last executing test programs: 6.54408929s ago: executing program 0 (id=360): syz_mount_image$msdos(&(0x7f0000000280), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x2a1, &(0x7f0000000880)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) r1 = getpid() prlimit64(r1, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/100, 0x64}], 0x1}, 0x8}], 0x2, 0x10170, 0x0) 6.103747092s ago: executing program 2 (id=367): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/81, 0x51}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x8810) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x20041000) 5.912531297s ago: executing program 2 (id=371): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0xab, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000480)={&(0x7f00000002c0)=[r6], 0x1, r7, r4, 0x0, 0x3, 0x100, 0x4, {0x4, 0x1, 0x3, 0x65, 0x200, 0x0, 0x2, 0x5, 0xe, 0xe153, 0xdd, 0x0, 0x80007, 0xffffffff, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 5.663608603s ago: executing program 2 (id=375): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x49, 0x0, &(0x7f0000000080)) 5.532311166s ago: executing program 2 (id=378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x18, 0xb75}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x7}, 0x80, &(0x7f0000004900)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 5.276036653s ago: executing program 0 (id=380): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) close(0x3) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000140)='log\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f00000001c0), 0x8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0xc011}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) 5.275857313s ago: executing program 4 (id=381): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/81, 0x51}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x8810) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x20041000) 5.068407868s ago: executing program 4 (id=384): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x4, 0x0, 0x29, 0x0, @multicast1, @loopback}}}}}}, 0x0) 4.996077961s ago: executing program 0 (id=386): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x38, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x44151}, 0x0) 4.980183681s ago: executing program 3 (id=387): unshare(0x2c020400) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x400, 0x14) lseek(r0, 0x0, 0x0) 4.748112887s ago: executing program 3 (id=389): syz_emit_ethernet(0x680, &(0x7f0000000a40)={@broadcast, @remote, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x3, 0x5, 0x66e, 0x65, 0x0, 0xf, 0x2f, 0x0, @private=0xa010101, @local}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x101]}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0x4, 0x0, 0x1, 0x0, 0x4, 0xfa}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x4, {{0x5, 0x2, 0x8, 0x0, 0x1, 0x3, 0x1, 0xf6}, 0x2, {0x1, 0x77, 0x0, 0x3, 0x1, 0x0, 0x2, 0x1}}}, {0x8, 0x6558, 0x2, "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"}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0xfffffffa, 0xb2, 0x9, "1beb00000e001000000008010100"}) r1 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 4.747975877s ago: executing program 4 (id=390): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x52004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 3.83959374s ago: executing program 3 (id=395): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x2563, 0x4) sendto$inet(r0, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvmmsg(r0, &(0x7f0000008f80)=[{{0x0, 0x0, 0x0}, 0x63}], 0x1, 0x2, 0x0) 3.755927442s ago: executing program 1 (id=396): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) close(0x3) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000140)='log\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f00000001c0), 0x8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="780000000006000000000000141a000002000010240001801400018008000100e00000019c498a8ae000e1f4eaa5cf648b310100000000002400028014000180082b8e5ba435778f8aea033604b1000100ac80050001000000000008000740000000011400000000008287cf4c502e74c3cb6a035068b0650002000000030000000800000006c46e1e8747043abfd806a91ad9e6193a9f572613b310d7b34b54986975d0f72d5796c5960b2a5f1760d78b879869d51a3cab0cf9e391305d3a6ce3b463f80f3de884a0cb5c94dd7dd2a057549604c243e88a6b9d125620f0e1d1c81becc4a4748307e66ec7471e741ca7410be5496c60b27c4b9bb1cf545487bb2007f754d509b888cc94a60b643288b8dff74b7c8e8da9da6cd37ab84b54585ef4bb782841b72a971264ff2d24b254c99d3cec0a98bbf45512b49ff0c1dc36e9"], 0x78}, 0x1, 0x0, 0x0, 0xc011}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) 3.719887574s ago: executing program 3 (id=397): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@grpid}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 3.638453576s ago: executing program 1 (id=398): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0xab, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000480)={&(0x7f00000002c0)=[r5], 0x1, r6, r3, 0x0, 0x3, 0x100, 0x4, {0x4, 0x1, 0x3, 0x65, 0x200, 0x0, 0x2, 0x5, 0xe, 0xe153, 0xdd, 0x0, 0x80007, 0xffffffff, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 3.490630219s ago: executing program 1 (id=399): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002bf7000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000ffffffff000000000000000000000000090000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c00000002"], 0x23c}}, 0x0) 3.488651749s ago: executing program 1 (id=400): syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r2 = socket(0x1d, 0x2, 0x6) epoll_create(0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) 3.07238162s ago: executing program 3 (id=401): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0xa}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 2.442807407s ago: executing program 0 (id=402): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="5366b1b827f6001000493700", 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x174}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r0, 0x1) 2.377812498s ago: executing program 4 (id=403): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x42, 0x1ff) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x2000003, 0x12, r0, 0x0) 2.343759339s ago: executing program 2 (id=404): openat(0xffffffffffffff9c, 0x0, 0x40942, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2.191973063s ago: executing program 3 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xd, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000500)={[{@usrquota}, {@usrjquota, 0x22}, {@i_version}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@noblock_validity}], [{@smackfshat={'smackfshat', 0x3d, 'usrjquota='}}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000002000)='./file0\x00', 0x180c8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x292, &(0x7f0000000d80)="$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") r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x4e21, 0x81, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) unshare(0x26020480) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x60000002, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x428f}, &(0x7f0000000180)=0x8) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r6, 0x400c4d09, &(0x7f0000000900)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 2.191704343s ago: executing program 0 (id=406): unshare(0x6a040000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) 2.187309793s ago: executing program 1 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)="30d2", 0x2) 1.737656445s ago: executing program 2 (id=408): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x210000, &(0x7f00000000c0), 0x3, 0x594, &(0x7f0000000480)="$eJzs3c9rXNUeAPDvncz0V/peUyjl9SFS6MJK7aRJ/FHBRV2KFgvqug7JNJRMOiUzKU0s2C7sxo0UQcSCuNe9CxfFjUv/ikItFClBF25G7uROMm0mySSdMbHz+cBtz7n3ZM793nPP4dw5M0wAA+t4+k8u4lhEfJFEHGo7lo/s4PHlckuPb0ymWxKNxge/J5Fk+1rlk+z/4Szzv4j4+bOIU7m19dYWFmdKlUp5LsuP1mevjtYWFk9fni1Nl6fLV8YnJs6+NjH+5huv9yzWly/8+fX79945+/mJpa9+eHj4ThLn4mB2rD2OZ3CzPXO80ciuSSHOPVVwrAeV7SbJTp8A2zKU9fNCRBwrHCq0ev2y4R08M6DfPo2IBjCgki32/73GC3hOtOYBrWf7Hj0H/2s8env5AWht/Pnl90ZiX/PZ6MBS8sSTUfq8O9KD+tM6fvzt7p10i969DwGwqZu3IuJMPr92/Euy8W/7znRR5uk6jH/wz7mXzn9e6TT/ya3Mf6LD/Ge4Q9/djs37f+5hD6pZVzr/e6vj/Hdl0WpkKMv9pznnKySXLlfK6dj234g4GYW9aX6j9ZyzS/cb6x1rn/+lW1p/ay6YncfD/N4n/2aqVC89S8ztHt2K+H/H+W+y0v5Jh/ZPr8dHEfGgizqOlu++uN6xzePvr8Z3ES91bP/VFa1k4/XJ0eb9MNq6K9b64/bRX9erv3P8v/zUh1A7Stv/wMbxjyTt67W1rdfx7b6/yusd2+79vyf5sJnek+27XqrX58Yi9iTvrd0/vvq3rXyrfBr/yRMbj3+d7v/9EfFxl/HfPvL9C9uPv7/S+Ke21P5bT9x/95Nv1qu/u/Z/tZk6me3pZvzr9gSf5doBAAAAAADAbpOLiIOR5IqxL0vncsXi8uc7jsSBXKVaq5+6VJ2/MhXN78qORCHXWuk+1PZ5iLHs87Ct/PhT+YmIOBwRXw7tb+aLk9XK1E4HDwAAAAAAAAAAAAAAAAAAALvE8Mr3/+OJ7/+nHgzt9NkBfZdf/v1vYADlNyvQi196AnalTfs/8NzS/2Fw6f8wuPR/GEjNJT79HwaX/g+DS/+HwaX/AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dOH8+3RpLj29MpvmpawvzM9Vrp6fKtZni7PxkcbI6d7U4Xa1OV8rFyersZq9XqVavjo3H/PXRerlWH60tLF6crc5fqV+8PFuaLl8s+51xAAAAAAAAAAAAAAAAAAAAWKu2sDhTqlTKcz1IFCqVci4iuikc0aNK+5TIdRXFziTSdruZ7+469yeRxOqe/G65LIOa2B99eeWdHpkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNXfAQAA//9brTE8") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x65) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x84fed0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x202, 0x20) 1.55212818s ago: executing program 4 (id=409): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0xab, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000480)={&(0x7f00000002c0)=[r5], 0x1, r6, r3, 0x0, 0x3, 0x100, 0x4, {0x4, 0x1, 0x3, 0x65, 0x200, 0x0, 0x2, 0x5, 0xe, 0xe153, 0xdd, 0x0, 0x80007, 0xffffffff, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 1.481391111s ago: executing program 1 (id=410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x0, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031612d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 98.212777ms ago: executing program 0 (id=411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x34, 0xd, 0xa, 0x6, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000882}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r4, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 0s ago: executing program 4 (id=412): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x44, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "44486d6d3afd8de2ceb42cb8c3"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x44151}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. [ 61.082468][ T4259] cgroup: Unknown subsys name 'net' [ 61.188072][ T4259] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.557046][ T4259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.911777][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.919797][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.931327][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.939400][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.947273][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.949080][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.955553][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.963784][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.970192][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.977464][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.984039][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.990955][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.997835][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.012050][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.013064][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.019365][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.027157][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.041180][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.042023][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.048387][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.056381][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.070646][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.077794][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.098761][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.106096][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.115402][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.122546][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.123277][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.129819][ T4290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.168990][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.529769][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 64.603959][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 64.649321][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 64.664744][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 64.674271][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 64.721308][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.729257][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.737320][ T4283] device bridge_slave_0 entered promiscuous mode [ 64.751013][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.758256][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.766373][ T4283] device bridge_slave_1 entered promiscuous mode [ 64.832268][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.860248][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.873211][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.880309][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.888711][ T4273] device bridge_slave_0 entered promiscuous mode [ 64.920974][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.930780][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.938740][ T4273] device bridge_slave_1 entered promiscuous mode [ 64.958287][ T4283] team0: Port device team_slave_0 added [ 