last executing test programs: 5.123579082s ago: executing program 4 (id=299): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 4.906750851s ago: executing program 1 (id=303): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x28, 0x7f, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xd6}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) 4.854633743s ago: executing program 4 (id=305): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x300000f, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\b\xb0\x7f0\f\x87\xcaaPr\x9d\xd1\xe5\xc80S\x1dd\x884>\x02\xc7\x94\xa1\x14\xd3BG\xe5a\xac\xfe-!\xdfH\"\xd3\xc3\xd59\x88\xca8\x8d\x0f$\xcd\xe6\xfd\xffD\x1e\xf2\x85\x98\xb5\xaf[s\xdf!\xbdy\x9e\xe2\x17h{\x96\xd8\xb7G&t\xe8\x1f\xf8\x91V\xdc\xees\x9bf\xf9z\xa8z\xb7[\xa3\xb0\xc9\xa7L\xcd\xdf\xef\xa4\x97|\xc6\xedRE\x96\xb6\xf3\xa9b\xc9(\x8d\x88\xcc\xfc\xb7oyx\td\xfel0\x1e\x8e\x03\aK\x96\xe7\x14\x83e\xb2\x19\xd1x\xfb\xf1\xb2<\xd3\x1d\x8dx\xbe\xb1.\xfc9\x94\x8f\xbb\x84Qu:\x9f\rp\x1f\x86hT\x0f\nC\f,\xffe\x00\xdc\xf7\xe2g3>\x94O\xfd\x81\xd8\xe1*\x93n\'\x99\xe9\\\x8f\xa7Zj)\xdd\xb7\xc0\xa8+\xd3\xba\x17L\x93\xaciNG5*\xc9\x11\xde\v', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0xc0085508, &(0x7f0000000100)=0x2000001b) write$cgroup_type(r0, &(0x7f0000000200), 0x5abbf7f8) 3.786683607s ago: executing program 1 (id=310): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x5db, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100002}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.631725722s ago: executing program 1 (id=313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01072abd7000fcdbdf253400000008"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 3.55473393s ago: executing program 1 (id=314): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) pselect6(0x40, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x401}, &(0x7f0000000000)={0x23, 0xfffffffffffffff7, 0x9, 0x0, 0x8001}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.654634735s ago: executing program 1 (id=326): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$unix(r4, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x1) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xaead87349f780fe3}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r5, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) getpgrp(0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1.938767658s ago: executing program 0 (id=329): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 1.771893656s ago: executing program 0 (id=332): syz_read_part_table(0x1050, &(0x7f0000002100)="$eJzsz7EJwlAUBdCr0SRaOYJuYqxtrVxGcJZYuJgzWEUSopABRIRzmv8e/3LhhZ+aJc/+KZJV0uW2nnwW1TReZP+Zy+Sy3ZXXZp7UQ1PSbNIehjXnfj/WY3hZjdOj7d4Fi5zu37wNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7FKwAA//8RPwoy") 1.434598713s ago: executing program 0 (id=337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1df}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008010}, 0x20040850) 1.322119599s ago: executing program 0 (id=338): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x21c90c, &(0x7f0000001340)={[{@delalloc}, {@noblock_validity}, {@jqfmt_vfsold}, {@nodelalloc}, {@errors_remount}, {@nomblk_io_submit}, {@nojournal_checksum}, {@user_xattr}, {@resgid, 0x32}]}, 0x1e, 0x4e0, &(0x7f0000001a40)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@remote, @private0={0xfc, 0x0, '\x00', 0x41}, @empty, 0x7, 0x7fff, 0x3d, 0x80, 0x5, 0x19c0000}) 1.218811232s ago: executing program 3 (id=340): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 1.214299983s ago: executing program 4 (id=341): socket$kcm(0x2, 0x3, 0x2) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f00000006c0)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',nodots,nodots,nodots,nodots,dots,nodots,nodots,check=relaxed,fmask=00000000000000000177777,nodots,quiet,showexec,nodots,nodots,dots,umask=00000000000000000076645,check=s|ristale_rw,nodots,\x00'/204], 0x1, 0x206, &(0x7f0000000480)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x61) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) 1.210270214s ago: executing program 0 (id=342): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000240)=0x9, 0x4) 1.113327376s ago: executing program 0 (id=344): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x80000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x455d37cdd48576cf, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0003001000000002800000121f", 0x2e}], 0x1}, 0x20008000) 1.082651494s ago: executing program 1 (id=345): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="fe08c74132e71e"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000003fc0100000000000000000000000000130700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r5, r5, 0x0, 0xe3aa6ea) 1.0106253s ago: executing program 3 (id=347): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e2c8ce8507a135cc7d4a811b44e65d7", 0x2a}], 0x1) 936.323456ms ago: executing program 2 (id=348): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x20000000}) r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 930.713738ms ago: executing program 3 (id=349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)={0x30, r1, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 754.778418ms ago: executing program 4 (id=350): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_debug_messages', 0x1a9e02, 0x24) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0xa01}, @void, @mpls={[], @llc={@snap={0x0, 0xab, 'C', "000100", 0xf5}}}}, 0xc) 754.504868ms ago: executing program 3 (id=351): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x25dfdbff, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x481a859b, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x8007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0xffffffff, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 754.315258ms ago: executing program 2 (id=352): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfffffffffffffffb, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xfffffffc}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x6}]}}}]}, 0x60}}, 0x0) 667.390908ms ago: executing program 3 (id=353): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0xc248, &(0x7f0000000100), 0x83, 0x5fa, &(0x7f0000001200)="$eJzs3c9rHFUcAPDvTH40aaNpRcQWxYCHFqRpUotVT2092EPBgj2IeGhokhq6/UGTgq0FU/CgoCDiVaQX/wHv0rs3EdSbZ6GKVDyodGV2Z9p1s5suabKTZj4fmM17b4Z975vJy3uzu28ngMqayB7SiN0RcTqJGG/ZNxbNnRP5cXf+uH4m25Ko19/8PYkkLyuOv5v/3JE9JBEjEfH9sYgnBlbWu3j12rmZWr3pg4gDS+cvHVi8em3/wvmZs3Nn5y5MH3z50OGpV6YPTa9LnEVcx0+88cynH7770vwPtf1JHIlTQ+/PRlsc62UiJuJuHmKWryfN8sGIOJwlOvxeHjVbIIRKG8j/Hoci4qkYj4FGrmk8Fj4ptXHAhqoPRNSBikr0f6ioYh5QXNtvxHXwZnb7aPMCaGX8g83XRmKkcW20/U7ScmXUfG1j5zrUn9Xx7/U9X2ZbdHkdYnAd6ulm+UYzlpXxJ4227WzszeJP/3etn0bEVEQM5+177SHa0PoaSb///rL44+ne4m89D1n8R/KfWfmxNdY/0ZavWv8DoBy3juYD+XKWuz/+ZaNxMf+JDvOfsQ5j11qUPf7dm/+l7eN/Md6PNOY9ads8LImIk52fcqi94JePj3/erf7W+V+2ZfUXc8F+uH0jYk/b/PejLNh8/pPFn3Q4/9khp3us4/UffzvebV/Z8ddvRuztMv8tZKlV3p88ML9Qm5tqPnas49vv3vm6W/1lx5+d/+2rzP+7nf+s7FKPdXxz8ub5iPp4p31jD4w//XU4OdVIDecl780sLV2ejhhOTuSHtJQfXL0txTHFc2Tx73u+U/zpqvGPFv8ye3DprXN3uu17yPN/t97jgd1k8c+u8fx/lv8eHuSvt688223favH38twAAAAAAADAfWnjPdgknbyXTtPJyeYa3idje1q7uLj0wvzFKxdmI/Y1Pg85lBbvdI8380mWn84/D1vkD7blX4yIXRHxxcBoIz955mJttuzgAQAAAAAAAAAAAAAAAAAAYJPYka//L+7B9OdAc/0/UBFdbzDn7u6w5W3kDSaBza3R/9OyWwGUwfgP1aX/Q3Xp/1Bd+j9Ul/4P1TW4Ip0kpTUG6CvjP1SX/g8AAAAAW9Ku5279nETE8qujjS0znO8bKrVlwEbTx6G6fMMHVNe9t/4t/4fK6Wn+/3d9W0TU6xvfHKAEHT/v35gc5F8MWo9Y7nTMLSsFAAAAAAAAAAAAAKBf9u62/h+qyrI/qK6HWP/vqwPgEeer/6G6XOMDD1rFP9Jth/X/AAAAAAAAAAAAANA3Y40tSSfztcBjkaaTkxGPRcTOGErmF2pzUxHxeET8NDC0LctPl91oAAAAAAAAAAAAAAAAAAAA2GIWr147N1OrzV1uTfyzomRrJ4q7oG6W9rQmIul/paMRsRliX2MiXf2YwZaSJGI5O/Olt7mZiPJq39ZeUvI/JgAAAAAAAAAAAAAAAAAAqKCWtced7fmqzy0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP67f///jUuUHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj6LwAA//95cEGt") 598.315804ms ago: executing program 2 (id=354): syz_emit_ethernet(0x76, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18e0094, r1}) 510.715214ms ago: executing program 4 (id=355): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="500101"], 0x4) listen(0xffffffffffffffff, 0x0) 452.159207ms ago: executing program 2 (id=356): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d", 0x2}], 0x2) 351.44414ms ago: executing program 4 (id=357): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) r2 = memfd_create(&(0x7f0000000680)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\xe7I\xad_\x0e\xf6\xddk\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\t\xde\xef\x92\x15\xbb\xff\xd8\xe1\xa4\xb7[\x00i\x85\xf63\x05\b\xd8\xeb\xdf\xa4%]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001f00)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdb01, {0x0, 0x0, 0x0, r3, {0x5, 0xc}, {0x0, 0xfff1}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x4041080) 90.634749ms ago: executing program 3 (id=359): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 0s ago: executing program 2 (id=360): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. [ 57.428311][ T4172] cgroup: Unknown subsys name 'net' [ 57.574878][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.840063][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.104756][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 60.144087][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 60.221342][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 60.235006][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 60.243734][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 60.279515][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.286745][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.296115][ T4190] device bridge_slave_0 entered promiscuous mode [ 60.332629][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.339981][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.347684][ T4190] device bridge_slave_1 entered promiscuous mode [ 60.361601][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.368664][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.376470][ T4186] device bridge_slave_0 entered promiscuous mode [ 60.405072][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.412229][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.420004][ T4186] device bridge_slave_1 entered promiscuous mode [ 60.456181][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.477853][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.497789][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.513588][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.520882][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.528469][ T4185] device bridge_slave_0 entered promiscuous mode [ 60.537027][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.557617][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.564847][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.573223][ T4196] device bridge_slave_0 entered promiscuous mode [ 60.586426][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.593733][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.601602][ T4185] device bridge_slave_1 entered promiscuous mode [ 60.619337][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.626482][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.634221][ T4194] device bridge_slave_0 entered promiscuous mode [ 60.642493][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.649958][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.657587][ T4196] device bridge_slave_1 entered promiscuous mode [ 60.666648][ T4190] team0: Port device team_slave_0 added [ 60.674385][ T4190] team0: Port device team_slave_1 added [ 