last executing test programs: 3m14.454070094s ago: executing program 32 (id=96): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 3m12.447255055s ago: executing program 33 (id=110): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x400, &(0x7f0000000600)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,uid=forget,noadinicb,shortad,iocharset=ascii,lastblock=00000000000000000009,iocharset=cp950,fileset=00000000000000000001,undelete,anchor=00000000000000000006,partition=00000000000000000008,anchor=00000000000008421375,session=00000000000000000001,anchor=00000000000000000005,gid=', @ANYRESDEC, @ANYBLOB="2c66fefb470f725c", @ANYRES8, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="2c736d61636b667364656630233f9d1abf59c53229ddd780b162f44a0e44f3436d598025e596d23078a3e733e07b480ad2f41c3ccd7956530c3be5c0d1833ad4954140d857bb924e0f613fe32a0c1461263f77581d8ed8b341959c53a341493644534a4b27223d1faac6bf7df530d100a57452b6a3abc826bb0f0b82809ca1e13376959935f589115abe267b25f42757304b4d6c7ffaec13f3079a4658933152fe693cc762ce82776b4003c4ac3d9d3478da3da1f79ad788d3b25f59422ba668e32c00"], 0x9, 0xc1e, &(0x7f0000001240)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810704, &(0x7f00000001c0), 0x4, 0x4b1, &(0x7f0000000bc0)="$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") getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xcf, &(0x7f00000000c0), &(0x7f0000000200)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000080)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', '', [], 0xa, "faa4d9273600286c528c13b4049e2511"}, 0x14) 3m5.376227443s ago: executing program 34 (id=150): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00], 0x1ac}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xa0}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3}, [@CTA_SYNPROXY={0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1404}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)) r5 = socket$pppoe(0x18, 0x1, 0x0) accept4(r5, 0x0, 0x0, 0x80800) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x11, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000850000006a0000008500000050000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r7 = accept(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r7) sendmmsg$inet(r7, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="dce90455db0e481f65c140f8086f2923606b418a4708735b4e6645da08e93c9764b2d9d619c076ee39b0dc69a34ee0be0325336fea39a7459bf204d38c34f6e2d5c402f1157a90acdd139ce2d4f4a85cb4468c8820365e5364cd2102380fc13a4bb4b0b5a56e2bdb1193941a67c1d87b0abca47e6b86eab15a4a916182d3447ff7b21713aeae3f48d7b4d5bf51ba04d8e4", 0x91}], 0x1}}], 0x1, 0x8000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6, r1}, 0xc) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r8, &(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00'], 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048051}, 0x20000080) 3m3.047310181s ago: executing program 35 (id=163): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x6) bind(r1, &(0x7f0000000300)=@in={0x2, 0x4908, @loopback}, 0x10) listen(r1, 0x5) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r2 = socket$inet(0x2, 0x1, 0x6) connect(r2, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) write(r2, &(0x7f0000000400)='P', 0x1) 2m48.213043136s ago: executing program 36 (id=238): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0xba, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) 2m37.248205652s ago: executing program 37 (id=368): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) 2m36.113861781s ago: executing program 38 (id=391): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) setpgid(r0, r0) setpgid(0x0, r0) 2m35.489832577s ago: executing program 2 (id=398): syz_mount_image$hfsplus(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x204810, &(0x7f0000000000)=ANY=[], 0x14, 0x69f, &(0x7f0000000940)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000) 2m35.439992838s ago: executing program 2 (id=399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000200)={0x34, r1, 0x4f79951a91b7df8f, 0x70bd26, 0x3, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4005}, 0x2040084) 2m35.37827693s ago: executing program 2 (id=400): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="5eaa0000000000007910a8000000000018090000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9a) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r0], 0x10) 2m35.37805375s ago: executing program 2 (id=401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf", 0x22}], 0x1}, 0x0) 2m35.051681938s ago: executing program 2 (id=402): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000100905810300020500000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x2, 0x0, 0xc, 0x9, 0x9, 0xe, 0x1, 0x1c1, 0x167, 0x460, 0x8, 0x9}}, 0x0, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x7f}, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x1, 0xec, 0x5, 0x8, 0xa, 0x9259, 0x98d2, 0xce, 0x88d, 0x3}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2m34.466272133s ago: executing program 2 (id=404): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./export\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./export\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='mydomain ./export 2147483647 9218 0 0 0\n', 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='mydomain 1 \\x00000000 2147483647 ./export\n', 0x2a) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='-2 -3 +4\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='tcp 2049\n', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/nfsv4recoverydir\x00', 0x1, 0x0) write(r4, &(0x7f0000000740)='/tmp\n', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='8\n', 0x2) (async) mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)={[{'addr=127.0.0.1'}, {'clientaddr=127.0.0.1'}, {'port=2049'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testdir\x00', 0x1ff) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testdir\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="8000000000000000"], &(0x7f0000000640), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r6, &(0x7f00000006c0)='3\n', 0x2) open_by_handle_at(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x0) 2m31.80224124s ago: executing program 8 (id=422): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31", 0x24}], 0x1}, 0x0) 2m31.576672995s ago: executing program 8 (id=424): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x7000000, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) 2m31.494317697s ago: executing program 8 (id=425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x30, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xc, 0xfff3}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc054}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)}], 0x1}, 0x4005) 2m20.274737541s ago: executing program 8 (id=433): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./export\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./export\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='mydomain ./export 2147483647 9218 0 0 0\n', 0x28) 2m20.251183861s ago: executing program 8 (id=434): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, 0x0, 0x800) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket(0x21, 0x80000, 0x1ff) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x8, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 2m19.698348155s ago: executing program 8 (id=437): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$netlink(0x10, 0x3, 0x2) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x7000000) 2m19.641276627s ago: executing program 39 (id=437): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$netlink(0x10, 0x3, 0x2) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x7000000) 2m19.395625563s ago: executing program 40 (id=404): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./export\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./export\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='mydomain ./export 2147483647 9218 0 0 0\n', 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='mydomain 1 \\x00000000 2147483647 ./export\n', 0x2a) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='-2 -3 +4\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='tcp 2049\n', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/nfsv4recoverydir\x00', 0x1, 0x0) write(r4, &(0x7f0000000740)='/tmp\n', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='8\n', 0x2) (async) mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)={[{'addr=127.0.0.1'}, {'clientaddr=127.0.0.1'}, {'port=2049'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testdir\x00', 0x1ff) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testdir\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="8000000000000000"], &(0x7f0000000640), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r6, &(0x7f00000006c0)='3\n', 0x2) open_by_handle_at(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x0) 1m43.734789833s ago: executing program 6 (id=522): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x1c, &(0x7f0000000000)=0x5, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e21, 0x6, @empty, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x1000}, 0x9c) 1m43.704440433s ago: executing program 6 (id=523): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110300000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 1m43.657891964s ago: executing program 6 (id=524): r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='100000', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0xffffff23, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15610}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040001}, 0x40) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000f6dbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050007000000"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 1m38.114336874s ago: executing program 6 (id=531): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="e869b4c8de", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000200)="0f812ed6a7f2a3a76c196cbd8e7bdee0c3f61bc5a31e9483f6cad55ab536d2ffae7a72f5f0ca19394a5210b00560d560df167616e756286d14bef0e1b4e4835889d525f1756a62cedb7e3dcae43360b7434338ebdb859ea346faa83d564651a516849524932a5011162d3bd40a6c2279bda58ef479a98bbe14434384ea4e5227a1ffb86eba95f46fb279ace73a334e74f08830449f2382cb2c60", 0x9a}, {&(0x7f0000000000)="540aa3d5e1a861b02ea392d351655e89091a33c5447ec796a214172785ffe0dfab", 0x21}, {&(0x7f0000000300)="8bb303bb5bf1f4943da21c402f544de0a5f772f0d8c06a5f60b8a18ecaf906571caefe89e7a332", 0x27}, {&(0x7f0000000580)="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", 0x4ba}], 0x4}}], 0x2, 0x2401c444) sendto$inet6(r0, &(0x7f00000003c0)="83e226b59a2e0eba0fa5d208", 0xc, 0x20008000, 0x0, 0x0) 1m38.109523815s ago: executing program 6 (id=533): r0 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0x7ff, @vifc_lcl_addr=@local, @multicast1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) 1m37.974316528s ago: executing program 6 (id=536): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./export\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./export\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='mydomain ./export 2147483647 9218 0 0 0\n', 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='mydomain 1 \\x00000000 2147483647 ./export\n', 0x2a) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='-2 -3 +4\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='tcp 2049\n', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/nfsv4recoverydir\x00', 0x1, 0x0) write(r4, &(0x7f0000000740)='/tmp\n', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='8\n', 0x2) (async) mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)={[{'addr=127.0.0.1'}, {'clientaddr=127.0.0.1'}, {'port=2049'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testdir\x00', 0x1ff) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testdir\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="8000000000000000"], &(0x7f0000000640), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x10000, 0x0) open_by_handle_at(r6, &(0x7f00000005c0)=ANY=[], 0x0) 1m26.426250289s ago: executing program 1 (id=624): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x777) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, &(0x7f0000000380)='100000', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0xffffff23, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15610}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040001}, 0x40) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000f6dbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050007000000"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 1m26.282356413s ago: executing program 1 (id=625): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xca, 0x0, 0x45) 1m26.238032674s ago: executing program 1 (id=627): ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x1ac, 0x65, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x180, 0x2, [@TCA_BPF_ACT={0x17c, 0x1, [@m_skbmod={0x178, 0x18, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x1, 0x1, 0x0, 0xab6d}, 0xa}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="addd8ec7b991"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="c42d89d0476d"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6e2, 0x6, 0x3, 0x7fa80, 0x7}, 0xc}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0xd5, 0x6, "0c5720b707e41992f7d3e03eb0a83101ab1330a7c10ee2be34aa729f8f7f65d3fd4b0a3be1976c3538da2fa427f5a41285ad8376e443f0471df1a6abb6bf6be48dac58dd2b082bacfab3bcd53757683c1c0d212191fa3f0ec2d327fed0b2eab4bc9a2c74b4134ca0c5a9c1d5271da9a31296bde60257f2440d5e2a30e4e80d2148172961982fa14afb0c1e46c90998b87dcb9fe848ca94cccb28a2548a07b4f6c66706c6972ec9af1e162134eaa471dae8349e2457250eb954363e269d1ff96cfe0d1ff0455bc96168072b0c7f2371622c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m26.162351516s ago: executing program 1 (id=629): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) 1m26.133655167s ago: executing program 1 (id=631): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x140f, 0x1, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}}, 0x50040) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 1m26.069795738s ago: executing program 1 (id=634): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./export\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./export\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='mydomain ./export 2147483647 9218 0 0 0\n', 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='mydomain 1 \\x00000000 2147483647 ./export\n', 0x2a) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='-2 -3 +4\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='tcp 2049\n', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/nfsv4recoverydir\x00', 0x1, 0x0) write(r4, &(0x7f0000000740)='/tmp\n', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='8\n', 0x2) (async) mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)={[{'addr=127.0.0.1'}, {'clientaddr=127.0.0.1'}, {'port=2049'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testdir\x00', 0x1ff) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testdir\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="8000000000000000"], &(0x7f0000000640), 0x0) write(0xffffffffffffffff, &(0x7f00000006c0)='3\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x10000, 0x0) open_by_handle_at(r6, &(0x7f00000005c0)=ANY=[], 0x0) 1m22.936062097s ago: executing program 41 (id=536): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./export\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./export\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='mydomain ./export 2147483647 9218 0 0 0\n', 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='mydomain 1 \\x00000000 2147483647 ./export\n', 0x2a) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='-2 -3 +4\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='tcp 2049\n', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/nfsv4recoverydir\x00', 0x1, 0x0) write(r4, &(0x7f0000000740)='/tmp\n', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='8\n', 0x2) (async) mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)={[{'addr=127.0.0.1'}, {'clientaddr=127.0.0.1'}, {'port=2049'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testdir\x00', 0x1ff) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testdir\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="8000000000000000"], &(0x7f0000000640), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x10000, 0x0) open_by_handle_at(r6, &(0x7f00000005c0)=ANY=[], 0x0) 1m10.360237275s ago: executing program 42 (id=634): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./export\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./export\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='mydomain ./export 2147483647 9218 0 0 0\n', 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='mydomain 1 \\x00000000 2147483647 ./export\n', 0x2a) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='-2 -3 +4\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='tcp 2049\n', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/nfsv4recoverydir\x00', 0x1, 0x0) write(r4, &(0x7f0000000740)='/tmp\n', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='8\n', 0x2) (async) mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)={[{'addr=127.0.0.1'}, {'clientaddr=127.0.0.1'}, {'port=2049'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testdir\x00', 0x1ff) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testdir\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="8000000000000000"], &(0x7f0000000640), 0x0) write(0xffffffffffffffff, &(0x7f00000006c0)='3\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x10000, 0x0) open_by_handle_at(r6, &(0x7f00000005c0)=ANY=[], 0x0) 26.668367967s ago: executing program 0 (id=1397): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="30000000000000008400000001000000"], 0x30}], 0x1, 0x0) 26.581506949s ago: executing program 0 (id=1399): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="e869b4c8de", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000200)="0f812ed6a7f2a3a76c196cbd8e7bdee0c3f61bc5a31e9483f6cad55ab536d2ffae7a72f5f0ca19394a5210b00560d560df167616e756286d14bef0e1b4e4835889d525f1756a62cedb7e3dcae43360b7434338ebdb859ea346faa83d564651a516849524932a5011162d3bd40a6c2279bda58ef479a98bbe14434384ea4e5227a1ffb86eba95f46fb279ace73a334e74f08830449f2382cb2c60", 