last executing test programs: 2m1.959695111s ago: executing program 2 (id=316): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x66, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x8080) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m34.668707144s ago: executing program 2 (id=316): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x66, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x8080) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m11.673449507s ago: executing program 2 (id=316): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x66, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x8080) ioctl$KVM_RUN(r5, 0xae80, 0x0) 51.959459736s ago: executing program 2 (id=316): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x66, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x8080) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23.571171157s ago: executing program 2 (id=316): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x66, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x8080) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.481965647s ago: executing program 2 (id=316): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x66, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x8080) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.424434871s ago: executing program 1 (id=942): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x66, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), 0x0}, 0x20) 2.321072272s ago: executing program 0 (id=943): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f0000000040)="2d475e87", &(0x7f00000000c0)=""/36}, 0x20) 2.005053227s ago: executing program 1 (id=944): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.979803877s ago: executing program 1 (id=945): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r0, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) close(0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.967839628s ago: executing program 0 (id=946): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.84415795s ago: executing program 3 (id=948): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) 1.585261704s ago: executing program 0 (id=950): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000110000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) gettid() 1.584904984s ago: executing program 1 (id=951): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 1.553534905s ago: executing program 3 (id=952): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 1.404607947s ago: executing program 1 (id=953): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="5146a5fa72a18b84db75131ad499f942bf94f1cd2f8d6a515ba6d7778bc19039778535aed3108133710270e177e689c2f5789b46c86ced572ec3e25f370061838f12ad011c628526a49bbc21f40a1abdc25b9db9b1b0bc620f54ad3ca6fef02906968a289a655505db7a98247107a51806ddd18358667cfe13737d9f703d7f5e54e67abe7fe58a", 0x87}, {&(0x7f0000000940)="e1ba8f27b8dbf46a71dd3da21b9f3ed368f27df0ac16d82d25beb7129d1ff21f1477e1dfe33dae80476c055e622db3ae3e7b8941045596e6fb7e6ae143b5e7efbada7a39cf1840947e80f2f4673bf03daf77e0b0706cce947118e22fe99b5e2585ca723b0de3d31a01abda291f36bbc98c49b3130020ced2de196e21f82d4bb5b57872b18e2e107d70c13cc7e68c61e16c3690027cf17831386cde22a1c33c6ff56255e7ad738bb185b8acc18fcddb7526caaba7a5ed6d2c5c59eefad60d86e25f9eb567d4684ff9216881b5dea0149e156f572cd247de6d9e4ab1798633af87b9be0afbe6bbb74bba0a68dce9cf13847904", 0xf2}, {&(0x7f0000001400)="debdd05efd2913442267ae7c7f77c326bdafa919f7fb2c2aacd2c8ce32b4b241dbbf17d40afd42a1b4446ef003cf29b8a2aef41bddd86faa5333e6018ae177d37ae31c73589978a4630ef28319edf7679ce11f0a33fb702bac6a28b25c1a7927c9fce3e1e1cf6cd709aaf1d7f257d2ab50290efa0fee586bb164c88e068568805440776954f136eccab351ffb16f5e1a7d1fb2486611a1902ad72b3226024ae97d0143564e3c1c1cccbc4a3ab49d1e537d6c1664b581f1500f06867fc2a52fd3be1fdf51210c2c6e9e6aa293b05dab12e19cd4984147c080ac80102c602ff3ee25aef4f394090d3aba1528b9ea08516f92dcd03bcdd81bcae1d987ff447f9a355e40edfa8e1bea0f5bd18366f0eb5a0fd8565816266a176b73e64a0eb380d847b5cf5dab36598153cf488eeac33dce7003375cd085bab9a4b109f1aa9602c053bf39381db5422e7486cecb0a72918790d957b59fccbf1577b8d68b92f4576c56bc825bdd8a1986a1419e4be34183d3541b336ec11f83eb0c15dd12e355e303e8847d4fcdb1228b775dd1783f70e669a52ed587e46eb353649f78f1cc89f373b3b0641a30b247555678199105ad5fd16229117fc34943a4580d0a6cc21a640e8a2211de2f46e46a8dae358b50f1fdb213a6d9208a2c4a2b622968f6ec46c35ecbe0b47bed06633feecb6135899e11be21ffa31fb6305cf0999c9c825e4aed8442e7c3143c19f079de0751cfe9542c2c0ec00fc5a5a64faab7ebd1f84e119790487d04b2b205204024f15545e8c31b544096aef1c62deb3821686e5dfd42ef10154e70d5a781fe40ed5438c2b0b591e87b0a0af34386922cfd870b47d0dbbf74654daab6b2c9e00438de67520b09b77d2905669b53d8b74333730a6d7e97f3c4af13330778be61249f5084cd15b27e9ba59778982da520cddfaa44d30221e7b9e3884b48e07de758b67292fc0bb9815b0f95cf6f4e2c237302c1a1cbee2027879b5f0df36092b61aae02fee25f19ec105eb4300bee1e9e4f1cf177c492d6597d07531d42757b6236f5157a67a85ba5dedcea93fce1fea8f469c6f7945c8be8fb3c2243fa6df24d78bc55e7d636fc694102affe27c9bd0a4189e48ed0918e84ffeb2e9f60e6b1d3bd48228d64a9acbcaa72e4519df4f9c6a1eca50281a518b60a7aef8ba186d03a26f33790274706935ea2f11eaca37f9dc822c7db37062f4fc646bcf805815e70a188cf0b7138bb35cf4dbba6c1dc1ce04b781e2875068be2fe33f96311d1ad5a0b127b01f430bb6663c8e66f038c337806d5a8422f641772d15bdecf964e70d39554ad764f4594a877933b3eeb14a0925e108dfe24f06326d71792f1adfa67b2c4b4a00c850d72f37ba3cecdcf13e37dc22f8b14e237421cd594dc04febd11a915adee69b6347840ffacdddb01b128cfc7d66e0747f19bcf598e4005c3ae2854fe6c8357fc42bb5c4b244ea10643b097a585c7c2a9f19b0af363138d2d6eae2897f0bf70dfc28f4197a5c54e2a8d30dd35e6b01879ab6d0a888b26603ea45839b46c4eda8b20b7d7d70a1d0e41d1e2c0d3c28fb9ee71358bd54565065bc594f97bd07396c58c335c5e8755819dacd108288d59c85982d04c7d4c526e58c6fd5c053ccd64113921df2395e1eb293fbde57b7480d8ff361fcb7bb239bc17858b74665a0e6af2e4f500eedc66d2131de09dd11c5ff5462a05090dc53df2f0b5f4a4cb3c77df0a2ea8e14fdc7e2e4485b1abe638be0e8b1c0137a28fd6d6468e75081c13b4592a94b5dec26c0d7532a4ddde89c0f1c16cd71c322388f725bb7f98808639686b130172f6dfee5eb054f0d29b56bf0d4e461c6943f7aa32410299facb45a784a921c2ddab69a8941f7c4b0cfd4489678303b51c0c49ebc307c4a6f067d34b6118c1d5514be7731e22413d4c4ca37b63e2361609b213f94d187c341e5b7c29aa66f0ebdb768d84448dd018d0d582605e4428541032488c27b6684f7f8e514b1abe72053f7abf629eef63528c9e49aa3e4f0929ef2b5913208371f979e4d9b304a82005c97e6e6dd1e560962254962d3646712233bc46aad46b54718d8225a127d12d025fd457c96bfece0d95401cea65ede69511a714483f9000f1dfbcbd613ab33e478364ff89ffd9627a077bdec555e3bd42078739a03ca4c4a378723337364007018094c55fc6e33a5b11f69113388c5c7727490e72e00baabca39650f7cc925bb810e5e6c6780155e616bcfbd1bc66e063dfb33f46ad92dc8df522ab33f21db87cf51bb826c6c5b9ec75b73d4153a8095da5abda2778e2d16a924bb926d36025f27354d7619b535b2dccc4e044eb53578bf6cfd9a01271fb7e4068c541d13d06b795a8d70ddb5144992cb57502639469df10c705e6c2dd93bb8b410b9785ca70c101c7367722625453b94da7696df31a55919fc4d3742caaf48f9e240ac4fbd2a47f92439c2c7117257ab60f7e6a8054fd4fdd21a938c3c4cc6a9b7cea4e77260775343cf63369cfbed75b313e3a39e95e13fe173946165feeee6dd6ec2f48c7b342f5639f734fc1a440498f922c7d6a0c0b8e590351b7982f00dd3308f242bb045876268ca024915b6789cf0e0558af5cefb374bc9cbf8fcaee33cfaf2be7fb9641a11f4dbbdf36b96c7fe39cf45ff5d4ae19a4b04c8144516dfbf1a5ad66aa7c54849a38d8cdd2a306e80bc675197d8e356bff09a39dec56f9116c65ed0c1635375f776ebf8ebd087c85f12cc5d4f322c4df939a159ff73400ff00d61b256abb2bf73a2409041be0072fbc6f7abbe0797414c1838f9e9773ae367651cf5ddef5cc1e24086144457bc912ff824eed4fe3d6c71f6a5394c197b4cc012a3ddc8693780e3fbf989b16516ab345bb3a58a11533cf475d79a56248a2b00f35e65a3fb3dc816ce81ea6ac8242859b0c33a16afb6f89a0380bc7c14f2766ebb6645a80cae06258c40120c42e6f1dc799f6d9d8ccab6dbf661ca116711825ea09c2439f32c1ef3d7396ff399646cdf82593e92a021e7b425bf17f82ae2c9fb619dcfc60766873796a9487dd5548fe0e293209ddd1c662f67a44828a763a56dfd859d1d28e741c32770bf8840312f4e228cbce70f5e877a525009c1cb32b27b8e44a7d50e93e7d05595fce8c6dec3e41547f25820f66051fb306da6fad2bc0558fcf9fae54ce4b755cd7ebcc63378f7a62a426e9d4c4a6bf367a5dc385e38f54d0c054a4e58baed5fabc972ded4c29ce65bfa7bc965a7df5029c2c56a193764bca86aa1aa2dd694669c0cef81c95491a7c2900b0d053a055e115c99a3c21678f5f080645e98eb326ccaa23ed3b0537e55637b857cfa8010b9088c6ec2ecaec0816101ce04d00e863f3cfeb5feecd49642442aba2b331d928838af5ed28041cba286d5a9c6cf8811bb5abb224c3f8bb32e39747086b04c276ca222db6de337b07016ced0d3648ecef979ed6def2ff0965e430092ec141e8d8ce369bc27236e2a30e10c665b29708c46104375588320ec4ad434052fe02e22e52dba31ffa69dde4efbb2aa1d694003ef780d97e75953687cba94d2ee4c0cd5519fac441c575a4f4686fba5c20343b147fc53865400bd5bc19a4b37769c41f49ea99b3cc2eed4d00e98b2a62e78d94a1fe07b80c5ed04fe5c58666248eb69eedd6085741a7520c9ae9d908f57cef77a8b6255a44644e20eadd4c57e91cb1ad1d79616bbaa20707622232bd4ccfdee8c1a32c9e1857e20fa8426eb132141c4845dc983234019fdc7f4a7f825f7e349ec24629367730ad9f29edc9d8560cf699b9267d6c014c29e472963d1712e9cd5c8678ebe65c26fbfa14fddb44b9b9a408530c38b547f617ea122728d03cefb17f5c6ece703208402f0736f73ac9832dd964b5e187e68227e928a1a9a4b6bb727c4dc2d9b9f968f8770716f899fb67388b7b82790a4fb9cc740ee19c7bdba200f24561117ec854ba58cdc036dfb04497da61151be1eb9168c4b90797f59cb5e6ca78a9b82621b86d2fa1800e0d39c9ecac48a8d87665381f26dfb56435bbf2da2cfac5c1d5bb7936cd6e3f10c3ddb923aead2214e9e028f4a2f0aa32f13d75cb86a7d9118f5907ccd66d21c9ef54a64dd3ea5ed08340abcd2dda2eed88530f7e63b205ab914eca4bb958a94b3052b21e8a7fd710c37399973cfe31f30fc2e4bf1c66644a6ba807830f3aaa4f95e7baebd9ed0f3ed81526130410241abb91baa107fc22f897a314407c0e55d3ca836ec9d902e664bc983625fa57759194a7c205488f0f68054bdf3e5accbfe8b210bb7de9476ff090972de30079730406cf44542822195857fc4fc331593febca3d1d8bd8c07cfcd4f1fe365d66dd879c91474c5b3c654c716a1e9f2c71fd47eaf39f97141c544dd8208a95511e5caab0e3ceca2ba3c88157ecfb6ea7f2880293197bbf2f45f589039b301d2b35ddfa6ce311f5372e735a7929ebfdb0bc955da95b01941471418dddbe4654ccc0f84c2cd6e13befd1f216dce111fbb2f36195111609ad6c39ba5dec39a1d6e6a232b141ad4229c741a5325528c1b9811a4b89dd2c7391dd96c7cf050db00fe6316d689b65c5a2ac7d19ae5630f836bb467fd64cd0ae03e7e495552c9943f0c0c78ed73348b70c8b202b1ddcec45d54ee8214de8a09e5bbf6f0c7c6a5175c4b1f00ad7fb9bde17046132554cb79327f8fe54b7bebf744da7345bcfa04e1439d658810f27baee9ce7478fec2edd312e3d945d18501fbf20b1111ded33f49207c7cd1ba2fda5661be4d7f50d474019029d6716f5a6181c5945ad1dd3d110b86f7d888f04de35196d0591567351575588ebeb6cbdaab17aec564c4955460a91afb7b7548af95e42cc0dbe2a67af952b75f54ccf0686f5c38e8397aa697b140138da6858975003f135a731fb9018666f6e4525b3f58efbd0f1d7ea558f127d1c64aa2b4c3dc652f7fa39b7a757280cd9867d08fb5cbc42b3998d0a4d9cee02fd2611ea3407295b4f11b5ec8f27a3f7e4fc496912be2ae567428c6231ef90758482d480db300fcc60bbc123ba782471d584fe5b40a0beb587b70513a00a6b73ca97381d18104878617c49ca2cf373b48f90482b2c4b939583c89fceab4b8564022c86b326f1bf132508afc07922391332ecd487b6cdb2b9224f6253c786a47424197c106c1dc5ea6c457c5f0675d020d4eac9bd745941fcc0f22e818d2b65508db3eec872084ff2fed628bc99bbbf65aabe21b4ff3e7d98f656e8610b0388392b7c9452", 0xe87}, {&(0x7f0000002400)="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", 0x1000}], 0x4}, 0x4000) 1.345177438s ago: executing program 0 (id=954): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000940)="e1ba8f27b8dbf46a71dd3da21b9f3ed368f27df0ac16d82d25beb7129d1ff21f1477e1dfe33dae80476c055e622db3ae3e7b8941045596e6fb7e6ae143b5e7efbada7a39cf1840947e80f2f4673bf03daf77e0b0706cce947118e22fe99b5e2585ca723b0de3d31a01abda291f36bbc98c49b3130020ced2de196e21f82d4bb5b57872b18e2e107d70c13cc7e68c61e16c3690027cf17831386cde22a1c33c6ff56255e7ad738bb185b8acc18fcd", 0xae}, {&(0x7f0000002400)="b7d832e95ed00b547d97f4f9e01bcc5f5bfec4b2c8801db91ee43e82bbb0fa388aba7012bf1dbf30083135f006c25171b2efb86a942e45fc8d2f721aba7cfcbd4d0ed2efd70fdbf2183108323461554a33d53f1d7f1d66f049d63a529f158707cfd43a30e110a33eb582dea6cba15c5275a1d66f965f3198f93776e408f3210bc2047e6e3ea0d64d17c3706168e4e0e23e41fa410a09b60634152ef66514c668bbb7d950c70e88044b2b64a2c4f00be7f8afbea513aa45e1bc674a3ffd755de334bf38f91830bdd029b505ee245ff08408cee684b3471b4a327d56d5986b2d46bd78a9ea95652edde45d4d54183e14c127633b835dba9b0d30e44da7452cab676b563710724a4a41437d325fa679a47e01d818bbdff799f360e812397ef58a2d06a27418d9fb1e9b5b89645fab39b1f7e9a32def58de50c8ec53a17f6d66071f3c526bd3bf009b542c106107a0d2ce2bc3ea2edba9349239306abafaf2ba35d606ea4103f985a1be247ef5fb4ada79318ead8b2d94c3071f861761fe00585802a1cd78dace2aabd4a7e202616c40be5b5cd6ac7f7dd0fe45318f7fac45dd92b7c51b2158f3749b872ce5aad70ba24c6285d388a17ba447c018c503934a88d565913bfa8b4028dade89f624b8fb050cdcaf7c0b19bc403fd08011fbb0bbd3b15df6940b3d81972bcf25605cc628dc0c690fa123f1872d6cdde280ad6d3f2b4cfbc3581da4cc7e85d4d6e2b65eb49aad7cd7f16718db449ed78998e6d2eb80c452b1864de13e34d22de72b7ef52e99366e83f9b8f0f2f7f14a9c96a04dfceab9eacf021538bfa2eeb979d89aa2e25136ba332ca4dd7d0e3cf93c46e822aea4078503f5d38cacb5890fd124649b16be1991d4ca9c0a83163ebfa36200b0ac441303ebfebf4b4b54f31051bb0868c151ca0af15a380d081427380319fdbdde68fd0c6a2ec6848f59c317763ac1b40d9a27c68d0539a0765a65e45d66384aed92aa1b36bf036ab21ee2fd43f76bcf35a6da4b0767aa90eb72c0d41500db2dac1d10cfe02deb49b9938d5693f07264949bb5f09ff0d61547379d60e55357c1daee44c820e8f2ebff1031b7084723715d4b1345aa81fd314e1260423c2122b3d4117ee23c0fea7f499815c88d8e860a32dc04cc20980b01295a7e04ab3e0017605bdff3e72de34d5521d4d5a8e9eab88b10ace04d0b8573f25baf1f9ec680dfcf8eb8a1116b3d1728c75080776ea58f9b5323095d1bb1b38445a8eaf8e35ee291a0eb203349e27605a2b19a4907c2acea5d3cfca719ee172a9b1cdf64f33b75cec871065c5d2df70da468534864209e90ac93c1f6980a6fb82193f3823135b36f43712db0cf083226171889625262822466c338c8c2ed972dba3e6914a4f66c278da87c197f4179bb964667b71862476e6a786da68dad691ab8d8bfe5139db84126537b0cc149c98ae2beca458f2b62632751ca9ba98a6e9047d04a7c0cda6df933b1a580a50c3e5929f0e93860d91eb9e0ed2d5e4728a7c0886995d9893e41dee33afb612bd58c99552aa465070429f36dc4ef950b1e6b7ac1feb755555729e4d80b6f396baf52f1783086015425357a7c0a90937884185cc69fd9185d41901060a5d490abfdf0e75673901576d88c7bc70f6f19eb39d46df7ec4e30e954bf96a3470bfebd51aeb9185595b8fe951dc60583a433013baa064a9ea5993086cf43973197b7ca25b72542316417e6cc4b7289d446f74dda8c4964d7bbec62020fc7376aaf37880e38eb21ca8f241c0cb7bdf2989ad7528c4a8de3ce4981b4d540b06c77e29c6c113cc2ddcf4ff9a7c8ab5368ede1804562bf23efc61b317eda18f50e4288899f143c8c73451441e8db0f13d47eb80d2b36f7b119fd05ea148d863bcaafce5b4a91e23a4edefc864cedd2dd94d4daec37411dc336b50ff7bdc8de173835e5d888f71e7bac7907fe78c7b475f71db6f1379cfe6452ba6ca72408f946f85f479f7ef8cdb1728e2c689e68736c152dc56c9bad264b665b1ece168d39e85bbbf79cfd398ef642cc95371aa2e0d0428395178431440a6937f35c39de65ac7fa794107019637256ca15143fc0222266a18fb3697ea9fdcd2c2a4876c85deb5da9088fd9c3e02efbfe20c3ae0eed6d033411c926a038d408012f826092db802ff8f4f7054a9aeff63616aea25365ec442d6e7ba7dcca5e56d051812e5b37eec4959eb1887788d73b78296d9300fe7eb9470b4a773741f6cadc5ab83755039cbc5198384fa4f18ef781b41e4c5cfbf1b438565b08b4ac9a130ec31023042ef9310fe09b3600cbff8100fb9f231f2c056902d18f62f688664cf6f613d9e6c1e7269d9e5cfd75f627553bf3cd8142c2d93426be8fc826b8551a0768b6a7df4657a7108ef14227467c750ac026d23f81a6ad4b5102bb68b450f4fa22ea8e4486b9dbb2bd01c7d722bc3bf03948816f58e2b7103a0c9489762a1130e27355cfd082c83b313bb0596500705d42a121034425facdc2f3c8ae30d71b492f09186ea590b50e33cf1bd45a50299eba2e177e59e103d42cf632af50e48d9cd047347196fd1edce438a15f010c90bbe8384d7acdc0c30b8deb8b15c1edaef7658b70a3c836e8697e9459b02363c1590177c5ef13f5355628eac49932d45c410369f38c0c686897d4c36c4477896a63086ad8ce5797e7128f25fdf624bbc69d3279793b153b48f18c70a39f83fbac6038dfefe9f99666deaac992f5260f245b26075b077d8c8903810820aa600733178db4a37abdda2b81fdc5335feb7d3184027defb157badb9323d9fadae460cafcf89bb243b97ed792a3f49dc53c7577a8975d517ab55141feb0b904613ae8b93d9980dbc83ce5af8ea8cde8d7a4cb5b8f2b582f5aeba0e0f169bf2d57a573a4b08049abf83ee7144a26b8005fdfc4881dfaf30c7c2ad98897e49c0f9622a7aea3b00f075793fc9eae8f4eb64a5ccf39ba045e00ab652b69cb9b66ae6b43bcecceba149a5d10cb6bfa32a53491842b64f1dc610aa16f42ee294e2d345f88290b73efa5bc59795195d6127c9f36a2cd5abbe436c50fbd1c2c85c4189d85cd6034ef0ac57a78bace82543b04a7e5964ed706197034f386b5e7fe17f96e84841e91d879726357f831c4df5e8abccd457415f727b1b9d274eeea0b1c33c5fe5f6c7e2d24259d1cb7c0bdad2285d082403157c10fd281732be01b75eea16993ec91b06a7519a01354ea77ff8d78dfbdb754ef21f44060221fe3f63d7feaf52f541ad61cb6fe98b00199eb31f42528e1a8996dc69b0f8e32b21a9ad14bed8f231c1ab4c2657c62655ee1e9c3a3782686c133d8911605dfd8d95b38d0e940a71c4acd2c7b5b256245d060f82bbf6315df435e051bd8d2823fedc5da9eca4d7a8fe2aeca1e1ff4df638272161a2081dd854316c5dbbb24165256972d7a0fb3dba143338842f431b193d08028b971502e5e727b57997a7b6942aea33701e895b4ca4857a7d97edf5f47e9bb0c0fe9db92a058e06094426cff70bf60c999a2cbce3357afd71d62007f11695b017a301929eab92509b0a69d61b257ffb1491ec625537dec928fa0ffbb7a0992bfc53e819790a310ecd772d0201da0deedf908ae2340c4eb6b7dd697bb1dfd4a65f302b24ae0ac859fd999a5b0ef6adc2c0e0befff0d41739666614d5248b189ac3ec5e9b2cb9893c24b20b7f718b6a0df997da8da606e7a717111f2cd1bbd89e9e09dd1184ce8a65c58d38a804ee6b05262ebecbbba52e70f856584cbc02702100056caad59536bcbc4122c710a3d0b0afab73017ff2cf2ba75eac37baa4ff445bdc8c6fe37717ced8da1f4dd16be394cc3201fbc711a5f4a12ad15d9790e199e6aa61d2639f6ad48843b8880ce89d8e55a3d1d3b1bca6454503afec678c25437db1642027101b16bbb5428103d2d96e1c593ce9ff74aee14147620161c81d953ed4ec6abbba155f3abffd4f34130f190d6bfac051baf35e96549d628194f65bd4c83c47b68b4d9e2932e8f69300be7568126c8b1a94c2ab2c3ff37c167af278a4e94db71403e9834a638e2c17e28cdfe9bdf2f7d9f5d49fe3864c0cb4b032e9f6d125c6591b55e9c65b27115edffb3c669cb93006c66bfc212576b3b81e7d1e1468813cd6354c0aeaa95f3b77ddac1d35ceee6eec974072d31417591d0eb27ceae73ddb6d8330583d17aca9b550588c52ffe70e249059df749b3043aad76b7650c2736ffffd01f7a23e43054c73fe8b868b820ac08e7c0cb68781bec0341a0f205db1aa27e328f3f0f7450511c10f0cf468ff1e445a48af45fed05bce0bd56505215c12c1172a1878f90df63c4bfb9db3c820291f413492f718b5e1cdcfc3d0179b2524d5dfb0fca2cd24947e77a18ff601752f8d2178cf74593aea0d38c0c61879a50b36bcf56da596161ea18676171a814b92eef2dd028d4a5f45dcb10e7933d1c76bf21b04a20700985de6c29f128a71b369d297c21db72fd6e8e123864a6c91c1573acf206985cb8075ba65e13e0ec3688210fd6ea2610f7e73c680787ff9845a1b2865d36534de8388d4870cbc14c564e3e2453a47694c348e658deef68620016bccaf061f6cbd43352205dc91950f9e2f051e7dfa5dfa7b0f17bc94fe90f32657aff74b285dd94e925290e4c9baa35f31acf71ec042ad2f0faa11156ae970c8e2955c292179654ca1c7a190a197172d1324771bdb435a4695972de5d238159a93c87a15ccd6af90c2da5b4e1973e97ed6d17c2505f042a98c2093cb1f415a31ac4fa8483484c6ea4ebce6a6dd2f4553947fd59e46a507a777d6bf2bb4fbf6fc074d045207c27a998358ebca1bd52e921926f569aaf6a46319f2ed1e73dab6c969e52035fb40a01679e9af98ee6cd92cdbfbfd7a5c99793796f0bcde96275c8a7c85fa80b905ef3b96665360623dfc7c3400fd05b6fb80eb38491770f38d3a9bbe0f382ef0a2906d835e50ca55933f601832389b2744e3710b539f23f10a164c7464511968a3ad35f2ecc3d9cabd8f5212fee07a1e3c75226b91150ddfa0e88eccb4dd4f4bd7ff46d", 