64.989236][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.000196][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.008171][ T4284] device bridge_slave_0 entered promiscuous mode [ 65.016774][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.023959][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.032100][ T4284] device bridge_slave_1 entered promiscuous mode [ 65.040563][ T4283] team0: Port device team_slave_1 added [ 65.046793][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.054211][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.062153][ T4272] device bridge_slave_0 entered promiscuous mode [ 65.071066][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.082351][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.089465][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.097531][ T4278] device bridge_slave_0 entered promiscuous mode [ 65.117741][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.124934][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.133248][ T4278] device bridge_slave_1 entered promiscuous mode [ 65.140753][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.150518][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.158410][ T4272] device bridge_slave_1 entered promiscuous mode [ 65.173576][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.219763][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.232529][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.247553][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.256336][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.284956][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.298618][ T4273] team0: Port device team_slave_0 added [ 65.306459][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.323403][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.333968][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.341016][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.367344][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.380112][ T4273] team0: Port device team_slave_1 added [ 65.394040][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.412084][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.440571][ T4284] team0: Port device team_slave_0 added [ 65.451146][ T4284] team0: Port device team_slave_1 added [ 65.463339][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.470319][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.496436][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.522427][ T4272] team0: Port device team_slave_0 added [ 65.545537][ T4278] team0: Port device team_slave_0 added [ 65.551998][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.558943][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.585364][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.610130][ T4272] team0: Port device team_slave_1 added [ 65.617696][ T4278] team0: Port device team_slave_1 added [ 65.628134][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.635505][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.661690][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.679544][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.687008][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.716083][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.758847][ T4283] device hsr_slave_0 entered promiscuous mode [ 65.765648][ T4283] device hsr_slave_1 entered promiscuous mode [ 65.776591][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.783766][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.809854][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.822255][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.829220][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.855305][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.876986][ T4273] device hsr_slave_0 entered promiscuous mode [ 65.884063][ T4273] device hsr_slave_1 entered promiscuous mode [ 65.890572][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.900480][ T4273] Cannot create hsr debugfs directory [ 65.923377][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.930336][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.957245][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.995074][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.002366][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.029467][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.063903][ T4284] device hsr_slave_0 entered promiscuous mode [ 66.070975][ T4284] device hsr_slave_1 entered promiscuous mode [ 66.077783][ T4284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.085675][ T4284] Cannot create hsr debugfs directory [ 66.139205][ T4272] device hsr_slave_0 entered promiscuous mode [ 66.145855][ T4272] device hsr_slave_1 entered promiscuous mode [ 66.152666][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.160236][ T4272] Cannot create hsr debugfs directory [ 66.182359][ T49] Bluetooth: hci1: command 0x0409 tx timeout [ 66.182368][ T4290] Bluetooth: hci4: command 0x0409 tx timeout [ 66.188656][ T49] Bluetooth: hci2: command 0x0409 tx timeout [ 66.194897][ T4290] Bluetooth: hci3: command 0x0409 tx timeout [ 66.261778][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 66.263898][ T4278] device hsr_slave_0 entered promiscuous mode [ 66.278224][ T4278] device hsr_slave_1 entered promiscuous mode [ 66.284906][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.292828][ T4278] Cannot create hsr debugfs directory [ 66.495946][ T4273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.507291][ T4273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.518261][ T4273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.535268][ T4273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.603120][ T4283] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.619492][ T4283] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.639743][ T4283] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.650855][ T4283] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.699253][ T4272] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.737547][ T4272] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.747372][ T4272] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.773247][ T4284] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.782669][ T4272] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.819829][ T4284] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.835126][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.856687][ T4284] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.875818][ T4278] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.895967][ T4284] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.905606][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.917007][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.926418][ T4278] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.946262][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.974959][ T4278] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.990127][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.999800][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.009046][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.019511][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.026802][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.037049][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.053457][ T4278] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.075944][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.085940][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.095083][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.102193][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.114424][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.125492][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.156369][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.165966][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.175664][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.187417][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.213507][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.226893][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.235894][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.247336][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.256245][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.265040][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.278026][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.299339][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.314847][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.328659][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.344975][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.353748][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.364960][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.372112][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.380402][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.389604][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.398132][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.407372][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.416367][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.423959][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.432549][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.440260][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.449247][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.475324][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.507250][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.527196][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.535862][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.544479][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.564407][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.591418][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.603467][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.614848][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.623770][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.632917][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.639993][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.648238][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.657622][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.666692][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.673824][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.682662][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.691237][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.699978][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.710149][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.718625][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.743253][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.762303][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.782743][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.791358][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.800975][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.835398][ T4283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.847859][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.866183][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.876612][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.891123][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.900700][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.907852][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.916744][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.925717][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.934377][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.941466][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.950101][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.959455][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.968748][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.977339][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.985802][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.995293][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.004197][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.049501][ T4272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.066887][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.102438][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.118542][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.128241][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.137908][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.147831][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.156421][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.165104][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.174744][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.184794][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.193431][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.201793][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.209264][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.217266][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.226027][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.241364][ T4284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.253832][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.262286][ T4290] Bluetooth: hci3: command 0x041b tx timeout [ 68.268322][ T4290] Bluetooth: hci2: command 0x041b tx timeout [ 68.268997][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 68.280440][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 68.293493][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.311788][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.320357][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.342181][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 