last executing test programs: 32.196724436s ago: executing program 2 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)='3', 0x1}], 0x1, 0x800, 0x0) 30.77374726s ago: executing program 2 (id=133): poll(0x0, 0x0, 0x8) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80140, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000004c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000500), 0xffffffffffffff58, 0x20008005, &(0x7f0000000540)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 30.657833312s ago: executing program 2 (id=137): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001980)="b6744c", 0x3}, 0x1, 0x0, 0x0, 0x1}, 0xc000) 30.511980407s ago: executing program 2 (id=141): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000340)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r3, 0x204) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_clone3(&(0x7f0000000580)={0x23800000, &(0x7f0000000600), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000700)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) fchdir(0xffffffffffffffff) 28.885166793s ago: executing program 2 (id=148): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000002240)={0x4, 0x1000}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000022c0)={0x6, 0x3, &(0x7f0000002380)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000023c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002400)={r1, 0x5, 0xf, 0x0, &(0x7f0000002480)="7993ff011900000000a63b00008f20", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000024c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000980)={@local, @random="facfff00716e", @val={@val={0x88a8, 0x7, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x26, 0x20, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x0, 0x0, @void}}}}}}}, 0x0) 25.407618326s ago: executing program 2 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000f40)='./dev\x00', &(0x7f0000000f80)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000fc0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000001000)={0x3002000, 0x40001000}) 10.353826727s ago: executing program 32 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000f40)='./dev\x00', &(0x7f0000000f80)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000fc0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000001000)={0x3002000, 0x40001000}) 3.348400709s ago: executing program 4 (id=334): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/kmsg\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='./dev/kmsg\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3.227689242s ago: executing program 4 (id=336): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x2, 0x0) 3.078020527s ago: executing program 4 (id=340): setns(0xc9, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000840)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000000880), 0x5b, 0x40, 0x0) 2.541849241s ago: executing program 4 (id=344): syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='mounts\x00') syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x204818, &(0x7f0000000780)={[{@map_off}, {@check_strict}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x4}}, {@check_strict}, {@unhide}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0xfd, 0x544, &(0x7f0000000800)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syz_tun\x00', 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f00000005c0), &(0x7f0000000600)=@udp6=r4, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000680)=ANY=[], 0x0) 2.524327133s ago: executing program 1 (id=345): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffff1f, 0x2, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x47f40}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x48800) 2.238040492s ago: executing program 0 (id=350): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x2, 0x862b01) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0x80084503, 0x0) 2.229742903s ago: executing program 0 (id=351): r0 = syz_open_dev$sg(&(0x7f0000000a80), 0x0, 0x88003) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="00000000ff07"]) 2.129539283s ago: executing program 0 (id=352): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a000000000000698c1722f633"], 0x0, 0x2, 0xc0, &(0x7f0000000080)=""/192, 0x0, 0x0, '\x00', 0x0, @tracing=0x1a, r0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000340)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r4, 0x204) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_clone3(&(0x7f0000000580)={0x23800000, &(0x7f0000000600), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000006c0)=[{&(0x7f0000000700)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) fchdir(0xffffffffffffffff) 1.601765637s ago: executing program 0 (id=357): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.578575599s ago: executing program 4 (id=358): socket$inet_sctp(0x2, 0x1, 0x84) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x200000, 0x4200003, 0x9, 0x2000000, 0x20000003, 0x800}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, 0x0) 1.540002884s ago: executing program 1 (id=359): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 1.457918841s ago: executing program 0 (id=360): prlimit64(0x0, 0xe, &(0x7f0000001180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_create_resource$futex(&(0x7f0000001340)=0x1) futex(r3, 0xd, 0x2, 0x0, 0x0, 0x2) ioctl$int_in(r1, 0x5452, &(0x7f00000013c0)=0xffffffffffffffff) readv(r2, &(0x7f0000001400)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 1.457573592s ago: executing program 5 (id=362): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000003c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4, 0x2, 0x3951}, 0x1c) close_range(r0, r0, 0x0) 1.433450224s ago: executing program 4 (id=363): llistxattr(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x440b0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x121) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='100', 0x3) mknodat$md(0xffffffffffffff9c, &(0x7f0000000880)='./md0\x00', 0x6180, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x1) openat$md_node(0xffffffffffffff9c, &(0x7f00000008c0)='./md0\x00', 0x2, 0x0) 1.429027044s ago: executing program 1 (id=364): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000640)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000006c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000700)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f00000007c0)=0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000800)={r3, 0x7}, 0x8) 1.320143966s ago: executing program 5 (id=365): r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, 0x0, 0x0) r1 = socket(0x1e, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) 1.319893346s ago: executing program 3 (id=366): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x83) inotify_init() userfaultfd(0x801) r1 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010) 1.318401326s ago: executing program 5 (id=367): setns(0xc9, 0x0) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000010c0)='net/route\x00') lseek(r1, 0xfffd, 0x0) 1.293375658s ago: executing program 1 (id=368): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a000000000000698c1722f633728b6104380000"], 0x0, 0x2, 0xc0, &(0x7f0000000080)=""/192, 0x0, 0x0, '\x00', 0x0, @tracing=0x1a, r0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000340)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r4, 0x204) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_clone3(&(0x7f0000000580)={0x23800000, &(0x7f0000000600), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000006c0)=[{&(0x7f0000000700)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) fchdir(0xffffffffffffffff) 919.361536ms ago: executing program 5 (id=369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000640)={0x0, 0x2000, &(0x7f0000000680)={&(0x7f00000006c0)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) 872.631301ms ago: executing program 3 (id=370): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a80)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x2, @in6=@empty, 0x6, 0x4, 0x1, 0x0, 0x0, 0x5}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048810) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000b80)={0xa, 0x4e24, 0xfffffffc}, 0x1c) connect$inet6(r1, &(0x7f0000000bc0)={0xa, 0x4e24, 0x2, @mcast2, 0x6}, 0x1c) 852.844293ms ago: executing program 5 (id=371): unshare(0x24020400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x210082, 0x18) r1 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xce\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) recvfrom$inet(r0, &(0x7f0000000480)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 733.571585ms ago: executing program 3 (id=373): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r2, 0x4) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[], 0x0) 678.223211ms ago: executing program 3 (id=374): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 612.443678ms ago: executing program 3 (id=375): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./tracing\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000580)='p:%est/_vent1 ./file0:0x0 ', 0x1a) 495.35323ms ago: executing program 3 (id=376): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='33', 0x2) unshare(0x68000600) 184.514101ms ago: executing program 1 (id=377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000001f00)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001f40)={'pim6reg\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001f80), 0x80400, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000001fc0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002000)={'nicvf0\x00', 0x1432}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002040)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 90.235311ms ago: executing program 0 (id=378): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x1018e58, &(0x7f00000002c0), 0x4, 0x61f, &(0x7f0000000780)="$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") 0s ago: executing program 1 (id=379): r0 = syz_mount_image$ext4(&(0x7f0000000d00)='ext4\x00', &(0x7f0000002240)='./file0\x00', 0x810, &(0x7f0000002280)={[{@errors_remount}, {@bsdgroups}]}, 0x8, 0x4fe, &(0x7f00000022c0)="$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") quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) kernel console output (not intermixed with test programs): GE): veth0: link becomes ready [ 64.790038][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.798935][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.808527][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.817598][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.824833][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.837415][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.847787][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.869930][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.878539][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.887430][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.896104][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.903218][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.912065][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.921034][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.929478][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.936716][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.944894][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.953500][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.964844][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.975355][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.011622][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.021061][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.030929][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.041746][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.050522][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.059162][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.066205][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.074738][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.083659][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.093837][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.102722][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.138801][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.156080][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.163047][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.172706][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.181966][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.190741][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.199431][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.208286][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.217781][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.226111][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.234300][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.242640][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.279712][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.288445][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.297888][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.306213][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.315508][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.324239][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.331331][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.341057][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.350734][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.359168][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.367716][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.376150][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.383287][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.407790][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.422126][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.432269][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.447316][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.459182][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.473831][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.484903][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.510620][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.523822][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.544127][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.564898][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.581565][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.592606][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.614610][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.624333][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.632541][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.645170][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.663291][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.672419][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.681211][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.691109][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.699643][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.710551][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.719606][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.731537][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.743971][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.753759][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.766226][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.777117][ T4231] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.784224][ T4231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.792688][ T4267] Bluetooth: hci2: command 0x041b tx timeout [ 65.801174][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.808829][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 65.819497][ T4267] Bluetooth: hci1: command 0x041b tx timeout [ 65.828354][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.837011][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.845519][ T4267] Bluetooth: hci3: command 0x041b tx timeout [ 65.857442][ T4231] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.864515][ T4231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.873578][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 65.881923][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.902514][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.911057][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.920605][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.929108][ T4231] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.936161][ T4231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.943971][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.953401][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.962914][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.971760][ T4231] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.978848][ T4231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.986448][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.995365][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.002893][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.033810][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.043951][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.063414][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.074401][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.091630][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.116545][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.131286][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.141190][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.149731][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.164485][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.180425][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.204145][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.224639][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.253081][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.263948][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.272924][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.281645][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.290187][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.301926][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.310749][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.319636][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.332692][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.345837][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.369248][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.381243][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.390024][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.403900][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.413181][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.423921][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.431455][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.464594][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.501226][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.513274][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.525626][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.538938][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.552277][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.565152][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.580027][ T4197] device veth0_vlan entered promiscuous mode [ 66.616869][ T4200] device veth0_vlan entered promiscuous mode [ 66.660243][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.670398][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.679759][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.688565][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.697306][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.705393][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.722502][ T4197] device veth1_vlan entered promiscuous mode [ 66.735775][ T4192] device veth0_vlan entered promiscuous mode [ 66.744704][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.753260][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.761969][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.770321][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.778163][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.793473][ T4200] device veth1_vlan entered promiscuous mode [ 66.812637][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.828501][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.840704][ T4192] device veth1_vlan entered promiscuous mode [ 66.853724][ T4197] device veth0_macvtap entered promiscuous mode [ 66.861859][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.873219][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.881685][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.890392][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.899129][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.906523][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.914262][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.921854][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.929794][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.938793][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.960950][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.988317][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.996346][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.006156][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.017846][ T4197] device veth1_macvtap entered promiscuous mode [ 67.031394][ T4200] device veth0_macvtap entered promiscuous mode [ 67.041537][ T4200] device veth1_macvtap entered promiscuous mode [ 67.055479][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.064149][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.075711][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.084809][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.093650][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.102753][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.111021][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.141264][ T4192] device veth0_macvtap entered promiscuous mode [ 67.152299][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.161927][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.171721][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.185670][ T4187] device veth0_vlan entered promiscuous mode [ 67.194948][ T4192] device veth1_macvtap entered promiscuous mode [ 67.206857][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.216509][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.230689][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.238902][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.254829][ T4187] device veth1_vlan entered promiscuous mode [ 67.265131][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.274226][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.285217][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.298662][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.311522][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.322960][ T4200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.331979][ T4200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.340729][ T4200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.350678][ T4200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.361750][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.370635][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.379950][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.390250][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.399474][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.409100][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.418252][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.430024][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.441397][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.452834][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.464031][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.475253][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.485412][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.496877][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.508134][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.518741][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.529227][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.541793][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.552739][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.563616][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.574253][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.585416][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.594490][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.603477][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.615382][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.624181][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.633207][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.642086][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.651086][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.660175][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.668564][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.676786][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.685818][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.695639][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.704578][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.716194][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.725970][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.734874][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.743810][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.757307][ T4191] device veth0_vlan entered promiscuous mode [ 67.837009][ T4187] device veth0_macvtap entered promiscuous mode [ 67.855068][ T4187] device veth1_macvtap entered promiscuous mode [ 67.868112][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 67.873524][ T4191] device veth1_vlan entered promiscuous mode [ 67.877452][ T4269] Bluetooth: hci1: command 0x040f tx timeout [ 67.886355][ T4269] Bluetooth: hci0: command 0x040f tx timeout [ 67.893395][ T4269] Bluetooth: hci2: command 0x040f tx timeout [ 67.908052][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.915988][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.924952][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.935157][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.942921][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 67.962220][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.010125][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.021027][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.030900][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.041421][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.052105][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.062783][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.073970][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.098005][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.106621][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.115409][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.127257][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.140585][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.150429][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.160874][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.171310][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.182008][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.193303][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.202803][ T4276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.215570][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.224362][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.225232][ T4276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.234076][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.249865][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.274040][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.281903][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.291441][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.309577][ T4276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.316861][ T4191] device veth0_macvtap entered promiscuous mode [ 68.320898][ T4276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.335843][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.345582][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.362259][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.371414][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.401195][ T4191] device veth1_macvtap entered promiscuous mode [ 68.434933][ T1208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.444081][ T4231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.453776][ T4231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.458301][ T1208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.480980][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.489840][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.495286][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.505530][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.518999][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.529586][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.544704][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.544766][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.553225][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.569657][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.581384][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.591955][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.602034][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.612926][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.623559][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.634237][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.646672][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.671096][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.683771][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.698174][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.752791][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.763993][ T4305] capability: warning: `syz.4.5' uses 32-bit capabilities (legacy support in use) [ 68.775978][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.781539][ T4305] program syz.4.