0xdf9}], 0x2, &(0x7f00000001c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x38}, 0x4000) 1.23293237s ago: executing program 0 (id=956): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x6b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, 0x0, 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) 1.2019095s ago: executing program 3 (id=957): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.072094282s ago: executing program 1 (id=958): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 955.220184ms ago: executing program 0 (id=960): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000001000000ff00000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x101040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 897.162435ms ago: executing program 3 (id=961): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x12, 0x4, 0x4, 0x10001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1700, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 669.119359ms ago: executing program 4 (id=962): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000b00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0xd) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 534.442911ms ago: executing program 4 (id=963): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x6b, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 335.851644ms ago: executing program 4 (id=964): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001340)={{0xeb9f, 0x1, 0x0, 0x18, 0x4300, 0x10, 0x10, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4}]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 270.032616ms ago: executing program 4 (id=965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 224.364346ms ago: executing program 3 (id=966): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) 93.279068ms ago: executing program 4 (id=967): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 52.259779ms ago: executing program 3 (id=968): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) 0s ago: executing program 4 (id=969): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f00000001c0)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) kernel console output (not intermixed with test programs): ] RAX: ffffffffffffffda RBX: 00007f77ff1b5fa0 RCX: 00007f77fef8e169 [ 296.060321][ T7064] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 296.068294][ T7064] RBP: 00007f77ffec3090 R08: 0000000000000000 R09: 0000000000000000 [ 296.076265][ T7064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.084239][ T7064] R13: 0000000000000000 R14: 00007f77ff1b5fa0 R15: 00007ffdafb01618 [ 296.092229][ T7064] [ 297.748564][ T7076] loop3: detected capacity change from 0 to 8192 [ 297.759236][ T7076] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 297.772474][ T7076] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 297.784191][ T7076] REISERFS (device loop3): using ordered data mode [ 297.784662][ T4348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.790705][ T7076] reiserfs: using flush barriers [ 297.841162][ T7076] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 297.858877][ T7076] REISERFS (device loop3): checking transaction log (loop3) [ 297.875719][ T7076] REISERFS (device loop3): Using r5 hash to sort names [ 297.883140][ T7076] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 298.046286][ T4318] bond0 (unregistering): Released all slaves [ 298.494028][ T4348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 300.902089][ T7114] loop3: detected capacity change from 0 to 4096 [ 300.950825][ T7114] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 300.985761][ T6875] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 300.992921][ T7114] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 301.016686][ T6875] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 301.032269][ T7114] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 301.044872][ T7114] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 301.070185][ T6875] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 301.079153][ T7114] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 301.105387][ T7114] ntfs: volume version 3.1. [ 301.123598][ T7114] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 301.158871][ T7114] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 301.175570][ T6875] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 301.231039][ T7114] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 301.291983][ T7114] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 301.336628][ T7114] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 301.490105][ T6875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.511887][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 301.520520][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 301.550371][ T6875] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.598494][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 301.617047][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 301.678012][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.685159][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.710490][ T7130] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 301.741778][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 301.765558][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 301.820164][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.836582][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.843769][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.916090][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 301.918927][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 301.935657][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 301.975675][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 302.017813][ T7135] device hsr_slave_0 left promiscuous mode [ 302.044597][ T7135] device hsr_slave_1 left promiscuous mode [ 302.059876][ T7111] loop0: detected capacity change from 0 to 32768 [ 302.083157][ T7111] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.598 (7111) [ 302.104500][ T7111] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 302.131752][ T7111] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 302.148186][ T7111] BTRFS info (device loop0): using free space tree [ 302.156134][ T5289] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 302.172470][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 302.197140][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 302.211406][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 302.228066][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 302.238558][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 302.258980][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 302.272839][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 302.296691][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 302.312786][ T7111] BTRFS info (device loop0): enabling ssd optimizations [ 302.335459][ T6875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 302.350945][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 302.362662][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.363963][ T4514] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 302.388985][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.443153][ T5289] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 302.496527][ T5289] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 302.534392][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.576203][ T4514] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.577550][ T5289] usb 4-1: config 0 descriptor?? [ 302.597509][ T4514] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.618261][ T4514] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 302.680597][ T4514] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 302.716492][ T4514] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.752983][ T4514] usb 2-1: config 0 descriptor?? [ 303.005109][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 303.018140][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.072851][ T6875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.137869][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 303.177439][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 303.197371][ T4514] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 303.213217][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 303.229517][ T4248] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 303.251545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 303.267952][ T4514] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 303.289566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 303.340803][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 303.388916][ T6875] device veth0_vlan entered promiscuous mode [ 303.445455][ T6875] device veth1_vlan entered promiscuous mode [ 303.534370][ T4349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 303.578637][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 303.602278][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 303.615884][ T5501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 303.680936][ T7179] overlayfs: failed to clone upperpath [ 304.286511][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 304.296983][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 304.317609][ T6875] device veth0_macvtap entered promiscuous mode [ 304.329604][ T5289] usbhid 4-1:0.0: can't add hid device: -71 [ 304.337687][ T5289] usbhid: probe of 4-1:0.0 failed with error -71 [ 304.346912][ T5289] usb 4-1: USB disconnect, device number 19 [ 304.353718][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 304.396102][ T6875] device veth1_macvtap entered promiscuous mode [ 304.534197][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.604856][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.641298][ T7187] usb 2-1: USB disconnect, device number 27 [ 304.682501][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.719235][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.759213][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.785888][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.824257][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.848720][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.887325][ T6875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.056133][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 305.105082][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 305.315602][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.378997][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.407876][ T7199] loop1: detected capacity change from 0 to 512 [ 305.425082][ T7199] EXT4-fs: Ignoring removed oldalloc option [ 305.431197][ T7199] EXT4-fs: Ignoring removed bh option [ 305.473282][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.517442][ T7199] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b80ee02c, mo2=0002] [ 305.527691][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.551628][ T7199] System zones: 1-12 [ 305.555896][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.593881][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.613485][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.621231][ T7199] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.613: invalid indirect mapped block 1 (level 1) [ 305.634495][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.681801][ T7199] EXT4-fs (loop1): Remounting filesystem read-only [ 305.743024][ T7199] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.613: invalid indirect mapped block 7 (level 2) [ 305.760536][ T6875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.794192][ T7199] EXT4-fs (loop1): Remounting filesystem read-only [ 305.801104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 305.810478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 305.838375][ T7199] EXT4-fs (loop1): 1 truncate cleaned up [ 305.859920][ T6875] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.893419][ T6875] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.893651][ T7199] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 305.929673][ T6875] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.948974][ T6875] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.159103][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 306.190286][ T5501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.211259][ T5501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.313489][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 306.352203][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.371835][ T7227] FAULT_INJECTION: forcing a failure. [ 306.371835][ T7227] name failslab, interval 1, probability 0, space 0, times 0 [ 306.396526][ T7227] CPU: 1 PID: 7227 Comm: syz.1.617 Not tainted 6.1.134-syzkaller #0 [ 306.404562][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 306.414720][ T7227] Call Trace: [ 306.418015][ T7227] [ 306.420945][ T7227] dump_stack_lvl+0x1e3/0x2cb [ 306.425639][ T7227] ? nf_tcp_handle_invalid+0x647/0x647 [ 306.431104][ T7227] ? panic+0x764/0x764 [ 306.435183][ T7227] ? __might_sleep+0xb0/0xb0 [ 306.439783][ T7227] ? __lock_acquire+0x125b/0x1f80 [ 306.444822][ T7227] should_fail_ex+0x3a6/0x4d0 [ 306.449509][ T7227] should_failslab+0x5/0x20 [ 306.454014][ T7227] slab_pre_alloc_hook+0x59/0x300 [ 306.459046][ T7227] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 306.464770][ T7227] __kmem_cache_alloc_node+0x47/0x260 [ 306.470170][ T7227] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 306.475896][ T7227] __kmalloc+0xa1/0x230 [ 306.480054][ T7227] ? rcu_is_watching+0x11/0xb0 [ 306.484829][ T7227] tomoyo_realpath_from_path+0xcb/0x5d0 [ 306.490389][ T7227] tomoyo_path_number_perm+0x21f/0x7f0 [ 306.495864][ T7227] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 306.501503][ T7227] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 306.506984][ T7227] ? __fget_files+0x28/0x4a0 [ 306.511610][ T7227] ? __fget_files+0x28/0x4a0 [ 306.516218][ T7227] ? __fget_files+0x435/0x4a0 [ 306.520901][ T7227] ? __fget_files+0x28/0x4a0 [ 306.525503][ T7227] security_file_ioctl+0x6d/0xa0 [ 306.530446][ T7227] __se_sys_ioctl+0x47/0x160 [ 306.535045][ T7227] do_syscall_64+0x3b/0x80 [ 306.539464][ T7227] ? clear_bhb_loop+0x45/0xa0 [ 306.544151][ T7227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.550054][ T7227] RIP: 0033:0x7f057ed8e169 [ 306.554468][ T7227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.574077][ T7227] RSP: 002b:00007f057fbc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.582492][ T7227] RAX: ffffffffffffffda RBX: 00007f057efb5fa0 RCX: 00007f057ed8e169 [ 306.590463][ T7227] RDX: 00002000000001c0 RSI: 0000000040085112 RDI: 0000000000000003 [ 306.598439][ T7227] RBP: 00007f057fbc9090 R08: 0000000000000000 R09: 0000000000000000 [ 306.606415][ T7227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.614388][ T7227] R13: 0000000000000000 R14: 00007f057efb5fa0 R15: 00007ffda80b4c98 [ 306.622371][ T7227] [ 306.650367][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.696138][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 306.907753][ T7227] ERROR: Out of memory at tomoyo_realpath_from_path. [ 307.811780][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'. [ 308.041609][ T7262] loop1: detected capacity change from 0 to 1024 [ 308.120126][ T7262] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 308.563149][ T5501] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.668134][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 308.757538][ T5501] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.943460][ T5501] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.105340][ T5501] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.294175][ T4318] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 309.306069][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.472084][ T7300] FAULT_INJECTION: forcing a failure. [ 311.472084][ T7300] name failslab, interval 1, probability 0, space 0, times 0 [ 311.515287][ T7300] CPU: 1 PID: 7300 Comm: syz.0.631 Not tainted 6.1.134-syzkaller #0 [ 311.523328][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 311.533442][ T7300] Call Trace: [ 311.536720][ T7300] [ 311.539646][ T7300] dump_stack_lvl+0x1e3/0x2cb [ 311.544328][ T7300] ? nf_tcp_handle_invalid+0x647/0x647 [ 311.549785][ T7300] ? panic+0x764/0x764 [ 311.553857][ T7300] ? __might_sleep+0xb0/0xb0 [ 311.558449][ T7300] ? __lock_acquire+0x125b/0x1f80 [ 311.563495][ T7300] should_fail_ex+0x3a6/0x4d0 [ 311.568172][ T7300] should_failslab+0x5/0x20 [ 311.572666][ T7300] slab_pre_alloc_hook+0x59/0x300 [ 311.577714][ T7300] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 