60.690010][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.697078][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.705143][ T4194] device bridge_slave_1 entered promiscuous mode [ 60.724961][ T4186] team0: Port device team_slave_0 added [ 60.732907][ T4186] team0: Port device team_slave_1 added [ 60.740192][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.756442][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.777197][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.808042][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.815161][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.841312][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.854538][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.872554][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.884003][ T4185] team0: Port device team_slave_0 added [ 60.890381][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.897323][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.923379][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.940445][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.947404][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.973585][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.985999][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.996385][ T4185] team0: Port device team_slave_1 added [ 61.013192][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.020368][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.046433][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.075415][ T4196] team0: Port device team_slave_0 added [ 61.097537][ T4194] team0: Port device team_slave_0 added [ 61.110434][ T4196] team0: Port device team_slave_1 added [ 61.124642][ T4194] team0: Port device team_slave_1 added [ 61.130757][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.137695][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.163955][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.189356][ T4190] device hsr_slave_0 entered promiscuous mode [ 61.196039][ T4190] device hsr_slave_1 entered promiscuous mode [ 61.220990][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.227964][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.254461][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.265950][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.273064][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.299561][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.316552][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.323576][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.349540][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.377106][ T4186] device hsr_slave_0 entered promiscuous mode [ 61.384376][ T4186] device hsr_slave_1 entered promiscuous mode [ 61.391120][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.398868][ T4186] Cannot create hsr debugfs directory [ 61.417789][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.424884][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.451400][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.484113][ T4185] device hsr_slave_0 entered promiscuous mode [ 61.491127][ T4185] device hsr_slave_1 entered promiscuous mode [ 61.497573][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.505563][ T4185] Cannot create hsr debugfs directory [ 61.511478][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.518415][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.544423][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.562392][ T4196] device hsr_slave_0 entered promiscuous mode [ 61.569326][ T4196] device hsr_slave_1 entered promiscuous mode [ 61.576131][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.583806][ T4196] Cannot create hsr debugfs directory [ 61.656067][ T4194] device hsr_slave_0 entered promiscuous mode [ 61.662937][ T4194] device hsr_slave_1 entered promiscuous mode [ 61.669372][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.677165][ T4194] Cannot create hsr debugfs directory [ 61.840343][ T1324] Bluetooth: hci3: command 0x0409 tx timeout [ 61.840343][ T26] Bluetooth: hci2: command 0x0409 tx timeout [ 61.853328][ T26] Bluetooth: hci1: command 0x0409 tx timeout [ 61.859430][ T26] Bluetooth: hci0: command 0x0409 tx timeout [ 61.880826][ T26] Bluetooth: hci4: command 0x0409 tx timeout [ 61.931688][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.943531][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.953871][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.965556][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.000177][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.014275][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.026433][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.045150][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.092132][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.113593][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.123105][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.141398][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.177731][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.186977][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.196046][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.206061][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.254878][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.272533][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.289097][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.298772][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.316956][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.333424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.343551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.355966][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.365291][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.396293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.404784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.413813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.424741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.434892][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.442151][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.454555][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.470891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.479186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.487965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.496748][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.503860][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.512307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.523874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.532771][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.539864][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.552882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.586250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.596112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.605180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.615942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.624866][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.631942][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.640176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.648618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.657446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.667311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.675836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.684604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.695694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.704018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.733969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.743827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.753082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.761876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.772534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.781355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.789692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.797935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.811250][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.820996][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.829428][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.840925][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.851580][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.863856][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.881984][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.894760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.903574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.913987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.922122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.930578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.938184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.958945][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.968577][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.012756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.022627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.037438][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.044575][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.055480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.064392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.073193][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.080301][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.088509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.097463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.107016][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.114123][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.123838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.132074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.143677][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.170936][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.178330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.204173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.219370][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.226534][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.240100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.248865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.258658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.267633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.277221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.285921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.295132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.309173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.318285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.327455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.337251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.351502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.360427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.368862][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.375953][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.389584][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.401744][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.424669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.434077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.450125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.458513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.467743