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.795879][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.807029][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.825113][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.835960][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.861151][ T4308] loop2: detected capacity change from 0 to 512 [ 68.869181][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.884748][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.892382][ T4310] loop4: detected capacity change from 0 to 512 [ 68.900716][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.916971][ T4231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.926820][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.937808][ T4231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.946528][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.962775][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.985554][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.989343][ T4231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.002171][ T4231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.010796][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.030345][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.048198][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.055004][ T4308] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.3: iget: bad i_size value: 38620345925642 [ 69.078999][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.090742][ T4310] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 69.108272][ T4308] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.3: couldn't read orphan inode 15 (err -117) [ 69.147840][ T4308] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.163511][ T4310] EXT4-fs (loop4): 1 truncate cleaned up [ 69.176399][ T4310] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 69.334626][ T4313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.344783][ T4313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.355587][ T4308] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.3: bg 0: block 5: invalid block bitmap [ 69.399894][ T4308] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 668 with error 28 [ 69.433316][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.444199][ T4322] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.448251][ T4308] EXT4-fs (loop2): This should not happen!! Data will be lost [ 69.448251][ T4308] [ 69.463703][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.490205][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.511789][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.531258][ T4308] EXT4-fs (loop2): Total free blocks count 0 [ 69.531647][ T4325] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 69.538657][ T4308] EXT4-fs (loop2): Free/Dirty block details [ 69.552792][ T4308] EXT4-fs (loop2): free_blocks=0 [ 69.562114][ T4308] EXT4-fs (loop2): dirty_blocks=668 [ 69.568383][ T4308] EXT4-fs (loop2): Block reservation details [ 69.569098][ T4324] loop0: detected capacity change from 0 to 736 [ 69.574479][ T4308] EXT4-fs (loop2): i_reserved_data_blocks=668 [ 69.599186][ T4322] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 69.803684][ T4329] FAULT_INJECTION: forcing a failure. [ 69.803684][ T4329] name failslab, interval 1, probability 0, space 0, times 1 [ 69.817409][ T4324] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.871293][ T4329] CPU: 1 PID: 4329 Comm: syz.1.2 Not tainted syzkaller #0 [ 69.878450][ T4329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 69.888530][ T4329] Call Trace: [ 69.891824][ T4329] [ 69.894766][ T4329] dump_stack_lvl+0x188/0x250 [ 69.899481][ T4329] ? show_regs_print_info+0x20/0x20 [ 69.904701][ T4329] ? load_image+0x410/0x410 [ 69.909232][ T4329] ? __might_sleep+0xf0/0xf0 [ 69.913866][ T4329] ? __lock_acquire+0x7d40/0x7d40 [ 69.918910][ T4329] should_fail+0x383/0x4b0 [ 69.922423][ T4334] autofs4:pid:4334:autofs_fill_super: called with bogus options [ 69.923688][ T4329] should_failslab+0x5/0x20 [ 69.923732][ T4329] slab_pre_alloc_hook+0x51/0xc0 [ 69.923756][ T4329] __kmalloc+0x6b/0x340 [ 69.923775][ T4329] ? tomoyo_encode+0x28a/0x550 [ 69.923806][ T4329] tomoyo_encode+0x28a/0x550 [ 69.923835][ T4329] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 69.923873][ T4329] tomoyo_path_perm+0x23f/0x5d0 [ 69.923896][ T4329] ? tomoyo_path_permission+0x3a0/0x3a0 [ 69.923934][ T4329] ? _raw_spin_unlock+0x24/0x40 [ 69.923951][ T4329] ? __d_add+0x4cc/0x800 [ 69.923969][ T4329] ? do_raw_spin_unlock+0x11d/0x230 [ 69.923988][ T4329] ? d_set_d_op+0x25b/0x370 [ 69.924011][ T4329] ? simple_lookup+0xc1/0xf0 [ 69.924032][ T4329] ? lookup_one_qstr_excl+0x11c/0x240 [ 69.924065][ T4329] tomoyo_path_symlink+0xa8/0xf0 [ 69.924088][ T4329] ? tomoyo_path_rmdir+0xf0/0xf0 [ 69.924114][ T4329] ? kern_path_create+0x190/0x190 [ 69.924137][ T4329] security_path_symlink+0xdc/0x130 [ 69.924162][ T4329] do_symlinkat+0x105/0x6b0 [ 69.978313][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 69.979805][ T4329] ? strncpy_from_user+0x1f4/0x350 [ 69.979835][ T4329] ? vfs_symlink+0x3d0/0x3d0 [ 69.990129][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 69.994093][ T4329] __x64_sys_symlinkat+0x95/0xa0 [ 70.012764][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 70.014307][ T4329] do_syscall_64+0x4c/0xa0 [ 70.014333][ T4329] ? clear_bhb_loop+0x30/0x80 [ 70.036998][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 70.039627][ T4329] ? clear_bhb_loop+0x30/0x80 [ 70.039656][ T4329] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.039695][ T4329] RIP: 0033:0x7ff92f985559 [ 70.066548][ T4258] Bluetooth: hci4: command 0x0419 tx timeout [ 70.071547][ T4329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.071566][ T4329] RSP: 002b:00007ff92dbdc028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 70.071588][ T4329] RAX: ffffffffffffffda RBX: 00007ff92fc0bfa0 RCX: 00007ff92f985559 [ 70.071604][ T4329] RDX: 0000200000000300 RSI: ffffffffffffff9c RDI: 0000200000000280 [ 70.099673][ T4318] loop3: detected capacity change from 0 to 32768 [ 70.112080][ T4329] RBP: 00007ff92fa1cb50 R08: 0000000000000000 R09: 0000000000000000 [ 70.112097][ T4329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.112109][ T4329] R13: 00007ff92fc0c038 R14: 00007ff92fc0bfa0 R15: 00007ffe35b52528 [ 70.112140][ T4329] [ 70.128479][ T4329] ERROR: Out of memory at tomoyo_realpath_from_path. [ 70.235838][ T4343] loop4: detected capacity change from 0 to 128 [ 70.282176][ T4348] loop0: detected capacity change from 0 to 512 [ 70.329639][ T4318] XFS (loop3): Mounting V5 Filesystem [ 70.343501][ T4343] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.382906][ T4348] EXT4-fs (loop0): Ignoring removed bh option [ 70.427456][ T4353] smpboot: CPU 1 is now offline [ 70.439846][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.446267][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.507298][ T4318] XFS (loop3): Ending clean mount [ 70.558538][ T4343] FAT-fs (loop4): error, parent dir link count too low (2) [ 70.577025][ T4360] loop1: detected capacity change from 0 to 2048 [ 70.604498][ T4348] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.15: corrupted in-inode xattr [ 70.641668][ T4343] FAT-fs (loop4): Filesystem has been set read-only [ 70.673763][ T4197] XFS (loop3): Unmounting Filesystem [ 70.702374][ T4357] x86: Booting SMP configuration: [ 70.712644][ T4360] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.756073][ T4357] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 70.791784][ T4200] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.805519][ T4348] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.15: couldn't read orphan inode 15 (err -117) [ 70.836747][ T0] kvm-clock: cpu 1, msr ff3c041, secondary cpu clock [ 70.850536][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 70.946182][ T4348] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,errors=continue,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 71.010592][ T4369] loop4: detected capacity change from 0 to 512 [ 71.053967][ T4373] loop1: detected capacity change from 0 to 1024 [ 71.129956][ T4373] ======================================================= [ 71.129956][ T4373] WARNING: The mand mount option has been deprecated and [ 71.129956][ T4373] and is ignored by this kernel. Remove the mand [ 71.129956][ T4373] option from the mount to silence this warning. [ 71.129956][ T4373] ======================================================= [ 71.179216][ T4369] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.307350][ T4373] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 71.357268][ T4373] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 71.454909][ T4373] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 2: comm syz.1.20: lblock 2 mapped to illegal pblock 2 (length 1) [ 71.528355][ T4387] program syz.4.23 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.547188][ T4373] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 71.572514][ T4373] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.20: lblock 0 mapped to illegal pblock 48 (length 1) [ 71.634374][ T4373] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 71.688540][ T4373] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.20: Failed to acquire dquot type 0 [ 71.745453][ T4372] loop2: detected capacity change from 0 to 32768 [ 71.765446][ T4373] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 71.810752][ T4373] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #11: comm syz.1.20: mark_inode_dirty error [ 71.849501][ T4372] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.21 (4372) [ 71.887761][ T4373] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 71.933116][ T4373] EXT4-fs (loop1): 1 orphan inode deleted [ 71.952648][ T155] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 71.964999][ T4373] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,dioread_nolock,norecovery,nodiscard,init_itable,nomblk_io_submit,,errors=continue. Quota mode: none. [ 71.987905][ T4372] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 71.993774][ T155] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 72.022079][ T155] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:2: Failed to release dquot type 0 [ 72.023455][ T4372] BTRFS info (device loop2): enabling ssd optimizations [ 72.104002][ T4372] BTRFS info (device loop2): not using ssd optimizations [ 72.133447][ T4381] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.22 (4381) [ 72.145650][ T4372] BTRFS info (device loop2): turning off barriers [ 72.182748][ T4372] BTRFS info (device loop2): use no compression [ 72.202024][ T4381] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 72.214519][ T4373] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.20: Invalid inode table block 1 in block_group 0 [ 72.228242][ T4372] BTRFS info (device loop2): using free space tree [ 72.234775][ T4372] BTRFS info (device loop2): has skinny extents [ 72.256047][ T4381] BTRFS info (device loop0): setting nodatasum [ 72.283936][ T4373] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 72.296007][ T4381] BTRFS info (device loop0): force zlib compression, level 3 [ 72.331765][ T4381] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 72.382532][ T4381] BTRFS info (device loop0): use lzo compression, level 0 [ 72.423021][ T4381] BTRFS info (device loop0): turning on flush-on-commit [ 72.439593][ T155] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 72.458563][ T155] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 72.474637][ T4381] BTRFS info (device loop0): enabling auto defrag [ 72.520756][ T155] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:2: Failed to release dquot type 0 [ 72.539987][ T4191] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 72.554007][ T4381] BTRFS info (device loop0): max_inline at 4096 [ 72.584050][ T4381] BTRFS info (device loop0): using free space tree [ 72.604267][ T4191] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 72.635428][ T4381] BTRFS info (device loop0): has skinny extents [ 72.669562][ T4191] EXT4-fs error (device loop1): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 72.722777][ T4381] BTRFS info (device loop0): enabling ssd optimizations [ 72.975774][ T4441] NILFS (loop4): invalid segment: Checksum error in segment payload [ 73.016122][ T4443] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 73.091001][ T4441] NILFS (loop4): trying rollback from an earlier position [ 73.155096][ T4394] ea_get: invalid extended attribute [ 73.231646][ T4394] ffff88805e9eb170: 04 00 00 00 .... [ 73.255954][ T4441] NILFS (loop4): recovery complete [ 73.284823][ T4451] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.523846][ T4464] program syz.1.34 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.727500][ T4473] netlink: 'syz.3.35': attribute type 1 has an invalid length. [ 73.924812][ T4482] netlink: 'syz.1.40': attribute type 1 has an invalid length. [ 73.952121][ T4476] EXT4-fs (loop4): Test dummy encryption mode enabled [ 73.976673][ T4476] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,dioread_lock,test_dummy_encryption,,errors=continue. Quota mode: none. [ 74.049675][ T4476] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 74.121841][ T4493] program syz.3.43 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.199161][ T4498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 74.252539][ T4503] program syz.0.48 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.286485][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 74.307213][ T4476] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 74.370126][ T2303] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.430098][ T4516] netlink: 'syz.3.51': attribute type 4 has an invalid length. [ 74.519456][ T4512] set_capacity_and_notify: 5 callbacks suppressed [ 74.519471][ T4512] loop2: detected capacity change from 0 to 4096 [ 74.590514][ T4512] FAULT_INJECTION: forcing a failure. [ 74.590514][ T4512] name failslab, interval 1, probability 5, space 0, times 100 [ 75.892805][ T4512] CPU: 0 PID: 4512 Comm: syz.2.49 Not tainted syzkaller #0 [ 75.900025][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 75.910066][ T4512] Call Trace: [ 75.913329][ T4512] [ 75.916241][ T4512] dump_stack_lvl+0x188/0x250 [ 75.920906][ T4512] ? show_regs_print_info+0x20/0x20 [ 75.926089][ T4512] ? load_image+0x410/0x410 [ 75.930580][ T4512] ? prandom_u32+0x217/0x250 [ 75.935169][ T4512] should_fail+0x383/0x4b0 [ 75.939594][ T4512] should_failslab+0x5/0x20 [ 75.944108][ T4512] slab_pre_alloc_hook+0x51/0xc0 [ 75.949037][ T4512] __kmalloc_node_track_caller+0x68/0x3a0 [ 75.954763][ T4512] ? alloc_uevent_skb+0x7d/0x230 [ 75.959690][ T4512] ? __alloc_skb+0xf4/0x750 [ 75.964180][ T4512] ? alloc_uevent_skb+0x7d/0x230 [ 75.969105][ T4512] __alloc_skb+0x22c/0x750 [ 75.973510][ T4512] alloc_uevent_skb+0x7d/0x230 [ 75.978259][ T4512] kobject_uevent_net_broadcast+0x2e6/0x530 [ 75.984142][ T4512] kobject_uevent_env+0x550/0x890 [ 75.989168][ T4512] loop_configure+0x1113/0x1480 [ 75.994032][ T4512] lo_ioctl+0x2e1/0x20e0 [ 75.998268][ T4512] ? __lock_acquire+0x12df/0x7d40 [ 76.003297][ T4512] ? lo_release+0x1f0/0x1f0 [ 76.007783][ T4512] ? __lock_acquire+0x13b3/0x7d40 [ 76.012792][ T4512] ? mark_lock+0x94/0x320 [ 76.017104][ T4512] ? verify_lock_unused+0x140/0x140 [ 76.022293][ T4512] ? mark_lock+0x94/0x320 [ 76.026614][ T4512] ? rcu_lock_release+0x5/0x20 [ 76.031361][ T4512] ? __lock_acquire+0x7d40/0x7d40 [ 76.036366][ T4512] ? unwind_next_frame+0x11ec/0x1cf0 [ 76.041648][ T4512] ? is_bpf_text_address+0x254/0x270 [ 76.046938][ T4512] ? __kernel_text_address+0x9a/0x100 [ 76.052298][ T4512] ? unwind_get_return_address+0x49/0x80 [ 76.057916][ T4512] ? stack_trace_save+0xf0/0xf0 [ 76.062765][ T4512] ? arch_stack_walk+0xf2/0x140 [ 76.067605][ T4512] ? kfree+0xef/0x2a0 [ 76.071570][ T4512] ? stack_trace_save+0xa6/0xf0 [ 76.076398][ T4512] ? stack_trace_snprint+0xe0/0xe0 [ 76.081487][ T4512] ? slab_free_freelist_hook+0xec/0x170 [ 76.087024][ T4512] ? security_file_ioctl+0x6c/0xa0 [ 76.092155][ T4512] ? __se_sys_ioctl+0x48/0x170 [ 76.097019][ T4512] ? do_syscall_64+0x4c/0xa0 [ 76.101629][ T4512] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.107720][ T4512] ? kfree+0xef/0x2a0 [ 76.111722][ T4512] ? kasan_set_track+0x62/0x70 [ 76.116504][ T4512] ? kasan_set_track+0x4b/0x70 [ 76.121286][ T4512] ? kasan_set_free_info+0x1f/0x40 [ 76.126415][ T4512] ? ____kasan_slab_free+0xd5/0x110 [ 76.131628][ T4512] ? slab_free_freelist_hook+0xec/0x170 [ 76.137190][ T4512] ? kfree+0xef/0x2a0 [ 76.141186][ T4512] ? tomoyo_path_number_perm+0x55c/0x6b0 [ 76.146839][ T4512] ? security_file_ioctl+0x6c/0xa0 [ 76.151969][ T4512] ? __se_sys_ioctl+0x48/0x170 [ 76.156745][ T4512] ? do_syscall_64+0x4c/0xa0 [ 76.161349][ T4512] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.167462][ T4512] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 76.173559][ T4512] ? lock_chain_count+0x20/0x20 [ 76.178449][ T4512] ? do_vfs_ioctl+0x1d5e/0x1f40 [ 76.183358][ T4512] ? blkdev_common_ioctl+0x6b9/0x1ed0 [ 76.188753][ T4512] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 76.194512][ T4512] ? blkdev_bszset+0x200/0x200 [ 76.199324][ T4512] ? lo_release+0x1f0/0x1f0 [ 76.203850][ T4512] blkdev_ioctl+0x347/0x6f0 [ 76.208381][ T4512] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 76.213867][ T4512] ? blkdev_iopoll+0x100/0x100 [ 76.218652][ T4512] block_ioctl+0xac/0xf0 [ 76.222928][ T4512] __se_sys_ioctl+0xfa/0x170 [ 76.227543][ T4512] do_syscall_64+0x4c/0xa0 [ 76.232015][ T4512] ? clear_bhb_loop+0x30/0x80 [ 76.236739][ T4512] ? clear_bhb_loop+0x30/0x80 [ 76.241435][ T4512] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.247347][ T4512] RIP: 0033:0x7f34543371eb [ 76.251780][ T4512] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 76.271403][ T4512] RSP: 002b:00007f345258ddb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.279836][ T4512] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f34543371eb [ 76.287826][ T4512] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 76.295815][ T4512] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 76.303797][ T4512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 76.311785][ T4512] R13: 00007f345258dee0 R14: 00007f345258dea0 R15: 00007f344a16e000 [ 76.319801][ T4512] [ 76.641625][ T4573] FAULT_INJECTION: forcing a failure. [ 76.641625][ T4573] name fail_futex, interval 1, probability 0, space 0, times 1 [ 76.669153][ T4573] CPU: 0 PID: 4573 Comm: syz.4.63 Not tainted syzkaller #0 [ 76.676367][ T4573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 76.686545][ T4573] Call Trace: [ 76.689998][ T4573] [ 76.692934][ T4573] dump_stack_lvl+0x188/0x250 [ 76.697616][ T4573] ? show_regs_print_info+0x20/0x20 [ 76.702803][ T4573] ? load_image+0x410/0x410 [ 76.707299][ T4573] ? cgroup_rstat_updated+0xce/0x350 [ 76.712585][ T4573] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 76.718563][ T4573] should_fail+0x383/0x4b0 [ 76.723022][ T4573] get_futex_key+0x1a0/0x1200 [ 76.727686][ T4573] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 76.733647][ T4573] ? futex_wait_restart+0x250/0x250 [ 76.738861][ T4573] ? lock_chain_count+0x20/0x20 [ 76.743721][ T4573] futex_wait_setup+0x4b/0x520 [ 76.748471][ T4573] ? lockdep_hardirqs_on+0x94/0x140 [ 76.753650][ T4573] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 76.759536][ T4573] futex_wait+0x22f/0x680 [ 76.763887][ T4573] ? __lock_acquire+0x13b3/0x7d40 [ 76.768910][ T4573] ? do_futex+0x12b0/0x12b0 [ 76.773410][ T4573] ? verify_lock_unused+0x140/0x140 [ 76.778588][ T4573] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 76.784218][ T4573] ? verify_lock_unused+0x140/0x140 [ 76.789398][ T4573] do_futex+0xdc2/0x12b0 [ 76.793644][ T4573] ? futex_exit_release+0x1c0/0x1c0 [ 76.798827][ T4573] ? __context_tracking_exit+0x4c/0x80 [ 76.804272][ T4573] __se_sys_futex+0x389/0x420 [ 76.808936][ T4573] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 76.814939][ T4573] ? __x64_sys_futex+0xf0/0xf0 [ 76.819690][ T4573] ? __x64_sys_futex+0x1d/0xf0 [ 76.824437][ T4573] do_syscall_64+0x4c/0xa0 [ 76.828831][ T4573] ? clear_bhb_loop+0x30/0x80 [ 76.833484][ T4573] ? clear_bhb_loop+0x30/0x80 [ 76.838139][ T4573] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.844026][ T4573] RIP: 0033:0x7f96e54e4559 [ 76.848543][ T4573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.868139][ T4573] RSP: 002b:00007f96e373b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 76.876560][ T4573] RAX: ffffffffffffffda RBX: 00007f96e576afa8 RCX: 00007f96e54e4559 [ 76.884521][ T4573] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f96e576afa8 [ 76.892477][ T4573] RBP: 00007f96e576afa0 R08: 0000000000000000 R09: 0000000000000000 [ 76.900445][ T4573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.908436][ T4573] R13: 00007f96e576b038 R14: 00007ffcc9abdab0 R15: 00007ffcc9abdb98 [ 76.916405][ T4573] [ 76.968145][ T4576] FAULT_INJECTION: forcing a failure. [ 76.968145][ T4576] name failslab, interval 1, probability 5, space 0, times 100 [ 77.000640][ T4576] CPU: 0 PID: 4576 Comm: syz.1.64 Not tainted syzkaller #0 [ 77.007848][ T4576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 77.017908][ T4576] Call Trace: [ 77.021183][ T4576] [ 77.024097][ T4576] dump_stack_lvl+0x188/0x250 [ 77.028761][ T4576] ? show_regs_print_info+0x20/0x20 [ 77.034034][ T4576] ? load_image+0x410/0x410 [ 77.038519][ T4576] ? __lock_acquire+0x7d40/0x7d40 [ 77.043532][ T4576] should_fail+0x383/0x4b0 [ 77.047942][ T4576] should_failslab+0x5/0x20 [ 77.052448][ T4576] slab_pre_alloc_hook+0x51/0xc0 [ 77.057375][ T4576] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 77.063075][ T4576] ? __get_vm_area_node+0x119/0x2d0 [ 77.068258][ T4576] __get_vm_area_node+0x119/0x2d0 [ 77.073278][ T4576] ? aa_get_newest_label+0xf5/0x5a0 [ 77.078457][ T4576] __vmalloc_node_range+0xef/0x8b0 [ 77.083549][ T4576] ? bpf_jit_binary_alloc+0x120/0x240 [ 77.088904][ T4576] module_alloc+0x81/0x90 [ 77.093210][ T4576] ? bpf_jit_binary_alloc+0x120/0x240 [ 77.098563][ T4576] bpf_jit_binary_alloc+0x120/0x240 [ 77.103769][ T4576] ? bpf_int_jit_compile+0xc4d0/0xc4d0 [ 77.109230][ T4576] bpf_int_jit_compile+0xb2f5/0xc4d0 [ 77.114496][ T4576] ? kfree+0xef/0x2a0 [ 77.118480][ T4576] ? stack_trace_snprint+0xe0/0xe0 [ 77.123601][ T4576] ? emit_bpf_dispatcher+0x1050/0x1050 [ 77.129078][ T4576] bpf_prog_select_runtime+0x46f/0x7b0 [ 77.134518][ T4576] ? bpf_prog_realloc+0x142/0x1c0 [ 77.139539][ T4576] bpf_prepare_filter+0x100e/0x11b0 [ 77.144766][ T4576] ? bpf_prog_create+0x1f0/0x1f0 [ 77.149708][ T4576] ? kmemdup+0x3d/0x50 [ 77.153757][ T4576] ? __get_filter+0x2db/0x400 [ 77.158428][ T4576] sk_attach_filter+0x20/0x140 [ 77.163213][ T4576] sock_setsockopt+0x18c7/0x2480 [ 77.168138][ T4576] ? __sock_set_mark+0x150/0x150 [ 77.173060][ T4576] ? __lock_acquire+0x7d40/0x7d40 [ 77.178068][ T4576] ? aa_sk_perm+0x7dc/0x910 [ 77.182554][ T4576] ? aa_af_perm+0x340/0x340 [ 77.187039][ T4576] ? __fget_files+0x402/0x470 [ 77.191703][ T4576] ? aa_sock_opt_perm+0x74/0x100 [ 77.196618][ T4576] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 77.202145][ T4576] ? security_socket_setsockopt+0x7a/0xa0 [ 77.207855][ T4576] __sys_setsockopt+0x2f6/0x3d0 [ 77.212709][ T4576] __x64_sys_setsockopt+0xb1/0xc0 [ 77.217736][ T4576] do_syscall_64+0x4c/0xa0 [ 77.222144][ T4576] ? clear_bhb_loop+0x30/0x80 [ 77.226813][ T4576] ? clear_bhb_loop+0x30/0x80 [ 77.231485][ T4576] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.237366][ T4576] RIP: 0033:0x7ff92f985559 [ 77.241767][ T4576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.261365][ T4576] RSP: 002b:00007ff92dbdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 77.269810][ T4576] RAX: ffffffffffffffda RBX: 00007ff92fc0bfa0 RCX: 00007ff92f985559 [ 77.277777][ T4576] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 77.285753][ T4576] RBP: 00007ff92fa1cb50 R08: 0000000000000010 R09: 0000000000000000 [ 77.293766][ T4576] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 77.301730][ T4576] R13: 00007ff92fc0c038 R14: 00007ff92fc0bfa0 R15: 00007ffe35b52528 [ 77.309806][ T4576] [ 77.464361][ T4576] syz.1.64: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 77.530726][ T4512] FAULT_INJECTION: forcing a failure. [ 77.530726][ T4512] name failslab, interval 1, probability 5, space 0, times 98 [ 77.543778][ T4512] CPU: 0 PID: 4512 Comm: syz.2.49 Not tainted syzkaller #0 [ 77.550968][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 77.561010][ T4512] Call Trace: [ 77.564278][ T4512] [ 77.567319][ T4512] dump_stack_lvl+0x188/0x250 [ 77.571990][ T4512] ? show_regs_print_info+0x20/0x20 [ 77.577174][ T4512] ? load_image+0x410/0x410 [ 77.581690][ T4512] should_fail+0x383/0x4b0 [ 77.586110][ T4512] should_failslab+0x5/0x20 [ 77.590593][ T4512] slab_pre_alloc_hook+0x51/0xc0 [ 77.595511][ T4512] ? __sigqueue_alloc+0x3a6/0x4b0 [ 77.600517][ T4512] kmem_cache_alloc+0x3d/0x280 [ 77.605261][ T4512] __sigqueue_alloc+0x3a6/0x4b0 [ 77.610087][ T4512] __send_signal+0x223/0xd40 [ 77.614656][ T4512] do_notify_parent+0xb90/0xdb0 [ 77.619485][ T4512] ? trace_signal_generate+0x1c0/0x1c0 [ 77.624942][ T4512] ? __lock_acquire+0x7d40/0x7d40 [ 77.629973][ T4512] release_task+0x1190/0x15f0 [ 77.634661][ T4512] ? do_exit+0x14c7/0x2100 [ 77.639073][ T4512] ? delayed_put_task_struct+0x260/0x260 [ 77.644696][ T4512] ? _raw_write_lock_irq+0xb7/0xf0 [ 77.649788][ T4512] ? _raw_write_lock_irqsave+0x100/0x100 [ 77.655396][ T4512] ? _raw_write_unlock_irq+0x1f/0x40 [ 77.660653][ T4512] ? lockdep_hardirqs_on+0x94/0x140 [ 77.665830][ T4512] do_exit+0x14c7/0x2100 [ 77.670050][ T4512] ? put_task_struct+0x80/0x80 [ 77.674786][ T4512] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 77.680753][ T4512] ? _raw_spin_lock_irq+0xb7/0xf0 [ 77.685773][ T4512] do_group_exit+0x12c/0x2f0 [ 77.690341][ T4512] ? lockdep_hardirqs_on+0x94/0x140 [ 77.695518][ T4512] get_signal+0x7eb/0x12e0 [ 77.699922][ T4512] arch_do_signal_or_restart+0xe6/0x12a0 [ 77.705544][ T4512] ? get_sigframe_size+0x10/0x10 [ 77.710471][ T4512] ? exit_to_user_mode_loop+0x3b/0x130 [ 77.715907][ T4512] exit_to_user_mode_loop+0x9e/0x130 [ 77.721167][ T4512] exit_to_user_mode_prepare+0xee/0x180 [ 77.726688][ T4512] syscall_exit_to_user_mode+0x16/0x40 [ 77.732134][ T4512] do_syscall_64+0x58/0xa0 [ 77.736543][ T4512] ? clear_bhb_loop+0x30/0x80 [ 77.741198][ T4512] ? clear_bhb_loop+0x30/0x80 [ 77.745854][ T4512] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.751733][ T4512] RIP: 0033:0x7f34543371eb [ 77.756125][ T4512] Code: Unable to access opcode bytes at RIP 0x7f34543371c1. [ 77.763464][ T4512] RSP: 002b:00007f345258ddb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.771867][ T4512] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 00007f34543371eb [ 77.779832][ T4512] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 77.787832][ T4512] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.795788][ T4512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 77.803740][ T4512] R13: 00007f345258dee0 R14: 00007f345258dea0 R15: 00007f344a16e000 [ 77.811701][ T4512] [ 77.868286][ T4576] CPU: 0 PID: 4576 Comm: syz.1.64 Not tainted syzkaller #0 [ 77.875529][ T4576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 77.885595][ T4576] Call Trace: [ 77.888886][ T4576] [ 77.891829][ T4576] dump_stack_lvl+0x188/0x250 [ 77.896514][ T4576] ? rcu_lock_release+0x5/0x20 [ 77.901267][ T4576] ? show_regs_print_info+0x20/0x20 [ 77.906454][ T4576] ? load_image+0x410/0x410 [ 77.910955][ T4576] warn_alloc+0x245/0x320 [ 77.915278][ T4576] ? zone_watermark_ok_safe+0x250/0x250 [ 77.920836][ T4576] ? rcu_is_watching+0x11/0xa0 [ 77.925593][ T4576] ? __get_vm_area_node+0x119/0x2d0 [ 77.930785][ T4576] ? __get_vm_area_node+0x2b5/0x2d0 [ 77.935974][ T4576] ? aa_get_newest_label+0xf5/0x5a0 [ 77.941163][ T4576] __vmalloc_node_range+0x2b1/0x8b0 [ 77.946361][ T4576] module_alloc+0x81/0x90 [ 77.950680][ T4576] ? bpf_jit_binary_alloc+0x120/0x240 [ 77.956039][ T4576] bpf_jit_binary_alloc+0x120/0x240 [ 77.961225][ T4576] ? bpf_int_jit_compile+0xc4d0/0xc4d0 [ 77.966672][ T4576] bpf_int_jit_compile+0xb2f5/0xc4d0 [ 77.971942][ T4576] ? kfree+0xef/0x2a0 [ 77.975928][ T4576] ? stack_trace_snprint+0xe0/0xe0 [ 77.981041][ T4576] ? emit_bpf_dispatcher+0x1050/0x1050 [ 77.986507][ T4576] bpf_prog_select_runtime+0x46f/0x7b0 [ 77.991955][ T4576] ? bpf_prog_realloc+0x142/0x1c0 [ 77.996975][ T4576] bpf_prepare_filter+0x100e/0x11b0 [ 78.002167][ T4576] ? bpf_prog_create+0x1f0/0x1f0 [ 78.007090][ T4576] ? kmemdup+0x3d/0x50 [ 78.011144][ T4576] ? __get_filter+0x2db/0x400 [ 78.015814][ T4576] sk_attach_filter+0x20/0x140 [ 78.020571][ T4576] sock_setsockopt+0x18c7/0x2480 [ 78.025502][ T4576] ? __sock_set_mark+0x150/0x150 [ 78.030426][ T4576] ? __lock_acquire+0x7d40/0x7d40 [ 78.035444][ T4576] ? aa_sk_perm+0x7dc/0x910 [ 78.039946][ T4576] ? aa_af_perm+0x340/0x340 [ 78.044440][ T4576] ? __fget_files+0x402/0x470 [ 78.049105][ T4576] ? aa_sock_opt_perm+0x74/0x100 [ 78.054030][ T4576] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 78.059566][ T4576] ? security_socket_setsockopt+0x7a/0xa0 [ 78.065275][ T4576] __sys_setsockopt+0x2f6/0x3d0 [ 78.070119][ T4576] __x64_sys_setsockopt+0xb1/0xc0 [ 78.075131][ T4576] do_syscall_64+0x4c/0xa0 [ 78.079535][ T4576] ? clear_bhb_loop+0x30/0x80 [ 78.084199][ T4576] ? clear_bhb_loop+0x30/0x80 [ 78.088864][ T4576] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.094746][ T4576] RIP: 0033:0x7ff92f985559 [ 78.099149][ T4576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.118745][ T4576] RSP: 002b:00007ff92dbdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.127169][ T4576] RAX: ffffffffffffffda RBX: 00007ff92fc0bfa0 RCX: 00007ff92f985559 [ 78.135217][ T4576] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 78.143184][ T4576] RBP: 00007ff92fa1cb50 R08: 0000000000000010 R09: 0000000000000000 [ 78.151152][ T4576] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 78.159109][ T4576] R13: 00007ff92fc0c038 R14: 00007ff92fc0bfa0 R15: 00007ffe35b52528 [ 78.167083][ T4576] [ 79.478204][ T4589] loop0: detected capacity change from 0 to 4096 [ 79.624478][ T4589] NILFS (loop0): invalid segment: Checksum error in segment payload [ 79.667180][ T4589] NILFS (loop0): trying rollback from an earlier position [ 79.718850][ T4589] NILFS (loop0): recovery complete [ 79.756139][ T4594] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.845136][ T4585] loop4: detected capacity change from 0 to 32768 [ 79.879498][ T4596] smpboot: CPU 1 is now offline [ 79.962325][ T4585] ea_get: invalid extended attribute [ 79.995887][ T4585] ffff888062ad0330: 04 00 00 00 .... [ 80.050886][ T4597] x86: Booting SMP configuration: [ 80.073214][ T4597] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 80.110142][ T0] kvm-clock: cpu 1, msr ff3c041, secondary cpu clock [ 80.120322][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 80.394371][ T4614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 80.483079][ T4576] Mem-Info: [ 80.495308][ T4576] active_anon:324 inactive_anon:5669 isolated_anon:0 [ 80.495308][ T4576] active_file:4617 inactive_file:36641 isolated_file:0 [ 80.495308][ T4576] unevictable:768 dirty:687 writeback:0 [ 80.495308][ T4576] slab_reclaimable:20645 slab_unreclaimable:96807 [ 80.495308][ T4576] mapped:29474 shmem:1647 pagetables:667 bounce:0 [ 80.495308][ T4576] kernel_misc_reclaimable:0 [ 80.495308][ T4576] free:1395024 free_pcp:7332 free_cma:0 [ 81.532130][ T4618] sched: RT throttling activated [ 81.559090][ T1107] cfg80211: failed to load regulatory.db [ 81.810531][ T4625] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 81.844795][ T4625] batman_adv: batadv0: Adding interface: gretap1 [ 