311.583439][ T7300] __kmem_cache_alloc_node+0x47/0x260 [ 311.588819][ T7300] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 311.594563][ T7300] __kmalloc+0xa1/0x230 [ 311.598718][ T7300] ? rcu_is_watching+0x11/0xb0 [ 311.603489][ T7300] tomoyo_realpath_from_path+0xcb/0x5d0 [ 311.609039][ T7300] tomoyo_path_number_perm+0x21f/0x7f0 [ 311.614506][ T7300] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 311.620143][ T7300] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 311.625652][ T7300] ? __fget_files+0x28/0x4a0 [ 311.630278][ T7300] ? __fget_files+0x28/0x4a0 [ 311.634872][ T7300] ? __fget_files+0x435/0x4a0 [ 311.639548][ T7300] ? __fget_files+0x28/0x4a0 [ 311.644142][ T7300] security_file_ioctl+0x6d/0xa0 [ 311.649077][ T7300] __se_sys_ioctl+0x47/0x160 [ 311.653670][ T7300] do_syscall_64+0x3b/0x80 [ 311.658091][ T7300] ? clear_bhb_loop+0x45/0xa0 [ 311.662773][ T7300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.668670][ T7300] RIP: 0033:0x7f05edd8e169 [ 311.673079][ T7300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.692703][ T7300] RSP: 002b:00007f05eec32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.701201][ T7300] RAX: ffffffffffffffda RBX: 00007f05edfb5fa0 RCX: 00007f05edd8e169 [ 311.709206][ T7300] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 311.717178][ T7300] RBP: 00007f05eec32090 R08: 0000000000000000 R09: 0000000000000000 [ 311.725149][ T7300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.733116][ T7300] R13: 0000000000000000 R14: 00007f05edfb5fa0 R15: 00007ffc50a09238 [ 311.741093][ T7300] [ 311.784195][ T7300] ERROR: Out of memory at tomoyo_realpath_from_path. [ 311.788349][ T4249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 311.801945][ T4249] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 311.810002][ T4249] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 311.819235][ T4249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 311.830657][ T4249] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 311.849483][ T4249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.726716][ T7330] FAULT_INJECTION: forcing a failure. [ 313.726716][ T7330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.740119][ T7330] CPU: 1 PID: 7330 Comm: syz.1.635 Not tainted 6.1.134-syzkaller #0 [ 313.748129][ T7330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 313.758212][ T7330] Call Trace: [ 313.761511][ T7330] [ 313.764458][ T7330] dump_stack_lvl+0x1e3/0x2cb [ 313.769175][ T7330] ? nf_tcp_handle_invalid+0x647/0x647 [ 313.774674][ T7330] ? panic+0x764/0x764 [ 313.778773][ T7330] ? __lock_acquire+0x1f80/0x1f80 [ 313.783836][ T7330] should_fail_ex+0x3a6/0x4d0 [ 313.788549][ T7330] _copy_from_user+0x2b/0x170 [ 313.793262][ T7330] copy_msghdr_from_user+0xaa/0x670 [ 313.798496][ T7330] ? sendmsg_copy_msghdr+0x70/0x70 [ 313.803632][ T7330] __sys_sendmsg+0x236/0x390 [ 313.808233][ T7330] ? ____sys_sendmsg+0x9a0/0x9a0 [ 313.813182][ T7330] ? vfs_write+0x6cf/0xbc0 [ 313.817633][ T7330] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 313.823629][ T7330] ? syscall_enter_from_user_mode+0x2e/0x230 [ 313.829617][ T7330] ? lockdep_hardirqs_on+0x94/0x130 [ 313.834825][ T7330] ? syscall_enter_from_user_mode+0x2e/0x230 [ 313.840955][ T7330] do_syscall_64+0x3b/0x80 [ 313.845387][ T7330] ? clear_bhb_loop+0x45/0xa0 [ 313.850087][ T7330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.855998][ T7330] RIP: 0033:0x7f057ed8e169 [ 313.860423][ T7330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.880041][ T7330] RSP: 002b:00007f057fbc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.888460][ T7330] RAX: ffffffffffffffda RBX: 00007f057efb5fa0 RCX: 00007f057ed8e169 [ 313.896434][ T7330] RDX: 0000000020000004 RSI: 0000200000000480 RDI: 0000000000000003 [ 313.904418][ T7330] RBP: 00007f057fbc9090 R08: 0000000000000000 R09: 0000000000000000 [ 313.912388][ T7330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.920357][ T7330] R13: 0000000000000000 R14: 00007f057efb5fa0 R15: 00007ffda80b4c98 [ 313.928350][ T7330] [ 313.963656][ T4249] Bluetooth: hci3: command 0x0409 tx timeout [ 314.092519][ T7332] tipc: Started in network mode [ 314.103412][ T7332] tipc: Node identity , cluster identity 4711 [ 314.291526][ T7308] chnl_net:caif_netlink_parms(): no params data found [ 314.702567][ T7335] loop1: detected capacity change from 0 to 32768 [ 314.767351][ T7335] XFS (loop1): Mounting V5 Filesystem [ 314.889558][ T7308] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.910118][ T7335] XFS (loop1): Ending clean mount [ 314.912383][ T7308] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.930144][ T7335] XFS (loop1): Quotacheck needed: Please wait. [ 314.973911][ T7308] device bridge_slave_0 entered promiscuous mode [ 315.044177][ T7335] XFS (loop1): Quotacheck: Done. [ 315.130794][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 315.130811][ T27] audit: type=1326 audit(1745317557.599:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05edd8e169 code=0x7ffc0000 [ 315.280476][ T27] audit: type=1326 audit(1745317557.639:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05edd2a359 code=0x7ffc0000 [ 315.303681][ T4252] XFS (loop1): Unmounting Filesystem [ 315.318370][ T7308] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.340622][ T7308] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.404512][ T7308] device bridge_slave_1 entered promiscuous mode [ 315.422032][ T27] audit: type=1326 audit(1745317557.639:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05edd8e169 code=0x7ffc0000 [ 315.563303][ T27] audit: type=1326 audit(1745317557.639:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05edd2a359 code=0x7ffc0000 [ 315.667528][ T27] audit: type=1326 audit(1745317557.639:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05edd2a359 code=0x7ffc0000 [ 315.758900][ T27] audit: type=1326 audit(1745317557.649:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05edd8e169 code=0x7ffc0000 [ 315.908884][ T27] audit: type=1326 audit(1745317557.649:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05edd2a359 code=0x7ffc0000 [ 315.934344][ T4972] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 316.023531][ T4249] Bluetooth: hci3: command 0x041b tx timeout [ 316.096998][ T27] audit: type=1326 audit(1745317557.649:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05edd2a359 code=0x7ffc0000 [ 316.156058][ T7308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.227220][ T7308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.259658][ T27] audit: type=1326 audit(1745317557.649:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05edd8e169 code=0x7ffc0000 [ 316.305028][ T5501] device hsr_slave_0 left promiscuous mode [ 316.334010][ T4349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 316.365830][ T7385] program syz.3.647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.403846][ T5501] device hsr_slave_1 left promiscuous mode [ 316.418730][ T27] audit: type=1326 audit(1745317557.649:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05edd8e169 code=0x7ffc0000 [ 316.473824][ T5501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.486927][ T5501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.513487][ T5501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.539547][ T5501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.568919][ T5501] device bridge_slave_1 left promiscuous mode [ 316.602399][ T5501] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.821279][ T7398] overlayfs: failed to clone upperpath [ 316.875349][ T7391] loop1: detected capacity change from 0 to 4096 [ 317.016675][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.412681][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.824041][ T5501] device bridge_slave_0 left promiscuous mode [ 317.830398][ T5501] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.093353][ T4251] Bluetooth: hci3: command 0x040f tx timeout [ 318.167597][ T5501] device veth1_macvtap left promiscuous mode [ 318.177139][ T5501] device veth0_macvtap left promiscuous mode [ 318.191604][ T5501] device veth1_vlan left promiscuous mode [ 318.207751][ T5501] device veth0_vlan left promiscuous mode [ 318.414514][ T7418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.651'. [ 319.053777][ T4251] Bluetooth: hci4: command 0x0406 tx timeout [ 319.734733][ T7446] FAULT_INJECTION: forcing a failure. [ 319.734733][ T7446] name failslab, interval 1, probability 0, space 0, times 0 [ 319.788010][ T7446] CPU: 0 PID: 7446 Comm: syz.3.657 Not tainted 6.1.134-syzkaller #0 [ 319.796054][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 319.806135][ T7446] Call Trace: [ 319.809436][ T7446] [ 319.812554][ T7446] dump_stack_lvl+0x1e3/0x2cb [ 319.817273][ T7446] ? nf_tcp_handle_invalid+0x647/0x647 [ 319.822768][ T7446] ? panic+0x764/0x764 [ 319.826879][ T7446] ? __might_sleep+0xb0/0xb0 [ 319.831505][ T7446] ? __lock_acquire+0x125b/0x1f80 [ 319.836588][ T7446] should_fail_ex+0x3a6/0x4d0 [ 319.841318][ T7446] should_failslab+0x5/0x20 [ 319.845826][ T7446] slab_pre_alloc_hook+0x59/0x300 [ 319.850866][ T7446] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 319.856593][ T7446] __kmem_cache_alloc_node+0x47/0x260 [ 319.861977][ T7446] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 319.867705][ T7446] __kmalloc+0xa1/0x230 [ 319.871874][ T7446] ? rcu_is_watching+0x11/0xb0 [ 319.876656][ T7446] tomoyo_realpath_from_path+0xcb/0x5d0 [ 319.882217][ T7446] tomoyo_path_number_perm+0x21f/0x7f0 [ 319.887693][ T7446] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 319.893340][ T7446] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 319.898818][ T7446] ? __fget_files+0x28/0x4a0 [ 319.903439][ T7446] ? __fget_files+0x28/0x4a0 [ 319.908041][ T7446] ? __fget_files+0x435/0x4a0 [ 319.912741][ T7446] ? __fget_files+0x28/0x4a0 [ 319.917363][ T7446] security_file_ioctl+0x6d/0xa0 [ 319.922320][ T7446] __se_sys_ioctl+0x47/0x160 [ 319.926935][ T7446] do_syscall_64+0x3b/0x80 [ 319.931367][ T7446] ? clear_bhb_loop+0x45/0xa0 [ 319.936071][ T7446] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.941980][ T7446] RIP: 0033:0x7f77fef8e169 [ 319.946404][ T7446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.966019][ T7446] RSP: 002b:00007f77ffe81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.974439][ T7446] RAX: ffffffffffffffda RBX: 00007f77ff1b6160 RCX: 00007f77fef8e169 [ 319.982410][ T7446] RDX: 0000200000000000 RSI: 00000000000089a2 RDI: 0000000000000010 [ 319.990820][ T7446] RBP: 00007f77ffe81090 R08: 0000000000000000 R09: 0000000000000000 [ 319.998793][ T7446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.006767][ T7446] R13: 0000000000000000 R14: 00007f77ff1b6160 R15: 00007ffdafb01618 [ 320.014839][ T7446] [ 320.043948][ T7446] ERROR: Out of memory at tomoyo_realpath_from_path. [ 320.183821][ T4251] Bluetooth: hci3: command 0x0419 tx timeout [ 320.262426][ T7454] FAULT_INJECTION: forcing a failure. [ 320.262426][ T7454] name failslab, interval 1, probability 0, space 0, times 0 [ 320.275834][ T7454] CPU: 0 PID: 7454 Comm: syz.0.659 Not tainted 6.1.134-syzkaller #0 [ 320.283850][ T7454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 320.293935][ T7454] Call Trace: [ 320.297243][ T7454] [ 320.300192][ T7454] dump_stack_lvl+0x1e3/0x2cb [ 320.304918][ T7454] ? nf_tcp_handle_invalid+0x647/0x647 [ 320.310410][ T7454] ? panic+0x764/0x764 [ 320.314521][ T7454] ? __might_sleep+0xb0/0xb0 [ 320.319169][ T7454] ? __lock_acquire+0x125b/0x1f80 [ 320.324228][ T7454] should_fail_ex+0x3a6/0x4d0 [ 320.328923][ T7454] should_failslab+0x5/0x20 [ 320.333440][ T7454] slab_pre_alloc_hook+0x59/0x300 [ 320.338480][ T7454] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 320.344211][ T7454] __kmem_cache_alloc_node+0x47/0x260 [ 320.349602][ T7454] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 320.355336][ T7454] __kmalloc+0xa1/0x230 [ 320.359504][ T7454] ? rcu_is_watching+0x11/0xb0 [ 320.364280][ T7454] tomoyo_realpath_from_path+0xcb/0x5d0 [ 320.369841][ T7454] tomoyo_path_number_perm+0x21f/0x7f0 [ 320.375318][ T7454] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 320.380965][ T7454] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 320.386450][ T7454] ? __fget_files+0x28/0x4a0 [ 320.391067][ T7454] ? __fget_files+0x28/0x4a0 [ 320.395666][ T7454] ? __fget_files+0x435/0x4a0 [ 320.400357][ T7454] ? __fget_files+0x28/0x4a0 [ 320.404961][ T7454] security_file_ioctl+0x6d/0xa0 [ 320.409906][ T7454] __se_sys_ioctl+0x47/0x160 [ 320.414509][ T7454] do_syscall_64+0x3b/0x80 [ 320.418932][ T7454] ? clear_bhb_loop+0x45/0xa0 [ 320.423623][ T7454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.429528][ T7454] RIP: 0033:0x7f05edd8e169 [ 320.433945][ T7454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.453558][ T7454] RSP: 002b:00007f05eec32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.461980][ T7454] RAX: ffffffffffffffda RBX: 00007f05edfb5fa0 RCX: 00007f05edd8e169 [ 320.469954][ T7454] RDX: 0000200000000200 RSI: 00000000c0405602 RDI: 0000000000000003 [ 320.477930][ T7454] RBP: 00007f05eec32090 R08: 0000000000000000 R09: 0000000000000000 [ 320.485928][ T7454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.493902][ T7454] R13: 0000000000000000 R14: 00007f05edfb5fa0 R15: 00007ffc50a09238 [ 320.501888][ T7454] [ 320.534473][ T7454] ERROR: Out of memory at tomoyo_realpath_from_path. [ 320.714987][ T5501] team0 (unregistering): Port device team_slave_1 removed [ 320.791549][ T5501] team0 (unregistering): Port device team_slave_0 removed [ 320.873913][ T5501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.928683][ T5501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.928985][ T7464] FAULT_INJECTION: forcing a failure. [ 320.928985][ T7464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.950756][ T7464] CPU: 0 PID: 7464 Comm: syz.0.663 Not tainted 6.1.134-syzkaller #0 [ 320.958782][ T7464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 320.968853][ T7464] Call Trace: [ 320.972154][ T7464] [ 320.975106][ T7464] dump_stack_lvl+0x1e3/0x2cb [ 320.979832][ T7464] ? nf_tcp_handle_invalid+0x647/0x647 [ 320.985312][ T7464] ? panic+0x764/0x764 [ 320.989382][ T7464] ? __lock_acquire+0x1f80/0x1f80 [ 320.994423][ T7464] should_fail_ex+0x3a6/0x4d0 [ 320.999124][ T7464] _copy_from_user+0x2b/0x170 [ 321.003831][ T7464] io_submit_one+0xbf/0x18d0 [ 321.008442][ T7464] ? lookup_ioctx+0x6a0/0x6a0 [ 321.013126][ T7464] ? __might_fault+0xa1/0x110 [ 321.017815][ T7464] ? __lock_acquire+0x1f80/0x1f80 [ 321.022857][ T7464] ? __might_fault+0xa1/0x110 [ 321.027544][ T7464] ? __might_fault+0xbd/0x110 [ 321.032233][ T7464] __se_sys_io_submit+0x17b/0x2f0 [ 321.037267][ T7464] ? __x64_sys_io_submit+0x80/0x80 [ 321.042391][ T7464] ? syscall_enter_from_user_mode+0x2e/0x230 [ 321.048414][ T7464] ? lockdep_hardirqs_on+0x94/0x130 [ 321.053624][ T7464] ? syscall_enter_from_user_mode+0x2e/0x230 [ 321.059624][ T7464] do_syscall_64+0x3b/0x80 [ 321.064055][ T7464] ? clear_bhb_loop+0x45/0xa0 [ 321.068745][ T7464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.074654][ T7464] RIP: 0033:0x7f05edd8e169 [ 321.079071][ T7464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.099030][ T7464] RSP: 002b:00007f05eec32038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 321.107537][ T7464] RAX: ffffffffffffffda RBX: 00007f05edfb5fa0 RCX: 00007f05edd8e169 [ 321.115514][ T7464] RDX: 0000200000000780 RSI: 0000000000000020 RDI: 00007f05eebee000 [ 321.123507][ T7464] RBP: 00007f05eec32090 R08: 0000000000000000 R09: 0000000000000000 [ 321.131478][ T7464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.139453][ T7464] R13: 0000000000000000 R14: 00007f05edfb5fa0 R15: 00007ffc50a09238 [ 321.147439][ T7464] [ 321.457306][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 321.463456][ T4348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 321.671919][ T5501] bond0 (unregistering): Released all slaves [ 321.786825][ T7423] device syzkaller1 entered promiscuous mode [ 321.804272][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.657'. [ 321.813204][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'. [ 321.869348][ T7446] bridge0: port 3(syz_tun) entered blocking state [ 321.885019][ T7446] bridge0: port 3(syz_tun) entered disabled state [ 321.919188][ T7446] device syz_tun entered promiscuous mode [ 321.951925][ T7446] bridge0: port 3(syz_tun) entered blocking state [ 321.958886][ T7446] bridge0: port 3(syz_tun) entered forwarding state [ 321.973811][ T7461] all: renamed from caif0 [ 322.000948][ T7308] team0: Port device team_slave_0 added [ 322.074791][ T7308] team0: Port device team_slave_1 added [ 322.129312][ T7308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.186724][ T7308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.245756][ T7308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.259037][ T7308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.266358][ T7308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.322438][ T7477] loop0: detected capacity change from 0 to 256 [ 322.329069][ T7308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.404957][ T7477] FAT-fs (loop0): Directory bread(block 64) failed [ 322.445661][ T7472] netlink: 44 bytes leftover after parsing attributes in process `syz.1.665'. [ 322.455284][ T7477] FAT-fs (loop0): Directory bread(block 65) failed [ 322.461944][ T7477] FAT-fs (loop0): Directory bread(block 66) failed [ 322.529159][ T7308] device hsr_slave_0 entered promiscuous mode [ 322.535899][ T7477] FAT-fs (loop0): Directory bread(block 67) failed [ 322.562144][ T7477] FAT-fs (loop0): Directory bread(block 68) failed [ 322.582953][ T7308] device hsr_slave_1 entered promiscuous