0x9a}, {&(0x7f0000000000)="540aa3d5e1a861b02ea392d351655e89091a33c5447ec796a214172785ffe0dfab", 0x21}, {&(0x7f0000000300)="8bb303bb5bf1f4943da21c402f544de0a5f772f0d8c06a5f60b8a18ecaf906571caefe89e7a332", 0x27}, {&(0x7f0000000580)="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", 0x4b8}], 0x4}}], 0x2, 0x2401c444) sendto$inet6(r0, &(0x7f00000003c0)="83e226b59a2e0eba0fa5d208", 0xc, 0x20008000, 0x0, 0x0) 26.54536222s ago: executing program 0 (id=1401): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) 26.229210448s ago: executing program 0 (id=1403): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000000000010000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 26.14951243s ago: executing program 0 (id=1405): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe6, 0x2}, {0xffe0, 0x10}, {0xd, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8c1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad4c90c200"/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0xc004}, 0xc804) recvmmsg$unix(r3, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/13, 0xd}, {&(0x7f0000000280)=""/27, 0x1b}], 0x2}}], 0x1, 0x40000100, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000"], 0x80}}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400109"], 0x87) 26.103263831s ago: executing program 0 (id=1407): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='tcp 2', 0x5) 11.06796054s ago: executing program 43 (id=1407): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='tcp 2', 0x5) 3.613701168s ago: executing program 3 (id=1589): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000001040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008"], 0x44}}, 0x28000) 3.574684569s ago: executing program 3 (id=1591): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe6, 0x2}, {0xffe0, 0x10}, {0xd, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8c1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad4c90c200"/16, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0xc004}, 0xc804) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/13, 0xd}, {&(0x7f0000000280)=""/27, 0x1b}], 0x2}}], 0x1, 0x40000100, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000"], 0x80}}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400109"], 0x87) 3.485069311s ago: executing program 9 (id=1594): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104000000000f00000000000000", @ANYRES32=0x0, @ANYBLOB="000300007573443b280012800b00010065727370616e000018000280040012000800050004000000080004"], 0x58}}, 0x0) 3.484809091s ago: executing program 9 (id=1595): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./export\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='mydomain ./export 2147483647 9218 0 0 0', 0x27) 3.483916502s ago: executing program 9 (id=1596): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="e869b4c8de", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000200)="0f812ed6a7f2a3a76c196cbd8e7bdee0c3f61bc5a31e9483f6cad55ab536d2ffae7a72f5f0ca19394a5210b00560d560df167616e756286d14bef0e1b4e4835889d525f1756a62cedb7e3dcae43360b7434338ebdb859ea346faa83d564651a516849524932a5011162d3bd40a6c2279bda58ef479a98bbe14434384ea4e5227a1ffb86eba95f46fb279ace73a334e74f08830449f2382cb2c60", 0x9a}, {&(0x7f0000000000)="540aa3d5e1a861b02ea392d351655e89091a33c5447ec796a214172785ffe0dfab", 0x21}, {&(0x7f0000000300)="8bb303bb5bf1f4943da21c402f544de0a5f772f0", 0x14}, {&(0x7f0000000580)="135979d5553b6190ee802c99f43b081320ac32875e1070335278f56c34891da7916cc9f2458fcb586d1e4e50a955bbc5618fa823a29f5cc85512f218c9574c3a4b5382056e04168ea480e0674a64d7877aff2b339047e4b7c6d2ef9c2580c6a9b3dc078481f802760d81e064e290b6205d556bfbd79173c656b65e1eeb61e3091e2cef32473e22764bede62295dcb9a0fad0317c7083d9fe1329a629a3d877fa6bd796295026bb0d21ecc0cec4a9757112d46dcd0d58bb54f1a58d1817c268f2a548421a1d2a43fad7f50e9d5a2312d3cabbada7b672bd434f7575cd1fcb6b14cf90b46d5da40445f5a447af86942e2a1bef7ed8593da3b3af385444876e9f8da03585f23e0da33e7709aeabef64b9e31efaca799df4642f847f93d84527901dc24cd4f467f67c848ddb92766c5ec3dbc68725bdc2ca73ec85d70724fb2d50d22fbfb5911262bad75240aa25813b815181bcc8e0958572c0f106d2a64cba2ab268b709ef34d6cb950cc72c8dad9ec4a71a1bb3a1930226d81dff2587d0fbfd74afd8344cbfceac3969744be115b5373ebf55ffeee0c2b1186716061f6ce7ec69a55ba5925b87faefe56a51133d62c859ae4f5befb3254cac828b4e8ea943e64055463425105091a7307744305e116aa648ec9ae831a2bf678d014620b4885ee6dd36de27645c01b1bdf90033e2620eefff1de2dc0e5d5d73008a99b661ff4015644f3ef2c8e16de753d3bb2071e7c984aef53f29c71fb604efa6ac407e41c9186c2815fe3ee2732cc62694aaffcb2671fd6e8d971cf3aa7f40e8cd860aaa01df1cf6db739e67c1e5dc5e9772845be5f161f9b9bce92f11b96139e3ddc59d5f94abfa911e1bf71661411da0c7e254ce4b5f9b3f6800a5091e0e02336117ca465514e40df8315f5b94f66b50cedd8bc05f0457fbd7eb1b96024b5b8c143961ef8391425b6df2f7505599487e5084446e6669d08e36da3f3fc0c1d4077794040c7b35b5d4dde7b59c592d63ef301e60634496c0410cb68417e75d8e952f92421a88d2381ee12754180b547424dbfc6d2859b60fb34faa3e5b15da6322a40b5a5d79c796473303ca6a7e5fc0595d60d77153e9d21c4b4b84365f8de0ebd2e2d9da6fcdf1105d530b1a8dfafe430763901494d41ad0cc71fb26c2a13cf4b3766bdff601b1dbeb3c20389f248798531b39d41ccf9acf34b0421b711e31a21fe123e98627e6ecf7c98c6e88c20fe4d3427f807e8e75742f1280279ae1d4f6e5ee72719097338fa75f7c2a96f9a0789fc0daa50cdc3aa2d0c3a44ce16bfe904cfc2e5eef1eb9e90e3aa5f3e942f6810e4fbab3713f5922f0f365b8415c6beeca0baff7d71e73c0c30ca5d54b87ee62b41658ac2697e85768e00e8eb95952eabf2c1cd5121cca0c00da63bd805ca970abe5c980daddd226ffa4d86d80215b9390c3e9d7ceb45ca10ed6a42d41802c776007d4b30bc92285fb594f76ed0aae4e03a04717c7991ef72d9cdc2b66d6d11049e44c80235b67d942ff1272a78e401ef88fc277f2cbb241352972ace3bba26fd716845bde14e48eea499a933829bd3efa535c4f396c0d8d97161e296e44da511407aaa8987b670fb41780915d2e6f5062150b97eda7a474b21185acedc1757ff6b115e46eff25cbab9a09fc6a7fc726834ac1b9c203b7ad4037858a293f037114a8e11fbfe9d776d33e4b5e542226", 0x4ba}], 0x4}}], 0x2, 0x2401c444) sendto$inet6(r0, &(0x7f00000003c0)="83e226b59a2e0eba0fa5d208", 0xc, 0x20008000, 0x0, 0x0) 3.456426282s ago: executing program 9 (id=1597): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="40020202"], 0x5) write$nci(r0, 0x0, 0x0) 3.329435606s ago: executing program 7 (id=1600): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x56a4c5c) write$ppp(r1, &(0x7f0000000a00), 0x0) 3.294449476s ago: executing program 7 (id=1601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f40)={0x24, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 3.266656877s ago: executing program 7 (id=1602): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000001040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008"], 0x44}}, 0x28000) 3.094249441s ago: executing program 5 (id=1604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000003380)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x9}, {&(0x7f0000002340)="4de047b4e72a9945301517b7827741c0ed92d0a5d20ffa4ee24439494676d01fa02d4ac2916d7e4a3eb88a2ad7adcdb0d065e4682f24e6edcbb82d9edc5c3a6a1fa3f7514428ecf0ea522cb399c4dd5e0a8594259daa2f3e7eab0d1b74209cbf2903ccff3c05cbeda404ceb478744548da730cebb753d48152dd7e9ee96a825baf", 0x81}], 0x3) 3.038257673s ago: executing program 5 (id=1605): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000002f80)={{r1, 0x0, 0x2, &(0x7f0000000d00)={@align=0x2, {0x0, 0x8, 0x3, 0x9}}, 0xf, 0x0, 0x0}, {[0x0, 0x86f1, 0x4, 0x1]}, 0x8001, 0x1000, &(0x7f0000001f80)=""/4096}) sendmsg$nl_generic(r2, 0x0, 0x20000000) r4 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r4, 0x0, 0x0) ioctl$sock_bt_hci(r3, 0x800448d4, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r6, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x4, 0x6, 0x31, 0x9, 0x80, 0x4, 0x42, 0x1, 0x8b, 0x7, 0x8, 0x8, 0xfe, 0x8}, 0xe) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0xfffffff7, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 529.055266ms ago: executing program 9 (id=1607): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="e869b4c8de", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000200)="0f812ed6a7f2a3a76c196cbd8e7bdee0c3f61bc5a31e9483f6cad55ab536d2ffae7a72f5f0ca19394a5210b00560d560df167616e756286d14bef0e1b4e4835889d525f1756a62cedb7e3dcae43360b7434338ebdb859ea346faa83d564651a516849524932a5011162d3bd40a6c2279bda58ef479a98bbe14434384ea4e5227a1ffb86eba95f46fb279ace73a334e74f08830449f2382cb2c60", 0x9a}, {&(0x7f0000000000)="540aa3d5e1a861b02ea392d351655e89091a33c5447ec796a214172785ffe0dfab", 0x21}, {&(0x7f0000000300)="8bb303bb5bf1f4943da21c402f544de0a5f772f0", 0x14}, {&(0x7f0000000580)="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", 0x4ba}], 0x4}}], 0x2, 0x2401c444) sendto$inet6(r0, &(0x7f00000003c0)="83e226b59a2e0eba0fa5d208", 0xc, 0x20008000, 0x0, 0x0) 510.883496ms ago: executing program 9 (id=1608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) r1 = syz_usb_connect(0xc7d9e091a13276ed, 0x50, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x0) syz_usb_ep_read(r1, 0x4, 0x0, 0x0) syz_usb_ep_write(r1, 0x83, 0x0, 0x0) close(0x3) socket(0x15, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050020010000000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @empty, 0x3ff}, 0x80, 0x0}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(0xffffffffffffffff, &(0x7f0000002180)=""/4068, 0xfe4) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000100)={0x4, 0x9, 0x10000, 0x9, 0x0, "67bd7d849dd889bdab58d7331b936fe22c6251", 0x6, 0x4}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000180)='2\x00', 0x2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000640)=ANY=[], 0x1, 0x0, 0x0) 496.616607ms ago: executing program 5 (id=1609): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 495.194487ms ago: executing program 7 (id=1610): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x5a6, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 493.411377ms ago: executing program 3 (id=1611): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x56a4c5c) write$ppp(r1, &(0x7f0000000a00)='rI\r', 0x3) 430.276669ms ago: executing program 5 (id=1612): unshare(0x2c020400) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 412.919579ms ago: executing program 5 (id=1614): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x20, 0x0, 0x3, 0xfffff034}]}, 0x10) 325.942401ms ago: executing program 3 (id=1616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0xffffff23, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15610}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040001}, 0x40) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000f6dbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 275.002352ms ago: executing program 7 (id=1618): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="e869b4c8de", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000200)="0f812ed6a7f2a3a76c196cbd8e7bdee0c3f61bc5a31e9483f6cad55ab536d2ffae7a72f5f0ca19394a5210b00560d560df167616e756286d14bef0e1b4e4835889d525f1756a62cedb7e3dcae43360b7434338ebdb859ea346faa83d564651a516849524932a5011162d3bd40a6c2279bda58ef479a98bbe14434384ea4e5227a1ffb86eba95f46fb279ace73a334e74f08830449f2382cb2c60", 0x9a}, {&(0x7f0000000000)="540aa3d5e1a861b02ea392d351655e89091a33c5447ec796a214172785ffe0dfab", 0x21}, {&(0x7f0000000300)="8bb303bb5bf1f4943da21c402f544de0a5f772f0d8c06a5f60b8a18ecaf9", 0x1e}, {&(0x7f0000000580)="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", 0x4ba}], 0x4}}], 0x2, 0x2401c444) sendto$inet6(r0, &(0x7f00000003c0)="83e226b59a2e0eba0fa5d208", 0xc, 0x20008000, 0x0, 0x0) 233.104914ms ago: executing program 4 (id=1620): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 231.745174ms ago: executing program 3 (id=1621): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000001040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff00000800"], 0x44}}, 0x28000) 230.293954ms ago: executing program 7 (id=1622): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe6, 0x2}, {0xffe0, 0x10}, {0xd, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8c1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad4c90c200"/16, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0xc004}, 0xc804) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/13, 0xd}, {&(0x7f0000000280)=""/27, 0x1b}], 0x2}}], 0x1, 0x40000100, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000"], 0x80}}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400109"], 0x87) 162.622435ms ago: executing program 4 (id=1623): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f00000020c0)="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", 0x6a3}, {&(0x7f00000015c0)="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", 0x3a5}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @local}}}], 0x20}, 0x0) 162.290615ms ago: executing program 5 (id=1624): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 161.338925ms ago: executing program 3 (id=1625): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x0, &(0x7f0000000680)}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0xfffffffc}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000006000000080004007f0000010f000700756e636f6e66696e65640000080005007f002c"], 0x44}}, 0x0) 110.044677ms ago: executing program 4 (id=1626): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x56a4c5c) write$ppp(r1, &(0x7f0000000a00)='rI', 0x2) 109.504657ms ago: executing program 4 (id=1627): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1b, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000000000010000ac", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 108.865417ms ago: executing program 4 (id=1628): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x5a6, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=1629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000003380)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x9}, {&(0x7f0000002340)="4de047b4e72a9945301517b7827741c0ed92d0a5d20ffa4ee24439494676d01fa02d4ac2916d7e4a3eb88a2ad7adcdb0d065e4682f24e6edcbb82d9edc5c3a6a1fa3f7514428ecf0ea522cb399c4dd5e0a8594259daa2f3e7eab0d1b74209cbf2903ccff3c05cbeda404ceb478744548da730cebb753d48152dd7e9ee96a825baf", 0x81}], 0x3) kernel console output (not intermixed with test programs): on: batadv_slave_1 [ 80.574702][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.576432][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.578207][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.579756][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.584953][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.587481][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.589415][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.591015][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.592385][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.594646][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.598590][ T6032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.606721][ T5914] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.608294][ T5914] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.609741][ T5914] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.612285][ T5914] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.651067][ T6207] loop8: detected capacity change from 0 to 128 [ 80.662385][ T6207] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 80.688671][ T6207] UDF-fs: error (device loop8): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 80.694427][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.696401][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.705705][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.711558][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.723738][ T6032] device veth0_vlan entered promiscuous mode [ 80.726761][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.729122][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.730899][ T4346] Bluetooth: hci2: command 0x041b tx timeout [ 80.817204][ T6032] device veth1_vlan entered promiscuous mode [ 80.850167][ T6223] device syzkaller0 entered promiscuous mode [ 81.376541][ T4970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.378033][ T4970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.379591][ T4970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.382546][ T4970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.384072][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.386013][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.387790][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.389393][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.398964][ T6272] device syzkaller0 entered promiscuous mode [ 81.404593][ T6032] device veth0_macvtap entered promiscuous mode [ 81.442288][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.444273][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.446042][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.680765][ T4340] Bluetooth: hci4: command 0x040f tx timeout [ 82.810705][ T4346] Bluetooth: hci2: command 0x040f tx timeout [ 83.760704][ T4346] Bluetooth: hci4: command 0x0419 tx timeout [ 84.880647][ T4346] Bluetooth: hci2: command 0x0419 tx timeout [ 92.333649][ T6032] device veth1_macvtap entered promiscuous mode [ 92.662753][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.665249][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.667290][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.673134][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.674967][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.687449][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.692450][ T6032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.795888][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.797814][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.800534][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.803736][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.805737][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.808886][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.812548][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.815735][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.821073][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.824111][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.827090][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.830230][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.835790][ T6032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.838275][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.840053][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.851856][ T6032] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.853449][ T6032] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.855019][ T6032] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.856628][ T6032] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.085630][ T4340] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.088195][ T4340] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.090046][ T4340] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.092925][ T4340] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.094542][ T4340] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.095997][ T4340] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.171091][ T4607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.172652][ T4607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.174728][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.178150][ T242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.179464][ T242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.183966][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.366003][ T4340] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.371335][ T4340] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.373404][ T4340] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.377991][ T4340] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.381057][ T4340] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.384140][ T4340] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.567314][ T6359] loop4: detected capacity change from 0 to 128 [ 93.588259][ T6359] FAT-fs (loop4): Directory bread(block 1048) failed [ 93.589824][ T6359] FAT-fs (loop4): Directory bread(block 1049) failed [ 93.591501][ T6359] FAT-fs (loop4): Directory bread(block 1050) failed [ 93.592985][ T6359] FAT-fs (loop4): Directory bread(block 1051) failed [ 93.594138][ T6359] FAT-fs (loop4): Directory bread(block 1052) failed [ 93.595351][ T6359] FAT-fs (loop4): Directory bread(block 1053) failed [ 93.596324][ T6359] FAT-fs (loop4): Directory bread(block 1054) failed [ 93.597621][ T6359] FAT-fs (loop4): Directory bread(block 1055) failed [ 93.630422][ T6349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.440'. [ 93.713647][ T6367] syz.3.446 uses obsolete (PF_INET,SOCK_PACKET) [ 93.758850][ T9] device hsr_slave_0 left promiscuous mode [ 93.860282][ T6380] FAT-fs (loop4): Directory bread(block 1048) failed [ 93.861905][ T6380] FAT-fs (loop4): Directory bread(block 1049) failed [ 94.096451][ T9] device hsr_slave_1 left promiscuous mode [ 94.170916][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.172580][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.174436][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.175885][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.177471][ T9] device bridge_slave_1 left promiscuous mode [ 94.179887][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.211696][ T9] device bridge_slave_0 left promiscuous mode [ 94.213130][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.244456][ T9] device hsr_slave_0 left promiscuous mode [ 94.291139][ T9] device hsr_slave_1 left promiscuous mode [ 94.350806][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.352287][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.354187][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.355743][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.357316][ T9] device bridge_slave_1 left promiscuous mode [ 94.358703][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.381891][ T9] device bridge_slave_0 left promiscuous mode [ 94.383178][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.540799][ T9] device veth1_macvtap left promiscuous mode [ 94.542007][ T9] device veth0_macvtap left promiscuous mode [ 94.543154][ T9] device veth1_vlan left promiscuous mode [ 94.544190][ T9] device veth0_vlan left promiscuous mode [ 94.640805][ T9] device veth1_macvtap left promiscuous mode [ 94.641903][ T9] device veth0_macvtap left promiscuous mode [ 94.642964][ T9] device veth1_vlan left promiscuous mode [ 94.643981][ T9] device veth0_vlan left promiscuous mode [ 95.121162][ T4346] Bluetooth: hci0: command 0x0409 tx timeout [ 95.404731][ T6421] syz.4.453 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 95.406674][ T6421] CPU: 0 PID: 6421 Comm: syz.4.453 Not tainted syzkaller #0 [ 95.407954][ T6421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 95.409830][ T6421] Call trace: [ 95.410487][ T6421] dump_backtrace+0x1c4/0x1f0 [ 95.411422][ T6421] show_stack+0x2c/0x3c [ 95.412230][ T6421] __dump_stack+0x30/0x40 [ 95.413060][ T6421] dump_stack_lvl+0xf4/0x15c [ 95.413901][ T6421] dump_stack+0x1c/0x5c [ 95.414696][ T6421] dump_header+0xc0/0x724 [ 95.415523][ T6421] oom_kill_process+0x35c/0x660 [ 95.416413][ T6421] out_of_memory+0xbf0/0xf70 [ 95.417250][ T6421] mem_cgroup_out_of_memory+0x228/0x2d0 [ 95.418276][ T6421] try_charge_memcg+0xa4c/0x1390 [ 95.419186][ T6421] __memcg_kmem_charge_page+0x304/0x54c [ 95.420239][ T6421] memcg_charge_kernel_stack+0x224/0x6a4 [ 95.421255][ T6421] dup_task_struct+0x290/0x7a8 [ 95.422222][ T6421] copy_process+0x4ec/0x38b4 [ 95.423105][ T6421] kernel_clone+0x1ec/0x938 [ 95.423941][ T6421] __arm64_sys_clone3+0x354/0x388 [ 95.424894][ T6421] invoke_syscall+0x98/0x290 [ 95.425716][ T6421] el0_svc_common+0x13c/0x258 [ 95.426578][ T6421] do_el0_svc+0x5c/0x134 [ 95.427321][ T6421] el0_svc+0x58/0x128 [ 95.428048][ T6421] el0t_64_sync_handler+0x84/0xf0 [ 95.428984][ T6421] el0t_64_sync+0x18c/0x190 [ 95.431166][ T6421] memory: usage 96kB, limit 96kB, failcnt 51 [ 95.432310][ T6421] memory+swap: usage 104kB, limit 9007199254740988kB, failcnt 0 [ 95.433630][ T6421] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 95.434857][ T6421] Memory cgroup stats for /syz4/test: [ 95.435085][ T6421] anon 0 [ 95.435085][ T6421] file 0 [ 95.435085][ T6421] kernel 98304 [ 95.435085][ T6421] kernel_stack 0 [ 95.435085][ T6421] pagetables 4096 [ 95.435085][ T6421] sec_pagetables 0 [ 95.435085][ T6421] percpu 1184 [ 95.435085][ T6421] sock 0 [ 95.435085][ T6421] vmalloc 0 [ 95.435085][ T6421] shmem 0 [ 95.435085][ T6421] zswap 0 [ 95.435085][ T6421] zswapped 0 [ 95.435085][ T6421] file_mapped 0 [ 95.435085][ T6421] file_dirty 0 [ 95.435085][ T6421] file_writeback 0 [ 95.435085][ T6421] swapcached 8192 [ 95.435085][ T6421] anon_thp 0 [ 95.435085][ T6421] file_thp 0 [ 95.435085][ T6421] shmem_thp 0 [ 95.435085][ T6421] inactive_anon 0 [ 95.435085][ T6421] active_anon 0 [ 95.435085][ T6421] inactive_file 0 [ 95.435085][ T6421] active_file 0 [ 95.435085][ T6421] unevictable 0 [ 95.435085][ T6421] slab_reclaimable 4240 [ 95.435085][ T6421] slab_unreclaimable 70192 [ 95.435085][ T6421] slab 74432 [ 95.452472][ T4346] Bluetooth: hci5: command 0x0409 tx timeout [ 95.455878][ T6421] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.453,pid=6421,uid=0 [ 95.460835][ T6421] Memory cgroup out of memory: Killed process 6421 (syz.4.453) total-vm:102368kB, anon-rss:1360kB, file-rss:21592kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 96.733083][ T9] team0 (unregistering): Port device team_slave_1 removed [ 96.895396][ T9] team0 (unregistering): Port device team_slave_0 removed [ 97.091233][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.200895][ T4346] Bluetooth: hci0: command 0x041b tx timeout [ 97.292216][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.521712][ T4346] Bluetooth: hci5: command 0x041b tx timeout [ 97.522894][ T29] oom_reaper: reaped process 6421 (syz.4.453), now anon-rss:0kB, file-rss:21528kB, shmem-rss:0kB [ 98.812085][ T9] bond0 (unregistering): Released all slaves [ 99.281382][ T4340] Bluetooth: hci0: command 0x040f tx timeout [ 99.610707][ T4340] Bluetooth: hci5: command 0x040f tx timeout [ 101.243800][ T9] team0 (unregistering): Port device team_slave_1 removed [ 101.360724][ T4340] Bluetooth: hci0: command 0x0419 tx timeout [ 101.411644][ T9] team0 (unregistering): Port device team_slave_0 removed [ 101.581717][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.680696][ T4346] Bluetooth: hci5: command 0x0419 tx timeout [ 101.781467][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.312546][ T9] bond0 (unregistering): Released all slaves [ 103.719227][ T6327] chnl_net:caif_netlink_parms(): no params data found [ 103.760491][ T6327] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.762393][ T6327] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.764158][ T6327] device bridge_slave_0 entered promiscuous mode [ 103.766373][ T6327] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.767470][ T6327] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.768997][ T6327] device bridge_slave_1 entered promiscuous mode [ 103.775519][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'. [ 103.778509][ T6342] chnl_net:caif_netlink_parms(): no params data found [ 103.793355][ T6327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.796112][ T6327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.804345][ T6327] team0: Port device team_slave_0 added [ 103.806332][ T6327] team0: Port device team_slave_1 added [ 103.814250][ T6327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.815530][ T6327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.819852][ T6327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.824129][ T6327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.825396][ T6327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.839375][ T6327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.962000][ T6327] device hsr_slave_0 entered promiscuous mode [ 103.980972][ T6327] device hsr_slave_1 entered promiscuous mode [ 104.023390][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.024739][ T6342] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.026449][ T6342] device bridge_slave_0 entered promiscuous mode [ 104.040948][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.051183][ T6342] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.053661][ T6342] device bridge_slave_1 entered promiscuous mode [ 104.123509][ T6342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.126970][ T6342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.146535][ T6342] team0: Port device team_slave_0 added [ 104.148489][ T6342] team0: Port device team_slave_1 added [ 104.181361][ T6342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.185002][ T6342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.189458][ T6342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.197640][ T6342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.198771][ T6342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.220712][ T6342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.369591][ T6489] syz.3.468 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=2, oom_score_adj=1000 [ 104.382344][ T6489] CPU: 1 PID: 6489 Comm: syz.3.468 Not tainted syzkaller #0 [ 104.383728][ T6489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 104.385616][ T6489] Call trace: [ 104.386205][ T6489] dump_backtrace+0x1c4/0x1f0 [ 104.387036][ T6489] show_stack+0x2c/0x3c [ 104.387801][ T6489] __dump_stack+0x30/0x40 [ 104.388571][ T6489] dump_stack_lvl+0xf4/0x15c [ 104.389414][ T6489] dump_stack+0x1c/0x5c [ 104.390188][ T6489] dump_header+0xc0/0x724 [ 104.390957][ T6489] oom_kill_process+0x35c/0x660 [ 104.391846][ T6489] out_of_memory+0xbf0/0xf70 [ 104.392686][ T6489] mem_cgroup_out_of_memory+0x228/0x2d0 [ 104.393758][ T6489] try_charge_memcg+0xa4c/0x1390 [ 104.394643][ T6489] obj_cgroup_charge+0x178/0x2e4 [ 104.395720][ T6489] __kmem_cache_alloc_node+0xf0/0x318 [ 104.396866][ T6489] kmalloc_trace+0x48/0x94 [ 104.397826][ T6489] ipv6_add_dev+0x4f0/0xeec [ 104.398759][ T6489] addrconf_notify+0x504/0xc98 [ 104.399699][ T6489] raw_notifier_call_chain+0xd8/0x168 [ 104.400768][ T6489] call_netdevice_notifiers+0x110/0x198 [ 104.401861][ T6489] register_netdevice+0x11c4/0x1650 [ 104.402860][ T6489] ip6_tnl_create2+0x80/0x138 [ 104.403747][ T6489] ip6_tnl_newlink+0x218/0x4c4 [ 104.404649][ T6489] rtnl_newlink+0x10b4/0x1af0 [ 104.405495][ T6489] rtnetlink_rcv_msg+0x694/0xcc4 [ 104.406450][ T6489] netlink_rcv_skb+0x220/0x3ec [ 104.407453][ T6489] rtnetlink_rcv+0x28/0x38 [ 104.408348][ T6489] netlink_unicast+0x5fc/0x80c [ 104.409292][ T6489] netlink_sendmsg+0x6f0/0x9d8 [ 104.410244][ T6489] ____sys_sendmsg+0x588/0x90c [ 104.411190][ T6489] __sys_sendmsg+0x288/0x374 [ 104.412058][ T6489] __arm64_sys_sendmsg+0x80/0x94 [ 104.412951][ T6489] invoke_syscall+0x98/0x290 [ 104.413811][ T6489] el0_svc_common+0x13c/0x258 [ 104.414654][ T6489] do_el0_svc+0x5c/0x134 [ 104.415557][ T6489] el0_svc+0x58/0x128 [ 104.416339][ T6489] el0t_64_sync_handler+0x84/0xf0 [ 104.417294][ T6489] el0t_64_sync+0x18c/0x190 [ 104.423284][ T6489] memory: usage 88kB, limit 96kB, failcnt 42 [ 104.425369][ T6489] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 104.427251][ T6489] kmem: usage 88kB, limit 9007199254740988kB, failcnt 0 [ 104.428965][ T6489] Memory cgroup stats for /syz3/test: [ 104.429254][ T6489] anon 0 [ 104.429254][ T6489] file 0 [ 104.429254][ T6489] kernel 90112 [ 104.429254][ T6489] kernel_stack 32768 [ 104.429254][ T6489] pagetables 4096 [ 104.429254][ T6489] sec_pagetables 0 [ 104.429254][ T6489] percpu 1184 [ 104.429254][ T6489] sock 0 [ 104.429254][ T6489] vmalloc 0 [ 104.429254][ T6489] shmem 0 [ 104.429254][ T6489] zswap 0 [ 104.429254][ T6489] zswapped 0 [ 104.429254][ T6489] file_mapped 0 [ 104.429254][ T6489] file_dirty 0 [ 104.429254][ T6489] file_writeback 0 [ 104.429254][ T6489] swapcached 12288 [ 104.429254][ T6489] anon_thp 0 [ 104.429254][ T6489] file_thp 0 [ 104.429254][ T6489] shmem_thp 0 [ 104.429254][ T6489] inactive_anon 0 [ 104.429254][ T6489] active_anon 0 [ 104.429254][ T6489] inactive_file 0 [ 104.429254][ T6489] active_file 0 [ 104.429254][ T6489] unevictable 0 [ 104.429254][ T6489] slab_reclaimable 4624 [ 104.429254][ T6489] slab_unreclaimable 45864 [ 104.429254][ T6489] slab 50488 [ 104.460703][ T6489] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.468,pid=6487,uid=0 [ 104.464269][ T6489] Memory cgroup out of memory: Killed process 6487 (syz.3.468) total-vm:102368kB, anon-rss:1372kB, file-rss:22616kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 104.522531][ T6342] device hsr_slave_0 entered promiscuous mode [ 104.571358][ T6342] device hsr_slave_1 entered promiscuous mode [ 104.590912][ T6342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.592351][ T6342] Cannot create hsr debugfs directory [ 104.774166][ T6523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.475'. [ 104.801583][ T6523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.475'. [ 104.909872][ T6538] device syzkaller0 entered promiscuous mode [ 105.200485][ T6543] device syzkaller0 entered promiscuous mode [ 105.214982][ T6566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.481'. [ 116.302730][ T6342] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.354439][ T9] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.365249][ T6694] device syzkaller0 entered promiscuous mode [ 116.423603][ T6342] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.932038][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.933332][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.159756][ T9] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.235036][ T6342] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.240268][ T6723] device batadv_slave_0 entered promiscuous mode [ 127.245056][ T6723] device batadv_slave_0 left promiscuous mode [ 127.301879][ T9] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.362278][ T6342] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.380460][ T6735] device syzkaller0 entered promiscuous mode [ 127.432284][ T9] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.674822][ T6758] batman_adv: batadv0: Adding interface: veth0 [ 127.676409][ T6758] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.682064][ T6758] batman_adv: batadv0: Interface activated: veth0 [ 127.689601][ T6758] netlink: 20 bytes leftover after parsing attributes in process `syz.6.508'. [ 127.696141][ T6758] batman_adv: batadv0: Interface deactivated: veth0 [ 127.697444][ T6758] batman_adv: batadv0: Removing interface: veth0 [ 127.699319][ T6758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.700872][ T6758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.973118][ T6761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.509'. [ 127.979185][ T6327] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 128.033419][ T6327] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 128.075511][ T6327] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 128.097163][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.6.510'. [ 128.155882][ T6327] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 128.283751][ T6776] syz.3.513 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 128.285869][ T6776] CPU: 1 PID: 6776 Comm: syz.3.513 Not tainted syzkaller #0 [ 128.287181][ T6776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 128.288905][ T6776] Call trace: [ 128.289509][ T6776] dump_backtrace+0x1c4/0x1f0 [ 128.290342][ T6776] show_stack+0x2c/0x3c [ 128.291131][ T6776] __dump_stack+0x30/0x40 [ 128.291933][ T6776] dump_stack_lvl+0xf4/0x15c [ 128.292776][ T6776] dump_stack+0x1c/0x5c [ 128.293514][ T6776] dump_header+0xc0/0x724 [ 128.294321][ T6776] oom_kill_process+0x35c/0x660 [ 128.295202][ T6776] out_of_memory+0xbf0/0xf70 [ 128.296022][ T6776] mem_cgroup_out_of_memory+0x228/0x2d0 [ 128.297014][ T6776] try_charge_memcg+0xa4c/0x1390 [ 128.297913][ T6776] obj_cgroup_charge+0x178/0x2e4 [ 128.298792][ T6776] __kmem_cache_alloc_node+0xf0/0x318 [ 128.299826][ T6776] kmalloc_trace+0x48/0x94 [ 128.300658][ T6776] ipv6_add_dev+0x118/0xeec [ 128.301445][ T6776] addrconf_notify+0x504/0xc98 [ 128.302307][ T6776] raw_notifier_call_chain+0xd8/0x168 [ 128.303233][ T6776] call_netdevice_notifiers+0x110/0x198 [ 128.304211][ T6776] register_netdevice+0x11c4/0x1650 [ 128.305217][ T6776] ip6_tnl_create2+0x80/0x138 [ 128.306146][ T6776] ip6_tnl_newlink+0x218/0x4c4 [ 128.307026][ T6776] rtnl_newlink+0x10b4/0x1af0 [ 128.307919][ T6776] rtnetlink_rcv_msg+0x694/0xcc4 [ 128.308811][ T6776] netlink_rcv_skb+0x220/0x3ec [ 128.309670][ T6776] rtnetlink_rcv+0x28/0x38 [ 128.310440][ T6776] netlink_unicast+0x5fc/0x80c [ 128.311379][ T6776] netlink_sendmsg+0x6f0/0x9d8 [ 128.312217][ T6776] ____sys_sendmsg+0x588/0x90c [ 128.313112][ T6776] __sys_sendmsg+0x288/0x374 [ 128.313933][ T6776] __arm64_sys_sendmsg+0x80/0x94 [ 128.314826][ T6776] invoke_syscall+0x98/0x290 [ 128.315690][ T6776] el0_svc_common+0x13c/0x258 [ 128.316515][ T6776] do_el0_svc+0x5c/0x134 [ 128.317300][ T6776] el0_svc+0x58/0x128 [ 128.317975][ T6776] el0t_64_sync_handler+0x84/0xf0 [ 128.318795][ T6776] el0t_64_sync+0x18c/0x190 [ 128.320224][ T6776] memory: usage 92kB, limit 96kB, failcnt 101 [ 128.321603][ T6776] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 128.322947][ T6776] kmem: usage 84kB, limit 9007199254740988kB, failcnt 0 [ 128.324058][ T6776] Memory cgroup stats for /syz3/test: [ 128.324171][ T6776] anon 8192 [ 128.324171][ T6776] file 0 [ 128.324171][ T6776] kernel 86016 [ 128.324171][ T6776] kernel_stack 32768 [ 128.324171][ T6776] pagetables 4096 [ 128.324171][ T6776] sec_pagetables 0 [ 128.324171][ T6776] percpu 0 [ 128.324171][ T6776] sock 0 [ 128.324171][ T6776] vmalloc 0 [ 128.324171][ T6776] shmem 0 [ 128.324171][ T6776] zswap 0 [ 128.324171][ T6776] zswapped 0 [ 128.324171][ T6776] file_mapped 0 [ 128.324171][ T6776] file_dirty 0 [ 128.324171][ T6776] file_writeback 0 [ 128.324171][ T6776] swapcached 16384 [ 128.324171][ T6776] anon_thp 0 [ 128.324171][ T6776] file_thp 0 [ 128.324171][ T6776] shmem_thp 0 [ 128.324171][ T6776] inactive_anon 0 [ 128.324171][ T6776] active_anon 0 [ 128.324171][ T6776] inactive_file 0 [ 128.324171][ T6776] active_file 0 [ 128.324171][ T6776] unevictable 0 [ 128.324171][ T6776] slab_reclaimable 4624 [ 128.324171][ T6776] slab_unreclaimable 41760 [ 128.324171][ T6776] slab 46384 [ 128.340569][ T6776] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.513,pid=6774,uid=0 [ 128.344806][ T6776] Memory cgroup out of memory: Killed process 6774 (syz.3.513) total-vm:102368kB, anon-rss:1364kB, file-rss:21588kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 128.367017][ T6785] netlink: 80 bytes leftover after parsing attributes in process `syz.3.516'. [ 128.394785][ T6342] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 128.537196][ T6342] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 128.626925][ T6799] netlink: 12 bytes leftover after parsing attributes in process `syz.6.519'. [ 128.681602][ T6342] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 128.731943][ T6342] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 128.824633][ T6327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.829441][ T6327] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.834988][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.836563][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.839900][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.842091][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.843639][ T4970] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.844886][ T4970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.849663][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.855282][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.856967][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.858568][ T4970] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.859892][ T4970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.862595][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.872042][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.874064][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.876395][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.878034][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.879742][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.881681][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.883569][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.885179][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.886775][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.889145][ T6327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.959702][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.087849][ T6327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.096089][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.097568][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.102656][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.104566][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.113086][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.114961][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.116931][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.118896][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.128076][ T6327] device veth0_vlan entered promiscuous mode [ 129.133299][ T6327] device veth1_vlan entered promiscuous mode [ 129.147558][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.149432][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.151643][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.153753][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.157207][ T6327] device veth0_macvtap entered promiscuous mode [ 129.160147][ T6327] device veth1_macvtap entered promiscuous mode [ 129.477561][ T6327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.479467][ T6327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.481660][ T6327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.483703][ T6327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.486239][ T6327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.490083][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.491827][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.493401][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.495196][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.501483][ T6327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.503197][ T6327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.504853][ T6327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.506605][ T6327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.508250][ T6327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.509962][ T6327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.516508][ T6327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.517901][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.519788][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.548271][ T6327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.550167][ T6327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.552231][ T6327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.554123][ T6327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.964631][ T9] device hsr_slave_0 left promiscuous mode [ 130.010902][ T9] device hsr_slave_1 left promiscuous mode [ 130.080735][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.082290][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.083954][ T9] device bridge_slave_1 left promiscuous mode [ 130.085167][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.131230][ T9] device bridge_slave_0 left promiscuous mode [ 130.132447][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.260752][ T9] device veth1_macvtap left promiscuous mode [ 130.261938][ T9] device veth0_macvtap left promiscuous mode [ 130.263065][ T9] device veth1_vlan left promiscuous mode [ 130.264325][ T9] device veth0_vlan left promiscuous mode [ 131.540089][ T6801] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.132815][ T9] team0 (unregistering): Port device team_slave_1 removed [ 132.291505][ T9] team0 (unregistering): Port device team_slave_0 removed [ 132.461598][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.661558][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.174900][ T9] bond0 (unregistering): Released all slaves [ 134.506698][ T4582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.508154][ T4582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.510022][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.575474][ T4582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.576894][ T4582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.596500][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.679483][ T6342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.686123][ T6919] device syzkaller0 entered promiscuous mode [ 134.705359][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.707132][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.711675][ T6342] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.717819][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.719649][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.729847][ T242] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.731183][ T242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.734005][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.859381][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.863340][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.865459][ T242] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.866918][ T242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.868614][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.871405][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.873662][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.875785][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.877462][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 134.892039][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.896163][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.911076][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.912616][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.920883][ T5039] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 134.930557][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.933801][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.941859][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.005528][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.007086][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.024710][ T6342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.043896][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.045704][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.098678][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.100508][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.106288][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.110346][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.116380][ T6342] device veth0_vlan entered promiscuous mode [ 135.122484][ T5039] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 135.124224][ T5039] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.126710][ T5039] usb 1-1: config 0 descriptor?? [ 135.138840][ T5039] cp210x 1-1:0.0: cp210x converter detected [ 135.143747][ T6342] device veth1_vlan entered promiscuous mode [ 135.145386][ T6966] loop4: detected capacity change from 0 to 16 [ 135.156637][ T6966] erofs: (device loop4): mounted with root inode @ nid 36. [ 135.190330][ T6342] device veth0_macvtap entered promiscuous mode [ 135.199745][ T6342] device veth1_macvtap entered promiscuous mode [ 135.211839][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.213811][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.215572][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.217644][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.219664][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.230848][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.233804][ T6342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.236552][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 135.238205][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 135.239741][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.242085][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.244436][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.246341][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.248080][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.250296][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.252417][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.254317][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.256183][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.258001][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.259955][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.262775][ T6342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.264604][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.266352][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.268059][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.274572][ T6342] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.329956][ T6971] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 135.332600][ T6971] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 135.435546][ T6342] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.442533][ T6342] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.461331][ T6342] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.530364][ T5039] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 135.532999][ T5039] cp210x 1-1:0.0: querying part number failed [ 135.535768][ T5039] usb 1-1: cp210x converter now attached to ttyUSB0 [ 135.576255][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.578023][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.586762][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 135.595705][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.597383][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.600419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.726342][ T6991] device syzkaller0 entered promiscuous mode [ 136.048399][ T7021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.544'. [ 136.503043][ T7070] loop4: detected capacity change from 0 to 16 [ 136.512612][ T7070] erofs: (device loop4): mounted with root inode @ nid 36. [ 136.691409][ T7080] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 136.693235][ T7080] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 137.454871][ T7130] netlink: 32 bytes leftover after parsing attributes in process `syz.4.556'. [ 137.667694][ T4636] usb 1-1: USB disconnect, device number 4 [ 137.675123][ T4636] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 137.676744][ T4636] cp210x 1-1:0.0: device disconnected [ 139.354336][ T7205] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.454556][ T7302] device syzkaller0 entered promiscuous mode [ 142.499358][ T7309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.658712][ T7455] device syzkaller0 entered promiscuous mode [ 142.957592][ T1580] nci: nci_ntf_packet: unknown ntf opcode 0x600 [ 143.049011][ T7519] netlink: 52 bytes leftover after parsing attributes in process `syz.4.607'. [ 143.054176][ T7519] netlink: 52 bytes leftover after parsing attributes in process `syz.4.607'. [ 143.108142][ T7526] device syzkaller0 entered promiscuous mode [ 145.872904][ T7485] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.092652][ T7633] device syzkaller0 entered promiscuous mode [ 146.130022][ T7640] device syzkaller0 entered promiscuous mode [ 146.287751][ T7645] syz.1.624 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 146.289574][ T7645] CPU: 1 PID: 7645 Comm: syz.1.624 Not tainted syzkaller #0 [ 146.290837][ T7645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 146.292597][ T7645] Call trace: [ 146.293180][ T7645] dump_backtrace+0x1c4/0x1f0 [ 146.293986][ T7645] show_stack+0x2c/0x3c [ 146.294822][ T7645] __dump_stack+0x30/0x40 [ 146.295657][ T7645] dump_stack_lvl+0xf4/0x15c [ 146.296520][ T7645] dump_stack+0x1c/0x5c [ 146.297315][ T7645] dump_header+0xc0/0x724 [ 146.298063][ T7645] oom_kill_process+0x35c/0x660 [ 146.298955][ T7645] out_of_memory+0xbf0/0xf70 [ 146.299780][ T7645] mem_cgroup_out_of_memory+0x228/0x2d0 [ 146.300779][ T7645] try_charge_memcg+0xa4c/0x1390 [ 146.301678][ T7645] __memcg_kmem_charge_page+0x304/0x54c [ 146.302679][ T7645] memcg_charge_kernel_stack+0x224/0x6a4 [ 146.303703][ T7645] dup_task_struct+0x290/0x7a8 [ 146.304572][ T7645] copy_process+0x4ec/0x38b4 [ 146.305407][ T7645] kernel_clone+0x1ec/0x938 [ 146.306252][ T7645] __arm64_sys_clone3+0x354/0x388 [ 146.307177][ T7645] invoke_syscall+0x98/0x290 [ 146.307985][ T7645] el0_svc_common+0x13c/0x258 [ 146.308804][ T7645] do_el0_svc+0x5c/0x134 [ 146.309570][ T7645] el0_svc+0x58/0x128 [ 146.310280][ T7645] el0t_64_sync_handler+0x84/0xf0 [ 146.311196][ T7645] el0t_64_sync+0x18c/0x190 [ 146.315068][ T7645] memory: usage 96kB, limit 96kB, failcnt 42 [ 146.316164][ T7645] memory+swap: usage 104kB, limit 9007199254740988kB, failcnt 0 [ 146.317505][ T7645] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 146.318750][ T7645] Memory cgroup stats for /syz1/test: [ 146.318855][ T7645] anon 0 [ 146.318855][ T7645] file 0 [ 146.318855][ T7645] kernel 98304 [ 146.318855][ T7645] kernel_stack 0 [ 146.318855][ T7645] pagetables 4096 [ 146.318855][ T7645] sec_pagetables 0 [ 146.318855][ T7645] percpu 1184 [ 146.318855][ T7645] sock 0 [ 146.318855][ T7645] vmalloc 0 [ 146.318855][ T7645] shmem 0 [ 146.318855][ T7645] zswap 0 [ 146.318855][ T7645] zswapped 0 [ 146.318855][ T7645] file_mapped 0 [ 146.318855][ T7645] file_dirty 0 [ 146.318855][ T7645] file_writeback 0 [ 146.318855][ T7645] swapcached 8192 [ 146.318855][ T7645] anon_thp 0 [ 146.318855][ T7645] file_thp 0 [ 146.318855][ T7645] shmem_thp 0 [ 146.318855][ T7645] inactive_anon 0 [ 146.318855][ T7645] active_anon 0 [ 146.318855][ T7645] inactive_file 0 [ 146.318855][ T7645] active_file 0 [ 146.318855][ T7645] unevictable 0 [ 146.318855][ T7645] slab_reclaimable 4240 [ 146.318855][ T7645] slab_unreclaimable 70192 [ 146.318855][ T7645] slab 74432 [ 146.340049][ T7645] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.624,pid=7645,uid=0 [ 146.343761][ T7645] Memory cgroup out of memory: Killed process 7645 (syz.1.624) total-vm:102368kB, anon-rss:1356kB, file-rss:21596kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 146.628506][ T7685] device syzkaller0 entered promiscuous mode [ 146.707330][ T7686] syz.3.635 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 146.709212][ T7686] CPU: 0 PID: 7686 Comm: syz.3.635 Not tainted syzkaller #0 [ 146.710582][ T7686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 146.712530][ T7686] Call trace: [ 146.713148][ T7686] dump_backtrace+0x1c4/0x1f0 [ 146.713994][ T7686] show_stack+0x2c/0x3c [ 146.714699][ T7686] __dump_stack+0x30/0x40 [ 146.715457][ T7686] dump_stack_lvl+0xf4/0x15c [ 146.716303][ T7686] dump_stack+0x1c/0x5c [ 146.717101][ T7686] dump_header+0xc0/0x724 [ 146.717909][ T7686] oom_kill_process+0x35c/0x660 [ 146.718842][ T7686] out_of_memory+0xbf0/0xf70 [ 146.719716][ T7686] mem_cgroup_out_of_memory+0x228/0x2d0 [ 146.720745][ T7686] try_charge_memcg+0xa4c/0x1390 [ 146.721638][ T7686] __memcg_kmem_charge_page+0x304/0x54c [ 146.722657][ T7686] memcg_charge_kernel_stack+0x224/0x6a4 [ 146.723654][ T7686] dup_task_struct+0x290/0x7a8 [ 146.724522][ T7686] copy_process+0x4ec/0x38b4 [ 146.725353][ T7686] kernel_clone+0x1ec/0x938 [ 146.726174][ T7686] __arm64_sys_clone3+0x354/0x388 [ 146.727072][ T7686] invoke_syscall+0x98/0x290 [ 146.727930][ T7686] el0_svc_common+0x13c/0x258 [ 146.728769][ T7686] do_el0_svc+0x5c/0x134 [ 146.729516][ T7686] el0_svc+0x58/0x128 [ 146.730224][ T7686] el0t_64_sync_handler+0x84/0xf0 [ 146.731156][ T7686] el0t_64_sync+0x18c/0x190 [ 146.733684][ T7686] memory: usage 96kB, limit 96kB, failcnt 140 [ 146.734701][ T7686] memory+swap: usage 112kB, limit 9007199254740988kB, failcnt 0 [ 146.735942][ T7686] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 146.737035][ T7686] Memory cgroup stats for /syz3/test: [ 146.737129][ T7686] anon 0 [ 146.737129][ T7686] file 0 [ 146.737129][ T7686] kernel 98304 [ 146.737129][ T7686] kernel_stack 0 [ 146.737129][ T7686] pagetables 4096 [ 146.737129][ T7686] sec_pagetables 0 [ 146.737129][ T7686] percpu 1184 [ 146.737129][ T7686] sock 0 [ 146.737129][ T7686] vmalloc 0 [ 146.737129][ T7686] shmem 0 [ 146.737129][ T7686] zswap 0 [ 146.737129][ T7686] zswapped 0 [ 146.737129][ T7686] file_mapped 0 [ 146.737129][ T7686] file_dirty 0 [ 146.737129][ T7686] file_writeback 0 [ 146.737129][ T7686] swapcached 24576 [ 146.737129][ T7686] anon_thp 0 [ 146.737129][ T7686] file_thp 0 [ 146.737129][ T7686] shmem_thp 0 [ 146.737129][ T7686] inactive_anon 0 [ 146.737129][ T7686] active_anon 0 [ 146.737129][ T7686] inactive_file 0 [ 146.737129][ T7686] active_file 0 [ 146.737129][ T7686] unevictable 0 [ 146.737129][ T7686] slab_reclaimable 4240 [ 146.737129][ T7686] slab_unreclaimable 70192 [ 146.737129][ T7686] slab 74432 [ 146.753951][ T7686] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.635,pid=7686,uid=0 [ 146.756772][ T7686] Memory cgroup out of memory: Killed process 7686 (syz.3.635) total-vm:102368kB, anon-rss:1360kB, file-rss:21588kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 146.924499][ T4392] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x5b [ 149.754090][ T4346] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 149.756477][ T4346] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 149.758168][ T4346] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 149.760222][ T4346] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 149.762627][ T4346] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 149.764088][ T4346] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.844725][ T7705] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 149.899408][ T7744] chnl_net:caif_netlink_parms(): no params data found [ 149.956595][ T7760] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 149.960885][ T7744] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.962220][ T7744] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.963961][ T7744] device bridge_slave_0 entered promiscuous mode [ 149.972043][ T7744] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.973274][ T7744] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.980392][ T7744] device bridge_slave_1 entered promiscuous mode [ 150.059751][ T7744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.065192][ T7744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.080246][ T7744] team0: Port device team_slave_0 added [ 150.085646][ T7744] team0: Port device team_slave_1 added [ 150.092959][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.094515][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.099932][ T7744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.103758][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.105099][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.109773][ T7744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.152767][ T7744] device hsr_slave_0 entered promiscuous mode [ 150.171418][ T7744] device hsr_slave_1 entered promiscuous mode [ 150.210829][ T7744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.212236][ T7744] Cannot create hsr debugfs directory [ 150.418580][ T7793] syz.0.659 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 150.421703][ T7793] CPU: 0 PID: 7793 Comm: syz.0.659 Not tainted syzkaller #0 [ 150.422892][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 150.424891][ T7793] Call trace: [ 150.425550][ T7793] dump_backtrace+0x1c4/0x1f0 [ 150.426382][ T7793] show_stack+0x2c/0x3c [ 150.427139][ T7793] __dump_stack+0x30/0x40 [ 150.427902][ T7793] dump_stack_lvl+0xf4/0x15c [ 150.428701][ T7793] dump_stack+0x1c/0x5c [ 150.429429][ T7793] dump_header+0xc0/0x724 [ 150.430205][ T7793] oom_kill_process+0x35c/0x660 [ 150.431115][ T7793] out_of_memory+0xbf0/0xf70 [ 150.431989][ T7793] mem_cgroup_out_of_memory+0x228/0x2d0 [ 150.433021][ T7793] try_charge_memcg+0xa4c/0x1390 [ 150.433958][ T7793] __memcg_kmem_charge_page+0x304/0x54c [ 150.435013][ T7793] memcg_charge_kernel_stack+0x1c4/0x6a4 [ 150.436108][ T7793] dup_task_struct+0x4c4/0x7a8 [ 150.436981][ T7793] copy_process+0x4ec/0x38b4 [ 150.437835][ T7793] kernel_clone+0x1ec/0x938 [ 150.438690][ T7793] __arm64_sys_clone3+0x354/0x388 [ 150.439589][ T7793] invoke_syscall+0x98/0x290 [ 150.440432][ T7793] el0_svc_common+0x13c/0x258 [ 150.441273][ T7793] do_el0_svc+0x5c/0x134 [ 150.442039][ T7793] el0_svc+0x58/0x128 [ 150.442719][ T7793] el0t_64_sync_handler+0x84/0xf0 [ 150.443640][ T7793] el0t_64_sync+0x18c/0x190 [ 150.447688][ T7793] memory: usage 96kB, limit 96kB, failcnt 65 [ 150.448740][ T7793] memory+swap: usage 104kB, limit 9007199254740988kB, failcnt 0 [ 150.450062][ T7793] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 150.452116][ T7793] Memory cgroup stats for /syz0/test: [ 150.452221][ T7793] anon 0 [ 150.452221][ T7793] file 0 [ 150.452221][ T7793] kernel 98304 [ 150.452221][ T7793] kernel_stack 0 [ 150.452221][ T7793] pagetables 8192 [ 150.452221][ T7793] sec_pagetables 0 [ 150.452221][ T7793] percpu 1184 [ 150.452221][ T7793] sock 0 [ 150.452221][ T7793] vmalloc 0 [ 150.452221][ T7793] shmem 0 [ 150.452221][ T7793] zswap 0 [ 150.452221][ T7793] zswapped 0 [ 150.452221][ T7793] file_mapped 0 [ 150.452221][ T7793] file_dirty 0 [ 150.452221][ T7793] file_writeback 0 [ 150.452221][ T7793] swapcached 8192 [ 150.452221][ T7793] anon_thp 0 [ 150.452221][ T7793] file_thp 0 [ 150.452221][ T7793] shmem_thp 0 [ 150.452221][ T7793] inactive_anon 0 [ 150.452221][ T7793] active_anon 0 [ 150.452221][ T7793] inactive_file 0 [ 150.452221][ T7793] active_file 0 [ 150.452221][ T7793] unevictable 0 [ 150.452221][ T7793] slab_reclaimable 4240 [ 150.452221][ T7793] slab_unreclaimable 70192 [ 150.452221][ T7793] slab 74432 [ 150.474568][ T7793] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.659,pid=7793,uid=0 [ 150.482100][ T7793] Memory cgroup out of memory: Killed process 7793 (syz.0.659) total-vm:102368kB, anon-rss:1364kB, file-rss:21596kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 150.727576][ T7834] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 150.836847][ T7840] device syzkaller0 entered promiscuous mode [ 150.927395][ T7837] syz.0.672 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 150.929211][ T7837] CPU: 1 PID: 7837 Comm: syz.0.672 Not tainted syzkaller #0 [ 150.930414][ T7837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 150.932217][ T7837] Call trace: [ 150.932802][ T7837] dump_backtrace+0x1c4/0x1f0 [ 150.933755][ T7837] show_stack+0x2c/0x3c [ 150.934566][ T7837] __dump_stack+0x30/0x40 [ 150.935452][ T7837] dump_stack_lvl+0xf4/0x15c [ 150.936412][ T7837] dump_stack+0x1c/0x5c [ 150.937234][ T7837] dump_header+0xc0/0x724 [ 150.938018][ T7837] oom_kill_process+0x35c/0x660 [ 150.938922][ T7837] out_of_memory+0xbf0/0xf70 [ 150.939805][ T7837] mem_cgroup_out_of_memory+0x228/0x2d0 [ 150.940810][ T7837] try_charge_memcg+0xa4c/0x1390 [ 150.941675][ T7837] __memcg_kmem_charge_page+0x304/0x54c [ 150.942647][ T7837] memcg_charge_kernel_stack+0x1c4/0x6a4 [ 150.943692][ T7837] dup_task_struct+0x4c4/0x7a8 [ 150.944545][ T7837] copy_process+0x4ec/0x38b4 [ 150.945376][ T7837] kernel_clone+0x1ec/0x938 [ 150.946195][ T7837] __arm64_sys_clone3+0x354/0x388 [ 150.947063][ T7837] invoke_syscall+0x98/0x290 [ 150.947875][ T7837] el0_svc_common+0x13c/0x258 [ 150.948765][ T7837] do_el0_svc+0x5c/0x134 [ 150.949638][ T7837] el0_svc+0x58/0x128 [ 150.950383][ T7837] el0t_64_sync_handler+0x84/0xf0 [ 150.951324][ T7837] el0t_64_sync+0x18c/0x190 [ 150.957640][ T7837] memory: usage 96kB, limit 96kB, failcnt 112 [ 150.958915][ T7837] memory+swap: usage 112kB, limit 9007199254740988kB, failcnt 0 [ 150.960493][ T7837] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 150.962264][ T7837] Memory cgroup stats for /syz0/test: [ 150.962352][ T7837] anon 0 [ 150.962352][ T7837] file 0 [ 150.962352][ T7837] kernel 98304 [ 150.962352][ T7837] kernel_stack 0 [ 150.962352][ T7837] pagetables 8192 [ 150.962352][ T7837] sec_pagetables 0 [ 150.962352][ T7837] percpu 1184 [ 150.962352][ T7837] sock 0 [ 150.962352][ T7837] vmalloc 0 [ 150.962352][ T7837] shmem 0 [ 150.962352][ T7837] zswap 0 [ 150.962352][ T7837] zswapped 0 [ 150.962352][ T7837] file_mapped 0 [ 150.962352][ T7837] file_dirty 0 [ 150.962352][ T7837] file_writeback 0 [ 150.962352][ T7837] swapcached 16384 [ 150.962352][ T7837] anon_thp 0 [ 150.962352][ T7837] file_thp 0 [ 150.962352][ T7837] shmem_thp 0 [ 150.962352][ T7837] inactive_anon 0 [ 150.962352][ T7837] active_anon 0 [ 150.962352][ T7837] inactive_file 0 [ 150.962352][ T7837] active_file 0 [ 150.962352][ T7837] unevictable 0 [ 150.962352][ T7837] slab_reclaimable 4240 [ 150.962352][ T7837] slab_unreclaimable 70192 [ 150.962352][ T7837] slab 74432 [ 150.980682][ T7837] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.672,pid=7837,uid=0 [ 150.983673][ T7837] Memory cgroup out of memory: Killed process 7837 (syz.0.672) total-vm:102368kB, anon-rss:1364kB, file-rss:21596kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 151.262691][ T7744] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 151.285566][ T7744] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 151.297341][ T7857] netlink: 104 bytes leftover after parsing attributes in process `syz.3.681'. [ 151.338502][ T7744] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 151.369978][ T7860] geneve0: default FDB implementation only supports local addresses [ 151.380045][ T7744] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 151.479425][ T7744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.493369][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.495212][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.514699][ T7744] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.517607][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.519654][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.529326][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.530714][ T5077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.535621][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.549160][ T7744] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.558092][ T7744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.565698][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.567644][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.569320][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.570525][ T4392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.585079][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.589497][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.592883][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.599914][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.604400][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.609005][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.614323][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.615900][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.617684][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.619391][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.621330][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.622967][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.712239][ T7744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.714643][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.716265][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.840806][ T4346] Bluetooth: hci6: command 0x0409 tx timeout [ 151.857706][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.860080][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.883003][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.884765][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.886506][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.887985][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.897406][ T7744] device veth0_vlan entered promiscuous mode [ 151.914689][ T7744] device veth1_vlan entered promiscuous mode [ 151.937240][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.939148][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 151.945098][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.946952][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.953619][ T7744] device veth0_macvtap entered promiscuous mode [ 151.956748][ T7744] device veth1_macvtap entered promiscuous mode [ 151.969771][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.976790][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.990896][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.992683][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.994451][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.996346][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.998141][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.000008][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.011773][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.025294][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.027205][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.028834][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.030517][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.046199][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.048069][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.050534][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.052610][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.054287][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.055918][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.057497][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.059228][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.074406][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.078786][ T7744] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.080163][ T7744] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.085203][ T7744] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.086774][ T7744] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.089979][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.091867][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.149684][ T242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.151342][ T242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.153721][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 152.177511][ T242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.179020][ T242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.181264][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.254957][ T7962] device syzkaller0 entered promiscuous mode [ 152.548072][ T7996] netlink: 88 bytes leftover after parsing attributes in process `syz.4.713'. [ 153.560441][ T8125] tap0: tun_chr_ioctl cmd 2147767517 [ 153.601575][ T4340] Bluetooth: hci1: command 0x0406 tx timeout [ 153.921000][ T4346] Bluetooth: hci6: command 0x041b tx timeout [ 153.966242][ T8174] syz.0.767 (8174) used obsolete PPPIOCDETACH ioctl [ 154.109823][ T8197] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 155.360464][ T8297] device syzkaller0 entered promiscuous mode [ 156.000973][ T4340] Bluetooth: hci6: command 0x040f tx timeout [ 156.337197][ T8387] device syzkaller0 left promiscuous mode [ 156.411520][ T8397] device syzkaller0 entered promiscuous mode [ 156.577102][ T8419] device syzkaller0 left promiscuous mode [ 156.964773][ T8444] device syzkaller0 entered promiscuous mode [ 158.080736][ T4346] Bluetooth: hci6: command 0x0419 tx timeout [ 162.328522][ T4346] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 162.334568][ T4346] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 162.336442][ T4346] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 162.338019][ T4346] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 162.339904][ T4346] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 162.341844][ T4346] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 163.850812][ T4340] Bluetooth: hci3: command 0x0406 tx timeout [ 164.400806][ T4340] Bluetooth: hci7: command 0x0409 tx timeout [ 166.490673][ T4340] Bluetooth: hci7: command 0x041b tx timeout [ 167.959491][ T8508] FAULT_INJECTION: forcing a failure. [ 167.959491][ T8508] name failslab, interval 1, probability 0, space 0, times 0 [ 167.962074][ T8508] CPU: 0 PID: 8508 Comm: syz.0.851 Not tainted syzkaller #0 [ 167.963305][ T8508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 167.964988][ T8508] Call trace: [ 167.965535][ T8508] dump_backtrace+0x1c4/0x1f0 [ 167.966305][ T8508] show_stack+0x2c/0x3c [ 167.967023][ T8508] __dump_stack+0x30/0x40 [ 167.967779][ T8508] dump_stack_lvl+0xf4/0x15c [ 167.968494][ T8508] dump_stack+0x1c/0x5c [ 167.969157][ T8508] should_fail_ex+0x3cc/0x524 [ 167.969909][ T8508] __should_failslab+0xc0/0x11c [ 167.970699][ T8508] should_failslab+0x10/0x28 [ 167.971535][ T8508] __kmem_cache_alloc_node+0x7c/0x318 [ 167.972471][ T8508] __kmalloc+0xc4/0x180 [ 167.973227][ T8508] flow_action_cookie_create+0x34/0xa4 [ 167.974164][ T8508] tc_setup_action+0x220/0x758 [ 167.974980][ T8508] tcf_action_offload_add_ex+0x2c8/0x758 [ 167.975970][ T8508] tcf_action_init+0x2b8/0x8b0 [ 167.976796][ T8508] tc_ctl_action+0x304/0x9d8 [ 167.977608][ T8508] rtnetlink_rcv_msg+0x694/0xcc4 [ 167.978527][ T8508] netlink_rcv_skb+0x220/0x3ec [ 167.979405][ T8508] rtnetlink_rcv+0x28/0x38 [ 167.980236][ T8508] netlink_unicast+0x5fc/0x80c [ 167.981142][ T8508] netlink_sendmsg+0x6f0/0x9d8 [ 167.982010][ T8508] ____sys_sendmsg+0x588/0x90c [ 167.982911][ T8508] __sys_sendmsg+0x288/0x374 [ 167.983769][ T8508] __arm64_sys_sendmsg+0x80/0x94 [ 167.984691][ T8508] invoke_syscall+0x98/0x290 [ 167.985520][ T8508] el0_svc_common+0x13c/0x258 [ 167.986378][ T8508] do_el0_svc+0x5c/0x134 [ 167.987173][ T8508] el0_svc+0x58/0x128 [ 167.987881][ T8508] el0t_64_sync_handler+0x84/0xf0 [ 167.988814][ T8508] el0t_64_sync+0x18c/0x190 [ 168.394818][ T8488] chnl_net:caif_netlink_parms(): no params data found [ 168.476957][ T8488] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.478632][ T8488] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.480501][ T8488] device bridge_slave_0 entered promiscuous mode [ 168.490111][ T8488] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.491642][ T8488] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.493325][ T8488] device bridge_slave_1 entered promiscuous mode [ 168.502885][ T8488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.505823][ T8488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.557299][ T8488] team0: Port device team_slave_0 added [ 168.560490][ T8488] team0: Port device team_slave_1 added [ 168.560920][ T4346] Bluetooth: hci7: command 0x040f tx timeout [ 168.621211][ T8488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.622778][ T8488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.634919][ T8488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.673342][ T8488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.674782][ T8488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.679559][ T8488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.732031][ T8488] device hsr_slave_0 entered promiscuous mode [ 168.761726][ T8488] device hsr_slave_1 entered promiscuous mode [ 168.810999][ T8488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.812618][ T8488] Cannot create hsr debugfs directory [ 169.219990][ T8549] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.919800][ T4392] device hsr_slave_0 left promiscuous mode [ 169.961264][ T4392] device hsr_slave_1 left promiscuous mode [ 170.130774][ T4392] device veth1_macvtap left promiscuous mode [ 170.132088][ T4392] device veth0_macvtap left promiscuous mode [ 170.133213][ T4392] device veth1_vlan left promiscuous mode [ 170.134305][ T4392] device veth0_vlan left promiscuous mode [ 170.640688][ T4340] Bluetooth: hci7: command 0x0419 tx timeout [ 170.669579][ T8648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 171.229254][ T8682] loop4: detected capacity change from 0 to 16 [ 171.236492][ T8682] erofs: (device loop4): mounted with root inode @ nid 36. [ 171.240198][ T8682] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 171.242637][ T8682] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 173.791865][ T4392] bond0 (unregistering): Released all slaves [ 174.287842][ T8718] binder: Unknown parameter '01777777777777777777777' [ 174.294789][ T8488] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 174.342628][ T8488] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 174.392558][ T8488] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 174.432521][ T8488] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 174.715710][ T8761] nvmet: adding nsid 1 to subsystem testnqn [ 174.720251][ T8761] nvmet: failed to open file ./file0: (-22) [ 174.758675][ T4383] nvmet: connect request for invalid subsystem testnqn! [ 174.765537][ T8761] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 175.097488][ T8712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.170538][ T8794] binder: Unknown parameter '01777777777777777777777' [ 175.179369][ T8488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.189457][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.193111][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.196725][ T8488] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.204403][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.206517][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.208311][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.209692][ T4392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.243167][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.244980][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.246759][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.253104][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.254350][ T4392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.256005][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.263422][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.274790][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.278506][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.284077][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.297645][ T8488] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.299560][ T8488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.316639][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.319042][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.321505][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.323332][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.325817][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.329780][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.354857][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.585771][ T8488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.587808][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.589171][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.890013][ T8857] binder: Unknown parameter '01777777777777777777777' [ 175.928410][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.930387][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.954665][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.956683][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.963619][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.966785][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.980118][ T8488] device veth0_vlan entered promiscuous mode [ 175.995151][ T8488] device veth1_vlan entered promiscuous mode [ 176.025752][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.027817][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 176.038732][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.044088][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.050058][ T8488] device veth0_macvtap entered promiscuous mode [ 176.055066][ T8488] device veth1_macvtap entered promiscuous mode [ 176.076824][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.082574][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.086476][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.095761][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.105640][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.114478][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.118619][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.122716][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.125691][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.129958][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.136857][ T8488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.142977][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.144848][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.146476][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.148103][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.160427][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.164263][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.166456][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.168733][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.185387][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.189665][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.197447][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.201571][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.205845][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.210315][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.218221][ T8488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.225457][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.227331][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.230071][ T8488] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.232551][ T8488] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.234386][ T8488] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.236636][ T8488] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.343335][ T8826] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.371255][ T4392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.375716][ T4392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.390377][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.406908][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.408582][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.413882][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.516969][ T8892] loop0: detected capacity change from 0 to 16 [ 176.524054][ T8892] erofs: (device loop0): mounted with root inode @ nid 36. [ 176.544434][ T8892] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 176.777013][ T8923] nvmet: failed to open block device ./file: (-2) [ 176.859305][ T4383] nvmet: creating nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:4103437f-bb77-4adf-9baa-0228959b29f0. [ 176.869735][ T8923] nvme nvme1: creating 2 I/O queues. [ 176.879357][ T8923] nvme nvme1: new ctrl: "testnqn" [ 176.907145][ T8940] loop0: detected capacity change from 0 to 16 [ 176.913060][ T8940] erofs: (device loop0): mounted with root inode @ nid 36. [ 176.917370][ T8940] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 178.325028][ T9002] loop4: detected capacity change from 0 to 16 [ 178.336203][ T9002] erofs: (device loop4): mounted with root inode @ nid 36. [ 178.341963][ T9002] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 178.443534][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 178.751397][ T9051] netlink: 60 bytes leftover after parsing attributes in process `syz.4.977'. [ 178.776435][ T9054] loop4: detected capacity change from 0 to 16 [ 178.786942][ T9054] erofs: (device loop4): mounted with root inode @ nid 36. [ 178.789883][ T9054] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 178.841868][ T9063] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 178.935500][ T9069] syz.4.980 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=1000 [ 178.937836][ T9069] CPU: 0 PID: 9069 Comm: syz.4.980 Not tainted syzkaller #0 [ 178.939113][ T9069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 178.941025][ T9069] Call trace: [ 178.941624][ T9069] dump_backtrace+0x1c4/0x1f0 [ 178.942495][ T9069] show_stack+0x2c/0x3c [ 178.943263][ T9069] __dump_stack+0x30/0x40 [ 178.944044][ T9069] dump_stack_lvl+0xf4/0x15c [ 178.944826][ T9069] dump_stack+0x1c/0x5c [ 178.945550][ T9069] dump_header+0xc0/0x724 [ 178.946339][ T9069] oom_kill_process+0x35c/0x660 [ 178.947200][ T9069] out_of_memory+0xbf0/0xf70 [ 178.948013][ T9069] mem_cgroup_out_of_memory+0x228/0x2d0 [ 178.948983][ T9069] try_charge_memcg+0xa4c/0x1390 [ 178.949822][ T9069] obj_cgroup_charge+0x178/0x2e4 [ 178.950712][ T9069] __kmem_cache_alloc_node+0xf0/0x318 [ 178.951696][ T9069] __kmalloc_node_track_caller+0xb8/0x174 [ 178.952733][ T9069] kmemdup+0x5c/0x98 [ 178.953428][ T9069] __devinet_sysctl_register+0xc0/0xdac [ 178.954427][ T9069] devinet_sysctl_register+0x14c/0x1c0 [ 178.955396][ T9069] inetdev_init+0x268/0x4a0 [ 178.956234][ T9069] inetdev_event+0xef4/0x12dc [ 178.957081][ T9069] raw_notifier_call_chain+0xd8/0x168 [ 178.958051][ T9069] call_netdevice_notifiers+0x110/0x198 [ 178.959046][ T9069] register_netdevice+0x11c4/0x1650 [ 178.959951][ T9069] slip_open+0xa3c/0xcec [ 178.960715][ T9069] tty_ldisc_open+0x9c/0x144 [ 178.961531][ T9069] tty_set_ldisc+0x2f8/0x4d4 [ 178.962340][ T9069] tiocsetd+0x110/0x138 [ 178.963118][ T9069] tty_ioctl+0xb84/0xd88 [ 178.963921][ T9069] __arm64_sys_ioctl+0x14c/0x1c8 [ 178.964898][ T9069] invoke_syscall+0x98/0x290 [ 178.965718][ T9069] el0_svc_common+0x13c/0x258 [ 178.966588][ T9069] do_el0_svc+0x5c/0x134 [ 178.967392][ T9069] el0_svc+0x58/0x128 [ 178.968106][ T9069] el0t_64_sync_handler+0x84/0xf0 [ 178.969010][ T9069] el0t_64_sync+0x18c/0x190 [ 178.972293][ T9069] memory: usage 92kB, limit 96kB, failcnt 114 [ 178.973321][ T9069] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 178.974827][ T9069] kmem: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 178.977461][ T9069] Memory cgroup stats for /syz4/test: [ 178.977601][ T9069] anon 0 [ 178.977601][ T9069] file 0 [ 178.977601][ T9069] kernel 94208 [ 178.977601][ T9069] kernel_stack 0 [ 178.977601][ T9069] pagetables 4096 [ 178.977601][ T9069] sec_pagetables 0 [ 178.977601][ T9069] percpu 1184 [ 178.977601][ T9069] sock 0 [ 178.977601][ T9069] vmalloc 0 [ 178.977601][ T9069] shmem 0 [ 178.977601][ T9069] zswap 0 [ 178.977601][ T9069] zswapped 0 [ 178.977601][ T9069] file_mapped 0 [ 178.977601][ T9069] file_dirty 0 [ 178.977601][ T9069] file_writeback 0 [ 178.977601][ T9069] swapcached 8192 [ 178.977601][ T9069] anon_thp 0 [ 178.977601][ T9069] file_thp 0 [ 178.977601][ T9069] shmem_thp 0 [ 178.977601][ T9069] inactive_anon 0 [ 178.977601][ T9069] active_anon 0 [ 178.977601][ T9069] inactive_file 0 [ 178.977601][ T9069] active_file 0 [ 178.977601][ T9069] unevictable 0 [ 178.977601][ T9069] slab_reclaimable 3616 [ 178.977601][ T9069] slab_unreclaimable 84664 [ 178.977601][ T9069] slab 88280 [ 178.996242][ T9069] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.980,pid=9068,uid=0 [ 179.000178][ T9069] Memory cgroup out of memory: Killed process 9068 (syz.4.980) total-vm:102176kB, anon-rss:1380kB, file-rss:21528kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 179.083839][ T9086] netlink: 'syz.4.981': attribute type 1 has an invalid length. [ 179.096300][ T9086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.638889][ T8910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 179.873344][ T9097] bond1 (unregistering): Released all slaves [ 179.963140][ T4378] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 180.115450][ T9124] netlink: 60 bytes leftover after parsing attributes in process `syz.4.988'. [ 180.157317][ T4378] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 180.159146][ T4378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.160473][ T4378] usb 1-1: Product: syz [ 180.162607][ T4378] usb 1-1: Manufacturer: syz [ 180.163558][ T4378] usb 1-1: SerialNumber: syz [ 180.238147][ T9126] loop4: detected capacity change from 0 to 16 [ 180.273244][ T9126] erofs: (device loop4): mounted with root inode @ nid 36. [ 180.306222][ T9126] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 180.409789][ T4378] rtl8150 1-1:1.0: couldn't reset the device [ 180.411465][ T4378] rtl8150: probe of 1-1:1.0 failed with error -5 [ 180.427247][ T4378] usb 1-1: USB disconnect, device number 5 [ 180.671336][ T9141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.057834][ T9153] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 181.174258][ T9153] wg2 speed is unknown, defaulting to 1000 [ 181.264965][ T9168] device syzkaller0 entered promiscuous mode [ 181.265260][ T9153] wg2 speed is unknown, defaulting to 1000 [ 181.268317][ T9153] wg2 speed is unknown, defaulting to 1000 [ 181.342220][ T24] wg2 speed is unknown, defaulting to 1000 [ 181.347038][ T9153] infiniband syz2: set active [ 181.351293][ T9153] infiniband syz2: added wg2 [ 181.497259][ T9188] loop4: detected capacity change from 0 to 16 [ 181.499456][ T9153] RDS/IB: syz2: added [ 181.500556][ T9153] smc: adding ib device syz2 with port count 1 [ 181.504386][ T9188] erofs: (device loop4): mounted with root inode @ nid 36. [ 181.508991][ T9188] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 181.512371][ T9153] smc: ib device syz2 port 1 has pnetid [ 181.540852][ T4540] wg2 speed is unknown, defaulting to 1000 [ 181.549811][ T9153] wg2 speed is unknown, defaulting to 1000 [ 181.768542][ T9153] wg2 speed is unknown, defaulting to 1000 [ 181.829429][ T9153] wg2 speed is unknown, defaulting to 1000 [ 181.908808][ T9153] wg2 speed is unknown, defaulting to 1000 [ 181.960410][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1012'. [ 181.966035][ T9153] wg2 speed is unknown, defaulting to 1000 [ 182.014396][ T9153] wg2 speed is unknown, defaulting to 1000 [ 182.051378][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 182.068521][ T9153] wg2 speed is unknown, defaulting to 1000 [ 182.113447][ T9153] wg2 speed is unknown, defaulting to 1000 [ 182.146156][ T9260] process 'syz.3.1018' launched '/dev/fd/4' with NULL argv: empty string added [ 182.235292][ T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 182.237494][ T14] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 182.239241][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.466710][ T14] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device [ 182.480547][ T9284] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 182.519509][ T9284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.535962][ T9284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.565245][ T9284] infiniband syz2: set active [ 182.641856][ T4383] wg2 speed is unknown, defaulting