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.476977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.485579][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.492694][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.501147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.518927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.528254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.537652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.546729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.555604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.570254][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.580870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.588710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.597217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.611453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.618933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.631136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.645940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.654433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.666964][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.681442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.696555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.707555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.722003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.731222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.739403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.748791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.766424][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.777177][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.801309][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.810216][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.849863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.858709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.870029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.878468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.887244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.898057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.907891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.916741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.925019][ T4174] Bluetooth: hci4: command 0x041b tx timeout [ 63.925744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.936296][ T4174] Bluetooth: hci0: command 0x041b tx timeout [ 63.940771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.945944][ T4174] Bluetooth: hci1: command 0x041b tx timeout [ 63.953683][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 63.959332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.973820][ T4174] Bluetooth: hci2: command 0x041b tx timeout [ 64.009146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.040682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.063926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.081230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.090876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.098707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.106970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.115359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.124529][ T4196] device veth0_vlan entered promiscuous mode [ 64.146459][ T4185] device veth0_vlan entered promiscuous mode [ 64.166039][ T4185] device veth1_vlan entered promiscuous mode [ 64.187175][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.198028][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.210043][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.228679][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.245042][ T4196] device veth1_vlan entered promiscuous mode [ 64.263557][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.271848][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.304685][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.319547][ T4185] device veth0_macvtap entered promiscuous mode [ 64.328277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.338098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.346950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.355950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.364708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.382516][ T4196] device veth0_macvtap entered promiscuous mode [ 64.395704][ T4185] device veth1_macvtap entered promiscuous mode [ 64.403133][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.411310][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.419276][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.428509][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.447220][ T4196] device veth1_macvtap entered promiscuous mode [ 64.469588][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.481462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.493262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.502725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.511631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.520157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.531385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.539162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.547323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.555989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.568451][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.583954][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.593145][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.602242][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.611202][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.623082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.633015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.642758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.651943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.669062][ T4194] device veth0_vlan entered promiscuous mode [ 64.684633][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.695678][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.708059][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.719139][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.731584][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.742721][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.763750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.772595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.781734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.791931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.822755][ T4194] device veth1_vlan entered promiscuous mode [ 64.843443][ T4186] device veth0_vlan entered promiscuous mode [ 64.852843][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.864186][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.873249][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.882808][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.892635][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.900999][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.908941][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.917455][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.926015][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.935179][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.943804][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.951791][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.959466][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.967460][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.979317][ T4190] device veth0_vlan entered promiscuous mode [ 65.018622][ T4190] device veth1_vlan entered promiscuous mode [ 65.026510][ T4186] device veth1_vlan entered promiscuous mode [ 65.044117][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.053389][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.062543][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.071004][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.079399][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.113668][ T4194] device veth0_macvtap entered promiscuous mode [ 65.132828][ T4194] device veth1_macvtap entered promiscuous mode [ 65.177738][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.186111][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.196518][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.207039][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.215999][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.227195][ T4186] device veth0_macvtap entered promiscuous mode [ 65.238595][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.248323][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.263865][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.275210][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.288005][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.298474][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.311179][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.327562][ T4190] device veth0_macvtap entered promiscuous mode [ 65.335854][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.344360][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.353135][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.377801][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.389581][ T4213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.393785][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.397679][ T4213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.407923][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.428126][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.440691][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.449134][ T4186] device veth1_macvtap entered promiscuous mode [ 65.461345][ T4190] device veth1_macvtap entered promiscuous mode [ 65.470096][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.478424][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.478458][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.494172][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.502782][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.510916][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.519446][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.533472][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.542848][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.551743][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.560609][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.584698][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.595437][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.606128][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.616649][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.627574][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.638292][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.651323][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.670937][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.683016][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.693635][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.704325][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.714335][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.724880][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.735643][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.748017][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.757317][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.766738][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.777668][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.794398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.804471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.814290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.823074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.842425][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.853646][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.863634][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.875144][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.885229][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.895953][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.905837][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.916446][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.928048][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.953938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.962753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.986178][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.997421][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.007561][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.007593][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 