last executing test programs: 2m17.046578824s ago: executing program 0 (id=735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f00000012c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x7ee, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x7da, 0x0, @opaque="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"}}}, 0x7fc) 2m16.392678226s ago: executing program 0 (id=743): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x26c, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x138, 0x2, [@TCA_BPF_ACT={0x134, 0x1, [@m_simple={0x130, 0x1, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x10, 0x6, 0xce6b, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x24aa7000, 0x7, 0x8, 0x80000001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x876f, 0x96, 0x3, 0x40, 0x6}}, @TCA_DEF_DATA={0xa, 0x3, '#%@:/\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x6, 0xffffffffffffffff, 0x8, 0x5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x8d, 0x6, "9209be6ac2eb68ec44c03ad03ccfd5c9aff753ae7cef446e9abdc2009e245df08fa6cf4268a294d87a0186536d0c2458f0e060a1f4dfab45c4880975e027452a67ff09dc0cda2d51a28cf3834caa7aa64015620886e3c095d93664d00664ede4714e13cbf7a559b27b8e74bc4f58e2418eea9cf3966ac82d194b992695034782aaece271e1d165a896"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xf8, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xf}}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_ACT={0xc8, 0x2, [@m_vlan={0xc4, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0x95, 0x6, "19a3953d78f1563aa910b5ab1c345795a9c5fdb59e62e379663a63a2410c14f25058686dc1f35162d1d61c9ef33f76b41308aa85786484bbc8df8cd7d6f79c7a8afa3f46c074bafc6b8e22601dba54f54cf84920df14f7fa820566ce9a7c7c8be49f40bb7b2f0cebdd8fb8e3d463ca5ef3a3b42ee142b1b380dd4e27c637e5eed7dc23e893606abf117d1645a88f80bd00"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x8014) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2m16.25091527s ago: executing program 0 (id=747): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x8910, &(0x7f0000000940)={'syztnl0\x00', 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x7}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000000000)="247c9b06c6cf", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="a3", 0x1}], 0x1}}], 0x2, 0x4040881) unshare(0x8040480) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64], 0x24}}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x80002}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 2m16.142507789s ago: executing program 0 (id=750): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000080)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@barrier_val={'barrier', 0x3d, 0x9d}}]}, 0xff, 0x55b, &(0x7f0000000640)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0x0, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000f58818d78c660e677df8dc905b90242b7c528a076d2f6a004000000000000f000", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x2]}) 2m15.673078039s ago: executing program 0 (id=754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f00000012c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x7ee, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x7da, 0x0, @opaque="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"}}}, 0x7fc) 2m15.14021489s ago: executing program 0 (id=758): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000005c0)={{0x2, 0xee01, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x1f}, 0x6, 0x1fffe00000000, 0x0, 0x0, 0x0, 0x0, 0x9}) 2m14.851707869s ago: executing program 32 (id=758): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000005c0)={{0x2, 0xee01, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x1f}, 0x6, 0x1fffe00000000, 0x0, 0x0, 0x0, 0x0, 0x9}) 1m43.706738413s ago: executing program 2 (id=1003): r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000000}, 0x8080) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000001a00)={@multicast, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x4, 0x14, 0x64, 0x0, 0x2, 0x2b, 0x0, @multicast2, @empty}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r6, 0x5433, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r5, 0x89a3, &(0x7f0000000200)='bridge0\x00') 1m42.659972392s ago: executing program 2 (id=1006): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="280000002a0003050000000000000000180000800c"], 0x28}], 0x1}, 0x14008010) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) 1m42.538736993s ago: executing program 2 (id=1008): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xbc, 0x19, 0x1, 0x70bd28, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xffffffffffffffff, 0xc, 0x8, 0x106, 0x3c, 0xffffffffffffffff, 0x200000000000, 0x4000000000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffff, 0x0, 0x1}, [@tmpl={0x4}]}, 0xbc}}, 0x0) 1m42.450191308s ago: executing program 2 (id=1011): socket(0x2, 0x80805, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000000bc0)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x6042, 0x106) creat(&(0x7f0000000a00)='./bus\x00', 0xb) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x2) 1m41.963121751s ago: executing program 2 (id=1018): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc815}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, 0x0, 0x4011) 1m39.741047761s ago: executing program 2 (id=1034): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0xf0, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0xffff, 0x0, 0x0, 0xa, 0x80, 0x80, 0x11}, {@in6=@loopback, 0x4d2, 0x32}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {0x0, 0x0, 0xfffffff7}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x4000810) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0xffff, 0x0, 0x0, 0xa, 0x80, 0x80, 0x11}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x32}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 1m39.355271777s ago: executing program 33 (id=1034): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0xf0, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0xffff, 0x0, 0x0, 0xa, 0x80, 0x80, 0x11}, {@in6=@loopback, 0x4d2, 0x32}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {0x0, 0x0, 0xfffffff7}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x4000810) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0xffff, 0x0, 0x0, 0xa, 0x80, 0x80, 0x11}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x32}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 39.096310297s ago: executing program 1 (id=1472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x68}}, 0x50) 39.090016148s ago: executing program 1 (id=1474): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1001}, 0x2}}, 0x10) 38.991605935s ago: executing program 1 (id=1479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 35.851107502s ago: executing program 1 (id=1513): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000040)='./file0/../file0\x00') mount(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x2000000, 0x0) 35.760243677s ago: executing program 1 (id=1515): bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x100) write(r0, &(0x7f0000000000)='3', 0x4e) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) kexec_load(0x2, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x12000}], 0x0) 35.421999005s ago: executing program 1 (id=1519): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000004600), 0x42, 0x0) sendfile(r0, r0, 0x0, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) 35.27818243s ago: executing program 34 (id=1519): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000004600), 0x42, 0x0) sendfile(r0, r0, 0x0, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) 4.09338438s ago: executing program 6 (id=1767): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_pid(r0, 0x0, 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r1, 0x0, 0x0) pwrite64(r1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0000011304"], 0x7) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x9, 0x85, 0x19, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x10, 0xd, 0x7}}) 4.058130886s ago: executing program 4 (id=1769): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) 3.830626715s ago: executing program 7 (id=1771): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt(r0, 0x11b, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="12"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0xffff0001}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x442000, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd60fc414a00343c0020010000000000000000000000000001fe8000000000000000000000002b07b86ce30e91a7000000c910ff020000000000000000000000efa394010002030000000000000010a43381c2e26d0c00000000000000"], 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000200)={0x0, 0xffffffc9, &(0x7f0000000140)=[{&(0x7f0000000080)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100070000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd1b0700000000000000155037", 0x55}], 0x1}, 0x40000) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001001000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b702000002000000850000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000500000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_bt_hci(r2, 0x400448c9, 0x0) write(r2, &(0x7f0000000280)="1000000011000000000000000000000000000000000001", 0x17) close(r1) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl(0xffffffffffffffff, 0x89e2, &(0x7f0000000600)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000001980)={{r1, &(0x7f00000000c0)='/dev/ppp\x00', 0x2081, &(0x7f00000001c0)={@align=0x3, {0x0, 0xb}}, 0x5, &(0x7f0000000200), &(0x7f0000000240)=0x10}, 0x4, &(0x7f0000001900)=[{0x3, 0x6, &(0x7f0000000280)='\x00', &(0x7f0000000640)="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", 0x1000, 0x4}, {0x0, 0x6, &(0x7f0000001640)='/dev/ppp\x00', &(0x7f0000001680)="b3da38095fc4fe38cb7a4e3a8dffa06abf28aad54d8b936a33047ed3e08a7289373aaf237a55e420c2e8ba3894aafc0f8221a8cc500d1ad7c29a04c8fda4a1c69a0bb3ddd3ed9bcc198cb21122a850f46476d89bbd9c0d6ab8fadc7cc686d747bf5d292446ee9c609e2a36d959e4efc1d8ee88a224a97d62f2b40b468b1425bbeea41d52524ad19ee85bc337bff795ece61b2e8991a1fe93c1fed6c2d215a998f3", 0xa1}, {0x3, 0x6, &(0x7f0000001740)='-@\x00', &(0x7f0000001780)="d9e89a4e901cbdb38c8f452766ac783b09299a1773f121aefef3fdcee18c6569dd2d27173a9d8ce091b6539581dbd469733a9406aab996889d7bf50da4dcdca6c1409257af97f9676f2ed094a12a6f8be6f5cdb47f664818b66866436c2941a975a200b2741214ff3b142cde1acce0b4d76bb026d9b3f341060ac73a1998e98468007732a11a0fb1a567b8f807c13272fcf68ab49f45888bf663825c8026efb2504c037589a4304746a32699e1d4e5faa42ebff6f44761fb871dcdf546fbd9af62c9f55aee990ff0e2c359d92e03442284a42e6a96d25406ee114b0f5550594b9a795ab4bd2abb4b9a7473b5", 0xec, 0x12}, {0x3, 0x1, &(0x7f0000001880)='&)!@.&\x00', &(0x7f00000018c0)="548a4c250b5b2386a9c2517efc49c0f932b760cd580f22954e10f492cb11", 0x1e, 0x30}]}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x8, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="120000001c0000010011223344556614"], 0x22) 3.80274401s ago: executing program 4 (id=1772): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1300}, [@printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x23, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 3.691612599s ago: executing program 7 (id=1773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r6, &(0x7f0000000940)=[{{&(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x0, &(0x7f0000000900)}, 0x8}], 0x4c, 0x100, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x40004) 3.589948286s ago: executing program 4 (id=1776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a78000000060a010400000000000000000a0000010900010073797a31000000004c0004802800018007000100637400001c00020005000300010000000800014000000009080002400000000720000180070001006374000014000280080002400000000a08000140000000010900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x1, 0x1}, &(0x7f0000000080)=0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0xfffffffffffffd6a) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r4, &(0x7f0000000080)="0b000300010001", 0x7) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0xe, 0x0, &(0x7f0000000200)="1d5fe8317ca952a2ba4bfee0f003", 0x0, 0x200020fe, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) unshare(0x8000400) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback, 0xa}, 0x1c) 3.489496774s ago: executing program 6 (id=1778): ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x11) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x48, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller0\x00'}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="01"], 0x20}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000500)='testpacketdata', 0xe, 0xf000000, &(0x7f0000000600)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.324297812s ago: executing program 6 (id=1780): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x8910, &(0x7f0000000940)={'syztnl0\x00', 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x7}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000000000)="247c9b06c6cf", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="a3", 0x1}], 0x1}}], 0x2, 0x4040881) unshare(0x8040480) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x80002}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 3.038820831s ago: executing program 5 (id=1782): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) 3.017748294s ago: executing program 3 (id=1783): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r3, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x8, 0x32}, 0x0, @in=@private=0xa0100ee, 0x0, 0x0, 0x0, 0xb7, 0x7fffffff, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24040044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6400000010004b04", @ANYRES32=0x0, @ANYBLOB="0000000018100200300012800b00010067656e65766500002000028008000a00e000000214000700ff010000000000000000000000000001140003"], 0x64}}, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffef010}, {0x6}]}, 0x10) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed", 0x3}], 0x1}}], 0x1, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000b80)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@rdma_dest={0x18, 0x114, 0x2, {0x7, 0xb64f}}, @rdma_dest={0x18, 0x114, 0x2, {0x8, 0x80}}], 0x30}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2.882435797s ago: executing program 5 (id=1784): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt(r0, 0x11b, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="12"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0xffff0001}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x442000, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd60fc414a00343c0020010000000000000000000000000001fe8000000000000000000000002b07b86ce30e91a7000000c910ff020000000000000000000000efa394010002030000000000000010a43381c2e26d0c00000000000000"], 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000200)={0x0, 0xffffffc9, &(0x7f0000000140)=[{&(0x7f0000000080)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100070000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd1b0700000000000000155037", 0x55}], 0x1}, 0x40000) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001001000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b702000002000000850000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000500000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_bt_hci(r2, 0x400448c9, 0x0) write(r2, &(0x7f0000000280)="1000000011000000000000000000000000000000000001", 0x17) close(r1) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl(0xffffffffffffffff, 0x89e2, &(0x7f0000000600)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000001980)={{r1, &(0x7f00000000c0)='/dev/ppp\x00', 0x2081, &(0x7f00000001c0)={@align=0x3, {0x0, 0xb}}, 0x5, &(0x7f0000000200), &(0x7f0000000240)=0x10}, 0x4, &(0x7f0000001900)=[{0x3, 0x6, &(0x7f0000000280)='\x00', &(0x7f0000000640)="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", 0x1000, 0x4}, {0x0, 0x6, &(0x7f0000001640)='/dev/ppp\x00', &(0x7f0000001680)="b3da38095fc4fe38cb7a4e3a8dffa06abf28aad54d8b936a33047ed3e08a7289373aaf237a55e420c2e8ba3894aafc0f8221a8cc500d1ad7c29a04c8fda4a1c69a0bb3ddd3ed9bcc198cb21122a850f46476d89bbd9c0d6ab8fadc7cc686d747bf5d292446ee9c609e2a36d959e4efc1d8ee88a224a97d62f2b40b468b1425bbeea41d52524ad19ee85bc337bff795ece61b2e8991a1fe93c1fed6c2d215a998f3", 0xa1}, {0x3, 0x6, &(0x7f0000001740)='-@\x00', &(0x7f0000001780)="d9e89a4e901cbdb38c8f452766ac783b09299a1773f121aefef3fdcee18c6569dd2d27173a9d8ce091b6539581dbd469733a9406aab996889d7bf50da4dcdca6c1409257af97f9676f2ed094a12a6f8be6f5cdb47f664818b66866436c2941a975a200b2741214ff3b142cde1acce0b4d76bb026d9b3f341060ac73a1998e98468007732a11a0fb1a567b8f807c13272fcf68ab49f45888bf663825c8026efb2504c037589a4304746a32699e1d4e5faa42ebff6f44761fb871dcdf546fbd9af62c9f55aee990ff0e2c359d92e03442284a42e6a96d25406ee114b0f5550594b9a795ab4bd2abb4b9a7473b5", 0xec, 0x12}, {0x3, 0x1, &(0x7f0000001880)='&)!@.&\x00', &(0x7f00000018c0)="548a4c250b5b2386a9c2517efc49c0f932b760cd580f22954e10f492cb11", 0x1e, 0x30}]}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x8, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="120000001c0000010011223344556614"], 0x22) 2.86354143s ago: executing program 3 (id=1785): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000000)='\x00\x00\x00\x00') r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000100)="05000000010001", 0x7) read(r3, &(0x7f0000000400)=""/128, 0x80) write(r3, &(0x7f0000000140)="0d000000010001", 0x7) read(r3, &(0x7f0000000400)=""/128, 0x80) write(r3, &(0x7f0000000180)="33000000080001020304050601", 0xd) read(r3, &(0x7f0000000400)=""/128, 0x80) write(r3, &(0x7f0000000200)='4\x00\x00\x00', 0x4) write(r3, &(0x7f0000000280)='4\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', 0xd) read(r3, &(0x7f0000000400)=""/128, 0x80) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@int=0x3, 0x4) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000180)=0x3ff, 0x4) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0xfffffffffffffea6) close(r2) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000d00)=ANY=[@ANYBLOB="280000001200010026bd7000fedbdf2521000000", @ANYRES32=0x0, @ANYBLOB="002101000000000008002e0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x22045054}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002700090025bd7800fddbdf2510000000140001000a"], 0x28}}, 0x4000080) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r5, 0x1, 0x22, 0x0, &(0x7f0000000080)=0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001002cbd7000fcdbdf251d0102000800090039bab70d1a8b9ad62c4bef4d34e5ccf2a71b9776a8c81753c3a4f3bfdb6f9c74b7c46b07c132777e2b112245409cf28f", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x30004016) r8 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00ed16f4a0c0fb6e0000040000651b8000005c", @ANYRES32, @ANYRES64=r8, @ANYRES32=r6, @ANYRES32=r0, @ANYRESOCT=r8], 0x50) setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) 2.75070016s ago: executing program 5 (id=1786): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}, @TCA_STAB={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x400, 0x6, 0xfffd, 0x4}, {0x40, 0x1, 0x3, 0x7f, 0x7ff, 0x16800000}, 0xcd04, 0xfffffffe, 0x1526}}, @TCA_TBF_BURST={0x8, 0x6, 0xad}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x54815}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.62850823s ago: executing program 7 (id=1787): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1300}, [@printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x23, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 2.610801904s ago: executing program 4 (id=1788): socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, &(0x7f0000000280)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000540)='\x03\x00\x00\x00IV\xb6-\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\xfaC\x93\xc0S\xaf\f\x1a\fEik\x86\x15\xab\x909\xf8i\xc0\xa7\xa9\xb1\xbe\xc7\x1d\xe0\x18\xd2\xbaG|\xd5fC\x8d\t\x00/I\x8b\xbf\x94\xf4\x96[us\x96\x90\x8d\x9d\xfb\xdc\x7f0&\xab\x17@)\xf1\xc3Q\xb2M :\xaa\x99G\xdd\xa9E6A]@>\f\xb1n\x1a\x8c\xc6e7{@\x90\x8fz\xfcf\x88\x15A\x0e\xbf\xb8\xff\xa8\xb9\xab\x83>\xf9I0\xdd\x93#\x1e\x00\xed#\xc9\xd0Uk\xa6b\xa6/\x15\x92\xc6,p\xc9\xce\xe1\xc3\xd5\x89Lw\x17\x16\x18\xddh\xc8\x81w\x1e\x7f\xc7\x16\xe5\x96\x03\t\xc3\x94\xc7\xeb\xd6.\xfa\xb3\xe0\x1f\xa9\x19\xfaS\x1f[T\x1e\xc5nX\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=0\xc3\xbc\xfd\xce~\xe3\xcaO\"\xbb\xd1\x15\xf2y\xb91\x1d\xab\xeaO\x19\rH4\xc2\xe4\x922~K^K`55\xb7\xd1\n\xba\xb7,\xdb\xc2\x86\xc30bnc\x06\x06q\xe9\x97\fHA<\x94`\xf7H?\x86\xb8C9\b\x18vFWRdNee\xf1A\x06\x8f\x97\x99\xa5A\xfa\x94IfB\xa9\xf5\xd8\x83\xc5\b\x0eL\\Z\x80](f6D\x1a\xf7si\xa4l\xa8\x0f\xcc\xa1\xef\x1bCq\x0e\xf87\xfc\xce\x96cm\x83\x05S\x01Zj`dP:d\xba\x02\x14\xaa\x051\xd7\xff\x00\x00\x00\x00\x00\x00\x00Rx\x9b\x04\x1f\x8fA\t<\x99/\'tk\xcb\xd7|\x0f\xc9m\x95\x9a\n\v&\xca\xcd\x11\xec\xfd\x17a$.\xe9\x14\x8f\n\x15\x8d\rJ\x99\x8a\x87\x81\xc4S\x85L\xe5w\xa1\xbf\x91Q&6\x8e\xd1\x02\x19K\xd3\xab\xe5\xdc\xac\x05\x8dQ\xf4\x1aa\x86\xbc6\\\x06\xdf\x84\x00+F|\xa7\xc4\xab\x00G\xd0\x14N+\xf9\x84i?C\x81\x8eu\xd3\xcbg\xb7\a\xd9\x9a*\x17>\xac\x9d\x9d\xf6\t\xd8b\x19\x8a\x1e&\xde\x87-%\xf3\x8a2L\x1cQ2\f\x94\xf7\xf9\xadI\xedU\xabr\xe2\xe1\xc2{\b\xa8\xc2\n4\x0f\'\xed\xcc\xd7qG\xa7p\x8ct\xe3/l\v\x93\x8a\x95R\xd6\x19L\x85\x80\x18\x15\xcezn\xa8,i\xf1\x91@\xc0\xb1\a\xfd\xec\x95>\b(\xfa~O\xfd\xe2\a6b\x97\xc6$?;\x8eJ/P\x9d\x17\xaaU\xc4\b\xe8\xda\x96\xab\xc9\x16,W\x06KD\x93R\x98\xf4K\xe1\v\xd7\xa3\xd1#\xdb\xa0\xa6}\x91\xc5\xe3\x1e\xbd\x8f\xa1`\xcc\xadl$B/\xab\xd2RS\xf7T\xcd\xa7\xb5b\x83T\x17o\x9c|\x97T^\xa4}\xf6X\xee\xc5\xfd\xad\x0eBl\xc0\x92,n\x8b\x0eV\x90\xd8q\x1f\xbb\xf7\xd9\x85\xb4\'m\xcf%\x00\xe3\xa7}`\xbf]?\xa3\x00o\xa7\xb6\x112\xc4W\xba\xca\x95\xedEcz%\x13\xb8\x03d\xc2\x00O\xd4\xbdi\x96\x16x\xce\xd4a\xe6\xcc\x8aL,\xa8\x9e\x83\xc4*d\x17\xf9>\x95\x01J{dv\xe5\xff\xb2B\xca\xc5HR\xa7\xa4&\x06\x04\xf2\xac\x8e\x1d\xccI\xceF\x19\xc2\xb27\xdbSm\x01\xa1\x19\x89E\xf6E\x1d\xcc') read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @mss={0x2, 0xffff485d}, @mss={0x2, 0x1}, @window={0x3, 0x6, 0xff81}, @sack_perm, @timestamp, @mss={0x2, 0x2}, @mss={0x2, 0xffff}, @mss={0x2, 0x9}], 0x9) sendto$inet(r1, &(0x7f0000000000)="b8", 0x1, 0x2400a044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, 0x0, &(0x7f0000000080)) sendto$inet(r1, &(0x7f0000000380), 0x0, 0x1, 0x0, 0x0) 2.04410566s ago: executing program 3 (id=1789): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002380)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f", @ANYRES8=0x0], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) close(0x3) pipe(0x0) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x4004) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000023c0)=""/21, 0x15, 0x40, &(0x7f0000002400)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000001c0)=ANY=[], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x100009, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(0xffffffffffffffff, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/31, 0x1f) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x80000001, 0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="1b000000000000000000000058dc5997b1d9cd91", @ANYRES32=0x0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000060000e4ff0100000b000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100410000009500000000000000cd00020000000000bf91000000000000b7020000030000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x5c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4b}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r5}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000022c0)={&(0x7f0000000080)="5d1e07bf5f3fd6251b933699010c0a0421f41b4c9bec", &(0x7f0000000180)=""/57, &(0x7f00000002c0)="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", &(0x7f00000012c0)="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", 0x5, r4, 0x4}, 0x38) 1.562541473s ago: executing program 6 (id=1790): ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x11) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x48, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller0\x00'}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="01"], 0x20}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000500)='testpacketdata', 0xe, 0xf000000, &(0x7f0000000600)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.555806404s ago: executing program 4 (id=1791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) 1.502344143s ago: executing program 7 (id=1792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20050800) 1.416237758s ago: executing program 5 (id=1793): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400014, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x5, 0x7f, 0x9, 0x1000003, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xfffffd09, 0x4, 0x3, 0x8, 0xfffffffd, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x80, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x27, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x5, 0x56, 0x645ec805, 0x4, 0x3, 0xfffffffb, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x5ffee5c7, 0x8, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x5, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0x7, 0x3ff, 0x85f, 0x8, 0x7, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x9, 0x8001, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0xb, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x9, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0x5072f7e2, 0x1000, 0x1, 0x58ba, 0x5, 0x59b1, 0x40005, 0x120, 0x3, 0x5, 0x5, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x5, 0x8, 0x2, 0x3ff, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x5, 0x859, 0xaedb, 0x7, {0x7, 0x2, 0xd, 0x8, 0x204, 0x95a5}, {0x8, 0x2, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4009, 0x0, 0xfffffffe, 0x10, 0x5, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0xc, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0xc, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x200043, 0x1, 0x7, 0x38095a10, 0x6, 0x8333f, 0x7, 0xc8a, 0x6, 0x1, 0x3, 0x7f, 0x7, 0x8, 0x100, 0x8003, 0x8, 0x4, 0x9, 0x81, 0x5, 0x4, 0x4, 0x0, 0x7f, 0x9, 0x6, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x8004, 0x1ff, 0x4, 0x4, 0x5b3a, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x4000001, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x7, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x2002b36, 0x60f63eb, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x5, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x1, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x6, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdfb, 0x30d, 0xfff, 0x1, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3c}, 0x80, &(0x7f0000000080)}, 0x804) 1.376219824s ago: executing program 3 (id=1794): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '/dev/video#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x1ff, 0x6, 0x7f, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x689}], 0x2}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0) 918.307373ms ago: executing program 6 (id=1795): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r3, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x8, 0x32}, 0x0, @in=@private=0xa0100ee, 0x0, 0x0, 0x0, 0xb7, 0x7fffffff, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24040044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6400000010004b04", @ANYRES32=0x0, @ANYBLOB="0000000018100200300012800b00010067656e65766500002000028008000a00e000000214000700ff010000000000000000000000000001140003"], 0x64}}, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffef010}, {0x6}]}, 0x10) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed", 0x3}], 0x1}}], 0x1, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000b80)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@rdma_dest={0x18, 0x114, 0x2, {0x7, 0xb64f}}, @rdma_dest={0x18, 0x114, 0x2, {0x8, 0x80}}], 0x30}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 434.062326ms ago: executing program 7 (id=1796): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt(r0, 0x11b, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="12"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0xffff0001}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x442000, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd60fc414a00343c0020010000000000000000000000000001fe8000000000000000000000002b07b86ce30e91a7000000c910ff020000000000000000000000efa394010002030000000000000010a43381c2e26d0c00000000000000"], 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000200)={0x0, 0xffffffc9, &(0x7f0000000140)=[{&(0x7f0000000080)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100070000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd1b0700000000000000155037", 0x55}], 0x1}, 0x40000) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001001000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b702000002000000850000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000500000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_bt_hci(r2, 0x400448c9, 0x0) write(r2, &(0x7f0000000280)="1000000011000000000000000000000000000000000001", 0x17) close(r1) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl(0xffffffffffffffff, 0x89e2, &(0x7f0000000600)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000001980)={{r1, &(0x7f00000000c0)='/dev/ppp\x00', 0x2081, &(0x7f00000001c0)={@align=0x3, {0x0, 0xb}}, 0x5, &(0x7f0000000200), &(0x7f0000000240)=0x10}, 0x4, &(0x7f0000001900)=[{0x3, 0x6, &(0x7f0000000280)='\x00', &(0x7f0000000640)="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", 0x1000, 0x4}, {0x0, 0x6, &(0x7f0000001640)='/dev/ppp\x00', &(0x7f0000001680)="b3da38095fc4fe38cb7a4e3a8dffa06abf28aad54d8b936a33047ed3e08a7289373aaf237a55e420c2e8ba3894aafc0f8221a8cc500d1ad7c29a04c8fda4a1c69a0bb3ddd3ed9bcc198cb21122a850f46476d89bbd9c0d6ab8fadc7cc686d747bf5d292446ee9c609e2a36d959e4efc1d8ee88a224a97d62f2b40b468b1425bbeea41d52524ad19ee85bc337bff795ece61b2e8991a1fe93c1fed6c2d215a998f3", 0xa1}, {0x3, 0x6, &(0x7f0000001740)='-@\x00', &(0x7f0000001780)="d9e89a4e901cbdb38c8f452766ac783b09299a1773f121aefef3fdcee18c6569dd2d27173a9d8ce091b6539581dbd469733a9406aab996889d7bf50da4dcdca6c1409257af97f9676f2ed094a12a6f8be6f5cdb47f664818b66866436c2941a975a200b2741214ff3b142cde1acce0b4d76bb026d9b3f341060ac73a1998e98468007732a11a0fb1a567b8f807c13272fcf68ab49f45888bf663825c8026efb2504c037589a4304746a32699e1d4e5faa42ebff6f44761fb871dcdf546fbd9af62c9f55aee990ff0e2c359d92e03442284a42e6a96d25406ee114b0f5550594b9a795ab4bd2abb4b9a7473b5", 0xec, 0x12}, {0x3, 0x1, &(0x7f0000001880)='&)!