mode [ 322.598014][ T7308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.603795][ T7477] FAT-fs (loop0): Directory bread(block 69) failed [ 322.622733][ T7477] FAT-fs (loop0): Directory bread(block 70) failed [ 322.645116][ T7308] Cannot create hsr debugfs directory [ 322.651157][ T7477] FAT-fs (loop0): Directory bread(block 71) failed [ 322.665706][ T7477] FAT-fs (loop0): Directory bread(block 72) failed [ 322.672381][ T7477] FAT-fs (loop0): Directory bread(block 73) failed [ 322.730104][ T7477] syz.0.667: attempt to access beyond end of device [ 322.730104][ T7477] loop0: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 322.787562][ T7487] netlink: 44 bytes leftover after parsing attributes in process `syz.3.668'. [ 323.143114][ T7502] loop0: detected capacity change from 0 to 512 [ 323.269238][ T4401] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 323.336675][ T7507] FAULT_INJECTION: forcing a failure. [ 323.336675][ T7507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.382737][ T7507] CPU: 1 PID: 7507 Comm: syz.3.672 Not tainted 6.1.134-syzkaller #0 [ 323.391213][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 323.401301][ T7507] Call Trace: [ 323.404604][ T7507] [ 323.407554][ T7507] dump_stack_lvl+0x1e3/0x2cb [ 323.412266][ T7507] ? nf_tcp_handle_invalid+0x647/0x647 [ 323.417772][ T7507] ? panic+0x764/0x764 [ 323.421878][ T7507] ? __lock_acquire+0x1f80/0x1f80 [ 323.426946][ T7507] should_fail_ex+0x3a6/0x4d0 [ 323.431737][ T7507] _copy_from_user+0x2b/0x170 [ 323.436543][ T7507] copy_msghdr_from_user+0xaa/0x670 [ 323.441780][ T7507] ? sendmsg_copy_msghdr+0x70/0x70 [ 323.446945][ T7507] __sys_sendmsg+0x236/0x390 [ 323.451573][ T7507] ? ____sys_sendmsg+0x9a0/0x9a0 [ 323.456545][ T7507] ? vfs_write+0x6cf/0xbc0 [ 323.461027][ T7507] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 323.467059][ T7507] ? syscall_enter_from_user_mode+0x2e/0x230 [ 323.473078][ T7507] ? lockdep_hardirqs_on+0x94/0x130 [ 323.478321][ T7507] ? syscall_enter_from_user_mode+0x2e/0x230 [ 323.484342][ T7507] do_syscall_64+0x3b/0x80 [ 323.488770][ T7507] ? clear_bhb_loop+0x45/0xa0 [ 323.493463][ T7507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.499360][ T7507] RIP: 0033:0x7f77fef8e169 [ 323.503795][ T7507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.523402][ T7507] RSP: 002b:00007f77ffec3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.531827][ T7507] RAX: ffffffffffffffda RBX: 00007f77ff1b5fa0 RCX: 00007f77fef8e169 [ 323.539805][ T7507] RDX: 0000000020000004 RSI: 0000200000000480 RDI: 0000000000000003 [ 323.547783][ T7507] RBP: 00007f77ffec3090 R08: 0000000000000000 R09: 0000000000000000 [ 323.555756][ T7507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.563727][ T7507] R13: 0000000000000000 R14: 00007f77ff1b5fa0 R15: 00007ffdafb01618 [ 323.571715][ T7507] [ 324.765847][ T7524] FAULT_INJECTION: forcing a failure. [ 324.765847][ T7524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.803355][ T7524] CPU: 0 PID: 7524 Comm: syz.0.676 Not tainted 6.1.134-syzkaller #0 [ 324.811410][ T7524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 324.821496][ T7524] Call Trace: [ 324.824802][ T7524] [ 324.827752][ T7524] dump_stack_lvl+0x1e3/0x2cb [ 324.832482][ T7524] ? nf_tcp_handle_invalid+0x647/0x647 [ 324.837977][ T7524] ? panic+0x764/0x764 [ 324.842088][ T7524] ? __lock_acquire+0x1f80/0x1f80 [ 324.847323][ T7524] should_fail_ex+0x3a6/0x4d0 [ 324.852042][ T7524] _copy_from_user+0x2b/0x170 [ 324.856761][ T7524] copy_msghdr_from_user+0xaa/0x670 [ 324.861986][ T7524] ? sendmsg_copy_msghdr+0x70/0x70 [ 324.867124][ T7524] __sys_sendmsg+0x236/0x390 [ 324.871736][ T7524] ? ____sys_sendmsg+0x9a0/0x9a0 [ 324.876692][ T7524] ? vfs_write+0x6cf/0xbc0 [ 324.881151][ T7524] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 324.887177][ T7524] ? syscall_enter_from_user_mode+0x2e/0x230 [ 324.893174][ T7524] ? lockdep_hardirqs_on+0x94/0x130 [ 324.898389][ T7524] ? syscall_enter_from_user_mode+0x2e/0x230 [ 324.904385][ T7524] do_syscall_64+0x3b/0x80 [ 324.908820][ T7524] ? clear_bhb_loop+0x45/0xa0 [ 324.913538][ T7524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.919449][ T7524] RIP: 0033:0x7f05edd8e169 [ 324.923873][ T7524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.943503][ T7524] RSP: 002b:00007f05eec32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.951925][ T7524] RAX: ffffffffffffffda RBX: 00007f05edfb5fa0 RCX: 00007f05edd8e169 [ 324.959935][ T7524] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 324.967948][ T7524] RBP: 00007f05eec32090 R08: 0000000000000000 R09: 0000000000000000 [ 324.975951][ T7524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.983940][ T7524] R13: 0000000000000000 R14: 00007f05edfb5fa0 R15: 00007ffc50a09238 [ 324.991939][ T7524] [ 324.995072][ C0] vkms_vblank_simulate: vblank timer overrun [ 325.085539][ T7308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 325.126490][ T7308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 325.151618][ T7308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 325.175263][ T7518] loop3: detected capacity change from 0 to 32768 [ 325.185416][ T7308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 325.200503][ T7518] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.674 (7518) [ 325.420475][ T7518] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 325.443620][ T7518] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 325.498293][ T7518] BTRFS info (device loop3): setting nodatacow, compression disabled [ 325.574675][ T7518] BTRFS info (device loop3): setting datacow [ 325.605952][ T7518] BTRFS info (device loop3): doing ref verification [ 325.688225][ T7518] BTRFS info (device loop3): force clearing of disk cache [ 325.757027][ T7518] BTRFS info (device loop3): turning off barriers [ 325.763803][ T7518] BTRFS info (device loop3): enabling ssd optimizations [ 325.770915][ T7518] BTRFS info (device loop3): using spread ssd allocation scheme [ 325.778917][ T7518] BTRFS info (device loop3): using free space tree [ 326.029996][ T7308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.042688][ T7518] BTRFS info (device loop3): rebuilding free space tree [ 326.051048][ T7308] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.059930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 326.076443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 326.152555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 326.172267][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.214458][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.221782][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.263878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 326.399591][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 326.451479][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.458809][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.558675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 326.575476][ T4292] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 326.586244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 326.616425][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 326.654544][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 326.677992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 326.715644][ T7579] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 326.764976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 326.780747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 326.824592][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 326.861504][ T4257] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 326.872553][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 326.910242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 326.954284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 326.962879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 327.072487][ T7308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 327.216886][ T4338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 327.754118][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 327.761628][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 327.804855][ T7308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.886520][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 327.986346][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 328.414619][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 328.465487][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 328.609522][ T7308] device veth0_vlan entered promiscuous mode [ 328.696336][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 328.726426][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 328.782253][ T7308] device veth1_vlan entered promiscuous mode [ 328.871961][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 328.887154][ T7612] FAULT_INJECTION: forcing a failure. [ 328.887154][ T7612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.909231][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 328.912236][ T7575] loop1: detected capacity change from 0 to 32768 [ 328.929077][ T7308] device veth0_macvtap entered promiscuous mode [ 328.955291][ T7612] CPU: 0 PID: 7612 Comm: syz.3.688 Not tainted 6.1.134-syzkaller #0 [ 328.963337][ T7612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 328.973420][ T7612] Call Trace: [ 328.976709][ T7612] [ 328.979648][ T7612] dump_stack_lvl+0x1e3/0x2cb [ 328.984344][ T7612] ? nf_tcp_handle_invalid+0x647/0x647 [ 328.989832][ T7612] ? panic+0x764/0x764 [ 328.993932][ T7612] ? snprintf+0xd6/0x120 [ 328.998212][ T7612] should_fail_ex+0x3a6/0x4d0 [ 329.002911][ T7612] _copy_to_user+0x2b/0x130 [ 329.007441][ T7612] simple_read_from_buffer+0xc6/0x150 [ 329.012824][ T7612] proc_fail_nth_read+0x1a3/0x210 [ 329.017882][ T7612] ? proc_fault_inject_write+0x390/0x390 [ 329.023533][ T7612] ? fsnotify_perm+0x439/0x590 [ 329.028300][ T7612] ? proc_fault_inject_write+0x390/0x390 [ 329.033955][ T7612] vfs_read+0x2ed/0xbf0 [ 329.038130][ T7612] ? __fdget_pos+0x2ba/0x360 [ 329.042737][ T7612] ? kernel_read+0x1f0/0x1f0 [ 329.047341][ T7612] ? __fget_files+0x28/0x4a0 [ 329.051944][ T7612] ? __fget_files+0x435/0x4a0 [ 329.056638][ T7612] ? __fdget_pos+0x2ba/0x360 [ 329.061236][ T7612] ? ksys_read+0x77/0x2c0 [ 329.065580][ T7612] ksys_read+0x19c/0x2c0 [ 329.069834][ T7612] ? print_irqtrace_events+0x210/0x210 [ 329.075306][ T7612] ? vfs_write+0xbc0/0xbc0 [ 329.079733][ T7612] ? syscall_enter_from_user_mode+0x2e/0x230 [ 329.085749][ T7612] ? lockdep_hardirqs_on+0x94/0x130 [ 329.090963][ T7612] ? syscall_enter_from_user_mode+0x2e/0x230 [ 329.096959][ T7612] do_syscall_64+0x3b/0x80 [ 329.101383][ T7612] ? clear_bhb_loop+0x45/0xa0 [ 329.106077][ T7612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.111980][ T7612] RIP: 0033:0x7f77fef8cb7c [ 329.116402][ T7612] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 329.136033][ T7612] RSP: 002b:00007f77ffea2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 329.144454][ T7612] RAX: ffffffffffffffda RBX: 00007f77ff1b6080 RCX: 00007f77fef8cb7c [ 329.152432][ T7612] RDX: 000000000000000f RSI: 00007f77ffea20a0 RDI: 0000000000000005 [ 329.160416][ T7612] RBP: 00007f77ffea2090 R08: 0000000000000000 R09: 0000000000000000 [ 329.168390][ T7612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.176367][ T7612] R13: 0000000000000000 R14: 00007f77ff1b6080 R15: 00007ffdafb01618 [ 329.184357][ T7612] [ 329.209213][ T7308] device veth1_macvtap entered promiscuous mode [ 329.232303][ T7575] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 329.242597][ T7575] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 329.247338][ T7308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.292749][ T7308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.312702][ T7575] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 329.332624][ T7308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.359395][ T7308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.367292][ T7575] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 329.379612][ T7308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.403674][ T7308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.414299][ T7308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.425309][ T7308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.438544][ T7308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.456931][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 329.466184][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 329.508464][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 329.518606][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 329.537852][ T7308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.559316][ T7308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.587613][ T7308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.649012][ T7308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.669296][ T7308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.693471][ T7308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.710385][ T7308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.733260][ T7308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.764069][ T7308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.779816][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 329.799115][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 329.816675][ T7308] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.833341][ T7308] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.883500][ T7308] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.903348][ T7308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.983445][ T7614] FAULT_INJECTION: forcing a failure. [ 329.983445][ T7614] name failslab, interval 1, probability 0, space 0, times 0 [ 330.044107][ T4380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.067081][ T7614] CPU: 0 PID: 7614 Comm: syz.3.690 Not tainted 6.1.134-syzkaller #0 [ 330.075116][ T7614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 330.085188][ T7614] Call Trace: [ 330.088478][ T7614] [ 330.091418][ T7614] dump_stack_lvl+0x1e3/0x2cb [ 330.096110][ T7614] ? nf_tcp_handle_invalid+0x647/0x647 [ 330.101578][ T7614] ? panic+0x764/0x764 [ 330.105664][ T7614] ? __might_sleep+0xb0/0xb0 [ 330.110268][ T7614] ? __lock_acquire+0x125b/0x1f80 [ 330.115307][ T7614] should_fail_ex+0x3a6/0x4d0 [ 330.120000][ T7614] should_failslab+0x5/0x20 [ 330.124509][ T7614] slab_pre_alloc_hook+0x59/0x300 [ 330.129543][ T7614] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 330.135268][ T7614] __kmem_cache_alloc_node+0x47/0x260 [ 330.140651][ T7614] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 330.146376][ T7614] __kmalloc+0xa1/0x230 [ 330.150535][ T7614] ? rcu_is_watching+0x11/0xb0 [ 330.155311][ T7614] tomoyo_realpath_from_path+0xcb/0x5d0 [ 330.160871][ T7614] tomoyo_path_number_perm+0x21f/0x7f0 [ 330.166345][ T7614] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 330.171992][ T7614] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 330.177486][ T7614] ? __fget_files+0x28/0x4a0 [ 330.182098][ T7614] ? __fget_files+0x28/0x4a0 [ 330.186704][ T7614] ? __fget_files+0x435/0x4a0 [ 330.191392][ T7614] ? __fget_files+0x28/0x4a0 [ 330.196002][ T7614] security_file_ioctl+0x6d/0xa0 [ 330.200952][ T7614] __se_sys_ioctl+0x47/0x160 [ 330.205557][ T7614] do_syscall_64+0x3b/0x80 [ 330.209981][ T7614] ? clear_bhb_loop+0x45/0xa0 [ 330.214670][ T7614] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.220572][ T7614] RIP: 0033:0x7f77fef8e169 [ 330.224990][ T7614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.244688][ T7614] RSP: 002b:00007f77ffec3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.253105][ T7614] RAX: ffffffffffffffda RBX: 00007f77ff1b5fa0 RCX: 00007f77fef8e169 [ 330.261077][ T7614] RDX: 0000200000001080 RSI: 00000000000089e1 RDI: 0000000000000003 [ 330.269051][ T7614] RBP: 00007f77ffec3090 R08: 0000000000000000 R09: 0000000000000000 [ 330.277024][ T7614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.285001][ T7614] R13: 0000000000000000 R14: 00007f77ff1b5fa0 R15: 00007ffdafb01618 [ 330.292992][ T7614] [ 330.310683][ T4380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.327099][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.349703][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 330.356644][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.402695][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 330.714758][ T7623] loop1: detected capacity change from 0 to 4096 [ 330.738805][ T7614] ERROR: Out of memory at tomoyo_realpath_from_path. [ 330.763648][ T7623] ntfs3: loop1: ino=0, Correct links count -> 1. [ 330.773998][ T7623] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 330.810675][ T7623] ntfs3: loop1: volume is dirty and "force" flag is not set! [ 331.104999][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.267341][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.425962][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.579188][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.581637][ T7633] loop1: detected capacity change from 0 to 40427 [ 331.599738][ T7633] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 331.607058][ T7633] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 331.623005][ T7633] F2FS-fs (loop1): invalid crc value [ 331.635102][ T7633] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 331.685549][ T7633] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 331.692722][ T7633] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 332.087748][ T7649] loop0: detected capacity change from 0 to 256 [ 332.310506][ T5193] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 