to 1000 [ 182.869807][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1029'. [ 183.300189][ T14] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 2e:a2:a3:71:4e:db [ 183.315025][ T14] usb 1-1: USB disconnect, device number 6 [ 183.329334][ T14] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device [ 183.943593][ T9359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1047'. [ 184.213255][ T9391] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1059'. [ 184.716565][ T9415] udc dummy_udc.0: failed to start g1: -19 [ 184.725218][ T9415] UDC core: g1: couldn't find an available UDC or it's busy [ 185.231990][ T9475] netlink: 'syz.7.1073': attribute type 1 has an invalid length. [ 185.245731][ T9475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.263424][ T9475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.264858][ T9475] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 185.267337][ T9475] bond1: (slave gre1): Error -95 calling set_mac_address [ 185.358497][ T9475] device gretap1 entered promiscuous mode [ 185.366543][ T9475] bond1: (slave gretap1): making interface the new active one [ 185.368725][ T9475] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 185.385326][ T9475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.388267][ T9475] bond1: (slave bond2): Enslaving as an active interface with a down link [ 187.227973][ T9393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 187.363271][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.364584][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.635635][ T9596] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 187.678622][ T9595] rdma_rxe: rxe_register_device failed with error -23 [ 187.685992][ T9595] rdma_rxe: failed to add wg2 [ 188.426303][ T9622] nvmet: adding nsid 1 to subsystem testsubsys [ 188.494371][ T9598] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 188.633698][ T9642] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1106'. [ 188.877981][ T9663] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 188.879462][ T9663] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 188.883340][ T9663] vhci_hcd vhci_hcd.0: Device attached [ 188.886440][ T9665] vhci_hcd: connection closed [ 188.888280][ T39] vhci_hcd: stop threads [ 188.890504][ T39] vhci_hcd: release socket [ 188.894272][ T39] vhci_hcd: disconnect device [ 189.794477][ T9650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.872424][ T9678] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(3) [ 190.010200][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1125'. [ 190.532392][ T9746] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1141'. [ 190.945229][ T9701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.700600][ T9794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1156'. [ 192.148250][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 192.180377][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.197546][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.307201][ T9828] device geneve2 entered promiscuous mode [ 192.644400][ T9846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.647464][ T9846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.793861][ T9854] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1175'. [ 193.271596][ T9892] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1191'. [ 193.586042][ T9911] netlink: 'syz.5.1198': attribute type 1 has an invalid length. [ 193.591832][ T9911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.990767][ T9878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.108911][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1204'. [ 194.364422][ T9942] mmap: syz.7.1210 (9942) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 194.416646][ T9964] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1220'. [ 194.476607][ T9979] FAULT_INJECTION: forcing a failure. [ 194.476607][ T9979] name failslab, interval 1, probability 0, space 0, times 0 [ 194.478997][ T9979] CPU: 1 PID: 9979 Comm: syz.7.1224 Not tainted syzkaller #0 [ 194.480200][ T9979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 194.481948][ T9979] Call trace: [ 194.482526][ T9979] dump_backtrace+0x1c4/0x1f0 [ 194.483407][ T9979] show_stack+0x2c/0x3c [ 194.484187][ T9979] __dump_stack+0x30/0x40 [ 194.485010][ T9979] dump_stack_lvl+0xf4/0x15c [ 194.485896][ T9979] dump_stack+0x1c/0x5c [ 194.486661][ T9979] should_fail_ex+0x3cc/0x524 [ 194.487533][ T9979] __should_failslab+0xc0/0x11c [ 194.488378][ T9979] should_failslab+0x10/0x28 [ 194.489196][ T9979] __kmem_cache_alloc_node+0x7c/0x318 [ 194.490138][ T9979] kmalloc_trace+0x48/0x94 [ 194.490905][ T9979] legacy_init_fs_context+0x5c/0xc8 [ 194.491894][ T9979] alloc_fs_context+0x530/0x778 [ 194.492752][ T9979] fs_context_for_mount+0x34/0x44 [ 194.493658][ T9979] do_new_mount+0xfc/0x804 [ 194.494518][ T9979] path_mount+0x5ac/0xe6c [ 194.495297][ T9979] __arm64_sys_mount+0x4a0/0x5a0 [ 194.496232][ T9979] invoke_syscall+0x98/0x290 [ 194.497132][ T9979] el0_svc_common+0x13c/0x258 [ 194.497963][ T9979] do_el0_svc+0x5c/0x134 [ 194.498735][ T9979] el0_svc+0x58/0x128 [ 194.499451][ T9979] el0t_64_sync_handler+0x84/0xf0 [ 194.500367][ T9979] el0t_64_sync+0x18c/0x190 [ 195.126701][ T9953] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.308372][T10009] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1232'. [ 195.567267][T10044] FAULT_INJECTION: forcing a failure. [ 195.567267][T10044] name failslab, interval 1, probability 0, space 0, times 0 [ 195.570093][T10044] CPU: 0 PID: 10044 Comm: syz.3.1249 Not tainted syzkaller #0 [ 195.571503][T10044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 195.573567][T10044] Call trace: [ 195.574243][T10044] dump_backtrace+0x1c4/0x1f0 [ 195.575171][T10044] show_stack+0x2c/0x3c [ 195.575937][T10044] __dump_stack+0x30/0x40 [ 195.576717][T10044] dump_stack_lvl+0xf4/0x15c [ 195.577538][T10044] dump_stack+0x1c/0x5c [ 195.578306][T10044] should_fail_ex+0x3cc/0x524 [ 195.579176][T10044] __should_failslab+0xc0/0x11c [ 195.580106][T10044] should_failslab+0x10/0x28 [ 195.580887][T10044] __kmem_cache_alloc_node+0x7c/0x318 [ 195.581845][T10044] __kmalloc+0xc4/0x180 [ 195.582622][T10044] security_sk_alloc+0x54/0x140 [ 195.583534][T10044] sk_prot_alloc+0xe0/0x1e8 [ 195.584379][T10044] sk_alloc+0x44/0x3a0 [ 195.585124][T10044] __netlink_create+0x80/0x2a8 [ 195.585993][T10044] __netlink_kernel_create+0x130/0x6a4 [ 195.586978][T10044] rtnetlink_net_init+0xa8/0x134 [ 195.587894][T10044] ops_init+0x2b0/0x53c [ 195.588675][T10044] setup_net+0x494/0xb6c [ 195.589457][T10044] copy_net_ns+0x2b8/0x578 [ 195.590247][T10044] create_new_namespaces+0x30c/0x604 [ 195.591188][T10044] unshare_nsproxy_namespaces+0x108/0x160 [ 195.592250][T10044] ksys_unshare+0x3f0/0x70c [ 195.593114][T10044] __arm64_sys_unshare+0x3c/0x50 [ 195.594000][T10044] invoke_syscall+0x98/0x290 [ 195.594824][T10044] el0_svc_common+0x13c/0x258 [ 195.595665][T10044] do_el0_svc+0x5c/0x134 [ 195.596433][T10044] el0_svc+0x58/0x128 [ 195.597167][T10044] el0t_64_sync_handler+0x84/0xf0 [ 195.598084][T10044] el0t_64_sync+0x18c/0x190 [ 195.642258][T10042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1248'. [ 195.688823][T10049] FAULT_INJECTION: forcing a failure. [ 195.688823][T10049] name failslab, interval 1, probability 0, space 0, times 0 [ 195.691364][T10049] CPU: 0 PID: 10049 Comm: syz.0.1250 Not tainted syzkaller #0 [ 195.692599][T10049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 195.694449][T10049] Call trace: [ 195.695017][T10049] dump_backtrace+0x1c4/0x1f0 [ 195.695858][T10049] show_stack+0x2c/0x3c [ 195.696619][T10049] __dump_stack+0x30/0x40 [ 195.697420][T10049] dump_stack_lvl+0xf4/0x15c [ 195.698264][T10049] dump_stack+0x1c/0x5c [ 195.699000][T10049] should_fail_ex+0x3cc/0x524 [ 195.699863][T10049] __should_failslab+0xc0/0x11c [ 195.700739][T10049] should_failslab+0x10/0x28 [ 195.701602][T10049] __kmem_cache_alloc_node+0x7c/0x318 [ 195.702605][T10049] kmalloc_trace+0x48/0x94 [ 195.703417][T10049] percpu_ref_init+0xc8/0x2f0 [ 195.704272][T10049] cgroup_apply_control_enable+0x39c/0x9e0 [ 195.705352][T10049] cgroup_mkdir+0x964/0xcf8 [ 195.706156][T10049] kernfs_iop_mkdir+0x118/0x164 [ 195.707037][T10049] vfs_mkdir+0x314/0x4d8 [ 195.707853][T10049] do_mkdirat+0x1b8/0x3ec [ 195.708657][T10049] __arm64_sys_mkdirat+0x90/0xa8 [ 195.709571][T10049] invoke_syscall+0x98/0x290 [ 195.710400][T10049] el0_svc_common+0x13c/0x258 [ 195.711232][T10049] do_el0_svc+0x5c/0x134 [ 195.711986][T10049] el0_svc+0x58/0x128 [ 195.712741][T10049] el0t_64_sync_handler+0x84/0xf0 [ 195.713621][T10049] el0t_64_sync+0x18c/0x190 [ 196.011186][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 196.190697][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 196.193560][ T24] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 196.195177][ T24] usb 1-1: config 179 has no interface number 0 [ 196.196447][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 196.198526][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 196.200504][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 196.205818][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 196.207961][ T24] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 196.210572][ T24] usb 1-1: config 179 interface 65 has no altsetting 0 [ 196.211990][ T24] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 196.213609][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.221200][ T24] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6 [ 196.258913][T10025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 196.337822][T10058] UDC core: g1: couldn't find an available UDC or it's busy [ 196.426282][ T4417] usb 1-1: USB disconnect, device number 7 [ 196.427368][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 196.442731][ T4417] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 196.447669][T10073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.449335][T10073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.473834][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1260'. [ 197.051415][T10087] 9pnet_virtio: no channels available for device syz [ 197.490032][T10121] 9pnet_virtio: no channels available for device syz [ 197.696569][T10146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1274'. [ 198.028424][T10095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.138109][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1288'. [ 198.484785][T10253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1306'. [ 198.593579][T10271] loop3: detected capacity change from 0 to 256 [ 198.595596][T10271] exfat: Unknown parameter 'zero_size_dir' [ 199.505923][T10306] loop3: detected capacity change from 0 to 4096 [ 199.525953][T10306] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 199.680744][ T4346] Bluetooth: hci4: command 0x0406 tx timeout [ 199.681752][ T4346] Bluetooth: hci2: command 0x0406 tx timeout [ 200.454714][T10314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1320'. [ 201.482331][T10232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.627544][T10336] tipc: Failed to remove unknown binding: 66,0,0/0:2452247665/2452247667 [ 201.629537][T10336] tipc: Failed to remove unknown binding: 66,0,0/0:2452247665/2452247666 [ 201.637607][T10336] tipc: Failed to remove unknown binding: 66,0,0/0:2452247665/2452247667 [ 201.639377][T10336] tipc: Failed to remove unknown binding: 66,0,0/0:2452247665/2452247666 [ 201.704236][T10338] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 201.960319][T10357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1333'. [ 202.679550][T10379] loop4: detected capacity change from 0 to 256 [ 202.687574][T10379] exfat: Unknown parameter 'zero_size_dir' [ 202.912096][T10395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1345'. [ 202.935025][T10397] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1347'. [ 203.143527][T10417] loop3: detected capacity change from 0 to 256 [ 203.147295][T10417] exfat: Unknown parameter 'zero_size_dir' [ 203.157677][T10416] loop4: detected capacity change from 0 to 256 [ 203.159674][T10416] exfat: Unknown parameter 'zero_size_dir' [ 203.884208][T10429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1358'. [ 203.954790][T10433] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1359'. [ 204.823808][T10472] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1372'. [ 205.068572][T10482] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1374'. [ 205.316864][T10513] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1385'. [ 205.382724][T10519] loop7: detected capacity change from 0 to 512 [ 205.409876][T10519] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 205.438370][T10519] fuse: Bad value for 'fd' [ 205.475525][ T7744] EXT4-fs (loop7): unmounting filesystem. [ 205.591089][T10528] dummy0 speed is unknown, defaulting to 1000 [ 205.592427][T10528] dummy0 speed is unknown, defaulting to 1000 [ 205.594345][T10528] dummy0 speed is unknown, defaulting to 1000 [ 205.597543][T10528] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 205.602238][T10528] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 205.613546][T10528] dummy0 speed is unknown, defaulting to 1000 [ 205.615079][T10528] dummy0 speed is unknown, defaulting to 1000 [ 205.616461][T10528] dummy0 speed is unknown, defaulting to 1000 [ 205.618019][T10528] dummy0 speed is unknown, defaulting to 1000 [ 205.619405][T10528] dummy0 speed is unknown, defaulting to 1000 [ 205.620860][T10528] dummy0 speed is unknown, defaulting to 1000 [ 205.622354][T10528] dummy0 speed is unknown, defaulting to 1000 [ 205.623744][T10528] dummy0 speed is unknown, defaulting to 1000 [ 205.744984][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1391'. [ 205.963561][T10547] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1396'. [ 206.117171][T10558] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1401'. [ 206.536308][T10561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1402'. [ 206.565850][T10575] loop5: detected capacity change from 0 to 1024 [ 206.634379][T10579] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1408'. [ 207.175795][T10591] loop7: detected capacity change from 0 to 32768 [ 207.195498][T10591] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 207.328217][T10589] loop3: detected capacity change from 0 to 40427 [ 207.357805][ T8667] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 207.999643][ T7744] ocfs2: Unmounting device (7,7) on (node local) [ 208.545424][T10613] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1418'. [ 208.718593][T10620] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1419'. [ 209.620618][ C0] sched: RT throttling activated [ 209.639908][T10625] loop5: detected capacity change from 0 to 256 [ 209.883945][T10629] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 210.526702][T10635] loop5: detected capacity change from 0 to 128 [ 210.534185][T10635] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 210.554647][T10635] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 210.574436][ T8488] EXT4-fs (loop5): unmounting filesystem. [ 211.482430][T10606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.570370][T10650] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1430'. [ 212.019762][T10669] loop7: detected capacity change from 0 to 4096 [ 212.036361][T10669] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 212.133570][T10673] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1440'. [ 212.427576][T10692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1447'. [ 213.776934][T10715] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 213.878112][T10718] device-mapper: ioctl: Invalid ioctl structure: name m, dev f802 [ 213.994664][T10726] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1459'. [ 215.247232][T10679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 215.783275][T10764] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1471'. [ 215.984152][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1474'. [ 216.072691][T10774] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1475'. [ 216.930792][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1482'. [ 216.987794][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1485'. [ 217.016163][T10806] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1486'. [ 217.199725][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 217.201774][T10811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1487'. [ 217.203486][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 217.205071][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 217.207394][T10811] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1487'. [ 217.585036][T10821] Mass Storage Function, version: 2009/09/11 [ 217.586285][T10821] LUN: removable file: (no medium) [ 217.588003][T10821] LUN: removable file: (no medium) [ 217.701567][T10831] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1493'. [ 219.058849][T10863] fuse: Bad value for 'fd' [ 219.665564][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1506'. [ 220.160886][ T4346] Bluetooth: hci0: command 0x0406 tx timeout [ 220.162016][ T4346] Bluetooth: hci5: command 0x0406 tx timeout [ 220.464108][T10822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 220.825461][T10891] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 220.921946][T10894] fuse: Bad value for 'fd' [ 221.645781][ T4346] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 221.648378][ T4346] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 221.650166][ T4346] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 221.652324][ T4346] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 221.653818][ T4346] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 221.655257][ T4346] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 221.739762][T10923] wg2 speed is unknown, defaulting to 1000 [ 221.745975][T10940] fuse: Bad value for 'fd' [ 221.772770][T10923] dummy0 speed is unknown, defaulting to 1000 [ 221.844108][T10923] chnl_net:caif_netlink_parms(): no params data found [ 221.936022][T10923] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.937549][T10923] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.939541][T10923] device bridge_slave_0 entered promiscuous mode [ 