@.&\x00', &(0x7f00000018c0)="548a4c250b5b2386a9c2517efc49c0f932b760cd580f22954e10f492cb11", 0x1e, 0x30}]}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x8, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="120000001c0000010011223344556614"], 0x22) 274.616963ms ago: executing program 4 (id=1797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r6, &(0x7f0000000940)=[{{&(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x0, &(0x7f0000000900)}, 0x8}], 0x4c, 0x100, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x40004) 261.026465ms ago: executing program 7 (id=1798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a78000000060a010400000000000000000a0000010900010073797a31000000004c0004802800018007000100637400001c00020005000300010000000800014000000009080002400000000720000180070001006374000014000280080002400000000a08000140000000010900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x1, 0x1}, &(0x7f0000000080)=0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0xfffffffffffffd6a) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r4, &(0x7f0000000080)="0b000300010001", 0x7) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0xe, 0x0, &(0x7f0000000200)="1d5fe8317ca952a2ba4bfee0f003", 0x0, 0x200020fe, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) unshare(0x8000400) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback, 0xa}, 0x1c) 227.049191ms ago: executing program 6 (id=1799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000000)='\x00\x00\x00\x00') r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000100)="05000000010001", 0x7) read(r3, &(0x7f0000000400)=""/128, 0x80) write(r3, &(0x7f0000000140)="0d000000010001", 0x7) read(r3, &(0x7f0000000400)=""/128, 0x80) write(r3, &(0x7f0000000180)="33000000080001020304050601", 0xd) read(r3, &(0x7f0000000400)=""/128, 0x80) write(r3, &(0x7f0000000200)='4\x00\x00\x00', 0x4) write(r3, &(0x7f0000000280)='4\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', 0xd) read(r3, &(0x7f0000000400)=""/128, 0x80) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@int=0x3, 0x4) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000180)=0x3ff, 0x4) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0xfffffffffffffea6) close(r2) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000d00)=ANY=[@ANYBLOB="280000001200010026bd7000fedbdf2521000000", @ANYRES32=0x0, @ANYBLOB="002101000000000008002e0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x22045054}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002700090025bd7800fddbdf2510000000140001000a"], 0x28}}, 0x4000080) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r5, 0x1, 0x22, 0x0, &(0x7f0000000080)=0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001002cbd7000fcdbdf251d0102000800090039bab70d1a8b9ad62c4bef4d34e5ccf2a71b9776a8c81753c3a4f3bfdb6f9c74b7c46b07c132777e2b112245409cf28f", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x30004016) r8 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00ed16f4a0c0fb6e0000040000651b8000005c", @ANYRES32, @ANYRES64=r8, @ANYRES32=r6, @ANYRES32=r0, @ANYRESOCT=r8], 0x50) setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) 217.856753ms ago: executing program 3 (id=1800): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) 54.37763ms ago: executing program 3 (id=1801): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x8910, &(0x7f0000000940)={'syztnl0\x00', 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x7}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000000000)="247c9b06c6cf", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="a3", 0x1}], 0x1}}], 0x2, 0x4040881) unshare(0x8040480) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800"], 0x24}}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x80002}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 52.508661ms ago: executing program 5 (id=1802): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1300}, [@printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x23, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 0s ago: executing program 5 (id=1803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}, @TCA_STAB={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x400, 0x6, 0xfffd, 0x4}, {0x40, 0x1, 0x3, 0x7f, 0x7ff, 0x16800000}, 0xcd04, 0xfffffffe, 0x1526}}, @TCA_TBF_BURST={0x8, 0x6, 0xad}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x54815}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. [ 58.280377][ T4171] cgroup: Unknown subsys name 'net' [ 58.419153][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.926731][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.359725][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 61.418360][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 61.466129][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 61.534441][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 61.580525][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 61.589996][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.597344][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.606131][ T4185] device bridge_slave_0 entered promiscuous mode [ 61.617448][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.624680][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.632622][ T4186] device bridge_slave_0 entered promiscuous mode [ 61.655953][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.663203][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.670986][ T4185] device bridge_slave_1 entered promiscuous mode [ 61.682042][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.689640][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.697964][ T4186] device bridge_slave_1 entered promiscuous mode [ 61.732432][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.765644][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.789600][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.817008][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.824347][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.832073][ T4187] device bridge_slave_0 entered promiscuous mode [ 61.841528][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.871950][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.879416][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.887756][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.909224][ T4186] team0: Port device team_slave_0 added [ 61.929875][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.937095][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.945840][ T4194] device bridge_slave_0 entered promiscuous mode [ 61.959691][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.966885][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.976143][ T4194] device bridge_slave_1 entered promiscuous mode [ 61.990056][ T4186] team0: Port device team_slave_1 added [ 61.996504][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.003800][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.011624][ T4184] device bridge_slave_0 entered promiscuous mode [ 62.021278][ T4185] team0: Port device team_slave_0 added [ 62.029352][ T4185] team0: Port device team_slave_1 added [ 62.044225][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.060513][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.068572][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.077126][ T4184] device bridge_slave_1 entered promiscuous mode [ 62.098474][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.128568][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.147828][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.157958][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.165288][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.191721][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.209632][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.216650][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.242967][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.262658][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.270100][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.297266][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.315852][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.322985][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.349190][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.368888][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.380298][ T4187] team0: Port device team_slave_0 added [ 62.403001][ T4187] team0: Port device team_slave_1 added [ 62.411901][ T4194] team0: Port device team_slave_0 added [ 62.421360][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.452320][ T4194] team0: Port device team_slave_1 added [ 62.468196][ T4184] team0: Port device team_slave_0 added [ 62.506207][ T4184] team0: Port device team_slave_1 added [ 62.523756][ T4186] device hsr_slave_0 entered promiscuous mode [ 62.530684][ T4186] device hsr_slave_1 entered promiscuous mode [ 62.538946][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.546039][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.572670][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.585675][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.592750][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.619428][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.641467][ T4185] device hsr_slave_0 entered promiscuous mode [ 62.648522][ T4185] device hsr_slave_1 entered promiscuous mode [ 62.655452][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.663980][ T4185] Cannot create hsr debugfs directory [ 62.685772][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.692761][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.718807][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.739528][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.746903][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.773956][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.787052][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.794122][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.820591][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.836421][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.844010][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.870683][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.930991][ T4187] device hsr_slave_0 entered promiscuous mode [ 62.938577][ T4187] device hsr_slave_1 entered promiscuous mode [ 62.946435][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.954555][ T4187] Cannot create hsr debugfs directory [ 63.027571][ T4184] device hsr_slave_0 entered promiscuous mode [ 63.034486][ T4184] device hsr_slave_1 entered promiscuous mode [ 63.041018][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.049134][ T4184] Cannot create hsr debugfs directory [ 63.063930][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 63.070765][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 63.110057][ T4194] device hsr_slave_0 entered promiscuous mode [ 63.117830][ T4194] device hsr_slave_1 entered promiscuous mode [ 63.124534][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.132086][ T4194] Cannot create hsr debugfs directory [ 63.143043][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 63.152980][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 63.153002][ T4173] Bluetooth: hci4: command 0x0409 tx timeout [ 63.356042][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.369291][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.378474][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.390060][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.434064][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.448459][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.458047][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.474641][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.541127][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.550894][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.579100][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.597159][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.649737][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.660737][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.670863][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.681923][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.708404][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.741271][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.782289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.792696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.804439][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.811813][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.827032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.835792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.850970][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.860737][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.872545][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.887066][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.895063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.905914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.915723][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.923053][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.931862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.965305][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.975335][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.984235][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.991305][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.000473][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.010568][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.019387][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.026489][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.034499][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.045570][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.073618][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.082248][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.092282][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.103727][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.110944][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.119265][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.128093][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.139701][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.148250][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.177531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.187603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.206813][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.218652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.228789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.243567][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.257949][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.270162][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.292078][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.304236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.315814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.325572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.334659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.345099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.355845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.365337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.390753][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.411396][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.431001][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.444535][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.458523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.466888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.475490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.483604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.492164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.501226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.510562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.519724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.529643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.555792][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.569389][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.593850][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.601170][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.620972][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.644073][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.652657][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.659813][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.668321][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.680139][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.689574][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.696708][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.704869][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.713990][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.722326][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.729621][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.737658][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.747499][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.774602][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.789854][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.802700][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.814552][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.824388][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.865930][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.874574][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.884328][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.895309][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.906480][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.915592][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.923763][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.931510][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.940695][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.949964][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.959182][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.967537][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.976605][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.988346][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.013929][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.025127][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.038038][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.053513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.064955][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.080934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.089943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.109513][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.121196][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.142858][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.154911][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 65.158556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.161495][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 65.170228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.186234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.194279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.206717][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.227802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.235566][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 65.242130][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 65.250206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.259287][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 65.266781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.280809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.290197][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.297424][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.305620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.315008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.323893][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.330937][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.339335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.348150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.385134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.405467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.420040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.429129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.439256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.448093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.456172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.464269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.499798][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.515626][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.528931][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.537667][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.551395][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.567065][ T4185] device veth0_vlan entered promiscuous mode [ 65.575284][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.584388][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.592302][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.601519][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.611180][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.620061][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.629887][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.638473][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.649738][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.658617][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.669676][ T4186] device veth0_vlan entered promiscuous mode [ 65.689212][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.701384][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.714268][ T4185] device veth1_vlan entered promiscuous mode [ 65.721397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.732861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.741684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.750591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.758247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.770363][ T4186] device veth1_vlan entered promiscuous mode [ 65.797238][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.818519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.829295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.841411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.850232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.859954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.914776][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.925842][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.949302][ T4185] device veth0_macvtap entered promiscuous mode [ 65.962118][ T4187] device veth0_vlan entered promiscuous mode [ 65.984823][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.992878][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.001404][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.012031][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.021361][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.030941][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.040205][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.049482][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.059827][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.074787][ T4185] device veth1_macvtap entered promiscuous mode [ 66.088095][ T4186] device veth0_macvtap entered promiscuous mode [ 66.102424][ T4184] device veth0_vlan entered promiscuous mode [ 66.119172][ T4187] device veth1_vlan entered promiscuous mode [ 66.132272][ T4186] device veth1_macvtap entered promiscuous mode [ 66.140012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.148920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.158005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.166956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.175492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.185242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.196016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.204209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.218419][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.230364][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.248804][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.258494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.267832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.284642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.302641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.311777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.321016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.329279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.340819][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.350140][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.359689][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.370123][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.392853][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.406856][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.419804][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.451941][ T4184] device veth1_vlan entered promiscuous mode [ 66.460005][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.469050][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.484069][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.499019][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.521286][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.534541][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.545873][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.555253][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.564545][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.573720][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.587406][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.596850][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.605875][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.615706][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.627273][ T4187] device veth0_macvtap entered promiscuous mode [ 66.703308][ T4187] device veth1_macvtap entered promiscuous mode [ 66.737368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.749232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.759681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.788863][ T4184] device veth0_macvtap entered promiscuous mode [ 66.850583][ T4184] device veth1_macvtap entered promiscuous mode [ 