68.363210][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.423164][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.442838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.489387][ T4273] device veth0_vlan entered promiscuous mode [ 68.519608][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.540402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.558249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.569154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.585053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.624548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.639542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.649572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.666005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.676936][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.684121][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.698808][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.707856][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.721404][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.728586][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.737791][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.747152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.764559][ T4273] device veth1_vlan entered promiscuous mode [ 68.780798][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.790324][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.798535][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.815340][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.841876][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.860037][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.893622][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.903480][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.911052][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.919817][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.929478][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.938780][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.947542][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.956397][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.964977][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.979482][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.999735][ T4273] device veth0_macvtap entered promiscuous mode [ 69.009424][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.026574][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.040664][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.056795][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.068643][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.084190][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.106753][ T4273] device veth1_macvtap entered promiscuous mode [ 69.130327][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.145410][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.156543][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.181366][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.200815][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.215882][ T4283] device veth0_vlan entered promiscuous mode [ 69.232417][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.252958][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.283523][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.305245][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.316833][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.333083][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.359888][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.378331][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.388487][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.403825][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.418028][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.429870][ T4283] device veth1_vlan entered promiscuous mode [ 69.443583][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.459566][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.469505][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.478679][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.502029][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.511608][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.519138][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.553552][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.564061][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.573386][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.585651][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.610254][ T4283] device veth0_macvtap entered promiscuous mode [ 69.644740][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.664596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.675730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.688052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.699219][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.729790][ T4272] device veth0_vlan entered promiscuous mode [ 69.746834][ T4283] device veth1_macvtap entered promiscuous mode [ 69.817538][ T4272] device veth1_vlan entered promiscuous mode [ 69.838654][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.851378][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.859808][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.860986][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.882152][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.909996][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.921312][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.933391][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.952471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.966714][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.976047][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.985332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.007813][ T4284] device veth0_vlan entered promiscuous mode [ 70.017469][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.029276][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.040495][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.055874][ T4278] device veth0_vlan entered promiscuous mode [ 70.068517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.077813][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.078743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.091755][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.095217][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.110068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.119154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.128917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.137725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.145956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.154489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.162925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.170572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.190672][ T4278] device veth1_vlan entered promiscuous mode [ 70.209678][ T4284] device veth1_vlan entered promiscuous mode [ 70.218544][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.237483][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.246271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.255931][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.272901][ T4283] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.282211][ T4283] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.290908][ T4283] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.300796][ T4283] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.313507][ T4272] device veth0_macvtap entered promiscuous mode [ 70.330689][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.341626][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 70.347647][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 70.354259][ T49] Bluetooth: hci3: command 0x040f tx timeout [ 70.354353][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 70.362245][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.375310][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.386808][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.403965][ T4272] device veth1_macvtap entered promiscuous mode [ 70.420456][ T4278] device veth0_macvtap entered promiscuous mode [ 70.441607][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 70.485262][ T4278] device veth1_macvtap entered promiscuous mode [ 70.527271][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.536814][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.552660][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.560697][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.570035][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.578992][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.590923][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.605755][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.616486][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.629582][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.642536][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.663442][ T4284] device veth0_macvtap entered promiscuous mode [ 70.722927][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.740125][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.753154][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.764795][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.775358][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.791215][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.803743][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.813498][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.826097][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.836514][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.850853][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.861316][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.880381][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.896953][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.909894][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.925512][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.938583][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.958903][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.970893][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.981171][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.992557][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.002519][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.013109][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.024848][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.037342][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.048427][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.068811][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.085034][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.099497][ T4284] device veth1_macvtap entered promiscuous mode [ 71.122501][ T4278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.131229][ T4278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.145899][ T4278] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.156775][ T4278] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.173330][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.184103][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.193939][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.203180][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.242397][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.258700][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.258902][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.282257][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.292244][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.303524][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.314156][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.320763][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.329052][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.339842][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.350438][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.361801][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.374057][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.398364][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.409236][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.423825][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.445653][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.479634][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.490182][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.500820][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.515153][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.525628][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.535639][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.546675][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.558048][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.585826][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.602931][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.647274][ T4334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.649326][ T4284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.669579][ T4284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.669761][ T4334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.680073][ T4284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.699012][ T4284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.722932][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.844146][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.857161][ T4333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.861559][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.868700][ T4333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.912108][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.930603][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.999880][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.022470][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.090005][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.094325][ T4380] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.138483][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.140617][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.171666][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.175331][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.206732][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.245370][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.246823][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.266449][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.301015][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.422108][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 72.426759][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 72.428196][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 72.434211][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 72.502265][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 72.695054][ T4393] syz.3.15 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 72.711734][ T4393] CPU: 0 PID: 4393 Comm: syz.3.15 Not tainted syzkaller #0 [ 72.718981][ T4393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.729072][ T4393] Call Trace: [ 72.732368][ T4393] [ 72.735482][ T4393] dump_stack_lvl+0x188/0x24e [ 72.740173][ T4393] ? ___ratelimit+0x14e/0x610 [ 72.744845][ T4393] ? show_regs_print_info+0x12/0x12 [ 72.750036][ T4393] ? load_image+0x410/0x410 [ 72.754557][ T4393] ? ___ratelimit+0x474/0x610 [ 72.759228][ T4393] ? radix_tree_cpu_dead+0x160/0x160 [ 72.764509][ T4393] dump_header+0xd8/0x820 [ 72.768836][ T4393] oom_kill_process+0x361/0x550 [ 72.771560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 72.773670][ T4393] out_of_memory+0xe25/0x1220 [ 72.786490][ T4393] ? mutex_lock_nested+0x10/0x10 [ 72.791429][ T4393] ? unregister_oom_notifier+0x20/0x20 [ 72.791546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 72.796876][ T4393] mem_cgroup_out_of_memory+0x2c0/0x390 [ 72.810565][ T4393] ? mem_cgroup_oom_trylock+0x210/0x210 [ 72.811544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 72.816212][ T4393] ? do_raw_spin_unlock+0x11d/0x230 [ 72.829536][ T4393] try_charge_memcg+0xc9d/0x17c0 [ 72.831549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 72.834478][ T4393] ? percpu_ref_put+0x180/0x180 [ 72.847453][ T4393] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 72.851559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 72.853178][ T4393] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 72.867361][ T4393] ? percpu_ref_tryget+0x15/0x180 [ 72.872376][ T4393] ? percpu_ref_tryget+0x15/0x180 [ 72.877494][ T4393] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 72.881587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 72.883245][ T4393] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 72.897188][ T4393] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 72.901564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 72.902984][ T4393] obj_cgroup_charge+0x36a/0x620 [ 72.911542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 72.916129][ T4393] ? obj_cgroup_charge+0xe9/0x620 [ 72.929385][ T4393] ? mod_objcg_mlstate+0x320/0x320 [ 72.931556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 72.934478][ T4393] ? percpu_ref_tryget+0x15/0x180 [ 72.948235][ T4393] ? percpu_ref_tryget+0x15/0x180 [ 72.951551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 72.953258][ T4393] ? get_obj_cgroup_from_current+0xd0/0x280 [ 72.967387][ T4393] slab_pre_alloc_hook+0x2e2/0x300 [ 72.972512][ T4393] kmem_cache_alloc+0x56/0x2f0 [ 72.977266][ T4393] ? sk_prot_alloc+0x57/0x210 [ 72.981954][ T4393] sk_prot_alloc+0x57/0x210 [ 72.986444][ T4393] ? sk_alloc+0x20/0x330 [ 72.990671][ T4393] sk_alloc+0x36/0x330 [ 72.994739][ T4393] inet_create+0x759/0xf60 [ 72.999168][ T4393] ? inet_create+0x9e/0xf60 [ 73.003660][ T4393] __sock_create+0x49a/0x940 [ 73.008242][ T4393] smc_create+0x186/0x290 [ 73.012581][ T4393] __sock_create+0x49a/0x940 [ 73.017165][ T4393] __sys_socket+0xc4/0x190 [ 73.021582][ T4393] __x64_sys_socket+0x76/0x80 [ 73.026252][ T4393] do_syscall_64+0x4c/0xa0 [ 73.030654][ T4393] ? clear_bhb_loop+0x60/0xb0 [ 73.035319][ T4393] ? clear_bhb_loop+0x60/0xb0 [ 73.040016][ T4393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.045901][ T4393] RIP: 0033:0x7ff03e39e019 [ 73.050319][ T4393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.069935][ T4393] RSP: 002b:00007ff03f24a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 73.078345][ T4393] RAX: ffffffffffffffda RBX: 00007ff03e625fa0 RCX: 00007ff03e39e019 [ 73.086349][ T4393] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 73.094321][ T4393] RBP: 00007ff03e43500c R08: 0000000000000000 R09: 0000000000000000 [ 73.102294][ T4393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.110269][ T4393] R13: 00007ff03e626038 R14: 00007ff03e625fa0 R15: 00007ffdd63cb888 [ 73.118245][ T4393] [ 73.129258][ T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.148010][ T4393] memory: usage 8kB, limit 8kB, failcnt 21 [ 73.168551][ T4393] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 73.184980][ T4393] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 73.193833][ T4393] Memory cgroup stats for /syz3/test: [ 73.194896][ T4393] anon 0 [ 73.194896][ T4393] file 0 [ 73.194896][ T4393] kernel 8192 [ 73.194896][ T4393] kernel_stack 0 [ 73.194896][ T4393] pagetables 0 [ 73.194896][ T4393] sec_pagetables 0 [ 73.194896][ T4393] percpu 0 [ 73.194896][ T4393] sock 0 [ 73.194896][ T4393] vmalloc 0 [ 73.194896][ T4393] shmem 0 [ 73.194896][ T4393] zswap 0 [ 73.194896][ T4393] zswapped 0 [ 73.194896][ T4393] file_mapped 0 [ 73.194896][ T4393] file_dirty 0 [ 73.194896][ T4393] file_writeback 0 [ 73.194896][ T4393] swapcached 0 [ 73.194896][ T4393] anon_thp 0 [ 73.194896][ T4393] file_thp 0 [ 73.194896][ T4393] shmem_thp 0 [ 73.194896][ T4393] inactive_anon 0 [ 73.194896][ T4393] active_anon 0 [ 73.194896][ T4393] inactive_file 0 [ 73.194896][ T4393] active_file 0 [ 73.194896][ T4393] unevictable 0 [ 73.194896][ T4393] slab_reclaimable 3088 [ 73.194896][ T4393] slab_unreclaimable 2888 [ 73.194896][ T4393] slab 5976 [ 73.194896][ T4393] workingset_refault_anon 0 [ 73.292090][ C1] vkms_vblank_simulate: vblank timer overrun [ 73.321051][ T4393] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.15,pid=4392,uid=0 [ 73.360835][ T4393] Memory cgroup out of memory: Killed process 4392 (syz.3.15) total-vm:102172kB, anon-rss:1392kB, file-rss:21960kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 73.411914][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 73.423436][ T26] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 73.433164][ T26] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.443205][ T26] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.455624][ T26] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.471246][ T26] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.502808][ T26] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 73.574080][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.602880][ T4404] device syzkaller0 entered promiscuous mode [ 73.718756][ T4409] device syzkaller0 entered promiscuous mode [ 73.844819][ T26] usb 2-1: usb_control_msg returned -32 [ 73.850790][ T26] usbtmc 2-1:16.0: can't read capabilities [ 74.482191][ T4434] qfq: no options [ 74.590198][ T4436] usbtmc 2-1:16.0: usb_clear_halt returned -32 [ 74.794894][ T26] usb 2-1: USB disconnect, device number 2 [ 74.927765][ T4444] device syzkaller0 entered promiscuous mode [ 75.091130][ T4446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32'. [ 75.137848][ T4446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.328186][ T4451] device syzkaller0 entered promiscuous mode [ 75.433863][ T4448] syz.2.32 (4448) used greatest stack depth: 20752 bytes left [ 76.066003][ T4477] device syzkaller0 entered promiscuous mode [ 76.660633][ T4499] device syzkaller0 entered promiscuous mode [ 76.809996][ T4503] device syzkaller0 entered promiscuous mode [ 77.209456][ T4524] syz.3.63 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 77.239595][ T4524] CPU: 1 PID: 4524 Comm: syz.3.63 Not tainted syzkaller #0 [ 77.246854][ T4524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.256928][ T4524] Call Trace: [ 77.260219][ T4524] [ 77.263166][ T4524] dump_stack_lvl+0x188/0x24e [ 77.267871][ T4524] ? ___ratelimit+0x14e/0x610 [ 77.272580][ T4524] ? show_regs_print_info+0x12/0x12 [ 77.277895][ T4524] ? load_image+0x410/0x410 [ 77.282417][ T4524] ? ___ratelimit+0x474/0x610 [ 77.287129][ T4524] ? radix_tree_cpu_dead+0x160/0x160 [ 77.292448][ T4524] dump_header+0xd8/0x820 [ 77.296806][ T4524] oom_kill_process+0x361/0x550 [ 77.301774][ T4524] out_of_memory+0xe25/0x1220 [ 77.306472][ T4524] ? print_unlock_imbalance_bug+0x160/0x160 [ 77.312391][ T4524] ? mutex_lock_nested+0x10/0x10 [ 77.317356][ T4524] ? unregister_oom_notifier+0x20/0x20 [ 77.322843][ T4524] mem_cgroup_out_of_memory+0x2c0/0x390 [ 77.328423][ T4524] ? mem_cgroup_oom_trylock+0x210/0x210 [ 77.333994][ T4524] ? do_raw_spin_unlock+0x11d/0x230 [ 77.339203][ T4524] try_charge_memcg+0xc9d/0x17c0 [ 77.344164][ T4524] ? percpu_ref_put+0x180/0x180 [ 77.349191][ T4524] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 77.354915][ T4524] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 77.360894][ T4524] ? percpu_ref_tryget+0x15/0x180 [ 77.365912][ T4524] ? percpu_ref_tryget+0x15/0x180 [ 77.370933][ T4524] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 77.376647][ T4524] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 77.382365][ T4524] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 77.388168][ T4524] obj_cgroup_charge+0x36a/0x620 [ 77.393106][ T4524] ? obj_cgroup_charge+0xe9/0x620 [ 77.398132][ T4524] ? mod_objcg_mlstate+0x320/0x320 [ 77.403235][ T4524] ? percpu_ref_tryget+0x15/0x180 [ 77.408258][ T4524] ? get_obj_cgroup_from_current+0xd0/0x280 [ 77.414175][ T4524] slab_pre_alloc_hook+0x2e2/0x300 [ 77.419288][ T4524] kmem_cache_alloc+0x56/0x2f0 [ 77.424042][ T4524] ? sk_prot_alloc+0x57/0x210 [ 77.428716][ T4524] sk_prot_alloc+0x57/0x210 [ 77.433209][ T4524] ? sk_alloc+0x20/0x330 [ 77.437449][ T4524] sk_alloc+0x36/0x330 [ 77.441524][ T4524] smc_sock_alloc+0x4b/0x570 [ 77.446118][ T4524] smc_create+0xc8/0x290 [ 77.450358][ T4524] __sock_create+0x49a/0x940 [ 77.454951][ T4524] __sys_socket+0xc4/0x190 [ 77.459369][ T4524] __x64_sys_socket+0x76/0x80 [ 77.464042][ T4524] do_syscall_64+0x4c/0xa0 [ 77.468456][ T4524] ? clear_bhb_loop+0x60/0xb0 [ 77.473131][ T4524] ? clear_bhb_loop+0x60/0xb0 [ 77.477804][ T4524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.483692][ T4524] RIP: 0033:0x7ff03e39e019 [ 77.488101][ T4524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.507705][ T4524] RSP: 002b:00007ff03f24a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 77.516119][ T4524] RAX: ffffffffffffffda RBX: 00007ff03e625fa0 RCX: 00007ff03e39e019 [ 77.524086][ T4524] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 77.532141][ T4524] RBP: 00007ff03e43500c R08: 0000000000000000 R09: 0000000000000000 [ 77.540112][ T4524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.548081][ T4524] R13: 00007ff03e626038 R14: 00007ff03e625fa0 R15: 00007ffdd63cb888 [ 77.556162][ T4524] [ 77.582337][ T4524] memory: usage 8kB, limit 8kB, failcnt 59 [ 77.601075][ T4524] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 77.618286][ T4524] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 77.638726][ T4524] Memory cgroup stats for /syz3/test: [ 77.638921][ T4524] anon 0 [ 77.638921][ T4524] file 0 [ 77.638921][ T4524] kernel 8192 [ 77.638921][ T4524] kernel_stack 0 [ 77.638921][ T4524] pagetables 4096 [ 77.638921][ T4524] sec_pagetables 0 [ 77.638921][ T4524] percpu 0 [ 77.638921][ T4524] sock 0 [ 77.638921][ T4524] vmalloc 0 [ 77.638921][ T4524] shmem 0 [ 77.638921][ T4524] zswap 0 [ 77.638921][ T4524] zswapped 0 [ 77.638921][ T4524] file_mapped 0 [ 77.638921][ T4524] file_dirty 0 [ 77.638921][ T4524] file_writeback 0 [ 77.638921][ T4524] swapcached 0 [ 77.638921][ T4524] anon_thp 0 [ 77.638921][ T4524] file_thp 0 [ 77.638921][ T4524] shmem_thp 0 [ 77.638921][ T4524] inactive_anon 0 [ 77.638921][ T4524] active_anon 0 [ 77.638921][ T4524] inactive_file 0 [ 77.638921][ T4524] active_file 0 [ 77.638921][ T4524] unevictable 0 [ 77.638921][ T4524] slab_reclaimable 1544 [ 77.638921][ T4524] slab_unreclaimable 0 [ 77.638921][ T4524] slab 1544 [ 77.638921][ T4524] workingset_refault_anon 0 [ 77.748320][ T4524] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.63,pid=4523,uid=0 [ 77.771454][ T4524] Memory cgroup out of memory: Killed process 4523 (syz.3.63) total-vm:102172kB, anon-rss:1392kB, file-rss:21936kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 77.967361][ T4535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.68'. [ 77.999047][ T4535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.231343][ T4548] Bluetooth: MGMT ver 1.22 [ 78.277264][ T4549] tc action pedit offset must be on 32 bit boundaries [ 78.477337][ T4559] syz.3.79 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 78.542641][ T4559] CPU: 0 PID: 4559 Comm: syz.3.79 Not tainted syzkaller #0 [ 78.549894][ T4559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.559970][ T4559] Call Trace: [ 78.563279][ T4559] [ 78.566248][ T4559] dump_stack_lvl+0x188/0x24e [ 78.570965][ T4559] ? ___ratelimit+0x14e/0x610 [ 78.575678][ T4559] ? show_regs_print_info+0x12/0x12 [ 78.580992][ T4559] ? load_image+0x410/0x410 [ 78.585552][ T4559] ? ___ratelimit+0x474/0x610 [ 78.590285][ T4559] ? radix_tree_cpu_dead+0x160/0x160 [ 78.595615][ T4559] dump_header+0xd8/0x820 [ 78.599980][ T4559] oom_kill_process+0x361/0x550 [ 78.604865][ T4559] out_of_memory+0xe25/0x1220 [ 78.609610][ T4559] ? print_unlock_imbalance_bug+0x160/0x160 [ 78.615537][ T4559] ? mutex_lock_nested+0x10/0x10 [ 78.620520][ T4559] ? unregister_oom_notifier+0x20/0x20 [ 78.626061][ T4559] mem_cgroup_out_of_memory+0x2c0/0x390 [ 78.631641][ T4559] ? mem_cgroup_oom_trylock+0x210/0x210 [ 78.637225][ T4559] ? do_raw_spin_unlock+0x11d/0x230 [ 78.642458][ T4559] try_charge_memcg+0xc9d/0x17c0 [ 78.647449][ T4559] ? percpu_ref_put+0x180/0x180 [ 78.652342][ T4559] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 78.658122][ T4559] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 78.664137][ T4559] ? percpu_ref_tryget+0x15/0x180 [ 78.669194][ T4559] ? percpu_ref_tryget+0x15/0x180 [ 78.674253][ T4559] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 78.680011][ T4559] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 78.685784][ T4559] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 78.691626][ T4559] obj_cgroup_charge+0x36a/0x620 [ 78.696596][ T4559] ? obj_cgroup_charge+0xe9/0x620 [ 78.701651][ T4559] ? mod_objcg_mlstate+0x320/0x320 [ 78.706794][ T4559] ? percpu_ref_tryget+0x15/0x180 [ 78.711855][ T4559] ? get_obj_cgroup_from_current+0xd0/0x280 [ 78.717788][ T4559] slab_pre_alloc_hook+0x2e2/0x300 [ 78.722933][ T4559] kmem_cache_alloc+0x56/0x2f0 [ 78.727723][ T4559] ? sk_prot_alloc+0x57/0x210 [ 78.732432][ T4559] sk_prot_alloc+0x57/0x210 [ 78.736969][ T4559] ? sk_alloc+0x20/0x330 [ 78.741241][ T4559] sk_alloc+0x36/0x330 [ 78.745337][ T4559] smc_sock_alloc+0x4b/0x570 [ 78.749956][ T4559] smc_create+0xc8/0x290 [ 78.754232][ T4559] __sock_create+0x49a/0x940 [ 78.758896][ T4559] __sys_socket+0xc4/0x190 [ 78.763348][ T4559] __x64_sys_socket+0x76/0x80 [ 78.768057][ T4559] do_syscall_64+0x4c/0xa0 [ 78.772509][ T4559] ? clear_bhb_loop+0x60/0xb0 [ 78.777217][ T4559] ? clear_bhb_loop+0x60/0xb0 [ 78.781921][ T4559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.787843][ T4559] RIP: 0033:0x7ff03e39e019 [ 78.792370][ T4559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.812005][ T4559] RSP: 002b:00007ff03f24a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 78.820452][ T4559] RAX: ffffffffffffffda RBX: 00007ff03e625fa0 RCX: 00007ff03e39e019 [ 78.828549][ T4559] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 78.836545][ T4559] RBP: 00007ff03e43500c R08: 0000000000000000 R09: 0000000000000000 [ 78.844541][ T4559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.852540][ T4559] R13: 00007ff03e626038 R14: 00007ff03e625fa0 R15: 00007ffdd63cb888 [ 78.860554][ T4559] [ 78.920834][ T4559] memory: usage 8kB, limit 8kB, failcnt 97 [ 78.927511][ T4568] loop1: detected capacity change from 0 to 512 [ 78.932941][ T4559] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 78.943734][ T4559] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 78.950623][ T4559] Memory cgroup stats for /syz3/test: [ 78.950791][ T4559] anon 0 [ 78.950791][ T4559] file 0 [ 78.950791][ T4559] kernel 8192 [ 78.950791][ T4559] kernel_stack 0 [ 78.950791][ T4559] pagetables 4096 [ 78.950791][ T4559] sec_pagetables 0 [ 78.950791][ T4559] percpu 0 [ 78.950791][ T4559] sock 0 [ 78.950791][ T4559] vmalloc 0 [ 78.950791][ T4559] shmem 0 [ 78.950791][ T4559] zswap 0 [ 78.950791][ T4559] zswapped 0 [ 78.950791][ T4559] file_mapped 0 [ 78.950791][ T4559] file_dirty 0 [ 78.950791][ T4559] file_writeback 0 [ 78.950791][ T4559] swapcached 0 [ 78.950791][ T4559] anon_thp 0 [ 78.950791][ T4559] file_thp 0 [ 78.950791][ T4559] shmem_thp 0 [ 78.950791][ T4559] inactive_anon 0 [ 78.950791][ T4559] active_anon 0 [ 78.950791][ T4559] inactive_file 0 [ 78.950791][ T4559] active_file 0 [ 78.950791][ T4559] unevictable 0 [ 78.950791][ T4559] slab_reclaimable 1544 [ 78.950791][ T4559] slab_unreclaimable 0 [ 78.950791][ T4559] slab 1544 [ 78.950791][ T4559] workingset_refault_anon 0 [ 79.056826][ T4559] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.79,pid=4558,uid=0 [ 79.076783][ T4559] Memory cgroup out of memory: Killed process 4558 (syz.3.79) total-vm:102172kB, anon-rss:1392kB, file-rss:21960kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 81.624709][ T4666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 81.899970][ T4666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.781528][ C0] sched: RT throttling activated [ 83.820183][ T4709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.144'. [ 83.889535][ T4709] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.054857][ T4721] device syzkaller0 entered promiscuous mode [ 84.541068][ T4741] loop3: detected capacity change from 0 to 8192 [ 86.639010][ T4768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.162'. [ 86.666157][ T954] cfg80211: failed to load regulatory.db [ 87.076082][ T4808] syz.4.180 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 87.108406][ T4808] CPU: 1 PID: 4808 Comm: syz.4.180 Not tainted syzkaller #0 [ 87.115743][ T4808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.125816][ T4808] Call Trace: [ 87.129106][ T4808] [ 87.132054][ T4808] dump_stack_lvl+0x188/0x24e [ 87.136762][ T4808] ? ___ratelimit+0x14e/0x610 [ 87.141469][ T4808] ? show_regs_print_info+0x12/0x12 [ 87.146709][ T4808] ? load_image+0x410/0x410 [ 87.151241][ T4808] ? ___ratelimit+0x474/0x610 [ 87.155950][ T4808] ? radix_tree_cpu_dead+0x160/0x160 [ 87.161276][ T4808] dump_header+0xd8/0x820 [ 87.165638][ T4808] oom_kill_process+0x361/0x550 [ 87.170521][ T4808] out_of_memory+0xe25/0x1220 [ 87.175228][ T4808] ? print_unlock_imbalance_bug+0x160/0x160 [ 87.181151][ T4808] ? mutex_lock_nested+0x10/0x10 [ 87.186134][ T4808] ? unregister_oom_notifier+0x20/0x20 [ 87.191794][ T4808] mem_cgroup_out_of_memory+0x2c0/0x390 [ 87.197364][ T4808] ? mem_cgroup_oom_trylock+0x210/0x210 [ 87.203002][ T4808] ? do_raw_spin_unlock+0x11d/0x230 [ 87.208219][ T4808] try_charge_memcg+0xc9d/0x17c0 [ 87.213178][ T4808] ? percpu_ref_put+0x180/0x180 [ 87.218032][ T4808] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 87.223759][ T4808] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 87.229742][ T4808] ? percpu_ref_tryget+0x15/0x180 [ 87.234779][ T4808] ? percpu_ref_tryget+0x15/0x180 [ 87.239805][ T4808] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 87.245527][ T4808] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 87.251269][ T4808] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 87.257100][ T4808] obj_cgroup_charge+0x36a/0x620 [ 87.262048][ T4808] ? obj_cgroup_charge+0xe9/0x620 [ 87.267077][ T4808] ? mod_objcg_mlstate+0x320/0x320 [ 87.272188][ T4808] ? percpu_ref_tryget+0x15/0x180 [ 87.277251][ T4808] ? get_obj_cgroup_from_current+0xd0/0x280 [ 87.283152][ T4808] slab_pre_alloc_hook+0x2e2/0x300 [ 87.288268][ T4808] kmem_cache_alloc+0x56/0x2f0 [ 87.293024][ T4808] ? sk_prot_alloc+0x57/0x210 [ 87.297707][ T4808] sk_prot_alloc+0x57/0x210 [ 87.302203][ T4808] ? sk_alloc+0x20/0x330 [ 87.306441][ T4808] sk_alloc+0x36/0x330 [ 87.310506][ T4808] smc_sock_alloc+0x4b/0x570 [ 87.315098][ T4808] smc_create+0xc8/0x290 [ 87.319383][ T4808] __sock_create+0x49a/0x940 [ 87.323979][ T4808] __sys_socket+0xc4/0x190 [ 87.328394][ T4808] __x64_sys_socket+0x76/0x80 [ 87.333069][ T4808] do_syscall_64+0x4c/0xa0 [ 87.337481][ T4808] ? clear_bhb_loop+0x60/0xb0 [ 87.342161][ T4808] ? clear_bhb_loop+0x60/0xb0 [ 87.346839][ T4808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.352741][ T4808] RIP: 0033:0x7f1fbb19e019 [ 87.357151][ T4808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.376838][ T4808] RSP: 002b:00007f1fbc119028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 87.385254][ T4808] RAX: ffffffffffffffda RBX: 00007f1fbb425fa0 RCX: 00007f1fbb19e019 [ 87.393227][ T4808] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 87.401368][ T4808] RBP: 00007f1fbb23500c R08: 0000000000000000 R09: 0000000000000000 [ 87.409338][ T4808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.417311][ T4808] R13: 00007f1fbb426038 R14: 00007f1fbb425fa0 R15: 00007ffc08341408 [ 87.425299][ T4808] [ 87.696215][ T4808] memory: usage 8kB, limit 8kB, failcnt 21 [ 87.721715][ T4808] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 87.738187][ T4808] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 87.755400][ T4808] Memory cgroup stats for /syz4/test: [ 87.755593][ T4808] anon 0 [ 87.755593][ T4808] file 0 [ 87.755593][ T4808] kernel 8192 [ 87.755593][ T4808] kernel_stack 0 [ 87.755593][ T4808] pagetables 4096 [ 87.755593][ T4808] sec_pagetables 0 [ 87.755593][ T4808] percpu 0 [ 87.755593][ T4808] sock 0 [ 87.755593][ T4808] vmalloc 0 [ 87.755593][ T4808] shmem 0 [ 87.755593][ T4808] zswap 0 [ 87.755593][ T4808] zswapped 0 [ 87.755593][ T4808] file_mapped 0 [ 87.755593][ T4808] file_dirty 0 [ 87.755593][ T4808] file_writeback 0 [ 87.755593][ T4808] swapcached 0 [ 87.755593][ T4808] anon_thp 0 [ 87.755593][ T4808] file_thp 0 [ 87.755593][ T4808] shmem_thp 0 [ 87.755593][ T4808] inactive_anon 0 [ 87.755593][ T4808] active_anon 0 [ 87.755593][ T4808] inactive_file 0 [ 87.755593][ T4808] active_file 0 [ 87.755593][ T4808] unevictable 0 [ 87.755593][ T4808] slab_reclaimable 1544 [ 87.755593][ T4808] slab_unreclaimable 0 [ 87.755593][ T4808] slab 1544 [ 87.755593][ T4808] workingset_refault_anon 0 [ 87.926740][ T4808] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.180,pid=4807,uid=0 [ 87.943561][ T4808] Memory cgroup out of memory: Killed process 4808 (syz.4.180) total-vm:102244kB, anon-rss:1416kB, file-rss:22548kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 88.055350][ T4816] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.063701][ T4816] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.853781][ T4816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.888615][ T4816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.174060][ T4816] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.183141][ T4816] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.192467][ T4816] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.201431][ T4816] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.795738][ T4887] Zero length message leads to an empty skb [ 89.804313][ T4885] device bond0 entered promiscuous mode [ 89.809938][ T4885] device bond_slave_0 entered promiscuous mode [ 89.818181][ T4885] device bond_slave_1 entered promiscuous mode [ 89.833805][ T4885] device batadv0 entered promiscuous mode [ 89.853148][ T4885] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 89.871307][ T4885] device bond0 left promiscuous mode [ 89.881332][ T4885] device bond_slave_0 left promiscuous mode [ 89.894585][ T4885] device bond_slave_1 left promiscuous mode [ 89.910470][ T4885] device batadv0 left promiscuous mode [ 90.043526][ T4897] device syzkaller0 entered promiscuous mode [ 90.640594][ T4824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.993865][ T4913] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.002130][ T4913] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.262829][ T4930] syz.3.216 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 91.294597][ T4930] CPU: 1 PID: 4930 Comm: syz.3.216 Not tainted syzkaller #0 [ 91.302030][ T4930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.312123][ T4930] Call Trace: [ 91.315418][ T4930] [ 91.318362][ T4930] dump_stack_lvl+0x188/0x24e [ 91.323053][ T4930] ? ___ratelimit+0x14e/0x610 [ 91.327757][ T4930] ? show_regs_print_info+0x12/0x12 [ 91.332974][ T4930] ? load_image+0x410/0x410 [ 91.337506][ T4930] ? ___ratelimit+0x474/0x610 [ 91.342219][ T4930] ? radix_tree_cpu_dead+0x160/0x160 [ 91.347549][ T4930] dump_header+0xd8/0x820 [ 91.351914][ T4930] oom_kill_process+0x361/0x550 [ 91.356800][ T4930] out_of_memory+0xe25/0x1220 [ 91.361514][ T4930] ? print_unlock_imbalance_bug+0x160/0x160 [ 91.367443][ T4930] ? mutex_lock_nested+0x10/0x10 [ 91.372417][ T4930] ? unregister_oom_notifier+0x20/0x20 [ 91.377914][ T4930] mem_cgroup_out_of_memory+0x2c0/0x390 [ 91.383488][ T4930] ? mem_cgroup_oom_trylock+0x210/0x210 [ 91.389041][ T4930] ? do_raw_spin_unlock+0x11d/0x230 [ 91.394248][ T4930] try_charge_memcg+0xc9d/0x17c0 [ 91.399206][ T4930] ? percpu_ref_put+0x180/0x180 [ 91.404060][ T4930] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 91.409781][ T4930] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 91.415902][ T4930] ? percpu_ref_tryget+0x15/0x180 [ 91.421011][ T4930] ? percpu_ref_tryget+0x15/0x180 [ 91.426046][ T4930] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 91.431762][ T4930] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 91.437479][ T4930] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 91.443287][ T4930] obj_cgroup_charge+0x36a/0x620 [ 91.448296][ T4930] ? obj_cgroup_charge+0xe9/0x620 [ 91.453322][ T4930] ? mod_objcg_mlstate+0x320/0x320 [ 91.458460][ T4930] ? percpu_ref_tryget+0x15/0x180 [ 91.463577][ T4930] ? get_obj_cgroup_from_current+0xd0/0x280 [ 91.469470][ T4930] slab_pre_alloc_hook+0x2e2/0x300 [ 91.474586][ T4930] kmem_cache_alloc+0x56/0x2f0 [ 91.479344][ T4930] ? sk_prot_alloc+0x57/0x210 [ 91.484030][ T4930] sk_prot_alloc+0x57/0x210 [ 91.488538][ T4930] ? sk_alloc+0x20/0x330 [ 91.492814][ T4930] sk_alloc+0x36/0x330 [ 91.496883][ T4930] smc_sock_alloc+0x4b/0x570 [ 91.501473][ T4930] smc_create+0xc8/0x290 [ 91.505720][ T4930] __sock_create+0x49a/0x940 [ 91.510317][ T4930] __sys_socket+0xc4/0x190 [ 91.514741][ T4930] __x64_sys_socket+0x76/0x80 [ 91.519417][ T4930] do_syscall_64+0x4c/0xa0 [ 91.523835][ T4930] ? clear_bhb_loop+0x60/0xb0 [ 91.528509][ T4930] ? clear_bhb_loop+0x60/0xb0 [ 91.533187][ T4930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.539082][ T4930] RIP: 0033:0x7ff03e39e019 [ 91.543492][ T4930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.563098][ T4930] RSP: 002b:00007ff03f24a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 91.571511][ T4930] RAX: ffffffffffffffda RBX: 00007ff03e625fa0 RCX: 00007ff03e39e019 [ 91.580802][ T4930] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 91.589046][ T4930] RBP: 00007ff03e43500c R08: 0000000000000000 R09: 0000000000000000 [ 91.597303][ T4930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.605619][ T4930] R13: 00007ff03e626038 R14: 00007ff03e625fa0 R15: 00007ffdd63cb888 [ 91.613605][ T4930] [ 91.622330][ T4930] memory: usage 8kB, limit 8kB, failcnt 135 [ 91.631807][ T4930] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 91.639584][ T4930] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 91.652973][ T4930] Memory cgroup stats for /syz3/test: [ 91.653146][ T4930] anon 0 [ 91.653146][ T4930] file 0 [ 91.653146][ T4930] kernel 8192 [ 91.653146][ T4930] kernel_stack 0 [ 91.653146][ T4930] pagetables 4096 [ 91.653146][ T4930] sec_pagetables 0 [ 91.653146][ T4930] percpu 0 [ 91.653146][ T4930] sock 0 [ 91.653146][ T4930] vmalloc 0 [ 91.653146][ T4930] shmem 0 [ 91.653146][ T4930] zswap 0 [ 91.653146][ T4930] zswapped 0 [ 91.653146][ T4930] file_mapped 0 [ 91.653146][ T4930] file_dirty 0 [ 91.653146][ T4930] file_writeback 0 [ 91.653146][ T4930] swapcached 0 [ 91.653146][ T4930] anon_thp 0 [ 91.653146][ T4930] file_thp 0 [ 91.653146][ T4930] shmem_thp 0 [ 91.653146][ T4930] inactive_anon 0 [ 91.653146][ T4930] active_anon 0 [ 91.653146][ T4930] inactive_file 0 [ 91.653146][ T4930] active_file 0 [ 91.653146][ T4930] unevictable 0 [ 91.653146][ T4930] slab_reclaimable 1544 [ 91.653146][ T4930] slab_unreclaimable 0 [ 91.653146][ T4930] slab 1544 [ 91.653146][ T4930] workingset_refault_anon 0 [ 91.749530][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.797791][ T4930] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.216,pid=4929,uid=0 [ 91.814135][ T4930] Memory cgroup out of memory: Killed process 4929 (syz.3.216) total-vm:102244kB, anon-rss:1400kB, file-rss:21960kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 91.995042][ T4913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.067377][ T4913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.658897][ T4913] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.679006][ T4913] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.694610][ T4913] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.705505][ T4913] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.596512][ T4989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.239'. [ 93.926560][ T5000] syz.4.243 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 93.937640][ T5000] CPU: 1 PID: 5000 Comm: syz.4.243 Not tainted syzkaller #0 [ 93.944958][ T5000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.955060][ T5000] Call Trace: [ 93.958339][ T5000] [ 93.961264][ T5000] dump_stack_lvl+0x188/0x24e [ 93.965946][ T5000] ? ___ratelimit+0x14e/0x610 [ 93.970626][ T5000] ? show_regs_print_info+0x12/0x12 [ 93.975816][ T5000] ? load_image+0x410/0x410 [ 93.980316][ T5000] ? ___ratelimit+0x474/0x610 [ 93.984996][ T5000] ? radix_tree_cpu_dead+0x160/0x160 [ 93.990283][ T5000] dump_header+0xd8/0x820 [ 93.994619][ T5000] oom_kill_process+0x361/0x550 [ 93.999495][ T5000] out_of_memory+0xe25/0x1220 [ 94.004190][ T5000] ? print_unlock_imbalance_bug+0x160/0x160 [ 94.010110][ T5000] ? mutex_lock_nested+0x10/0x10 [ 94.015061][ T5000] ? unregister_oom_notifier+0x20/0x20 [ 94.020528][ T5000] mem_cgroup_out_of_memory+0x2c0/0x390 [ 94.026087][ T5000] ? mem_cgroup_oom_trylock+0x210/0x210 [ 94.031659][ T5000] ? do_raw_spin_unlock+0x11d/0x230 [ 94.036869][ T5000] try_charge_memcg+0xc9d/0x17c0 [ 94.041833][ T5000] ? percpu_ref_put+0x180/0x180 [ 94.046686][ T5000] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 94.052425][ T5000] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 94.058525][ T5000] ? percpu_ref_tryget+0x15/0x180 [ 94.063559][ T5000] ? percpu_ref_tryget+0x15/0x180 [ 94.068606][ T5000] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 94.074371][ T5000] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 94.080093][ T5000] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 94.085908][ T5000] obj_cgroup_charge+0x36a/0x620 [ 94.090965][ T5000] ? obj_cgroup_charge+0xe9/0x620 [ 94.096077][ T5000] ? mod_objcg_mlstate+0x320/0x320 [ 94.101187][ T5000] ? percpu_ref_tryget+0x15/0x180 [ 94.106217][ T5000] ? get_obj_cgroup_from_current+0xd0/0x280 [ 94.112134][ T5000] slab_pre_alloc_hook+0x2e2/0x300 [ 94.117248][ T5000] kmem_cache_alloc+0x56/0x2f0 [ 94.122008][ T5000] ? sk_prot_alloc+0x57/0x210 [ 94.126687][ T5000] sk_prot_alloc+0x57/0x210 [ 94.131184][ T5000] ? sk_alloc+0x20/0x330 [ 94.135424][ T5000] sk_alloc+0x36/0x330 [ 94.139492][ T5000] smc_sock_alloc+0x4b/0x570 [ 94.144091][ T5000] smc_create+0xc8/0x290 [ 94.148338][ T5000] __sock_create+0x49a/0x940 [ 94.152932][ T5000] __sys_socket+0xc4/0x190 [ 94.157373][ T5000] __x64_sys_socket+0x76/0x80 [ 94.162052][ T5000] do_syscall_64+0x4c/0xa0 [ 94.166469][ T5000] ? clear_bhb_loop+0x60/0xb0 [ 94.171141][ T5000] ? clear_bhb_loop+0x60/0xb0 [ 94.175816][ T5000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.181705][ T5000] RIP: 0033:0x7f1fbb19e019 [ 94.186138][ T5000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.205944][ T5000] RSP: 002b:00007f1fbc119028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 94.214459][ T5000] RAX: ffffffffffffffda RBX: 00007f1fbb425fa0 RCX: 00007f1fbb19e019 [ 94.222433][ T5000] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 94.230399][ T5000] RBP: 00007f1fbb23500c R08: 0000000000000000 R09: 0000000000000000 [ 94.238366][ T5000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.246356][ T5000] R13: 00007f1fbb426038 R14: 00007f1fbb425fa0 R15: 00007ffc08341408 [ 94.254356][ T5000] [ 94.277361][ T5000] memory: usage 8kB, limit 8kB, failcnt 59 [ 94.286029][ T5000] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 94.294167][ T5000] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 94.301281][ T5000] Memory cgroup stats for /syz4/test: [ 94.301473][ T5000] anon 0 [ 94.301473][ T5000] file 0 [ 94.301473][ T5000] kernel 8192 [ 94.301473][ T5000] kernel_stack 0 [ 94.301473][ T5000] pagetables 4096 [ 94.301473][ T5000] sec_pagetables 0 [ 94.301473][ T5000] percpu 0 [ 94.301473][ T5000] sock 0 [ 94.301473][ T5000] vmalloc 0 [ 94.301473][ T5000] shmem 0 [ 94.301473][ T5000] zswap 0 [ 94.301473][ T5000] zswapped 0 [ 94.301473][ T5000] file_mapped 0 [ 94.301473][ T5000] file_dirty 0 [ 94.301473][ T5000] file_writeback 0 [ 94.301473][ T5000] swapcached 0 [ 94.301473][ T5000] anon_thp 0 [ 94.301473][ T5000] file_thp 0 [ 94.301473][ T5000] shmem_thp 0 [ 94.301473][ T5000] inactive_anon 0 [ 94.301473][ T5000] active_anon 0 [ 94.301473][ T5000] inactive_file 0 [ 94.301473][ T5000] active_file 0 [ 94.301473][ T5000] unevictable 0 [ 94.301473][ T5000] slab_reclaimable 1544 [ 94.301473][ T5000] slab_unreclaimable 0 [ 94.301473][ T5000] slab 1544 [ 94.301473][ T5000] workingset_refault_anon 0 [ 94.510112][ T5000] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.243,pid=4999,uid=0 [ 94.533144][ T5000] Memory cgroup out of memory: Killed process 4999 (syz.4.243) total-vm:102244kB, anon-rss:1396kB, file-rss:21960kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 94.677810][ T4991] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.685312][ T4991] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.350544][ T4991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.418071][ T4991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.646527][ T5034] syz.4.256 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 95.656901][ T5034] CPU: 0 PID: 5034 Comm: syz.4.256 Not tainted syzkaller #0 [ 95.664302][ T5034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.674358][ T5034] Call Trace: [ 95.677629][ T5034] [ 95.680548][ T5034] dump_stack_lvl+0x188/0x24e [ 95.685238][ T5034] ? ___ratelimit+0x14e/0x610 [ 95.689919][ T5034] ? show_regs_print_info+0x12/0x12 [ 95.695143][ T5034] ? load_image+0x410/0x410 [ 95.699629][ T5034] ? ___ratelimit+0x474/0x610 [ 95.704318][ T5034] ? radix_tree_cpu_dead+0x160/0x160 [ 95.709591][ T5034] dump_header+0xd8/0x820 [ 95.713927][ T5034] oom_kill_process+0x361/0x550 [ 95.718791][ T5034] out_of_memory+0xe25/0x1220 [ 95.723466][ T5034] ? print_unlock_imbalance_bug+0x160/0x160 [ 95.729359][ T5034] ? mutex_lock_nested+0x10/0x10 [ 95.734299][ T5034] ? unregister_oom_notifier+0x20/0x20 [ 95.739784][ T5034] mem_cgroup_out_of_memory+0x2c0/0x390 [ 95.745332][ T5034] ? mem_cgroup_oom_trylock+0x210/0x210 [ 95.750881][ T5034] ? do_raw_spin_unlock+0x11d/0x230 [ 95.756077][ T5034] try_charge_memcg+0xc9d/0x17c0 [ 95.761026][ T5034] ? percpu_ref_put+0x180/0x180 [ 95.765872][ T5034] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 95.771594][ T5034] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 95.777600][ T5034] ? percpu_ref_tryget+0x15/0x180 [ 95.782629][ T5034] ? percpu_ref_tryget+0x15/0x180 [ 95.787743][ T5034] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 95.793464][ T5034] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 95.799181][ T5034] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 95.804985][ T5034] obj_cgroup_charge+0x36a/0x620 [ 95.809921][ T5034] ? obj_cgroup_charge+0xe9/0x620 [ 95.814943][ T5034] ? mod_objcg_mlstate+0x320/0x320 [ 95.820087][ T5034] ? percpu_ref_tryget+0x15/0x180 [ 95.825205][ T5034] ? get_obj_cgroup_from_current+0xd0/0x280 [ 95.831101][ T5034] slab_pre_alloc_hook+0x2e2/0x300 [ 95.836212][ T5034] kmem_cache_alloc+0x56/0x2f0 [ 95.840974][ T5034] ? sk_prot_alloc+0x57/0x210 [ 95.845824][ T5034] sk_prot_alloc+0x57/0x210 [ 95.850319][ T5034] ? sk_alloc+0x20/0x330 [ 95.854557][ T5034] sk_alloc+0x36/0x330 [ 95.858620][ T5034] smc_sock_alloc+0x4b/0x570 [ 95.863208][ T5034] smc_create+0xc8/0x290 [ 95.867451][ T5034] __sock_create+0x49a/0x940 [ 95.872041][ T5034] __sys_socket+0xc4/0x190 [ 95.876471][ T5034] __x64_sys_socket+0x76/0x80 [ 95.881145][ T5034] do_syscall_64+0x4c/0xa0 [ 95.885560][ T5034] ? clear_bhb_loop+0x60/0xb0 [ 95.890233][ T5034] ? clear_bhb_loop+0x60/0xb0 [ 95.894924][ T5034] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.900814][ T5034] RIP: 0033:0x7f1fbb19e019 [ 95.905228][ T5034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.924917][ T5034] RSP: 002b:00007f1fbc119028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 95.933326][ T5034] RAX: ffffffffffffffda RBX: 00007f1fbb425fa0 RCX: 00007f1fbb19e019 [ 95.941301][ T5034] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 95.949294][ T5034] RBP: 00007f1fbb23500c R08: 0000000000000000 R09: 0000000000000000 [ 95.957271][ T5034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.965233][ T5034] R13: 00007f1fbb426038 R14: 00007f1fbb425fa0 R15: 00007ffc08341408 [ 95.973213][ T5034] [ 95.978832][ T5034] memory: usage 8kB, limit 8kB, failcnt 97 [ 95.995467][ T5034] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 96.015163][ T5034] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 96.031857][ T5034] Memory cgroup stats for /syz4/test: [ 96.031991][ T5034] anon 0 [ 96.031991][ T5034] file 0 [ 96.031991][ T5034] kernel 8192 [ 96.031991][ T5034] kernel_stack 0 [ 96.031991][ T5034] pagetables 4096 [ 96.031991][ T5034] sec_pagetables 0 [ 96.031991][ T5034] percpu 0 [ 96.031991][ T5034] sock 0 [ 96.031991][ T5034] vmalloc 0 [ 96.031991][ T5034] shmem 0 [ 96.031991][ T5034] zswap 0 [ 96.031991][ T5034] zswapped 0 [ 96.031991][ T5034] file_mapped 0 [ 96.031991][ T5034] file_dirty 0 [ 96.031991][ T5034] file_writeback 0 [ 96.031991][ T5034] swapcached 0 [ 96.031991][ T5034] anon_thp 0 [ 96.031991][ T5034] file_thp 0 [ 96.031991][ T5034] shmem_thp 0 [ 96.031991][ T5034] inactive_anon 0 [ 96.031991][ T5034] active_anon 0 [ 96.031991][ T5034] inactive_file 0 [ 96.031991][ T5034] active_file 0 [ 96.031991][ T5034] unevictable 0 [ 96.031991][ T5034] slab_reclaimable 1544 [ 96.031991][ T5034] slab_unreclaimable 0 [ 96.031991][ T5034] slab 1544 [ 96.031991][ T5034] workingset_refault_anon 0 [ 96.129833][ T5034] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.256,pid=5033,uid=0 [ 96.151894][ T5034] Memory cgroup out of memory: Killed process 5033 (syz.4.256) total-vm:102244kB, anon-rss:1396kB, file-rss:21960kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 96.332796][ T4991] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.342274][ T4991] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.351163][ T4991] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.360067][ T4991] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.537751][ T5039] device syzkaller0 entered promiscuous mode [ 96.564532][ T4991] syz.1.240 (4991) used greatest stack depth: 20528 bytes left [ 96.611888][ T5041] tipc: Started in network mode [ 96.617068][ T5041] tipc: Node identity 86f802b1be26, cluster identity 4711 [ 96.678601][ T5041] tipc: Enabled bearer , priority 0 [ 96.816134][ T5039] tipc: Resetting bearer [ 96.900613][ T5038] tipc: Resetting bearer [ 96.929073][ T5038] tipc: Disabling bearer [ 97.273862][ T4667] tipc: Subscription rejected, illegal request [ 97.771285][ T5088] syz.4.278 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 97.813990][ T5088] CPU: 1 PID: 5088 Comm: syz.4.278 Not tainted syzkaller #0 [ 97.821326][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.831402][ T5088] Call Trace: [ 97.834700][ T5088] [ 97.837644][ T5088] dump_stack_lvl+0x188/0x24e [ 97.842347][ T5088] ? ___ratelimit+0x14e/0x610 [ 97.847045][ T5088] ? show_regs_print_info+0x12/0x12 [ 97.852245][ T5088] ? load_image+0x410/0x410 [ 97.856744][ T5088] ? ___ratelimit+0x474/0x610 [ 97.861434][ T5088] ? radix_tree_cpu_dead+0x160/0x160 [ 97.866748][ T5088] dump_header+0xd8/0x820 [ 97.871089][ T5088] oom_kill_process+0x361/0x550 [ 97.875948][ T5088] out_of_memory+0xe25/0x1220 [ 97.880706][ T5088] ? print_unlock_imbalance_bug+0x160/0x160 [ 97.886597][ T5088] ? mutex_lock_nested+0x10/0x10 [ 97.891539][ T5088] ? unregister_oom_notifier+0x20/0x20 [ 97.896995][ T5088] mem_cgroup_out_of_memory+0x2c0/0x390 [ 97.902542][ T5088] ? mem_cgroup_oom_trylock+0x210/0x210 [ 97.908092][ T5088] ? do_raw_spin_unlock+0x11d/0x230 [ 97.913304][ T5088] try_charge_memcg+0xc9d/0x17c0 [ 97.918282][ T5088] ? percpu_ref_put+0x180/0x180 [ 97.923130][ T5088] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 97.928855][ T5088] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 97.934838][ T5088] ? percpu_ref_tryget+0x15/0x180 [ 97.939860][ T5088] ? percpu_ref_tryget+0x15/0x180 [ 97.944883][ T5088] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 97.950599][ T5088] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 97.956318][ T5088] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 97.962127][ T5088] obj_cgroup_charge+0x36a/0x620 [ 97.967068][ T5088] ? obj_cgroup_charge+0xe9/0x620 [ 97.972090][ T5088] ? mod_objcg_mlstate+0x320/0x320 [ 97.977197][ T5088] ? percpu_ref_tryget+0x15/0x180 [ 97.982219][ T5088] ? get_obj_cgroup_from_current+0xd0/0x280 [ 97.988112][ T5088] slab_pre_alloc_hook+0x2e2/0x300 [ 97.993227][ T5088] kmem_cache_alloc+0x56/0x2f0 [ 97.998068][ T5088] ? sk_prot_alloc+0x57/0x210 [ 98.002766][ T5088] sk_prot_alloc+0x57/0x210 [ 98.007265][ T5088] ? sk_alloc+0x20/0x330 [ 98.011502][ T5088] sk_alloc+0x36/0x330 [ 98.015573][ T5088] smc_sock_alloc+0x4b/0x570 [ 98.020159][ T5088] smc_create+0xc8/0x290 [ 98.024399][ T5088] __sock_create+0x49a/0x940 [ 98.029001][ T5088] __sys_socket+0xc4/0x190 [ 98.033415][ T5088] __x64_sys_socket+0x76/0x80 [ 98.038088][ T5088] do_syscall_64+0x4c/0xa0 [ 98.042504][ T5088] ? clear_bhb_loop+0x60/0xb0 [ 98.047175][ T5088] ? clear_bhb_loop+0x60/0xb0 [ 98.051851][ T5088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.057739][ T5088] RIP: 0033:0x7f1fbb19e019 [ 98.062147][ T5088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.081750][ T5088] RSP: 002b:00007f1fbc119028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 98.090182][ T5088] RAX: ffffffffffffffda RBX: 00007f1fbb425fa0 RCX: 00007f1fbb19e019 [ 98.098167][ T5088] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 98.106144][ T5088] RBP: 00007f1fbb23500c R08: 0000000000000000 R09: 0000000000000000 [ 98.114114][ T5088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.122102][ T5088] R13: 00007f1fbb426038 R14: 00007f1fbb425fa0 R15: 00007ffc08341408 [ 98.130085][ T5088] [ 98.254168][ T5088] memory: usage 8kB, limit 8kB, failcnt 135 [ 98.260124][ T5088] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 98.268441][ T5088] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 98.275940][ T5088] Memory cgroup stats for /syz4/test: [ 98.276127][ T5088] anon 0 [ 98.276127][ T5088] file 0 [ 98.276127][ T5088] kernel 8192 [ 98.276127][ T5088] kernel_stack 0 [ 98.276127][ T5088] pagetables 4096 [ 98.276127][ T5088] sec_pagetables 0 [ 98.276127][ T5088] percpu 0 [ 98.276127][ T5088] sock 0 [ 98.276127][ T5088] vmalloc 0 [ 98.276127][ T5088] shmem 0 [ 98.276127][ T5088] zswap 0 [ 98.276127][ T5088] zswapped 0 [ 98.276127][ T5088] file_mapped 0 [ 98.276127][ T5088] file_dirty 0 [ 98.276127][ T5088] file_writeback 0 [ 98.276127][ T5088] swapcached 0 [ 98.276127][ T5088] anon_thp 0 [ 98.276127][ T5088] file_thp 0 [ 98.276127][ T5088] shmem_thp 0 [ 98.276127][ T5088] inactive_anon 0 [ 98.276127][ T5088] active_anon 0 [ 98.276127][ T5088] inactive_file 0 [ 98.276127][ T5088] active_file 0 [ 98.276127][ T5088] unevictable 0 [ 98.276127][ T5088] slab_reclaimable 1544 [ 98.276127][ T5088] slab_unreclaimable 0 [ 98.276127][ T5088] slab 1544 [ 98.276127][ T5088] workingset_refault_anon 0 [ 98.372505][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.382211][ T5088] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.278,pid=5087,uid=0 [ 98.443386][ T5088] Memory cgroup out of memory: Killed process 5087 (syz.4.278) total-vm:102244kB, anon-rss:1396kB, file-rss:21960kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 98.473494][ T5096] bridge0: port 3(batadv2) entered blocking state [ 98.514525][ T5096] bridge0: port 3(batadv2) entered disabled state [ 98.546348][ T5096] device batadv2 entered promiscuous mode [ 98.764807][ T5115] device syzkaller0 entered promiscuous mode [ 98.795586][ T5115] tipc: Started in network mode [ 98.842129][ T5115] tipc: Node identity f6e16f69d60f, cluster identity 4711 [ 98.898984][ T5115] tipc: Enabled bearer , priority 0 [ 98.922511][ T5111] tipc: Resetting bearer [ 98.967575][ T5111] tipc: Disabling bearer [ 98.989821][ T9] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 98.999532][ T9] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 99.014208][ T5123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.293'. [ 99.048214][ T5123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.293'. [ 99.662532][ T5151] netlink: 48 bytes leftover after parsing attributes in process `syz.2.306'. [ 99.838837][ T5160] program syz.0.311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.912988][ T5165] loop2: detected capacity change from 0 to 256 [ 100.033207][ T5165] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.181336][ T5177] loop1: detected capacity change from 0 to 512 [ 100.202643][ T5177] EXT4-fs: Ignoring removed oldalloc option [ 100.375409][ T5177] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.407417][ T5185] netlink: 36 bytes leftover after parsing attributes in process `syz.2.319'. [ 100.858915][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 101.113357][ T5211] netlink: 9 bytes leftover after parsing attributes in process `syz.0.329'. [ 101.142319][ T5211] device gretap0 entered promiscuous mode [ 101.205986][ T5215] netlink: 5 bytes leftover after parsing attributes in process `syz.0.329'. [ 101.246000][ T5215] 0ªî{X¹¦: renamed from gretap0 [ 101.280903][ T5215] device 30ªî{X¹¦ left promiscuous mode [ 101.312416][ T5215] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 101.512731][ T5228] SET target dimension over the limit! [ 101.545060][ T5228] netlink: 'syz.1.331': attribute type 10 has an invalid length. [ 101.581789][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.642769][ T5228] team0: Port device bond0 added [ 101.707368][ T1046] device offline error, dev sda, sector 737590 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 101.718911][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 92198) [ 101.732089][ T1046] Buffer I/O error on device sda1, logical block 92160 [ 101.739602][ T1046] device offline error, dev sda, sector 745758 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 101.750308][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 93219) [ 101.762323][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 93220) [ 101.763803][ T4453] Buffer I/O error on device sda1, logical block 93181 [ 101.774189][ T1046] device offline error, dev sda, sector 749622 op 0x1:(WRITE) flags 0x0 phys_seg 12 prio class 2 [ 101.792033][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 93702) [ 101.804502][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 93711) [ 101.816481][ T1046] Buffer I/O error on device sda1, logical block 93673 [ 101.823431][ T1046] Buffer I/O error on device sda1, logical block 93674 [ 101.830318][ T1046] Buffer I/O error on device sda1, logical block 93675 [ 101.837389][ T1046] Buffer I/O error on device sda1, logical block 93676 [ 101.844346][ T1046] Buffer I/O error on device sda1, logical block 93677 [ 101.851439][ T1046] device offline error, dev sda, sector 770358 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 101.861974][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 96294) [ 101.873506][ T1046] Buffer I/O error on device sda1, logical block 96256 [ 101.880422][ T1046] device offline error, dev sda, sector 778486 op 0x1:(WRITE) flags 0x0 phys_seg 6 prio class 2 [ 101.885760][ T4453] Buffer I/O error on device sda1, logical block 93664 [ 101.891019][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 97310) [ 101.909382][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 97312) [ 101.912122][ T4333] device offline error, dev sda, sector 811294 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 101.921081][ T1046] Buffer I/O error on device sda1, logical block 97274 [ 101.921199][ T1046] device offline error, dev sda, sector 782614 op 0x1:(WRITE) flags 0x0 phys_seg 4 prio class 2 [ 101.921222][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 97826) [ 101.961143][ T1046] device offline error, dev sda, sector 803126 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 101.971658][ T1046] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 100390) [ 101.980623][ T4333] device offline error, dev sda, sector 819510 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 101.983413][ T1046] device offline error, dev sda, sector 717110 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 102.032251][ T3601] Buffer I/O error on dev sda1, logical block 131244, lost sync page write [ 102.045920][ T3601] Aborting journal on device sda1-8. [ 102.053178][ T1046] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 102.062328][ T3601] JBD2: I/O error when updating journal superblock for sda1-8. [ 102.130593][ T5219] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.331: Detected aborted journal [ 102.148098][ T4259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 102.154331][ T1046] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 102.169812][ T5219] EXT4-fs (sda1): I/O error while writing superblock [ 102.184861][ T5219] EXT4-fs (sda1): Remounting filesystem read-only [ 102.227130][ T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 102.231878][ T5219] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.331: Detected aborted journal [ 102.237308][ T4259] EXT4-fs (sda1): I/O error while writing superblock [ 102.256673][ T5219] EXT4-fs (sda1): previous I/O error to superblock detected [ 102.297180][ T1046] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 102.305658][ T5219] EXT4-fs (sda1): I/O error while writing superblock [ 102.312937][ T5219] EXT4-fs (sda1): Remounting filesystem read-only [ 102.320228][ T4259] EXT4-fs (sda1): Remounting filesystem read-only [ 102.352228][ T4259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 102.405091][ T4259] EXT4-fs (sda1): Remounting filesystem read-only [ 102.408724][ T5233] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 102.424636][ T5232] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.334: Detected aborted journal [ 102.444454][ T4259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 102.476315][ T4259] EXT4-fs (sda1): Remounting filesystem read-only [ 102.491589][ T5232] EXT4-fs (sda1): Remounting filesystem read-only [ 102.498195][ T5232] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.334: Detected aborted journal [ 102.507105][ T4259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 102.534028][ T5255] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.338: Detected aborted journal [ 102.534477][ T4259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 103.396609][ T5293] bridge0: port 3(batadv2) entered blocking state [ 103.406044][ T5294] loop0: detected capacity change from 0 to 128 [ 103.441749][ T5293] bridge0: port 3(batadv2) entered disabled state [ 103.464862][ T5293] device batadv2 entered promiscuous mode [ 103.767678][ T5309] loop3: detected capacity change from 0 to 128 [ 103.845520][ T5309] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.917041][ T57] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 103.926378][ T57] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 104.148973][ T5322] loop0: detected capacity change from 0 to 512 [ 104.973415][ T5346] loop4: detected capacity change from 0 to 2048 [ 105.058858][ T5346] loop4: p1 < > p4 [ 105.058858][ T5346] p4: [ 105.102838][ T5355] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 105.109152][ T5346] loop4: p4 size 722688 extends beyond EOD, truncated [ 105.159302][ T3639] loop4: p1 < > p4 [ 105.159302][ T3639] p4: [ 105.188478][ T3639] loop4: p4 size 722688 extends beyond EOD, truncated [ 105.353957][ T5361] device syzkaller0 entered promiscuous mode [ 105.522421][ T4266] udevd[4266]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 105.561098][ T4262] udevd[4262]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 105.615194][ T4262] udevd[4262]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 105.635145][ T4264] udevd[4264]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 105.661967][ T5374] ip_tables: iptables: counters copy to user failed while replacing table [ 105.881428][ T5384] loop1: detected capacity change from 0 to 1024 [ 105.907590][ T5384] ======================================================= [ 105.907590][ T5384] WARNING: The mand mount option has been deprecated and [ 105.907590][ T5384] and is ignored by this kernel. Remove the mand [ 105.907590][ T5384] option from the mount to silence this warning. [ 105.907590][ T5384] ======================================================= [ 105.942527][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.033444][ T5384] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 106.050752][ T5384] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.269152][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 106.958604][ T5412] loop3: detected capacity change from 0 to 512 [ 107.060990][ T5412] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.397: iget: bad extra_isize 90 (inode size 256) [ 107.122583][ T5412] EXT4-fs (loop3): Remounting filesystem read-only [ 107.131954][ T5412] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.397: error while reading EA inode 11 err=-117 [ 107.142546][ T5419] EXT4-fs error: 154 callbacks suppressed [ 107.142559][ T5419] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.400: Detected aborted journal [ 107.165333][ T5419] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.400: Detected aborted journal [ 107.176896][ T5412] EXT4-fs (loop3): Remounting filesystem read-only [ 107.178434][ T5419] EXT4-fs: 147 callbacks suppressed [ 107.178446][ T5419] EXT4-fs (sda1): Remounting filesystem read-only [ 107.202185][ T5412] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 107.241317][ T5412] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.397: iget: bad extra_isize 90 (inode size 256) [ 107.278069][ T5412] EXT4-fs (loop3): Remounting filesystem read-only [ 107.285248][ T5412] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.397: error while reading EA inode 11 err=-117 [ 107.298051][ T5412] EXT4-fs (loop3): Remounting filesystem read-only [ 107.309976][ T5412] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #18: comm syz.3.397: iget: bad extra_isize 90 (inode size 256) [ 107.326075][ T5412] EXT4-fs (loop3): Remounting filesystem read-only [ 107.333543][ T5412] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.397: error while reading EA inode 18 err=-117 [ 107.347450][ T5412] EXT4-fs (loop3): Remounting filesystem read-only [ 107.364852][ T5412] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #18: comm syz.3.397: iget: bad extra_isize 90 (inode size 256) [ 107.389348][ T5412] EXT4-fs (loop3): Remounting filesystem read-only [ 107.399096][ T5412] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.397: error while reading EA inode 18 err=-117 [ 107.422066][ T5412] EXT4-fs (loop3): Remounting filesystem read-only [ 107.433801][ T5412] EXT4-fs (loop3): 1 orphan inode deleted [ 107.440647][ T5412] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 107.470757][ T5411] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.397: Detected aborted journal [ 107.492334][ T5411] EXT4-fs (sda1): Remounting filesystem read-only [ 107.539798][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 107.600807][ T5423] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.401: Detected aborted journal [ 107.613623][ T5423] EXT4-fs (sda1): Remounting filesystem read-only [ 107.623974][ T5423] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.401: Detected aborted journal [ 107.635308][ T5423] EXT4-fs (sda1): Remounting filesystem read-only [ 107.915547][ T4259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 107.927167][ T4259] EXT4-fs (sda1): Remounting filesystem read-only [ 108.151672][ T5420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.400'. [ 108.211290][ T5426] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.402: Detected aborted journal [ 108.255834][ T5426] EXT4-fs (sda1): Remounting filesystem read-only [ 108.268087][ T5426] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.402: Detected aborted journal [ 108.279597][ T5426] EXT4-fs (sda1): Remounting filesystem read-only [ 108.345143][ T5428] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.403: Detected aborted journal [ 108.407147][ T5429] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.404: Detected aborted journal [ 108.452239][ T5428] EXT4-fs (sda1): Remounting filesystem read-only [ 108.455493][ T5430] EXT4-fs (sda1): Remounting filesystem read-only [ 108.482535][ T5432] EXT4-fs (sda1): Remounting filesystem read-only [ 108.622544][ T5439] loop3: detected capacity change from 0 to 512 [ 108.629992][ T5439] ext4: Unknown parameter 'smackfshat' [ 110.094183][ T5442] loop2: detected capacity change from 0 to 1024 [ 110.461196][ T5439] loop3: detected capacity change from 0 to 512 [ 110.619156][ T5442] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 110.990743][ T5442] [ 110.993122][ T5442] ====================================================== [ 111.000137][ T5442] WARNING: possible circular locking dependency detected [ 111.007165][ T5442] syzkaller #0 Not tainted [ 111.011581][ T5442] ------------------------------------------------------ [ 111.018597][ T5442] syz.2.408/5442 is trying to acquire lock: [ 111.024498][ T5442] ffff88805487a8e8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x24/0xe0 [ 111.034263][ T5442] [ 111.034263][ T5442] but task is already holding lock: [ 111.041625][ T5442] ffff88802f0bec18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2e70 [ 111.051739][ T5442] [ 111.051739][ T5442] which lock already depends on the new lock. [ 111.051739][ T5442] [ 111.062143][ T5442] [ 111.062143][ T5442] the existing dependency chain (in reverse order) is: [ 111.071157][ T5442] [ 111.071157][ T5442] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 111.079578][ T5442] percpu_down_read+0x44/0x1a0 [ 111.084880][ T5442] ext4_writepages+0x213/0x2e70 [ 111.091054][ T5442] do_writepages+0x3c6/0x640 [ 111.096198][ T5442] __writeback_single_inode+0x153/0x1170 [ 111.102377][ T5442] writeback_single_inode+0x3d2/0x8e0 [ 111.108383][ T5442] write_inode_now+0x17f/0x210 [ 111.113687][ T5442] iput+0x643/0x9c0 [ 111.118145][ T5442] ext4_xattr_block_set+0x2487/0x2fe0 [ 111.124238][ T5442] ext4_expand_extra_isize_ea+0xfca/0x1d40 [ 111.130590][ T5442] __ext4_expand_extra_isize+0x301/0x3e0 [ 111.136770][ T5442] __ext4_mark_inode_dirty+0x478/0x760 [ 111.142771][ T5442] ext4_evict_inode+0xa67/0x10e0 [ 111.148257][ T5442] evict+0x4b6/0x8b0 [ 111.152687][ T5442] ext4_orphan_cleanup+0xc32/0x1470 [ 111.158429][ T5442] ext4_fill_super+0x6f0c/0x78f0 [ 111.163911][ T5442] get_tree_bdev+0x3e6/0x610 [ 111.169038][ T5442] vfs_get_tree+0x88/0x270 [ 111.173991][ T5442] do_new_mount+0x247/0xa40 [ 111.179037][ T5442] __se_sys_mount+0x2e3/0x3d0 [ 111.184252][ T5442] do_syscall_64+0x4c/0xa0 [ 111.189215][ T5442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.196000][ T5442] [ 111.196000][ T5442] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 111.203580][ T5442] __lock_acquire+0x2d18/0x7c40 [ 111.208984][ T5442] lock_acquire+0x1bb/0x4a0 [ 111.214025][ T5442] down_write+0x36/0x60 [ 111.218707][ T5442] ext4_destroy_inline_data+0x24/0xe0 [ 111.224624][ T5442] ext4_writepages+0x599/0x2e70 [ 111.230004][ T5442] do_writepages+0x3c6/0x640 [ 111.235124][ T5442] filemap_fdatawrite_wbc+0x11e/0x180 [ 111.241044][ T5442] file_write_and_wait_range+0x159/0x230 [ 111.247219][ T5442] ext4_sync_file+0x22a/0xc30 [ 111.252439][ T5442] ext4_buffered_write_iter+0x2de/0x380 [ 111.258528][ T5442] ext4_file_write_iter+0x1e3/0x17d0 [ 111.264349][ T5442] vfs_write+0x482/0x9a0 [ 111.269135][ T5442] __x64_sys_pwrite64+0x194/0x220 [ 111.274705][ T5442] do_syscall_64+0x4c/0xa0 [ 111.279665][ T5442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.286101][ T5442] [ 111.286101][ T5442] other info that might help us debug this: [ 111.286101][ T5442] [ 111.296336][ T5442] Possible unsafe locking scenario: [ 111.296336][ T5442] [ 111.303795][ T5442] CPU0 CPU1 [ 111.309180][ T5442] ---- ---- [ 111.314558][ T5442] lock(&sbi->s_writepages_rwsem); [ 111.319770][ T5442] lock(&ei->xattr_sem); [ 111.326634][ T5442] lock(&sbi->s_writepages_rwsem); [ 111.334367][ T5442] lock(&ei->xattr_sem); [ 111.338710][ T5442] [ 111.338710][ T5442] *** DEADLOCK *** [ 111.338710][ T5442] [ 111.346859][ T5442] 2 locks held by syz.2.408/5442: [ 111.351898][ T5442] #0: ffff88802f0ba460 (sb_writers#4){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 111.360811][ T5442] #1: ffff88802f0bec18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2e70 [ 111.371363][ T5442] [ 111.371363][ T5442] stack backtrace: [ 111.377257][ T5442] CPU: 1 PID: 5442 Comm: syz.2.408 Not tainted syzkaller #0 [ 111.384576][ T5442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.394622][ T5442] Call Trace: [ 111.397888][ T5442] [ 111.400807][ T5442] dump_stack_lvl+0x188/0x24e [ 111.405483][ T5442] ? load_image+0x410/0x410 [ 111.409971][ T5442] ? show_regs_print_info+0x12/0x12 [ 111.415163][ T5442] ? print_circular_bug+0x12b/0x1a0 [ 111.420347][ T5442] check_noncircular+0x296/0x330 [ 111.425301][ T5442] ? add_chain_block+0x9b0/0x9b0 [ 111.430247][ T5442] ? lockdep_lock+0xf1/0x1f0 [ 111.434825][ T5442] ? _find_first_zero_bit+0xd2/0x100 [ 111.440099][ T5442] __lock_acquire+0x2d18/0x7c40 [ 111.444961][ T5442] ? deactivate_slab+0x3d0/0x470 [ 111.449982][ T5442] ? ext4_da_write_begin+0x584/0x920 [ 111.455263][ T5442] ? vfs_write+0x482/0x9a0 [ 111.459691][ T5442] ? verify_lock_unused+0x140/0x140 [ 111.464895][ T5442] ? verify_lock_unused+0x140/0x140 [ 111.470105][ T5442] lock_acquire+0x1bb/0x4a0 [ 111.474599][ T5442] ? ext4_destroy_inline_data+0x24/0xe0 [ 111.480166][ T5442] ? read_lock_is_recursive+0x10/0x10 [ 111.485555][ T5442] ? ext4_journal_check_start+0x17d/0x240 [ 111.491267][ T5442] down_write+0x36/0x60 [ 111.495410][ T5442] ? ext4_destroy_inline_data+0x24/0xe0 [ 111.501044][ T5442] ext4_destroy_inline_data+0x24/0xe0 [ 111.506417][ T5442] ext4_writepages+0x599/0x2e70 [ 111.511278][ T5442] ? __lock_acquire+0x1465/0x7c40 [ 111.516306][ T5442] ? verify_lock_unused+0x140/0x140 [ 111.521510][ T5442] ? mark_lock+0x94/0x320 [ 111.525857][ T5442] ? __lock_acquire+0x1465/0x7c40 [ 111.530892][ T5442] ? ext4_read_folio+0x370/0x370 [ 111.535862][ T5442] ? ext4_mark_iloc_dirty+0x4eb/0x1cb0 [ 111.541328][ T5442] ? __lock_acquire+0x7c40/0x7c40 [ 111.546384][ T5442] ? do_raw_spin_lock+0x128/0x2f0 [ 111.551399][ T5442] ? do_raw_spin_unlock+0x11d/0x230 [ 111.556692][ T5442] ? ext4_read_folio+0x370/0x370 [ 111.561629][ T5442] do_writepages+0x3c6/0x640 [ 111.566251][ T5442] ? filemap_fdatawrite_wbc+0x113/0x180 [ 111.571807][ T5442] ? __writepage+0x130/0x130 [ 111.576427][ T5442] ? __lock_acquire+0x7c40/0x7c40 [ 111.581450][ T5442] ? __rwlock_init+0x140/0x140 [ 111.586214][ T5442] ? do_raw_spin_unlock+0x11d/0x230 [ 111.591403][ T5442] filemap_fdatawrite_wbc+0x11e/0x180 [ 111.596778][ T5442] file_write_and_wait_range+0x159/0x230 [ 111.602445][ T5442] ? __filemap_set_wb_err+0x230/0x230 [ 111.607844][ T5442] ? __lock_acquire+0x7c40/0x7c40 [ 111.612895][ T5442] ext4_sync_file+0x22a/0xc30 [ 111.617568][ T5442] ext4_buffered_write_iter+0x2de/0x380 [ 111.623126][ T5442] ext4_file_write_iter+0x1e3/0x17d0 [ 111.628425][ T5442] ? rcu_read_lock_any_held+0xb0/0x130 [ 111.633877][ T5442] ? ext4_file_read_iter+0x650/0x650 [ 111.639154][ T5442] ? end_current_label_crit_section+0x14b/0x170 [ 111.645392][ T5442] ? common_file_perm+0x171/0x1c0 [ 111.650413][ T5442] vfs_write+0x482/0x9a0 [ 111.654662][ T5442] ? file_end_write+0x250/0x250 [ 111.659518][ T5442] ? __fget_files+0x3fc/0x460 [ 111.664204][ T5442] ? __fdget+0x17c/0x200 [ 111.668443][ T5442] ? __x64_sys_pwrite64+0xf3/0x220 [ 111.673547][ T5442] __x64_sys_pwrite64+0x194/0x220 [ 111.678592][ T5442] ? ksys_pwrite64+0x1b0/0x1b0 [ 111.683361][ T5442] ? lockdep_hardirqs_on+0x94/0x140 [ 111.688590][ T5442] do_syscall_64+0x4c/0xa0 [ 111.693005][ T5442] ? clear_bhb_loop+0x60/0xb0 [ 111.697675][ T5442] ? clear_bhb_loop+0x60/0xb0 [ 111.702347][ T5442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.708246][ T5442] RIP: 0033:0x7f255f59e019 [ 111.712657][ T5442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.732268][ T5442] RSP: 002b:00007f255d7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 111.740726][ T5442] RAX: ffffffffffffffda RBX: 00007f255f825fa0 RCX: 00007f255f59e019 [ 111.748739][ T5442] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 111.756740][ T5442] RBP: 00007f255f63500c R08: 0000000000000000 R09: 0000000000000000 [ 111.764713][ T5442] R10: 000000000084fed0 R11: 0000000000000246 R12: 0000000000000000 [ 111.772679][ T5442] R13: 00007f255f826038 R14: 00007f255f825fa0 R15: 00007fff008fe0d8 [ 111.780660][ T5442] [ 111.783717][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.791230][ T5442] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 111.810541][ T5442] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8511 with max blocks 1 with error 28 [ 111.830442][ T5442] EXT4-fs (loop2): This should not happen!! Data will be lost [ 111.830442][ T5442] [ 111.840394][ T5442] EXT4-fs (loop2): Total free blocks count 0 [ 111.848334][ T5442] EXT4-fs (loop2): Free/Dirty block details [ 111.858654][ T5442] EXT4-fs (loop2): free_blocks=20480 [ 111.866596][ T5442] EXT4-fs (loop2): dirty_blocks=32 [ 111.871769][ T5442] EXT4-fs (loop2): Block reservation details [ 111.877832][ T5442] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 111.928270][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 114.507360][ T3639] EXT4-fs error: 33 callbacks suppressed [ 114.507371][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 114.525233][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 114.537217][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 114.548832][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 114.560348][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 114.572049][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0 [ 117.589275][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 117.600927][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 117.612906][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 117.624591][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 120.712744][ T3639] EXT4-fs error: 2 callbacks suppressed [ 120.712760][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 120.730114][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 120.741980][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 120.753598][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 120.765234][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 120.776973][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0