66.024314][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.024347][ T4229] Bluetooth: hci1: command 0x040f tx timeout [ 66.038544][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.040319][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 66.055857][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.056691][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 66.066548][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.072897][ T4229] Bluetooth: hci4: command 0x040f tx timeout [ 66.091198][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.102134][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.128268][ T4213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.144219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.145223][ T4213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.154285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.171822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.208072][ T4213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.218019][ T4213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.237400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.257534][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.271979][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.283581][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.292563][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.306935][ T4213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.319554][ T4213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.348011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.375718][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.408333][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.419932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.462892][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.489404][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.501557][ T447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.525434][ T447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.529676][ T4267] loop1: detected capacity change from 0 to 4096 [ 66.550886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.568986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.611826][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.635932][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.705368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.708559][ T4268] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.754016][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.781579][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.813932][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.826889][ T4273] loop0: detected capacity change from 0 to 64 [ 66.879482][ T4273] hfs: unable to parse mount options [ 67.096945][ T4265] loop3: detected capacity change from 0 to 32768 [ 67.251197][ T4265] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.4 (4265) [ 67.324115][ T4265] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 67.355128][ T4265] BTRFS info (device loop3): setting nodatasum [ 67.369680][ T4265] BTRFS info (device loop3): enabling auto defrag [ 67.378691][ T4265] BTRFS info (device loop3): disabling tree log [ 67.397338][ T4283] loop4: detected capacity change from 0 to 4096 [ 67.404798][ T4265] BTRFS info (device loop3): using free space tree [ 67.422031][ T4265] BTRFS info (device loop3): has skinny extents [ 67.617386][ T4277] loop1: detected capacity change from 0 to 32768 [ 67.676626][ T4277] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.6 (4277) [ 67.683786][ T4283] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 67.746459][ T4273] loop0: detected capacity change from 0 to 32768 [ 67.790870][ T4273] ======================================================= [ 67.790870][ T4273] WARNING: The mand mount option has been deprecated and [ 67.790870][ T4273] and is ignored by this kernel. Remove the mand [ 67.790870][ T4273] option from the mount to silence this warning. [ 67.790870][ T4273] ======================================================= [ 67.827980][ T4265] BTRFS info (device loop3): enabling ssd optimizations [ 67.844255][ T4272] loop2: detected capacity change from 0 to 40427 [ 67.936598][ T4272] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 67.998043][ T4175] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (4175) [ 68.017873][ T4273] JBD2: Ignoring recovery information on journal [ 68.080118][ T26] Bluetooth: hci0: command 0x0419 tx timeout [ 68.110657][ T26] Bluetooth: hci3: command 0x0419 tx timeout [ 68.134654][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 68.142694][ T4272] F2FS-fs (loop2): invalid crc value [ 68.149240][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 68.176943][ T4272] F2FS-fs (loop2): Found nat_bits in checkpoint [ 68.192945][ T26] Bluetooth: hci4: command 0x0419 tx timeout [ 68.234786][ T4273] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 68.415421][ T4272] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 68.668722][ T4194] attempt to access beyond end of device [ 68.668722][ T4194] loop2: rw=2049, want=45104, limit=40427 [ 68.734177][ T4318] loop4: detected capacity change from 0 to 4096 [ 68.916541][ T4318] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 68.976476][ T4273] syz.0.1 (4273) used greatest stack depth: 20416 bytes left [ 69.043082][ T25] audit: type=1800 audit(1790473420.363:2): pid=4318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 69.066368][ T4190] ocfs2: Unmounting device (7,0) on (node local) [ 69.269843][ T4339] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.422033][ T4347] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(2308.0.0), cmd(3) [ 69.462593][ T4350] FAULT_INJECTION: forcing a failure. [ 69.462593][ T4350] name fail_futex, interval 1, probability 0, space 0, times 1 [ 69.479482][ T4350] CPU: 1 PID: 4350 Comm: syz.1.19 Not tainted syzkaller #0 [ 69.486709][ T4350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.496789][ T4350] Call Trace: [ 69.500073][ T4350] [ 69.503002][ T4350] dump_stack_lvl+0x188/0x250 [ 69.507706][ T4350] ? show_regs_print_info+0x20/0x20 [ 69.512918][ T4350] ? load_image+0x410/0x410 [ 69.517442][ T4350] ? unwind_next_frame+0x11ec/0x1cf0 [ 69.522748][ T4350] should_fail+0x383/0x4b0 [ 69.527184][ T4350] get_futex_key+0x1a1/0x12d0 [ 69.531879][ T4350] ? futex_wait_restart+0x250/0x250 [ 69.537091][ T4350] ? __lock_acquire+0x13dc/0x7b50 [ 69.542140][ T4350] futex_wake+0x101/0x540 [ 69.546482][ T4350] ? verify_lock_unused+0x140/0x140 [ 69.551702][ T4350] ? futex_wait+0x680/0x680 [ 69.556214][ T4350] ? verify_lock_unused+0x140/0x140 [ 69.561420][ T4350] ? verify_lock_unused+0x140/0x140 [ 69.566626][ T4350] ? security_prepare_creds+0x47/0x130 [ 69.572096][ T4350] ? prepare_creds+0x450/0x610 [ 69.576875][ T4350] do_futex+0xd83/0x12b0 [ 69.581141][ T4350] ? proc_id_connector+0x167/0x630 [ 69.586272][ T4350] ? futex_exit_release+0x1c0/0x1c0 [ 69.591487][ T4350] ? __context_tracking_exit+0x4c/0x80 [ 69.596967][ T4350] __se_sys_futex+0x389/0x420 [ 69.601673][ T4350] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 69.607671][ T4350] ? __x64_sys_futex+0xf0/0xf0 [ 69.612449][ T4350] ? __x64_sys_futex+0x1d/0xf0 [ 69.617228][ T4350] do_syscall_64+0x4c/0xa0 [ 69.621651][ T4350] ? clear_bhb_loop+0x30/0x80 [ 69.626342][ T4350] ? clear_bhb_loop+0x30/0x80 [ 69.631036][ T4350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.636954][ T4350] RIP: 0033:0x7f5980162159 [ 69.641373][ T4350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.660990][ T4350] RSP: 002b:00007f597e3ba0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 69.669423][ T4350] RAX: ffffffffffffffda RBX: 00007f59803e9fa8 RCX: 00007f5980162159 [ 69.677413][ T4350] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f59803e9fac [ 69.685399][ T4350] RBP: 00007f59803e9fa0 R08: 00192a16b64481a6 R09: 0000000000000000 [ 69.693383][ T4350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.701371][ T4350] R13: 00007f59803ea038 R14: 00007fff151b2c50 R15: 00007fff151b2d38 [ 69.709379][ T4350] [ 69.889291][ T4363] loop3: detected capacity change from 0 to 64 [ 69.950751][ T4363] hfs: unable to parse mount options [ 70.295671][ T4363] loop3: detected capacity change from 0 to 32768 [ 70.339041][ T4363] JBD2: Ignoring recovery information on journal [ 70.419447][ T4363] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 70.721333][ T4377] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 70.735722][ T13] wiimote 0005:057E:0330.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 70.773040][ T13] wiimote 0005:057E:0330.0001: New device registered [ 70.789963][ T25] audit: type=1800 audit(1790473422.113:3): pid=4377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.27" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 70.821997][ T4196] ocfs2: Unmounting device (7,3) on (node local) [ 70.840384][ T4381] wiimote 0005:057E:0330.0001: Device removed [ 70.997240][ T4392] fido_id[4392]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 71.293849][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.300612][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.793926][ T4418] block device autoloading is deprecated and will be removed. [ 71.924210][ T4423] xt_hashlimit: size too large, truncated to 1048576 [ 71.968223][ T4423] xt_hashlimit: max too large, truncated to 1048576 [ 72.107366][ T4432] netlink: 32 bytes leftover after parsing attributes in process `syz.0.48'. [ 72.156167][ T4433] Illegal XDP return value 1495662636, expect packet loss! [ 72.258866][ T4437] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 72.455199][ T4447] FAULT_INJECTION: forcing a failure. [ 72.455199][ T4447] name failslab, interval 1, probability 0, space 0, times 1 [ 72.515153][ T4447] CPU: 1 PID: 4447 Comm: syz.4.55 Not tainted syzkaller #0 [ 72.522398][ T4447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.532473][ T4447] Call Trace: [ 72.535765][ T4447] [ 72.538700][ T4447] dump_stack_lvl+0x188/0x250 [ 72.543395][ T4447] ? show_regs_print_info+0x20/0x20 [ 72.548606][ T4447] ? load_image+0x410/0x410 [ 72.549010][ T4450] tipc: Started in network mode [ 72.553122][ T4447] ? __might_sleep+0xf0/0xf0 [ 72.553170][ T4447] ? __lock_acquire+0x7b50/0x7b50 [ 72.553203][ T4447] should_fail+0x383/0x4b0 [ 72.553226][ T4447] should_failslab+0x5/0x20 [ 72.572573][ T4450] tipc: Node identity ac14140f, cluster identity 