66.860887][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.863562][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.880323][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.887339][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.898824][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.909584][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.921327][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.933377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.941623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.950487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.959968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.970483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.979509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.989626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.011930][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.023846][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.034907][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.045707][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.055793][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.066911][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.079422][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.090789][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.101413][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.112131][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.123004][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.134576][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.161153][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.170680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.181045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.190453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.201640][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.212512][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.222656][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.234731][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.234768][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 67.249311][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.251075][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 67.262698][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.279234][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.290105][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.298974][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.312274][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.322538][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 67.327089][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.329616][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 67.339152][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.344199][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 67.353085][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.384762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.392864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.402780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.412731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.421550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.430524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.439579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.450608][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.459886][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.473770][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.482524][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.503217][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.511176][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.524254][ T4194] device veth0_vlan entered promiscuous mode [ 67.560929][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.608644][ T4235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.619637][ T4235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.630010][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.642199][ T4194] device veth1_vlan entered promiscuous mode [ 67.746222][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.754842][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.795456][ T4194] device veth0_macvtap entered promiscuous mode [ 67.831747][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.841517][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.851072][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.859990][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.872210][ T4194] device veth1_macvtap entered promiscuous mode [ 67.875102][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.895479][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.906543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.920963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.934767][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.948560][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.970420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.003605][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.015582][ T4235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.021193][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.033655][ T4235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.035783][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.053003][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.064229][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.075848][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.086057][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.097158][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.110929][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.135410][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.149188][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.159636][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.173240][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.186833][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.198022][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.208971][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.219519][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.230454][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.246999][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.257977][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.271979][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.315248][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.326617][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.347942][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.357348][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.366814][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.376428][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.473045][ T4280] device syzkaller0 entered promiscuous mode [ 68.627056][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.650934][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.673722][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.687309][ T4293] tipc: Started in network mode [ 68.693841][ T4293] tipc: Node identity 9a0932b5ee57, cluster identity 4711 [ 68.701303][ T4293] tipc: Enabled bearer , priority 0 [ 68.710006][ T4293] device syzkaller0 entered promiscuous mode [ 68.720088][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.731793][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.739262][ T4293] tipc: Resetting bearer [ 68.754044][ T4292] tipc: Resetting bearer [ 68.765061][ T4292] tipc: Disabling bearer [ 68.777230][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.880277][ T4294] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 69.067170][ T4304] device syzkaller0 entered promiscuous mode [ 69.312151][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 69.330560][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 69.394378][ T4232] Bluetooth: hci4: command 0x0419 tx timeout [ 69.408263][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 69.428368][ T4232] Bluetooth: hci0: command 0x0419 tx timeout [ 69.485885][ T4320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21'. [ 69.491714][ T4321] tipc: Started in network mode [ 69.505868][ T4321] tipc: Node identity 4ae43a3618b6, cluster identity 4711 [ 69.509910][ T4320] netlink: 44 bytes leftover after parsing attributes in process `syz.2.21'. [ 69.518112][ T4321] tipc: Enabled bearer , priority 0 [ 69.540627][ T4321] device syzkaller0 entered promiscuous mode [ 69.697716][ T4325] netlink: 68 bytes leftover after parsing attributes in process `syz.1.24'. [ 69.711830][ T4325] Zero length message leads to an empty skb [ 69.727896][ T4324] tipc: Resetting bearer [ 69.753435][ T4319] tipc: Resetting bearer [ 69.782854][ T4319] tipc: Disabling bearer [ 69.821414][ T4297] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 69.928831][ T4330] device syzkaller0 entered promiscuous mode [ 70.211725][ T4352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'. [ 70.222500][ T4352] netlink: 44 bytes leftover after parsing attributes in process `syz.2.35'. [ 70.516434][ T4364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'. [ 70.627398][ T4367] device syzkaller0 entered promiscuous mode [ 70.886713][ T4379] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 70.926445][ T4383] device syzkaller0 entered promiscuous mode [ 70.981810][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.025986][ T4394] device syzkaller0 entered promiscuous mode [ 71.290513][ T4414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 71.344184][ T4414] netlink: 44 bytes leftover after parsing attributes in process `syz.0.53'. [ 71.573904][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.580538][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.648350][ T4431] device syzkaller0 entered promiscuous mode [ 71.796081][ T4439] device syzkaller0 entered promiscuous mode [ 71.993758][ T4453] device syzkaller0 entered promiscuous mode [ 72.008231][ T4449] device syzkaller0 entered promiscuous mode [ 72.024591][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.258394][ T4464] xt_recent: hitcount (2147483650) is larger than allowed maximum (255) [ 72.348226][ T4471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'. [ 72.366831][ T4471] netlink: 44 bytes leftover after parsing attributes in process `syz.2.71'. [ 72.385291][ T4429] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 72.431857][ T4468] sctp: [Deprecated]: syz.3.70 (pid 4468) Use of int in max_burst socket option deprecated. [ 72.431857][ T4468] Use struct sctp_assoc_value instead [ 72.703828][ T4476] device syzkaller0 entered promiscuous mode [ 72.771471][ T4493] device syzkaller0 entered promiscuous mode [ 72.901035][ T4489] device syzkaller0 entered promiscuous mode [ 72.958261][ T4190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.280551][ T4524] sctp: [Deprecated]: syz.2.85 (pid 4524) Use of int in max_burst socket option deprecated. [ 73.280551][ T4524] Use struct sctp_assoc_value instead [ 73.427499][ T4543] device syzkaller0 entered promiscuous mode [ 73.453159][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.570628][ T4548] device syzkaller0 entered promiscuous mode [ 73.827379][ T4568] tipc: Started in network mode [ 73.832388][ T4568] tipc: Node identity aea4d043861d, cluster identity 4711 [ 73.850263][ T4568] tipc: Enabled bearer , priority 0 [ 73.886817][ T4568] device syzkaller0 entered promiscuous mode [ 73.911278][ T4568] tipc: Resetting bearer [ 73.936228][ T4567] tipc: Resetting bearer [ 73.956828][ T4567] tipc: Disabling bearer [ 74.027344][ T4583] device syzkaller0 entered promiscuous mode [ 74.042944][ T4583] simple: /dev/video#_0 [ 74.047435][ T4583] simple: /dev/video#_0 [ 74.051827][ T4583] simple: /dev/video#_0 [ 74.055608][ T4585] device syzkaller0 entered promiscuous mode [ 74.056046][ T4583] simple: /dev/video#_0 [ 74.066238][ T4583] simple: /dev/video#_0 [ 74.070546][ T4583] simple: /dev/video#_0 [ 74.074975][ T4583] simple: /dev/video#_0 [ 74.079150][ T4583] simple: /dev/video#_0 [ 74.083486][ T4583] simple: /dev/video#_0 [ 74.087671][ T4583] simple: /dev/video#_0 [ 74.091855][ T4583] simple: /dev/video#_0 [ 74.096093][ T4583] simple: /dev/video#_0 [ 74.100267][ T4583] simple: /dev/video#_0 [ 74.104487][ T4583] simple: /dev/video#_0 [ 74.108680][ T4583] simple: /dev/video#_0 [ 74.112869][ T4583] simple: /dev/video#_0 [ 74.117112][ T4583] simple: /dev/video#_0 [ 74.121303][ T4583] simple: /dev/video#_0 [ 74.125532][ T4583] simple: /dev/video#_0 [ 74.129812][ T4583] simple: /dev/video#_0 [ 74.134206][ T4583] simple: /dev/video#_0 [ 74.138388][ T4583] simple: /dev/video#_0 [ 74.142576][ T4583] simple: /dev/video#_0 [ 74.146828][ T4583] simple: /dev/video#_0 [ 74.151008][ T4583] simple: /dev/video#_0 [ 74.155235][ T4583] simple: /dev/video#_0 [ 74.159678][ T4583] simple: /dev/video#_0 [ 74.164006][ T4583] simple: /dev/video#_0 [ 74.168185][ T4583] simple: /dev/video#_0 [ 74.172392][ T4583] simple: /dev/video#_0 [ 74.176605][ T4583] simple: /dev/video#_0 [ 74.180773][ T4583] simple: /dev/video#_0 [ 74.184980][ T4583] TC_ACT_REPEAT abuse ? [ 74.193432][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.764547][ T4619] __nla_validate_parse: 7 callbacks suppressed [ 74.764566][ T4619] netlink: 68 bytes leftover after parsing attributes in process `syz.1.124'. [ 75.101235][ T4645] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 75.220220][ T4656] device syzkaller0 entered promiscuous mode [ 75.381685][ T4663] netlink: 68 bytes leftover after parsing attributes in process `syz.4.143'. [ 75.487232][ T4671] device syzkaller0 entered promiscuous mode [ 75.497113][ T4673] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 75.510452][ T4613] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 75.736365][ T4687] device syzkaller0 entered promiscuous mode [ 75.771217][ T4690] device syzkaller0 entered promiscuous mode [ 75.820973][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.852852][ T4697] netlink: 68 bytes leftover after parsing attributes in process `syz.0.158'. [ 75.871373][ T4696] tipc: Enabled bearer , priority 0 [ 75.889534][ T4696] device syzkaller0 entered promiscuous mode [ 75.930958][ T4696] tipc: Resetting bearer [ 75.964203][ T4695] tipc: Resetting bearer [ 75.989966][ T4695] tipc: Disabling bearer [ 76.093184][ T4707] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 76.257827][ T4720] device syzkaller0 entered promiscuous mode [ 76.351959][ T4722] netlink: 68 bytes leftover after parsing attributes in process `syz.0.170'. [ 76.590534][ T4743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'. [ 76.627581][ T4745] tipc: Enabled bearer , priority 0 [ 76.646168][ T4745] device syzkaller0 entered promiscuous mode [ 76.662177][ T4745] tipc: Resetting bearer [ 76.687449][ T4744] tipc: Resetting bearer [ 76.711526][ T4744] tipc: Disabling bearer [ 76.767286][ T4753] device syzkaller0 entered promiscuous mode [ 76.902275][ T4761] device syzkaller0 entered promiscuous mode [ 76.911196][ T4704] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 77.077864][ T4768] netlink: 68 bytes leftover after parsing attributes in process `syz.4.186'. [ 77.272079][ T4781] device syzkaller0 entered promiscuous mode [ 77.440732][ T4787] device syzkaller0 entered promiscuous mode [ 77.660104][ T4805] netlink: 68 bytes leftover after parsing attributes in process `syz.0.200'. [ 77.771577][ T4813] device syzkaller0 entered promiscuous mode [ 77.801588][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.986047][ T4829] tipc: Enabled bearer , priority 0 [ 77.994653][ T4829] device syzkaller0 entered promiscuous mode [ 78.048430][ T4829] tipc: Resetting bearer [ 78.066367][ T4828] tipc: Resetting bearer [ 78.099798][ T4828] tipc: Disabling bearer [ 78.172403][ T4843] netlink: 68 bytes leftover after parsing attributes in process `syz.1.218'. [ 78.267668][ T4850] device syzkaller0 entered promiscuous mode [ 78.298036][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.357144][ T4858] ip_tables: iptables: counters copy to user failed while replacing table [ 78.378426][ T4857] device syzkaller0 entered promiscuous mode [ 78.385851][ T4858] ip_tables: iptables: counters copy to user failed while replacing table [ 78.397308][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.405493][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.415347][ T4857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.429093][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.557699][ T4870] device syzkaller0 entered promiscuous mode [ 78.698144][ T4880] netlink: 68 bytes leftover after parsing attributes in process `syz.1.236'. [ 78.714813][ T4875] tipc: Enabled bearer , priority 0 [ 78.732873][ T4875] device syzkaller0 entered promiscuous mode [ 78.771487][ T4875] tipc: Resetting bearer [ 78.800526][ T4874] tipc: Resetting bearer [ 78.854363][ T4874] tipc: Disabling bearer [ 79.010778][ T4900] device syzkaller0 entered promiscuous mode [ 79.027832][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.131437][ T4910] device syzkaller0 entered promiscuous mode [ 79.202183][ T4914] netlink: 68 bytes leftover after parsing attributes in process `syz.3.251'. [ 79.286708][ T4912] device syzkaller0 entered promiscuous mode [ 79.337956][ T4921] syz.3.254 uses obsolete (PF_INET,SOCK_PACKET) [ 79.594313][ T4932] device syzkaller0 entered promiscuous mode [ 79.659349][ T4935] tipc: Enabled bearer , priority 0 [ 79.690175][ T4935] device syzkaller0 entered promiscuous mode [ 79.751606][ T4935] tipc: Resetting bearer [ 79.796094][ T4934] tipc: Resetting bearer [ 79.838951][ T4934] tipc: Disabling bearer [ 79.852481][ T4944] netlink: 68 bytes leftover after parsing attributes in process `syz.2.264'. [ 79.874898][ T4948] device syzkaller0 entered promiscuous mode [ 79.895211][ T4949] device syzkaller0 entered promiscuous mode [ 79.986869][ T4950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.266'. [ 80.051066][ T4957] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.182332][ T4966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.274'. [ 80.206909][ T4959] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 80.353274][ T4978] netlink: 68 bytes leftover after parsing attributes in process `syz.0.279'. [ 80.378465][ T4982] tipc: Enabled bearer , priority 0 [ 80.386629][ T4982] device syzkaller0 entered promiscuous mode [ 80.411437][ T4982] tipc: Resetting bearer [ 80.422497][ T4984] device syzkaller0 entered promiscuous mode [ 80.433426][ T4979] tipc: Resetting bearer [ 80.450382][ T4979] tipc: Disabling bearer [ 80.461242][ T4981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.281'. [ 80.922539][ T5020] netlink: 68 bytes leftover after parsing attributes in process `syz.0.293'. [ 80.952093][ T5014] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 81.070849][ T5027] tipc: Started in network mode [ 81.077794][ T5023] sctp: [Deprecated]: syz.4.294 (pid 5023) Use of int in max_burst socket option deprecated. [ 81.077794][ T5023] Use struct sctp_assoc_value instead [ 81.098052][ T5027] tipc: Node identity 46bb6463be14, cluster identity 4711 [ 81.106810][ T5027] tipc: Enabled bearer , priority 0 [ 81.116523][ T5023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.294'. [ 81.128919][ T5027] device syzkaller0 entered promiscuous mode [ 81.192844][ T5027] tipc: Resetting bearer [ 81.210986][ T5026] tipc: Resetting bearer [ 81.248773][ T5026] tipc: Disabling bearer [ 81.417005][ T5054] device syzkaller0 entered promiscuous mode [ 82.478126][ T5061] netlink: 68 bytes leftover after parsing attributes in process `syz.1.306'. [ 84.096795][ T5030] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 84.257726][ T5097] device syzkaller0 entered promiscuous mode [ 84.266055][ T4289] net_ratelimit: 8 callbacks suppressed [ 84.266072][ T4289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.323166][ T5094] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 84.352108][ T5090] sctp: [Deprecated]: syz.4.309 (pid 5090) Use of int in max_burst socket option deprecated. [ 84.352108][ T5090] Use struct sctp_assoc_value instead [ 84.430697][ T5090] netlink: 20 bytes leftover after parsing attributes in process `syz.4.309'. [ 84.569333][ T5109] device syzkaller0 entered promiscuous mode [ 84.590866][ T5111] device syzkaller0 entered promiscuous mode [ 84.641571][ T5111] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 84.653910][ T5114] device syzkaller0 left promiscuous mode [ 84.688713][ T5114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.704944][ T5114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.840233][ T5129] device syzkaller0 entered promiscuous mode [ 84.865214][ T5128] device syzkaller0 entered promiscuous mode [ 84.890309][ T4289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.925431][ T5134] netlink: 192 bytes leftover after parsing attributes in process `syz.1.327'. [ 85.004129][ T4190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.019600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.054533][ T5136] sctp: [Deprecated]: syz.2.328 (pid 5136) Use of int in max_burst socket option deprecated. [ 85.054533][ T5136] Use struct sctp_assoc_value instead [ 85.096615][ T5136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.328'. [ 85.165729][ T5153] device syzkaller0 left promiscuous mode [ 85.219192][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.251047][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.286586][ T5158] device syzkaller0 entered promiscuous mode [ 85.300199][ T5158] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 85.508272][ T5174] device syzkaller0 entered promiscuous mode [ 85.514420][ T5179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 85.534075][ T4289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.633621][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.670578][ T5182] sctp: [Deprecated]: syz.0.346 (pid 5182) Use of int in max_burst socket option deprecated. [ 85.670578][ T5182] Use struct sctp_assoc_value instead [ 85.745199][ T5182] netlink: 20 bytes leftover after parsing attributes in process `syz.0.346'. [ 85.957304][ T5206] device syzkaller0 entered promiscuous mode [ 85.979419][ T5206] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 86.080630][ T5218] netlink: 'syz.0.361': attribute type 1 has an invalid length. [ 86.100124][ T5218] netlink: 'syz.0.361': attribute type 1 has an invalid length. [ 86.111361][ T5216] device syzkaller0 entered promiscuous mode [ 86.122381][ T5218] netlink: 280 bytes leftover after parsing attributes in process `syz.0.361'. [ 86.159807][ T5218] netlink: 'syz.0.361': attribute type 27 has an invalid length. [ 86.597050][ T5252] device syzkaller0 entered promiscuous mode [ 86.606616][ T5250] tipc: Enabled bearer , priority 0 [ 86.616546][ T5247] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 86.696892][ T5250] device syzkaller0 entered promiscuous mode [ 86.711431][ T5250] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 86.749630][ T5250] tipc: Resetting bearer [ 86.776288][ T5249] tipc: Resetting bearer [ 86.806685][ T5249] tipc: Disabling bearer [ 86.821773][ T5260] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.906232][ T7] cfg80211: failed to load regulatory.db [ 87.253098][ T5284] device syzkaller0 entered promiscuous mode [ 87.661251][ T5303] device syzkaller0 entered promiscuous mode [ 87.837660][ T5319] device syzkaller0 left promiscuous mode [ 88.350285][ T5346] device syzkaller0 entered promiscuous mode [ 88.452491][ T5349] capability: warning: `syz.0.406' uses 32-bit capabilities (legacy support in use) [ 88.495746][ T5351] device syzkaller0 entered promiscuous mode [ 88.506639][ T5349] loop0: detected capacity change from 0 to 512 [ 88.532192][ T5351] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 88.558919][ T5349] ======================================================= [ 88.558919][ T5349] WARNING: The mand mount option has been deprecated and [ 88.558919][ T5349] and is ignored by this kernel. Remove the mand [ 88.558919][ T5349] option from the mount to silence this warning. [ 88.558919][ T5349] ======================================================= [ 88.851896][ T5349] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.930257][ T5349] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.958012][ T5362] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 89.234080][ T5385] device syzkaller0 entered promiscuous mode [ 89.302747][ T5389] FAULT_INJECTION: forcing a failure. [ 89.302747][ T5389] name failslab, interval 1, probability 0, space 0, times 1 [ 89.319463][ T5389] CPU: 1 PID: 5389 Comm: syz.4.426 Not tainted syzkaller #0 [ 89.327068][ T5389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 89.337154][ T5389] Call Trace: [ 89.340456][ T5389] [ 89.343409][ T5389] dump_stack_lvl+0x188/0x250 [ 89.348114][ T5389] ? show_regs_print_info+0x20/0x20 [ 89.353336][ T5389] ? load_image+0x410/0x410 [ 89.357875][ T5389] ? __might_sleep+0xf0/0xf0 [ 89.362593][ T5389] ? __lock_acquire+0x7b50/0x7b50 [ 89.367761][ T5389] should_fail+0x383/0x4b0 [ 89.372415][ T5389] should_failslab+0x5/0x20 [ 89.376946][ T5389] slab_pre_alloc_hook+0x51/0xc0 [ 89.381918][ T5389] ? fcntl_setlk+0xa5/0x1060 [ 89.386534][ T5389] kmem_cache_alloc+0x3d/0x280 [ 89.391759][ T5389] fcntl_setlk+0xa5/0x1060 [ 89.396208][ T5389] ? verify_lock_unused+0x140/0x140 [ 89.401520][ T5389] ? __might_fault+0xb7/0x110 [ 89.406235][ T5389] ? __lock_acquire+0x7b50/0x7b50 [ 89.411372][ T5389] ? vfs_lock_file+0xd0/0xd0 [ 89.416043][ T5389] ? __might_fault+0xb3/0x110 [ 89.420929][ T5389] ? _copy_from_user+0x111/0x170 [ 89.426169][ T5389] do_fcntl+0x533/0x1360 [ 89.430437][ T5389] ? __context_tracking_exit+0x4c/0x80 [ 89.435925][ T5389] ? rcu_lock_release+0x20/0x20 [ 89.440816][ T5389] ? __fget_files+0x402/0x470 [ 89.445658][ T5389] ? tomoyo_file_fcntl+0x77/0x210 [ 89.450727][ T5389] ? bpf_lsm_file_fcntl+0x5/0x10 [ 89.455686][ T5389] ? security_file_fcntl+0x7c/0xa0 [ 89.460828][ T5389] __se_sys_fcntl+0xcc/0x190 [ 89.465460][ T5389] do_syscall_64+0x4c/0xa0 [ 89.469907][ T5389] ? clear_bhb_loop+0x30/0x80 [ 89.474701][ T5389] ? clear_bhb_loop+0x30/0x80 [ 89.479415][ T5389] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.485343][ T5389] RIP: 0033:0x7f725690d159 [ 89.489874][ T5389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.509507][ T5389] RSP: 002b:00007f7254b65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 89.518135][ T5389] RAX: ffffffffffffffda RBX: 00007f7256b94fa0 RCX: 00007f725690d159 [ 89.526437][ T5389] RDX: 0000200000000200 RSI: 0000000000000025 RDI: 0000000000000003 [ 89.534431][ T5389] RBP: 00007f72569a406b R08: 0000000000000000 R09: 0000000000000000 [ 89.542423][ T5389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.550425][ T5389] R13: 00007f7256b95038 R14: 00007f7256b94fa0 R15: 00007ffd7d58a758 [ 89.558446][ T5389] [ 89.769228][ T5402] device syzkaller0 entered promiscuous mode [ 89.802698][ T5402] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 90.142801][ T5416] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 90.362337][ T5430] netlink: 'syz.4.437': attribute type 15 has an invalid length. [ 90.410048][ T5432] device syzkaller0 entered promiscuous mode [ 90.434495][ T4262] net_ratelimit: 27 callbacks suppressed [ 90.434514][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.082790][ T5453] device syzkaller0 entered promiscuous mode [ 91.100341][ T5449] sctp: [Deprecated]: syz.2.446 (pid 5449) Use of int in max_burst socket option deprecated. [ 91.100341][ T5449] Use struct sctp_assoc_value instead [ 91.182208][ T5449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.446'. [ 91.287005][ T5433] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 91.350287][ T5463] netlink: 'syz.2.450': attribute type 15 has an invalid length. [ 91.433006][ T5467] device syzkaller0 entered promiscuous mode [ 91.547361][ T5469] device syzkaller0 entered promiscuous mode [ 91.863201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.875566][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.910808][ T5485] device syzkaller0 entered promiscuous mode [ 91.970341][ T5484] sctp: [Deprecated]: syz.4.460 (pid 5484) Use of int in max_burst socket option deprecated. [ 91.970341][ T5484] Use struct sctp_assoc_value instead [ 92.011507][ T5493] netlink: 'syz.2.463': attribute type 15 has an invalid length. [ 92.041856][ T5484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.460'. [ 92.172486][ T5498] device syzkaller0 entered promiscuous mode [ 92.198187][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.483338][ T5517] netlink: 'syz.1.474': attribute type 15 has an invalid length. [ 92.517716][ T5515] device syzkaller0 entered promiscuous mode [ 92.539325][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.547555][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.647450][ T5519] device syzkaller0 entered promiscuous mode [ 92.724746][ T5521] sctp: [Deprecated]: syz.1.476 (pid 5521) Use of int in max_burst socket option deprecated. [ 92.724746][ T5521] Use struct sctp_assoc_value instead [ 92.788001][ T5521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.476'. [ 92.825254][ T5491] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 93.065612][ T5541] netlink: 'syz.1.486': attribute type 15 has an invalid length. [ 93.282588][ T5549] device syzkaller0 entered promiscuous mode [ 93.320793][ T5558] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 93.426333][ T5567] loop1: detected capacity change from 0 to 128 [ 93.440912][ T5564] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.537344][ T5567] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 93.553152][ T5567] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.602217][ T26] audit: type=1800 audit(1791022951.239:2): pid=5567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.497" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 93.610892][ T5576] netlink: 'syz.3.501': attribute type 15 has an invalid length. [ 93.917173][ T5593] device syzkaller0 entered promiscuous mode [ 94.087352][ T5603] netlink: 'syz.2.514': attribute type 15 has an invalid length. [ 94.293720][ T5616] netlink: 20 bytes leftover after parsing attributes in process `syz.4.520'. [ 94.557834][ T5631] device syzkaller0 entered promiscuous mode [ 94.565723][ T5636] netlink: 'syz.1.527': attribute