332.359455][ T4338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 332.443108][ T7661] FAULT_INJECTION: forcing a failure. [ 332.443108][ T7661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.535035][ T7661] CPU: 0 PID: 7661 Comm: syz.3.699 Not tainted 6.1.134-syzkaller #0 [ 332.543176][ T7661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 332.553265][ T7661] Call Trace: [ 332.556565][ T7661] [ 332.559514][ T7661] dump_stack_lvl+0x1e3/0x2cb [ 332.564233][ T7661] ? nf_tcp_handle_invalid+0x647/0x647 [ 332.569730][ T7661] ? panic+0x764/0x764 [ 332.573876][ T7661] ? snprintf+0xd6/0x120 [ 332.578151][ T7661] should_fail_ex+0x3a6/0x4d0 [ 332.582844][ T7661] _copy_to_user+0x2b/0x130 [ 332.587366][ T7661] simple_read_from_buffer+0xc6/0x150 [ 332.592757][ T7661] proc_fail_nth_read+0x1a3/0x210 [ 332.597800][ T7661] ? proc_fault_inject_write+0x390/0x390 [ 332.603442][ T7661] ? fsnotify_perm+0x439/0x590 [ 332.608209][ T7661] ? proc_fault_inject_write+0x390/0x390 [ 332.613853][ T7661] vfs_read+0x2ed/0xbf0 [ 332.618037][ T7661] ? __fdget_pos+0x2ba/0x360 [ 332.622638][ T7661] ? kernel_read+0x1f0/0x1f0 [ 332.627238][ T7661] ? __fget_files+0x28/0x4a0 [ 332.631852][ T7661] ? __fget_files+0x435/0x4a0 [ 332.636570][ T7661] ? __fdget_pos+0x2ba/0x360 [ 332.641169][ T7661] ? ksys_read+0x77/0x2c0 [ 332.645511][ T7661] ksys_read+0x19c/0x2c0 [ 332.649800][ T7661] ? print_irqtrace_events+0x210/0x210 [ 332.655271][ T7661] ? vfs_write+0xbc0/0xbc0 [ 332.659694][ T7661] ? syscall_enter_from_user_mode+0x2e/0x230 [ 332.665682][ T7661] ? lockdep_hardirqs_on+0x94/0x130 [ 332.670910][ T7661] ? syscall_enter_from_user_mode+0x2e/0x230 [ 332.676903][ T7661] do_syscall_64+0x3b/0x80 [ 332.681322][ T7661] ? clear_bhb_loop+0x45/0xa0 [ 332.686005][ T7661] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.691903][ T7661] RIP: 0033:0x7f77fef8cb7c [ 332.696322][ T7661] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 332.715941][ T7661] RSP: 002b:00007f77ffec3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 332.724366][ T7661] RAX: ffffffffffffffda RBX: 00007f77ff1b5fa0 RCX: 00007f77fef8cb7c [ 332.732351][ T7661] RDX: 000000000000000f RSI: 00007f77ffec30a0 RDI: 0000000000000005 [ 332.740331][ T7661] RBP: 00007f77ffec3090 R08: 0000000000000000 R09: 0000000000000000 [ 332.748309][ T7661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.756285][ T7661] R13: 0000000000000000 R14: 00007f77ff1b5fa0 R15: 00007ffdafb01618 [ 332.764285][ T7661] [ 333.139203][ T4249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.150699][ T4249] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.158770][ T4249] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.177239][ T4249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.186374][ T4249] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 333.197378][ T4249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.686505][ T4252] syz-executor: attempt to access beyond end of device [ 333.686505][ T4252] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 334.050105][ T7692] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 334.062581][ T7692] hfsplus: unable to find HFS+ superblock [ 334.081640][ T7692] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 334.622471][ T7674] chnl_net:caif_netlink_parms(): no params data found [ 334.771632][ T11] device hsr_slave_0 left promiscuous mode [ 334.808701][ T11] device hsr_slave_1 left promiscuous mode [ 334.858175][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.949470][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.011017][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.027026][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.051787][ T11] device bridge_slave_1 left promiscuous mode [ 335.070203][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.094940][ T11] device bridge_slave_0 left promiscuous mode [ 335.101208][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.213428][ T4249] Bluetooth: hci3: command 0x0409 tx timeout [ 335.297591][ T11] device veth1_macvtap left promiscuous mode [ 335.324947][ T11] device veth0_macvtap left promiscuous mode [ 335.331132][ T11] device veth1_vlan left promiscuous mode [ 335.362291][ T7702] loop1: detected capacity change from 0 to 40427 [ 335.388467][ T7702] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 335.401286][ T11] device veth0_vlan left promiscuous mode [ 335.424409][ T7702] F2FS-fs (loop1): invalid crc value [ 335.455171][ T7702] F2FS-fs (loop1): Found nat_bits in checkpoint [ 335.562066][ T7735] mmap: syz.3.716 (7735): VmData 175878144 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 335.706441][ T7702] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 335.755598][ T27] kauditd_printk_skb: 661 callbacks suppressed [ 335.755617][ T27] audit: type=1800 audit(1745317578.229:771): pid=7702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.704" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 335.857555][ T7702] F2FS-fs (loop1) : inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0xce5/0x1f90 [ 335.885895][ T7702] syz.1.704: attempt to access beyond end of device [ 335.885895][ T7702] loop1: rw=2049, sector=77824, nr_sectors = 816 limit=40427 [ 335.995873][ T4252] syz-executor: attempt to access beyond end of device [ 335.995873][ T4252] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 336.520730][ T11] team0 (unregistering): Port device team_slave_1 removed [ 336.571494][ T11] team0 (unregistering): Port device team_slave_0 removed [ 336.618415][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.667239][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.948610][ T7760] FAULT_INJECTION: forcing a failure. [ 336.948610][ T7760] name failslab, interval 1, probability 0, space 0, times 0 [ 336.961607][ T7760] CPU: 1 PID: 7760 Comm: syz.0.722 Not tainted 6.1.134-syzkaller #0 [ 336.969630][ T7760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 336.979725][ T7760] Call Trace: [ 336.983017][ T7760] [ 336.985966][ T7760] dump_stack_lvl+0x1e3/0x2cb [ 336.990667][ T7760] ? nf_tcp_handle_invalid+0x647/0x647 [ 336.996133][ T7760] ? panic+0x764/0x764 [ 337.000211][ T7760] ? __might_sleep+0xb0/0xb0 [ 337.004807][ T7760] ? __lock_acquire+0x125b/0x1f80 [ 337.009835][ T7760] should_fail_ex+0x3a6/0x4d0 [ 337.014514][ T7760] should_failslab+0x5/0x20 [ 337.019029][ T7760] slab_pre_alloc_hook+0x59/0x300 [ 337.024059][ T7760] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 337.029778][ T7760] __kmem_cache_alloc_node+0x47/0x260 [ 337.035171][ T7760] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 337.040887][ T7760] __kmalloc+0xa1/0x230 [ 337.045038][ T7760] ? rcu_is_watching+0x11/0xb0 [ 337.049804][ T7760] tomoyo_realpath_from_path+0xcb/0x5d0 [ 337.055371][ T7760] tomoyo_path_number_perm+0x21f/0x7f0 [ 337.060867][ T7760] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 337.066527][ T7760] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 337.072003][ T7760] ? __fget_files+0x28/0x4a0 [ 337.076607][ T7760] ? __fget_files+0x28/0x4a0 [ 337.081198][ T7760] ? __fget_files+0x435/0x4a0 [ 337.085881][ T7760] ? __fget_files+0x28/0x4a0 [ 337.090482][ T7760] security_file_ioctl+0x6d/0xa0 [ 337.095426][ T7760] __se_sys_ioctl+0x47/0x160 [ 337.100031][ T7760] do_syscall_64+0x3b/0x80 [ 337.104457][ T7760] ? clear_bhb_loop+0x45/0xa0 [ 337.109134][ T7760] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.115031][ T7760] RIP: 0033:0x7f05edd8e169 [ 337.119442][ T7760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.139045][ T7760] RSP: 002b:00007f05eec32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 337.147460][ T7760] RAX: ffffffffffffffda RBX: 00007f05edfb5fa0 RCX: 00007f05edd8e169 [ 337.155446][ T7760] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 337.163421][ T7760] RBP: 00007f05eec32090 R08: 0000000000000000 R09: 0000000000000000 [ 337.171403][ T7760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.179366][ T7760] R13: 0000000000000000 R14: 00007f05edfb5fa0 R15: 00007ffc50a09238 [ 337.187360][ T7760] [ 337.191389][ T7760] ERROR: Out of memory at tomoyo_realpath_from_path. [ 337.310232][ T4249] Bluetooth: hci3: command 0x041b tx timeout [ 337.461616][ T4380] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 337.632890][ T11] bond0 (unregistering): Released all slaves [ 337.772063][ T7743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.718'. [ 337.821264][ T7752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.720'. [ 338.094473][ T4292] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 338.156084][ T7674] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.166765][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.190076][ T7674] device bridge_slave_0 entered promiscuous mode [ 338.213137][ T7674] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.235864][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.269992][ T7674] device bridge_slave_1 entered promiscuous mode [ 338.339192][ T7674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.390173][ T7674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.540254][ T7674] team0: Port device team_slave_0 added [ 338.599443][ T7674] team0: Port device team_slave_1 added [ 338.695448][ T7674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.740117][ T7674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.839034][ T7674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.885772][ T7674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.892765][ T7674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.035952][ T7674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.384764][ T4249] Bluetooth: hci3: command 0x040f tx timeout [ 339.671688][ T7674] device hsr_slave_0 entered promiscuous mode [ 339.743732][ T7674] device hsr_slave_1 entered promiscuous mode [ 339.789888][ T7674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.808039][ T7674] Cannot create hsr debugfs directory [ 340.882301][ T7813] loop1: detected capacity change from 0 to 32768 [ 340.950203][ T4401] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 341.239179][ T7674] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 341.299722][ T7674] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 341.340032][ T7674] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 341.396432][ T7674] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 341.466343][ T4249] Bluetooth: hci3: command 0x0419 tx timeout [ 341.726451][ T7674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.777868][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 341.805853][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 341.810359][ T7819] loop3: detected capacity change from 0 to 40427 [ 341.833602][ T7819] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 341.853033][ T7674] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.876574][ T7819] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 341.909905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 341.930353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.943739][ T7819] F2FS-fs (loop3): invalid crc value [ 341.972739][ T7819] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 341.989638][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.996932][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.045045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 342.082007][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 342.115640][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.178133][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.185334][ T4292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.335067][ T7819] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 342.411725][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 342.439570][ T7819] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 342.916119][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 342.954440][ T7819] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 343.005631][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 343.036038][ T7852] loop0: detected capacity change from 0 to 64 [ 343.057369][ T7819] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 343.076319][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 343.141046][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 343.189721][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 343.205046][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 343.213726][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.241074][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 343.284078][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 343.297557][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 343.324024][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 343.346306][ T7856] loop0: detected capacity change from 0 to 256 [ 343.367444][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 343.944922][ T4348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.873097][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.894728][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.933520][ T7674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.561058][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.621870][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 346.093263][ C1] sched: RT throttling activated [ 347.136674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 347.736979][ T7890] loop1: detected capacity change from 0 to 262144 [ 347.876696][ T7890] F2FS-fs (loop1): invalid crc value [ 347.896710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 347.932089][ T7890] F2FS-fs (loop1): Found nat_bits in checkpoint [ 347.936909][ T7674] device veth0_vlan entered promiscuous mode [ 348.006583][ T7674] device veth1_vlan entered promiscuous mode [ 348.040692][ T7890] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 348.062864][ T7890] FAULT_INJECTION: forcing a failure. [ 348.062864][ T7890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.076809][ T7890] CPU: 0 PID: 7890 Comm: syz.1.749 Not tainted 6.1.134-syzkaller #0 [ 348.084830][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 348.094910][ T7890] Call Trace: [ 348.098214][ T7890] [ 348.101171][ T7890] dump_stack_lvl+0x1e3/0x2cb [ 348.105891][ T7890] ? nf_tcp_handle_invalid+0x647/0x647 [ 348.111383][ T7890] ? panic+0x764/0x764 [ 348.115491][ T7890] ? __lock_acquire+0x1f80/0x1f80 [ 348.120563][ T7890] should_fail_ex+0x3a6/0x4d0 [ 348.125274][ T7890] _copy_from_user+0x2b/0x170 [ 348.129991][ T7890] iovec_from_user+0x13d/0x380 [ 348.134795][ T7890] ? proc_fail_nth_read+0x210/0x210 [ 348.140022][ T7890] __import_iovec+0x72/0x4c0 [ 348.144644][ T7890] ? __fget_files+0x28/0x4a0 [ 348.149273][ T7890] import_iovec+0x77/0xa0 [ 348.153637][ T7890] do_pwritev+0x1d6/0x360 [ 348.158010][ T7890] ? do_preadv+0x350/0x350 [ 348.162546][ T7890] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 348.168569][ T7890] ? print_irqtrace_events+0x210/0x210 [ 348.174066][ T7890] ? syscall_enter_from_user_mode+0x2e/0x230 [ 348.180173][ T7890] ? lockdep_hardirqs_on+0x94/0x130 [ 348.185400][ T7890] ? __x64_sys_pwritev2+0xb9/0x100 [ 348.190536][ T7890] do_syscall_64+0x3b/0x80 [ 348.190603][ T27] audit: type=1326 audit(1745317590.659:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.4.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196a18e169 code=0x7fc00000 [ 348.194960][ T7890] ? clear_bhb_loop+0x45/0xa0 [ 348.194996][ T7890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.195025][ T7890] RIP: 0033:0x7f057ed8e169 [ 348.195044][ T7890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.195062][ T7890] RSP: 002b:00007f057fbc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 348.195085][ T7890] RAX: ffffffffffffffda RBX: 00007f057efb5fa0 RCX: 00007f057ed8e169 [ 348.195101][ T7890] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 348.195123][ T7890] RBP: 00007f057fbc9090 R08: 0000000000000006 R09: 0000000000000000 [ 348.284218][ T7890] R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000001 [ 348.292220][ T7890] R13: 0000000000000000 R14: 00007f057efb5fa0 R15: 00007ffda80b4c98 [ 348.300235][ T7890] [ 348.303283][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.339407][ T4338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 348.374012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 348.393113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 348.503768][ T7187] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 348.503813][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 348.537185][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 348.568938][ T7674] device veth0_macvtap entered promiscuous mode [ 348.595842][ T7674] device veth1_macvtap entered promiscuous mode [ 348.646484][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.661271][ T7908] loop0: detected capacity change from 0 to 4096 [ 348.697577][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.721863][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.736714][ T7187] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 348.748045][ T7911] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 348.759207][ T7187] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 348.797444][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.808118][ T7187] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.823293][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.838343][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.849683][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.860454][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.871262][ T7187] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 348.883409][ T7187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.891637][ T7187] usb 4-1: Product: 裏畛퉰ꄍꇢᓨ쐯⢩婖㊲䩿鶋晗⸎䳫Ｘᅾӻ攓偋ﯸﻤ麰⇭ꮲ忽눿慾笡헁馽몝詛↰り뭲Ⳬ曧궢쬢ϸ䛝襅㉋兝艬亃㷘̮蓖딥먪풗⑜煐銞귇ﱁ刀漚㖟䩟뮪꾎 [ 348.913832][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.937855][ T7674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.954928][ T27] audit: type=1326 audit(1745317591.429:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.4.