4711 [ 72.576743][ T4447] slab_pre_alloc_hook+0x51/0xc0 [ 72.588441][ T4447] kmem_cache_alloc_node+0x47/0x2c0 [ 72.593658][ T4447] ? alloc_vmap_area+0x199/0x1b30 [ 72.598710][ T4447] alloc_vmap_area+0x199/0x1b30 [ 72.600450][ T4450] tipc: New replicast peer: 255.255.255.255 [ 72.603597][ T4447] ? vm_map_ram+0xba0/0xba0 [ 72.603633][ T4447] __get_vm_area_node+0x14f/0x2d0 [ 72.619009][ T4447] __vmalloc_node_range+0xef/0x8b0 [ 72.624135][ T4447] ? write_ldt+0x358/0x5f0 [ 72.628587][ T4447] ? write_ldt+0x358/0x5f0 [ 72.631157][ T4450] tipc: Enabled bearer , priority 10 [ 72.633017][ T4447] __vmalloc+0x76/0x80 [ 72.633041][ T4447] ? write_ldt+0x358/0x5f0 [ 72.633060][ T4447] write_ldt+0x358/0x5f0 [ 72.633081][ T4447] ? __ia32_sys_modify_ldt+0x80/0x80 [ 72.657293][ T4447] ? lock_chain_count+0x20/0x20 [ 72.662208][ T4447] __se_sys_modify_ldt+0x16f/0x1b0 [ 72.667338][ T4447] do_syscall_64+0x4c/0xa0 [ 72.671763][ T4447] ? clear_bhb_loop+0x30/0x80 [ 72.676457][ T4447] ? clear_bhb_loop+0x30/0x80 [ 72.681149][ T4447] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.687059][ T4447] RIP: 0033:0x7ff54447f159 [ 72.691488][ T4447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.711105][ T4447] RSP: 002b:00007ff5426d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 72.719537][ T4447] RAX: ffffffffffffffda RBX: 00007ff544706fa0 RCX: 00007ff54447f159 [ 72.727546][ T4447] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 72.735539][ T4447] RBP: 00007ff54451606b R08: 0000000000000000 R09: 0000000000000000 [ 72.743527][ T4447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.751518][ T4447] R13: 00007ff544707038 R14: 00007ff544706fa0 R15: 00007ffe4f71b738 [ 72.759527][ T4447] [ 72.917764][ T4462] netlink: 68 bytes leftover after parsing attributes in process `syz.2.60'. [ 72.965690][ T4447] syz.4.55: vmalloc error: size 65536, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 73.005467][ T4447] CPU: 1 PID: 4447 Comm: syz.4.55 Not tainted syzkaller #0 [ 73.012718][ T4447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.022781][ T4447] Call Trace: [ 73.026068][ T4447] [ 73.029005][ T4447] dump_stack_lvl+0x188/0x250 [ 73.033703][ T4447] ? rcu_lock_release+0x5/0x20 [ 73.038486][ T4447] ? show_regs_print_info+0x20/0x20 [ 73.043697][ T4447] ? load_image+0x410/0x410 [ 73.048226][ T4447] warn_alloc+0x245/0x320 [ 73.052578][ T4447] ? zone_watermark_ok_safe+0x250/0x250 [ 73.058151][ T4447] ? __get_vm_area_node+0x164/0x2d0 [ 73.063371][ T4447] __vmalloc_node_range+0x2b1/0x8b0 [ 73.068600][ T4447] ? write_ldt+0x358/0x5f0 [ 73.073071][ T4447] __vmalloc+0x76/0x80 [ 73.077146][ T4447] ? write_ldt+0x358/0x5f0 [ 73.081574][ T4447] write_ldt+0x358/0x5f0 [ 73.085836][ T4447] ? __ia32_sys_modify_ldt+0x80/0x80 [ 73.091132][ T4447] ? lock_chain_count+0x20/0x20 [ 73.096002][ T4447] __se_sys_modify_ldt+0x16f/0x1b0 [ 73.101135][ T4447] do_syscall_64+0x4c/0xa0 [ 73.105581][ T4447] ? clear_bhb_loop+0x30/0x80 [ 73.110281][ T4447] ? clear_bhb_loop+0x30/0x80 [ 73.115150][ T4447] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.121054][ T4447] RIP: 0033:0x7ff54447f159 [ 73.125480][ T4447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.145101][ T4447] RSP: 002b:00007ff5426d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 73.153531][ T4447] RAX: ffffffffffffffda RBX: 00007ff544706fa0 RCX: 00007ff54447f159 [ 73.161523][ T4447] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 73.169510][ T4447] RBP: 00007ff54451606b R08: 0000000000000000 R09: 0000000000000000 [ 73.177495][ T4447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.185477][ T4447] R13: 00007ff544707038 R14: 00007ff544706fa0 R15: 00007ffe4f71b738 [ 73.193474][ T4447] [ 73.223108][ T4470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.63'. [ 73.283780][ T4447] Mem-Info: [ 73.286929][ T4447] active_anon:316 inactive_anon:7396 isolated_anon:0 [ 73.286929][ T4447] active_file:4613 inactive_file:36659 isolated_file:0 [ 73.286929][ T4447] unevictable:768 dirty:1862 writeback:0 [ 73.286929][ T4447] slab_reclaimable:20459 slab_unreclaimable:96232 [ 73.286929][ T4447] mapped:31286 shmem:3457 pagetables:639 bounce:0 [ 73.286929][ T4447] kernel_misc_reclaimable:0 [ 73.286929][ T4447] free:1391181 free_pcp:12007 free_cma:0 [ 73.342792][ T4447] Node 0 active_anon:1232kB inactive_anon:30172kB active_file:18256kB inactive_file:146636kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126344kB dirty:7448kB writeback:0kB shmem:12948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10616kB pagetables:2556kB all_unreclaimable? no [ 73.408366][ T4474] netlink: 108 bytes leftover after parsing attributes in process `syz.1.65'. [ 73.428621][ T4447] Node 1 active_anon:32kB inactive_anon:512kB active_file:196kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 73.489700][ T4447] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 73.580426][ T4447] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 73.586286][ T4447] Node 0 DMA32 free:1641300kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1232kB inactive_anon:37972kB active_file:18256kB inactive_file:146636kB unevictable:1536kB writepending:7448kB present:3129332kB managed:2606508kB mlocked:0kB bounce:0kB free_pcp:27460kB local_pcp:13272kB free_cma:0kB [ 73.651358][ T13] tipc: Node number set to 2886997007 [ 73.687943][ T25] audit: type=1800 audit(1790473425.003:4): pid=4485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.70" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 73.719691][ T4447] lowmem_reserve[]: 0 0 0 0 0 [ 73.724639][ T4447] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 73.814380][ T4447] lowmem_reserve[]: 0 0 0 0 0 [ 73.859658][ T4447] Node 1 Normal free:3906984kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:196kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:13228kB local_pcp:5948kB free_cma:0kB [ 73.983614][ T4447] lowmem_reserve[]: 0 0 0 0 0 [ 73.989188][ T4447] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 74.125134][ T4447] Node 0 DMA32: 499*4kB (UME) 211*8kB (UME) 152*16kB (UME) 127*32kB (UME) 67*64kB (UME) 53*128kB (UME) 38*256kB (UME) 21*512kB (UME) 8*1024kB (M) 3*2048kB (UME) 388*4096kB (M) = 1645316kB [ 74.220384][ T4447] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 74.273005][ T4447] Node 1 Normal: 24*4kB (UME) 21*8kB (UME) 32*16kB (UME) 53*32kB (UME) 32*64kB (UME) 16*128kB (UME) 8*256kB (UE) 2*512kB (UE) 0*1024kB 3*2048kB (UME) 950*4096kB (M) = 3906984kB [ 74.374514][ T4447] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 74.425063][ T4447] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 74.462723][ T4447] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 74.475081][ T4447] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 74.493789][ T4447] 45688 total pagecache pages [ 74.498508][ T4447] 0 pages in swap cache [ 74.503257][ T4447] Swap cache stats: add 0, delete 0, find 0/0 [ 74.509342][ T4447] Free swap = 124996kB [ 74.525137][ T4447] Total swap = 124996kB [ 74.529333][ T4447] 2097051 pages RAM [ 74.579717][ T4447] 0 pages HighMem/MovableOnly [ 74.584435][ T4447] 411501 pages reserved [ 74.611171][ T4507] device syzkaller0 entered promiscuous mode [ 74.622074][ T4447] 0 pages cma reserved [ 74.777578][ T4517] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.834714][ T4521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.82'. [ 74.986985][ T4538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.86'. [ 75.228684][ T4549] FAULT_INJECTION: forcing a failure. [ 75.228684][ T4549] name failslab, interval 1, probability 0, space 0, times 0 [ 75.409807][ T4549] CPU: 1 PID: 4549 Comm: syz.3.89 Not tainted syzkaller #0 [ 75.417046][ T4549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.427103][ T4549] Call Trace: [ 75.430396][ T4549] [ 75.433328][ T4549] dump_stack_lvl+0x188/0x250 [ 75.438029][ T4549] ? show_regs_print_info+0x20/0x20 [ 75.443240][ T4549] ? load_image+0x410/0x410 [ 75.447755][ T4549] ? __might_sleep+0xf0/0xf0 [ 75.452355][ T4549] ? __lock_acquire+0x7b50/0x7b50 [ 75.457403][ T4549] should_fail+0x383/0x4b0 [ 75.461823][ T4549] should_failslab+0x5/0x20 [ 75.466333][ T4549] slab_pre_alloc_hook+0x51/0xc0 [ 75.471287][ T4549] kmem_cache_alloc_trace+0x47/0x290 [ 75.476613][ T4549] ? x509_key_preparse+0x30d/0x5d0 [ 75.481740][ T4549] x509_key_preparse+0x30d/0x5d0 [ 75.486698][ T4549] asymmetric_key_preparse+0xa5/0x140 [ 75.492078][ T4549] key_create_or_update+0x432/0xa40 [ 75.497284][ T4549] ? security_key_permission+0x7c/0xa0 [ 75.502762][ T4549] ? key_type_put+0x20/0x20 [ 75.507279][ T4549] ? lookup_user_key_possessed+0x40/0x40 [ 75.512936][ T4549] ? __might_fault+0xb3/0x110 [ 75.517641][ T4549] __se_sys_add_key+0x34b/0x410 [ 75.522511][ T4549] ? __x64_sys_add_key+0xc0/0xc0 [ 75.527467][ T4549] ? lockdep_hardirqs_on+0x94/0x140 [ 75.532680][ T4549] ? __x64_sys_add_key+0x1c/0xc0 [ 75.537630][ T4549] do_syscall_64+0x4c/0xa0 [ 75.542052][ T4549] ? clear_bhb_loop+0x30/0x80 [ 75.546735][ T4549] ? clear_bhb_loop+0x30/0x80 [ 75.551431][ T4549] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.557336][ T4549] RIP: 0033:0x7ff335752159 [ 75.561763][ T4549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.581376][ T4549] RSP: 002b:00007ff3339aa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 75.589811][ T4549] RAX: ffffffffffffffda RBX: 00007ff3359d9fa0 RCX: 00007ff335752159 [ 75.597791][ T4549] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 75.605773][ T4549] RBP: 00007ff3357e906b R08: ffffffffffffffff R09: 0000000000000000 [ 75.613751][ T4549] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 75.621727][ T4549] R13: 00007ff3359da038 R14: 00007ff3359d9fa0 R15: 00007ffc2b6043c8 [ 75.629720][ T4549] [ 75.646739][ T4545] FAULT_INJECTION: forcing a failure. [ 75.646739][ T4545] name failslab, interval 1, probability 0, space 0, times 0 [ 75.659766][ T4545] CPU: 0 PID: 4545 Comm: syz.0.88 Not tainted syzkaller #0 [ 75.666975][ T4545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.677039][ T4545] Call Trace: [ 75.680328][ T4545] [ 75.683261][ T4545] dump_stack_lvl+0x188/0x250 [ 75.687950][ T4545] ? show_regs_print_info+0x20/0x20 [ 75.693158][ T4545] ? load_image+0x410/0x410 [ 75.697674][ T4545] ? __might_sleep+0xf0/0xf0 [ 75.702276][ T4545] ? __lock_acquire+0x7b50/0x7b50 [ 75.707317][ T4545] should_fail+0x383/0x4b0 [ 75.711748][ T4545] should_failslab+0x5/0x20 [ 75.716263][ T4545] slab_pre_alloc_hook+0x51/0xc0 [ 75.721303][ T4545] ? prepare_creds+0x3c/0x610 [ 75.725996][ T4545] kmem_cache_alloc+0x3d/0x280 [ 75.730776][ T4545] prepare_creds+0x3c/0x610 [ 75.735291][ T4545] __sys_setfsuid+0xc9/0x370 [ 75.739889][ T4545] ? lockdep_hardirqs_on+0x94/0x140 [ 75.745103][ T4545] do_syscall_64+0x4c/0xa0 [ 75.749529][ T4545] ? clear_bhb_loop+0x30/0x80 [ 75.754220][ T4545] ? clear_bhb_loop+0x30/0x80 [ 75.758911][ T4545] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.764816][ T4545] RIP: 0033:0x7f323cfd1159 [ 75.769252][ T4545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.788864][ T4545] RSP: 002b:00007f323b229028 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 75.797288][ T4545] RAX: ffffffffffffffda RBX: 00007f323d258fa0 RCX: 00007f323cfd1159 [ 75.805268][ T4545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 75.813243][ T4545] RBP: 00007f323d06806b R08: 0000000000000000 R09: 0000000000000000 [ 75.821222][ T4545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.829212][ T4545] R13: 00007f323d259038 R14: 00007f323d258fa0 R15: 00007fffa516a2d8 [ 75.837213][ T4545] [ 76.083991][ T4577] set_capacity_and_notify: 1 callbacks suppressed [ 76.084005][ T4577] loop8: detected capacity change from 0 to 16384 [ 76.156905][ T4574] loop2: detected capacity change from 0 to 2048 [ 76.904025][ T4574] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 76.910061][ T4584] loop_set_status: loop8 () has still dirty pages (nrpages=196) [ 76.954528][ T4574] EXT4-fs error (device loop2): __ext4_iget:4919: inode #2: block 127754: comm syz.2.97: invalid block [ 76.976762][ T4594] netlink: 'syz.3.104': attribute type 10 has an invalid length. [ 77.028520][ T4594] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 77.134679][ T4574] EXT4-fs (loop2): get root inode failed [ 77.169789][ T4574] EXT4-fs (loop2): mount failed [ 77.583903][ T4623] xt_hashlimit: size too large, truncated to 1048576 [ 77.608007][ T4630] capability: warning: `syz.1.112' uses deprecated v2 capabilities in a way that may be insecure [ 77.766574][ T4637] netlink: 48 bytes leftover after parsing attributes in process `syz.1.116'. [ 77.906673][ T4640] loop2: detected capacity change from 0 to 2048 [ 77.911862][ T4643] device bridge1 entered promiscuous mode [ 78.009248][ T4646] loop4: detected capacity change from 0 to 1024 [ 78.044081][ T4640] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.074256][ T4640] EXT4-fs error (device loop2): ext4_find_extent:893: inode #2: comm syz.2.117: inode has invalid extent depth: 8 [ 78.115251][ T4646] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 78.240043][ T4646] EXT4-fs (loop4): barriers disabled [ 78.245377][ T4646] JBD2: no valid journal superblock found [ 78.272677][ T4646] EXT4-fs (loop4): error loading journal [ 78.419294][ T4655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.121'. [ 78.532771][ T4659] loop2: detected capacity change from 0 to 128 [ 78.572003][ T4659] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.691219][ T4659] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.949754][ T4672] syz.2.127 uses obsolete (PF_INET,SOCK_PACKET) [ 79.006408][ T4670] FAULT_INJECTION: forcing a failure. [ 79.006408][ T4670] name failslab, interval 1, probability 0, space 0, times 0 [ 79.037008][ T4670] CPU: 1 PID: 4670 Comm: syz.4.120 Not tainted syzkaller #0 [ 79.044340][ T4670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.054399][ T4670] Call Trace: [ 79.057680][ T4670] [ 79.060610][ T4670] dump_stack_lvl+0x188/0x250 [ 79.065296][ T4670] ? show_regs_print_info+0x20/0x20 [ 79.070499][ T4670] ? load_image+0x410/0x410 [ 79.075010][ T4670] ? __might_sleep+0xf0/0xf0 [ 79.079599][ T4670] ? __lock_acquire+0x7b50/0x7b50 [ 79.084636][ T4670] should_fail+0x383/0x4b0 [ 79.089057][ T4670] should_failslab+0x5/0x20 [ 79.093559][ T4670] slab_pre_alloc_hook+0x51/0xc0 [ 79.098508][ T4670] ? prepare_creds+0x3c/0x610 [ 79.103202][ T4670] kmem_cache_alloc+0x3d/0x280 [ 79.107974][ T4670] prepare_creds+0x3c/0x610 [ 79.112494][ T4670] __sys_setfsuid+0xc9/0x370 [ 79.117097][ T4670] ? lockdep_hardirqs_on+0x94/0x140 [ 79.122308][ T4670] do_syscall_64+0x4c/0xa0 [ 79.126731][ T4670] ? clear_bhb_loop+0x30/0x80 [ 79.131409][ T4670] ? clear_bhb_loop+0x30/0x80 [ 79.136092][ T4670] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.141992][ T4670] RIP: 0033:0x7ff54447f159 [ 79.146411][ T4670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.166030][ T4670] RSP: 002b:00007ff5426b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 79.174452][ T4670] RAX: ffffffffffffffda RBX: 00007ff544707090 RCX: 00007ff54447f159 [ 79.182434][ T4670] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 79.190413][ T4670] RBP: 00007ff54451606b R08: 0000000000000000 R09: 0000000000000000 [ 79.198394][ T4670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.206371][ T4670] R13: 00007ff544707128 R14: 00007ff544707090 R15: 00007ffe4f71b738 [ 79.214366][ T4670] [ 79.737455][ T4679] ODEBUG: Out of memory. ODEBUG disabled [ 80.271041][ T4609] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 80.707893][ T25] audit: type=1326 audit(1790473432.023:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.3.138" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff335752159 code=0x7ffc0000 [ 80.741950][ T25] audit: type=1326 audit(1790473432.053:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.3.138" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff335752159 code=0x7ffc0000 [ 80.771554][ T25] audit: type=1326 audit(1790473432.063:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.3.138" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7ff335752159 code=0x7ffc0000 [ 80.810527][ T25] audit: type=1326 audit(1790473432.063:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.3.138" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff335752159 code=0x7ffc0000 [ 81.035218][ T4711] loop2: detected capacity change from 0 to 764 [ 81.078293][ T4711] rock: directory entry would overflow storage [ 81.095154][ T4711] rock: sig=0x4654, size=5, remaining=4 [ 81.512317][ T4719] Cannot find set identified by id 0 to match [ 81.876702][ T4728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.148'. [ 81.901834][ T4728] netlink: 'syz.1.148': attribute type 10 has an invalid length. [ 82.045165][ T4728] team0 (unregistering): Port device team_slave_0 removed [ 82.096854][ T4728] team0 (unregistering): Port device team_slave_1 removed [ 82.172226][ T4713] loop2: detected capacity change from 0 to 32768 [ 82.216165][ T4715] loop4: detected capacity change from 0 to 32768 [ 82.222904][ T4713] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.141 (4713) [ 82.316867][ T4715] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.142 (4715) [ 82.346485][ T4713] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 82.362631][ T4730] netlink: 56 bytes leftover after parsing attributes in process `syz.1.149'. [ 82.393828][ T4713] BTRFS info (device loop2): setting nodatasum [ 82.413477][ T4713] BTRFS info (device loop2): force zlib compression, level 3 [ 82.440823][ T4715] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 82.481266][ T4715] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 82.482151][ T4713] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 82.549746][ T4715] BTRFS info (device loop4): use zstd compression, level 3 [ 82.564969][ T4715] BTRFS info (device loop4): using free space tree [ 82.574724][ T4713] BTRFS info (device loop2): use lzo compression, level 0 [ 82.612264][ T4715] BTRFS info (device loop4): has skinny extents [ 82.622411][ T4713] BTRFS info (device loop2): turning on flush-on-commit [ 82.683105][ T4713] BTRFS info (device loop2): enabling auto defrag [ 82.689592][ T4713] BTRFS info (device loop2): max_inline at 4096 [ 82.759690][ T4713] BTRFS info (device loop2): using free space tree [ 82.766232][ T4713] BTRFS info (device loop2): has skinny extents [ 82.994015][ T4715] BTRFS info (device loop4): enabling ssd optimizations [ 83.076919][ T4713] BTRFS info (device loop2): enabling ssd optimizations [ 84.253450][ T4824] loop2: detected capacity change from 0 to 512 [ 84.294984][ T4828] netlink: 'syz.4.165': attribute type 4 has an invalid length. [ 84.320472][ T4824] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 84.481309][ T4824] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.163: bg 0: block 4: invalid block bitmap [ 84.549561][ T4824] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 84.650171][ T4824] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.163: invalid indirect mapped block 1 (level 1) [ 84.658225][ T4824] EXT4-fs (loop2): 1 truncate cleaned up [ 84.658263][ T4824] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.720966][ T4842] FAULT_INJECTION: forcing a failure. [ 84.720966][ T4842] name failslab, interval 1, probability 0, space 0, times 0 [ 84.720994][ T4842] CPU: 1 PID: 4842 Comm: syz.4.172 Not tainted syzkaller #0 [ 84.721012][ T4842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.721021][ T4842] Call Trace: [ 84.721026][ T4842] [ 84.721032][ T4842] dump_stack_lvl+0x188/0x250 [ 84.721056][ T4842] ? show_regs_print_info+0x20/0x20 [ 84.721075][ T4842] ? load_image+0x410/0x410 [ 84.721094][ T4842] ? __might_sleep+0xf0/0xf0 [ 84.721117][ T4842] ? __lock_acquire+0x7b50/0x7b50 [ 84.721138][ T4842] ? lockdep_init_map_type+0x98/0x900 [ 84.721162][ T4842] should_fail+0x383/0x4b0 [ 84.721185][ T4842] should_failslab+0x5/0x20 [ 84.721201][ T4842] slab_pre_alloc_hook+0x51/0xc0 [ 84.721218][ T4842] ? posix_lock_inode+0x365/0x3270 [ 84.721239][ T4842] kmem_cache_alloc+0x3d/0x280 [ 84.721255][ T4842] ? __init_waitqueue_head+0xa4/0x140 [ 84.721280][ T4842] posix_lock_inode+0x365/0x3270 [ 84.721303][ T4842] ? aa_path_link+0x8a0/0x8a0 [ 84.721325][ T4842] ? lockdep_softirqs_off+0x430/0x430 [ 84.721350][ T4842] ? posix_lock_file+0x50/0x50 [ 84.721377][ T4842] ? bpf_lsm_file_lock+0x5/0x10 [ 84.721399][ T4842] fcntl_setlk+0xa7f/0x1060 [ 84.721433][ T4842] ? vfs_lock_file+0xd0/0xd0 [ 84.721457][ T4842] ? __might_fault+0xb3/0x110 [ 84.721477][ T4842] ? _copy_from_user+0x111/0x170 [ 84.721496][ T4842] do_fcntl+0x533/0x1360 [ 84.721515][ T4842] ? __context_tracking_exit+0x4c/0x80 [ 84.721544][ T4842] ? rcu_lock_release+0x20/0x20 [ 84.721566][ T4842] ? __fget_files+0x402/0x470 [ 84.721586][ T4842] ? tomoyo_file_fcntl+0x77/0x210 [ 84.721608][ T4842] ? bpf_lsm_file_fcntl+0x5/0x10 [ 84.721624][ T4842] ? security_file_fcntl+0x7c/0xa0 [ 84.721646][ T4842] __se_sys_fcntl+0xcc/0x190 [ 84.721668][ T4842] do_syscall_64+0x4c/0xa0 [ 84.721683][ T4842] ? clear_bhb_loop+0x30/0x80 [ 84.721701][ T4842] ? clear_bhb_loop+0x30/0x80 [ 84.721720][ T4842] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.721738][ T4842] RIP: 0033:0x7ff54447f159 [ 84.721755][ T4842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.721769][ T4842] RSP: 002b:00007ff5426d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 84.721790][ T4842] RAX: ffffffffffffffda RBX: 00007ff544706fa0 RCX: 00007ff54447f159 [ 84.721803][ T4842] RDX: 0000200000000200 RSI: 0000000000000025 RDI: 0000000000000003 [ 84.721815][ T4842] RBP: 00007ff54451606b R08: 0000000000000000 R09: 0000000000000000 [ 84.721826][ T4842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.721837][ T4842] R13: 00007ff544707038 R14: 00007ff544706fa0 R15: 00007ffe4f71b738 [ 84.721864][ T4842] [ 84.839260][ T4848] autofs4:pid:4848:autofs_fill_super: called with bogus options [ 84.887946][ T4851] loop2: detected capacity change from 0 to 1024 [ 84.940043][ T4851] EXT4-fs (loop2): Ignoring removed bh option [ 85.004867][ T4851] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 85.933974][ T4725] Set syz1 is full, maxelem 65536 reached [ 86.035563][ T4878] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 86.045514][ T4877] Zero length message leads to an empty skb [ 86.477667][ T4904] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.528796][ T4909] FAULT_INJECTION: forcing a failure. [ 86.528796][ T4909] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 86.559844][ T4909] CPU: 1 PID: 4909 Comm: syz.3.199 Not tainted syzkaller #0 [ 86.567176][ T4909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.577236][ T4909] Call Trace: [ 86.580525][ T4909] [ 86.583453][ T4909] dump_stack_lvl+0x188/0x250 [ 86.588134][ T4909] ? show_regs_print_info+0x20/0x20 [ 86.593361][ T4909] ? load_image+0x410/0x410 [ 86.597859][ T4909] ? __lock_acquire+0x7b50/0x7b50 [ 86.602878][ T4909] should_fail+0x383/0x4b0 [ 86.607281][ T4909] prepare_alloc_pages+0x1e3/0x5b0 [ 86.612379][ T4909] __alloc_pages+0x11b/0x480 [ 86.616952][ T4909] ? zone_statistics+0x170/0x170 [ 86.621877][ T4909] ? alloc_pages+0x452/0x560 [ 86.626453][ T4909] __get_free_pages+0x8/0x30 [ 86.631026][ T4909] kasan_populate_vmalloc_pte+0x21/0xc0 [ 86.636554][ T4909] __apply_to_page_range+0x987/0xd10 [ 86.641828][ T4909] ? kasan_populate_vmalloc+0x70/0x70 [ 86.647182][ T4909] alloc_vmap_area+0x19e8/0x1b30 [ 86.652113][ T4909] ? vm_map_ram+0xba0/0xba0 [ 86.656603][ T4909] __get_vm_area_node+0x14f/0x2d0 [ 86.661616][ T4909] __vmalloc_node_range+0xef/0x8b0 [ 86.666712][ T4909] ? write_ldt+0x358/0x5f0 [ 86.671118][ T4909] ? write_ldt+0x358/0x5f0 [ 86.675523][ T4909] __vmalloc+0x76/0x80 [ 86.679581][ T4909] ? write_ldt+0x358/0x5f0 [ 86.683985][ T4909] write_ldt+0x358/0x5f0 [ 86.688213][ T4909] ? __ia32_sys_modify_ldt+0x80/0x80 [ 86.693482][ T4909] ? lock_chain_count+0x20/0x20 [ 86.698323][ T4909] __se_sys_modify_ldt+0x16f/0x1b0 [ 86.703418][ T4909] do_syscall_64+0x4c/0xa0 [ 86.707818][ T4909] ? clear_bhb_loop+0x30/0x80 [ 86.712480][ T4909] ? clear_bhb_loop+0x30/0x80 [ 86.717145][ T4909] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.723032][ T4909] RIP: 0033:0x7ff335752159 [ 86.727436][ T4909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.747027][ T4909] RSP: 002b:00007ff3339aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 86.755430][ T4909] RAX: ffffffffffffffda RBX: 00007ff3359d9fa0 RCX: 00007ff335752159 [ 86.763387][ T4909] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 86.771342][ T4909] RBP: 00007ff3357e906b R08: 0000000000000000 R09: 0000000000000000 [ 86.779296][ T4909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.787250][ T4909] R13: 00007ff3359da038 R14: 00007ff3359d9fa0 R15: 00007ffc2b6043c8 [ 86.795221][ T4909] [ 86.804727][ T1108] cfg80211: failed to load regulatory.db [ 86.832750][ T4912] x_tables: unsorted entry at hook 1 [ 86.904154][ T4904] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.942220][ T4909] syz.3.199: vmalloc error: size 65536, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 86.990296][ T4909] CPU: 0 PID: 4909 Comm: syz.3.199 Not tainted syzkaller #0 [ 86.997632][ T4909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.007700][ T4909] Call Trace: [ 87.010981][ T4909] [ 87.013909][ T4909] dump_stack_lvl+0x188/0x250 [ 87.018589][ T4909] ? rcu_lock_release+0x5/0x20 [ 87.023359][ T4909] ? show_regs_print_info+0x20/0x20 [ 87.028566][ T4909] ? load_image+0x410/0x410 [ 87.033112][ T4909] warn_alloc+0x245/0x320 [ 87.037463][ T4909] ? zone_watermark_ok_safe+0x250/0x250 [ 87.043012][ T4909] ? __get_vm_area_node+0x164/0x2d0 [ 87.048204][ T4909] __vmalloc_node_range+0x2b1/0x8b0 [ 87.053425][ T4909] ? write_ldt+0x358/0x5f0 [ 87.057836][ T4909] __vmalloc+0x76/0x80 [ 87.061887][ T4909] ? write_ldt+0x358/0x5f0 [ 87.066292][ T4909] write_ldt+0x358/0x5f0 [ 87.070525][ T4909] ? __ia32_sys_modify_ldt+0x80/0x80 [ 87.075796][ T4909] ? lock_chain_count+0x20/0x20 [ 87.080640][ T4909] __se_sys_modify_ldt+0x16f/0x1b0 [ 87.085740][ T4909] do_syscall_64+0x4c/0xa0 [ 87.090147][ T4909] ? clear_bhb_loop+0x30/0x80 [ 87.094812][ T4909] ? clear_bhb_loop+0x30/0x80 [ 87.099478][ T4909] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.105356][ T4909] RIP: 0033:0x7ff335752159 [ 87.109796][ T4909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.129387][ T4909] RSP: 002b:00007ff3339aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 87.137787][ T4909] RAX: ffffffffffffffda RBX: 00007ff3359d9fa0 RCX: 00007ff335752159 [ 87.145741][ T4909] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 87.153697][ T4909] RBP: 00007ff3357e906b R08: 0000000000000000 R09: 0000000000000000 [ 87.161652][ T4909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.169605][ T4909] R13: 00007ff3359da038 R14: 00007ff3359d9fa0 R15: 00007ffc2b6043c8 [ 87.177578][ T4909] [ 87.191961][ T4895] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.205444][ T4909] Mem-Info: [ 87.215899][ T4909] active_anon:678 inactive_anon:8468 isolated_anon:0 [ 87.215899][ T4909] active_file:4700 inactive_file:46250 isolated_file:0 [ 87.215899][ T4909] unevictable:768 dirty:767 writeback:0 [ 87.215899][ T4909] slab_reclaimable:20460 slab_unreclaimable:97618 [ 87.215899][ T4909] mapped:32415 shmem:4935 pagetables:641 bounce:0 [ 87.215899][ T4909] kernel_misc_reclaimable:0 [ 87.215899][ T4909] free:1379824 free_pcp:10736 free_cma:0 [ 87.259256][ T4909] Node 0 active_anon:2680kB inactive_anon:33460kB active_file:18604kB inactive_file:185000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129660kB dirty:3064kB writeback:0kB shmem:17660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11372kB pagetables:2664kB all_unreclaimable? no [ 87.297387][ T4909] Node 1 active_anon:32kB inactive_anon:512kB active_file:196kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 87.339429][ T4909] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 87.366724][ T4909] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 87.372789][ T4909] Node 0 DMA32 free:1594956kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:14080kB inactive_anon:22060kB active_file:18604kB inactive_file:185000kB unevictable:1536kB writepending:3064kB present:3129332kB managed:2606508kB mlocked:0kB bounce:0kB free_pcp:31744kB local_pcp:20900kB free_cma:0kB [ 87.405705][ T4909] lowmem_reserve[]: 0 0 0 0 0 [ 87.407723][ T4904] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.415863][ T4909] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 87.447736][ T4909] lowmem_reserve[]: 0 0 0 0 0 [ 87.476314][ T4909] Node 1 Normal free:3908980kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:196kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:11276kB local_pcp:6272kB free_cma:0kB [ 87.506645][ T4909] lowmem_reserve[]: 0 0 0 0 0 [ 87.512412][ T4909] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 87.542909][ T4904] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.545610][ T4909] Node 0 DMA32: 323*4kB (ME) 773*8kB (ME) 548*16kB (ME) 255*32kB (UME) 163*64kB (UME) 47*128kB (UME) 30*256kB (UME) 18*512kB (UME) 3*1024kB (M) 3*2048kB (ME) 372*4096kB (UM) = 1590676kB [ 87.576951][ T4909] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 87.588719][ T4909] Node 1 Normal: 32*4kB (UME) 19*8kB (UME) 25*16kB (UME) 59*32kB (UME) 38*64kB (UME) 18*128kB (UME) 9*256kB (UE) 4*512kB (UE) 0*1024kB 3*2048kB (UME) 950*4096kB (M) = 3909000kB [ 87.606972][ T4909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 87.616770][ T4909] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 87.639724][ T4909] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 87.656114][ T4909] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 87.668439][ T4909] 53007 total pagecache pages [ 87.678970][ T4909] 0 pages in swap cache [ 87.683515][ T4909] Swap cache stats: add 0, delete 0, find 0/0 [ 87.688113][ T4904] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.690132][ T4909] Free swap = 124996kB [ 87.709184][ T4909] Total swap = 124996kB [ 87.713733][ T4909] 2097051 pages RAM [ 87.717640][ T4909] 0 pages HighMem/MovableOnly [ 87.728067][ T4909] 411501 pages reserved [ 87.732240][ T4904] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.741345][ T4909] 0 pages cma reserved [ 87.750109][ T4904] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.774252][ T4904] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.874584][ T4936] netlink: 24 bytes leftover after parsing attributes in process `syz.3.206'. [ 88.072510][ T4943] loop2: detected capacity change from 0 to 128 [ 88.145030][ T4943] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 88.196114][ T4943] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.221846][ T4950] loop3: detected capacity change from 0 to 2048 [ 88.318041][ T4950] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,noinit_itable,max_batch_time=0x00000000000003ff,. Quota mode: none. [ 88.362925][ T4950] EXT4-fs error (device loop3): ext4_find_extent:893: inode #2: comm syz.3.212: inode has invalid extent depth: 8 [ 88.430320][ T4950] EXT4-fs (loop3): Remounting filesystem read-only [ 88.455309][ T4950] EXT4-fs error (device loop3): ext4_find_extent:893: inode #2: comm syz.3.212: inode has invalid extent depth: 8 [ 88.495989][ T4959] tmpfs: Bad value for 'mpol' [ 88.511428][ T4950] EXT4-fs (loop3): Remounting filesystem read-only [ 89.472451][ T4976] FAULT_INJECTION: forcing a failure. [ 89.472451][ T4976] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 89.495406][ T4976] CPU: 0 PID: 4976 Comm: syz.2.220 Not tainted syzkaller #0 [ 89.502722][ T4976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.512783][ T4976] Call Trace: [ 89.516077][ T4976] [ 89.519025][ T4976] dump_stack_lvl+0x188/0x250 [ 89.523716][ T4976] ? show_regs_print_info+0x20/0x20 [ 89.528921][ T4976] ? load_image+0x410/0x410 [ 89.533428][ T4976] ? __lock_acquire+0x7b50/0x7b50 [ 89.538458][ T4976] should_fail+0x383/0x4b0 [ 89.542889][ T4976] _copy_from_user+0x2e/0x170 [ 89.547579][ T4976] iovec_from_user+0x142/0x370 [ 89.552369][ T4976] __import_iovec+0x70/0x490 [ 89.556991][ T4976] import_iovec+0x6f/0xa0 [ 89.561340][ T4976] do_pwritev+0x1fe/0x3a0 [ 89.565685][ T4976] ? do_preadv+0x390/0x390 [ 89.570124][ T4976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 89.576126][ T4976] ? lock_chain_count+0x20/0x20 [ 89.581000][ T4976] ? lockdep_hardirqs_on+0x94/0x140 [ 89.586213][ T4976] ? __x64_sys_pwritev2+0xba/0x100 [ 89.591340][ T4976] do_syscall_64+0x4c/0xa0 [ 89.595770][ T4976] ? clear_bhb_loop+0x30/0x80 [ 89.600463][ T4976] ? clear_bhb_loop+0x30/0x80 [ 89.605155][ T4976] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.611148][ T4976] RIP: 0033:0x7fe63498c159 [ 89.615572][ T4976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.635194][ T4976] RSP: 002b:00007fe632be4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 89.643622][ T4976] RAX: ffffffffffffffda RBX: 00007fe634c13fa0 RCX: 00007fe63498c159 [ 89.651607][ T4976] RDX: 000000000000001c RSI: 0000200000000500 RDI: 0000000000000003 [ 89.659597][ T4976] RBP: 00007fe634a2306b R08: 0000000000000000 R09: 0000000000000022 [ 89.667589][ T4976] R10: 0000000000000a00 R11: 0000000000000246 R12: 0000000000000000 [ 89.675568][ T4976] R13: 00007fe634c14038 R14: 00007fe634c13fa0 R15: 00007ffc350b7488 [ 89.683578][ T4976] [ 89.943483][ T4990] loop2: detected capacity change from 0 to 512 [ 90.074514][ T4990] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000007,errors=continue,errors=continue,,errors=continue. Quota mode: none. [ 90.104305][ T5002] loop4: detected capacity change from 0 to 512 [ 90.189301][ T4990] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.226: bg 0: block 67: padding at end of block bitmap is not set [ 90.236311][ T4990] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 90.298270][ T25] audit: type=1800 audit(1790473441.613:9): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.226" name="bus" dev="loop2" ino=13 res=0 errno=0 [ 90.342913][ T5002] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 90.404975][ T5002] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.662803][ T5020] autofs4:pid:5020:autofs_fill_super: called with bogus options [ 91.240460][ T5046] process 'syz.4.246' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' with NULL argv: empty string added [ 91.398288][ T5053] device vlan2 entered promiscuous mode [ 91.581647][ T5064] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 91.937534][ T5092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.266'. [ 92.569856][ T4329] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.779763][ T4329] usb 3-1: device descriptor read/64, error -71 [ 92.823622][ T5123] x_tables: duplicate underflow at hook 2 [ 92.961022][ T5129] loop4: detected capacity change from 0 to 512 [ 93.006305][ T5129] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.017914][ T5129] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.069747][ T4329] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.259902][ T4329] usb 3-1: device descriptor read/64, error -71 [ 93.379906][ T4329] usb usb3-port1: attempt power cycle [ 93.487732][ T5144] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 93.849802][ T4329] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 93.950973][ T4329] usb 3-1: device descriptor read/8, error -71 [ 94.035094][ T5162] ip_tables: iptables: counters copy to user failed while replacing table [ 94.175113][ T5170] loop2: detected capacity change from 0 to 7 [ 94.219285][ T5170] Dev loop2: unable to read RDB block 7 [ 94.220893][ T4329] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 94.231385][ T5170] loop2: unable to read partition table [ 94.238848][ T5170] loop2: partition table beyond EOD, truncated [ 94.306056][ T5170] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 94.340086][ T4329] usb 3-1: device descriptor read/8, error -71 [ 94.350964][ T3557] Dev loop2: unable to read RDB block 7 [ 94.358436][ T3557] loop2: unable to read partition table [ 94.370151][ T3557] loop2: partition table beyond EOD, truncated [ 94.479383][ T4329] usb usb3-port1: unable to enumerate USB device [ 94.852458][ T5192] netlink: 68 bytes leftover after parsing attributes in process `syz.3.308'. [ 95.528979][ T4791] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.587629][ T5201] loop2: detected capacity change from 0 to 2048 [ 95.700190][ T5208] netlink: 68 bytes leftover after parsing attributes in process `syz.0.315'. [ 95.732493][ T5201] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.751208][ T5201] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.987378][ T5218] loop2: detected capacity change from 0 to 1024 [ 96.024543][ T5218] EXT4-fs (loop2): invalid inodes per group: 1 [ 96.024543][ T5218] [ 96.120229][ T4791] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 96.137901][ T4791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.172203][ T4791] usb 5-1: Product: syz [ 96.184210][ T4791] usb 5-1: Manufacturer: syz [ 96.203479][ T4791] usb 5-1: SerialNumber: syz [ 96.237078][ T5226] netlink: 'syz.2.321': attribute type 2 has an invalid length. [ 96.270331][ T5226] netlink: 'syz.2.321': attribute type 3 has an invalid length. [ 96.278985][ T5226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.321'. [ 97.619321][ T5274] using random self ethernet address [ 97.656699][ T5277] loop3: detected capacity change from 0 to 1024 [ 97.663870][ T5274] using random host ethernet address [ 97.767736][ T5277] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 97.832033][ T5277] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.124413][ T5291] loop4: detected capacity change from 0 to 256 [ 98.249466][ T5302] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 98.535101][ T4329] infiniband syz1: ib_query_port failed (-19) [ 98.547256][ T5314] netlink: 48 bytes leftover after parsing attributes in process `syz.2.352'. [ 98.555163][ T5297] infiniband syz1: set down [ 98.574773][ T5297] infiniband syz1: added syz_tun [ 98.677704][ T5318] loop3: detected capacity change from 0 to 1024 [ 98.740146][ T5297] RDS/IB: syz1: added [ 98.770778][ T5297] smc: adding ib device syz1 with port count 1 [ 98.780904][ T5297] smc: ib device syz1 port 1 has pnetid [ 98.875101][ T5297] smc: removing ib device syz1 [ 98.887508][ T5318] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 98.912979][ T5318] EXT4-fs (loop3): orphan cleanup on readonly fs [ 98.955824][ T5318] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 98.967703][ T5318] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 98.982437][ T5318] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 98.989046][ T5318] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.353: iget: bad extended attribute block 268369920 [ 99.015566][ T5318] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.353: couldn't read orphan inode 15 (err -117) [ 99.049929][ T5318] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.408475][ T5344] [ 99.410854][ T5344] ====================================================== [ 99.417865][ T5344] WARNING: possible circular locking dependency detected [ 99.424889][ T5344] syzkaller #0 Not tainted [ 99.429297][ T5344] ------------------------------------------------------ [ 99.436305][ T5344] syz.3.359/5344 is trying to acquire lock: [ 99.442192][ T5344] ffff888064020f98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 99.452637][ T5344] [ 99.452637][ T5344] but task is already holding lock: [ 99.459996][ T5344] ffff8880640213f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1020 [ 99.469314][ T5344] [ 99.469314][ T5344] which lock already depends on the new lock. [ 99.469314][ T5344] [ 99.479715][ T5344] [ 99.479715][ T5344] the existing dependency chain (in reverse order) is: [ 99.488734][ T5344] [ 99.488734][ T5344] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 99.496371][ T5344] __mutex_lock_common+0x1e5/0x2400 [ 99.502080][ T5344] mutex_lock_nested+0x17/0x20 [ 99.507344][ T5344] hci_dev_do_close+0x5f/0x1020 [ 99.512693][ T5344] hci_rfkill_set_block+0x101/0x180 [ 99.518393][ T5344] rfkill_set_block+0x1c1/0x3c0 [ 99.523748][ T5344] rfkill_fop_write+0x453/0x560 [ 99.529094][ T5344] vfs_write+0x304/0xd70 [ 99.533837][ T5344] ksys_write+0x153/0x260 [ 99.538673][ T5344] do_syscall_64+0x4c/0xa0 [ 99.543601][ T5344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.549998][ T5344] [ 99.549998][ T5344] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 99.557969][ T5344] __mutex_lock_common+0x1e5/0x2400 [ 99.563681][ T5344] mutex_lock_nested+0x17/0x20 [ 99.569033][ T5344] rfkill_register+0x2f/0x970 [ 99.574216][ T5344] hci_register_dev+0x459/0x980 [ 99.579575][ T5344] vhci_create_device+0x32e/0x5c0 [ 99.585107][ T5344] vhci_write+0x389/0x440 [ 99.589943][ T5344] vfs_write+0x748/0xd70 [ 99.594684][ T5344] ksys_write+0x153/0x260 [ 99.599513][ T5344] do_syscall_64+0x4c/0xa0 [ 99.604432][ T5344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.610824][ T5344] [ 99.610824][ T5344] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 99.618617][ T5344] __mutex_lock_common+0x1e5/0x2400 [ 99.624312][ T5344] mutex_lock_nested+0x17/0x20 [ 99.629594][ T5344] vhci_send_frame+0x88/0x100 [ 99.634775][ T5344] hci_send_frame+0x1a9/0x2e0 [ 99.639951][ T5344] hci_tx_work+0x9b5/0x16d0 [ 99.644959][ T5344] process_one_work+0x867/0xff0 [ 99.650306][ T5344] worker_thread+0xad7/0x12a0 [ 99.655480][ T5344] kthread+0x42e/0x520 [ 99.660045][ T5344] ret_from_fork+0x1f/0x30 [ 99.664963][ T5344] [ 99.664963][ T5344] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 99.674143][ T5344] __lock_acquire+0x2c66/0x7b50 [ 99.679503][ T5344] lock_acquire+0x19e/0x400 [ 99.684505][ T5344] __flush_work+0x116/0x210 [ 99.689509][ T5344] hci_dev_do_close+0x201/0x1020 [ 99.694941][ T5344] hci_rfkill_set_block+0x101/0x180 [ 99.700638][ T5344] rfkill_set_block+0x1c1/0x3c0 [ 99.705986][ T5344] rfkill_fop_write+0x453/0x560 [ 99.711331][ T5344] vfs_write+0x304/0xd70 [ 99.716069][ T5344] ksys_write+0x153/0x260 [ 99.720898][ T5344] do_syscall_64+0x4c/0xa0 [ 99.725812][ T5344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.732206][ T5344] [ 99.732206][ T5344] other info that might help us debug this: [ 99.732206][ T5344] [ 99.742407][ T5344] Chain exists of: [ 99.742407][ T5344] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 99.742407][ T5344] [ 99.757328][ T5344] Possible unsafe locking scenario: [ 99.757328][ T5344] [ 99.764754][ T5344] CPU0 CPU1 [ 99.770123][ T5344] ---- ---- [ 99.775464][ T5344] lock(&hdev->req_lock); [ 99.779856][ T5344] lock(rfkill_global_mutex); [ 99.787111][ T5344] lock(&hdev->req_lock); [ 99.794018][ T5344] lock((work_completion)(&hdev->tx_work)); [ 99.799974][ T5344] [ 99.799974][ T5344] *** DEADLOCK *** [ 99.799974][ T5344] [ 99.808180][ T5344] 2 locks held by syz.3.359/5344: [ 99.813177][ T5344] #0: ffffffff8d6d6b68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 99.823238][ T5344] #1: ffff8880640213f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1020 [ 99.832951][ T5344] [ 99.832951][ T5344] stack backtrace: [ 99.838810][ T5344] CPU: 0 PID: 5344 Comm: syz.3.359 Not tainted syzkaller #0 [ 99.846067][ T5344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.856108][ T5344] Call Trace: [ 99.859368][ T5344] [ 99.862278][ T5344] dump_stack_lvl+0x188/0x250 [ 99.866933][ T5344] ? load_image+0x410/0x410 [ 99.871410][ T5344] ? show_regs_print_info+0x20/0x20 [ 99.876586][ T5344] ? print_circular_bug+0x12b/0x1a0 [ 99.881774][ T5344] check_noncircular+0x296/0x330 [ 99.886689][ T5344] ? look_up_lock_class+0x71/0x110 [ 99.891777][ T5344] ? add_chain_block+0x9b0/0x9b0 [ 99.896690][ T5344] ? lockdep_lock+0xf1/0x1f0 [ 99.901260][ T5344] ? mark_lock+0x94/0x320 [ 99.905566][ T5344] ? _find_first_zero_bit+0xd1/0xf0 [ 99.910746][ T5344] __lock_acquire+0x2c66/0x7b50 [ 99.915576][ T5344] ? add_chain_block+0x9b0/0x9b0 [ 99.920490][ T5344] ? lockdep_unlock+0x143/0x2e0 [ 99.925320][ T5344] ? verify_lock_unused+0x140/0x140 [ 99.930494][ T5344] ? mark_lock+0x94/0x320 [ 99.934817][ T5344] ? __lock_acquire+0x1305/0x7b50 [ 99.939825][ T5344] lock_acquire+0x19e/0x400 [ 99.944312][ T5344] ? __flush_work+0xfa/0x210 [ 99.948890][ T5344] ? verify_lock_unused+0x140/0x140 [ 99.954068][ T5344] ? read_lock_is_recursive+0x10/0x10 [ 99.959439][ T5344] __flush_work+0x116/0x210 [ 99.963923][ T5344] ? __flush_work+0xfa/0x210 [ 99.968490][ T5344] ? flush_work+0x20/0x20 [ 99.972796][ T5344] ? rcu_lock_release+0x5/0x20 [ 99.977537][ T5344] ? __lock_acquire+0x7b50/0x7b50 [ 99.982542][ T5344] hci_dev_do_close+0x201/0x1020 [ 99.987465][ T5344] hci_rfkill_set_block+0x101/0x180 [ 99.992641][ T5344] ? rcu_lock_release+0x20/0x20 [ 99.997471][ T5344] rfkill_set_block+0x1c1/0x3c0 [ 100.002304][ T5344] rfkill_fop_write+0x453/0x560 [ 100.007132][ T5344] ? rfkill_fop_read+0x560/0x560 [ 100.012050][ T5344] ? common_file_perm+0x160/0x1c0 [ 100.017059][ T5344] ? fsnotify_perm+0x5d/0x560 [ 100.021725][ T5344] ? security_file_permission+0x75/0xa0 [ 100.027249][ T5344] ? rfkill_fop_read+0x560/0x560 [ 100.032165][ T5344] vfs_write+0x304/0xd70 [ 100.036394][ T5344] ? file_end_write+0x250/0x250 [ 100.041223][ T5344] ? __fget_files+0x402/0x470 [ 100.045881][ T5344] ? __fdget_pos+0x1e2/0x370 [ 100.050447][ T5344] ? ksys_write+0x70/0x260 [ 100.054841][ T5344] ksys_write+0x153/0x260 [ 100.059152][ T5344] ? __ia32_sys_read+0x80/0x80 [ 100.063895][ T5344] ? lockdep_hardirqs_on+0x94/0x140 [ 100.069087][ T5344] do_syscall_64+0x4c/0xa0 [ 100.073483][ T5344] ? clear_bhb_loop+0x30/0x80 [ 100.078148][ T5344] ? clear_bhb_loop+0x30/0x80 [ 100.082810][ T5344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.088684][ T5344] RIP: 0033:0x7ff335752159 [ 100.093168][ T5344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.112752][ T5344] RSP: 002b:00007ff3339aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 100.121149][ T5344] RAX: ffffffffffffffda RBX: 00007ff3359d9fa0 RCX: 00007ff335752159 [ 100.129099][ T5344] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 100.137055][ T5344] RBP: 00007ff3357e906b R08: 0000000000000000 R09: 0000000000000000 [ 100.145032][ T5344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.152982][ T5344] R13: 00007ff3359da038 R14: 00007ff3359d9fa0 R15: 00007ffc2b6043c8 [ 100.160957][ T5344] [ 100.186140][ T5297] rdma_rxe: rxe_register_device failed with error -19 [ 100.220691][ T5297] rdma_rxe: failed to add syz_tun [ 100.221089][ T5356] device syzkaller0 entered promiscuous mode [ 100.260045][ T4791] rtl8150 5-1:1.0: couldn't reset the device [ 100.267965][ T4791] rtl8150: probe of 5-1:1.0 failed with error -5 [ 100.288853][ T4791] usb 5-1: USB disconnect, device number 2