221.950039][T10923] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.951690][T10923] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.953682][T10923] device bridge_slave_1 entered promiscuous mode [ 221.961393][T10923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.964485][T10923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.986267][T10923] team0: Port device team_slave_0 added [ 221.988842][T10923] team0: Port device team_slave_1 added [ 221.998772][T10923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.000346][T10923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.007153][T10923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.017647][T10923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.019169][T10923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.026947][T10923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.038724][T10956] __nla_validate_parse: 4 callbacks suppressed [ 222.038741][T10956] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1535'. [ 222.067891][T10923] device hsr_slave_0 entered promiscuous mode [ 222.112172][T10923] device hsr_slave_1 entered promiscuous mode [ 222.150765][T10923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.152449][T10923] Cannot create hsr debugfs directory [ 223.681784][ T4346] Bluetooth: hci8: command 0x0409 tx timeout [ 224.605349][T10931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 224.609806][T10923] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 224.662870][T10923] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 224.692462][T10923] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 224.715918][T10923] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 224.760604][T11022] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1545'. [ 224.839517][T10923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.850318][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.852844][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.856822][T10923] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.863031][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.866224][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.874804][ T9729] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.876242][ T9729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.878029][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.888291][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.889947][ T9729] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.891289][ T9729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.903538][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.905200][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.908287][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.910227][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.917518][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.926441][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.928335][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.930050][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.935219][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.939244][T10923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.944019][T10923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.956041][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.958846][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.962397][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.114063][T11036] loop3: detected capacity change from 0 to 32768 [ 225.115351][T10923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.130318][T10321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.233897][T10321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.430320][T11041] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1554'. [ 225.510299][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1556'. [ 225.570994][T11059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1557'. [ 225.579539][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.583148][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.604754][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.606573][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.608240][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 225.609716][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 225.618863][T10923] device veth0_vlan entered promiscuous mode [ 225.628360][T10923] device veth1_vlan entered promiscuous mode [ 225.647556][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 225.649795][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 225.660405][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 225.662989][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.667319][T10923] device veth0_macvtap entered promiscuous mode [ 225.670061][T10923] device veth1_macvtap entered promiscuous mode [ 225.676995][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.679056][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.681592][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.683577][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.685311][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.687048][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.688746][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.690521][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.692464][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.694655][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.696768][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.698758][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.701655][T10923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.703454][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.705089][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 225.706681][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 225.708624][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.711807][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.713547][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.715194][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.716906][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.718762][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.720504][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.722525][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.724305][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.725865][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.727441][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.730003][T10923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.740153][T10923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.743070][T10923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.744401][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.746346][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.749604][T10923] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.751839][T10923] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.753281][T10923] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.754896][T10923] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.764842][ T4346] Bluetooth: hci8: command 0x041b tx timeout [ 227.765026][T11086] pim6reg0: tun_chr_ioctl cmd 35111 [ 227.841018][ T4340] Bluetooth: hci8: command 0x040f tx timeout [ 228.629821][T11065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 228.658044][T11109] fuse: Bad value for 'fd' [ 228.679870][ T4970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.681944][ T4970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.693903][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 228.706537][ T4970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.708102][ T4970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.709577][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 228.809436][T11121] loop9: detected capacity change from 0 to 512 [ 228.822874][T11121] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 228.825205][T11121] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 228.847263][T11121] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:477: comm syz.9.1525: Invalid block bitmap block 0 in block_group 0 [ 228.853086][T11121] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 228.854901][T11121] EXT4-fs error (device loop9): ext4_clear_blocks:883: inode #11: comm syz.9.1525: attempt to clear invalid blocks 983261 len 1 [ 228.857787][T11121] EXT4-fs error (device loop9): __ext4_get_inode_loc:4520: comm syz.9.1525: Invalid inode table block 0 in block_group 0 [ 228.865384][T11121] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 228.867359][T11121] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 228.869316][T11121] EXT4-fs error (device loop9): __ext4_get_inode_loc:4520: comm syz.9.1525: Invalid inode table block 0 in block_group 0 [ 228.872360][T11121] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 228.874242][T11121] EXT4-fs error (device loop9): ext4_truncate:4325: inode #11: comm syz.9.1525: mark_inode_dirty error [ 228.876886][T11121] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 228.878753][T11121] EXT4-fs error (device loop9): __ext4_get_inode_loc:4520: comm syz.9.1525: Invalid inode table block 0 in block_group 0 [ 228.889726][T11121] EXT4-fs (loop9): 1 truncate cleaned up [ 228.891287][T11121] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 228.957532][T10923] EXT4-fs (loop9): unmounting filesystem. [ 228.984805][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1586'. [ 229.130580][T11152] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1594'. [ 229.520721][T11111] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 229.921025][ T4346] Bluetooth: hci8: command 0x0419 tx timeout [ 230.720764][ T4340] Bluetooth: hci0: command 0x0c1a tx timeout [ 232.082733][T11143] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.246443][T11198] device netdevsim0 entered promiscuous mode [ 232.364846][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1614'. [ 232.366797][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1614'. [ 232.378567][T11202] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.380497][T11202] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.382359][T11202] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.383893][T11202] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.392030][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1616'. [ 232.398460][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1614'. [ 232.402372][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1614'. [ 232.405427][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1614'. [ 232.408099][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1614'. [ 232.800821][ T28] INFO: task syz.2.404:6083 blocked for more than 143 seconds. [ 232.802291][ T28] Not tainted syzkaller #0 [ 232.803253][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 232.805054][ T28] task:syz.2.404 state:D stack:0 pid:6083 ppid:4334 flags:0x00000001 [ 232.806592][ T28] Call trace: [ 232.807156][ T28] __switch_to+0x2f4/0x550 [ 232.808020][ T28] __schedule+0xdb4/0x1a6c [ 232.808905][ T28] schedule+0xc4/0x170 [ 232.815823][ T28] schedule_preempt_disabled+0x18/0x2c [ 232.816662][ T28] __mutex_lock_common+0xb20/0x1f3c [ 232.817552][ T28] mutex_lock_nested+0x38/0x44 [ 232.818363][ T28] write_recoverydir+0xf4/0x2ac [ 232.819177][ T28] nfsctl_transaction_write+0x114/0x164 [ 232.820248][ T28] vfs_write+0x2a8/0x7c8 [ 232.821069][ T28] ksys_write+0x12c/0x228 [ 232.821979][ T28] __arm64_sys_write+0x7c/0x90 [ 232.822931][ T28] invoke_syscall+0x98/0x290 [ 232.823671][ T28] el0_svc_common+0x13c/0x258 [ 232.824468][ T28] do_el0_svc+0x5c/0x134 [ 232.825202][ T28] el0_svc+0x58/0x128 [ 232.825828][ T28] el0t_64_sync_handler+0x84/0xf0 [ 232.826676][ T28] el0t_64_sync+0x18c/0x190 [ 232.827424][ T28] INFO: task syz.2.404:6084 blocked for more than 143 seconds. [ 232.828662][ T28] Not tainted syzkaller #0 [ 232.829463][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 232.834802][ T28] task:syz.2.404 state:D stack:0 pid:6084 ppid:4334 flags:0x00000001 [ 232.836394][ T28] Call trace: [ 232.836964][ T28] __switch_to+0x2f4/0x550 [ 232.837734][ T28] __schedule+0xdb4/0x1a6c [ 232.838465][ T28] schedule+0xc4/0x170 [ 232.839166][ T28] schedule_preempt_disabled+0x18/0x2c [ 232.840076][ T28] __mutex_lock_common+0xb20/0x1f3c [ 232.841147][ T28] mutex_lock_nested+0x38/0x44 [ 232.842128][ T28] nfsd_svc+0x74/0x948 [ 232.842830][ T28] write_threads+0x2b4/0x310 [ 232.843640][ T28] nfsctl_transaction_write+0x114/0x164 [ 232.844554][ T28] vfs_write+0x2a8/0x7c8 [ 232.845280][ T28] ksys_write+0x12c/0x228 [ 232.846019][ T28] __arm64_sys_write+0x7c/0x90 [ 232.846806][ T28] invoke_syscall+0x98/0x290 [ 232.847629][ T28] el0_svc_common+0x13c/0x258 [ 232.848435][ T28] do_el0_svc+0x5c/0x134 [ 232.849171][ T28] el0_svc+0x58/0x128 [ 232.849821][ T28] el0t_64_sync_handler+0x84/0xf0 [ 232.854729][ T28] el0t_64_sync+0x18c/0x190 [ 232.855602][ T28] [ 232.855602][ T28] Showing all locks held in the system: [ 232.856772][ T28] 1 lock held by rcu_tasks_kthre/12: [ 232.857632][ T28] #0: ffff800015577db0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 [ 232.859399][ T28] 1 lock held by rcu_tasks_trace/13: [ 232.860239][ T28] #0: ffff8000155785d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 [ 232.862336][ T28] 1 lock held by khungtaskd/28: [ 232.863280][ T28] #0: ffff800015577440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 232.865035][ T28] 2 locks held by getty/4085: [ 232.865898][ T28] #0: ffff0000d68a3098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 232.867691][ T28] #1: ffff80001fa362f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2e8/0xfa8 [ 232.869908][ T28] 3 locks held by syz.2.404/6082: [ 232.870805][ T28] #0: ffff0000d287cae8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 232.872429][ T28] #1: ffff0000d3952460 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 232.873930][ T28] #2: ffff8000158041a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xbc/0x9f0 [ 232.875439][ T28] 3 locks held by syz.2.404/6083: [ 232.876249][ T28] #0: ffff0000ea9240e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 232.877765][ T28] #1: ffff0000d3952460 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 232.879233][ T28] #2: ffff8000158041a8 (nfsd_mutex){+.+.}-{3:3}, at: write_recoverydir+0xf4/0x2ac [ 232.881317][ T28] 3 locks held by syz.2.404/6084: [ 232.882097][ T28] #0: ffff0000ea924fe8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 232.883640][ T28] #1: ffff0000d3952460 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 232.885162][ T28] #2: ffff8000158041a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x74/0x948 [ 232.886596][ T28] 2 locks held by syz.6.536/6925: [ 232.887418][ T28] #0: ffff0000f499a0e0 (&type->s_umount_key#76){++++}-{3:3}, at: deactivate_super+0xdc/0x104 [ 232.889185][ T28] #1: ffff8000158041a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x60/0x204 [ 232.891357][ T28] 3 locks held by syz.1.634/7681: [ 232.892178][ T28] #0: ffff0000dc238ae8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 232.893798][ T28] #1: ffff000100a6e460 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 232.895361][ T28] #2: ffff8000158041a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xbc/0x9f0 [ 232.896802][ T28] 3 locks held by syz.1.634/7691: [ 232.897649][ T28] #0: ffff0000eafce868 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 232.899164][ T28] #1: ffff000100a6e460 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 232.900746][ T28] #2: ffff8000158041a8 (nfsd_mutex){+.+.}-{3:3}, at: write_recoverydir+0xf4/0x2ac [ 232.902479][ T28] 3 locks held by syz.1.634/7693: [ 232.903365][ T28] #0: ffff0000fdabd768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 232.905018][ T28] #1: ffff000100a6e460 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 232.906540][ T28] #2: ffff8000158041a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x74/0x948 [ 232.908060][ T28] 3 locks held by syz.0.1407/10577: [ 232.908942][ T28] #0: ffff0000ee75cd68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 232.910600][ T28] #1: ffff000103d44460 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 232.912310][ T28] #2: ffff8000158041a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xbc/0x9f0 [ 232.913807][ T28] 4 locks held by syz.7.1622/11220: [ 232.914656][ T28] #0: ffff800017a82770 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 232.916053][ T28] #1: ffff800017a82588 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0xec/0x600 [ 232.917554][ T28] #2: ffff0000f1ee6100 (&dev->mutex){....}-{3:3}, at: nfc_dev_up+0x40/0x2e0 [ 232.919017][ T28] #3: ffff0000f1ee1350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_dev_up+0xa4/0xaa0 [ 232.920521][ T28] 2 locks held by syz.5.1624/11229: [ 232.921502][ T28] #0: ffff800017a82770 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 232.923123][ T28] #1: ffff800017a82588 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0xec/0x600 [ 232.924714][ T28] 2 locks held by syz.3.1625/11233: [ 232.925583][ T28] #0: ffff800017a82770 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 232.926957][ T28] #1: ffff800017a82588 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0xec/0x600 [ 232.928417][ T28] [ 232.928816][ T28] ============================================= [ 232.928816][ T28] [ 232.930246][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 232.931439][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 232.932739][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 232.934618][ T28] Call trace: [ 232.935222][ T28] dump_backtrace+0x1c4/0x1f0 [ 232.936084][ T28] show_stack+0x2c/0x3c [ 232.936827][ T28] __dump_stack+0x30/0x40 [ 232.937614][ T28] dump_stack_lvl+0xf4/0x15c [ 232.938444][ T28] dump_stack+0x1c/0x5c [ 232.939225][ T28] panic+0x2f8/0x7ac [ 232.939900][ T28] hung_task_panic+0x0/0x2c [ 232.940693][ T28] kthread+0x254/0x2e0 [ 232.941435][ T28] ret_from_fork+0x10/0x20 [ 232.942281][ T28] SMP: stopping secondary CPUs [ 232.943180][ T28] Kernel Offset: disabled [ 232.943956][ T28] CPU features: 0x0a0000,000f0097,a65bfea7 [ 232.945004][ T28] Memory Limit: none [ 233.295835][ T28] Rebooting in 86400 seconds..