81.857515][ T4625] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 81.911758][ T4576] Node 0 active_anon:1240kB inactive_anon:21932kB active_file:18288kB inactive_file:146440kB unevictable:1536kB isolated(anon):12kB isolated(file):80kB mapped:118016kB dirty:2740kB writeback:0kB shmem:4460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10780kB pagetables:2664kB all_unreclaimable? no [ 83.209032][ T4632] netlink: 40 bytes leftover after parsing attributes in process `syz.3.86'. [ 83.225035][ T4636] netlink: 'syz.4.87': attribute type 4 has an invalid length. [ 83.241240][ T4576] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 83.272954][ T4633] loop2: detected capacity change from 0 to 4096 [ 83.398883][ T4576] Node 0 [ 83.403492][ T4633] NILFS (loop2): invalid segment: Checksum error in segment payload [ 83.418113][ T4576] DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 83.494570][ T4633] NILFS (loop2): trying rollback from an earlier position [ 83.525004][ T4643] loop4: detected capacity change from 0 to 4096 [ 83.543730][ T4576] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 83.551061][ T4633] NILFS (loop2): recovery complete [ 83.571587][ T4647] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.572017][ T4576] Node 0 [ 83.582374][ T4643] FAULT_INJECTION: forcing a failure. [ 83.582374][ T4643] name failslab, interval 1, probability 5, space 0, times 100 [ 83.637885][ T4576] DMA32 free:1640036kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1444kB inactive_anon:26024kB active_file:18488kB inactive_file:146496kB unevictable:1536kB writepending:2580kB present:3129332kB managed:2590800kB mlocked:0kB bounce:0kB free_pcp:18632kB local_pcp:20936kB free_cma:0kB [ 83.687525][ T4643] CPU: 0 PID: 4643 Comm: syz.4.90 Not tainted syzkaller #0 [ 83.694766][ T4643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 83.704809][ T4643] Call Trace: [ 83.708071][ T4643] [ 83.710984][ T4643] dump_stack_lvl+0x188/0x250 [ 83.715648][ T4643] ? show_regs_print_info+0x20/0x20 [ 83.720841][ T4643] ? load_image+0x410/0x410 [ 83.725327][ T4643] ? prandom_u32+0x217/0x250 [ 83.729903][ T4643] should_fail+0x383/0x4b0 [ 83.734301][ T4643] should_failslab+0x5/0x20 [ 83.738789][ T4643] slab_pre_alloc_hook+0x51/0xc0 [ 83.743749][ T4643] __kmalloc+0x6b/0x340 [ 83.747886][ T4643] ? kobject_get_path+0xae/0x210 [ 83.752810][ T4643] kobject_get_path+0xae/0x210 [ 83.757554][ T4643] kobject_uevent_env+0x28b/0x890 [ 83.762562][ T4643] loop_configure+0x1113/0x1480 [ 83.767402][ T4643] lo_ioctl+0x2e1/0x20e0 [ 83.771630][ T4643] ? __lock_acquire+0x12df/0x7d40 [ 83.776636][ T4643] ? lo_release+0x1f0/0x1f0 [ 83.781125][ T4643] ? verify_lock_unused+0x140/0x140 [ 83.786299][ T4643] ? stack_trace_snprint+0xe0/0xe0 [ 83.791392][ T4643] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 83.797396][ T4643] ? rcu_lock_release+0x5/0x20 [ 83.802159][ T4643] ? __lock_acquire+0x7d40/0x7d40 [ 83.807190][ T4643] ? unwind_next_frame+0x11ec/0x1cf0 [ 83.812457][ T4643] ? is_bpf_text_address+0x254/0x270 [ 83.817742][ T4643] ? __kernel_text_address+0x9a/0x100 [ 83.823093][ T4643] ? unwind_get_return_address+0x49/0x80 [ 83.828701][ T4643] ? stack_trace_save+0xf0/0xf0 [ 83.833528][ T4643] ? arch_stack_walk+0xf2/0x140 [ 83.838374][ T4643] ? kfree+0xef/0x2a0 [ 83.842358][ T4643] ? stack_trace_save+0xa6/0xf0 [ 83.847205][ T4643] ? stack_trace_snprint+0xe0/0xe0 [ 83.852293][ T4643] ? slab_free_freelist_hook+0xec/0x170 [ 83.857816][ T4643] ? security_file_ioctl+0x6c/0xa0 [ 83.862905][ T4643] ? __se_sys_ioctl+0x48/0x170 [ 83.867643][ T4643] ? do_syscall_64+0x4c/0xa0 [ 83.872212][ T4643] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.878259][ T4643] ? kfree+0xef/0x2a0 [ 83.882218][ T4643] ? kasan_set_track+0x62/0x70 [ 83.886957][ T4643] ? kasan_set_track+0x4b/0x70 [ 83.891703][ T4643] ? kasan_set_free_info+0x1f/0x40 [ 83.896820][ T4643] ? ____kasan_slab_free+0xd5/0x110 [ 83.901995][ T4643] ? slab_free_freelist_hook+0xec/0x170 [ 83.907517][ T4643] ? kfree+0xef/0x2a0 [ 83.911477][ T4643] ? tomoyo_path_number_perm+0x55c/0x6b0 [ 83.917087][ T4643] ? security_file_ioctl+0x6c/0xa0 [ 83.922184][ T4643] ? __se_sys_ioctl+0x48/0x170 [ 83.926924][ T4643] ? do_syscall_64+0x4c/0xa0 [ 83.931492][ T4643] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.937565][ T4643] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 83.943549][ T4643] ? lock_chain_count+0x20/0x20 [ 83.948380][ T4643] ? do_vfs_ioctl+0x1d5e/0x1f40 [ 83.953221][ T4643] ? blkdev_common_ioctl+0x6b9/0x1ed0 [ 83.958594][ T4643] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 83.964307][ T4643] ? blkdev_bszset+0x200/0x200 [ 83.969066][ T4643] ? lo_release+0x1f0/0x1f0 [ 83.973546][ T4643] blkdev_ioctl+0x347/0x6f0 [ 83.978026][ T4643] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 83.983463][ T4643] ? blkdev_iopoll+0x100/0x100 [ 83.988215][ T4643] block_ioctl+0xac/0xf0 [ 83.992462][ T4643] __se_sys_ioctl+0xfa/0x170 [ 83.997041][ T4643] do_syscall_64+0x4c/0xa0 [ 84.001446][ T4643] ? clear_bhb_loop+0x30/0x80 [ 84.006106][ T4643] ? clear_bhb_loop+0x30/0x80 [ 84.010761][ T4643] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.016639][ T4643] RIP: 0033:0x7f96e54e41eb [ 84.021033][ T4643] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 84.040624][ T4643] RSP: 002b:00007f96e373adb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.049040][ T4643] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f96e54e41eb [ 84.056995][ T4643] RDX: 0000000000000007 RSI: 0000000000004c00 RDI: 0000000000000008 [ 84.064947][ T4643] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.072896][ T4643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 84.080844][ T4643] R13: 00007f96e373aee0 R14: 00007f96e373aea0 R15: 00007f96db31b000 [ 84.088812][ T4643] [ 84.121323][ T4649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'. [ 84.167796][ T4576] lowmem_reserve[]: 0 0 0 0 0 [ 84.182201][ T4576] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 84.237223][ T4576] lowmem_reserve[]: 0 0 0 0 0 [ 84.246686][ T4576] Node 1 Normal free:3920072kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:12kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:6876kB local_pcp:6876kB free_cma:0kB [ 84.574812][ T4576] lowmem_reserve[]: 0 0 0 0 0 [ 84.583138][ T4576] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 84.603516][ T4663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.97'. [ 84.626613][ T4576] Node 0 DMA32: 845*4kB (UM) 395*8kB (UME) 170*16kB (UME) 113*32kB (UME) 65*64kB (UME) 45*128kB (UME) 26*256kB (UME) 10*512kB (UME) 5*1024kB (M) 3*2048kB (UM) 390*4096kB (M) = 1643276kB [ 84.655559][ T4576] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 84.668830][ T4576] Node 1 Normal: 136*4kB (UME) 29*8kB (UME) 26*16kB (UME) 145*32kB (UME) 58*64kB (UME) 15*128kB (UME) 8*256kB (UE) 4*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 952*4096kB (M) = 3920072kB [ 84.694895][ T4576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 85.910803][ T4576] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 85.943639][ T4576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 85.954224][ T4668] netlink: 40 bytes leftover after parsing attributes in process `syz.2.100'. [ 85.970096][ T4670] autofs4:pid:4670:autofs_fill_super: called with bogus options [ 85.977932][ T4576] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 86.033309][ T4576] 43429 total pagecache pages [ 86.057177][ T4576] 0 pages in swap cache [ 86.077152][ T4576] Swap cache stats: add 0, delete 0, find 0/0 [ 86.088919][ T4676] netlink: 'syz.2.102': attribute type 4 has an invalid length. [ 86.110687][ T4576] Free swap = 124996kB [ 86.114890][ T4576] Total swap = 124996kB [ 86.148005][ T4576] 2097051 pages RAM [ 86.171107][ T4576] 0 pages HighMem/MovableOnly [ 86.189094][ T4576] 415364 pages reserved [ 86.207991][ T4576] 0 pages cma reserved [ 86.359783][ T4688] loop0: detected capacity change from 0 to 128 [ 87.930105][ T4688] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.942839][ T4703] netlink: 40 bytes leftover after parsing attributes in process `syz.2.113'. [ 87.952264][ T4688] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.004077][ T4710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.114'. [ 88.137986][ T4716] FAULT_INJECTION: forcing a failure. [ 88.137986][ T4716] name failslab, interval 1, probability 5, space 0, times 100 [ 88.190488][ T4718] loop3: detected capacity change from 0 to 1024 [ 88.205196][ T4716] CPU: 0 PID: 4716 Comm: syz.0.116 Not tainted syzkaller #0 [ 88.212520][ T4716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 88.222566][ T4716] Call Trace: [ 88.225832][ T4716] [ 88.228757][ T4716] dump_stack_lvl+0x188/0x250 [ 88.233425][ T4716] ? show_regs_print_info+0x20/0x20 [ 88.238611][ T4716] ? load_image+0x410/0x410 [ 88.243100][ T4716] ? __might_sleep+0xf0/0xf0 [ 88.247685][ T4716] ? __lock_acquire+0x7d40/0x7d40 [ 88.252719][ T4716] should_fail+0x383/0x4b0 [ 88.257129][ T4716] should_failslab+0x5/0x20 [ 88.261628][ T4716] slab_pre_alloc_hook+0x51/0xc0 [ 88.266546][ T4716] kmem_cache_alloc_trace+0x47/0x290 [ 88.271809][ T4716] ? __list_lru_init+0x535/0xac0 [ 88.276730][ T4716] __list_lru_init+0x535/0xac0 [ 88.281482][ T4716] alloc_super+0x787/0x970 [ 88.285904][ T4716] ? kill_litter_super+0xa0/0xa0 [ 88.290820][ T4716] sget_fc+0x2d4/0x6f0 [ 88.294870][ T4716] ? kill_litter_super+0xa0/0xa0 [ 88.299794][ T4716] ? hugetlbfs_get_tree+0x530/0x530 [ 88.305019][ T4716] get_tree_nodev+0x26/0x160 [ 88.309625][ T4716] vfs_get_tree+0x88/0x270 [ 88.314054][ T4716] vfs_fsconfig_locked+0x22f/0x400 [ 88.319178][ T4716] __se_sys_fsconfig+0x69e/0x7e0 [ 88.324135][ T4716] ? __x64_sys_fsconfig+0xc0/0xc0 [ 88.329179][ T4716] ? lockdep_hardirqs_on+0x94/0x140 [ 88.334391][ T4716] ? __x64_sys_fsconfig+0x1c/0xc0 [ 88.339409][ T4716] do_syscall_64+0x4c/0xa0 [ 88.343828][ T4716] ? clear_bhb_loop+0x30/0x80 [ 88.348490][ T4716] ? clear_bhb_loop+0x30/0x80 [ 88.353154][ T4716] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.359044][ T4716] RIP: 0033:0x7fbdd49b4559 [ 88.363483][ T4716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.383175][ T4716] RSP: 002b:00007fbdd2c0b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 88.391581][ T4716] RAX: ffffffffffffffda RBX: 00007fbdd4c3afa0 RCX: 00007fbdd49b4559 [ 88.399543][ T4716] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 88.407513][ T4716] RBP: 00007fbdd4a4bb50 R08: 0000000000000000 R09: 0000000000000000 [ 88.415463][ T4716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.423560][ T4716] R13: 00007fbdd4c3b038 R14: 00007fbdd4c3afa0 R15: 00007ffebec76ce8 [ 88.431534][ T4716] [ 88.455194][ T4722] loop1: detected capacity change from 0 to 128 [ 88.533067][ T4722] attempt to access beyond end of device [ 88.533067][ T4722] loop1: rw=2049, want=250, limit=128 [ 88.573106][ T4718] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.594690][ T4722] attempt to access beyond end of device [ 88.594690][ T4722] loop1: rw=2049, want=140, limit=128 [ 88.671845][ T4722] Buffer I/O error on dev loop1, logical block 69, lost async page write [ 88.703101][ T4722] attempt to access beyond end of device [ 88.703101][ T4722] loop1: rw=2049, want=144, limit=128 [ 88.735251][ T4735] netlink: 32 bytes leftover after parsing attributes in process `syz.2.125'. [ 88.749668][ T4722] Buffer I/O error on dev loop1, logical block 71, lost async page write [ 88.814411][ T25] audit: type=1326 audit(1793605295.020:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.2.129" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3454337559 code=0x0 [ 90.535955][ T4759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.134'. [ 90.563202][ T4763] sctp: [Deprecated]: syz.0.136 (pid 4763) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.563202][ T4763] Use struct sctp_sack_info instead [ 90.591704][ T4765] ieee802154 phy0 wpan0: encryption failed: -22 [ 90.682510][ T4768] netlink: 32 bytes leftover after parsing attributes in process `syz.4.138'. [ 91.045363][ T4786] FAULT_INJECTION: forcing a failure. [ 91.045363][ T4786] name fail_futex, interval 1, probability 0, space 0, times 0 [ 92.379434][ T4786] CPU: 0 PID: 4786 Comm: syz.1.143 Not tainted syzkaller #0 [ 92.386773][ T4786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 92.396824][ T4786] Call Trace: [ 92.400093][ T4786] [ 92.403112][ T4786] dump_stack_lvl+0x188/0x250 [ 92.407779][ T4786] ? show_regs_print_info+0x20/0x20 [ 92.412976][ T4786] ? load_image+0x410/0x410 [ 92.417464][ T4786] ? verify_lock_unused+0x140/0x140 [ 92.422642][ T4786] ? mark_lock+0x94/0x320 [ 92.426948][ T4786] ? release_sock+0x2b/0x1b0 [ 92.431518][ T4786] ? reacquire_held_locks+0x31b/0x5c0 [ 92.436878][ T4786] should_fail+0x383/0x4b0 [ 92.441292][ T4786] get_futex_key+0x1a0/0x1200 [ 92.445985][ T4786] ? __lock_acquire+0x13b3/0x7d40 [ 92.451015][ T4786] ? futex_wait_restart+0x250/0x250 [ 92.456201][ T4786] futex_wake+0x101/0x540 [ 92.460520][ T4786] ? futex_wait+0x680/0x680 [ 92.465004][ T4786] ? verify_lock_unused+0x140/0x140 [ 92.470184][ T4786] ? __local_bh_enable_ip+0x136/0x1c0 [ 92.475540][ T4786] ? verify_lock_unused+0x140/0x140 [ 92.480727][ T4786] do_futex+0xd83/0x12b0 [ 92.484969][ T4786] ? sock_setsockopt+0x1ba3/0x2480 [ 92.490072][ T4786] ? sock_setsockopt+0x1ba3/0x2480 [ 92.495196][ T4786] ? futex_exit_release+0x1c0/0x1c0 [ 92.500377][ T4786] ? __context_tracking_exit+0x4c/0x80 [ 92.505830][ T4786] __se_sys_futex+0x389/0x420 [ 92.510511][ T4786] ? __x64_sys_futex+0xf0/0xf0 [ 92.515271][ T4786] ? __x64_sys_futex+0x1d/0xf0 [ 92.520031][ T4786] do_syscall_64+0x4c/0xa0 [ 92.524446][ T4786] ? clear_bhb_loop+0x30/0x80 [ 92.529110][ T4786] ? clear_bhb_loop+0x30/0x80 [ 92.533795][ T4786] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.539693][ T4786] RIP: 0033:0x7ff92f985559 [ 92.544113][ T4786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.563707][ T4786] RSP: 002b:00007ff92dbbb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 92.572108][ T4786] RAX: ffffffffffffffda RBX: 00007ff92fc0c098 RCX: 00007ff92f985559 [ 92.580065][ T4786] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff92fc0c09c [ 92.588024][ T4786] RBP: 00007ff92fc0c090 R08: 003b93d7dd7ec164 R09: 0000000000000000 [ 92.595998][ T4786] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 92.603954][ T4786] R13: 00007ff92fc0c128 R14: 00007ffe35b52440 R15: 00007ffe35b52528 [ 92.611919][ T4786] [ 92.695428][ T4824] loop4: detected capacity change from 0 to 256 [ 93.172230][ T4865] netlink: 32 bytes leftover after parsing attributes in process `syz.0.156'. [ 95.070262][ T4895] loop4: detected capacity change from 0 to 512 [ 95.087727][ T4897] netlink: 32 bytes leftover after parsing attributes in process `syz.0.167'. [ 95.242522][ T4895] EXT4-fs (loop4): 1 truncate cleaned up [ 95.257186][ T4895] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,data_err=ignore,nouid32,errors=remount-ro,jqfmt=vfsv1,noauto_da_alloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 95.554537][ T4915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.173'. [ 95.588118][ T4915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.173'. [ 95.631188][ T4915] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 97.008581][ T4903] syz.0.171 (4903) used greatest stack depth: 20880 bytes left [ 97.054312][ T4929] netlink: 68 bytes leftover after parsing attributes in process `syz.3.179'. [ 97.247143][ T4936] netlink: 32 bytes leftover after parsing attributes in process `syz.0.181'. [ 97.856412][ T4949] netlink: 36 bytes leftover after parsing attributes in process `syz.3.186'. [ 97.890474][ T4951] netlink: 'syz.3.186': attribute type 10 has an invalid length. [ 97.916816][ T4951] device syz_tun entered promiscuous mode [ 97.954825][ T4951] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 98.006647][ T4958] FAULT_INJECTION: forcing a failure. [ 98.006647][ T4958] name failslab, interval 1, probability 5, space 0, times 98 [ 98.046825][ T4951] syz.3.186 (4951) used greatest stack depth: 20176 bytes left [ 98.064125][ T4958] CPU: 0 PID: 4958 Comm: syz.0.189 Not tainted syzkaller #0 [ 98.071424][ T4958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 98.081483][ T4958] Call Trace: [ 98.084764][ T4958] [ 98.087678][ T4958] dump_stack_lvl+0x188/0x250 [ 98.092341][ T4958] ? show_regs_print_info+0x20/0x20 [ 98.097518][ T4958] ? load_image+0x410/0x410 [ 98.102005][ T4958] ? __might_sleep+0xf0/0xf0 [ 98.106575][ T4958] ? __lock_acquire+0x7d40/0x7d40 [ 98.111597][ T4958] should_fail+0x383/0x4b0 [ 98.116001][ T4958] should_failslab+0x5/0x20 [ 98.120480][ T4958] slab_pre_alloc_hook+0x51/0xc0 [ 98.125423][ T4958] __kmalloc+0x6b/0x340 [ 98.129560][ T4958] ? kernfs_fop_write_iter+0x14f/0x500 [ 98.135044][ T4958] kernfs_fop_write_iter+0x14f/0x500 [ 98.140338][ T4958] ? iov_iter_init+0xb4/0x170 [ 98.144999][ T4958] vfs_write+0x748/0xd70 [ 98.149235][ T4958] ? file_end_write+0x250/0x250 [ 98.154100][ T4958] ? mutex_lock_nested+0x17/0x20 [ 98.159019][ T4958] ? __fdget_pos+0x2bf/0x370 [ 98.163601][ T4958] ? ksys_write+0x70/0x260 [ 98.168003][ T4958] ksys_write+0x153/0x260 [ 98.172332][ T4958] ? __ia32_sys_read+0x80/0x80 [ 98.177080][ T4958] ? lockdep_hardirqs_on+0x94/0x140 [ 98.182275][ T4958] do_syscall_64+0x4c/0xa0 [ 98.186670][ T4958] ? clear_bhb_loop+0x30/0x80 [ 98.191330][ T4958] ? clear_bhb_loop+0x30/0x80 [ 98.195989][ T4958] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.201867][ T4958] RIP: 0033:0x7fbdd49b4559 [ 98.206273][ T4958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.225865][ T4958] RSP: 002b:00007fbdd2c0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 98.234356][ T4958] RAX: ffffffffffffffda RBX: 00007fbdd4c3afa0 RCX: 00007fbdd49b4559 [ 98.242319][ T4958] RDX: 0000000000000008 RSI: 00002000000001c0 RDI: 0000000000000005 [ 98.250304][ T4958] RBP: 00007fbdd4a4bb50 R08: 0000000000000000 R09: 0000000000000000 [ 98.258267][ T4958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.266243][ T4958] R13: 00007fbdd4c3b038 R14: 00007fbdd4c3afa0 R15: 00007ffebec76ce8 [ 98.274220][ T4958] [ 99.628929][ T4973] netlink: 32 bytes leftover after parsing attributes in process `syz.1.195'. [ 99.675515][ T4977] FAULT_INJECTION: forcing a failure. [ 99.675515][ T4977] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 99.689352][ T4977] CPU: 0 PID: 4977 Comm: syz.4.197 Not tainted syzkaller #0 [ 99.696637][ T4977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 99.706691][ T4977] Call Trace: [ 99.709950][ T4977] [ 99.712863][ T4977] dump_stack_lvl+0x188/0x250 [ 99.717533][ T4977] ? show_regs_print_info+0x20/0x20 [ 99.722735][ T4977] ? load_image+0x410/0x410 [ 99.727222][ T4977] ? rcu_is_watching+0x11/0xa0 [ 99.731964][ T4977] should_fail+0x383/0x4b0 [ 99.736374][ T4977] prepare_alloc_pages+0x1e3/0x5b0 [ 99.741472][ T4977] __alloc_pages+0x11b/0x480 [ 99.746058][ T4977] ? zone_statistics+0x170/0x170 [ 99.750981][ T4977] ? rcu_lock_acquire+0x30/0x30 [ 99.755832][ T4977] ? alloc_pages+0x452/0x560 [ 99.760403][ T4977] __get_free_pages+0x8/0x30 [ 99.764972][ T4977] __tlb_remove_page_size+0x1f2/0x3f0 [ 99.770322][ T4977] unmap_page_range+0xfcf/0x2410 [ 99.775252][ T4977] unmap_vmas+0x131/0x250 [ 99.779564][ T4977] ? unmap_page_range+0x2410/0x2410 [ 99.784742][ T4977] ? __mutex_lock_common+0x435/0x2400 [ 99.790092][ T4977] ? exit_mm_release+0x16/0x30 [ 99.794851][ T4977] exit_mmap+0x3b9/0x640 [ 99.799086][ T4977] ? vm_brk+0x20/0x20 [ 99.803071][ T4977] ? uprobe_clear_state+0x2f6/0x460 [ 99.808250][ T4977] __mmput+0x115/0x390 [ 99.812300][ T4977] exit_mm+0x632/0x7b0 [ 99.816354][ T4977] ? perf_pmu_migrate_context+0xb70/0xb70 [ 99.822067][ T4977] ? do_exit+0x2100/0x2100 [ 99.826459][ T4977] ? __ia32_sys_timer_delete+0x40/0x40 [ 99.831891][ T4977] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 99.837330][ T4977] ? tty_audit_exit+0x149/0x1f0 [ 99.842159][ T4977] do_exit+0x5b8/0x2100 [ 99.846294][ T4977] ? put_task_struct+0x80/0x80 [ 99.851047][ T4977] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 99.857030][ T4977] ? _raw_spin_lock_irq+0xb7/0xf0 [ 99.862037][ T4977] do_group_exit+0x12c/0x2f0 [ 99.866621][ T4977] ? lockdep_hardirqs_on+0x94/0x140 [ 99.871802][ T4977] get_signal+0x7eb/0x12e0 [ 99.876204][ T4977] arch_do_signal_or_restart+0xe6/0x12a0 [ 99.881811][ T4977] ? __local_bh_enable_ip+0x136/0x1c0 [ 99.887158][ T4977] ? _local_bh_enable+0xa0/0xa0 [ 99.892003][ T4977] ? futex_exit_release+0x1c0/0x1c0 [ 99.897183][ T4977] ? get_sigframe_size+0x10/0x10 [ 99.902120][ T4977] ? __context_tracking_exit+0x4c/0x80 [ 99.907583][ T4977] ? exit_to_user_mode_loop+0x3b/0x130 [ 99.913020][ T4977] exit_to_user_mode_loop+0x9e/0x130 [ 99.918280][ T4977] exit_to_user_mode_prepare+0xee/0x180 [ 99.923801][ T4977] syscall_exit_to_user_mode+0x16/0x40 [ 99.929238][ T4977] do_syscall_64+0x58/0xa0 [ 99.933634][ T4977] ? clear_bhb_loop+0x30/0x80 [ 99.938286][ T4977] ? clear_bhb_loop+0x30/0x80 [ 99.942938][ T4977] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.948811][ T4977] RIP: 0033:0x7f96e54e4559 [ 99.953222][ T4977] Code: Unable to access opcode bytes at RIP 0x7f96e54e452f. [ 99.960565][ T4977] RSP: 002b:00007f96e373b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 99.968955][ T4977] RAX: 0000000000000001 RBX: 00007f96e576afa8 RCX: 00007f96e54e4559 [ 99.976904][ T4977] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f96e576afac [ 99.984849][ T4977] RBP: 00007f96e576afa0 R08: 0024ed806208e300 R09: 0000000000000000 [ 99.992813][ T4977] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 100.000766][ T4977] R13: 00007f96e576b038 R14: 00007ffcc9abdab0 R15: 00007ffcc9abdb98 [ 100.008754][ T4977] [ 100.319044][ T4984] FAULT_INJECTION: forcing a failure. [ 100.319044][ T4984] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.349357][ T4984] CPU: 0 PID: 4984 Comm: syz.3.199 Not tainted syzkaller #0 [ 100.356648][ T4984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 100.366682][ T4984] Call Trace: [ 100.369946][ T4984] [ 100.372856][ T4984] dump_stack_lvl+0x188/0x250 [ 100.377519][ T4984] ? show_regs_print_info+0x20/0x20 [ 100.382705][ T4984] ? load_image+0x410/0x410 [ 100.387226][ T4984] ? __lock_acquire+0x7d40/0x7d40 [ 100.392298][ T4984] should_fail+0x383/0x4b0 [ 100.396703][ T4984] _copy_from_user+0x2e/0x170 [ 100.401372][ T4984] iovec_from_user+0x142/0x370 [ 100.406148][ T4984] __import_iovec+0x70/0x490 [ 100.410723][ T4984] import_iovec+0x6f/0xa0 [ 100.415038][ T4984] do_readv+0x232/0x460 [ 100.419188][ T4984] ? do_iter_readv_writev+0x5f0/0x5f0 [ 100.424570][ T4984] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 100.430537][ T4984] ? lock_chain_count+0x20/0x20 [ 100.435368][ T4984] ? lockdep_hardirqs_on+0x94/0x140 [ 100.440554][ T4984] do_syscall_64+0x4c/0xa0 [ 100.444974][ T4984] ? clear_bhb_loop+0x30/0x80 [ 100.449630][ T4984] ? clear_bhb_loop+0x30/0x80 [ 100.454286][ T4984] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.460158][ T4984] RIP: 0033:0x7f7f5036e559 [ 100.464576][ T4984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.484165][ T4984] RSP: 002b:00007f7f4e5c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 100.492562][ T4984] RAX: ffffffffffffffda RBX: 00007f7f505f4fa0 RCX: 00007f7f5036e559 [ 100.500521][ T4984] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 100.508491][ T4984] RBP: 00007f7f50405b50 R08: 0000000000000000 R09: 0000000000000000 [ 100.516439][ T4984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.524390][ T4984] R13: 00007f7f505f5038 R14: 00007f7f505f4fa0 R15: 00007fff75b89e18 [ 100.532351][ T4984] [ 100.562223][ T4987] loop1: detected capacity change from 0 to 164 [ 100.925080][ T5004] loop1: detected capacity change from 0 to 256 [ 102.615874][ T5021] FAULT_INJECTION: forcing a failure. [ 102.615874][ T5021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.642314][ T5024] syz.1.213 uses obsolete (PF_INET,SOCK_PACKET) [ 102.672878][ T5021] CPU: 0 PID: 5021 Comm: syz.3.214 Not tainted syzkaller #0 [ 102.680178][ T5021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 102.690216][ T5021] Call Trace: [ 102.693476][ T5021] [ 102.696395][ T5021] dump_stack_lvl+0x188/0x250 [ 102.701060][ T5021] ? show_regs_print_info+0x20/0x20 [ 102.706238][ T5021] ? load_image+0x410/0x410 [ 102.710723][ T5021] ? __lock_acquire+0x7d40/0x7d40 [ 102.715732][ T5021] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 102.721365][ T5021] should_fail+0x383/0x4b0 [ 102.725787][ T5021] _copy_from_user+0x2e/0x170 [ 102.730463][ T5021] sock_do_ioctl+0x18c/0x320 [ 102.735048][ T5021] ? sock_show_fdinfo+0xb0/0xb0 [ 102.739882][ T5021] sock_ioctl+0x48a/0x700 [ 102.744203][ T5021] ? sock_poll+0x420/0x420 [ 102.748615][ T5021] ? bpf_lsm_file_ioctl+0x5/0x10 [ 102.753541][ T5021] ? security_file_ioctl+0x7c/0xa0 [ 102.758636][ T5021] ? sock_poll+0x420/0x420 [ 102.763070][ T5021] __se_sys_ioctl+0xfa/0x170 [ 102.767655][ T5021] do_syscall_64+0x4c/0xa0 [ 102.772078][ T5021] ? clear_bhb_loop+0x30/0x80 [ 102.776759][ T5021] ? clear_bhb_loop+0x30/0x80 [ 102.781420][ T5021] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.787294][ T5021] RIP: 0033:0x7f7f5036e559 [ 102.791692][ T5021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.811279][ T5021] RSP: 002b:00007f7f4e5c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.819683][ T5021] RAX: ffffffffffffffda RBX: 00007f7f505f4fa0 RCX: 00007f7f5036e559 [ 102.827657][ T5021] RDX: 0000000000000000 RSI: 0000000000008933 RDI: 0000000000000003 [ 102.835608][ T5021] RBP: 00007f7f50405b50 R08: 0000000000000000 R09: 0000000000000000 [ 102.843556][ T5021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.851505][ T5021] R13: 00007f7f505f5038 R14: 00007f7f505f4fa0 R15: 00007fff75b89e18 [ 102.859464][ T5021] [ 102.944660][ T5032] capability: warning: `syz.3.218' uses deprecated v2 capabilities in a way that may be insecure [ 103.002553][ T5035] FAULT_INJECTION: forcing a failure. [ 103.002553][ T5035] name failslab, interval 1, probability 5, space 0, times 97 [ 103.070663][ T5035] CPU: 0 PID: 5035 Comm: syz.1.219 Not tainted syzkaller #0 [ 103.077957][ T5035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.088034][ T5035] Call Trace: [ 103.091309][ T5035] [ 103.094398][ T5035] dump_stack_lvl+0x188/0x250 [ 103.099065][ T5035] ? show_regs_print_info+0x20/0x20 [ 103.104247][ T5035] ? load_image+0x410/0x410 [ 103.108730][ T5035] ? __might_sleep+0xf0/0xf0 [ 103.113296][ T5035] ? __lock_acquire+0x7d40/0x7d40 [ 103.118300][ T5035] ? rcu_lock_acquire+0x30/0x30 [ 103.123131][ T5035] should_fail+0x383/0x4b0 [ 103.127550][ T5035] should_failslab+0x5/0x20 [ 103.132061][ T5035] slab_pre_alloc_hook+0x51/0xc0 [ 103.136996][ T5035] ? security_inode_alloc+0x30/0x110 [ 103.142262][ T5035] kmem_cache_alloc+0x3d/0x280 [ 103.147008][ T5035] security_inode_alloc+0x30/0x110 [ 103.152101][ T5035] inode_init_always+0x8e5/0xc90 [ 103.157021][ T5035] new_inode_pseudo+0x8e/0x210 [ 103.161769][ T5035] new_inode+0x25/0x1d0 [ 103.165910][ T5035] ? resv_map_alloc+0x1a6/0x2a0 [ 103.170742][ T5035] hugetlbfs_get_inode+0x78/0x510 [ 103.175751][ T5035] hugetlb_file_setup+0x249/0x6f0 [ 103.180764][ T5035] __se_sys_memfd_create+0x2e0/0x450 [ 103.186061][ T5035] ? __x64_sys_memfd_create+0x60/0x60 [ 103.191419][ T5035] ? lockdep_hardirqs_on+0x94/0x140 [ 103.196614][ T5035] do_syscall_64+0x4c/0xa0 [ 103.201069][ T5035] ? clear_bhb_loop+0x30/0x80 [ 103.205728][ T5035] ? clear_bhb_loop+0x30/0x80 [ 103.210401][ T5035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.216278][ T5035] RIP: 0033:0x7ff92f985559 [ 103.220672][ T5035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.240263][ T5035] RSP: 002b:00007ff92dbdc028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 103.248661][ T5035] RAX: ffffffffffffffda RBX: 00007ff92fc0bfa0 RCX: 00007ff92f985559 [ 103.256630][ T5035] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000000 [ 103.264579][ T5035] RBP: 00007ff92fa1cb50 R08: 0000000000000000 R09: 0000000000000000 [ 103.272546][ T5035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.280500][ T5035] R13: 00007ff92fc0c038 R14: 00007ff92fc0bfa0 R15: 00007ffe35b52528 [ 103.288483][ T5035] [ 104.623696][ T5049] loop0: detected capacity change from 0 to 512 [ 104.741667][ T5056] loop4: detected capacity change from 0 to 1024 [ 104.771704][ T5049] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 104.784080][ T5049] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 104.835994][ T5056] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.852609][ T5049] EXT4-fs (loop0): orphan cleanup on readonly fs [ 104.863883][ T5056] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.884941][ T5049] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #13: comm syz.0.226: iget: bad i_size value: 12154761577498 [ 105.017540][ T5056] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 3: comm syz.4.229: lblock 3 mapped to illegal pblock 3 (length 2) [ 105.033949][ T5049] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.226: couldn't read orphan inode 13 (err -117) [ 105.049101][ T5056] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 3: comm syz.4.229: lblock 3 mapped to illegal pblock 3 (length 2) [ 106.194596][ T5065] rxe_eth0 speed is unknown, defaulting to 1000 [ 106.288674][ T5049] EXT4-fs (loop0): mounted filesystem without journal. Opts: commit=0x0000000000000000,noblock_validity,user_xattr,,errors=continue. Quota mode: none. [ 106.326495][ T5049] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.226: dx entry: limit 65535 != root limit 120 [ 106.341301][ T5049] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.226: Corrupt directory, running e2fsck is recommended [ 106.935798][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 106.957588][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 108.210417][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.228358][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.307422][ T5079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.349136][ T5087] netlink: 'syz.3.239': attribute type 4 has an invalid length. [ 108.362137][ T5092] netlink: 'syz.3.239': attribute type 4 has an invalid length. [ 108.397809][ T5096] IPVS: lc: FWM 3 0x00000003 - no destination available [ 109.084644][ T5121] loop1: detected capacity change from 0 to 512 [ 109.209111][ T5121] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.320211][ T5121] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,norecovery,dioread_nolock,resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 109.428010][ T5121] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.584234][ T5137] netlink: 'syz.4.259': attribute type 21 has an invalid length. [ 109.756997][ T5143] loop4: detected capacity change from 0 to 512 [ 110.398897][ T5143] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=remount-ro,usrjquota=,sysvgroups,usrquota,. Quota mode: writeback. [ 110.468394][ T5143] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.529795][ T5143] EXT4-fs error (device loop4): ext4_lookup:1860: inode #12: comm syz.4.262: iget: bad i_size value: 2533274857506816 [ 110.620669][ T5143] EXT4-fs (loop4): Remounting filesystem read-only [ 110.825140][ T5168] loop4: detected capacity change from 0 to 2048 [ 110.895939][ T4964] loop4: p1 < > p4 [ 110.895939][ T4964] p4: [ 110.927861][ T4964] loop4: p4 size 722688 extends beyond EOD, truncated [ 110.958838][ T5168] loop4: p1 < > p4 [ 110.958838][ T5168] p4: [ 110.995115][ T5168] loop4: p4 size 722688 extends beyond EOD, truncated [ 111.066914][ T5176] rxe_eth0 speed is unknown, defaulting to 1000 [ 111.161006][ T5184] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 111.262008][ T5050] udevd[5050]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 111.274370][ T4964] udevd[4964]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 111.326554][ T5050] udevd[5050]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 111.361523][ T4964] udevd[4964]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 111.669551][ T5176] chnl_net:caif_netlink_parms(): no params data found [ 111.756907][ T5176] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.764193][ T5176] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.779805][ T5176] device bridge_slave_0 entered promiscuous mode [ 111.790137][ T5176] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.803913][ T5176] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.824301][ T5176] device bridge_slave_1 entered promiscuous mode [ 111.957766][ T5176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.985804][ T5176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.041178][ T5176] team0: Port device team_slave_0 added [ 112.055768][ T5176] team0: Port device team_slave_1 added [ 112.076640][ T5176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.090089][ T5176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.124374][ T5176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.140408][ T5176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.154893][ T5176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.167277][ T5227] program syz.3.285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.188001][ T5176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.229825][ T5229] loop4: detected capacity change from 0 to 512 [ 112.254748][ T5228] bond0: no command found in slaves file - use +ifname or -ifname [ 112.270767][ T5229] EXT4-fs (loop4): Ignoring removed bh option [ 112.303469][ T5176] device hsr_slave_0 entered promiscuous mode [ 112.588704][ T5176] device hsr_slave_1 entered promiscuous mode [ 112.597265][ T5229] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.287: corrupted in-inode xattr [ 112.610055][ T5176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.624136][ T5229] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.287: couldn't read orphan inode 15 (err -117) [ 112.632572][ T5176] Cannot create hsr debugfs directory [ 112.677954][ T5229] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,errors=continue,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 112.845477][ T5176] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 112.862071][ T5176] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 112.876236][ T5176] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 112.888268][ T5176] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.992696][ T5176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.015032][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.030180][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.046921][ T5176] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.060874][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.069158][ T1110] Bluetooth: hci5: command 0x0409 tx timeout [ 113.083740][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.093688][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.100801][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.127842][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.136170][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.153150][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.165648][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.172767][ T4313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.187754][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.196650][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.221109][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.239620][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.260820][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.277661][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.292817][ T5176] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.311573][ T5176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.328502][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.344040][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.352720][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.369321][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.386472][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.402335][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.568922][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.576416][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.596023][ T5176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.839673][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.855547][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.886620][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.896196][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.914373][ T5176] device veth0_vlan entered promiscuous mode [ 113.924389][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.937351][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.950813][ T5176] device veth1_vlan entered promiscuous mode [ 113.984112][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.999443][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.013719][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.023824][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.043202][ T5176] device veth0_macvtap entered promiscuous mode [ 114.059503][ T5176] device veth1_macvtap entered promiscuous mode [ 114.086428][ T5176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.104206][ T5176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.120298][ T5176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.138118][ T5176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.153702][ T5176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.165566][ T5176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.181070][ T5176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.195546][ T5176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.209956][ T5176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.223994][ T5176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.238865][ T5176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.249159][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.263569][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.273982][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.288930][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.307102][ T5176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.324499][ T5176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.335629][ T5176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.356897][ T5176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.373647][ T5176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.384385][ T5176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.401209][ T5176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.415249][ T5176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.430205][ T5176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.444186][ T5176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.458959][ T5176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.471140][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.487452][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.499401][ T5176] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.515591][ T5176] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.525873][ T5176] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.546125][ T5176] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.645532][ T5254] loop1: detected capacity change from 0 to 512 [ 114.668744][ T4276] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.717815][ T5258] FAULT_INJECTION: forcing a failure. [ 114.717815][ T5258] name failslab, interval 1, probability 5, space 0, times 96 [ 114.731142][ T5258] CPU: 0 PID: 5258 Comm: syz.0.293 Not tainted syzkaller #0 [ 114.738460][ T5258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 114.748526][ T5258] Call Trace: [ 114.751815][ T5258] [ 114.754751][ T5258] dump_stack_lvl+0x188/0x250 [ 114.759447][ T5258] ? show_regs_print_info+0x20/0x20 [ 114.764662][ T5258] ? load_image+0x410/0x410 [ 114.769192][ T5258] ? __lock_acquire+0x7d40/0x7d40 [ 114.774247][ T5258] should_fail+0x383/0x4b0 [ 114.778672][ T5258] should_failslab+0x5/0x20 [ 114.783172][ T5258] slab_pre_alloc_hook+0x51/0xc0 [ 114.788107][ T5258] __kmalloc_node_track_caller+0x68/0x3a0 [ 114.793851][ T5258] ? sock_wmalloc+0xa6/0x120 [ 114.798432][ T5258] ? __alloc_skb+0xf4/0x750 [ 114.802921][ T5258] ? sock_wmalloc+0xa6/0x120 [ 114.807501][ T5258] __alloc_skb+0x22c/0x750 [ 114.811906][ T5258] sock_wmalloc+0xa6/0x120 [ 114.816311][ T5258] unix_stream_connect+0x339/0xf80 [ 114.821417][ T5258] ? unix_bind+0x8f0/0x8f0 [ 114.825820][ T5258] __sys_connect+0x3cb/0x450 [ 114.830400][ T5258] ? __sys_connect_file+0x170/0x170 [ 114.835598][ T5258] __x64_sys_connect+0x76/0x80 [ 114.840358][ T5258] do_syscall_64+0x4c/0xa0 [ 114.844763][ T5258] ? clear_bhb_loop+0x30/0x80 [ 114.849430][ T5258] ? clear_bhb_loop+0x30/0x80 [ 114.854096][ T5258] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.859979][ T5258] RIP: 0033:0x7fbdd49b4559 [ 114.864382][ T5258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.883977][ T5258] RSP: 002b:00007fbdd2c0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 114.892383][ T5258] RAX: ffffffffffffffda RBX: 00007fbdd4c3afa0 RCX: 00007fbdd49b4559 [ 114.900343][ T5258] RDX: 000000000000006e RSI: 0000200000000200 RDI: 0000000000000003 [ 114.908302][ T5258] RBP: 00007fbdd4a4bb50 R08: 0000000000000000 R09: 0000000000000000 [ 114.916261][ T5258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.924223][ T5258] R13: 00007fbdd4c3b038 R14: 00007fbdd4c3afa0 R15: 00007ffebec76ce8 [ 114.932195][ T5258] [ 114.988854][ T4837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.038522][ T5262] netlink: 196 bytes leftover after parsing attributes in process `syz.4.294'. [ 115.050484][ T4837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.080774][ T5264] loop4: detected capacity change from 0 to 512 [ 115.082834][ T4276] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.109116][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.133103][ T5254] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.291: inode has both inline data and extents flags [ 115.138607][ T4839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.157168][ T26] Bluetooth: hci5: command 0x041b tx timeout [ 115.163472][ T5254] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.291: couldn't read orphan inode 15 (err -117) [ 115.190929][ T5254] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.206947][ T4276] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.236033][ T5264] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.296: iget: bad i_size value: 38620345925642 [ 115.244273][ T4839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.274227][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.295395][ T4459] kernel write not supported for file /sg0 (pid: 4459 comm: kworker/0:24) [ 115.335894][ T5264] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.296: couldn't read orphan inode 15 (err -117) [ 115.369505][ T5273] FAULT_INJECTION: forcing a failure. [ 115.369505][ T5273] name failslab, interval 1, probability 5, space 0, times 95 [ 115.410069][ T4276] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.435396][ T5264] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.462730][ T5273] CPU: 0 PID: 5273 Comm: syz.3.299 Not tainted syzkaller #0 [ 115.470064][ T5273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 115.480140][ T5273] Call Trace: [ 115.483418][ T5273] [ 115.486341][ T5273] dump_stack_lvl+0x188/0x250 [ 115.491020][ T5273] ? show_regs_print_info+0x20/0x20 [ 115.496213][ T5273] ? load_image+0x410/0x410 [ 115.500707][ T5273] ? __might_sleep+0xf0/0xf0 [ 115.505288][ T5273] ? __lock_acquire+0x7d40/0x7d40 [ 115.510306][ T5273] should_fail+0x383/0x4b0 [ 115.514716][ T5273] should_failslab+0x5/0x20 [ 115.519210][ T5273] slab_pre_alloc_hook+0x51/0xc0 [ 115.524144][ T5273] __kmalloc+0x6b/0x340 [ 115.528287][ T5273] ? tomoyo_encode+0x28a/0x550 [ 115.533039][ T5273] ? stack_trace_snprint+0xe0/0xe0 [ 115.538143][ T5273] tomoyo_encode+0x28a/0x550 [ 115.542728][ T5273] tomoyo_mount_permission+0x376/0x9b0 [ 115.548176][ T5273] ? ____kasan_slab_free+0xd5/0x110 [ 115.553365][ T5273] ? slab_free_freelist_hook+0xec/0x170 [ 115.558903][ T5273] ? tomoyo_get_name+0x520/0x520 [ 115.563868][ T5273] security_sb_mount+0x83/0xb0 [ 115.568629][ T5273] path_mount+0xb8/0xfe0 [ 115.572867][ T5273] ? user_path_at_empty+0x13e/0x190 [ 115.578055][ T5273] __se_sys_mount+0x2e3/0x3d0 [ 115.582724][ T5273] ? __x64_sys_mount+0xc0/0xc0 [ 115.587479][ T5273] ? lockdep_hardirqs_on+0x94/0x140 [ 115.592668][ T5273] ? __x64_sys_mount+0x1c/0xc0 [ 115.597422][ T5273] do_syscall_64+0x4c/0xa0 [ 115.601827][ T5273] ? clear_bhb_loop+0x30/0x80 [ 115.606492][ T5273] ? clear_bhb_loop+0x30/0x80 [ 115.611159][ T5273] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.617041][ T5273] RIP: 0033:0x7f7f5036e559 [ 115.621465][ T5273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.641062][ T5273] RSP: 002b:00007f7f4e5c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 115.649470][ T5273] RAX: ffffffffffffffda RBX: 00007f7f505f4fa0 RCX: 00007f7f5036e559 [ 115.657430][ T5273] RDX: 00002000000004c0 RSI: 0000200000000480 RDI: 0000000000000000 [ 115.665391][ T5273] RBP: 00007f7f50405b50 R08: 0000200000000580 R09: 0000000000000000 [ 115.673351][ T5273] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 115.681308][ T5273] R13: 00007f7f505f5038 R14: 00007f7f505f4fa0 R15: 00007fff75b89e18 [ 115.689284][ T5273] [ 116.006503][ T5295] loop5: detected capacity change from 0 to 2048 [ 116.146216][ T5295] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.414057][ T5305] ODEBUG: Out of memory. ODEBUG disabled [ 116.458058][ T5314] program syz.5.309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.875766][ T5333] program syz.5.315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.948929][ T4276] batman_adv: batadv0: Removing interface: gretap1 [ 117.013832][ T25] audit: type=1804 audit(1793605323.220:3): pid=5340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.318" name="bus" dev="ramfs" ino=36753 res=1 errno=0 [ 117.079155][ T25] audit: type=1804 audit(1793605323.250:4): pid=5340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.318" name="bus" dev="ramfs" ino=36753 res=1 errno=0 [ 117.218188][ T5317] Bluetooth: hci5: command 0x040f tx timeout [ 117.713197][ T5382] netlink: 16 bytes leftover after parsing attributes in process `syz.4.331'. [ 117.725024][ T5383] netlink: 'syz.1.330': attribute type 3 has an invalid length. [ 117.758927][ T5383] netlink: 'syz.1.330': attribute type 3 has an invalid length. [ 117.773498][ T5382] netlink: 16 bytes leftover after parsing attributes in process `syz.4.331'. [ 117.883818][ T5389] loop3: detected capacity change from 0 to 512 [ 117.928332][ T4459] kernel read not supported for file /kmsg (pid: 4459 comm: kworker/0:24) [ 118.226279][ T4276] device hsr_slave_0 left promiscuous mode [ 118.250832][ T4276] device hsr_slave_1 left promiscuous mode [ 118.262031][ T4276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.283466][ T4276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.317672][ T4276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.340800][ T4276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.369708][ T4276] device bridge_slave_1 left promiscuous mode [ 118.389308][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.444636][ T4276] device bridge_slave_0 left promiscuous mode [ 118.465474][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.535919][ T4276] device veth1_macvtap left promiscuous mode [ 118.561196][ T4276] device veth0_macvtap left promiscuous mode [ 118.577630][ T4276] device veth1_vlan left promiscuous mode [ 118.601887][ T4276] device veth0_vlan left promiscuous mode [ 118.669297][ T5424] loop4: detected capacity change from 0 to 164 [ 118.870548][ T5436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'. [ 118.924587][ T5439] loop3: detected capacity change from 0 to 128 [ 118.996907][ T5439] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.020906][ T5439] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.036705][ T5445] program syz.0.351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.215617][ T4276] team0 (unregistering): Port device team_slave_1 removed [ 119.243033][ T4276] team0 (unregistering): Port device team_slave_0 removed [ 119.275255][ T4276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.292401][ T4276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.301756][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 119.418289][ T4276] bond0 (unregistering): Released all slaves [ 119.856728][ T5476] FAULT_INJECTION: forcing a failure. [ 119.856728][ T5476] name failslab, interval 1, probability 5, space 0, times 94 [ 119.946127][ T5476] CPU: 0 PID: 5476 Comm: syz.4.363 Not tainted syzkaller #0 [ 119.953472][ T5476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 119.963545][ T5476] Call Trace: [ 119.966836][ T5476] [ 119.969784][ T5476] dump_stack_lvl+0x188/0x250 [ 119.974497][ T5476] ? show_regs_print_info+0x20/0x20 [ 119.979718][ T5476] ? load_image+0x410/0x410 [ 119.984254][ T5476] ? __might_sleep+0xf0/0xf0 [ 119.988869][ T5476] ? __lock_acquire+0x7d40/0x7d40 [ 119.993934][ T5476] should_fail+0x383/0x4b0 [ 119.998379][ T5476] should_failslab+0x5/0x20 [ 120.002896][ T5476] slab_pre_alloc_hook+0x51/0xc0 [ 120.007851][ T5476] ? __kernfs_new_node+0xe3/0x6b0 [ 120.012906][ T5476] kmem_cache_alloc+0x3d/0x280 [ 120.017696][ T5476] __kernfs_new_node+0xe3/0x6b0 [ 120.022575][ T5476] ? __lock_acquire+0x7d40/0x7d40 [ 120.027630][ T5476] ? kernfs_new_node+0x250/0x250 [ 120.032606][ T5476] ? kernfs_activate+0x1eb/0x210 [ 120.037574][ T5476] kernfs_new_node+0x148/0x250 [ 120.042377][ T5476] __kernfs_create_file+0x47/0x2e0 [ 120.047512][ T5476] sysfs_add_file_mode_ns+0x2d2/0x390 [ 120.052911][ T5476] internal_create_group+0x492/0xd00 [ 120.058222][ T5476] ? kobject_init+0x1c0/0x1c0 [ 120.062917][ T5476] ? sysfs_create_group+0x20/0x20 [ 120.067988][ T5476] blk_register_queue+0xdd/0x3a0 [ 120.072955][ T5476] device_add_disk+0x60f/0xde0 [ 120.077754][ T5476] md_alloc+0x80e/0xc10 [ 120.081931][ T5476] ? mddev_delayed_delete+0x30/0x30 [ 120.087153][ T5476] blk_request_module+0x26e/0x290 [ 120.092199][ T5476] blkdev_get_no_open+0x38/0x1d0 [ 120.097164][ T5476] blkdev_get_by_dev+0x77/0xa50 [ 120.102029][ T5476] ? __rwlock_init+0x140/0x140 [ 120.106816][ T5476] blkdev_open+0x128/0x2c0 [ 120.111261][ T5476] ? block_ioctl+0xf0/0xf0 [ 120.115696][ T5476] do_dentry_open+0x7f7/0xf90 [ 120.120391][ T5476] ? vfs_open+0x2b/0x80 [ 120.124567][ T5476] path_openat+0x2718/0x2fb0 [ 120.129198][ T5476] ? __kasan_slab_alloc+0xa9/0xc0 [ 120.134250][ T5476] ? do_filp_open+0x400/0x400 [ 120.138961][ T5476] do_filp_open+0x1df/0x400 [ 120.143485][ T5476] ? vfs_tmpfile+0x300/0x300 [ 120.148110][ T5476] ? _raw_spin_unlock+0x24/0x40 [ 120.152969][ T5476] ? alloc_fd+0x59e/0x650 [ 120.157321][ T5476] do_sys_openat2+0x14b/0x500 [ 120.162012][ T5476] ? __lock_acquire+0x7d40/0x7d40 [ 120.167053][ T5476] ? do_sys_open+0xe0/0xe0 [ 120.171477][ T5476] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 120.177450][ T5476] ? lock_chain_count+0x20/0x20 [ 120.182293][ T5476] __x64_sys_openat+0x135/0x160 [ 120.187135][ T5476] do_syscall_64+0x4c/0xa0 [ 120.191542][ T5476] ? clear_bhb_loop+0x30/0x80 [ 120.196240][ T5476] ? clear_bhb_loop+0x30/0x80 [ 120.200911][ T5476] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.206818][ T5476] RIP: 0033:0x7f96e54e4559 [ 120.211230][ T5476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.230831][ T5476] RSP: 002b:00007f96e373b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 120.239244][ T5476] RAX: ffffffffffffffda RBX: 00007f96e576afa0 RCX: 00007f96e54e4559 [ 120.247220][ T5476] RDX: 0000000000000002 RSI: 00002000000008c0 RDI: ffffffffffffff9c [ 120.255198][ T5476] RBP: 00007f96e557bb50 R08: 0000000000000000 R09: 0000000000000000 [ 120.263183][ T5476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.271164][ T5476] R13: 00007f96e576b038 R14: 00007f96e576afa0 R15: 00007ffcc9abdb98 [ 120.279135][ T5476] [ 120.526486][ T5515] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 120.692816][ T5523] FAULT_INJECTION: forcing a failure. [ 120.692816][ T5523] name failslab, interval 1, probability 5, space 0, times 94 [ 120.724364][ T5523] CPU: 0 PID: 5523 Comm: syz.3.376 Not tainted syzkaller #0 [ 120.731707][ T5523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 120.741790][ T5523] Call Trace: [ 120.745086][ T5523] [ 120.748025][ T5523] dump_stack_lvl+0x188/0x250 [ 120.752730][ T5523] ? show_regs_print_info+0x20/0x20 [ 120.757958][ T5523] ? load_image+0x410/0x410 [ 120.762481][ T5523] ? __might_sleep+0xf0/0xf0 [ 120.767086][ T5523] ? __lock_acquire+0x7d40/0x7d40 [ 120.772131][ T5523] should_fail+0x383/0x4b0 [ 120.776570][ T5523] should_failslab+0x5/0x20 [ 120.781084][ T5523] slab_pre_alloc_hook+0x51/0xc0 [ 120.786075][ T5523] __kmalloc+0x6b/0x340 [ 120.790242][ T5523] ? __list_lru_init+0xb6/0xac0 [ 120.795114][ T5523] __list_lru_init+0xb6/0xac0 [ 120.799824][ T5523] alloc_super+0x7b6/0x970 [ 120.804262][ T5523] ? kill_litter_super+0xa0/0xa0 [ 120.809215][ T5523] sget_fc+0x2d4/0x6f0 [ 120.813299][ T5523] ? kill_litter_super+0xa0/0xa0 [ 120.818252][ T5523] ? mqueue_get_tree+0xe0/0xe0 [ 120.823026][ T5523] get_tree_nodev+0x26/0x160 [ 120.827638][ T5523] vfs_get_tree+0x88/0x270 [ 120.832069][ T5523] fc_mount+0x18/0xa0 [ 120.836061][ T5523] mq_init_ns+0x39d/0x510 [ 120.840403][ T5523] copy_ipcs+0x2ea/0x4b0 [ 120.844666][ T5523] create_new_namespaces+0x212/0x700 [ 120.849989][ T5523] unshare_nsproxy_namespaces+0x116/0x160 [ 120.855729][ T5523] ksys_unshare+0x4f6/0x8e0 [ 120.860253][ T5523] ? __lock_acquire+0x7d40/0x7d40 [ 120.865303][ T5523] ? sighand_ctor+0x40/0x40 [ 120.869819][ T5523] ? lock_chain_count+0x20/0x20 [ 120.874692][ T5523] ? syscall_enter_from_user_mode+0x21/0x70 [ 120.880618][ T5523] __x64_sys_unshare+0x34/0x40 [ 120.885397][ T5523] do_syscall_64+0x4c/0xa0 [ 120.889822][ T5523] ? clear_bhb_loop+0x30/0x80 [ 120.894511][ T5523] ? clear_bhb_loop+0x30/0x80 [ 120.899202][ T5523] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.905106][ T5523] RIP: 0033:0x7f7f5036e559 [ 120.909531][ T5523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.929148][ T5523] RSP: 002b:00007f7f4e5c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 120.937577][ T5523] RAX: ffffffffffffffda RBX: 00007f7f505f4fa0 RCX: 00007f7f5036e559 [ 120.945564][ T5523] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068000600 [ 120.953546][ T5523] RBP: 00007f7f50405b50 R08: 0000000000000000 R09: 0000000000000000 [ 120.961526][ T5523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.969512][ T5523] R13: 00007f7f505f5038 R14: 00007f7f505f4fa0 R15: 00007fff75b89e18 [ 120.977513][ T5523] [ 121.134707][ T5538] loop0: detected capacity change from 0 to 1024 [ 121.171882][ T5541] loop1: detected capacity change from 0 to 512 [ 121.192486][ T5476] ------------[ cut here ]------------ [ 121.202418][ T5476] WARNING: CPU: 0 PID: 5476 at block/genhd.c:554 device_add_disk+0x8d6/0xde0 [ 121.211527][ T5538] EXT4-fs (loop0): inodes count not valid: 0 vs 32 [ 121.243225][ T5476] Modules linked in: [ 121.263521][ T5476] CPU: 0 PID: 5476 Comm: syz.4.363 Not tainted syzkaller #0 [ 121.303859][ T5476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 121.325431][ T5541] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,. Quota mode: writeback. [ 121.352707][ T5541] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.366705][ T5476] RIP: 0010:device_add_disk+0x8d6/0xde0 [ 121.390130][ T5476] Code: 04 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 8f 03 00 00 8b 33 48 c7 c7 a0 fc 70 8d e8 41 43 37 00 eb 05 e8 9a c6 a5 fd <0f> 0b 41 bd 01 00 00 00 44 89 e8 48 83 c4 50 5b 41 5c 41 5d 41 5e [ 121.476490][ T5476] RSP: 0018:ffffc9000316f6f8 EFLAGS: 00010246 [ 121.500477][ T5476] RAX: ffffffff83d366f6 RBX: ffff888060390400 RCX: 0000000000080000 [ 121.510970][ T5476] RDX: ffffc9000ccc1000 RSI: 000000000007ffff RDI: 0000000000080000 [ 121.522812][ T5476] RBP: 0000000000000009 R08: ffffc9000316f587 R09: 1ffff9200062deb0 [ 121.534937][ T5476] R10: dffffc0000000000 R11: fffff5200062deb1 R12: ffff88805eb20c00 [ 121.574210][ T5476] R13: ffff888060390550 R14: dffffc0000000000 R15: ffff88805eb20c00 [ 121.597687][ T5476] FS: 00007f96e373b6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 121.616764][ T5476] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.630587][ T5476] CR2: 00007fd65c126000 CR3: 0000000064c5e000 CR4: 00000000003506f0 [ 121.642583][ T5476] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 121.653426][ T5476] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 121.662668][ T5476] Call Trace: [ 121.666110][ T5476] [ 121.669986][ T5476] md_alloc+0x80e/0xc10 [ 121.676659][ T5476] ? mddev_delayed_delete+0x30/0x30 [ 121.691119][ T5476] blk_request_module+0x26e/0x290 [ 121.701955][ T5476] blkdev_get_no_open+0x38/0x1d0 [ 121.712603][ T5476] blkdev_get_by_dev+0x77/0xa50 [ 121.723180][ T5476] ? __rwlock_init+0x140/0x140 [ 121.731974][ T5476] blkdev_open+0x128/0x2c0 [ 121.736566][ T5476] ? block_ioctl+0xf0/0xf0 [ 121.743430][ T5476] do_dentry_open+0x7f7/0xf90 [ 121.755581][ T5476] ? vfs_open+0x2b/0x80 [ 121.760104][ T5476] path_openat+0x2718/0x2fb0 [ 121.765841][ T5476] ? __kasan_slab_alloc+0xa9/0xc0 [ 121.771281][ T5476] ? do_filp_open+0x400/0x400 [ 121.776139][ T5476] do_filp_open+0x1df/0x400 [ 121.783116][ T5476] ? vfs_tmpfile+0x300/0x300 [ 121.792391][ T5476] ? _raw_spin_unlock+0x24/0x40 [ 121.803129][ T5476] ? alloc_fd+0x59e/0x650 [ 121.812073][ T5476] do_sys_openat2+0x14b/0x500 [ 121.822422][ T5476] ? __lock_acquire+0x7d40/0x7d40 [ 121.833299][ T5476] ? do_sys_open+0xe0/0xe0 [ 121.841927][ T5476] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 121.855050][ T5476] ? lock_chain_count+0x20/0x20 [ 121.868053][ T5476] __x64_sys_openat+0x135/0x160 [ 121.873029][ T5476] do_syscall_64+0x4c/0xa0 [ 121.877833][ T5476] ? clear_bhb_loop+0x30/0x80 [ 121.882666][ T5476] ? clear_bhb_loop+0x30/0x80 [ 121.888496][ T5476] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.894540][ T5476] RIP: 0033:0x7f96e54e4559 [ 121.899279][ T5476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.919607][ T5476] RSP: 002b:00007f96e373b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 121.932699][ T5476] RAX: ffffffffffffffda RBX: 00007f96e576afa0 RCX: 00007f96e54e4559 [ 121.954132][ T5476] RDX: 0000000000000002 RSI: 00002000000008c0 RDI: ffffffffffffff9c [ 121.973391][ T5476] RBP: 00007f96e557bb50 R08: 0000000000000000 R09: 0000000000000000 [ 121.990499][ T5476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.008704][ T5476] R13: 00007f96e576b038 R14: 00007f96e576afa0 R15: 00007ffcc9abdb98 [ 122.032417][ T5476] [ 122.038926][ T5476] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 122.046222][ T5476] CPU: 0 PID: 5476 Comm: syz.4.363 Not tainted syzkaller #0 [ 122.053505][ T5476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 122.063551][ T5476] Call Trace: [ 122.066822][ T5476] [ 122.069741][ T5476] dump_stack_lvl+0x188/0x250 [ 122.074418][ T5476] ? show_regs_print_info+0x20/0x20 [ 122.079635][ T5476] ? load_image+0x410/0x410 [ 122.084143][ T5476] panic+0x2f8/0x850 [ 122.088033][ T5476] ? bpf_jit_dump+0xd0/0xd0 [ 122.092535][ T5476] ? device_add_disk+0x8d6/0xde0 [ 122.097463][ T5476] __warn+0x248/0x2b0 [ 122.101439][ T5476] ? device_add_disk+0x8d6/0xde0 [ 122.106365][ T5476] report_bug+0x1b9/0x2e0 [ 122.110688][ T5476] handle_bug+0x3a/0x70 [ 122.114831][ T5476] exc_invalid_op+0x16/0x40 [ 122.119322][ T5476] asm_exc_invalid_op+0x16/0x20 [ 122.124173][ T5476] RIP: 0010:device_add_disk+0x8d6/0xde0 [ 122.129709][ T5476] Code: 04 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 8f 03 00 00 8b 33 48 c7 c7 a0 fc 70 8d e8 41 43 37 00 eb 05 e8 9a c6 a5 fd <0f> 0b 41 bd 01 00 00 00 44 89 e8 48 83 c4 50 5b 41 5c 41 5d 41 5e [ 122.149306][ T5476] RSP: 0018:ffffc9000316f6f8 EFLAGS: 00010246 [ 122.155361][ T5476] RAX: ffffffff83d366f6 RBX: ffff888060390400 RCX: 0000000000080000 [ 122.163322][ T5476] RDX: ffffc9000ccc1000 RSI: 000000000007ffff RDI: 0000000000080000 [ 122.171299][ T5476] RBP: 0000000000000009 R08: ffffc9000316f587 R09: 1ffff9200062deb0 [ 122.179258][ T5476] R10: dffffc0000000000 R11: fffff5200062deb1 R12: ffff88805eb20c00 [ 122.187219][ T5476] R13: ffff888060390550 R14: dffffc0000000000 R15: ffff88805eb20c00 [ 122.195186][ T5476] ? device_add_disk+0x8d6/0xde0 [ 122.200123][ T5476] ? device_add_disk+0x8d6/0xde0 [ 122.205055][ T5476] md_alloc+0x80e/0xc10 [ 122.209200][ T5476] ? mddev_delayed_delete+0x30/0x30 [ 122.214389][ T5476] blk_request_module+0x26e/0x290 [ 122.219403][ T5476] blkdev_get_no_open+0x38/0x1d0 [ 122.224332][ T5476] blkdev_get_by_dev+0x77/0xa50 [ 122.229170][ T5476] ? __rwlock_init+0x140/0x140 [ 122.233926][ T5476] blkdev_open+0x128/0x2c0 [ 122.238334][ T5476] ? block_ioctl+0xf0/0xf0 [ 122.242739][ T5476] do_dentry_open+0x7f7/0xf90 [ 122.247404][ T5476] ? vfs_open+0x2b/0x80 [ 122.251549][ T5476] path_openat+0x2718/0x2fb0 [ 122.256145][ T5476] ? __kasan_slab_alloc+0xa9/0xc0 [ 122.261163][ T5476] ? do_filp_open+0x400/0x400 [ 122.265839][ T5476] do_filp_open+0x1df/0x400 [ 122.270336][ T5476] ? vfs_tmpfile+0x300/0x300 [ 122.274925][ T5476] ? _raw_spin_unlock+0x24/0x40 [ 122.279765][ T5476] ? alloc_fd+0x59e/0x650 [ 122.284088][ T5476] do_sys_openat2+0x14b/0x500 [ 122.288751][ T5476] ? __lock_acquire+0x7d40/0x7d40 [ 122.293775][ T5476] ? do_sys_open+0xe0/0xe0 [ 122.298179][ T5476] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 122.304154][ T5476] ? lock_chain_count+0x20/0x20 [ 122.308999][ T5476] __x64_sys_openat+0x135/0x160 [ 122.313838][ T5476] do_syscall_64+0x4c/0xa0 [ 122.318241][ T5476] ? clear_bhb_loop+0x30/0x80 [ 122.322952][ T5476] ? clear_bhb_loop+0x30/0x80 [ 122.327618][ T5476] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.333508][ T5476] RIP: 0033:0x7f96e54e4559 [ 122.337911][ T5476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.357506][ T5476] RSP: 002b:00007f96e373b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 122.365912][ T5476] RAX: ffffffffffffffda RBX: 00007f96e576afa0 RCX: 00007f96e54e4559 [ 122.373871][ T5476] RDX: 0000000000000002 RSI: 00002000000008c0 RDI: ffffffffffffff9c [ 122.381830][ T5476] RBP: 00007f96e557bb50 R08: 0000000000000000 R09: 0000000000000000 [ 122.389785][ T5476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.397747][ T5476] R13: 00007f96e576b038 R14: 00007f96e576afa0 R15: 00007ffcc9abdb98 [ 122.405739][ T5476] [ 122.408951][ T5476] Kernel Offset: disabled [ 122.413600][ T5476] Rebooting in 86400 seconds..