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f196a18e169 code=0x7fc00000 [ 348.985060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 349.006765][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 349.024098][ T7187] usb 4-1: Manufacturer: 윖鱟瑅ౡ⛗㑗꫹峤ｙ䷤褄躄ẵ㌋뭪꧚Ὥﬦ欂㒘㾇ῃ倬粗賰촂﩯٨蝷㧝弃Ⳡꫢ圽 [ 349.039229][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 349.060250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 349.068637][ T7187] usb 4-1: SerialNumber: П [ 349.102780][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.131408][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.150248][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.161846][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.192945][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.223042][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.254754][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.283651][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.326819][ T7674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.337572][ T7916] loop0: detected capacity change from 0 to 128 [ 349.344786][ T7916] EXT4-fs: Ignoring removed bh option [ 349.350200][ T7916] ext3: Unknown parameter 'euid>00000000000000000000' [ 349.381857][ T7897] loop3: detected capacity change from 0 to 2048 [ 349.408029][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 349.427155][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 349.466430][ T7674] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.481309][ T7674] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.524999][ T7674] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.576347][ T7674] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.605915][ T7897] loop3: p1 < > p3 p4 < > [ 349.612485][ T7897] loop3: p3 start 4284289 is beyond EOD, truncated [ 349.614165][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 349.639980][ T3622] loop3: p1 < > p3 p4 < > [ 349.663652][ T3622] loop3: p3 start 4284289 is beyond EOD, truncated [ 349.960968][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.983722][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.098203][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 350.120444][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.157262][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.203738][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 350.789620][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.038209][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.205178][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.242614][ T3622] loop3: p1 < > p3 p4 < > [ 351.262908][ T3622] loop3: p3 start 4284289 is beyond EOD, truncated [ 351.363873][ T7187] usb 4-1: 0:2 : does not exist [ 351.417083][ T5194] udevd[5194]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 351.417679][ T5193] udevd[5193]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 351.447499][ T7187] usb 4-1: USB disconnect, device number 20 [ 351.531996][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.698091][ T4401] udevd[4401]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.013345][ T4299] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 353.365784][ T4299] usb 2-1: unable to get BOS descriptor or descriptor too short [ 353.391476][ T4299] usb 2-1: not running at top speed; connect to a high speed hub [ 354.095908][ T4299] usb 2-1: config 4 has an invalid interface number: 116 but max is 0 [ 354.108174][ T4348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 354.108332][ T4299] usb 2-1: config 4 has no interface number 0 [ 354.132310][ T4299] usb 2-1: config 4 interface 116 altsetting 7 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 354.147153][ T4299] usb 2-1: config 4 interface 116 has no altsetting 0 [ 354.164490][ T7975] loop0: detected capacity change from 0 to 1024 [ 354.177530][ T4299] usb 2-1: New USB device found, idVendor=0499, idProduct=101e, bcdDevice=ec.47 [ 354.192669][ T4299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.209712][ T4299] usb 2-1: Product: syz [ 354.389900][ T4251] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 354.390258][ T4299] usb 2-1: Manufacturer: syz [ 354.413738][ T4251] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 354.421760][ T4251] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 354.429242][ T4299] usb 2-1: SerialNumber: syz [ 354.434653][ T4251] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 354.443143][ T4251] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 354.451216][ T4251] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 354.529892][ T7983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.761'. [ 355.196196][ T7984] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 355.626491][ T4348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 356.673433][ T7989] FAULT_INJECTION: forcing a failure. [ 356.673433][ T7989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.686779][ T7989] CPU: 1 PID: 7989 Comm: syz.3.764 Not tainted 6.1.134-syzkaller #0 [ 356.694785][ T7989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 356.704857][ T7989] Call Trace: [ 356.708173][ T7989] [ 356.711104][ T7989] dump_stack_lvl+0x1e3/0x2cb [ 356.715793][ T7989] ? nf_tcp_handle_invalid+0x647/0x647 [ 356.721260][ T7989] ? panic+0x764/0x764 [ 356.725349][ T7989] ? __lock_acquire+0x1f80/0x1f80 [ 356.730401][ T7989] should_fail_ex+0x3a6/0x4d0 [ 356.735084][ T7989] _copy_from_user+0x2b/0x170 [ 356.739774][ T7989] copy_msghdr_from_user+0xaa/0x670 [ 356.745007][ T7989] ? sendmsg_copy_msghdr+0x70/0x70 [ 356.750166][ T7989] __sys_sendmsg+0x236/0x390 [ 356.754764][ T7989] ? ____sys_sendmsg+0x9a0/0x9a0 [ 356.759710][ T7989] ? vfs_write+0x6cf/0xbc0 [ 356.764171][ T7989] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 356.770170][ T7989] ? syscall_enter_from_user_mode+0x2e/0x230 [ 356.776161][ T7989] ? lockdep_hardirqs_on+0x94/0x130 [ 356.781374][ T7989] ? syscall_enter_from_user_mode+0x2e/0x230 [ 356.787373][ T7989] do_syscall_64+0x3b/0x80 [ 356.791797][ T7989] ? clear_bhb_loop+0x45/0xa0 [ 356.796487][ T7989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.802391][ T7989] RIP: 0033:0x7f77fef8e169 [ 356.806813][ T7989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.826421][ T7989] RSP: 002b:00007f77ffec3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.834838][ T7989] RAX: ffffffffffffffda RBX: 00007f77ff1b5fa0 RCX: 00007f77fef8e169 [ 356.842810][ T7989] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 356.850783][ T7989] RBP: 00007f77ffec3090 R08: 0000000000000000 R09: 0000000000000000 [ 356.858757][ T7989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.866731][ T7989] R13: 0000000000000000 R14: 00007f77ff1b5fa0 R15: 00007ffdafb01618 [ 356.874715][ T7989] [ 356.880940][ T4251] Bluetooth: hci3: command 0x0409 tx timeout [ 356.991439][ T4299] usb 2-1: USB disconnect, device number 28 [ 357.182436][ T7993] loop3: detected capacity change from 0 to 1024 [ 357.347245][ T4374] udevd[4374]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.116/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.377308][ T7993] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 357.409630][ T7993] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 357.734949][ T8002] loop3: detected capacity change from 0 to 512 [ 357.760754][ T11] device hsr_slave_0 left promiscuous mode [ 357.780034][ T8002] EXT4-fs: Ignoring removed orlov option [ 357.824021][ T11] device hsr_slave_1 left promiscuous mode [ 357.830577][ T8002] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 357.846788][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.851125][ T8002] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 357.864695][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.894386][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.922275][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.993885][ T11] device bridge_slave_1 left promiscuous mode [ 358.000185][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.028582][ T11] device bridge_slave_0 left promiscuous mode [ 358.046216][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.185369][ T8012] loop3: detected capacity change from 0 to 16 [ 358.210366][ T11] device veth1_macvtap left promiscuous mode [ 358.230617][ T11] device veth0_macvtap left promiscuous mode [ 358.253556][ T11] device veth1_vlan left promiscuous mode [ 358.273875][ T11] device veth0_vlan left promiscuous mode [ 358.413741][ T7996] loop1: detected capacity change from 0 to 32768 [ 358.524866][ T7996] XFS (loop1): Mounting V5 Filesystem [ 358.973358][ T4251] Bluetooth: hci3: command 0x041b tx timeout [ 359.201767][ T7996] XFS (loop1): Ending clean mount [ 359.428051][ T7996] XFS (loop1): Quotacheck needed: Please wait. [ 359.667019][ T7996] XFS (loop1): Quotacheck: Done. [ 359.865025][ T4292] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 361.044941][ T27] audit: type=1804 audit(1745317603.509:774): pid=7996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.766" name="/newroot/161/file2/bus" dev="loop1" ino=9292 res=1 errno=0 [ 361.123638][ T4251] Bluetooth: hci3: command 0x040f tx timeout [ 361.197691][ T8033] loop3: detected capacity change from 0 to 32768 [ 362.206562][ T4252] XFS (loop1): Unmounting Filesystem [ 362.399985][ T11] team0 (unregistering): Port device team_slave_1 removed [ 362.518551][ T11] team0 (unregistering): Port device team_slave_0 removed [ 362.982552][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.133349][ T4249] Bluetooth: hci3: command 0x0419 tx timeout [ 363.219889][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.530552][ T8070] loop1: detected capacity change from 0 to 64 [ 364.550696][ T8070] hfs: unable to parse mount options [ 364.627575][ T8072] dccp_xmit_packet: Payload too large (65456) for featneg. [ 364.974990][ T5216] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 365.094855][ T11] bond0 (unregistering): Released all slaves [ 365.518210][ T7977] chnl_net:caif_netlink_parms(): no params data found [ 365.629889][ T4314] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 365.676218][ T8081] loop0: detected capacity change from 0 to 64 [ 365.830990][ T7977] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.843475][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.862212][ T8089] fuse: Bad value for 'user_id' [ 365.928240][ T7977] device bridge_slave_0 entered promiscuous mode [ 365.968376][ T7977] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.000496][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.682352][ T7977] device bridge_slave_1 entered promiscuous mode [ 366.843658][ T7977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.875211][ T7977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.993817][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.783'. [ 367.069044][ T8097] netlink: 36 bytes leftover after parsing attributes in process `syz.4.783'. [ 367.907554][ T7977] team0: Port device team_slave_0 added [ 368.010736][ T7977] team0: Port device team_slave_1 added [ 368.206242][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.233331][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.320606][ T7977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.379440][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.405700][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.482740][ T7977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.680049][ T7977] device hsr_slave_0 entered promiscuous mode [ 368.717170][ T7977] device hsr_slave_1 entered promiscuous mode [ 368.729138][ T7977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.740776][ T7977] Cannot create hsr debugfs directory [ 369.148827][ T4517] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 369.351190][ T4517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.389018][ T4517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.419545][ T4517] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 369.458049][ T4517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.490045][ T4517] usb 4-1: config 0 descriptor?? [ 369.973321][ T7977] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 370.166256][ T7977] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 370.343534][ T8146] xt_CT: No such helper "pptp" [ 370.361614][ T7977] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 370.402014][ T7977] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 370.416529][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 370.565208][ T4517] cypress 0003:04B4:DE61.0008: unknown main item tag 0x7 [ 370.576354][ T4517] cypress 0003:04B4:DE61.0008: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.3-1/input0 [ 370.774147][ T4517] usb 4-1: USB disconnect, device number 21 [ 370.811902][ T7977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.851810][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 370.867165][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 370.898164][ T7977] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.932460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 370.945392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 370.969374][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.976596][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.014507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 371.034105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 371.063533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 371.081439][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.088658][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.127729][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 371.143611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 371.177663][ T7977] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 371.196908][ T7977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.360131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 371.370704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 371.392948][ T4380] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 371.415066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 371.481492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 371.502878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 371.519845][ T8167] fuse: Unknown parameter 'fl' [ 371.528479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 371.568339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 371.602265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 371.951696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 371.961191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 373.399708][ T8157] loop1: detected capacity change from 0 to 32768 [ 373.443378][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 373.452473][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 373.472253][ T8157] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 scanned by syz.1.792 (8157) [ 373.492112][ T7977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.531418][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 373.542573][ T27] audit: type=1326 audit(1745317616.019:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8194 comm="syz.4.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196a18e169 code=0x7fc00000 [ 373.594295][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 373.661168][ T8157] BTRFS info (device loop1): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 373.749128][ T27] audit: type=1326 audit(1745317616.049:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8194 comm="syz.4.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f196a18e169 code=0x7fc00000 [ 374.147261][ T8157] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 374.181607][ T27] audit: type=1326 audit(1745317616.049:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8194 comm="syz.4.