type 15 has an invalid length. [ 95.111192][ T5667] netlink: 'syz.2.538': attribute type 15 has an invalid length. [ 95.197623][ T5673] tipc: Enabled bearer , priority 0 [ 95.228032][ T5675] device syzkaller0 entered promiscuous mode [ 95.246019][ T5673] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 95.303826][ T5670] tipc: Disabling bearer [ 95.372749][ T5682] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 95.403418][ T5681] netlink: 24 bytes leftover after parsing attributes in process `syz.4.544'. [ 95.524000][ T5693] autofs4:pid:5693:autofs_fill_super: called with bogus options [ 95.683523][ T5704] netlink: 'syz.0.549': attribute type 15 has an invalid length. [ 95.859546][ T5712] sctp: [Deprecated]: syz.4.548 (pid 5712) Use of int in max_burst socket option deprecated. [ 95.859546][ T5712] Use struct sctp_assoc_value instead [ 95.988205][ T5712] netlink: 20 bytes leftover after parsing attributes in process `syz.4.548'. [ 96.065906][ T5727] device syzkaller0 entered promiscuous mode [ 96.398863][ T5738] netlink: 'syz.3.562': attribute type 15 has an invalid length. [ 96.487478][ T5740] loop0: detected capacity change from 0 to 1024 [ 96.560516][ T5740] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 96.608788][ T5740] JBD2: no valid journal superblock found [ 96.631111][ T5740] EXT4-fs (loop0): error loading journal [ 96.992024][ T5755] device syzkaller0 entered promiscuous mode [ 97.094463][ T5763] sctp: [Deprecated]: syz.4.574 (pid 5763) Use of int in max_burst socket option deprecated. [ 97.094463][ T5763] Use struct sctp_assoc_value instead [ 97.134394][ T5763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.574'. [ 97.228801][ T5767] netlink: 'syz.3.575': attribute type 15 has an invalid length. [ 97.709399][ T5792] sctp: [Deprecated]: syz.3.587 (pid 5792) Use of int in max_burst socket option deprecated. [ 97.709399][ T5792] Use struct sctp_assoc_value instead [ 97.745798][ T5796] tc action pedit 'at' offset 21 out of bounds [ 97.757435][ T5794] device syzkaller0 entered promiscuous mode [ 97.775479][ T5792] netlink: 20 bytes leftover after parsing attributes in process `syz.3.587'. [ 97.882164][ T5800] netlink: 'syz.4.589': attribute type 15 has an invalid length. [ 97.898656][ T5799] device syzkaller0 left promiscuous mode [ 98.546286][ T5825] device syzkaller0 entered promiscuous mode [ 98.618765][ T5828] sctp: [Deprecated]: syz.2.601 (pid 5828) Use of int in max_burst socket option deprecated. [ 98.618765][ T5828] Use struct sctp_assoc_value instead [ 98.722595][ T5828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.601'. [ 98.782589][ T5831] netlink: 'syz.2.602': attribute type 15 has an invalid length. [ 99.365768][ T5861] process 'syz.2.611' launched '/dev/fd/5' with NULL argv: empty string added [ 99.423081][ T5861] FAULT_INJECTION: forcing a failure. [ 99.423081][ T5861] name failslab, interval 1, probability 0, space 0, times 0 [ 99.453740][ T5861] CPU: 0 PID: 5861 Comm: syz.2.611 Not tainted syzkaller #0 [ 99.461095][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.471220][ T5861] Call Trace: [ 99.474625][ T5861] [ 99.477584][ T5861] dump_stack_lvl+0x188/0x250 [ 99.482321][ T5861] ? show_regs_print_info+0x20/0x20 [ 99.487557][ T5861] ? load_image+0x410/0x410 [ 99.492102][ T5861] ? __might_sleep+0xf0/0xf0 [ 99.496725][ T5861] ? __lock_acquire+0x7b50/0x7b50 [ 99.501797][ T5861] should_fail+0x383/0x4b0 [ 99.506259][ T5861] should_failslab+0x5/0x20 [ 99.510892][ T5861] slab_pre_alloc_hook+0x51/0xc0 [ 99.515857][ T5861] ? ptlock_alloc+0x1c/0x60 [ 99.520403][ T5861] kmem_cache_alloc+0x3d/0x280 [ 99.525593][ T5861] ptlock_alloc+0x1c/0x60 [ 99.530078][ T5861] pte_alloc_one+0xc0/0x310 [ 99.534623][ T5861] ? rcu_lock_release+0x20/0x20 [ 99.539770][ T5861] ? __rwlock_init+0x140/0x140 [ 99.544582][ T5861] ? count_memcg_event_mm+0x324/0x370 [ 99.550103][ T5861] ? do_raw_spin_unlock+0x11d/0x230 [ 99.555614][ T5861] __pte_alloc+0x21/0x150 [ 99.560065][ T5861] ? __pud_alloc+0x122/0x140 [ 99.564690][ T5861] handle_mm_fault+0x39d9/0x4440 [ 99.569682][ T5861] ? get_page+0xe0/0xe0 [ 99.573879][ T5861] ? follow_page_mask+0x272/0x12b0 [ 99.579042][ T5861] ? vma_is_secretmem+0x9/0x40 [ 99.584277][ T5861] ? check_vma_flags+0x359/0x470 [ 99.589257][ T5861] __get_user_pages+0x952/0x11e0 [ 99.594249][ T5861] ? populate_vma_page_range+0x290/0x290 [ 99.600092][ T5861] ? preempt_schedule+0xbc/0xd0 [ 99.604979][ T5861] ? __might_sleep+0xf0/0xf0 [ 99.609827][ T5861] ? read_lock_is_recursive+0x10/0x10 [ 99.615410][ T5861] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 99.620830][ T5861] __get_user_pages_remote+0x1c2/0x730 [ 99.626326][ T5861] ? irq_work_queue+0xb8/0x140 [ 99.631152][ T5861] ? get_user_pages_remote+0x55/0xa0 [ 99.636736][ T5861] get_arg_page+0x11b/0x350 [ 99.641282][ T5861] ? copy_string_kernel+0x280/0x280 [ 99.646520][ T5861] ? load_image+0x410/0x410 [ 99.651067][ T5861] copy_string_kernel+0x14d/0x280 [ 99.656135][ T5861] do_execveat_common+0x360/0x6b0 [ 99.661197][ T5861] __x64_sys_execveat+0xc0/0xe0 [ 99.666085][ T5861] do_syscall_64+0x4c/0xa0 [ 99.670537][ T5861] ? clear_bhb_loop+0x30/0x80 [ 99.675259][ T5861] ? clear_bhb_loop+0x30/0x80 [ 99.680003][ T5861] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.686014][ T5861] RIP: 0033:0x7f6adea34159 [ 99.690505][ T5861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.710235][ T5861] RSP: 002b:00007f6adcc8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 99.718688][ T5861] RAX: ffffffffffffffda RBX: 00007f6adecbbfa0 RCX: 00007f6adea34159 [ 99.726697][ T5861] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 99.734702][ T5861] RBP: 00007f6adeacb06b R08: 0000000000001000 R09: 0000000000000000 [ 99.742704][ T5861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.750707][ T5861] R13: 00007f6adecbc038 R14: 00007f6adecbbfa0 R15: 00007ffefd1ad438 [ 99.758730][ T5861] [ 99.800248][ T5865] device syzkaller0 entered promiscuous mode [ 99.877227][ T5866] sctp: [Deprecated]: syz.3.612 (pid 5866) Use of int in max_burst socket option deprecated. [ 99.877227][ T5866] Use struct sctp_assoc_value instead [ 99.905803][ T5866] netlink: 20 bytes leftover after parsing attributes in process `syz.3.612'. [ 100.045577][ T5871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.616'. [ 100.176666][ T5877] netlink: 'syz.0.615': attribute type 15 has an invalid length. [ 100.393873][ T5894] loop0: detected capacity change from 0 to 128 [ 100.814808][ T5914] netlink: 'syz.3.629': attribute type 15 has an invalid length. [ 100.881825][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.631'. [ 100.944670][ T5916] sctp: [Deprecated]: syz.0.630 (pid 5916) Use of int in max_burst socket option deprecated. [ 100.944670][ T5916] Use struct sctp_assoc_value instead [ 101.044267][ T5923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.630'. [ 101.117689][ T5928] loop1: detected capacity change from 0 to 512 [ 101.176904][ T5928] EXT4-fs (loop1): 1 truncate cleaned up [ 101.210450][ T5928] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 101.299863][ T26] audit: type=1800 audit(1791022958.939:3): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.634" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 101.846271][ T5971] netlink: 256 bytes leftover after parsing attributes in process `syz.0.648'. [ 101.896579][ T5970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.922611][ T5974] loop1: detected capacity change from 0 to 256 [ 101.938427][ T4232] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.971633][ T4232] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 102.022146][ T5974] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.198488][ T5979] fido_id[5979]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 102.472234][ T5998] sctp: [Deprecated]: syz.1.655 (pid 5998) Use of int in max_burst socket option deprecated. [ 102.472234][ T5998] Use struct sctp_assoc_value instead [ 102.532335][ T5998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.655'. [ 102.779698][ T26] audit: type=1326 audit(1791022960.419:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.0.665" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b48eac159 code=0x7ffc0000 [ 102.818066][ T26] audit: type=1326 audit(1791022960.419:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.0.665" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b48eac159 code=0x7ffc0000 [ 102.838726][ T6025] loop0: detected capacity change from 0 to 128 [ 102.852379][ T26] audit: type=1326 audit(1791022960.419:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.0.665" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b48eac159 code=0x7ffc0000 [ 102.877221][ T26] audit: type=1326 audit(1791022960.419:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.0.665" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8b48eac159 code=0x7ffc0000 [ 102.934034][ T26] audit: type=1326 audit(1791022960.419:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.0.665" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b48eac159 code=0x7ffc0000 [ 102.967801][ T26] audit: type=1326 audit(1791022960.419:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.0.665" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b48eac159 code=0x7ffc0000 [ 103.004769][ T26] audit: type=1326 audit(1791022960.419:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.0.665" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b48eac159 code=0x7ffc0000 [ 103.036147][ T26] audit: type=1326 audit(1791022960.419:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.0.665" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b48eac159 code=0x7ffc0000 [ 103.064778][ T26] audit: type=1326 audit(1791022960.419:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.0.665" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b48eac159 code=0x7ffc0000 [ 104.289271][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 104.431043][ T6056] device syzkaller0 entered promiscuous mode [ 104.456591][ T6056] simple: /dev/video#_0 [ 104.460837][ T6056] simple: /dev/video#_0 [ 104.465213][ T6056] simple: /dev/video#_0 [ 104.469476][ T6056] simple: /dev/video#_0 [ 104.473678][ T6056] simple: /dev/video#_0 [ 104.477848][ T6056] simple: /dev/video#_0 [ 104.482032][ T6056] simple: /dev/video#_0 [ 104.486247][ T6056] simple: /dev/video#_0 [ 104.490423][ T6056] simple: /dev/video#_0 [ 104.494626][ T6056] simple: /dev/video#_0 [ 104.498804][ T6056] simple: /dev/video#_0 [ 104.503040][ T6056] simple: /dev/video#_0 [ 104.507283][ T6056] simple: /dev/video#_0 [ 104.511541][ T6056] simple: /dev/video#_0 [ 104.515740][ T6056] simple: /dev/video#_0 [ 104.519915][ T6056] simple: /dev/video#_0 [ 104.524116][ T6056] simple: /dev/video#_0 [ 104.528317][ T6056] simple: /dev/video#_0 [ 104.532502][ T6056] simple: /dev/video#_0 [ 104.536730][ T6056] simple: /dev/video#_0 [ 104.540992][ T6056] simple: /dev/video#_0 [ 104.545210][ T6056] simple: /dev/video#_0 [ 104.549382][ T6056] simple: /dev/video#_0 [ 104.553597][ T6056] simple: /dev/video#_0 [ 104.557787][ T6056] simple: /dev/video#_0 [ 104.562114][ T6056] simple: /dev/video#_0 [ 104.566418][ T6056] simple: /dev/video#_0 [ 104.570587][ T6056] simple: /dev/video#_0 [ 104.574803][ T6056] simple: /dev/video#_0 [ 104.578978][ T6056] simple: /dev/video#_0 [ 104.583293][ T6056] simple: /dev/video#_0 [ 104.587466][ T6056] simple: /dev/video#_0 [ 104.591732][ T6056] TC_ACT_REPEAT abuse ? [ 104.736956][ T6064] loop1: detected capacity change from 0 to 128 [ 104.970714][ T6072] sctp: [Deprecated]: syz.1.679 (pid 6072) Use of int in max_burst socket option deprecated. [ 104.970714][ T6072] Use struct sctp_assoc_value instead [ 105.015649][ T6072] netlink: 20 bytes leftover after parsing attributes in process `syz.1.679'. [ 105.099134][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'. [ 105.425390][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'. [ 106.012723][ T6115] sctp: [Deprecated]: syz.4.694 (pid 6115) Use of int in max_burst socket option deprecated. [ 106.012723][ T6115] Use struct sctp_assoc_value instead [ 106.130915][ T6118] netlink: 20 bytes leftover after parsing attributes in process `syz.4.694'. [ 106.459014][ T6142] loop3: detected capacity change from 0 to 512 [ 106.479298][ T6144] FAULT_INJECTION: forcing a failure. [ 106.479298][ T6144] name failslab, interval 1, probability 0, space 0, times 0 [ 106.493550][ T6144] CPU: 1 PID: 6144 Comm: syz.0.701 Not tainted syzkaller #0 [ 106.500896][ T6144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.510988][ T6144] Call Trace: [ 106.514300][ T6144] [ 106.517264][ T6144] dump_stack_lvl+0x188/0x250 [ 106.521996][ T6144] ? show_regs_print_info+0x20/0x20 [ 106.527252][ T6144] ? load_image+0x410/0x410 [ 106.531792][ T6144] ? __might_sleep+0xf0/0xf0 [ 106.536407][ T6144] ? __lock_acquire+0x7b50/0x7b50 [ 106.541474][ T6144] should_fail+0x383/0x4b0 [ 106.546190][ T6144] should_failslab+0x5/0x20 [ 106.550735][ T6144] slab_pre_alloc_hook+0x51/0xc0 [ 106.555705][ T6144] ? getname_flags+0xb7/0x4f0 [ 106.560421][ T6144] kmem_cache_alloc+0x3d/0x280 [ 106.565221][ T6144] getname_flags+0xb7/0x4f0 [ 106.569765][ T6144] __x64_sys_mkdirat+0x78/0x90 [ 106.574746][ T6144] do_syscall_64+0x4c/0xa0 [ 106.579369][ T6144] ? clear_bhb_loop+0x30/0x80 [ 106.584080][ T6144] ? clear_bhb_loop+0x30/0x80 [ 106.588938][ T6144] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.594863][ T6144] RIP: 0033:0x7f8b48eac159 [ 106.599312][ T6144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.618962][ T6144] RSP: 002b:00007f8b47104028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 106.627413][ T6144] RAX: ffffffffffffffda RBX: 00007f8b49133fa0 RCX: 00007f8b48eac159 [ 106.635421][ T6144] RDX: 00000000000001ff RSI: 0000000000000000 RDI: ffffffffffffff9c [ 106.643459][ T6144] RBP: 00007f8b48f4306b R08: 0000000000000000 R09: 0000000000000000 [ 106.651458][ T6144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.659633][ T6144] R13: 00007f8b49134038 R14: 00007f8b49133fa0 R15: 00007ffda007a678 [ 106.667655][ T6144] [ 106.698234][ T6142] EXT4-fs (loop3): Ignoring removed oldalloc option [ 106.738427][ T6142] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.703: bg 0: block 5: invalid block bitmap [ 106.759884][ T6142] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 106.786540][ T6142] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.703: invalid indirect mapped block 3 (level 2) [ 106.870733][ T6142] EXT4-fs (loop3): 1 orphan inode deleted [ 106.901953][ T6142] EXT4-fs (loop3): 1 truncate cleaned up [ 106.933017][ T6142] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,,errors=continue. Quota mode: writeback. [ 106.967014][ T6157] sctp: [Deprecated]: syz.1.707 (pid 6157) Use of int in max_burst socket option deprecated. [ 106.967014][ T6157] Use struct sctp_assoc_value instead [ 107.012488][ T6157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.707'. [ 107.998480][ T6172] device syzkaller0 entered promiscuous mode [ 109.454802][ T6209] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 109.577278][ T6208] device syzkaller0 entered promiscuous mode [ 109.638545][ T6214] i8042 aux 00:02: in use; can't configure [ 109.810592][ T6218] device syzkaller0 entered promiscuous mode [ 110.037598][ T6230] bridge0: port 3(erspan0) entered blocking state [ 110.044621][ T6230] bridge0: port 3(erspan0) entered disabled state [ 110.058777][ T6230] device erspan0 entered promiscuous mode [ 110.068828][ T6230] bridge0: port 3(erspan0) entered blocking state [ 110.075536][ T6230] bridge0: port 3(erspan0) entered forwarding state [ 110.099467][ T6230] device erspan0 left promiscuous mode [ 110.105871][ T6230] bridge0: port 3(erspan0) entered disabled state [ 111.422717][ T6250] device syzkaller0 entered promiscuous mode [ 111.597919][ T6252] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 111.630345][ T6252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.773377][ T6264] device syzkaller0 entered promiscuous mode [ 111.942865][ T6276] loop0: detected capacity change from 0 to 1024 [ 111.965677][ T6272] loop2: detected capacity change from 0 to 128 [ 112.031324][ T6279] device syzkaller0 entered promiscuous mode [ 112.068992][ T6276] EXT4-fs (loop0): Ignoring removed bh option [ 112.177369][ T6276] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,barrier=0x000000000000009d,,errors=continue. Quota mode: writeback. [ 112.324489][ T6276] loop_set_status: loop0 () has still dirty pages (nrpages=2) [ 112.526449][ T6293] loop2: detected capacity change from 0 to 2048 [ 112.651255][ T6293] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 112.906541][ T6299] loop1: detected capacity change from 0 to 512 [ 112.959160][ T4505] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.017709][ T6299] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 113.063424][ T6299] EXT4-fs (loop1): orphan cleanup on readonly fs [ 113.100141][ T6299] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 113.122024][ T4505] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.161703][ T6299] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 113.168817][ T6299] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.757: bad orphan inode 768 [ 113.189165][ T6299] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.207327][ T6299] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 113.242785][ T4505] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.305657][ T6304] device syzkaller0 entered promiscuous mode [ 113.417087][ T6313] loop1: detected capacity change from 0 to 512 [ 113.417765][ T4505] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.608288][ T6313] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.654387][ T6313] ext4 filesystem being mounted at /140/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.086790][ T4505] tipc: Left network mode [ 114.206119][ T6314] chnl_net:caif_netlink_parms(): no params data found [ 114.233069][ T6355] device syzkaller0 entered promiscuous mode [ 114.573680][ T6314] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.604770][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.642713][ T6314] device bridge_slave_0 entered promiscuous mode [ 114.700016][ T6314] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.709808][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.737413][ T6314] device bridge_slave_1 entered promiscuous mode [ 114.811810][ T6379] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 114.861127][ T6314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.204677][ T6314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.350815][ T6314] team0: Port device team_slave_0 added [ 115.395239][ T6314] team0: Port device team_slave_1 added [ 115.491807][ T6314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.530414][ T6314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.563130][ T4233] Bluetooth: hci1: command 0x0409 tx timeout [ 115.600144][ T6407] loop2: detected capacity change from 0 to 1024 [ 115.615451][ T6314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.667804][ T6314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.696527][ T6314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.713958][ T6407] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,abort,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 115.754695][ T6314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.944946][ T6314] device hsr_slave_0 entered promiscuous mode [ 115.962453][ T6314] device hsr_slave_1 entered promiscuous mode [ 115.993099][ T6314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.036253][ T6314] Cannot create hsr debugfs directory [ 116.225908][ T6433] device syzkaller0 entered promiscuous mode [ 116.443547][ T4505] device hsr_slave_0 left promiscuous mode [ 116.451391][ T4505] device hsr_slave_1 left promiscuous mode [ 116.468036][ T4505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.483333][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.502129][ T4505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.509971][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.533705][ T4505] device bridge_slave_1 left promiscuous mode [ 116.553823][ T4505] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.578390][ T6442] loop2: detected capacity change from 0 to 128 [ 116.598905][ T4505] device bridge_slave_0 left promiscuous mode [ 116.616965][ T4505] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.671379][ T4505] device veth1_macvtap left promiscuous mode [ 116.680216][ T4505] device veth0_macvtap left promiscuous mode [ 116.686717][ T4505] device veth1_vlan left promiscuous mode [ 116.719057][ T4505] device veth0_vlan left promiscuous mode [ 117.144087][ T4505] team0 (unregistering): Port device team_slave_1 removed [ 117.164624][ T4505] team0 (unregistering): Port device team_slave_0 removed [ 117.185940][ T4505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.204373][ T4505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.307365][ T4505] bond0 (unregistering): Released all slaves [ 117.601906][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 117.623886][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 117.643075][ T6449] netlink: 7 bytes leftover after parsing attributes in process `syz.2.800'. [ 117.677788][ T6454] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 117.684978][ T6449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.800'. [ 117.688044][ T6314] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 117.723111][ T6449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.800'. [ 117.773982][ T6314] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 117.823651][ T6314] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.866824][ T6314] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.935439][ T6463] loop3: detected capacity change from 0 to 1024 [ 118.080899][ T6461] device syzkaller0 entered promiscuous mode [ 118.122490][ T6463] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,abort,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 118.530650][ T6314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.593889][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.611692][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.670836][ T6314] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.792487][ T6231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.827414][ T6231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.856084][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.863358][ T6231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.914528][ T6231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.923756][ T6231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.946281][ T6231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.963600][ T6231] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.970752][ T6231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.001070][ T6231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.013986][ T6231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.036385][ T6231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.060907][ T6231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.085182][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.812'. [ 119.202592][ T6231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.217733][ T6231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.245333][ T6231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.254774][ T6231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.263998][ T6231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.286268][ T6231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.303960][ T6231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.369833][ T6314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.411075][ T6513] xt_CT: You must specify a L4 protocol and not use inversions on it [ 119.451891][ T6516] loop2: detected capacity change from 0 to 256 [ 119.620082][ T6523] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 119.640713][ T6516] FAT-fs (loop2): Directory bread(block 64) failed [ 119.648453][ T6522] bridge0: port 3(syz_tun) entered blocking state [ 119.655699][ T6516] FAT-fs (loop2): Directory bread(block 65) failed [ 119.675962][ T6516] FAT-fs (loop2): Directory bread(block 66) failed [ 119.689838][ T6522] bridge0: port 3(syz_tun) entered disabled state [ 119.702982][ T6516] FAT-fs (loop2): Directory bread(block 67) failed [ 119.703262][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 119.715435][ T6522] device syz_tun entered promiscuous mode [ 119.726821][ T6516] FAT-fs (loop2): Directory bread(block 68) failed [ 119.743094][ T6522] bridge0: port 3(syz_tun) entered blocking state [ 119.749631][ T6522] bridge0: port 3(syz_tun) entered forwarding state [ 119.757046][ T6516] FAT-fs (loop2): Directory bread(block 69) failed [ 119.772200][ T6516] FAT-fs (loop2): Directory bread(block 70) failed [ 119.783346][ T6516] FAT-fs (loop2): Directory bread(block 71) failed [ 119.800678][ T6516] FAT-fs (loop2): Directory bread(block 72) failed [ 119.815810][ T6516] FAT-fs (loop2): Directory bread(block 73) failed [ 119.825014][ T6519] device syzkaller0 entered promiscuous mode [ 120.014349][ T6516] attempt to access beyond end of device [ 120.014349][ T6516] loop2: rw=2049, want=1360, limit=256 [ 120.059351][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.073175][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.116731][ T6314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.146035][ T6545] netlink: 'syz.4.824': attribute type 15 has an invalid length. [ 120.151658][ T6546] loop1: detected capacity change from 0 to 512 [ 120.201921][ T6546] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 120.201921][ T6546] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 120.201921][ T6546] [ 120.353139][ T6546] EXT4-fs (loop1): inline encryption not supported [ 120.426337][ T6546] EXT4-fs (loop1): orphan cleanup on readonly fs [ 120.440889][ T6556] loop4: detected capacity change from 0 to 512 [ 120.444797][ T6546] EXT4-fs error (device loop1): ext4_find_extent:893: inode #4: comm syz.1.822: inode has invalid extent depth: 7 [ 120.472942][ T6546] __quota_error: 54 callbacks suppressed [ 120.472961][ T6546] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 120.489380][ T6546] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 120.505419][ T6546] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 120.512055][ T6546] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouser_xattr,inlinecrypt,usrjquota=,noinit_itable,,errors=continue. Quota mode: writeback. [ 120.609951][ T6556] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 120.697836][ T6556] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 120.770766][ T6556] EXT4-fs (loop4): orphan cleanup on readonly fs [ 120.798580][ T6556] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 120.813014][ T6556] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 120.907529][ T4289] lg-g15 0003:046D:0A07.0002: unknown main item tag 0x0 [ 120.925581][ T6556] EXT4-fs (loop4): 1 truncate cleaned up [ 120.951688][ T6556] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 120.979762][ T4289] lg-g15 0003:046D:0A07.0002: unknown main item tag 0x0 [ 121.020611][ T4289] lg-g15 0003:046D:0A07.0002: unknown main item tag 0x0 [ 121.038105][ T4289] lg-g15 0003:046D:0A07.0002: unknown main item tag 0x0 [ 121.062454][ T4289] lg-g15 0003:046D:0A07.0002: unknown main item tag 0x0 [ 121.101339][ T4289] lg-g15 0003:046D:0A07.0002: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 121.113360][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.134874][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.222813][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.254444][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.281958][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.298386][ T6575] fido_id[6575]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 121.356260][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.383529][ T6314] device veth0_vlan entered promiscuous mode [ 121.427844][ T6580] FAULT_INJECTION: forcing a failure. [ 121.427844][ T6580] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 121.459159][ T6314] device veth1_vlan entered promiscuous mode [ 121.470534][ T6580] CPU: 1 PID: 6580 Comm: syz.4.830 Not tainted syzkaller #0 [ 121.477881][ T6580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.487964][ T6580] Call Trace: [ 121.491268][ T6580] [ 121.494237][ T6580] dump_stack_lvl+0x188/0x250 [ 121.498951][ T6580] ? show_regs_print_info+0x20/0x20 [ 121.504387][ T6580] ? load_image+0x410/0x410 [ 121.515295][ T6580] ? __lock_acquire+0x7b50/0x7b50 [ 121.521649][ T6580] should_fail+0x383/0x4b0 [ 121.526126][ T6580] prepare_alloc_pages+0x1e3/0x5b0 [ 121.531371][ T6580] __alloc_pages+0x11b/0x480 [ 121.536004][ T6580] ? zone_statistics+0x170/0x170 [ 121.541098][ T6580] ? alloc_pages+0x452/0x560 [ 121.545735][ T6580] __get_free_pages+0x8/0x30 [ 121.550403][ T6580] kasan_populate_vmalloc_pte+0x21/0xc0 [ 121.555997][ T6580] __apply_to_page_range+0x987/0xd10 [ 121.561339][ T6580] ? kasan_populate_vmalloc+0x70/0x70 [ 121.566746][ T6580] alloc_vmap_area+0x19e8/0x1b30 [ 121.571748][ T6580] ? vm_map_ram+0xba0/0xba0 [ 121.576296][ T6580] __get_vm_area_node+0x14f/0x2d0 [ 121.581355][ T6580] __vmalloc_node_range+0xef/0x8b0 [ 121.586493][ T6580] ? stack_map_alloc+0x305/0x550 [ 121.591466][ T6580] ? apparmor_capable+0x12c/0x190 [ 121.596521][ T6580] ? bpf_lsm_capable+0x5/0x10 [ 121.601226][ T6580] bpf_map_area_alloc+0xd4/0xe0 [ 121.606108][ T6580] ? stack_map_alloc+0x305/0x550 [ 121.611163][ T6580] stack_map_alloc+0x305/0x550 [ 121.616130][ T6580] map_create+0x481/0x2330 [ 121.620751][ T6580] ? bpf_lsm_bpf+0x5/0x10 [ 121.625213][ T6580] __sys_bpf+0x30a/0x6f0 [ 121.629486][ T6580] ? bpf_link_show_fdinfo+0x380/0x380 [ 121.634907][ T6580] __x64_sys_bpf+0x78/0x90 [ 121.639353][ T6580] do_syscall_64+0x4c/0xa0 [ 121.643880][ T6580] ? clear_bhb_loop+0x30/0x80 [ 121.648582][ T6580] ? clear_bhb_loop+0x30/0x80 [ 121.653282][ T6580] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.659199][ T6580] RIP: 0033:0x7f725690d159 [ 121.663636][ T6580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.683369][ T6580] RSP: 002b:00007f7254b65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.691823][ T6580] RAX: ffffffffffffffda RBX: 00007f7256b94fa0 RCX: 00007f725690d159 [ 121.699861][ T6580] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 121.707964][ T6580] RBP: 00007f72569a406b R08: 0000000000000000 R09: 0000000000000000 [ 121.716142][ T6580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.724136][ T6580] R13: 00007f7256b95038 R14: 00007f7256b94fa0 R15: 00007ffd7d58a758 [ 121.732277][ T6580] [ 121.752434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 121.773908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 121.784595][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 121.810078][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.822576][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.854962][ T6314] device veth0_macvtap entered promiscuous mode [ 121.889596][ T6314] device veth1_macvtap entered promiscuous mode [ 121.930298][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 121.966113][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 121.979914][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.027254][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.053072][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.066499][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.078809][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.089863][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.100023][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.114954][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.130336][ T6314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.149450][ T6597] netlink: 'syz.1.835': attribute type 15 has an invalid length. [ 122.166977][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.194041][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.223263][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.238183][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.266380][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.283744][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.308132][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.331206][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.341170][ T6607] loop1: detected capacity change from 0 to 2048 [ 122.361936][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.373527][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.384033][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.394909][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.410029][ T6314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.423753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.443808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.467841][ T5004] loop1: p2 < > p3 < p5 > p4 [ 122.472812][ T5004] loop1: partition table partially beyond EOD, truncated [ 122.495174][ T5004] loop1: p2 start 4278190080 is beyond EOD, truncated [ 122.500881][ T6314] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.527557][ T6314] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.528580][ T5004] loop1: p4 size 8192 extends beyond EOD, truncated [ 122.550901][ T6314] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.560921][ T5004] loop1: p5 size 8192 extends beyond EOD, truncated [ 122.568910][ T6314] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.618488][ T6607] loop1: p2 < > p3 < p5 > p4 [ 122.636302][ T6607] loop1: partition table partially beyond EOD, truncated [ 122.668716][ T6607] loop1: p2 start 4278190080 is beyond EOD, truncated [ 122.688249][ T6607] loop1: p4 size 8192 extends beyond EOD, truncated [ 122.740897][ T6607] loop1: p5 size 8192 extends beyond EOD, truncated [ 122.812802][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.834264][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.842163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 123.085488][ T5900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.103858][ T5900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.115916][ T6615] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 123.162365][ T6388] udevd[6388]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 123.189174][ T5004] udevd[5004]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 123.218878][ T6281] udevd[6281]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 123.242324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.287544][ T6632] netlink: 620 bytes leftover after parsing attributes in process `syz.1.844'. [ 123.311371][ T6281] udevd[6281]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 123.315189][ T6388] udevd[6388]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 123.327952][ T5004] udevd[5004]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 123.401857][ T6632] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.548950][ T6642] netlink: 'syz.1.846': attribute type 15 has an invalid length. [ 123.549674][ T6643] sctp: [Deprecated]: syz.5.759 (pid 6643) Use of int in max_burst socket option deprecated. [ 123.549674][ T6643] Use struct sctp_assoc_value instead [ 123.634734][ T6643] netlink: 20 bytes leftover after parsing attributes in process `syz.5.759'. [ 124.579257][ T6668] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 124.692648][ T6679] netlink: 'syz.4.857': attribute type 15 has an invalid length. [ 124.802351][ T6682] sctp: [Deprecated]: syz.2.858 (pid 6682) Use of int in max_burst socket option deprecated. [ 124.802351][ T6682] Use struct sctp_assoc_value instead [ 124.803019][ T6684] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.861544][ T6688] loop4: detected capacity change from 0 to 128 [ 124.907958][ T6692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.858'. [ 124.958873][ T6684] FAULT_INJECTION: forcing a failure. [ 124.958873][ T6684] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 124.973317][ T6684] CPU: 0 PID: 6684 Comm: syz.5.859 Not tainted syzkaller #0 [ 124.980645][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.991271][ T6684] Call Trace: [ 124.994578][ T6684] [ 124.997550][ T6684] dump_stack_lvl+0x188/0x250 [ 125.002266][ T6684] ? show_regs_print_info+0x20/0x20 [ 125.007504][ T6684] ? load_image+0x410/0x410 [ 125.012056][ T6684] ? mark_lock+0x94/0x320 [ 125.016420][ T6684] should_fail+0x383/0x4b0 [ 125.020869][ T6684] prepare_alloc_pages+0x1e3/0x5b0 [ 125.026199][ T6684] __alloc_pages+0x11b/0x480 [ 125.030852][ T6684] ? zone_statistics+0x170/0x170 [ 125.035831][ T6684] ? rcu_lock_acquire+0x30/0x30 [ 125.040740][ T6684] ? alloc_pages+0x452/0x560 [ 125.045365][ T6684] __get_free_pages+0x8/0x30 [ 125.050173][ T6684] __tlb_remove_page_size+0x1f2/0x3f0 [ 125.055690][ T6684] unmap_page_range+0xfcf/0x2410 [ 125.060713][ T6684] unmap_vmas+0x131/0x250 [ 125.065152][ T6684] ? unmap_page_range+0x2410/0x2410 [ 125.070373][ T6684] ? __mutex_lock_common+0x435/0x2400 [ 125.075764][ T6684] ? exit_mm_release+0x16/0x30 [ 125.080754][ T6684] exit_mmap+0x3b9/0x640 [ 125.085126][ T6684] ? vm_brk+0x20/0x20 [ 125.089232][ T6684] ? uprobe_clear_state+0x2f6/0x460 [ 125.094458][ T6684] __mmput+0x115/0x390 [ 125.098664][ T6684] exit_mm+0x632/0x7b0 [ 125.102784][ T6684] ? perf_pmu_migrate_context+0xb70/0xb70 [ 125.108529][ T6684] ? do_exit+0x2110/0x2110 [ 125.112969][ T6684] ? __ia32_sys_timer_delete+0x40/0x40 [ 125.118448][ T6684] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 125.123967][ T6684] ? tty_audit_exit+0x149/0x1f0 [ 125.128842][ T6684] do_exit+0x5b8/0x2110 [ 125.133124][ T6684] ? put_task_struct+0x80/0x80 [ 125.137907][ T6684] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 125.144017][ T6684] ? _raw_spin_lock_irq+0xb7/0xf0 [ 125.149172][ T6684] do_group_exit+0x12c/0x2f0 [ 125.153782][ T6684] ? lockdep_hardirqs_on+0x94/0x140 [ 125.159014][ T6684] get_signal+0x7eb/0x12e0 [ 125.163479][ T6684] arch_do_signal_or_restart+0xe6/0x12a0 [ 125.169142][ T6684] ? rcu_lock_release+0x9/0x20 [ 125.173966][ T6684] ? futex_exit_release+0x1c0/0x1c0 [ 125.179379][ T6684] ? get_sigframe_size+0x10/0x10 [ 125.184436][ T6684] ? __context_tracking_exit+0x4c/0x80 [ 125.189927][ T6684] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 125.195939][ T6684] ? exit_to_user_mode_loop+0x3b/0x130 [ 125.201521][ T6684] exit_to_user_mode_loop+0x9e/0x130 [ 125.206922][ T6684] exit_to_user_mode_prepare+0xee/0x180 [ 125.212585][ T6684] syscall_exit_to_user_mode+0x16/0x40 [ 125.218077][ T6684] do_syscall_64+0x58/0xa0 [ 125.222518][ T6684] ? clear_bhb_loop+0x30/0x80 [ 125.227219][ T6684] ? clear_bhb_loop+0x30/0x80 [ 125.231918][ T6684] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.237841][ T6684] RIP: 0033:0x7f79ffc4d159 [ 125.242293][ T6684] Code: Unable to access opcode bytes at RIP 0x7f79ffc4d12f. [ 125.250075][ T6684] RSP: 002b:00007f79fdea50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.258525][ T6684] RAX: fffffffffffffe00 RBX: 00007f79ffed4fa8 RCX: 00007f79ffc4d159 [ 125.266515][ T6684] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f79ffed4fa8 [ 125.274509][ T6684] RBP: 00007f79ffed4fa0 R08: 0000000000000000 R09: 0000000000000000 [ 125.282591][ T6684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.290591][ T6684] R13: 00007f79ffed5038 R14: 00007ffe2d52ca00 R15: 00007ffe2d52cae8 [ 125.298610][ T6684] [ 125.570650][ T6709] bridge0: port 3(erspan0) entered blocking state [ 125.577421][ T6709] bridge0: port 3(erspan0) entered disabled state [ 125.588452][ T6709] device erspan0 entered promiscuous mode [ 125.595837][ T6709] bridge0: port 3(erspan0) entered blocking state [ 125.602298][ T6709] bridge0: port 3(erspan0) entered forwarding state [ 126.719587][ T6730] loop5: detected capacity change from 0 to 512 [ 126.732790][ T6729] netlink: 'syz.4.871': attribute type 15 has an invalid length. [ 126.767420][ T6724] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 126.929858][ T6730] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.867: bg 0: block 5: invalid block bitmap [ 127.021085][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.874'. [ 127.036601][ T6730] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 127.060794][ T6730] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.867: invalid indirect mapped block 3 (level 2) [ 127.093228][ T6730] EXT4-fs (loop5): 2 truncates cleaned up [ 127.099188][ T6730] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.469183][ T6767] device erspan0 left promiscuous mode [ 127.477445][ T6767] bridge0: port 3(erspan0) entered disabled state [ 128.559852][ T6777] netlink: 'syz.4.883': attribute type 15 has an invalid length. [ 128.632051][ T6785] FAULT_INJECTION: forcing a failure. [ 128.632051][ T6785] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 128.683313][ T6785] CPU: 1 PID: 6785 Comm: syz.1.884 Not tainted syzkaller #0 [ 128.690844][ T6785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.701197][ T6785] Call Trace: [ 128.704516][ T6785] [ 128.707472][ T6785] dump_stack_lvl+0x188/0x250 [ 128.712193][ T6785] ? show_regs_print_info+0x20/0x20 [ 128.717423][ T6785] ? load_image+0x410/0x410 [ 128.721990][ T6785] ? __lock_acquire+0x7b50/0x7b50 [ 128.727054][ T6785] should_fail+0x383/0x4b0 [ 128.731514][ T6785] prepare_alloc_pages+0x1e3/0x5b0 [ 128.736840][ T6785] __alloc_pages+0x11b/0x480 [ 128.741464][ T6785] ? zone_statistics+0x170/0x170 [ 128.746431][ T6785] ? __rwlock_init+0x140/0x140 [ 128.751221][ T6785] ? alloc_pages+0x452/0x560 [ 128.755842][ T6785] __get_free_pages+0x8/0x30 [ 128.760477][ T6785] kasan_populate_vmalloc_pte+0x21/0xc0 [ 128.766151][ T6785] __apply_to_page_range+0x987/0xd10 [ 128.771585][ T6785] ? kasan_populate_vmalloc+0x70/0x70 [ 128.776999][ T6785] alloc_vmap_area+0x19e8/0x1b30 [ 128.781992][ T6785] ? vm_map_ram+0xba0/0xba0 [ 128.786543][ T6785] __get_vm_area_node+0x14f/0x2d0 [ 128.791606][ T6785] __vmalloc_node_range+0xef/0x8b0 [ 128.796752][ T6785] ? stack_map_alloc+0x305/0x550 [ 128.801727][ T6785] ? apparmor_capable+0x12c/0x190 [ 128.806789][ T6785] ? bpf_lsm_capable+0x5/0x10 [ 128.811763][ T6785] bpf_map_area_alloc+0xd4/0xe0 [ 128.816644][ T6785] ? stack_map_alloc+0x305/0x550 [ 128.821610][ T6785] stack_map_alloc+0x305/0x550 [ 128.826408][ T6785] map_create+0x481/0x2330 [ 128.831052][ T6785] ? bpf_lsm_bpf+0x5/0x10 [ 128.835422][ T6785] __sys_bpf+0x30a/0x6f0 [ 128.839718][ T6785] ? bpf_link_show_fdinfo+0x380/0x380 [ 128.845154][ T6785] __x64_sys_bpf+0x78/0x90 [ 128.849678][ T6785] do_syscall_64+0x4c/0xa0 [ 128.854130][ T6785] ? clear_bhb_loop+0x30/0x80 [ 128.858949][ T6785] ? clear_bhb_loop+0x30/0x80 [ 128.863663][ T6785] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.869680][ T6785] RIP: 0033:0x7f3aa9d4f159 [ 128.874217][ T6785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.894480][ T6785] RSP: 002b:00007f3aa7fa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.902939][ T6785] RAX: ffffffffffffffda RBX: 00007f3aa9fd6fa0 RCX: 00007f3aa9d4f159 [ 128.910946][ T6785] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 128.918953][ T6785] RBP: 00007f3aa9de606b R08: 0000000000000000 R09: 0000000000000000 [ 128.927236][ T6785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.935411][ T6785] R13: 00007f3aa9fd7038 R14: 00007f3aa9fd6fa0 R15: 00007ffd0d60e3b8 [ 128.943609][ T6785] [ 130.076408][ T6810] bridge0: port 3(erspan0) entered blocking state [ 130.083093][ T6810] bridge0: port 3(erspan0) entered disabled state [ 130.097414][ T6810] device erspan0 entered promiscuous mode [ 130.106034][ T6810] bridge0: port 3(erspan0) entered blocking state [ 130.113014][ T6810] bridge0: port 3(erspan0) entered forwarding state [ 130.133111][ T6810] device erspan0 left promiscuous mode [ 130.139273][ T6810] bridge0: port 3(erspan0) entered disabled state [ 130.422882][ C1] sched: RT throttling activated [ 130.571231][ T6812] bridge0: port 3(erspan0) entered blocking state [ 130.577787][ T6812] bridge0: port 3(erspan0) entered disabled state [ 130.585517][ T6812] device erspan0 entered promiscuous mode [ 130.591919][ T6812] bridge0: port 3(erspan0) entered blocking state [ 130.598433][ T6812] bridge0: port 3(erspan0) entered forwarding state [ 130.870125][ T6827] netlink: 'syz.1.895': attribute type 15 has an invalid length. [ 131.235596][ T6840] netlink: 24 bytes leftover after parsing attributes in process `syz.4.898'. [ 131.262939][ T6839] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 132.026792][ T6858] loop4: detected capacity change from 0 to 1024 [ 132.254177][ T6859] bridge0: port 3(erspan0) entered blocking state [ 132.262663][ T6859] bridge0: port 3(erspan0) entered disabled state [ 132.353165][ T6859] device erspan0 entered promiscuous mode [ 132.382159][ T6859] bridge0: port 3(erspan0) entered blocking state [ 132.388760][ T6859] bridge0: port 3(erspan0) entered forwarding state [ 132.594403][ T6859] device erspan0 left promiscuous mode [ 132.611523][ T6859] bridge0: port 3(erspan0) entered disabled state [ 133.401461][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.423046][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.403261][ T4202] Bluetooth: hci4: link tx timeout [ 134.409350][ T4202] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 134.419346][ T4202] Bluetooth: hci4: link tx timeout [ 134.424798][ T4202] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.504123][ T6858] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 134.537871][ T6858] EXT4-fs: error -4 creating inode table initialization thread [ 134.547804][ T6858] EXT4-fs (loop4): mount failed [ 134.760630][ T6876] netlink: 'syz.4.909': attribute type 15 has an invalid length. [ 134.960282][ T6878] device syzkaller1 entered promiscuous mode [ 134.971255][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.911'. [ 135.166592][ T6893] mmap: syz.2.916 (6893) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 135.219769][ T6898] ip_tables: iptables: counters copy to user failed while replacing table [ 135.550662][ T6899] FAULT_INJECTION: forcing a failure. [ 135.550662][ T6899] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 135.550695][ T6899] CPU: 0 PID: 6899 Comm: syz.2.916 Not tainted syzkaller #0 [ 135.550714][ T6899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 135.550726][ T6899] Call Trace: [ 135.550733][ T6899] [ 135.550742][ T6899] dump_stack_lvl+0x188/0x250 [ 135.550770][ T6899] ? show_regs_print_info+0x20/0x20 [ 135.550790][ T6899] ? load_image+0x410/0x410 [ 135.550816][ T6899] ? __lock_acquire+0x7b50/0x7b50 [ 135.550845][ T6899] should_fail+0x383/0x4b0 [ 135.550871][ T6899] _copy_to_user+0x2e/0x130 [ 135.550891][ T6899] bpf_verifier_vlog+0x1b5/0x350 [ 135.550917][ T6899] verbose+0x1f0/0x2b0 [ 135.550949][ T6899] ? bpf_check+0xf6c0/0xf6c0 [ 135.550976][ T6899] ? _copy_to_user+0x90/0x130 [ 135.551000][ T6899] print_bpf_insn+0x700/0x1910 [ 135.551034][ T6899] ? bpf_check+0xf6c0/0xf6c0 [ 135.551055][ T6899] ? bpf_verifier_vlog+0x1f9/0x350 [ 135.551079][ T6899] ? func_id_name+0x60/0x60 [ 135.551101][ T6899] ? verbose+0x1f0/0x2b0 [ 135.551124][ T6899] ? __kernel_text_address+0x9a/0x100 [ 135.551149][ T6899] ? bpf_check+0xf6c0/0xf6c0 [ 135.551184][ T6899] do_check+0x4971/0xf150 [ 135.551219][ T6899] ? do_check_common+0x179/0x16e0 [ 135.551236][ T6899] ? bpf_prog_load+0xfdf/0x14e0 [ 135.551255][ T6899] ? __sys_bpf+0x532/0x6f0 [ 135.551274][ T6899] ? do_syscall_64+0x4c/0xa0 [ 135.551317][ T6899] ? mark_reg_unknown+0x590/0x590 [ 135.551341][ T6899] ? bpf_check+0xf6c0/0xf6c0 [ 135.551361][ T6899] ? mark_reg_not_init+0x590/0x590 [ 135.551382][ T6899] ? btf_check_subprog_arg_match+0x13e/0x290 [ 135.551406][ T6899] do_check_common+0xe7f/0x16e0 [ 135.551435][ T6899] bpf_check+0x88cf/0xf6c0 [ 135.551478][ T6899] ? mark_lock+0x94/0x320 [ 135.551500][ T6899] ? bpf_get_btf_vmlinux+0x10/0x10 [ 135.551527][ T6899] ? __lock_acquire+0x13dc/0x7b50 [ 135.551558][ T6899] ? verify_lock_unused+0x140/0x140 [ 135.551587][ T6899] ? verify_lock_unused+0x140/0x140 [ 135.551612][ T6899] ? rcu_lock_release+0x5/0x20 [ 135.551647][ T6899] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 135.551671][ T6899] ? lock_chain_count+0x20/0x20 [ 135.551698][ T6899] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 135.551717][ T6899] ? lockdep_hardirqs_on+0x94/0x140 [ 135.551737][ T6899] ? ktime_get_with_offset+0xff/0x320 [ 135.551754][ T6899] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 135.551772][ T6899] ? ktime_get_real_ts64+0x440/0x440 [ 135.551788][ T6899] ? pcpu_alloc+0x11e6/0x16d0 [ 135.551816][ T6899] ? __might_fault+0xb3/0x110 [ 135.551837][ T6899] ? memset+0x1e/0x40 [ 135.551854][ T6899] ? bpf_obj_name_cpy+0x190/0x1d0 [ 135.551877][ T6899] bpf_prog_load+0xfdf/0x14e0 [ 135.551906][ T6899] ? map_freeze+0x360/0x360 [ 135.551924][ T6899] ? __might_fault+0xb7/0x110 [ 135.551954][ T6899] ? __might_fault+0xb3/0x110 [ 135.551973][ T6899] ? bpf_lsm_bpf+0x5/0x10 [ 135.551993][ T6899] ? security_bpf+0x7a/0xa0 [ 135.552012][ T6899] __sys_bpf+0x532/0x6f0 [ 135.552044][ T6899] ? bpf_link_show_fdinfo+0x380/0x380 [ 135.552084][ T6899] __x64_sys_bpf+0x78/0x90 [ 135.552106][ T6899] do_syscall_64+0x4c/0xa0 [ 135.552124][ T6899] ? clear_bhb_loop+0x30/0x80 [ 135.552143][ T6899] ? clear_bhb_loop+0x30/0x80 [ 135.552164][ T6899] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.552185][ T6899] RIP: 0033:0x7f6adea34159 [ 135.552203][ T6899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.552219][ T6899] RSP: 002b:00007f6adcc6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.552243][ T6899] RAX: ffffffffffffffda RBX: 00007f6adecbc090 RCX: 00007f6adea34159 [ 135.552258][ T6899] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 135.552271][ T6899] RBP: 00007f6adeacb06b R08: 0000000000000000 R09: 0000000000000000 [ 135.552284][ T6899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.552296][ T6899] R13: 00007f6adecbc128 R14: 00007f6adecbc090 R15: 00007ffefd1ad438 [ 135.552325][ T6899] [ 135.864078][ T6919] device erspan0 left promiscuous mode [ 135.866406][ T6919] bridge0: port 3(erspan0) entered disabled state [ 136.531983][ T4229] Bluetooth: hci4: command 0x0406 tx timeout [ 136.702554][ T6930] device syzkaller0 entered promiscuous mode [ 136.717992][ T6930] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 136.958842][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.928'. [ 137.268771][ T6944] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 137.369069][ T6953] netlink: 24 bytes leftover after parsing attributes in process `syz.5.932'. [ 137.844727][ T6978] device syzkaller0 entered promiscuous mode [ 137.857136][ T6981] loop4: detected capacity change from 0 to 256 [ 137.921164][ T6984] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 137.991945][ T6981] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 138.196252][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.941'. [ 138.583327][ T4233] Bluetooth: hci4: command 0x0406 tx timeout [ 138.634275][ T7008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.944'. [ 139.082803][ T7023] device syzkaller0 entered promiscuous mode [ 139.128299][ T7023] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 139.491836][ T7045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.960'. [ 139.875014][ T7058] loop2: detected capacity change from 0 to 512 [ 139.943753][ T7064] device syzkaller0 entered promiscuous mode [ 139.966144][ T7058] EXT4-fs (loop2): Ignoring removed nobh option [ 139.987278][ T7058] EXT4-fs (loop2): orphan cleanup on readonly fs [ 139.994685][ T7064] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 140.018012][ T7058] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.966: bg 0: block 7: invalid block bitmap [ 140.056175][ T7058] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 140.109353][ T7058] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2928: inode #11: comm syz.2.966: corrupted xattr block 95 [ 140.166564][ T7058] EXT4-fs warning (device loop2): ext4_evict_inode:304: xattr delete (err -117) [ 140.196422][ T7058] EXT4-fs (loop2): 1 orphan inode deleted [ 140.202300][ T7058] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nobh,,errors=continue. Quota mode: none. [ 140.569496][ T7081] device syzkaller0 entered promiscuous mode [ 141.563461][ T7085] bridge0: port 3(syz_tun) entered blocking state [ 141.573498][ T7085] bridge0: port 3(syz_tun) entered disabled state [ 141.603267][ T7085] device syz_tun entered promiscuous mode [ 141.609575][ T7085] bridge0: port 3(syz_tun) entered blocking state [ 141.616136][ T7085] bridge0: port 3(syz_tun) entered forwarding state [ 141.661521][ T7092] loop2: detected capacity change from 0 to 512 [ 141.714119][ T7092] EXT4-fs (loop2): Ignoring removed nobh option [ 141.840833][ T7092] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 141.877238][ T7092] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 141.958602][ T7092] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #13: comm syz.2.980: inode has both inline data and extents flags [ 142.009822][ T7092] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.980: couldn't read orphan inode 13 (err -117) [ 142.041290][ T7092] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 142.063277][ T7105] netlink: 24 bytes leftover after parsing attributes in process `syz.4.985'. [ 142.149015][ T7108] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.986'. [ 142.204338][ T7108] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.986'. [ 142.394532][ T7114] netlink: 'syz.2.987': attribute type 15 has an invalid length. [ 142.596364][ T7117] device syzkaller0 entered promiscuous mode [ 143.519587][ T7137] FAULT_INJECTION: forcing a failure. [ 143.519587][ T7137] name failslab, interval 1, probability 0, space 0, times 0 [ 143.594115][ T7146] FAULT_INJECTION: forcing a failure. [ 143.594115][ T7146] name failslab, interval 1, probability 0, space 0, times 0 [ 143.596058][ T7137] CPU: 0 PID: 7137 Comm: syz.4.995 Not tainted syzkaller #0 [ 143.614073][ T7137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.624334][ T7137] Call Trace: [ 143.627659][ T7137] [ 143.630616][ T7137] dump_stack_lvl+0x188/0x250 [ 143.635470][ T7137] ? show_regs_print_info+0x20/0x20 [ 143.640698][ T7137] ? load_image+0x410/0x410 [ 143.645250][ T7137] ? __might_sleep+0xf0/0xf0 [ 143.649875][ T7137] ? __lock_acquire+0x7b50/0x7b50 [ 143.654945][ T7137] should_fail+0x383/0x4b0 [ 143.659402][ T7137] should_failslab+0x5/0x20 [ 143.664017][ T7137] slab_pre_alloc_hook+0x51/0xc0 [ 143.668980][ T7137] ? create_new_namespaces+0x34/0x700 [ 143.674385][ T7137] kmem_cache_alloc+0x3d/0x280 [ 143.679221][ T7137] create_new_namespaces+0x34/0x700 [ 143.684446][ T7137] ? __fget_files+0x402/0x470 [ 143.689151][ T7137] __se_sys_setns+0x2c8/0x15e0 [ 143.693955][ T7137] ? __x64_sys_setns+0x60/0x60 [ 143.698752][ T7137] ? lockdep_hardirqs_on+0x94/0x140 [ 143.703977][ T7137] do_syscall_64+0x4c/0xa0 [ 143.708509][ T7137] ? clear_bhb_loop+0x30/0x80 [ 143.713194][ T7137] ? clear_bhb_loop+0x30/0x80 [ 143.717885][ T7137] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.723797][ T7137] RIP: 0033:0x7f725690d159 [ 143.728234][ T7137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.747890][ T7137] RSP: 002b:00007f7254b65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 143.756343][ T7137] RAX: ffffffffffffffda RBX: 00007f7256b94fa0 RCX: 00007f725690d159 [ 143.764431][ T7137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 143.772520][ T7137] RBP: 00007f72569a406b R08: 0000000000000000 R09: 0000000000000000 [ 143.780510][ T7137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.788500][ T7137] R13: 00007f7256b95038 R14: 00007f7256b94fa0 R15: 00007ffd7d58a758 [ 143.796581][ T7137] [ 143.799612][ T7146] CPU: 1 PID: 7146 Comm: syz.2.998 Not tainted syzkaller #0 [ 143.806935][ T7146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.817027][ T7146] Call Trace: [ 143.820333][ T7146] [ 143.823291][ T7146] dump_stack_lvl+0x188/0x250 [ 143.828007][ T7146] ? show_regs_print_info+0x20/0x20 [ 143.833235][ T7146] ? load_image+0x410/0x410 [ 143.838110][ T7146] ? __might_sleep+0xf0/0xf0 [ 143.842731][ T7146] ? __lock_acquire+0x7b50/0x7b50 [ 143.847789][ T7146] should_fail+0x383/0x4b0 [ 143.852239][ T7146] should_failslab+0x5/0x20 [ 143.856770][ T7146] slab_pre_alloc_hook+0x51/0xc0 [ 143.861742][ T7146] __kmalloc+0x6b/0x340 [ 143.865932][ T7146] ? security_prepare_creds+0x47/0x130 [ 143.871420][ T7146] ? prepare_creds+0x3c/0x610 [ 143.876175][ T7146] security_prepare_creds+0x47/0x130 [ 143.881507][ T7146] prepare_creds+0x450/0x610 [ 143.886123][ T7146] copy_creds+0x146/0xce0 [ 143.890528][ T7146] copy_process+0x8d7/0x3e70 [ 143.895438][ T7146] ? __pidfd_prepare+0x140/0x140 [ 143.900420][ T7146] ? verify_lock_unused+0x140/0x140 [ 143.905659][ T7146] kernel_clone+0x23f/0x990 [ 143.910199][ T7146] ? create_io_thread+0x180/0x180 [ 143.915269][ T7146] __x64_sys_clone+0x19a/0x210 [ 143.920062][ T7146] ? __ia32_sys_vfork+0x130/0x130 [ 143.925146][ T7146] ? lockdep_hardirqs_on+0x94/0x140 [ 143.930418][ T7146] do_syscall_64+0x4c/0xa0 [ 143.934859][ T7146] ? clear_bhb_loop+0x30/0x80 [ 143.939560][ T7146] ? clear_bhb_loop+0x30/0x80 [ 143.944269][ T7146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.950193][ T7146] RIP: 0033:0x7f6adea34159 [ 143.954634][ T7146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.974466][ T7146] RSP: 002b:00007f6adcc8bfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 143.983190][ T7146] RAX: ffffffffffffffda RBX: 00007f6adecbbfa0 RCX: 00007f6adea34159 [ 143.991375][ T7146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.999389][ T7146] RBP: 00007f6adeacb06b R08: 0000000000000000 R09: 0000000000000000 [ 144.007398][ T7146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.015493][ T7146] R13: 00007f6adecbc038 R14: 00007f6adecbbfa0 R15: 00007ffefd1ad438 [ 144.023601][ T7146] [ 144.433943][ T7166] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1002'. [ 144.480071][ T7170] netlink: 'syz.5.1004': attribute type 15 has an invalid length. [ 145.590668][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1010'. [ 145.704700][ T7193] loop2: detected capacity change from 0 to 1024 [ 145.808135][ T7206] loop4: detected capacity change from 0 to 128 [ 145.826637][ T7193] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.925678][ T26] audit: type=1800 audit(1791023003.569:67): pid=7193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1011" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 145.985382][ T7206] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 146.016646][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1016'. [ 146.019932][ T7206] ext4 filesystem being mounted at /224/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 146.060478][ T7193] loop_set_status: loop2 () has still dirty pages (nrpages=4) [ 146.106924][ T4187] EXT4-fs error (device loop2): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /235/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 146.135441][ T4187] EXT4-fs error (device loop2): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /235/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 146.168333][ T7224] netlink: 'syz.1.1017': attribute type 15 has an invalid length. [ 146.177207][ T4187] EXT4-fs error (device loop2): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 146.220678][ T4187] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 146.253686][ T4187] EXT4-fs error (device loop2): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /235/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 146.310463][ T7226] loop1: detected capacity change from 0 to 512 [ 146.320364][ T4187] EXT4-fs error (device loop2): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /235/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 146.372748][ T4187] EXT4-fs error (device loop2): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 146.440317][ T4187] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 146.465569][ T7226] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 146.473966][ T7226] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 146.487222][ T7226] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #13: comm syz.1.1019: iget: bad i_size value: 12154757448730 [ 146.500710][ T4187] EXT4-fs error (device loop2): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /235/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 146.513280][ T7237] FAULT_INJECTION: forcing a failure. [ 146.513280][ T7237] name failslab, interval 1, probability 0, space 0, times 0 [ 146.537926][ T7226] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.1019: couldn't read orphan inode 13 (err -117) [ 146.550458][ T4187] EXT4-fs error (device loop2): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /235/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 146.589426][ T7226] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 146.601083][ T7237] CPU: 1 PID: 7237 Comm: syz.5.1022 Not tainted syzkaller #0 [ 146.616335][ T7237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 146.626521][ T7237] Call Trace: [ 146.629919][ T7237] [ 146.632880][ T7237] dump_stack_lvl+0x188/0x250 [ 146.637607][ T7237] ? show_regs_print_info+0x20/0x20 [ 146.642841][ T7237] ? load_image+0x410/0x410 [ 146.647387][ T7237] ? __might_sleep+0xf0/0xf0 [ 146.652013][ T7237] ? __lock_acquire+0x7b50/0x7b50 [ 146.657085][ T7237] should_fail+0x383/0x4b0 [ 146.661554][ T7237] should_failslab+0x5/0x20 [ 146.666089][ T7237] slab_pre_alloc_hook+0x51/0xc0 [ 146.671247][ T7237] __kmalloc+0x6b/0x340 [ 146.675450][ T7237] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 146.681216][ T7237] tomoyo_realpath_from_path+0xed/0x5e0 [ 146.686817][ T7237] tomoyo_check_open_permission+0x1eb/0x410 [ 146.692759][ T7237] ? tomoyo_check_path_number_acl+0x280/0x280 [ 146.698866][ T7237] ? step_into+0x363/0xcd0 [ 146.702612][ T4187] EXT4-fs error (device loop2): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 146.703348][ T7237] ? __lock_acquire+0x7b50/0x7b50 [ 146.703379][ T7237] ? __rwlock_init+0x140/0x140 [ 146.703402][ T7237] ? hook_file_open+0xf1/0x230 [ 146.703420][ T7237] ? tomoyo_file_open+0xe9/0x170 [ 146.703445][ T7237] security_file_open+0x5e/0xa0 [ 146.727485][ T4187] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 146.728095][ T7237] do_dentry_open+0x321/0xf90 [ 146.728138][ T7237] ? vfs_open+0x2b/0x80 [ 146.734466][ T4187] EXT4-fs error (device loop2): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /235/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 146.737665][ T7237] path_openat+0x2718/0x2fb0 [ 146.737719][ T7237] ? __kasan_slab_alloc+0xa9/0xc0 [ 146.744409][ T4187] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 146.747486][ T7237] ? do_filp_open+0x400/0x400 [ 146.764020][ T4187] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 146.766322][ T7237] do_filp_open+0x1df/0x400 [ 146.772107][ T4187] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 146.792762][ T7237] ? vfs_tmpfile+0x300/0x300 [ 146.792814][ T7237] ? _raw_spin_unlock+0x24/0x40 [ 146.792836][ T7237] ? alloc_fd+0x59e/0x650 [ 146.792863][ T7237] do_sys_openat2+0x14b/0x500 [ 146.792883][ T7237] ? __lock_acquire+0x7b50/0x7b50 [ 146.792906][ T7237] ? do_sys_open+0xe0/0xe0 [ 146.792924][ T7237] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 146.792950][ T7237] ? lock_chain_count+0x20/0x20 [ 146.792975][ T7237] __x64_sys_openat+0x135/0x160 [ 146.792998][ T7237] do_syscall_64+0x4c/0xa0 [ 146.793019][ T7237] ? clear_bhb_loop+0x30/0x80 [ 146.801567][ T4187] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 146.802719][ T7237] ? clear_bhb_loop+0x30/0x80 [ 146.802752][ T7237] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.819820][ T4187] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 146.821658][ T7237] RIP: 0033:0x7f79ffc0d98e [ 146.821683][ T7237] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 146.821700][ T7237] RSP: 002b:00007f79fdea4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 146.821723][ T7237] RAX: ffffffffffffffda RBX: 00007f79fdea56c0 RCX: 00007f79ffc0d98e [ 146.821738][ T7237] RDX: 0000000000000002 RSI: 00007f79fdea4c00 RDI: ffffffffffffff9c [ 146.821752][ T7237] RBP: 00007f79ffce406b R08: 0000000000000000 R09: 0000000000000000 [ 146.821765][ T7237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.821778][ T7237] R13: 00007f79ffed5038 R14: 00007f79ffed4fa0 R15: 00007ffe2d52cae8 [ 146.821811][ T7237] [ 146.871749][ T7237] ERROR: Out of memory at tomoyo_realpath_from_path. [ 146.884268][ T4187] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 147.056552][ T4187] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 147.430429][ T7263] loop3: detected capacity change from 0 to 1024 [ 147.573564][ T7263] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,resuid=0x0000000000000000,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,abort,min_batch_time=0x0000000000000004,grpjquota=,,errors=continue. Quota mode: none. [ 147.889038][ T7273] netlink: 'syz.3.1029': attribute type 15 has an invalid length. [ 148.257528][ T4235] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.363486][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1031'. [ 148.483709][ T4235] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.611784][ T4235] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.785161][ T4235] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.464129][ T4235] tipc: Left network mode [ 149.786968][ T7326] loop4: detected capacity change from 0 to 512 [ 149.836655][ T7328] netlink: 'syz.3.1040': attribute type 15 has an invalid length. [ 149.904658][ T7326] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.1039: bad orphan inode 13 [ 150.007378][ T7326] ext4_test_bit(bit=12, block=4) = 1 [ 150.012738][ T7326] is_bad_inode(inode)=0 [ 150.052960][ T7326] NEXT_ORPHAN(inode)=0 [ 150.057172][ T7326] max_ino=32 [ 150.062447][ T7326] i_nlink=1 [ 150.069635][ T7326] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.117890][ T7326] EXT4-fs warning (device loop4): dx_probe:845: inode #2: comm syz.4.1039: Hash code is SIPHASH, but hash not in dirent [ 150.170505][ T7326] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1039: Corrupt directory, running e2fsck is recommended [ 150.208210][ T7326] EXT4-fs warning (device loop4): dx_probe:845: inode #2: comm syz.4.1039: Hash code is SIPHASH, but hash not in dirent [ 150.255131][ T7326] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1039: Corrupt directory, running e2fsck is recommended [ 150.287937][ T7341] device syzkaller0 entered promiscuous mode [ 150.299341][ T7326] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #2: block 13: comm syz.4.1039: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 150.463130][ T7320] chnl_net:caif_netlink_parms(): no params data found [ 150.644294][ T7357] loop3: detected capacity change from 0 to 128 [ 150.795050][ T7357] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.858716][ T7357] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 150.956059][ T7320] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.980001][ T7320] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.022512][ T7320] device bridge_slave_0 entered promiscuous mode [ 151.039698][ T7376] netlink: 'syz.4.1053': attribute type 15 has an invalid length. [ 151.072742][ T7320] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.109070][ T7320] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.144424][ T7320] device bridge_slave_1 entered promiscuous mode [ 151.178912][ T7384] loop4: detected capacity change from 0 to 512 [ 151.220693][ T7384] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 151.275722][ T7384] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 151.319676][ T7320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.363308][ T7320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.401117][ T7384] EXT4-fs (loop4): 1 truncate cleaned up [ 151.541858][ T7384] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 151.730907][ T4235] device hsr_slave_0 left promiscuous mode [ 151.783460][ T4262] Bluetooth: hci2: command 0x0409 tx timeout [ 151.824398][ T4235] device hsr_slave_1 left promiscuous mode [ 151.940875][ T4235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.084125][ T4235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.224568][ T4235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.233315][ T4235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.315642][ T4235] device bridge_slave_1 left promiscuous mode [ 152.322076][ T4235] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.375329][ T4235] device bridge_slave_0 left promiscuous mode [ 152.409055][ T4235] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.462075][ T4235] device veth1_macvtap left promiscuous mode [ 152.475419][ T4235] device veth0_macvtap left promiscuous mode [ 152.482223][ T4235] device veth1_vlan left promiscuous mode [ 152.488596][ T4235] device veth0_vlan left promiscuous mode [ 152.610088][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 152.632454][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 152.784870][ T7406] fido_id[7406]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 152.817797][ T7409] FAULT_INJECTION: forcing a failure. [ 152.817797][ T7409] name failslab, interval 1, probability 0, space 0, times 0 [ 152.842476][ T7409] CPU: 1 PID: 7409 Comm: syz.4.1061 Not tainted syzkaller #0 [ 152.850031][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 152.860319][ T7409] Call Trace: [ 152.863629][ T7409] [ 152.866589][ T7409] dump_stack_lvl+0x188/0x250 [ 152.871306][ T7409] ? show_regs_print_info+0x20/0x20 [ 152.876541][ T7409] ? load_image+0x410/0x410 [ 152.881196][ T7409] ? __might_sleep+0xf0/0xf0 [ 152.885927][ T7409] ? __lock_acquire+0x7b50/0x7b50 [ 152.891091][ T7409] should_fail+0x383/0x4b0 [ 152.895556][ T7409] should_failslab+0x5/0x20 [ 152.900090][ T7409] slab_pre_alloc_hook+0x51/0xc0 [ 152.905077][ T7409] __kmalloc_node+0x6d/0x3a0 [ 152.909700][ T7409] ? get_callchain_buffers+0x15f/0x360 [ 152.915207][ T7409] get_callchain_buffers+0x15f/0x360 [ 152.920538][ T7409] stack_map_alloc+0x384/0x550 [ 152.925343][ T7409] map_create+0x481/0x2330 [ 152.929802][ T7409] ? bpf_lsm_bpf+0x5/0x10 [ 152.934173][ T7409] __sys_bpf+0x30a/0x6f0 [ 152.938466][ T7409] ? bpf_link_show_fdinfo+0x380/0x380 [ 152.943981][ T7409] __x64_sys_bpf+0x78/0x90 [ 152.948439][ T7409] do_syscall_64+0x4c/0xa0 [ 152.952976][ T7409] ? clear_bhb_loop+0x30/0x80 [ 152.957684][ T7409] ? clear_bhb_loop+0x30/0x80 [ 152.962401][ T7409] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.968323][ T7409] RIP: 0033:0x7f725690d159 [ 152.972769][ T7409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.992619][ T7409] RSP: 002b:00007f7254b65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 153.001189][ T7409] RAX: ffffffffffffffda RBX: 00007f7256b94fa0 RCX: 00007f725690d159 [ 153.009197][ T7409] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 153.017224][ T7409] RBP: 00007f72569a406b R08: 0000000000000000 R09: 0000000000000000 [ 153.025429][ T7409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.033444][ T7409] R13: 00007f7256b95038 R14: 00007f7256b94fa0 R15: 00007ffd7d58a758 [ 153.041471][ T7409] [ 153.375805][ T4235] team0 (unregistering): Port device team_slave_1 removed [ 153.404139][ T4235] team0 (unregistering): Port device team_slave_0 removed [ 153.442786][ T4235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.486758][ T4235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.919172][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 154.454195][ T4235] bond0 (unregistering): Released all slaves [ 154.613556][ T7421] device syzkaller0 entered promiscuous mode [ 154.670313][ T7320] team0: Port device team_slave_0 added [ 154.707521][ T7320] team0: Port device team_slave_1 added [ 154.871393][ T7432] device syzkaller0 entered promiscuous mode [ 155.011922][ T7320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.033179][ T7320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.073513][ T7443] loop3: detected capacity change from 0 to 2048 [ 155.110753][ T7320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.173957][ T7443] loop3: p1 < > p4 [ 155.173957][ T7443] p4: [ 155.184229][ T7443] loop3: p4 size 722688 extends beyond EOD, truncated [ 155.191858][ T7320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.204643][ T7320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.242279][ T3556] loop3: p1 < > p4 [ 155.242279][ T3556] p4: [ 155.289589][ T3556] loop3: p4 size 722688 extends beyond EOD, truncated [ 155.289884][ T7320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.442017][ T7456] capability: warning: `syz.4.1074' uses deprecated v2 capabilities in a way that may be insecure [ 155.443789][ T7320] device hsr_slave_0 entered promiscuous mode [ 155.524770][ T7320] device hsr_slave_1 entered promiscuous mode [ 155.524793][ T6860] udevd[6860]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 155.545875][ T7230] udevd[7230]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 155.558638][ T7320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.579226][ T7320] Cannot create hsr debugfs directory [ 155.626714][ T7464] loop1: detected capacity change from 0 to 512 [ 155.734456][ T7464] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.753152][ T7464] ext4 filesystem being mounted at /200/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.952998][ T4262] Bluetooth: hci2: command 0x040f tx timeout [ 156.148573][ T7320] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 156.441734][ T7320] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 156.503918][ T7320] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 156.573065][ T7320] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 156.879719][ T7320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.967572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.000339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.015408][ T7320] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.036916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.058019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.089776][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.096986][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.152491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.180847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.198604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.209465][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.216670][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.237993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.296343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.321449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.358586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.399923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.400735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.401550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.402184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.402706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.407137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.408661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.412455][ T7320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.433832][ T7506] FAULT_INJECTION: forcing a failure. [ 157.433832][ T7506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.433865][ T7506] CPU: 1 PID: 7506 Comm: syz.1.1084 Not tainted syzkaller #0 [ 157.433885][ T7506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 157.433896][ T7506] Call Trace: [ 157.433904][ T7506] [ 157.433912][ T7506] dump_stack_lvl+0x188/0x250 [ 157.433939][ T7506] ? show_regs_print_info+0x20/0x20 [ 157.433959][ T7506] ? load_image+0x410/0x410 [ 157.433983][ T7506] ? __lock_acquire+0x7b50/0x7b50 [ 157.434019][ T7506] should_fail+0x383/0x4b0 [ 157.434046][ T7506] _copy_to_user+0x2e/0x130 [ 157.434067][ T7506] bpf_verifier_vlog+0x1b5/0x350 [ 157.434099][ T7506] verbose+0x1f0/0x2b0 [ 157.434122][ T7506] ? ktime_get_real_ts64+0x440/0x440 [ 157.434142][ T7506] ? bpf_check+0xf6c0/0xf6c0 [ 157.434169][ T7506] ? ktime_get+0x247/0x270 [ 157.434189][ T7506] bpf_check+0xb154/0xf6c0 [ 157.434237][ T7506] ? bpf_get_btf_vmlinux+0x10/0x10 [ 157.434288][ T7506] ? verify_lock_unused+0x140/0x140 [ 157.434313][ T7506] ? rcu_lock_release+0x5/0x20 [ 157.434364][ T7506] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 157.434383][ T7506] ? lockdep_hardirqs_on+0x94/0x140 [ 157.434408][ T7506] ? ktime_get_real_ts64+0x440/0x440 [ 157.434424][ T7506] ? pcpu_alloc+0x11e6/0x16d0 [ 157.434453][ T7506] ? __might_fault+0xb3/0x110 [ 157.434474][ T7506] ? memset+0x1e/0x40 [ 157.434492][ T7506] ? bpf_obj_name_cpy+0x190/0x1d0 [ 157.434516][ T7506] bpf_prog_load+0xfdf/0x14e0 [ 157.434557][ T7506] ? map_freeze+0x360/0x360 [ 157.434579][ T7506] ? __might_fault+0xb7/0x110 [ 157.434613][ T7506] ? __might_fault+0xb3/0x110 [ 157.434632][ T7506] ? bpf_lsm_bpf+0x5/0x10 [ 157.434650][ T7506] ? security_bpf+0x7a/0xa0 [ 157.434671][ T7506] __sys_bpf+0x532/0x6f0 [ 157.434691][ T7506] ? bpf_link_show_fdinfo+0x380/0x380 [ 157.434743][ T7506] __x64_sys_bpf+0x78/0x90 [ 157.434764][ T7506] do_syscall_64+0x4c/0xa0 [ 157.434783][ T7506] ? clear_bhb_loop+0x30/0x80 [ 157.434802][ T7506] ? clear_bhb_loop+0x30/0x80 [ 157.434826][ T7506] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.434848][ T7506] RIP: 0033:0x7f3aa9d4f159 [ 157.434867][ T7506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.434885][ T7506] RSP: 002b:00007f3aa7f86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 157.434909][ T7506] RAX: ffffffffffffffda RBX: 00007f3aa9fd7090 RCX: 00007f3aa9d4f159 [ 157.434924][ T7506] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 157.434938][ T7506] RBP: 00007f3aa9de606b R08: 0000000000000000 R09: 0000000000000000 [ 157.434950][ T7506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.434963][ T7506] R13: 00007f3aa9fd7128 R14: 00007f3aa9fd7090 R15: 00007ffd0d60e3b8 [ 157.434993][ T7506] [ 157.933509][ T7320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.934753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.934946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.023006][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 158.475665][ T7535] device syzkaller0 entered promiscuous mode [ 158.653485][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 158.654229][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.739484][ T7320] device veth0_vlan entered promiscuous mode [ 158.755817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 158.756530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.757287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.757748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.762231][ T7320] device veth1_vlan entered promiscuous mode [ 159.175393][ T7543] loop1: detected capacity change from 0 to 512 [ 159.194462][ T7541] sch_fq: defrate 0 ignored. [ 159.268189][ T7543] EXT4-fs (loop1): Ignoring removed nobh option [ 159.277371][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 159.290358][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 159.333845][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 159.357378][ T7543] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #3: comm syz.1.1090: corrupted inode contents [ 159.376069][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.415501][ T7320] device veth0_macvtap entered promiscuous mode [ 159.433051][ T7543] EXT4-fs (loop1): Remounting filesystem read-only [ 159.446160][ T7320] device veth1_macvtap entered promiscuous mode [ 159.467261][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.475874][ T7543] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #3: comm syz.1.1090: mark_inode_dirty error [ 159.480186][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.571179][ T7543] EXT4-fs (loop1): Remounting filesystem read-only [ 159.586821][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.593933][ T7543] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #3: comm syz.1.1090: corrupted inode contents [ 159.634966][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.660553][ T7543] EXT4-fs (loop1): Remounting filesystem read-only [ 159.677248][ T7543] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.1090: mark_inode_dirty error [ 159.677282][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.677302][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.711569][ T7543] EXT4-fs (loop1): Remounting filesystem read-only [ 159.749454][ T7543] Quota error (device loop1): write_blk: dquota write failed [ 159.766004][ T7543] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 159.788821][ T7543] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.1090: Failed to acquire dquot type 0 [ 159.828091][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.829133][ T7543] EXT4-fs (loop1): Remounting filesystem read-only [ 159.876724][ T7543] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.1090: corrupted inode contents [ 159.877569][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.921522][ T7543] EXT4-fs (loop1): Remounting filesystem read-only [ 159.937830][ T7543] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #16: comm syz.1.1090: mark_inode_dirty error [ 159.968630][ T7543] EXT4-fs (loop1): Remounting filesystem read-only [ 159.969853][ T7320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.983969][ T7543] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.1090: corrupted inode contents [ 160.013462][ T7543] EXT4-fs (loop1): Remounting filesystem read-only [ 160.026997][ T7543] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.1090: mark_inode_dirty error [ 160.040860][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.075469][ T7543] EXT4-fs (loop1): Remounting filesystem read-only [ 160.089105][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.094151][ T7543] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.1090: corrupted inode contents [ 160.118713][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.129269][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.148009][ T7543] EXT4-fs (loop1): Remounting filesystem read-only [ 160.152949][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.173042][ T7543] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 160.193050][ T7543] EXT4-fs (loop1): Remounting filesystem read-only [ 160.200554][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.200999][ T7543] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.1090: corrupted inode contents [ 160.222918][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.250267][ T7543] EXT4-fs (loop1): Remounting filesystem read-only [ 160.264926][ T7543] EXT4-fs error (device loop1): ext4_truncate:4286: inode #16: comm syz.1.1090: mark_inode_dirty error [ 160.276220][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.292666][ T7543] EXT4-fs (loop1): Remounting filesystem read-only [ 160.297461][ T7320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.312655][ T7543] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 160.323699][ T7560] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1093'. [ 160.342388][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 160.372824][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 160.382099][ T7543] EXT4-fs (loop1): Remounting filesystem read-only [ 160.391953][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.414875][ T7543] EXT4-fs (loop1): 1 truncate cleaned up [ 160.420745][ T7543] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback. [ 160.437879][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.449421][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.457718][ T7543] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.469481][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.527787][ T7576] Cannot find add_set index 0 as target [ 160.528604][ T7320] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.564540][ T7320] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.593922][ T7320] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.618509][ T7320] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.781265][ T7576] netlink: 'syz.5.1095': attribute type 2 has an invalid length. [ 160.836922][ T7583] xt_hashlimit: size too large, truncated to 1048576 [ 160.916407][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.962904][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.980306][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 161.004846][ T6768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.040855][ T6768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.115624][ T7587] device syzkaller0 entered promiscuous mode [ 161.292023][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 161.682115][ T7607] loop6: detected capacity change from 0 to 128 [ 161.819869][ T7612] FAULT_INJECTION: forcing a failure. [ 161.819869][ T7612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.819908][ T7612] CPU: 1 PID: 7612 Comm: syz.5.1099 Not tainted syzkaller #0 [ 161.819929][ T7612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 161.819941][ T7612] Call Trace: [ 161.819949][ T7612] [ 161.819958][ T7612] dump_stack_lvl+0x188/0x250 [ 161.819986][ T7612] ? show_regs_print_info+0x20/0x20 [ 161.820007][ T7612] ? load_image+0x410/0x410 [ 161.820038][ T7612] ? __lock_acquire+0x7b50/0x7b50 [ 161.820069][ T7612] should_fail+0x383/0x4b0 [ 161.820106][ T7612] _copy_to_user+0x2e/0x130 [ 161.820129][ T7612] bpf_verifier_vlog+0x1b5/0x350 [ 161.820157][ T7612] verbose+0x1f0/0x2b0 [ 161.820180][ T7612] ? ktime_get_real_ts64+0x440/0x440 [ 161.820203][ T7612] ? bpf_check+0xf6c0/0xf6c0 [ 161.820241][ T7612] ? ktime_get+0x247/0x270 [ 161.820264][ T7612] bpf_check+0xb2f2/0xf6c0 [ 161.820317][ T7612] ? bpf_get_btf_vmlinux+0x10/0x10 [ 161.820384][ T7612] ? verify_lock_unused+0x140/0x140 [ 161.820411][ T7612] ? rcu_lock_release+0x5/0x20 [ 161.820464][ T7612] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 161.820484][ T7612] ? lockdep_hardirqs_on+0x94/0x140 [ 161.820511][ T7612] ? ktime_get_real_ts64+0x440/0x440 [ 161.820529][ T7612] ? pcpu_alloc+0x11e6/0x16d0 [ 161.820558][ T7612] ? __might_fault+0xb3/0x110 [ 161.820580][ T7612] ? memset+0x1e/0x40 [ 161.820599][ T7612] ? bpf_obj_name_cpy+0x190/0x1d0 [ 161.820625][ T7612] bpf_prog_load+0xfdf/0x14e0 [ 161.820660][ T7612] ? map_freeze+0x360/0x360 [ 161.820691][ T7612] ? __might_fault+0xb7/0x110 [ 161.820727][ T7612] ? __might_fault+0xb3/0x110 [ 161.820749][ T7612] ? bpf_lsm_bpf+0x5/0x10 [ 161.820769][ T7612] ? security_bpf+0x7a/0xa0 [ 161.820801][ T7612] __sys_bpf+0x532/0x6f0 [ 161.820825][ T7612] ? bpf_link_show_fdinfo+0x380/0x380 [ 161.820870][ T7612] __x64_sys_bpf+0x78/0x90 [ 161.820893][ T7612] do_syscall_64+0x4c/0xa0 [ 161.820913][ T7612] ? clear_bhb_loop+0x30/0x80 [ 161.820934][ T7612] ? clear_bhb_loop+0x30/0x80 [ 161.820956][ T7612] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.820978][ T7612] RIP: 0033:0x7f79ffc4d159 [ 161.820997][ T7612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.821015][ T7612] RSP: 002b:00007f79fde84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.821042][ T7612] RAX: ffffffffffffffda RBX: 00007f79ffed5090 RCX: 00007f79ffc4d159 [ 161.821066][ T7612] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 161.821080][ T7612] RBP: 00007f79ffce406b R08: 0000000000000000 R09: 0000000000000000 [ 161.821094][ T7612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.821107][ T7612] R13: 00007f79ffed5128 R14: 00007f79ffed5090 R15: 00007ffe2d52cae8 [ 161.821138][ T7612] [ 161.996286][ T7618] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1104'. [ 162.170316][ T7626] bridge0: port 3(erspan0) entered blocking state [ 162.170463][ T7626] bridge0: port 3(erspan0) entered disabled state [ 162.175426][ T7626] device erspan0 entered promiscuous mode [ 162.176825][ T7626] bridge0: port 3(erspan0) entered blocking state [ 162.176865][ T7626] bridge0: port 3(erspan0) entered forwarding state [ 163.243346][ T26] audit: type=1326 audit(1791023020.889:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7630 comm="syz.4.1108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725690d159 code=0x7ffc0000 [ 163.243557][ T26] audit: type=1326 audit(1791023020.889:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7630 comm="syz.4.1108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725690d159 code=0x7ffc0000 [ 163.244163][ T26] audit: type=1326 audit(1791023020.889:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7630 comm="syz.4.1108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725690d159 code=0x7ffc0000 [ 163.244336][ T26] audit: type=1326 audit(1791023020.889:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7630 comm="syz.4.1108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725690d159 code=0x7ffc0000 [ 163.244540][ T26] audit: type=1326 audit(1791023020.889:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7630 comm="syz.4.1108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f725690d159 code=0x7ffc0000 [ 163.244724][ T26] audit: type=1326 audit(1791023020.889:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7630 comm="syz.4.1108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725690d159 code=0x7ffc0000 [ 163.244914][ T26] audit: type=1326 audit(1791023020.889:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7630 comm="syz.4.1108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725690d159 code=0x7ffc0000 [ 163.245130][ T26] audit: type=1326 audit(1791023020.889:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7630 comm="syz.4.1108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f725690d159 code=0x7ffc0000 [ 163.921318][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.206874][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.272871][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.506859][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.612142][ T7662] loop6: detected capacity change from 0 to 4096 [ 164.753591][ T7662] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.805801][ T7677] FAULT_INJECTION: forcing a failure. [ 164.805801][ T7677] name failslab, interval 1, probability 0, space 0, times 0 [ 164.833295][ T7677] CPU: 1 PID: 7677 Comm: syz.4.1119 Not tainted syzkaller #0 [ 164.840733][ T7677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 164.851013][ T7677] Call Trace: [ 164.854338][ T7677] [ 164.857315][ T7677] dump_stack_lvl+0x188/0x250 [ 164.862040][ T7677] ? show_regs_print_info+0x20/0x20 [ 164.867319][ T7677] ? load_image+0x410/0x410 [ 164.871866][ T7677] ? __lock_acquire+0x7b50/0x7b50 [ 164.877024][ T7677] should_fail+0x383/0x4b0 [ 164.881682][ T7677] should_failslab+0x5/0x20 [ 164.886215][ T7677] slab_pre_alloc_hook+0x51/0xc0 [ 164.891269][ T7677] ? sk_prot_alloc+0x57/0x210 [ 164.896050][ T7677] kmem_cache_alloc+0x3d/0x280 [ 164.900840][ T7677] sk_prot_alloc+0x57/0x210 [ 164.905360][ T7677] ? sk_alloc+0x1d/0x310 [ 164.909714][ T7677] sk_alloc+0x2f/0x310 [ 164.913901][ T7677] unix_create1+0xad/0x610 [ 164.918354][ T7677] unix_create+0x139/0x1f0 [ 164.922798][ T7677] __sock_create+0x473/0x910 [ 164.927423][ T7677] __sys_socketpair+0x232/0x540 [ 164.932358][ T7677] __x64_sys_socketpair+0x97/0xb0 [ 164.937422][ T7677] do_syscall_64+0x4c/0xa0 [ 164.941872][ T7677] ? clear_bhb_loop+0x30/0x80 [ 164.946575][ T7677] ? clear_bhb_loop+0x30/0x80 [ 164.951273][ T7677] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.957188][ T7677] RIP: 0033:0x7f725690d159 [ 164.961633][ T7677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.981388][ T7677] RSP: 002b:00007f7254b65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 164.989898][ T7677] RAX: ffffffffffffffda RBX: 00007f7256b94fa0 RCX: 00007f725690d159 [ 164.997918][ T7677] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 165.005935][ T7677] RBP: 00007f72569a406b R08: 0000000000000000 R09: 0000000000000000 [ 165.023573][ T7677] R10: 0000200000010280 R11: 0000000000000246 R12: 0000000000000000 [ 165.053627][ T7677] R13: 00007f7256b95038 R14: 00007f7256b94fa0 R15: 00007ffd7d58a758 [ 165.061664][ T7677] [ 165.064737][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.349333][ T7689] ip_tables: iptables: counters copy to user failed while replacing table [ 166.142692][ T7711] loop4: detected capacity change from 0 to 1024 [ 166.208344][ T7711] EXT4-fs (loop4): Ignoring removed bh option [ 166.290737][ T7711] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 167.315432][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1132'. [ 167.441464][ T7735] tmpfs: Bad value for 'nr_inodes' [ 167.596473][ T7742] device syzkaller0 entered promiscuous mode [ 167.617257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.679807][ T7748] loop3: detected capacity change from 0 to 128 [ 168.049095][ T7763] loop5: detected capacity change from 0 to 128 [ 168.742362][ T7787] ip_tables: iptables: counters copy to user failed while replacing table [ 169.587877][ T7802] bridge0: port 3(syz_tun) entered disabled state [ 169.594642][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.602520][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.669875][ T7802] bridge0: port 3(syz_tun) entered blocking state [ 169.677094][ T7802] bridge0: port 3(syz_tun) entered forwarding state [ 169.686480][ T7802] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.693730][ T7802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.701328][ T7802] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.708530][ T7802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.804601][ T7802] team0: Port device bridge0 added [ 169.811007][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1148'. [ 169.854346][ T7817] device syzkaller0 entered promiscuous mode [ 169.921017][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.931417][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.042473][ T7826] FAULT_INJECTION: forcing a failure. [ 170.042473][ T7826] name failslab, interval 1, probability 0, space 0, times 0 [ 170.056546][ T7826] CPU: 0 PID: 7826 Comm: syz.3.1153 Not tainted syzkaller #0 [ 170.063979][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 170.074158][ T7826] Call Trace: [ 170.077480][ T7826] [ 170.080444][ T7826] dump_stack_lvl+0x188/0x250 [ 170.085186][ T7826] ? show_regs_print_info+0x20/0x20 [ 170.090420][ T7826] ? load_image+0x410/0x410 [ 170.095337][ T7826] ? mark_lock+0x94/0x320 [ 170.099891][ T7826] ? __lock_acquire+0x13dc/0x7b50 [ 170.104970][ T7826] should_fail+0x383/0x4b0 [ 170.109437][ T7826] should_failslab+0x5/0x20 [ 170.113999][ T7826] slab_pre_alloc_hook+0x51/0xc0 [ 170.119080][ T7826] ? radix_tree_node_alloc+0x197/0x3a0 [ 170.124571][ T7826] kmem_cache_alloc+0x3d/0x280 [ 170.129386][ T7826] radix_tree_node_alloc+0x197/0x3a0 [ 170.134793][ T7826] ? netlink_sendmsg+0x8ba/0xbe0 [ 170.140864][ T7826] ? ___sys_sendmsg+0x236/0x2e0 [ 170.145750][ T7826] ? __se_sys_sendmsg+0x1b7/0x2a0 [ 170.150822][ T7826] idr_get_free+0x28b/0xa10 [ 170.155459][ T7826] idr_alloc_cyclic+0x286/0x610 [ 170.160353][ T7826] ? idr_alloc+0x2e0/0x2e0 [ 170.164902][ T7826] ? do_raw_spin_lock+0x128/0x2f0 [ 170.169977][ T7826] __kernfs_new_node+0x12d/0x6b0 [ 170.175043][ T7826] ? kernfs_new_node+0x250/0x250 [ 170.180203][ T7826] ? make_kgid+0x1c4/0x650 [ 170.184709][ T7826] ? from_kuid_munged+0x6e0/0x6e0 [ 170.189882][ T7826] kernfs_new_node+0x148/0x250 [ 170.194684][ T7826] kernfs_create_dir_ns+0x40/0x120 [ 170.199844][ T7826] sysfs_create_dir_ns+0x12c/0x290 [ 170.205005][ T7826] ? sysfs_warn_dup+0xa0/0xa0 [ 170.209855][ T7826] ? do_raw_spin_unlock+0x11d/0x230 [ 170.215103][ T7826] kobject_add_internal+0x5ba/0xcd0 [ 170.220340][ T7826] kobject_add+0x160/0x230 [ 170.224789][ T7826] ? kobject_init+0x1c0/0x1c0 [ 170.229510][ T7826] ? get_device_parent+0x288/0x3e0 [ 170.234651][ T7826] device_add+0x470/0x1050 [ 170.239104][ T7826] netdev_register_kobject+0x184/0x320 [ 170.244607][ T7826] register_netdevice+0x10e8/0x1720 [ 170.251785][ T7826] ? netif_stacked_transfer_operstate+0x200/0x200 [ 170.258249][ T7826] ? xdp_rxq_info_reg+0xe0/0x2e0 [ 170.263226][ T7826] ? validate_linkmsg+0x3db/0x4c0 [ 170.268306][ T7826] ? bond_validate+0x150/0x150 [ 170.273117][ T7826] bond_newlink+0x33/0x80 [ 170.277494][ T7826] ? bond_validate+0x150/0x150 [ 170.282443][ T7826] rtnl_newlink+0x139e/0x1920 [ 170.287187][ T7826] ? rtnl_setlink+0x500/0x500 [ 170.291911][ T7826] ? mark_lock+0x94/0x320 [ 170.296425][ T7826] ? __lock_acquire+0x13dc/0x7b50 [ 170.301486][ T7826] ? lock_chain_count+0x20/0x20 [ 170.306558][ T7826] ? rtnetlink_rcv_msg+0x79f/0xf10 [ 170.311731][ T7826] ? rtnl_setlink+0x500/0x500 [ 170.316444][ T7826] rtnetlink_rcv_msg+0x7f1/0xf10 [ 170.321423][ T7826] ? lock_chain_count+0x20/0x20 [ 170.326310][ T7826] ? rtnetlink_bind+0x80/0x80 [ 170.331025][ T7826] ? __local_bh_enable_ip+0x136/0x1c0 [ 170.336422][ T7826] ? lockdep_hardirqs_on+0x94/0x140 [ 170.341651][ T7826] ? __local_bh_enable_ip+0x136/0x1c0 [ 170.347198][ T7826] ? _local_bh_enable+0xa0/0xa0 [ 170.352112][ T7826] ? __dev_queue_xmit+0x1b64/0x2e50 [ 170.357359][ T7826] ? dev_queue_xmit+0x20/0x20 [ 170.362060][ T7826] ? memcpy+0x3c/0x60 [ 170.366071][ T7826] ? __copy_skb_header+0x3ba/0x4f0 [ 170.371230][ T7826] netlink_rcv_skb+0x1e9/0x430 [ 170.376030][ T7826] ? rtnetlink_bind+0x80/0x80 [ 170.380836][ T7826] ? netlink_ack+0xb10/0xb10 [ 170.385560][ T7826] netlink_unicast+0x78f/0x940 [ 170.390361][ T7826] netlink_sendmsg+0x8ba/0xbe0 [ 170.395158][ T7826] ? netlink_getsockopt+0x570/0x570 [ 170.400383][ T7826] ? aa_sock_msg_perm+0x94/0x150 [ 170.405350][ T7826] ? apparmor_socket_sendmsg+0x173/0x230 [ 170.411010][ T7826] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 170.416315][ T7826] ? security_socket_sendmsg+0x7c/0xa0 [ 170.421807][ T7826] ? netlink_getsockopt+0x570/0x570 [ 170.427108][ T7826] ____sys_sendmsg+0x5be/0x8f0 [ 170.431920][ T7826] ? __sys_sendmsg_sock+0x30/0x30 [ 170.436985][ T7826] ? import_iovec+0x6f/0xa0 [ 170.441651][ T7826] ___sys_sendmsg+0x236/0x2e0 [ 170.446465][ T7826] ? __sys_sendmsg+0x290/0x290 [ 170.451298][ T7826] __se_sys_sendmsg+0x1b7/0x2a0 [ 170.456174][ T7826] ? __x64_sys_sendmsg+0x80/0x80 [ 170.461142][ T7826] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 170.467254][ T7826] ? lockdep_hardirqs_on+0x94/0x140 [ 170.472488][ T7826] do_syscall_64+0x4c/0xa0 [ 170.476974][ T7826] ? clear_bhb_loop+0x30/0x80 [ 170.481688][ T7826] ? clear_bhb_loop+0x30/0x80 [ 170.486486][ T7826] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.492497][ T7826] RIP: 0033:0x7f74d59ca159 [ 170.496987][ T7826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.516793][ T7826] RSP: 002b:00007f74d3c22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.525334][ T7826] RAX: ffffffffffffffda RBX: 00007f74d5c51fa0 RCX: 00007f74d59ca159 [ 170.533349][ T7826] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 0000000000000003 [ 170.541348][ T7826] RBP: 00007f74d5a6106b R08: 0000000000000000 R09: 0000000000000000 [ 170.549344][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.557335][ T7826] R13: 00007f74d5c52038 R14: 00007f74d5c51fa0 R15: 00007fff98afd808 [ 170.565450][ T7826] [ 170.568742][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.724488][ T7828] device syzkaller0 entered promiscuous mode [ 171.009320][ T7850] loop6: detected capacity change from 0 to 128 [ 171.153710][ T7854] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.200719][ T7854] loop3: detected capacity change from 0 to 512 [ 171.659324][ T7854] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 171.671070][ T7854] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.683698][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1164'. [ 173.120267][ T7884] device syzkaller0 entered promiscuous mode [ 173.162150][ T7887] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 173.202894][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.514104][ T7898] device syzkaller0 entered promiscuous mode [ 173.781727][ T7911] FAULT_INJECTION: forcing a failure. [ 173.781727][ T7911] name failslab, interval 1, probability 0, space 0, times 0 [ 173.876783][ T7916] syz.5.1176 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 173.923154][ T7911] CPU: 1 PID: 7911 Comm: syz.6.1177 Not tainted syzkaller #0 [ 173.923245][ T7911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 173.923258][ T7911] Call Trace: [ 173.923267][ T7911] [ 173.923277][ T7911] dump_stack_lvl+0x188/0x250 [ 173.923309][ T7911] ? show_regs_print_info+0x20/0x20 [ 173.923330][ T7911] ? load_image+0x410/0x410 [ 173.923405][ T7911] should_fail+0x383/0x4b0 [ 173.923434][ T7911] should_failslab+0x5/0x20 [ 173.923454][ T7911] slab_pre_alloc_hook+0x51/0xc0 [ 173.923480][ T7911] kmem_cache_alloc_trace+0x47/0x290 [ 173.923506][ T7911] ? sctp_add_bind_addr+0x89/0x350 [ 173.923539][ T7911] sctp_add_bind_addr+0x89/0x350 [ 173.923616][ T7911] sctp_copy_local_addr_list+0x2f1/0x4c0 [ 173.923665][ T7911] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 173.923692][ T7911] ? sctp_v6_is_any+0x60/0x70 [ 173.923714][ T7911] ? sctp_copy_one_addr+0x93/0x660 [ 173.923743][ T7911] sctp_bind_addr_copy+0xaf/0x3c0 [ 173.923767][ T7911] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 173.923796][ T7911] sctp_connect_new_asoc+0x2f5/0x6a0 [ 173.923821][ T7911] ? __sctp_connect+0xd80/0xd80 [ 173.923839][ T7911] ? __local_bh_enable_ip+0x136/0x1c0 [ 173.923866][ T7911] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 173.923889][ T7911] ? security_sctp_bind_connect+0x85/0xb0 [ 173.923916][ T7911] sctp_sendmsg+0x15e1/0x2940 [ 173.923957][ T7911] ? sctp_getsockopt+0x8a0/0x8a0 [ 173.923980][ T7911] ? aa_af_perm+0x340/0x340 [ 173.924005][ T7911] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 173.924031][ T7911] ? aa_sock_msg_perm+0x94/0x150 [ 173.924054][ T7911] ? sock_rps_record_flow+0x17/0x3b0 [ 173.924076][ T7911] ? inet_sendmsg+0xca/0x2a0 [ 173.924098][ T7911] __sys_sendto+0x46d/0x620 [ 173.924120][ T7911] ? __ia32_sys_getpeername+0x80/0x80 [ 173.924176][ T7911] ? lock_chain_count+0x20/0x20 [ 173.924209][ T7911] __x64_sys_sendto+0xda/0xf0 [ 173.924235][ T7911] do_syscall_64+0x4c/0xa0 [ 173.924256][ T7911] ? clear_bhb_loop+0x30/0x80 [ 173.924278][ T7911] ? clear_bhb_loop+0x30/0x80 [ 173.924302][ T7911] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 173.924324][ T7911] RIP: 0033:0x7f2af7af0159 [ 173.924345][ T7911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.924364][ T7911] RSP: 002b:00007f2af5d48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 173.924390][ T7911] RAX: ffffffffffffffda RBX: 00007f2af7d77fa0 RCX: 00007f2af7af0159 [ 173.924406][ T7911] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 173.924421][ T7911] RBP: 00007f2af7b8706b R08: 000020000005ffe4 R09: 000000000000001c [ 173.924436][ T7911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.924449][ T7911] R13: 00007f2af7d78038 R14: 00007f2af7d77fa0 R15: 00007ffd87f39ce8 [ 173.924482][ T7911] [ 174.402471][ T7923] loop5: detected capacity change from 0 to 512 [ 174.715792][ T7923] EXT4-fs (loop5): Ignoring removed nobh option [ 174.785575][ T7923] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 174.833559][ T7923] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.873509][ T7923] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #2: comm syz.5.1180: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 174.911967][ T7923] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.1180: corrupted inode contents [ 174.917203][ T7932] device syzkaller0 entered promiscuous mode [ 174.939152][ T7923] EXT4-fs error (device loop5): ext4_dirty_inode:6087: inode #2: comm syz.5.1180: mark_inode_dirty error [ 174.957323][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.965512][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.979792][ T7932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.988126][ T7932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.038099][ T7923] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.1180: corrupted inode contents [ 175.060777][ T7923] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.1180: mark_inode_dirty error [ 175.254193][ T7939] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.436754][ T7942] device syzkaller0 entered promiscuous mode [ 175.680240][ T7960] xt_hashlimit: size too large, truncated to 1048576 [ 175.819007][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1196'. [ 176.131162][ T7987] device erspan0 left promiscuous mode [ 176.137545][ T7987] bridge0: port 3(erspan0) entered disabled state [ 177.337619][ T8006] device syzkaller0 entered promiscuous mode [ 177.827500][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1209'. [ 177.974425][ T8029] loop3: detected capacity change from 0 to 512 [ 178.124796][ T8029] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1210'. [ 178.219012][ T8036] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1210'. [ 178.294244][ T8036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.337300][ T8036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.364240][ T8036] bond0 (unregistering): Released all slaves [ 179.219466][ T8051] device syzkaller0 entered promiscuous mode [ 179.429976][ T8061] loop6: detected capacity change from 0 to 128 [ 179.557555][ T8061] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 179.584908][ T8061] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.651637][ T8063] sctp: [Deprecated]: syz.3.1222 (pid 8063) Use of int in max_burst socket option deprecated. [ 179.651637][ T8063] Use struct sctp_assoc_value instead [ 179.652292][ T8069] loop4: detected capacity change from 0 to 512 [ 179.788294][ T8063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1222'. [ 179.835388][ T8069] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.905039][ T8069] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.008256][ T8117] device syzkaller0 entered promiscuous mode [ 181.244370][ T8130] sctp: [Deprecated]: syz.1.1235 (pid 8130) Use of int in max_burst socket option deprecated. [ 181.244370][ T8130] Use struct sctp_assoc_value instead [ 181.307126][ T8134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1235'. [ 181.934597][ T8176] device syzkaller0 entered promiscuous mode [ 182.307209][ T8201] loop4: detected capacity change from 0 to 512 [ 182.315886][ T8192] sctp: [Deprecated]: syz.5.1252 (pid 8192) Use of int in max_burst socket option deprecated. [ 182.315886][ T8192] Use struct sctp_assoc_value instead [ 182.337570][ T8192] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1252'. [ 182.418778][ T8201] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 182.464887][ T8209] FAULT_INJECTION: forcing a failure. [ 182.464887][ T8209] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 182.492714][ T8201] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.513929][ T8209] CPU: 0 PID: 8209 Comm: syz.1.1256 Not tainted syzkaller #0 [ 182.521464][ T8209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 182.531555][ T8209] Call Trace: [ 182.534869][ T8209] [ 182.538009][ T8209] dump_stack_lvl+0x188/0x250 [ 182.542726][ T8209] ? show_regs_print_info+0x20/0x20 [ 182.547970][ T8209] ? load_image+0x410/0x410 [ 182.552514][ T8209] ? __lock_acquire+0x7b50/0x7b50 [ 182.557581][ T8209] should_fail+0x383/0x4b0 [ 182.562055][ T8209] prepare_alloc_pages+0x1e3/0x5b0 [ 182.567304][ T8209] __alloc_pages+0x11b/0x480 [ 182.572110][ T8209] ? zone_statistics+0x170/0x170 [ 182.577108][ T8209] ? up_write+0x1b6/0x410 [ 182.581490][ T8209] alloc_pages_vma+0x2bc/0x790 [ 182.586472][ T8209] handle_mm_fault+0x23be/0x4440 [ 182.591495][ T8209] ? get_page+0xe0/0xe0 [ 182.595754][ T8209] ? follow_page_mask+0x272/0x12b0 [ 182.595904][ T8209] ? vma_is_secretmem+0x9/0x40 [ 182.595924][ T8209] ? check_vma_flags+0x359/0x470 [ 182.595948][ T8209] __get_user_pages+0x952/0x11e0 [ 182.595987][ T8209] ? populate_vma_page_range+0x290/0x290 [ 182.596017][ T8209] ? __might_sleep+0xf0/0xf0 [ 182.596038][ T8209] ? read_lock_is_recursive+0x10/0x10 [ 182.596068][ T8209] __get_user_pages_remote+0x1c2/0x730 [ 182.596099][ T8209] ? get_user_pages_remote+0x55/0xa0 [ 182.596125][ T8209] get_arg_page+0x11b/0x350 [ 182.596149][ T8209] ? copy_string_kernel+0x280/0x280 [ 182.596167][ T8209] ? up_write+0x1b6/0x410 [ 182.596199][ T8209] copy_string_kernel+0x14d/0x280 [ 182.596223][ T8209] do_execveat_common+0x360/0x6b0 [ 182.596249][ T8209] __x64_sys_execveat+0xc0/0xe0 [ 182.596274][ T8209] do_syscall_64+0x4c/0xa0 [ 182.596294][ T8209] ? clear_bhb_loop+0x30/0x80 [ 182.596315][ T8209] ? clear_bhb_loop+0x30/0x80 [ 182.596338][ T8209] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.596367][ T8209] RIP: 0033:0x7f3aa9d4f159 [ 182.596387][ T8209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.596405][ T8209] RSP: 002b:00007f3aa7fa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 182.596432][ T8209] RAX: ffffffffffffffda RBX: 00007f3aa9fd6fa0 RCX: 00007f3aa9d4f159 [ 182.596449][ T8209] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 182.596465][ T8209] RBP: 00007f3aa9de606b R08: 0000000000001000 R09: 0000000000000000 [ 182.596479][ T8209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.596493][ T8209] R13: 00007f3aa9fd7038 R14: 00007f3aa9fd6fa0 R15: 00007ffd0d60e3b8 [ 182.596527][ T8209] [ 182.781589][ T8231] netlink: 'syz.4.1259': attribute type 8 has an invalid length. [ 183.025649][ T8238] device syzkaller0 entered promiscuous mode [ 183.390580][ T8251] sctp: [Deprecated]: syz.1.1267 (pid 8251) Use of int in max_burst socket option deprecated. [ 183.390580][ T8251] Use struct sctp_assoc_value instead [ 183.407971][ T8257] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 183.462204][ T8251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1267'. [ 183.904028][ T8289] device syzkaller0 entered promiscuous mode [ 184.086440][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1280'. [ 184.132495][ T8303] loop3: detected capacity change from 0 to 512 [ 184.233898][ T8303] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.245799][ T8303] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.277322][ T8305] sctp: [Deprecated]: syz.4.1282 (pid 8305) Use of int in max_burst socket option deprecated. [ 184.277322][ T8305] Use struct sctp_assoc_value instead [ 184.339260][ T8310] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1282'. [ 184.751742][ T8337] device syzkaller0 entered promiscuous mode [ 184.999426][ T8354] sctp: [Deprecated]: syz.1.1295 (pid 8354) Use of int in max_burst socket option deprecated. [ 184.999426][ T8354] Use struct sctp_assoc_value instead [ 185.028628][ T8354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1295'. [ 185.086028][ T8365] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1297'. [ 185.215619][ T8377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1300'. [ 185.290992][ T8382] md: md0 stopped. [ 186.045582][ T8425] sctp: [Deprecated]: syz.5.1309 (pid 8425) Use of int in max_burst socket option deprecated. [ 186.045582][ T8425] Use struct sctp_assoc_value instead [ 186.124748][ T8425] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1309'. [ 186.273093][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 186.373021][ T8433] bridge0: port 3(erspan0) entered blocking state [ 186.379555][ T8433] bridge0: port 3(erspan0) entered disabled state [ 186.387534][ T8433] device erspan0 entered promiscuous mode [ 186.393791][ T8433] bridge0: port 3(erspan0) entered blocking state [ 186.400279][ T8433] bridge0: port 3(erspan0) entered forwarding state [ 187.674643][ T8488] FAULT_INJECTION: forcing a failure. [ 187.674643][ T8488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.674677][ T8488] CPU: 1 PID: 8488 Comm: syz.3.1322 Not tainted syzkaller #0 [ 187.674699][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 187.674710][ T8488] Call Trace: [ 187.674718][ T8488] [ 187.674726][ T8488] dump_stack_lvl+0x188/0x250 [ 187.674766][ T8488] ? show_regs_print_info+0x20/0x20 [ 187.674787][ T8488] ? load_image+0x410/0x410 [ 187.674811][ T8488] ? __lock_acquire+0x7b50/0x7b50 [ 187.674844][ T8488] should_fail+0x383/0x4b0 [ 187.674873][ T8488] _copy_from_user+0x2e/0x170 [ 187.674897][ T8488] __sys_bpf+0x26d/0x6f0 [ 187.674923][ T8488] ? bpf_link_show_fdinfo+0x380/0x380 [ 187.674968][ T8488] __x64_sys_bpf+0x78/0x90 [ 187.674991][ T8488] do_syscall_64+0x4c/0xa0 [ 187.675010][ T8488] ? clear_bhb_loop+0x30/0x80 [ 187.675031][ T8488] ? clear_bhb_loop+0x30/0x80 [ 187.675054][ T8488] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 187.675077][ T8488] RIP: 0033:0x7f74d59ca159 [ 187.675095][ T8488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.675114][ T8488] RSP: 002b:00007f74d3c01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 187.675140][ T8488] RAX: ffffffffffffffda RBX: 00007f74d5c52090 RCX: 00007f74d59ca159 [ 187.675156][ T8488] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 187.675170][ T8488] RBP: 00007f74d5a6106b R08: 0000000000000000 R09: 0000000000000000 [ 187.675183][ T8488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.675196][ T8488] R13: 00007f74d5c52128 R14: 00007f74d5c52090 R15: 00007fff98afd808 [ 187.675227][ T8488] [ 187.701382][ T8490] sctp: [Deprecated]: syz.4.1325 (pid 8490) Use of int in max_burst socket option deprecated. [ 187.701382][ T8490] Use struct sctp_assoc_value instead [ 187.712801][ T8490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1325'. [ 188.085450][ T8498] tipc: Enabling of bearer rejected, failed to enable media [ 188.102400][ T8498] device syzkaller0 entered promiscuous mode [ 188.139304][ T8498] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 188.271203][ T8505] bridge0: port 4(erspan0) entered blocking state [ 188.277922][ T8505] bridge0: port 4(erspan0) entered disabled state [ 188.289628][ T8505] device erspan0 entered promiscuous mode [ 188.297594][ T8505] bridge0: port 4(erspan0) entered blocking state [ 188.304135][ T8505] bridge0: port 4(erspan0) entered forwarding state [ 189.245532][ T8511] device syzkaller0 entered promiscuous mode [ 189.707185][ T8534] sctp: [Deprecated]: syz.4.1338 (pid 8534) Use of int in max_burst socket option deprecated. [ 189.707185][ T8534] Use struct sctp_assoc_value instead [ 189.748409][ T8532] device syzkaller0 entered promiscuous mode [ 189.848446][ T8536] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1338'. [ 191.089774][ T8556] device syzkaller0 entered promiscuous mode [ 191.430702][ T8575] device syzkaller0 entered promiscuous mode [ 191.589452][ T8582] loop1: detected capacity change from 0 to 1024 [ 191.602612][ T8577] sctp: [Deprecated]: syz.3.1350 (pid 8577) Use of int in max_burst socket option deprecated. [ 191.602612][ T8577] Use struct sctp_assoc_value instead [ 191.655631][ T8577] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1350'. [ 191.765079][ T8582] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 191.797745][ T8582] JBD2: no valid journal superblock found [ 191.810716][ T8582] EXT4-fs (loop1): error loading journal [ 192.013843][ T8594] bridge0: port 3(erspan0) entered blocking state [ 192.021658][ T8594] bridge0: port 3(erspan0) entered disabled state [ 192.030029][ T8594] device erspan0 entered promiscuous mode [ 192.036703][ T8594] bridge0: port 3(erspan0) entered blocking state [ 192.043302][ T8594] bridge0: port 3(erspan0) entered forwarding state [ 192.489342][ T8606] device syzkaller0 entered promiscuous mode [ 192.704880][ T8617] device syzkaller0 entered promiscuous mode [ 192.731654][ T8617] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 192.910044][ T8623] device syzkaller0 entered promiscuous mode [ 194.177563][ T8646] device syzkaller0 entered promiscuous mode [ 194.429885][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.436378][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.515222][ T8663] device syzkaller0 entered promiscuous mode [ 194.538182][ T8663] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 194.736490][ T8673] device syzkaller0 entered promiscuous mode [ 194.756508][ T8671] tc action pedit offset must be on 32 bit boundaries [ 194.968084][ T8684] xt_hashlimit: size too large, truncated to 1048576 [ 194.986755][ T8682] device syzkaller0 entered promiscuous mode [ 195.426654][ T8709] loop3: detected capacity change from 0 to 512 [ 195.428116][ T8710] device syzkaller0 entered promiscuous mode [ 195.446208][ T8712] futex_wake_op: syz.6.1393 tries to shift op by 144; fix this program [ 195.498640][ T8712] futex_wake_op: syz.6.1393 tries to shift op by 144; fix this program [ 195.510091][ T8710] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 196.534646][ T8723] device syzkaller0 entered promiscuous mode [ 196.701678][ T8730] device syzkaller0 entered promiscuous mode [ 196.958558][ T8745] device syzkaller0 entered promiscuous mode [ 196.999116][ T8745] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 197.199529][ T8756] device syzkaller0 entered promiscuous mode [ 197.288807][ T8761] device syzkaller0 entered promiscuous mode [ 197.454733][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 197.454750][ T26] audit: type=1326 audit(1791023055.099:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.6.1416" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af7af0159 code=0x7ffc0000 [ 197.489589][ T26] audit: type=1326 audit(1791023055.129:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.6.1416" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af7af0159 code=0x7ffc0000 [ 