438d88 [ 194.944555][ T7196] [ 195.238673][ T7205] overlayfs: failed to resolve 'work': -2 [ 196.317048][ T6966] veth0_vlan: entered promiscuous mode [ 196.392634][ T6966] veth1_vlan: entered promiscuous mode [ 196.536619][ T6966] veth0_macvtap: entered promiscuous mode [ 196.599950][ T6966] veth1_macvtap: entered promiscuous mode [ 196.744232][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.824239][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.886901][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.935427][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.996282][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.048427][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.060164][ T6966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.070764][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.081829][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.223426][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.279060][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.338683][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.387520][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.756972][ T6966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.276697][ T6966] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.316691][ T6966] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.354822][ T6966] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.403421][ T6966] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.663164][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.689894][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.731974][ T7233] netlink: 'syz.2.458': attribute type 10 has an invalid length. [ 198.774158][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.784888][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.852961][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.861660][ T7233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.871615][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.880269][ T7233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.924649][ T7233] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 199.008878][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.027654][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.182489][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 205.794221][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 206.809083][ T7346] FAULT_INJECTION: forcing a failure. [ 206.809083][ T7346] name failslab, interval 1, probability 0, space 0, times 0 [ 206.855388][ T7346] CPU: 0 PID: 7346 Comm: syz.2.488 Not tainted syzkaller #0 [ 206.864254][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 206.876367][ T7346] Call Trace: [ 206.880348][ T7346] [ 206.883895][ T7346] dump_stack_lvl+0x18c/0x250 [ 206.889547][ T7346] ? show_regs_print_info+0x20/0x20 [ 206.895821][ T7346] ? load_image+0x420/0x420 [ 206.901394][ T7346] ? __might_sleep+0xe0/0xe0 [ 206.906981][ T7346] ? __lock_acquire+0x7eb0/0x7eb0 [ 206.913053][ T7346] ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0 [ 206.921118][ T7346] should_fail_ex+0x394/0x4c0 [ 206.926793][ T7346] should_failslab+0x9/0x20 [ 206.932381][ T7346] slab_pre_alloc_hook+0x59/0x300 [ 206.938453][ T7346] ? pcpu_alloc+0x11e7/0x1880 [ 206.944113][ T7346] ? percpu_ref_init+0xc3/0x340 [ 206.949981][ T7346] __kmem_cache_alloc_node+0x53/0x250 [ 206.956488][ T7346] ? percpu_ref_init+0xc3/0x340 [ 206.962360][ T7346] ? io_allocate_scq_urings+0x620/0x620 [ 206.969089][ T7346] kmalloc_trace+0x2a/0xe0 [ 206.974458][ T7346] percpu_ref_init+0xc3/0x340 [ 206.980126][ T7346] io_ring_ctx_alloc+0x205/0xc10 [ 206.986207][ T7346] io_uring_create+0x2df/0x1330 [ 206.992112][ T7346] ? __might_fault+0xc6/0x120 [ 206.997771][ T7346] ? __might_fault+0xaa/0x120 [ 207.003429][ T7346] __se_sys_io_uring_setup+0x29f/0x2b0 [ 207.010023][ T7346] ? __x64_sys_io_uring_setup+0x60/0x60 [ 207.016739][ T7346] ? lockdep_hardirqs_on+0x98/0x150 [ 207.023026][ T7346] do_syscall_64+0x55/0xb0 [ 207.028373][ T7346] ? clear_bhb_loop+0x40/0x90 [ 207.034053][ T7346] ? clear_bhb_loop+0x40/0x90 [ 207.039713][ T7346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.046844][ T7346] RIP: 0033:0x7fd566f9e559 [ 207.052184][ T7346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.076498][ T7346] RSP: 002b:00007fd567ee1fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 207.086668][ T7346] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007fd566f9e559 [ 207.096300][ T7346] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 00000000000003e3 [ 207.105908][ T7346] RBP: 00007fd567035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 207.115517][ T7346] R10: 0000200000000100 R11: 0000000000000206 R12: 00002000000000c0 [ 207.125121][ T7346] R13: 0000200000000100 R14: 0000200000000080 R15: 00007ffca58f7e38 [ 207.134753][ T7346] [ 207.548500][ T7369] FAULT_INJECTION: forcing a failure. [ 207.548500][ T7369] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 207.608032][ T7369] CPU: 1 PID: 7369 Comm: syz.2.495 Not tainted syzkaller #0 [ 207.616888][ T7369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 207.628994][ T7369] Call Trace: [ 207.632951][ T7369] [ 207.636484][ T7369] dump_stack_lvl+0x18c/0x250 [ 207.642117][ T7369] ? show_regs_print_info+0x20/0x20 [ 207.648374][ T7369] ? load_image+0x420/0x420 [ 207.653801][ T7369] ? __lock_acquire+0x7eb0/0x7eb0 [ 207.659850][ T7369] should_fail_ex+0x394/0x4c0 [ 207.665488][ T7369] prepare_alloc_pages+0x1e1/0x5b0 [ 207.671688][ T7369] __alloc_pages+0x134/0x460 [ 207.677223][ T7369] ? zone_statistics+0x170/0x170 [ 207.683176][ T7369] ? alloc_pages+0x4e1/0x740 [ 207.688738][ T7369] __get_free_pages+0xc/0x30 [ 207.694261][ T7369] kasan_populate_vmalloc_pte+0x35/0x100 [ 207.701046][ T7369] __apply_to_page_range+0x860/0xdd0 [ 207.707421][ T7369] ? kasan_populate_vmalloc+0x70/0x70 [ 207.713892][ T7369] ? apply_to_page_range+0x50/0x50 [ 207.720068][ T7369] ? do_raw_spin_unlock+0x121/0x230 [ 207.726334][ T7369] alloc_vmap_area+0x1d26/0x1e50 [ 207.732296][ T7369] ? vm_map_ram+0xcf0/0xcf0 [ 207.737731][ T7369] ? rcu_is_watching+0x15/0xb0 [ 207.743476][ T7369] __get_vm_area_node+0x162/0x370 [ 207.749558][ T7369] __vmalloc_node_range+0x36f/0x1320 [ 207.755922][ T7369] ? sock_map_alloc+0x1b2/0x2d0 [ 207.761782][ T7369] ? free_vm_area+0x50/0x50 [ 207.767220][ T7369] ? bpf_map_area_alloc+0x5e/0x110 [ 207.773398][ T7369] ? rcu_is_watching+0x15/0xb0 [ 207.779148][ T7369] ? bpf_map_area_alloc+0x5e/0x110 [ 207.785323][ T7369] bpf_map_area_alloc+0xf1/0x110 [ 207.791277][ T7369] ? sock_map_alloc+0x1b2/0x2d0 [ 207.797135][ T7369] sock_map_alloc+0x1b2/0x2d0 [ 207.802775][ T7369] map_create+0x877/0x12f0 [ 207.808125][ T7369] __sys_bpf+0x651/0x890 [ 207.813258][ T7369] ? bpf_link_show_fdinfo+0x560/0x560 [ 207.819736][ T7369] ? lock_chain_count+0x20/0x20 [ 207.825578][ T7369] __x64_sys_bpf+0x7c/0x90 [ 207.830894][ T7369] do_syscall_64+0x55/0xb0 [ 207.836206][ T7369] ? clear_bhb_loop+0x40/0x90 [ 207.841832][ T7369] ? clear_bhb_loop+0x40/0x90 [ 207.847465][ T7369] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.854561][ T7369] RIP: 0033:0x7fd566f9e559 [ 207.859876][ T7369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.883429][ T7369] RSP: 002b:00007fd567ee2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 207.893549][ T7369] RAX: ffffffffffffffda RBX: 00007fd567225fa0 RCX: 00007fd566f9e559 [ 207.903130][ T7369] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 207.912728][ T7369] RBP: 00007fd567035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 207.922304][ T7369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.931886][ T7369] R13: 00007fd567226038 R14: 00007fd567225fa0 R15: 00007ffca58f7e38 [ 207.941486][ T7369] [ 208.856042][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 209.799631][ T7414] loop2: detected capacity change from 0 to 8 [ 210.273996][ T7423] FAULT_INJECTION: forcing a failure. [ 210.273996][ T7423] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 210.332709][ T7423] CPU: 1 PID: 7423 Comm: syz.0.511 Not tainted syzkaller #0 [ 210.341535][ T7423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 210.353644][ T7423] Call Trace: [ 210.357616][ T7423] [ 210.361196][ T7423] dump_stack_lvl+0x18c/0x250 [ 210.366858][ T7423] ? show_regs_print_info+0x20/0x20 [ 210.373177][ T7423] ? load_image+0x420/0x420 [ 210.378648][ T7423] ? __lock_acquire+0x7eb0/0x7eb0 [ 210.384731][ T7423] should_fail_ex+0x394/0x4c0 [ 210.390401][ T7423] prepare_alloc_pages+0x1e1/0x5b0 [ 210.396585][ T7423] __alloc_pages+0x134/0x460 [ 210.402149][ T7423] ? zone_statistics+0x170/0x170 [ 210.408138][ T7423] ? alloc_pages+0x4e1/0x740 [ 210.413699][ T7423] __get_free_pages+0xc/0x30 [ 210.419249][ T7423] kasan_populate_vmalloc_pte+0x35/0x100 [ 210.426077][ T7423] __apply_to_page_range+0x860/0xdd0 [ 210.432510][ T7423] ? kasan_populate_vmalloc+0x70/0x70 [ 210.439014][ T7423] ? apply_to_page_range+0x50/0x50 [ 210.445208][ T7423] ? do_raw_spin_unlock+0x121/0x230 [ 210.451575][ T7423] alloc_vmap_area+0x1d26/0x1e50 [ 210.457558][ T7423] ? vm_map_ram+0xcf0/0xcf0 [ 210.462988][ T7423] ? rcu_is_watching+0x15/0xb0 [ 210.468836][ T7423] __get_vm_area_node+0x162/0x370 [ 210.474899][ T7423] __vmalloc_node_range+0x36f/0x1320 [ 210.481382][ T7423] ? sock_map_alloc+0x1b2/0x2d0 [ 210.487244][ T7423] ? free_vm_area+0x50/0x50 [ 210.492679][ T7423] ? bpf_map_area_alloc+0x5e/0x110 [ 210.498853][ T7423] ? rcu_is_watching+0x15/0xb0 [ 210.504597][ T7423] ? bpf_map_area_alloc+0x5e/0x110 [ 210.510759][ T7423] bpf_map_area_alloc+0xf1/0x110 [ 210.516727][ T7423] ? sock_map_alloc+0x1b2/0x2d0 [ 210.522567][ T7423] sock_map_alloc+0x1b2/0x2d0 [ 210.528216][ T7423] map_create+0x877/0x12f0 [ 210.533587][ T7423] __sys_bpf+0x651/0x890 [ 210.538706][ T7423] ? bpf_link_show_fdinfo+0x560/0x560 [ 210.545189][ T7423] ? lock_chain_count+0x20/0x20 [ 210.551040][ T7423] __x64_sys_bpf+0x7c/0x90 [ 210.556394][ T7423] do_syscall_64+0x55/0xb0 [ 210.561716][ T7423] ? clear_bhb_loop+0x40/0x90 [ 210.567345][ T7423] ? clear_bhb_loop+0x40/0x90 [ 210.572981][ T7423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.580080][ T7423] RIP: 0033:0x7ff0f1f9e559 [ 210.585390][ T7423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.608948][ T7423] RSP: 002b:00007ff0f2e87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 210.619063][ T7423] RAX: ffffffffffffffda RBX: 00007ff0f2225fa0 RCX: 00007ff0f1f9e559 [ 210.628640][ T7423] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 210.638230][ T7423] RBP: 00007ff0f2035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 210.647840][ T7423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.657425][ T7423] R13: 00007ff0f2226038 R14: 00007ff0f2225fa0 R15: 00007ffdb7e89c38 [ 210.667020][ T7423] [ 211.292686][ T7442] loop2: detected capacity change from 0 to 8 [ 212.195835][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 213.072301][ T7470] loop2: detected capacity change from 0 to 8 [ 217.702861][ T7548] loop2: detected capacity change from 0 to 256 [ 221.190162][ T7596] Bluetooth: Error in BCSP hdr checksum [ 222.022554][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 222.539551][ T7622] syzkaller0: entered promiscuous mode [ 222.576868][ T7622] syzkaller0: entered allmulticast mode [ 222.751122][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.571'. [ 223.526207][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 224.400462][ T7668] syzkaller0: entered promiscuous mode [ 224.433339][ T7668] syzkaller0: entered allmulticast mode [ 228.334127][ T7711] loop4: detected capacity change from 0 to 256 [ 229.671670][ T7726] syzkaller0: entered promiscuous mode [ 229.689934][ T7729] FAULT_INJECTION: forcing a failure. [ 229.689934][ T7729] name failslab, interval 1, probability 0, space 0, times 0 [ 229.705340][ T7726] syzkaller0: entered allmulticast mode [ 229.732883][ T7729] CPU: 0 PID: 7729 Comm: syz.2.595 Not tainted syzkaller #0 [ 229.741703][ T7729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 229.753811][ T7729] Call Trace: [ 229.757776][ T7729] [ 229.761332][ T7729] dump_stack_lvl+0x18c/0x250 [ 229.766995][ T7729] ? show_regs_print_info+0x20/0x20 [ 229.773319][ T7729] ? load_image+0x420/0x420 [ 229.778777][ T7729] ? __kasan_slab_alloc+0x6c/0x80 [ 229.784976][ T7729] ? slab_post_alloc_hook+0x86/0x4d0 [ 229.791373][ T7729] should_fail_ex+0x394/0x4c0 [ 229.797041][ T7729] should_failslab+0x9/0x20 [ 229.802505][ T7729] slab_pre_alloc_hook+0x59/0x300 [ 229.808586][ T7729] kmem_cache_alloc+0x5a/0x2c0 [ 229.814391][ T7729] ? _sctp_make_chunk+0x14b/0x430 [ 229.820476][ T7729] _sctp_make_chunk+0x14b/0x430 [ 229.826363][ T7729] sctp_make_cookie_ack+0x34/0x2c0 [ 229.832672][ T7729] sctp_sf_do_dupcook_d+0x326/0x870 [ 229.838977][ T7729] sctp_sf_do_5_2_4_dupcook+0xaeb/0x12e0 [ 229.845804][ T7729] ? sctp_sf_discard_chunk+0x3d0/0x3d0 [ 229.852404][ T7729] ? kasan_set_track+0x5f/0x70 [ 229.858178][ T7729] ? kasan_save_free_info+0x28/0x40 [ 229.864480][ T7729] ? ____kasan_slab_free+0x126/0x1f0 [ 229.870874][ T7729] ? slab_free_freelist_hook+0x130/0x1a0 [ 229.877681][ T7729] ? verify_lock_unused+0x140/0x140 [ 229.883965][ T7729] ? sctp_backlog_rcv+0x15c/0x360 [ 229.890057][ T7729] sctp_do_sm+0x23b/0x5b70 [ 229.895409][ T7729] ? rht_unlock+0x1d0/0x1d0 [ 229.900862][ T7729] ? __lock_acquire+0x1431/0x7eb0 [ 229.906954][ T7729] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 229.914117][ T7729] ? skb_pull+0xb9/0x1c0 [ 229.919267][ T7729] ? sctp_inq_pop+0xc32/0x1030 [ 229.925040][ T7729] ? read_tsc+0x9/0x20 [ 229.929971][ T7729] sctp_assoc_bh_rcv+0x3f2/0x630 [ 229.935954][ T7729] sctp_backlog_rcv+0x15c/0x360 [ 229.941834][ T7729] __release_sock+0x1ea/0x460 [ 229.947508][ T7729] release_sock+0x5f/0x1c0 [ 229.952878][ T7729] sctp_wait_for_connect+0x38d/0x6d0 [ 229.959273][ T7729] ? sctp_connect_add_peer+0x5a0/0x5a0 [ 229.965863][ T7729] ? wake_bit_function+0x200/0x200 [ 229.972049][ T7729] ? sctp_datamsg_put+0x4b3/0x510 [ 229.978122][ T7729] ? sctp_primitive_SEND+0x98/0xc0 [ 229.984312][ T7729] sctp_sendmsg_to_asoc+0x1385/0x17f0 [ 229.990836][ T7729] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 229.997854][ T7729] ? __sctp_connect+0xd80/0xd80 [ 230.003712][ T7729] ? __local_bh_enable_ip+0x13a/0x1c0 [ 230.010234][ T7729] ? _local_bh_enable+0xa0/0xa0 [ 230.016094][ T7729] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 230.023108][ T7729] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 230.030121][ T7729] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 230.036828][ T7729] ? security_sctp_bind_connect+0x89/0xb0 [ 230.043735][ T7729] sctp_sendmsg+0x1afa/0x27b0 [ 230.049432][ T7729] ? sctp_getsockopt+0xb60/0xb60 [ 230.055406][ T7729] ? aa_af_perm+0x330/0x330 [ 230.060864][ T7729] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 230.068609][ T7729] ? sock_rps_record_flow+0x19/0x3f0 [ 230.075006][ T7729] ? inet_sendmsg+0x7e/0x2a0 [ 230.078289][ T5781] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 230.080538][ T7729] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 230.080616][ T7729] ? inet_send_prepare+0x250/0x250 [ 230.092155][ T5779] Bluetooth: hci4: command 0x1003 tx timeout [ 230.094517][ T7729] ____sys_sendmsg+0x61b/0x980 [ 230.113922][ T7729] ? __asan_memset+0x22/0x40 [ 230.119488][ T7729] ? __sys_sendmsg_sock+0x30/0x30 [ 230.125561][ T7729] ? __import_iovec+0x5f2/0x850 [ 230.131446][ T7729] ? import_iovec+0x73/0xa0 [ 230.136901][ T7729] ___sys_sendmsg+0x2a6/0x360 [ 230.142589][ T7729] ? __sys_sendmsg+0x2b0/0x2b0 [ 230.148443][ T7729] __se_sys_sendmsg+0x1d0/0x2c0 [ 230.154428][ T7729] ? __x64_sys_sendmsg+0x80/0x80 [ 230.160428][ T7729] ? lockdep_hardirqs_on+0x98/0x150 [ 230.166717][ T7729] do_syscall_64+0x55/0xb0 [ 230.172056][ T7729] ? clear_bhb_loop+0x40/0x90 [ 230.177706][ T7729] ? clear_bhb_loop+0x40/0x90 [ 230.183367][ T7729] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.190496][ T7729] RIP: 0033:0x7fd566f9e559 [ 230.195826][ T7729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.219414][ T7729] RSP: 002b:00007fd567ee2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.229557][ T7729] RAX: ffffffffffffffda RBX: 00007fd567225fa0 RCX: 00007fd566f9e559 [ 230.239171][ T7729] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000006 [ 230.248786][ T7729] RBP: 00007fd567035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 230.258389][ T7729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.267998][ T7729] R13: 00007fd567226038 R14: 00007fd567225fa0 R15: 00007ffca58f7e38 [ 230.277628][ T7729] [ 231.506125][ T7752] FAULT_INJECTION: forcing a failure. [ 231.506125][ T7752] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 231.544280][ T7752] CPU: 1 PID: 7752 Comm: syz.2.599 Not tainted syzkaller #0 [ 231.553106][ T7752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 231.565224][ T7752] Call Trace: [ 231.569203][ T7752] [ 231.572868][ T7752] dump_stack_lvl+0x18c/0x250 [ 231.578534][ T7752] ? show_regs_print_info+0x20/0x20 [ 231.584822][ T7752] ? load_image+0x420/0x420 [ 231.590321][ T7752] ? __lock_acquire+0x7eb0/0x7eb0 [ 231.596521][ T7752] should_fail_ex+0x394/0x4c0 [ 231.602203][ T7752] prepare_alloc_pages+0x1e1/0x5b0 [ 231.608397][ T7752] __alloc_pages+0x134/0x460 [ 231.613953][ T7752] ? zone_statistics+0x170/0x170 [ 231.619929][ T7752] ? alloc_pages+0x4e1/0x740 [ 231.625489][ T7752] __get_free_pages+0xc/0x30 [ 231.631040][ T7752] kasan_populate_vmalloc_pte+0x35/0x100 [ 231.637858][ T7752] __apply_to_page_range+0x860/0xdd0 [ 231.644253][ T7752] ? kasan_populate_vmalloc+0x70/0x70 [ 231.650760][ T7752] ? apply_to_page_range+0x50/0x50 [ 231.656937][ T7752] ? do_raw_spin_unlock+0x121/0x230 [ 231.663225][ T7752] alloc_vmap_area+0x1d26/0x1e50 [ 231.669225][ T7752] ? vm_map_ram+0xcf0/0xcf0 [ 231.674679][ T7752] ? rcu_is_watching+0x15/0xb0 [ 231.680465][ T7752] __get_vm_area_node+0x162/0x370 [ 231.686553][ T7752] __vmalloc_node_range+0x36f/0x1320 [ 231.692984][ T7752] ? sock_map_alloc+0x1b2/0x2d0 [ 231.698875][ T7752] ? free_vm_area+0x50/0x50 [ 231.704334][ T7752] ? bpf_map_area_alloc+0x5e/0x110 [ 231.710516][ T7752] ? rcu_is_watching+0x15/0xb0 [ 231.716300][ T7752] ? bpf_map_area_alloc+0x5e/0x110 [ 231.722483][ T7752] bpf_map_area_alloc+0xf1/0x110 [ 231.728496][ T7752] ? sock_map_alloc+0x1b2/0x2d0 [ 231.734364][ T7752] sock_map_alloc+0x1b2/0x2d0 [ 231.740044][ T7752] map_create+0x877/0x12f0 [ 231.745392][ T7752] __sys_bpf+0x651/0x890 [ 231.750526][ T7752] ? bpf_link_show_fdinfo+0x560/0x560 [ 231.757038][ T7752] ? lock_chain_count+0x20/0x20 [ 231.762910][ T7752] __x64_sys_bpf+0x7c/0x90 [ 231.768252][ T7752] do_syscall_64+0x55/0xb0 [ 231.773593][ T7752] ? clear_bhb_loop+0x40/0x90 [ 231.779258][ T7752] ? clear_bhb_loop+0x40/0x90 [ 231.784918][ T7752] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.792085][ T7752] RIP: 0033:0x7fd566f9e559 [ 231.797418][ T7752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.820991][ T7752] RSP: 002b:00007fd567ee2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 231.831173][ T7752] RAX: ffffffffffffffda RBX: 00007fd567225fa0 RCX: 00007fd566f9e559 [ 231.840788][ T7752] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 231.850392][ T7752] RBP: 00007fd567035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 231.859993][ T7752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.869608][ T7752] R13: 00007fd567226038 R14: 00007fd567225fa0 R15: 00007ffca58f7e38 [ 231.879244][ T7752] [ 234.282841][ T7802] FAULT_INJECTION: forcing a failure. [ 234.282841][ T7802] name failslab, interval 1, probability 0, space 0, times 0 [ 234.305156][ T7802] CPU: 1 PID: 7802 Comm: syz.0.607 Not tainted syzkaller #0 [ 234.313961][ T7802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 234.326046][ T7802] Call Trace: [ 234.330000][ T7802] [ 234.333534][ T7802] dump_stack_lvl+0x18c/0x250 [ 234.339177][ T7802] ? show_regs_print_info+0x20/0x20 [ 234.345438][ T7802] ? load_image+0x420/0x420 [ 234.350876][ T7802] should_fail_ex+0x394/0x4c0 [ 234.356525][ T7802] should_failslab+0x9/0x20 [ 234.361960][ T7802] slab_pre_alloc_hook+0x59/0x300 [ 234.368009][ T7802] ? sctp_data_ready+0xa8/0x680 [ 234.373849][ T7802] kmem_cache_alloc_node+0x5e/0x310 [ 234.380117][ T7802] ? __alloc_skb+0x103/0x2c0 [ 234.385649][ T7802] __alloc_skb+0x103/0x2c0 [ 234.390983][ T7802] _sctp_make_chunk+0x5b/0x430 [ 234.396730][ T7802] sctp_make_sack+0x1a0/0x770 [ 234.402367][ T7802] ? sctp_eat_data+0xb8c/0x1640 [ 234.408221][ T7802] ? sctp_make_datafrag_empty+0x240/0x240 [ 234.415128][ T7802] sctp_do_sm+0x2b97/0x5b70 [ 234.420583][ T7802] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 234.427704][ T7802] ? skb_pull+0xb9/0x1c0 [ 234.432827][ T7802] ? sctp_inq_pop+0xc32/0x1030 [ 234.438572][ T7802] ? read_tsc+0x9/0x20 [ 234.443482][ T7802] sctp_assoc_bh_rcv+0x3f2/0x630 [ 234.449441][ T7802] sctp_backlog_rcv+0x15c/0x360 [ 234.455296][ T7802] __release_sock+0x1ea/0x460 [ 234.460943][ T7802] release_sock+0x5f/0x1c0 [ 234.466263][ T7802] sctp_wait_for_connect+0x38d/0x6d0 [ 234.472639][ T7802] ? sctp_connect_add_peer+0x5a0/0x5a0 [ 234.479205][ T7802] ? wake_bit_function+0x200/0x200 [ 234.485356][ T7802] ? sctp_datamsg_put+0x4b3/0x510 [ 234.491423][ T7802] ? sctp_primitive_SEND+0x98/0xc0 [ 234.497595][ T7802] sctp_sendmsg_to_asoc+0x1385/0x17f0 [ 234.504092][ T7802] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 234.511082][ T7802] ? __sctp_connect+0xd80/0xd80 [ 234.516916][ T7802] ? __local_bh_enable_ip+0x13a/0x1c0 [ 234.523410][ T7802] ? _local_bh_enable+0xa0/0xa0 [ 234.529271][ T7802] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 234.536296][ T7802] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 234.543303][ T7802] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 234.549989][ T7802] ? security_sctp_bind_connect+0x89/0xb0 [ 234.556903][ T7802] sctp_sendmsg+0x1afa/0x27b0 [ 234.562553][ T7802] ? sctp_getsockopt+0xb60/0xb60 [ 234.568534][ T7802] ? aa_af_perm+0x330/0x330 [ 234.573976][ T7802] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 234.581695][ T7802] ? sock_rps_record_flow+0x19/0x3f0 [ 234.588084][ T7802] ? inet_sendmsg+0x7e/0x2a0 [ 234.593617][ T7802] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 234.599996][ T7802] ? inet_send_prepare+0x250/0x250 [ 234.606157][ T7802] ____sys_sendmsg+0x61b/0x980 [ 234.611909][ T7802] ? __asan_memset+0x22/0x40 [ 234.617450][ T7802] ? __sys_sendmsg_sock+0x30/0x30 [ 234.623514][ T7802] ? __import_iovec+0x5f2/0x850 [ 234.629375][ T7802] ? import_iovec+0x73/0xa0 [ 234.634836][ T7802] ___sys_sendmsg+0x2a6/0x360 [ 234.640490][ T7802] ? __sys_sendmsg+0x2b0/0x2b0 [ 234.646274][ T7802] __se_sys_sendmsg+0x1d0/0x2c0 [ 234.652118][ T7802] ? __x64_sys_sendmsg+0x80/0x80 [ 234.658079][ T7802] ? lockdep_hardirqs_on+0x98/0x150 [ 234.664372][ T7802] do_syscall_64+0x55/0xb0 [ 234.669702][ T7802] ? clear_bhb_loop+0x40/0x90 [ 234.675446][ T7802] ? clear_bhb_loop+0x40/0x90 [ 234.681131][ T7802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.688237][ T7802] RIP: 0033:0x7ff0f1f9e559 [ 234.693561][ T7802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.717438][ T7802] RSP: 002b:00007ff0f2e87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.727560][ T7802] RAX: ffffffffffffffda RBX: 00007ff0f2225fa0 RCX: 00007ff0f1f9e559 [ 234.737153][ T7802] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000006 [ 234.746769][ T7802] RBP: 00007ff0f2035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 234.756353][ T7802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.765936][ T7802] R13: 00007ff0f2226038 R14: 00007ff0f2225fa0 R15: 00007ffdb7e89c38 [ 234.775536][ T7802] [ 235.271815][ T7813] loop2: detected capacity change from 0 to 256 [ 235.597496][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 235.599384][ T5779] Bluetooth: hci4: command 0x1003 tx timeout [ 240.433365][ T7887] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.629'. [ 240.468512][ T7883] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.629'. [ 240.509164][ T7886] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.629'. [ 240.834332][ T7899] loop2: detected capacity change from 0 to 512 [ 240.874622][ T7899] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 240.902374][ T7899] FAT-fs (loop2): error, invalid access to FAT (entry 0x0ffffff6) [ 243.277586][ T5781] Bluetooth: hci4: command 0x1003 tx timeout [ 243.335713][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 243.922039][ T7931] FAULT_INJECTION: forcing a failure. [ 243.922039][ T7931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.957385][ T7931] CPU: 0 PID: 7931 Comm: syz.2.649 Not tainted syzkaller #0 [ 243.966212][ T7931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 243.978321][ T7931] Call Trace: [ 243.982291][ T7931] [ 243.985829][ T7931] dump_stack_lvl+0x18c/0x250 [ 243.991466][ T7931] ? show_regs_print_info+0x20/0x20 [ 243.997724][ T7931] ? load_image+0x420/0x420 [ 244.003154][ T7931] ? __lock_acquire+0x7eb0/0x7eb0 [ 244.009211][ T7931] ? __virt_addr_valid+0x10c/0x380 [ 244.015389][ T7931] should_fail_ex+0x394/0x4c0 [ 244.021045][ T7931] _copy_from_user+0x2f/0xe0 [ 244.026585][ T7931] vmemdup_user+0xac/0x1e0 [ 244.031919][ T7931] path_setxattr+0x207/0x590 [ 244.037467][ T7931] ? vfs_write+0x5de/0x9a0 [ 244.042796][ T7931] ? simple_xattrs_free+0x150/0x150 [ 244.049101][ T7931] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 244.056299][ T7931] ? lock_chain_count+0x20/0x20 [ 244.062148][ T7931] __x64_sys_lsetxattr+0xb8/0xd0 [ 244.068126][ T7931] do_syscall_64+0x55/0xb0 [ 244.073447][ T7931] ? clear_bhb_loop+0x40/0x90 [ 244.079070][ T7931] ? clear_bhb_loop+0x40/0x90 [ 244.084696][ T7931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.091797][ T7931] RIP: 0033:0x7fd566f9e559 [ 244.097122][ T7931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.120702][ T7931] RSP: 002b:00007fd567ee2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 244.130820][ T7931] RAX: ffffffffffffffda RBX: 00007fd567225fa0 RCX: 00007fd566f9e559 [ 244.140429][ T7931] RDX: 0000200000000240 RSI: 0000200000000080 RDI: 0000000000000000 [ 244.150139][ T7931] RBP: 00007fd567035ab8 R08: 0000000000000003 R09: 0000000000000000 [ 244.159853][ T7931] R10: 0000000000001001 R11: 0000000000000246 R12: 0000000000000000 [ 244.169438][ T7931] R13: 00007fd567226038 R14: 00007fd567225fa0 R15: 00007ffca58f7e38 [ 244.179037][ T7931] [ 249.078676][ T7999] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.669'. [ 249.108362][ T7997] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.669'. [ 249.149966][ T7998] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.669'. [ 251.444083][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 251.941114][ T8034] loop2: detected capacity change from 0 to 1024 [ 251.969422][ T8034] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 252.032831][ T8034] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 252.198946][ T8034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.360829][ T8034] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 252.401061][ T8034] EXT4-fs (loop2): This should not happen!! Data will be lost [ 252.401061][ T8034] [ 252.436408][ T8034] EXT4-fs (loop2): Total free blocks count 0 [ 252.453546][ T8034] EXT4-fs (loop2): Free/Dirty block details [ 252.483969][ T8034] EXT4-fs (loop2): free_blocks=0 [ 252.500928][ T8034] EXT4-fs (loop2): dirty_blocks=0 [ 252.518762][ T8034] EXT4-fs (loop2): Block reservation details [ 252.526308][ T8034] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 252.805927][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.538455][ T8084] fuse: Bad value for 'fd' [ 255.757505][ T5781] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 255.757560][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 255.883638][ T8096] loop4: detected capacity change from 0 to 256 [ 256.003777][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.011570][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.271337][ T8108] team0: No ports can be present during mode change [ 259.301782][ T8131] ------------[ cut here ]------------ [ 259.309135][ T8131] WARNING: CPU: 1 PID: 8131 at mm/vmalloc.c:3297 __vmalloc_node_range+0x12e8/0x1320 [ 259.320596][ T8131] Modules linked in: [ 259.325325][ T8131] CPU: 1 PID: 8131 Comm: syz.1.713 Not tainted syzkaller #0 [ 259.334283][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 259.346438][ T8131] RIP: 0010:__vmalloc_node_range+0x12e8/0x1320 [ 259.353970][ T8131] Code: 00 80 23 df 48 8b 44 24 48 42 80 3c 38 00 48 8b 5c 24 58 74 08 48 89 df e8 e5 8e 0d 00 48 8b 1b e9 18 ff ff ff e8 a8 ad b4 ff <0f> 0b 31 db e9 0a ff ff ff e8 fa 26 c0 08 e8 95 ad b4 ff 0f 0b e8 [ 259.378772][ T8131] RSP: 0018:ffffc9000d46fa60 EFLAGS: 00010283 [ 259.386110][ T8131] RAX: ffffffff81d2e308 RBX: 8000000000000163 RCX: 0000000000080000 [ 259.396119][ T8131] RDX: ffffc9000c6f9000 RSI: 0000000000000ed4 RDI: 0000000000000ed5 [ 259.405817][ T8131] RBP: ffffc9000d46fc10 R08: 0000000000000dc0 R09: 8000000000000163 [ 259.415477][ T8131] R10: dffffc0000000000 R11: ffffed10045d2586 R12: 0000000000000dc0 [ 259.425159][ T8131] R13: 0000000000000000 R14: ffffe8ffffffffff R15: dffffc0000000000 [ 259.434816][ T8131] FS: 00007f7fe9c1a6c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 259.446095][ T8131] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.454112][ T8131] CR2: 000055555e1699f8 CR3: 000000002e7e6000 CR4: 00000000003506e0 [ 259.463801][ T8131] Call Trace: [ 259.467852][ T8131] [ 259.471426][ T8131] ? rcu_is_watching+0x15/0xb0 [ 259.477858][ T8131] ? read_lock_is_recursive+0x20/0x20 [ 259.484379][ T8131] ? free_vm_area+0x50/0x50 [ 259.490029][ T8131] ? down_write+0x16e/0x200 [ 259.495488][ T8131] ? down_read_killable+0x340/0x340 [ 259.501816][ T8131] ? disksize_store+0xfe/0x3f0 [ 259.507642][ T8131] vzalloc+0x79/0x90 [ 259.512395][ T8131] ? disksize_store+0xfe/0x3f0 [ 259.518565][ T8131] disksize_store+0xfe/0x3f0 [ 259.524117][ T8131] ? sysfs_kf_write+0x187/0x2a0 [ 259.530052][ T8131] ? sysfs_kf_read+0x360/0x360 [ 259.535808][ T8131] kernfs_fop_write_iter+0x3a4/0x520 [ 259.542378][ T8131] vfs_write+0x474/0x9a0 [ 259.547607][ T8131] ? file_end_write+0x250/0x250 [ 259.553501][ T8131] ? __fget_files+0x3fc/0x460 [ 259.559227][ T8131] ? __fdget_pos+0x2a3/0x330 [ 259.564786][ T8131] ? ksys_write+0x74/0x260 [ 259.570221][ T8131] ksys_write+0x151/0x260 [ 259.575500][ T8131] ? __ia32_sys_read+0x90/0x90 [ 259.581916][ T8131] ? lockdep_hardirqs_on+0x98/0x150 [ 259.588424][ T8131] do_syscall_64+0x55/0xb0 [ 259.593776][ T8131] ? clear_bhb_loop+0x40/0x90 [ 259.599489][ T8131] ? clear_bhb_loop+0x40/0x90 [ 259.605318][ T8131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.612552][ T8131] RIP: 0033:0x7f7fe8d9e559 [ 259.617970][ T8131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.641626][ T8131] RSP: 002b:00007f7fe9c1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 259.651826][ T8131] RAX: ffffffffffffffda RBX: 00007f7fe9025fa0 RCX: 00007f7fe8d9e559 [ 259.661514][ T8131] RDX: 00000000000000f5 RSI: 0000200000000480 RDI: 0000000000000003 [ 259.671168][ T8131] RBP: 00007f7fe8e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 259.681678][ T8131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.691481][ T8131] R13: 00007f7fe9026038 R14: 00007f7fe9025fa0 R15: 00007ffc29438d88 [ 259.701180][ T8131] [ 259.704840][ T8131] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 259.713703][ T8131] CPU: 1 PID: 8131 Comm: syz.1.713 Not tainted syzkaller #0 [ 259.722466][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 259.734545][ T8131] Call Trace: [ 259.738509][ T8131] [ 259.742056][ T8131] dump_stack_lvl+0x18c/0x250 [ 259.747706][ T8131] ? show_regs_print_info+0x20/0x20 [ 259.753992][ T8131] ? load_image+0x420/0x420 [ 259.759437][ T8131] panic+0x2ca/0x720 [ 259.764147][ T8131] ? bpf_jit_dump+0xd0/0xd0 [ 259.769594][ T8131] __warn+0x2e0/0x470 [ 259.774412][ T8131] ? __vmalloc_node_range+0x12e8/0x1320 [ 259.781097][ T8131] ? __vmalloc_node_range+0x12e8/0x1320 [ 259.787780][ T8131] report_bug+0x2be/0x4f0 [ 259.792998][ T8131] ? __vmalloc_node_range+0x12e8/0x1320 [ 259.799675][ T8131] ? __vmalloc_node_range+0x12e8/0x1320 [ 259.806358][ T8131] ? __vmalloc_node_range+0x12ea/0x1320 [ 259.813042][ T8131] handle_bug+0xcf/0x120 [ 259.818155][ T8131] exc_invalid_op+0x1a/0x50 [ 259.823572][ T8131] asm_exc_invalid_op+0x1a/0x20 [ 259.829409][ T8131] RIP: 0010:__vmalloc_node_range+0x12e8/0x1320 [ 259.836817][ T8131] Code: 00 80 23 df 48 8b 44 24 48 42 80 3c 38 00 48 8b 5c 24 58 74 08 48 89 df e8 e5 8e 0d 00 48 8b 1b e9 18 ff ff ff e8 a8 ad b4 ff <0f> 0b 31 db e9 0a ff ff ff e8 fa 26 c0 08 e8 95 ad b4 ff 0f 0b e8 [ 259.860385][ T8131] RSP: 0018:ffffc9000d46fa60 EFLAGS: 00010283 [ 259.867691][ T8131] RAX: ffffffff81d2e308 RBX: 8000000000000163 RCX: 0000000000080000 [ 259.877286][ T8131] RDX: ffffc9000c6f9000 RSI: 0000000000000ed4 RDI: 0000000000000ed5 [ 259.886877][ T8131] RBP: ffffc9000d46fc10 R08: 0000000000000dc0 R09: 8000000000000163 [ 259.896473][ T8131] R10: dffffc0000000000 R11: ffffed10045d2586 R12: 0000000000000dc0 [ 259.906059][ T8131] R13: 0000000000000000 R14: ffffe8ffffffffff R15: dffffc0000000000 [ 259.915668][ T8131] ? __vmalloc_node_range+0x12e8/0x1320 [ 259.922378][ T8131] ? rcu_is_watching+0x15/0xb0 [ 259.928114][ T8131] ? read_lock_is_recursive+0x20/0x20 [ 259.934599][ T8131] ? free_vm_area+0x50/0x50 [ 259.940127][ T8131] ? down_write+0x16e/0x200 [ 259.945550][ T8131] ? down_read_killable+0x340/0x340 [ 259.951806][ T8131] ? disksize_store+0xfe/0x3f0 [ 259.957545][ T8131] vzalloc+0x79/0x90 [ 259.962246][ T8131] ? disksize_store+0xfe/0x3f0 [ 259.967986][ T8131] disksize_store+0xfe/0x3f0 [ 259.973509][ T8131] ? sysfs_kf_write+0x187/0x2a0 [ 259.979346][ T8131] ? sysfs_kf_read+0x360/0x360 [ 259.985077][ T8131] kernfs_fop_write_iter+0x3a4/0x520 [ 259.991443][ T8131] vfs_write+0x474/0x9a0 [ 259.996558][ T8131] ? file_end_write+0x250/0x250 [ 260.002408][ T8131] ? __fget_files+0x3fc/0x460 [ 260.008062][ T8131] ? __fdget_pos+0x2a3/0x330 [ 260.013604][ T8131] ? ksys_write+0x74/0x260 [ 260.018937][ T8131] ksys_write+0x151/0x260 [ 260.024166][ T8131] ? __ia32_sys_read+0x90/0x90 [ 260.029919][ T8131] ? lockdep_hardirqs_on+0x98/0x150 [ 260.036192][ T8131] do_syscall_64+0x55/0xb0 [ 260.041523][ T8131] ? clear_bhb_loop+0x40/0x90 [ 260.047147][ T8131] ? clear_bhb_loop+0x40/0x90 [ 260.052773][ T8131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.059870][ T8131] RIP: 0033:0x7f7fe8d9e559 [ 260.065184][ T8131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.088727][ T8131] RSP: 002b:00007f7fe9c1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 260.098840][ T8131] RAX: ffffffffffffffda RBX: 00007f7fe9025fa0 RCX: 00007f7fe8d9e559 [ 260.108428][ T8131] RDX: 00000000000000f5 RSI: 0000200000000480 RDI: 0000000000000003 [ 260.118004][ T8131] RBP: 00007f7fe8e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 260.127582][ T8131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.137168][ T8131] R13: 00007f7fe9026038 R14: 00007f7fe9025fa0 R15: 00007ffc29438d88 [ 260.146769][ T8131] [ 260.150547][ T8131] Kernel Offset: disabled [ 260.155812][ T8131] Rebooting in 86400 seconds..