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196a18e169 code=0x7fc00000 [ 374.274358][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 374.347819][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 374.360994][ T8157] BTRFS info (device loop1): using free space tree [ 374.440101][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 374.448181][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 374.459458][ T7977] device veth0_vlan entered promiscuous mode [ 374.530751][ T7977] device veth1_vlan entered promiscuous mode [ 374.724299][ T8157] BTRFS error (device loop1): open_ctree failed: -12 [ 374.802748][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 374.831994][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 374.860665][ T7977] device veth0_macvtap entered promiscuous mode [ 374.912918][ T7977] device veth1_macvtap entered promiscuous mode [ 375.000509][ T8236] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 375.620228][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.630725][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.640744][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.651212][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.661120][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.671691][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.681603][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.692081][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.703986][ T7977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.744133][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 375.785100][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 375.873663][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 375.893471][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 375.962900][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 376.005709][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.079462][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.139081][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.168075][ T8250] sd 0:0:1:0: device reset [ 376.278017][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.857262][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.983363][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.028776][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.116440][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.128708][ T7977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.138751][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 377.162592][ T4380] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 377.227288][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 377.297879][ T7977] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.519277][ T7977] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.549621][ T7977] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.565327][ T7977] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.117051][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.143377][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.158738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 378.177455][ T4292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.237239][ T4292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.246919][ T8271] loop1: detected capacity change from 0 to 128 [ 378.285876][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 378.422177][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.434707][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.624447][ T8280] loop3: detected capacity change from 0 to 256 [ 378.666113][ T8280] exfat: Bad value for 'dmask' [ 378.724810][ T4401] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 378.761644][ T8280] loop3: detected capacity change from 0 to 512 [ 378.789779][ T8280] journal_path: Lookup failure for './file1/../file0' [ 378.831856][ T8280] EXT4-fs: error: could not find journal device path [ 379.229635][ T5216] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.298273][ T8302] loop3: detected capacity change from 0 to 1024 [ 379.435815][ T5216] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.511014][ T5216] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.811428][ T5216] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.614205][ T4349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 381.641809][ T4249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 381.655028][ T4249] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 381.664146][ T4249] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 381.672005][ T4249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 381.679957][ T4249] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 381.689528][ T4249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 381.917837][ T8346] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 382.322810][ T8365] blktrace: Concurrent blktraces are not allowed on loop8 [ 382.479850][ T5216] device hsr_slave_0 left promiscuous mode [ 382.544381][ T5216] device hsr_slave_1 left promiscuous mode [ 382.559513][ T5216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.607497][ T5216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.633081][ T5216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.641216][ T5216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.686077][ T5216] device bridge_slave_1 left promiscuous mode [ 382.706475][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.727603][ T5216] device bridge_slave_0 left promiscuous mode [ 382.740710][ T5216] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.761116][ T8372] loop0: detected capacity change from 0 to 8192 [ 382.854095][ T5216] device veth1_macvtap left promiscuous mode [ 382.861363][ T5216] device veth0_macvtap left promiscuous mode [ 382.893516][ T5216] device veth1_vlan left promiscuous mode [ 382.894372][ T4349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 382.899435][ T5216] device veth0_vlan left promiscuous mode [ 383.166836][ T8386] loop0: detected capacity change from 0 to 512 [ 383.224909][ T8386] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 383.272665][ T8386] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.736265][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 383.783123][ T4249] Bluetooth: hci3: command 0x0409 tx timeout [ 384.174161][ T8410] loop0: detected capacity change from 0 to 256 [ 384.259388][ T4401] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 384.410554][ T5216] team0 (unregistering): Port device team_slave_1 removed [ 384.469648][ T5216] team0 (unregistering): Port device team_slave_0 removed [ 384.542395][ T5216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.637841][ T5216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.764550][ T8418] loop3: detected capacity change from 0 to 256 [ 385.322521][ T5216] bond0 (unregistering): Released all slaves [ 385.440350][ T8383] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 385.448376][ T8383] IPv6: NLM_F_CREATE should be set when creating new route [ 385.455858][ T8383] IPv6: NLM_F_CREATE should be set when creating new route [ 385.497575][ T8402] netlink: 84 bytes leftover after parsing attributes in process `syz.4.852'. [ 385.691493][ T8337] chnl_net:caif_netlink_parms(): no params data found [ 385.853505][ T4249] Bluetooth: hci3: command 0x041b tx timeout [ 385.984624][ T8337] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.035151][ T8337] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.077812][ T8337] device bridge_slave_0 entered promiscuous mode [ 386.120985][ T8337] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.147009][ T8337] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.165762][ T8337] device bridge_slave_1 entered promiscuous mode [ 386.339790][ T8337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.402802][ T8337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.381280][ T4380] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 387.663031][ T8337] team0: Port device team_slave_0 added [ 387.707978][ T8337] team0: Port device team_slave_1 added [ 387.788303][ T8337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.815585][ T8337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.919915][ T8337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.933459][ T4249] Bluetooth: hci3: command 0x040f tx timeout [ 387.980565][ T8479] loop3: detected capacity change from 0 to 256 [ 388.014859][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 388.040554][ T8337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.068163][ T8337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.133272][ T8337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.328146][ T8488] loop1: detected capacity change from 0 to 128 [ 388.338016][ T8337] device hsr_slave_0 entered promiscuous mode [ 388.379185][ T8488] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 388.389351][ T8337] device hsr_slave_1 entered promiscuous mode [ 388.404529][ T8337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.412159][ T8337] Cannot create hsr debugfs directory [ 388.683356][ T4514] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 388.748962][ T8501] loop0: detected capacity change from 0 to 2048 [ 388.797775][ T8501] UDF-fs: bad mount option "'ovrs" or missing value [ 388.873452][ T4514] usb 4-1: Using ep0 maxpacket: 8 [ 388.890512][ T4514] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 388.933431][ T4514] usb 4-1: config 179 has no interface number 0 [ 388.945701][ T8501] loop0: detected capacity change from 0 to 512 [ 388.962218][ T4514] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 388.983836][ T4514] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 389.042735][ T4514] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 389.101587][ T4514] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 389.200736][ T8501] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 389.224163][ T8501] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.263620][ T4514] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 389.313479][ T8511] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 232: padding at end of block bitmap is not set [ 389.330130][ T4514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.442733][ T8491] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 390.014983][ T4249] Bluetooth: hci3: command 0x0419 tx timeout [ 390.133290][ T4517] usb 4-1: USB disconnect, device number 22 [ 390.151137][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 390.721391][ T27] audit: type=1326 audit(1745317633.189:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8536 comm="syz.0.892" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05edd8e169 code=0x0 [ 390.754541][ T8537] loop1: detected capacity change from 0 to 256 [ 390.832881][ T8537] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 390.942875][ T8537] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 391.089564][ T8537] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x9d2de5d9, utbl_chksum : 0xe619d30d) [ 391.287575][ T8542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.692107][ T8337] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 391.716322][ T8337] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 391.749784][ T8337] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 391.788820][ T8337] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 391.939520][ T8551] netlink: 72 bytes leftover after parsing attributes in process `syz.0.896'. [ 392.025597][ T8337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.069676][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 392.081188][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 392.109858][ T8337] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.148648][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 392.192030][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 392.253980][ T5216] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.261145][ T5216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.313822][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 392.523672][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 392.543942][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 392.563457][ T5216] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.570579][ T5216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.658140][ T8566] input: syz1 as /devices/virtual/input/input16 [ 393.218156][ T4350] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 393.229436][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 393.465919][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 393.490707][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 393.534619][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 393.553529][ T8572] loop3: detected capacity change from 0 to 1024 [ 393.584520][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 393.631829][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 393.669813][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 393.726571][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 393.784047][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 393.836163][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 393.873780][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 393.907187][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 393.917377][ T8584] loop0: detected capacity change from 0 to 128 [ 393.938467][ T8337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 393.959795][ T8572] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 394.016001][ T8572] EXT4-fs (loop3): Test dummy encryption mode enabled [ 394.104027][ T8572] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 394.515428][ T8572] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 394.881653][ T8572] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 394.954935][ T8606] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 394.962276][ T8621] loop1: detected capacity change from 0 to 16 [ 395.183159][ T8337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.436611][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 395.501419][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 395.664112][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 395.714880][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 395.743920][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 395.833242][ T8621] erofs: (device loop1): check_layout_compatibility: unidentified incompatible feature 100000, please upgrade kernel version [ 395.878280][ T8337] device veth0_vlan entered promiscuous mode [ 395.961038][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 395.990169][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 396.001940][ T8633] loop0: detected capacity change from 0 to 128 [ 396.033428][ T4401] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 396.049901][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 396.112646][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 396.125295][ T8633] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 396.208949][ T8633] ext4 filesystem being mounted at /204/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 396.256573][ T8337] device veth1_vlan entered promiscuous mode [ 396.392451][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 396.402549][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 396.429599][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 396.464423][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 396.509142][ T8337] device veth0_macvtap entered promiscuous mode [ 396.531954][ T8337] device veth1_macvtap entered promiscuous mode [ 396.548779][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 396.614549][ T8337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.653585][ T8337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.684186][ T8337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.723710][ T8337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.747605][ T8337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.793617][ T8337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.822055][ T8337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.846219][ T8337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.883043][ T8337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.901683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 396.913625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 396.923045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 396.933932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 396.958810][ T8337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.980641][ T8337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.001767][ T8337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.020061][ T8337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.045564][ T8337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.084022][ T8337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.112052][ T8337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.142261][ T8337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.168315][ T8337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.193461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 397.215873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 397.252928][ T8337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.269420][ T8337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.295451][ T8337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.312359][ T8337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.504210][ T5501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.542442][ T5501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.594921][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 397.622301][ T4292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.637134][ T4292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.664676][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 397.987208][ T8689] loop0: detected capacity change from 0 to 764 [ 398.030290][ T8695] loop3: detected capacity change from 0 to 512 [ 398.098386][ T8695] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 398.131930][ T8695] EXT4-fs (loop3): orphan cleanup on readonly fs [ 398.284305][ T8695] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 398.351231][ T8695] EXT4-fs warning (device loop3): ext4_enable_quotas:7037: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 398.360145][ T4292] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.373115][ T8695] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 398.393106][ T8695] EXT4-fs (loop3): 1 truncate cleaned up [ 398.399208][ T8695] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 398.535822][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 398.550874][ T4292] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.900292][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 398.914335][ T5216] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 398.969028][ T4292] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.077823][ T4292] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.467501][ T4251] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 400.479102][ T4251] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 400.487378][ T4251] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 400.497622][ T4251] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 400.509575][ T4251] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 400.517021][ T4251] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 401.455660][ T4292] device hsr_slave_0 left promiscuous mode [ 401.474900][ T4292] device hsr_slave_1 left promiscuous mode [ 401.494454][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.501906][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.550841][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.581847][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.610765][ T4292] device bridge_slave_1 left promiscuous mode [ 401.633547][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.659822][ T4292] device bridge_slave_0 left promiscuous mode [ 401.678501][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.767178][ T4292] device veth1_macvtap left promiscuous mode [ 401.783753][ T4292] device veth0_macvtap left promiscuous mode [ 401.795850][ T4292] device veth1_vlan left promiscuous mode [ 401.806278][ T4292] device veth0_vlan left promiscuous mode [ 402.577657][ T4251] Bluetooth: hci3: command 0x0409 tx timeout [ 402.729594][ C1] [ 402.731983][ C1] ====================================================== [ 402.739006][ C1] WARNING: possible circular locking dependency detected [ 402.746025][ C1] 6.1.134-syzkaller #0 Not tainted [ 402.751125][ C1] ------------------------------------------------------ [ 402.758139][ C1] kworker/u4:5/4292 is trying to acquire lock: [ 402.764293][ C1] ffff8880b8f28118 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x1b2/0x8c0 [ 402.772933][ C1] [ 402.772933][ C1] but task is already holding lock: [ 402.780287][ C1] ffff8880b8f28358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 402.789167][ C1] [ 402.789167][ C1] which lock already depends on the new lock. [ 402.789167][ C1] [ 402.799562][ C1] [ 402.799562][ C1] the existing dependency chain (in reverse order) is: [ 402.808568][ C1] [ 402.808568][ C1] -> #1 (&base->lock){-.