197.532058][ T8767] loop6: detected capacity change from 0 to 128 [ 197.539047][ T26] audit: type=1326 audit(1791023055.129:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.6.1416" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af7af0159 code=0x7ffc0000 [ 197.565322][ T26] audit: type=1326 audit(1791023055.129:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.6.1416" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2af7af0159 code=0x7ffc0000 [ 197.594838][ T26] audit: type=1326 audit(1791023055.129:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.6.1416" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af7af0159 code=0x7ffc0000 [ 197.620101][ T26] audit: type=1326 audit(1791023055.129:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.6.1416" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af7af0159 code=0x7ffc0000 [ 197.650487][ T26] audit: type=1326 audit(1791023055.129:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.6.1416" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af7af0159 code=0x7ffc0000 [ 197.676695][ T26] audit: type=1326 audit(1791023055.129:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.6.1416" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2af7af0159 code=0x7ffc0000 [ 197.701693][ T26] audit: type=1326 audit(1791023055.129:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.6.1416" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af7af0159 code=0x7ffc0000 [ 197.727134][ T26] audit: type=1326 audit(1791023055.129:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.6.1416" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af7af0159 code=0x7ffc0000 [ 197.920250][ T8775] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1419'. [ 197.985822][ T8777] device syzkaller0 entered promiscuous mode [ 198.014949][ T8777] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 198.054700][ T8780] loop6: detected capacity change from 0 to 512 [ 198.164752][ T8780] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 198.182568][ T8780] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.462705][ T8790] device syzkaller0 entered promiscuous mode [ 198.533767][ T8791] device syzkaller0 entered promiscuous mode [ 198.933494][ T8808] device syzkaller0 entered promiscuous mode [ 198.978051][ T8819] FAULT_INJECTION: forcing a failure. [ 198.978051][ T8819] name failslab, interval 1, probability 0, space 0, times 0 [ 198.991855][ T8819] CPU: 1 PID: 8819 Comm: syz.5.1437 Not tainted syzkaller #0 [ 198.999454][ T8819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 199.010273][ T8819] Call Trace: [ 199.013658][ T8819] [ 199.016632][ T8819] dump_stack_lvl+0x188/0x250 [ 199.021336][ T8819] ? show_regs_print_info+0x20/0x20 [ 199.026647][ T8819] ? load_image+0x410/0x410 [ 199.031173][ T8819] ? __might_sleep+0xf0/0xf0 [ 199.035873][ T8819] ? __lock_acquire+0x7b50/0x7b50 [ 199.040936][ T8819] should_fail+0x383/0x4b0 [ 199.045392][ T8819] should_failslab+0x5/0x20 [ 199.050138][ T8819] slab_pre_alloc_hook+0x51/0xc0 [ 199.055113][ T8819] kmem_cache_alloc_trace+0x47/0x290 [ 199.060656][ T8819] ? __list_lru_init+0x535/0xac0 [ 199.065718][ T8819] __list_lru_init+0x535/0xac0 [ 199.070708][ T8819] alloc_super+0x787/0x970 [ 199.075166][ T8819] ? kill_litter_super+0xa0/0xa0 [ 199.080195][ T8819] sget_fc+0x2d4/0x6f0 [ 199.084461][ T8819] ? kill_litter_super+0xa0/0xa0 [ 199.089488][ T8819] ? proc_reconfigure+0x370/0x370 [ 199.094741][ T8819] get_tree_nodev+0x26/0x160 [ 199.099343][ T8819] vfs_get_tree+0x88/0x270 [ 199.103770][ T8819] do_new_mount+0x247/0xa40 [ 199.108286][ T8819] __se_sys_mount+0x2e3/0x3d0 [ 199.113129][ T8819] ? __x64_sys_mount+0xc0/0xc0 [ 199.117932][ T8819] ? lockdep_hardirqs_on+0x94/0x140 [ 199.123493][ T8819] ? __x64_sys_mount+0x1c/0xc0 [ 199.128422][ T8819] do_syscall_64+0x4c/0xa0 [ 199.133013][ T8819] ? clear_bhb_loop+0x30/0x80 [ 199.137705][ T8819] ? clear_bhb_loop+0x30/0x80 [ 199.142400][ T8819] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.148533][ T8819] RIP: 0033:0x7f79ffc4d159 [ 199.152975][ T8819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.172687][ T8819] RSP: 002b:00007f79fdea5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 199.181418][ T8819] RAX: ffffffffffffffda RBX: 00007f79ffed4fa0 RCX: 00007f79ffc4d159 [ 199.189604][ T8819] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 199.197597][ T8819] RBP: 00007f79ffce406b R08: 0000000000000000 R09: 0000000000000000 [ 199.205570][ T8819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.213652][ T8819] R13: 00007f79ffed5038 R14: 00007f79ffed4fa0 R15: 00007ffe2d52cae8 [ 199.221797][ T8819] [ 199.233383][ T4201] Bluetooth: hci4: link tx timeout [ 199.242492][ T4201] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 199.250880][ T4201] Bluetooth: hci4: link tx timeout [ 199.256379][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 199.258291][ T8808] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 199.388114][ T8828] device syzkaller0 entered promiscuous mode [ 199.493815][ T8834] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1443'. [ 199.505935][ T8836] bridge0: port 4(erspan0) entered blocking state [ 199.512581][ T8836] bridge0: port 4(erspan0) entered disabled state [ 199.521705][ T8836] device erspan0 entered promiscuous mode [ 199.527801][ T8836] bridge0: port 4(erspan0) entered blocking state [ 199.534402][ T8836] bridge0: port 4(erspan0) entered forwarding state [ 200.525184][ T8850] loop3: detected capacity change from 0 to 256 [ 200.558138][ T8850] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.564208][ T8849] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1446'. [ 200.669803][ T8856] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1450'. [ 200.735435][ T8861] device syzkaller0 entered promiscuous mode [ 200.764737][ T8861] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 200.844310][ T8862] loop5: detected capacity change from 0 to 764 [ 200.899174][ T8865] device syzkaller0 entered promiscuous mode [ 201.023038][ T8862] rock: directory entry would overflow storage [ 201.090013][ T8862] rock: sig=0x4654, size=5, remaining=4 [ 201.839747][ T8880] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1459'. [ 202.285585][ T8897] loop4: detected capacity change from 0 to 1024 [ 202.328033][ T8897] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 202.358981][ T8897] JBD2: no valid journal superblock found [ 202.371094][ T8897] EXT4-fs (loop4): error loading journal [ 202.525117][ T8900] device syzkaller0 entered promiscuous mode [ 209.370598][ T8948] netlink: 'syz.5.1488': attribute type 15 has an invalid length. [ 209.418738][ T8951] ip_tables: iptables: counters copy to user failed while replacing table [ 209.462540][ T8951] netlink: 'syz.6.1489': attribute type 4 has an invalid length. [ 209.520339][ T8952] loop3: detected capacity change from 0 to 4096 [ 209.567447][ T8952] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.616508][ T4229] wiimote 0005:057E:0306.0004: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 209.628804][ T4229] wiimote 0005:057E:0306.0004: New device registered [ 209.641166][ T8960] wiimote 0005:057E:0306.0004: Device removed [ 209.660235][ T26] kauditd_printk_skb: 53 callbacks suppressed [ 209.660253][ T26] audit: type=1800 audit(1791023067.299:140): pid=8952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1490" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 209.766169][ T8963] fido_id[8963]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 210.241756][ T8982] netlink: 'syz.5.1501': attribute type 15 has an invalid length. [ 210.257563][ T8973] device gretap0 entered promiscuous mode [ 210.663094][ T4229] wiimote 0005:057E:0306.0004: detected device: Nintendo Wii Remote (Gen 1) [ 210.769004][ T4229] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input6 [ 210.876167][ T4229] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input7 [ 211.788707][ T4229] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input5 [ 211.825299][ T9008] loop4: detected capacity change from 0 to 512 [ 211.902093][ T9008] EXT4-fs (loop4): invalid journal inode [ 211.933017][ T9008] EXT4-fs (loop4): can't get journal size [ 211.970497][ T9008] EXT4-fs (loop4): 1 truncate cleaned up [ 211.994858][ T9008] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 212.251717][ T9014] loop5: detected capacity change from 0 to 512 [ 212.380183][ T9014] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.1512: missing EA_INODE flag [ 212.417072][ T9014] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1512: error while reading EA inode 12 err=-117 [ 212.436889][ T9019] netlink: 'syz.4.1514': attribute type 15 has an invalid length. [ 212.440005][ T9014] EXT4-fs (loop5): 1 orphan inode deleted [ 212.450827][ T9014] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 212.647368][ T6769] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.746109][ T6769] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.827957][ T6769] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.921319][ T6769] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.090195][ T9044] netlink: 'syz.3.1526': attribute type 15 has an invalid length. [ 213.266713][ T6769] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.281964][ T9054] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1530'. [ 213.329899][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1530'. [ 213.504573][ T9041] chnl_net:caif_netlink_parms(): no params data found [ 213.544365][ T6769] tipc: Left network mode [ 214.461028][ T9080] loop4: detected capacity change from 0 to 164 [ 214.651512][ T9088] loop3: detected capacity change from 0 to 512 [ 214.719288][ T9088] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 214.736839][ T9088] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.778803][ T9041] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.793079][ T9041] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.801269][ T9041] device bridge_slave_0 entered promiscuous mode [ 214.841846][ T9041] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.851815][ T9041] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.878587][ T9041] device bridge_slave_1 entered promiscuous mode [ 214.971246][ T9106] loop3: detected capacity change from 0 to 512 [ 215.031642][ T9041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.058522][ T9041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.063109][ T1110] Bluetooth: hci0: command 0x0409 tx timeout [ 215.081818][ T6769] bridge0: port 3(erspan0) entered disabled state [ 215.109078][ T6769] device erspan0 left promiscuous mode [ 215.116314][ T6769] bridge0: port 3(erspan0) entered disabled state [ 215.179556][ T9041] team0: Port device team_slave_0 added [ 215.234397][ T9041] team0: Port device team_slave_1 added [ 215.281357][ T9108] loop5: detected capacity change from 0 to 8192 [ 215.309753][ T9041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.341501][ T9041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.401864][ T26] audit: type=1804 audit(1791023073.039:141): pid=9108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1544" name="/newroot/139/file0/bus" dev="loop5" ino=1048609 res=1 errno=0 [ 215.411820][ T9041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.479794][ T9118] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.495125][ T9041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.523201][ T9041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.605522][ T9041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.638354][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1548'. [ 215.785317][ T9130] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1549'. [ 215.824443][ T9041] device hsr_slave_0 entered promiscuous mode [ 215.845559][ T9041] device hsr_slave_1 entered promiscuous mode [ 215.866112][ T9041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.882996][ T9041] Cannot create hsr debugfs directory [ 216.055803][ T6769] device hsr_slave_0 left promiscuous mode [ 216.071443][ T6769] device hsr_slave_1 left promiscuous mode [ 216.078240][ T9150] loop5: detected capacity change from 0 to 512 [ 216.085494][ T6769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.103603][ T6769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.132106][ T6769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.160348][ T6769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.171998][ T9150] attempt to access beyond end of device [ 216.171998][ T9150] loop5: rw=524288, want=17179852722, limit=512 [ 216.188058][ T6769] device bridge_slave_1 left promiscuous mode [ 216.197232][ T6769] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.216471][ T9150] attempt to access beyond end of device [ 216.216471][ T9150] loop5: rw=0, want=17179852714, limit=512 [ 216.233577][ T6769] device bridge_slave_0 left promiscuous mode [ 216.238958][ T26] audit: type=1800 audit(1791023073.879:142): pid=9150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1556" name="file2" dev="loop5" ino=1048610 res=0 errno=0 [ 216.241739][ T6769] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.282479][ T6769] device veth1_macvtap left promiscuous mode [ 216.290289][ T6769] device veth0_macvtap left promiscuous mode [ 216.296750][ T6769] device veth1_vlan left promiscuous mode [ 216.303223][ T6769] device veth0_vlan left promiscuous mode [ 216.605608][ T9170] FAULT_INJECTION: forcing a failure. [ 216.605608][ T9170] name failslab, interval 1, probability 0, space 0, times 0 [ 216.618631][ T9170] CPU: 0 PID: 9170 Comm: syz.5.1561 Not tainted syzkaller #0 [ 216.626116][ T9170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 216.636412][ T9170] Call Trace: [ 216.639719][ T9170] [ 216.642652][ T9170] dump_stack_lvl+0x188/0x250 [ 216.647365][ T9170] ? show_regs_print_info+0x20/0x20 [ 216.652575][ T9170] ? load_image+0x410/0x410 [ 216.657093][ T9170] ? __might_sleep+0xf0/0xf0 [ 216.661692][ T9170] ? __lock_acquire+0x7b50/0x7b50 [ 216.666809][ T9170] should_fail+0x383/0x4b0 [ 216.671226][ T9170] should_failslab+0x5/0x20 [ 216.675729][ T9170] slab_pre_alloc_hook+0x51/0xc0 [ 216.680696][ T9170] kmem_cache_alloc_trace+0x47/0x290 [ 216.686094][ T9170] ? bpf_int_jit_compile+0x1ed/0xc4d0 [ 216.691562][ T9170] bpf_int_jit_compile+0x1ed/0xc4d0 [ 216.696778][ T9170] ? verify_lock_unused+0x140/0x140 [ 216.701985][ T9170] ? rcu_lock_release+0x5/0x20 [ 216.706756][ T9170] ? emit_bpf_dispatcher+0x1050/0x1050 [ 216.712389][ T9170] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 216.718693][ T9170] ? lockdep_hardirqs_on+0x94/0x140 [ 216.723930][ T9170] ? ktime_get_real_ts64+0x440/0x440 [ 216.729249][ T9170] ? pcpu_alloc+0x11e6/0x16d0 [ 216.734493][ T9170] ? __might_fault+0xb3/0x110 [ 216.739182][ T9170] bpf_prog_select_runtime+0x46f/0x7b0 [ 216.744941][ T9170] ? bpf_obj_name_cpy+0x190/0x1d0 [ 216.749991][ T9170] bpf_prog_load+0x100a/0x14e0 [ 216.754769][ T9170] ? map_freeze+0x360/0x360 [ 216.759271][ T9170] ? __might_fault+0xb7/0x110 [ 216.764074][ T9170] ? __might_fault+0xb3/0x110 [ 216.768761][ T9170] ? bpf_lsm_bpf+0x5/0x10 [ 216.773110][ T9170] ? security_bpf+0x7a/0xa0 [ 216.777791][ T9170] __sys_bpf+0x532/0x6f0 [ 216.782057][ T9170] ? bpf_link_show_fdinfo+0x380/0x380 [ 216.787467][ T9170] __x64_sys_bpf+0x78/0x90 [ 216.791908][ T9170] do_syscall_64+0x4c/0xa0 [ 216.796586][ T9170] ? clear_bhb_loop+0x30/0x80 [ 216.801500][ T9170] ? clear_bhb_loop+0x30/0x80 [ 216.806559][ T9170] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 216.812904][ T9170] RIP: 0033:0x7f79ffc4d159 [ 216.817396][ T9170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.837820][ T9170] RSP: 002b:00007f79fdea5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 216.846236][ T9170] RAX: ffffffffffffffda RBX: 00007f79ffed4fa0 RCX: 00007f79ffc4d159 [ 216.854210][ T9170] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 216.862260][ T9170] RBP: 00007f79ffce406b R08: 0000000000000000 R09: 0000000000000000 [ 216.870227][ T9170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.878307][ T9170] R13: 00007f79ffed5038 R14: 00007f79ffed4fa0 R15: 00007ffe2d52cae8 [ 216.886399][ T9170] [ 216.891526][ T6769] team0 (unregistering): Port device team_slave_1 removed [ 216.918998][ T6769] team0 (unregistering): Port device team_slave_0 removed [ 216.942021][ T6769] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.957320][ T9172] loop5: detected capacity change from 0 to 1024 [ 216.978901][ T6769] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.980541][ T9172] EXT4-fs (loop5): inline encryption not supported [ 217.007850][ T9172] EXT4-fs (loop5): Ignoring removed bh option [ 217.042143][ T9172] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,noauto_da_alloc,nolazytime,errors=continue,lazytime,inlinecrypt,stripe=0x0000000000000005,bh,nombcache,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 217.086871][ T6769] bond0 (unregistering): Released all slaves [ 217.143178][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 217.152725][ T9154] tipc: Enabled bearer , priority 0 [ 217.232187][ T9154] tipc: Disabling bearer [ 217.288048][ T9176] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1563'. [ 217.696134][ T9041] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 217.717019][ T9041] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 217.725840][ T9202] loop8: detected capacity change from 0 to 16384 [ 217.742769][ T9041] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 217.761510][ T9041] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 218.038859][ T9041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.079807][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.104129][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.123135][ T4262] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 218.134768][ T9041] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.173509][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.203846][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.242010][ T4235] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.249201][ T4235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.287722][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.334086][ T9214] tipc: Started in network mode [ 218.356634][ T9214] tipc: Node identity e240c9f492ac, cluster identity 4711 [ 218.397370][ T9214] tipc: Enabled bearer , priority 0 [ 218.438764][ T9218] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 218.468496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.496980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.517842][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.525015][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.557091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.584990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.684537][ T9219] tipc: Disabling bearer [ 218.733186][ T4262] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 218.752910][ T4262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.779226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.797686][ T4262] usb 4-1: Product: syz [ 218.802757][ T4262] usb 4-1: Manufacturer: syz [ 218.810792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.829754][ T4262] usb 4-1: SerialNumber: syz [ 218.840705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.873668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.918658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.938897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.971644][ T9041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.994431][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.014770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.033909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.058852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.114020][ T9226] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1577'. [ 219.223922][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 219.316809][ T9237] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1580'. [ 219.537409][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.565737][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.624278][ T9041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.654832][ T4262] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 219.719130][ T4262] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 219.793688][ T4262] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 219.819263][ T9258] device syzkaller0 entered promiscuous mode [ 219.828107][ T4262] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 219.860864][ T4262] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 219.892956][ T4262] lan78xx: probe of 4-1:1.0 failed with error -71 [ 219.944955][ T4262] usb 4-1: USB disconnect, device number 2 [ 220.054662][ T9271] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1589'. [ 220.098484][ T9274] loop3: detected capacity change from 0 to 512 [ 220.240935][ T9274] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 220.264083][ T9274] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.380508][ T9285] loop4: detected capacity change from 0 to 512 [ 220.442676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.442973][ T9281] FAULT_INJECTION: forcing a failure. [ 220.442973][ T9281] name failslab, interval 1, probability 0, space 0, times 0 [ 220.459502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.513676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.527967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.551869][ T9281] CPU: 1 PID: 9281 Comm: syz.6.1591 Not tainted syzkaller #0 [ 220.559529][ T9281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 220.559693][ T9041] device veth0_vlan entered promiscuous mode [ 220.569607][ T9281] Call Trace: [ 220.569618][ T9281] [ 220.569626][ T9281] dump_stack_lvl+0x188/0x250 [ 220.569656][ T9281] ? show_regs_print_info+0x20/0x20 [ 220.569676][ T9281] ? load_image+0x410/0x410 [ 220.569706][ T9281] should_fail+0x383/0x4b0 [ 220.601072][ T9281] should_failslab+0x5/0x20 [ 220.602488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.605629][ T9281] slab_pre_alloc_hook+0x51/0xc0 [ 220.605654][ T9281] ? skb_clone+0x1bd/0x350 [ 220.605677][ T9281] kmem_cache_alloc+0x3d/0x280 [ 220.605700][ T9281] skb_clone+0x1bd/0x350 [ 220.605724][ T9281] bpf_clone_redirect+0x166/0x460 [ 220.605755][ T9281] bpf_prog_b36a1f39e2fdd4f4+0x56/0x18c [ 220.605777][ T9281] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 220.622550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.627226][ T9281] ? lock_chain_count+0x20/0x20 [ 220.627257][ T9281] ? __kasan_slab_alloc+0xa9/0xc0 [ 220.627286][ T9281] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 220.627307][ T9281] ? lockdep_hardirqs_on+0x94/0x140 [ 220.627329][ T9281] ? ktime_get+0x7b/0x270 [ 220.627344][ T9281] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 220.627364][ T9281] ? ktime_get_real_ts64+0x440/0x440 [ 220.627383][ T9281] ? read_lock_is_recursive+0x10/0x10 [ 220.647433][ T9041] device veth1_vlan entered promiscuous mode [ 220.648192][ T9281] ? __cant_sleep+0x220/0x220 [ 220.709277][ T9281] ? bpf_test_timer_continue+0x13d/0x380 [ 220.714955][ T9281] bpf_test_run+0x2a8/0x800 [ 220.719535][ T9281] ? convert___skb_to_skb+0x4c0/0x4c0 [ 220.724950][ T9281] ? eth_get_headlen+0x200/0x200 [ 220.729935][ T9281] ? convert___skb_to_skb+0x3d/0x4c0 [ 220.735252][ T9281] bpf_prog_test_run_skb+0x9fb/0x1190 [ 220.740678][ T9281] ? cpu_online+0x60/0x60 [ 220.741404][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 220.745035][ T9281] bpf_prog_test_run+0x31c/0x390 [ 220.745067][ T9281] __sys_bpf+0x5a5/0x6f0 [ 220.745090][ T9281] ? bpf_link_show_fdinfo+0x380/0x380 [ 220.745131][ T9281] __x64_sys_bpf+0x78/0x90 [ 220.745152][ T9281] do_syscall_64+0x4c/0xa0 [ 220.745172][ T9281] ? clear_bhb_loop+0x30/0x80 [ 220.745192][ T9281] ? clear_bhb_loop+0x30/0x80 [ 220.745215][ T9281] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.745236][ T9281] RIP: 0033:0x7f2af7af0159 [ 220.745256][ T9281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.745275][ T9281] RSP: 002b:00007f2af5d48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 220.745300][ T9281] RAX: ffffffffffffffda RBX: 00007f2af7d77fa0 RCX: 00007f2af7af0159 [ 220.745316][ T9281] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 220.745328][ T9281] RBP: 00007f2af7b8706b R08: 0000000000000000 R09: 0000000000000000 [ 220.745342][ T9281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.745355][ T9281] R13: 00007f2af7d78038 R14: 00007f2af7d77fa0 R15: 00007ffd87f39ce8 [ 220.745386][ T9281] [ 220.770975][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 220.894650][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 220.915867][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.937379][ T9041] device veth0_macvtap entered promiscuous mode [ 220.975931][ T9041] device veth1_macvtap entered promiscuous mode [ 221.018277][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.036647][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.047220][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.058119][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.069492][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.080728][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.091156][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.102015][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.114029][ T9041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.137857][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 221.159537][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 221.201928][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.211070][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.246310][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.287510][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.300163][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.303614][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 221.311602][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.327826][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.339108][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.349367][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.360289][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.395889][ T9041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.449606][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 221.461406][ T9285] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 221.481705][ T9285] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 221.492727][ T9285] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1592: Corrupt directory, running e2fsck is recommended [ 221.512652][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.521066][ T9285] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 221.524893][ T9041] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.539853][ T9041] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.549826][ T9041] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.568128][ T9285] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.1592: corrupted in-inode xattr [ 221.591893][ T9041] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.607519][ T9285] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.1592: couldn't read orphan inode 15 (err -117) [ 221.629413][ T9285] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,inode_readahead_blks=0x0000000000000000,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback. [ 221.643110][ T9313] loop6: detected capacity change from 0 to 1024 [ 221.850208][ T9313] Quota error (device loop6): find_tree_dqentry: Getting block too big (64 >= 6) [ 221.860872][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.933130][ T9313] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 221.941036][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.942692][ T9313] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.1597: Failed to acquire dquot type 0 [ 221.969952][ T9313] EXT4-fs error (device loop6): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 222.001627][ T6710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.024523][ T9325] bridge0: port 3(erspan0) entered blocking state [ 222.031019][ T9325] bridge0: port 3(erspan0) entered disabled state [ 222.038642][ T6710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.057659][ T9313] EXT4-fs (loop6): 1 truncate cleaned up [ 222.070118][ T9325] device erspan0 entered promiscuous mode [ 222.079068][ T9313] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 222.110403][ T9325] bridge0: port 3(erspan0) entered blocking state [ 222.117132][ T9325] bridge0: port 3(erspan0) entered forwarding state [ 222.221578][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 222.229805][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 222.294458][ T9328] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1601'. [ 222.401673][ T9333] device syzkaller0 entered promiscuous mode [ 222.489867][ T9342] loop3: detected capacity change from 0 to 512 [ 222.676277][ T9344] Quota error (device loop6): find_tree_dqentry: Getting block too big (64 >= 6) [ 222.741476][ T9344] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 222.792125][ T9344] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.1597: Failed to acquire dquot type 0 serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.