-.}-{2:2}: [ 402.815865][ C1] lock_acquire+0x1f8/0x5a0 [ 402.820890][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 402.826696][ C1] lock_timer_base+0x120/0x260 [ 402.832003][ C1] __mod_timer+0x1cb/0xee0 [ 402.836936][ C1] queue_delayed_work_on+0x156/0x250 [ 402.842746][ C1] kvfree_call_rcu+0x520/0x8c0 [ 402.848036][ C1] rtnl_register_internal+0x489/0x580 [ 402.853962][ C1] rtnl_register+0x32/0x70 [ 402.858912][ C1] ip_rt_init+0x335/0x3c7 [ 402.863767][ C1] ip_init+0xa/0x14 [ 402.868102][ C1] inet_init+0x2ae/0x3c0 [ 402.872876][ C1] do_one_initcall+0x265/0x8f0 [ 402.878170][ C1] do_initcall_level+0x157/0x207 [ 402.883635][ C1] do_initcalls+0x49/0x86 [ 402.888486][ C1] kernel_init_freeable+0x45c/0x60f [ 402.894229][ C1] kernel_init+0x19/0x290 [ 402.899086][ C1] ret_from_fork+0x1f/0x30 [ 402.904033][ C1] [ 402.904033][ C1] -> #0 (krc.lock){..-.}-{2:2}: [ 402.911063][ C1] validate_chain+0x1661/0x5950 [ 402.916440][ C1] __lock_acquire+0x125b/0x1f80 [ 402.921829][ C1] lock_acquire+0x1f8/0x5a0 [ 402.926882][ C1] _raw_spin_lock+0x2a/0x40 [ 402.931926][ C1] kvfree_call_rcu+0x1b2/0x8c0 [ 402.937227][ C1] trie_delete_elem+0x53a/0x690 [ 402.942607][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 402.948588][ C1] bpf_trace_run3+0x231/0x440 [ 402.953784][ C1] enqueue_timer+0x440/0x600 [ 402.958894][ C1] __mod_timer+0x92b/0xee0 [ 402.963825][ C1] dsp_cmx_send+0x21d7/0x2270 [ 402.969022][ C1] call_timer_fn+0x1ad/0x6b0 [ 402.974147][ C1] __run_timers+0x67c/0x890 [ 402.979172][ C1] run_timer_softirq+0x63/0xf0 [ 402.984461][ C1] handle_softirqs+0x2ee/0xa40 [ 402.989748][ C1] __irq_exit_rcu+0x157/0x240 [ 402.994967][ C1] irq_exit_rcu+0x5/0x20 [ 402.999733][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 403.005926][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 403.012431][ C1] lockdep_unregister_key+0x562/0x600 [ 403.018322][ C1] __qdisc_destroy+0x127/0x450 [ 403.023605][ C1] dev_shutdown+0x359/0x440 [ 403.028628][ C1] unregister_netdevice_many+0xac3/0x1710 [ 403.034867][ C1] default_device_exit_batch+0x98d/0xa20 [ 403.041028][ C1] cleanup_net+0x886/0xd20 [ 403.045969][ C1] process_one_work+0x917/0x1260 [ 403.051423][ C1] worker_thread+0xa47/0x1200 [ 403.056614][ C1] kthread+0x28d/0x320 [ 403.061205][ C1] ret_from_fork+0x1f/0x30 [ 403.066145][ C1] [ 403.066145][ C1] other info that might help us debug this: [ 403.066145][ C1] [ 403.076369][ C1] Possible unsafe locking scenario: [ 403.076369][ C1] [ 403.083808][ C1] CPU0 CPU1 [ 403.089170][ C1] ---- ---- [ 403.094546][ C1] lock(&base->lock); [ 403.098612][ C1] lock(krc.lock); [ 403.104935][ C1] lock(&base->lock); [ 403.111544][ C1] lock(krc.lock); [ 403.115368][ C1] [ 403.115368][ C1] *** DEADLOCK *** [ 403.115368][ C1] [ 403.123509][ C1] 8 locks held by kworker/u4:5/4292: [ 403.128785][ C1] #0: ffff888017e16938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 403.139058][ C1] #1: ffffc90003fb7d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 403.148979][ C1] #2: ffffffff8e544210 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x166/0xd20 [ 403.158384][ C1] #3: ffffffff8e550d68 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe5/0xa20 [ 403.168396][ C1] #4: ffffc900001e0bc0 ((&dsp_spl_tl)){+.-.}-{0:0}, at: call_timer_fn+0xc2/0x6b0 [ 403.177621][ C1] #5: ffffffff8e2e21d8 (dsp_lock){..-.}-{2:2}, at: dsp_cmx_send+0x22/0x2270 [ 403.186417][ C1] #6: ffff8880b8f28358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 403.195724][ C1] #7: ffffffff8d32e740 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0x146/0x440 [ 403.205129][ C1] [ 403.205129][ C1] stack backtrace: [ 403.211007][ C1] CPU: 1 PID: 4292 Comm: kworker/u4:5 Not tainted 6.1.134-syzkaller #0 [ 403.219239][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 403.229287][ C1] Workqueue: netns cleanup_net [ 403.234046][ C1] Call Trace: [ 403.237319][ C1] [ 403.240158][ C1] dump_stack_lvl+0x1e3/0x2cb [ 403.244838][ C1] ? nf_tcp_handle_invalid+0x647/0x647 [ 403.250299][ C1] ? print_circular_bug+0x12b/0x1a0 [ 403.255500][ C1] check_noncircular+0x2fa/0x3b0 [ 403.260462][ C1] ? add_chain_block+0x850/0x850 [ 403.265403][ C1] ? lockdep_lock+0x11f/0x2a0 [ 403.270083][ C1] ? _find_first_zero_bit+0xd0/0x100 [ 403.275367][ C1] validate_chain+0x1661/0x5950 [ 403.280221][ C1] ? reacquire_held_locks+0x660/0x660 [ 403.285595][ C1] ? mark_lock+0x9a/0x340 [ 403.289922][ C1] ? __lock_acquire+0x125b/0x1f80 [ 403.294941][ C1] ? mark_lock+0x9a/0x340 [ 403.299269][ C1] ? mark_lock+0x9a/0x340 [ 403.303602][ C1] __lock_acquire+0x125b/0x1f80 [ 403.308460][ C1] lock_acquire+0x1f8/0x5a0 [ 403.313051][ C1] ? kvfree_call_rcu+0x1b2/0x8c0 [ 403.318015][ C1] ? read_lock_is_recursive+0x10/0x10 [ 403.323390][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 403.328590][ C1] ? __virt_addr_valid+0x17f/0x530 [ 403.333703][ C1] ? __virt_addr_valid+0x17f/0x530 [ 403.338814][ C1] ? __virt_addr_valid+0x45b/0x530 [ 403.343924][ C1] ? __phys_addr+0xb6/0x170 [ 403.348426][ C1] _raw_spin_lock+0x2a/0x40 [ 403.352928][ C1] ? kvfree_call_rcu+0x1b2/0x8c0 [ 403.357869][ C1] kvfree_call_rcu+0x1b2/0x8c0 [ 403.362640][ C1] ? rcu_leak_callback+0x10/0x10 [ 403.367582][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 403.373476][ C1] ? _raw_spin_unlock+0x40/0x40 [ 403.378331][ C1] ? longest_prefix_match+0x49b/0x640 [ 403.383713][ C1] trie_delete_elem+0x53a/0x690 [ 403.388574][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 403.394029][ C1] bpf_trace_run3+0x231/0x440 [ 403.398700][ C1] ? asm_exc_int3+0x35/0x40 [ 403.403207][ C1] ? bpf_trace_run3+0x146/0x440 [ 403.408057][ C1] ? bpf_trace_run2+0x410/0x410 [ 403.412902][ C1] ? enqueue_timer+0x35d/0x600 [ 403.417660][ C1] enqueue_timer+0x440/0x600 [ 403.422249][ C1] __mod_timer+0x92b/0xee0 [ 403.426659][ C1] ? mod_timer_pending+0x20/0x20 [ 403.431589][ C1] ? _raw_read_unlock_irqrestore+0xd9/0x130 [ 403.437479][ C1] ? _raw_read_unlock+0x40/0x40 [ 403.442326][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 403.447783][ C1] ? _raw_spin_lock+0x40/0x40 [ 403.452459][ C1] ? ktime_get+0x242/0x270 [ 403.456874][ C1] dsp_cmx_send+0x21d7/0x2270 [ 403.461551][ C1] ? read_lock_is_recursive+0x10/0x10 [ 403.466969][ C1] ? detach_timer+0x26/0x380 [ 403.471556][ C1] ? __rwlock_init+0x140/0x140 [ 403.476332][ C1] call_timer_fn+0x1ad/0x6b0 [ 403.480929][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 403.486056][ C1] ? call_timer_fn+0xc2/0x6b0 [ 403.490729][ C1] ? __run_timers+0x890/0x890 [ 403.495398][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 403.500605][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 403.505802][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 403.510907][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 403.516108][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 403.521246][ C1] __run_timers+0x67c/0x890 [ 403.525748][ C1] ? detach_timer+0x380/0x380 [ 403.530418][ C1] ? print_irqtrace_events+0x210/0x210 [ 403.535877][ C1] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 403.542119][ C1] run_timer_softirq+0x63/0xf0 [ 403.546893][ C1] handle_softirqs+0x2ee/0xa40 [ 403.551661][ C1] ? __irq_exit_rcu+0x157/0x240 [ 403.556514][ C1] ? do_softirq+0x240/0x240 [ 403.561024][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 403.566233][ C1] __irq_exit_rcu+0x157/0x240 [ 403.570909][ C1] ? irq_exit_rcu+0x20/0x20 [ 403.575417][ C1] irq_exit_rcu+0x5/0x20 [ 403.579749][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 403.585386][ C1] [ 403.588314][ C1] [ 403.591244][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 403.597235][ C1] RIP: 0010:lockdep_unregister_key+0x562/0x600 [ 403.603394][ C1] Code: 26 91 48 c7 c6 40 b7 6a 81 e8 9a af 08 00 e8 d5 c3 08 00 e9 ea fb ff ff e8 ab 1c 46 09 41 f7 c7 00 02 00 00 74 d0 fb 45 84 f6 <75> cf eb e0 0f 0b 45 31 f6 e9 64 ff ff ff 0f 0b e9 a5 fe ff ff 0f [ 403.623000][ C1] RSP: 0018:ffffc90003fb7740 EFLAGS: 00000246 [ 403.629066][ C1] RAX: dffffc0000000000 RBX: 1ffff920007f6ef0 RCX: ffffffff973bf103 [ 403.637037][ C1] RDX: 0000000000000001 RSI: ffffffff8b0c1920 RDI: ffffffff8b5f5fe0 [ 403.645027][ C1] RBP: ffffc90003fb7820 R08: dffffc0000000000 R09: fffffbfff224d4a0 [ 403.653089][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90003fb7780 [ 403.661061][ C1] R13: 1ffff920007f6eec R14: 0000000000000000 R15: 0000000000000a02 [ 403.669042][ C1] ? lockdep_reset_lock+0x3f0/0x3f0 [ 403.674246][ C1] ? asm_sysvec_call_function_single+0x16/0x20 [ 403.680408][ C1] ? rcu_is_watching+0x11/0xb0 [ 403.685199][ C1] ? qdisc_reset+0x3bc/0x5f0 [ 403.689814][ C1] __qdisc_destroy+0x127/0x450 [ 403.694682][ C1] dev_shutdown+0x359/0x440 [ 403.699194][ C1] unregister_netdevice_many+0xac3/0x1710 [ 403.704926][ C1] ? kasan_quarantine_put+0xd4/0x220 [ 403.710218][ C1] ? alloc_netdev_mqs+0xef0/0xef0 [ 403.715246][ C1] ? unregister_netdevice_queue+0x258/0x350 [ 403.721145][ C1] ? list_netdevice+0x650/0x650 [ 403.726001][ C1] ? br_dev_delete+0xd0/0x100 [ 403.730682][ C1] default_device_exit_batch+0x98d/0xa20 [ 403.736321][ C1] ? __might_sleep+0xb0/0xb0 [ 403.740934][ C1] ? net_rps_action_and_irq_enable+0x220/0x220 [ 403.747105][ C1] ? rdma_dev_init_net+0x280/0x280 [ 403.752235][ C1] ? cfg802154_pernet_exit+0xbd/0xe0 [ 403.757522][ C1] ? net_rps_action_and_irq_enable+0x220/0x220 [ 403.763679][ C1] cleanup_net+0x886/0xd20 [ 403.768120][ C1] ? ops_free_list+0x3b0/0x3b0 [ 403.772880][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 403.778781][ C1] ? process_one_work+0x806/0x1260 [ 403.783895][ C1] process_one_work+0x917/0x1260 [ 403.788858][ C1] ? worker_detach_from_pool+0x260/0x260 [ 403.794491][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 403.800036][ C1] ? kthread_data+0x4e/0xc0 [ 403.804555][ C1] ? wq_worker_running+0x97/0x190 [ 403.809583][ C1] worker_thread+0xa47/0x1200 [ 403.814266][ C1] kthread+0x28d/0x320 [ 403.818341][ C1] ? worker_clr_flags+0x190/0x190 [ 403.823363][ C1] ? kthread_blkcg+0xd0/0xd0 [ 403.827961][ C1] ret_from_fork+0x1f/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 403.832390][ C1] [ 404.201171][ T4292] team0 (unregistering): Port device team_slave_1 removed [ 404.267230][ T4292] team0 (unregistering): Port device team_slave_0 removed [ 404.308521][ T4292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.351730][ T4292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.654877][ T4251] Bluetooth: hci3: command 0x041b tx timeout [ 404.661737][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 404.673942][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 404.826325][ T4292] bond0 (unregistering): Released all slaves [ 404.939399][ T4257] bridge0: port 3(syz_tun) entered disabled state [ 404.972438][ T4257] device syz_tun left promiscuous mode [ 404.978240][ T4257] bridge0: port 3(syz_tun) entered disabled state [ 405.803005][ T4292] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.894962][ T4292] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.958919][ T4292] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.008925][ T4292] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.108645][ T4292] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.177691][ T4292] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.249815][ T4292] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.311514][ T4292] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.436843][ T4292] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.477579][ T4292] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.518015][ T4292] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.558080][ T4292] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.672324][ T4292] tipc: Left network mode [ 408.041420][ T4292] device hsr_slave_0 left promiscuous mode [ 408.048272][ T4292] device hsr_slave_1 left promiscuous mode [ 408.056295][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.065355][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.073105][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.082681][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.091384][ T4292] device bridge_slave_1 left promiscuous mode [ 408.098971][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.107701][ T4292] device bridge_slave_0 left promiscuous mode [ 408.116053][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.129481][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.138077][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.146321][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.154197][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.161659][ T4292] device bridge_slave_1 left promiscuous mode [ 408.168149][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.176116][ T4292] device bridge_slave_0 left promiscuous mode [ 408.182261][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.192631][ T4292] device hsr_slave_0 left promiscuous mode [ 408.199603][ T4292] device hsr_slave_1 left promiscuous mode [ 408.206006][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.213728][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.221217][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.228855][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.236598][ T4292] device bridge_slave_1 left promiscuous mode [ 408.242738][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.250703][ T4292] device bridge_slave_0 left promiscuous mode [ 408.256903][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.269352][ T4292] device veth1_macvtap left promiscuous mode [ 408.275497][ T4292] device veth0_macvtap left promiscuous mode [ 408.281545][ T4292] device veth1_vlan left promiscuous mode [ 408.287453][ T4292] device veth0_vlan left promiscuous mode [ 408.294784][ T4292] device veth1_macvtap left promiscuous mode [ 408.300781][ T4292] device veth0_macvtap left promiscuous mode [ 408.307220][ T4292] device veth1_vlan left promiscuous mode [ 408.312986][ T4292] device veth0_vlan left promiscuous mode [ 408.319747][ T4292] device veth1_macvtap left promiscuous mode [ 408.326193][ T4292] device veth0_macvtap left promiscuous mode [ 408.332240][ T4292] device veth1_vlan left promiscuous mode [ 408.338611][ T4292] device veth0_vlan left promiscuous mode [ 408.587475][ T4292] team0 (unregistering): Port device team_slave_1 removed [ 408.616312][ T4292] team0 (unregistering): Port device team_slave_0 removed [ 408.642750][ T4292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.673172][ T4292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.724484][ T4292] bond0 (unregistering): Released all slaves [ 409.060292][ T4292] team0 (unregistering): Port device team_slave_1 removed [ 409.089920][ T4292] team0 (unregistering): Port device team_slave_0 removed [ 409.117530][ T4292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.147521][ T4292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.198210][ T4292] bond0 (unregistering): Released all slaves [ 409.395059][ T4292] team0 (unregistering): Port device team_slave_1 removed [ 409.424702][ T4292] team0 (unregistering): Port device team_slave_0 removed [ 409.450752][ T4292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.480912][ T4292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.569760][ T4292] bond0 (unregistering): Released all slaves [ 409.778338][ T5501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 409.789601][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration