last executing test programs: 2m5.112060133s ago: executing program 32 (id=146): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004e80)={0x2020}, 0x2020) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800100, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 1m54.314522667s ago: executing program 33 (id=225): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30, 0x40000}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0x101, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 1m48.45469043s ago: executing program 34 (id=263): syz_ublk_setup_io_uring(0x40000020, &(0x7f0000000340)={0x0, 0x0, 0x20, 0x0, 0x1e5}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000e80)={[0x9, 0xfffffffffffffffe, 0x2e, 0xa4e, 0x8, 0xffff, 0x1001, 0x7, 0x6, 0xf, 0x10, 0xfb9, 0x100, 0x1, 0x7c8, 0x9], 0xa000, 0x140200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x3, 0x8, 0x0, 0x200, 0x9, 0x4, 0x5, 0x1, 0x2, 0x4, 0x7, 0x0, 0x1, 0x101, 0x20, 0xa, 0x2, 0x4, '\x00', 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m42.528321385s ago: executing program 1 (id=296): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x3800000000000, 0x44233, 0x9, 0x80, 0x941, 0x8001, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0x5000, 0x84340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m41.187938848s ago: executing program 1 (id=303): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x80800) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1m40.70031928s ago: executing program 4 (id=305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) landlock_restrict_self(0xffffffffffffffff, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) 1m40.473182185s ago: executing program 4 (id=307): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 1m40.248315461s ago: executing program 4 (id=309): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x840) 1m40.211910062s ago: executing program 1 (id=310): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfe, {0x2, 0x20, 0x7b, 0xfd, r3}, [@IFA_LOCAL={0x8, 0x2, @empty}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}, @IFA_FLAGS={0x8, 0x8, 0x8}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x105}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1m40.076340155s ago: executing program 4 (id=313): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r0, &(0x7f0000006d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005d40)=""/4096, 0x1000}, 0x800}], 0x1, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 1m40.014682336s ago: executing program 1 (id=314): socket$packet(0x11, 0x3, 0x300) r0 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m39.84425642s ago: executing program 4 (id=316): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='mnt/encrypted_dir/file\x00', 0x42, 0x180) write(r2, &(0x7f0000000740)='foo', 0x3) 1m38.849311025s ago: executing program 4 (id=317): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-4 -4.1 -4.2 +3\n', 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='udp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) 1m38.848600735s ago: executing program 1 (id=327): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendto$inet6(r0, &(0x7f0000000000)="e1", 0x1, 0x20000000, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000540)="5c9e8f57cc9a", 0x6}], 0x1}}], 0x1, 0x0) 1m38.669812509s ago: executing program 1 (id=319): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1', 0x1) close(r1) close(0xffffffffffffffff) 1m30.728082463s ago: executing program 7 (id=364): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_to_bond\x00', &(0x7f0000000080)=@ethtool_modinfo={0x1d, 0x2, 0x7}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) 1m30.48044704s ago: executing program 7 (id=367): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d05000002000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0xf9, 0x1224, &(0x7f0000000600)="$eJzs289rHGUYB/Bn17T5UZONWqvtQV/wIh6WJgdPXoKkIFlQaiO0gjA1E10y7pbMElgRqyev/hni2Zvg1VMu/g3ecumxB3EkM6ZJ2mitmKzo53OZh3mf77wzEALv8r57b3z9ydZm2d3MRtFutaJ9JyLdT5GiHQdeWmuuN2+trfR6q9dTurZyY+n1lNLCyz+8/9l0RFx477uF76djd/GDvXvLP+9e2r289+uNj/tl6pdpMBylLN0eDkfZ7WIhbfTLrW5K7xR5VuapPyjz7SPjedp8LSLGKRtszM/d2c7LMmWDcdrKx2k0TKPtcco+yvqD1O120/xc8IfOPb5l/dv7VVVFVNW5OB9VVVWzMRcX4umYj4X4IiKeiWfjubgYz8eleCFejMt111m8PgAAAAAAAAAAAAAAAAAAAPx//Nn5/06cd/4fAAAAAAAAAAAAAAAAAAAAzsC7N2+trfR6q9dTmokovtpZ31lvrhExG7G431REHlejE79Effq/0dTX3uqtXk21xfiyuPt7/u7O+lP181cO8kvR2X9Yk52qxw7yS00+Hc9Px9x+fjP6dX45OnHx5PmXT8zPxKuvHMl3oxM/fRjDKGKjnvsw//lSSm++3Xsof6XuAwAAgP+CbnrgxPV7t2mYenS8yT9YXz/+94GH1tdTcWVqst9ORDn+dCtrF/l2XRQHxcwjd06viDOc658tIu5VdTF9fKh9SpO2Y+KffKRo/TteQ/H3ix+/ObwzG8d7Jv2fibNw+Pcw6TcBAAAAAAAAAADgSTzxnsHZv7hdt2o1ExzdWdaa3HcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/sQPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCpAAAA//9A78Mg") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x98) inotify_add_watch(0xffffffffffffffff, 0x0, 0x47000a60) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000000c0)) 1m29.24409772s ago: executing program 7 (id=376): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@abort}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(0x0, &(0x7f0000000500)='./file1\x00', 0x0, 0x1000840, 0x0) open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x2, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c000020c00200", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c20ff50c07ff2e50d000f000000000000000000004000", [0x0, 0x6]}) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 1m28.061528899s ago: executing program 7 (id=381): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x4, 0x3, 0x3, {0xa, 0x4e21, 0x101, @private0, 0x6}}}, 0x3a) 1m27.930899891s ago: executing program 6 (id=382): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x102, 0x20) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x2c, 0x0, &(0x7f00000013c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) 1m27.340347366s ago: executing program 6 (id=383): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000240)={r2, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x40}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x1, 0xa2, 0xa, 0x7f, 0x4, 0xfd, 0xfb, 0x5, 0xdc, 0xff, 0x9, 0x10, 0x10, 0x6}, 0xe) 1m27.223928559s ago: executing program 6 (id=384): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 1m26.905459287s ago: executing program 7 (id=386): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x1, 0x3, 0xf3b, 0x2, 0x13fffffc}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 1m26.541879285s ago: executing program 35 (id=386): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x1, 0x3, 0xf3b, 0x2, 0x13fffffc}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 1m26.156064135s ago: executing program 6 (id=390): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', 0x200008, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYRESOCT, @ANYRESOCT=0x0], 0x1, 0x39d, &(0x7f00000013c0)="$eJzs3T1vW9UbAPAnbvPW/79xBoQECHHUjcVKwhdohFoJEQkUalQ6IG6JU6y4cWRbQa4QZEBi5RuwV4xsSIgvkAF2NrYsjB2qGvkttVOnrzGXit9Pis5jn+e5OceWr85y9Rxd//72znaztJ21onA5RSEiCvcilntR38xgLPTiuRh1EG8Xr//x5kef3Hh/fWPjymZKV9evvbOWUlp665cvv/rx0q+t/33809LP83G4/OnRX2t/Hr56+NrRg2tfVJup2ky79VbK0s16vZXdrFXSVrW5U0rpw1ola1ZSdbdZaYzNb9fqe3vtlO1uXbyw16g0mynbbaedSju16qnVaKfsVlbdTaVSKV28EDxJ+e7mZrbejxcek3f5n1oQU9BorGfd3/D8IzPlu7ksCADI1XOf/w/6w9xTnf9vFEbO/wtx6vl/Npz/z8Ts06WNnv+f+yL8y3XP/3OD3+84538AAAAAAAAAAAAAAHgZ3Ot0ip1OpzgcO8OHhAevc14eU/bI93/ibyR1JsdlMiUjD+4tRNS+2y/vl/tjf359O6pRi0qsRDHud28LQ/346nsbV1ZSz3JcvP1Nr/7SbxHlc+P1q1GM5cn1q/36dFwf3XE2LozWr8Vn8crk+rWJ9XOx8sNIfSmK8fvnUY9abPVubw/rv15N6d0PNk7Uz/fyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhvKKWhN6Lf936/HLEY+4P+/aWHCcvj/fH79cf99VeiGPcn9+dfmdif/3y8fj7fvQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAULN9Zyer1SqNsw0WT50a9vzvvTM3DE6/4Ew//eDE1GKMJ88/6TovGBSeqWpxsMkJUw86nU4vuPXtmS91YTp7n0YwGxGPyekMPsAX/1//j4jRd86N58xHxFR3utQNCvl/4M8c5HE3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHwdN/3uvpjJezUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkpdm+s5PVapXGFIO89wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAy+TsAAP//6DcLSg==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) fallocate(r1, 0x0, 0x2, 0x8ffff) 1m25.791446514s ago: executing program 6 (id=392): setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in=@empty, 0x4e21, 0x1, 0x4e22, 0x800, 0xa, 0x90, 0xa0}, {0xa459, 0x5b, 0x5, 0x1, 0x3, 0x0, 0x100000000, 0x8}, {0x5, 0x8000000000000000, 0x0, 0x2}, 0x5c03, 0x6e6bbf, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast1, 0x4d4, 0x33}, 0x8, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x3, 0x0, 0x8, 0x2, 0x1, 0xf4e}}, 0xe8) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m25.346105515s ago: executing program 6 (id=395): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FE_DISEQC_SEND_MASTER_CMD(0xffffffffffffffff, 0x40076f3f, &(0x7f0000000040)={"3d31d48e4a11", 0x6}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0004"]) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000040)=ANY=[@ANYRES8]) 1m24.990192194s ago: executing program 36 (id=395): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FE_DISEQC_SEND_MASTER_CMD(0xffffffffffffffff, 0x40076f3f, &(0x7f0000000040)={"3d31d48e4a11", 0x6}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0004"]) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000040)=ANY=[@ANYRES8]) 1m23.376098163s ago: executing program 37 (id=319): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1', 0x1) close(r1) close(0xffffffffffffffff) 1m23.291021615s ago: executing program 38 (id=317): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-4 -4.1 -4.2 +3\n', 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='udp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) 1m14.721973025s ago: executing program 8 (id=387): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001100)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r0, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) close(0x3) 1m14.48560725s ago: executing program 8 (id=411): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x7fffffff}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x7, 0x197, 0x4, 0x4, 0x0, 0x2}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xa09e88ab5b3a8c48}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 1m13.968667373s ago: executing program 8 (id=412): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) set_mempolicy(0x3, &(0x7f0000000080)=0x1ff, 0x5) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000580)=0x1) 1m12.288424914s ago: executing program 8 (id=416): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x801, @empty}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='3\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) 56.827705742s ago: executing program 39 (id=416): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x801, @empty}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='3\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) 44.715390338s ago: executing program 2 (id=562): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9006}, 0x4) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000a52000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="67f2e00d64360fae8197530f00cf64f75dd72e3edb3b0f38f173882e64640f01c5baf80c66b866878a8566efbafc0ced0fc72ff30fc7b30000", 0x39}], 0xaaaaaaaaaaaad33, 0x58, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 44.400344895s ago: executing program 2 (id=563): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c92012000e00050014010a0023004000000500"], 0x17) nanosleep(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='connect 11:aa:aa:aa:aa:aa 1', 0x1b) 43.767871381s ago: executing program 2 (id=569): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(r1, &(0x7f00000002c0)='./file1\x00', 0x4c) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 43.624319164s ago: executing program 2 (id=571): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x18}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000d67000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000001000)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000002000)={0x3, 0x0, [{0x40000083, 0x0, 0x1001}, {0x400000b0, 0x0, 0x10001}, {0x400000b1, 0x0, 0x1}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 42.346471536s ago: executing program 2 (id=585): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x40) write(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) 41.966551815s ago: executing program 2 (id=589): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) 26.827457195s ago: executing program 40 (id=589): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) 21.061987145s ago: executing program 9 (id=723): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14300, 0x4240a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 19.052111505s ago: executing program 9 (id=733): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1\n\x00', 0x2) close(r1) 15.267365287s ago: executing program 9 (id=755): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) 13.604206018s ago: executing program 9 (id=763): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 10.823571826s ago: executing program 3 (id=773): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x44) 10.67794995s ago: executing program 3 (id=774): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x24000010) 10.496301923s ago: executing program 3 (id=777): r0 = socket$unix(0x1, 0x2, 0x0) unshare(0x2040400) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x2d, 0x20040040) dup3(r1, r2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 10.383830877s ago: executing program 3 (id=778): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) chdir(&(0x7f00000000c0)='./sys\x00') mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x33ed0000) r2 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) 10.25116074s ago: executing program 3 (id=779): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20080, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000000000006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b70000"], 0x2c}}, 0x0) 10.150531462s ago: executing program 7 (id=692): mount(0x0, 0x0, &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000100)='efivarfs\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 9.783742801s ago: executing program 9 (id=783): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r0, &(0x7f0000005600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/75, 0x4b}, 0x10001}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 9.729802923s ago: executing program 3 (id=784): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='freezer\n', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='freeze\n', 0x7) close(r1) 9.615238205s ago: executing program 9 (id=786): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x8, 0x5, 0x5e12, 0x20, 0x13, 0x8000000000007, 0x106c, 0x9, 0x8000000000000, 0x8000000400007f, 0x0, 0x6, 0x0, 0x204, 0x0, 0x8001], 0xeeee0000, 0x2c0290}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000280)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.721473786s ago: executing program 5 (id=790): socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) sendmsg$unix(0xffffffffffffffff, 0x0, 0x11) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800500150002000000080012400000000414000300686173683a69702c706f72742c697000050005000200000005000400050000000900020073797a31000000000500010007"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 5.927841175s ago: executing program 0 (id=791): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) r3 = io_uring_setup(0x4a86, &(0x7f0000000a00)={0x0, 0x4178, 0x40, 0x8001002, 0x112}) close_range(r3, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 4.971031849s ago: executing program 5 (id=792): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000000)={'lo\x00', @ifru_mtu=0x500}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x13c, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha1)\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in6=@loopback, 0x0, 0x1}]}]}, 0xfc}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000800)='A', 0x9c4, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 4.965468119s ago: executing program 0 (id=793): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c000380"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 3.857689936s ago: executing program 5 (id=794): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$null(0xffffff9c, &(0x7f00000000c0), 0x121002, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000002540)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd84f, 0x80000, 0x2004, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x435be, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7dc, 0x40, 0xffffffff, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4000000, 0x8200, 0x2, 0x4c}}], 0x1, &(0x7f0000000340)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xdc1, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 3.840755766s ago: executing program 0 (id=795): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) timer_delete(r0) ppoll(&(0x7f0000000100)=[{r1, 0x412}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.706481284s ago: executing program 0 (id=796): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20080, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000000000006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b70000"], 0x2c}}, 0x0) 2.706219814s ago: executing program 5 (id=797): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delchain={0x44, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfffe}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) 1.450408045s ago: executing program 5 (id=798): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1008055, &(0x7f0000000600)=ANY=[], 0x5, 0x559a, &(0x7f0000001480)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1.449789895s ago: executing program 0 (id=799): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xa, &(0x7f0000000300)=@raw=[@generic={0x7b, 0xa, 0x1, 0xfff8}, @generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0x3e}, @generic={0x79, 0x1, 0xa, 0xfff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xbf, 0x3, 0x2}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3f}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r1, r2, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r1, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20) sendto(r0, &(0x7f0000000700)="01", 0x1, 0x0, 0x0, 0x0) 6.09483ms ago: executing program 5 (id=800): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 0s ago: executing program 0 (id=801): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r3, 0x1) kernel console output (not intermixed with test programs): blocking state [ 131.356257][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.365441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.374479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.383482][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.390693][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.404038][ T5833] team0: Port device team_slave_0 added [ 131.426607][ T5856] team0: Port device team_slave_1 added [ 131.435617][ T5852] team0: Port device team_slave_1 added [ 131.537095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.556622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.569825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.591833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 131.613362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 131.631345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 131.643969][ T5833] team0: Port device team_slave_1 added [ 131.736951][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.749744][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.781899][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.797815][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.806685][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.840677][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.854542][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 131.863838][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 131.872866][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.879963][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.906323][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.925972][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.935761][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.962542][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.980622][ T49] Bluetooth: hci2: command 0x040f tx timeout [ 132.000962][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.007966][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.038488][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.052776][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.061372][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.088429][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.171388][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.185093][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.195404][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.204467][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.223797][ T5856] device hsr_slave_0 entered promiscuous mode [ 132.232380][ T5856] device hsr_slave_1 entered promiscuous mode [ 132.238951][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.246677][ T5856] Cannot create hsr debugfs directory [ 132.306130][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.327516][ T5852] device hsr_slave_0 entered promiscuous mode [ 132.335244][ T5852] device hsr_slave_1 entered promiscuous mode [ 132.342193][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.349762][ T5852] Cannot create hsr debugfs directory [ 132.359149][ T5833] device hsr_slave_0 entered promiscuous mode [ 132.368761][ T5833] device hsr_slave_1 entered promiscuous mode [ 132.377107][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.385237][ T5833] Cannot create hsr debugfs directory [ 132.703616][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.709963][ T49] Bluetooth: hci5: command 0x041b tx timeout [ 132.716108][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.860326][ T49] Bluetooth: hci6: command 0x041b tx timeout [ 133.149526][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.192801][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.231080][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.342751][ T49] Bluetooth: hci1: command 0x040f tx timeout [ 133.482792][ T5856] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.575581][ T47] device hsr_slave_0 left promiscuous mode [ 133.613236][ T47] device hsr_slave_1 left promiscuous mode [ 133.622368][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.629827][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.638475][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.656490][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.688968][ T47] device bridge_slave_1 left promiscuous mode [ 133.709541][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.719074][ T47] device bridge_slave_0 left promiscuous mode [ 133.730127][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.774120][ T47] device veth1_macvtap left promiscuous mode [ 133.780484][ T47] device veth0_macvtap left promiscuous mode [ 133.786604][ T47] device veth1_vlan left promiscuous mode [ 133.792929][ T47] device veth0_vlan left promiscuous mode [ 134.070450][ T49] Bluetooth: hci2: command 0x0419 tx timeout [ 134.548008][ T47] team0 (unregistering): Port device team_slave_1 removed [ 134.588826][ T47] team0 (unregistering): Port device team_slave_0 removed [ 134.627119][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.672452][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.784324][ T49] Bluetooth: hci5: command 0x040f tx timeout [ 134.945468][ T49] Bluetooth: hci6: command 0x040f tx timeout [ 134.982643][ T47] bond0 (unregistering): Released all slaves [ 135.106609][ T5856] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.201880][ T5856] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.300598][ T5856] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.358432][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.374801][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.419974][ T5805] device veth0_vlan entered promiscuous mode [ 135.426504][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 135.463639][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.477983][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.656730][ T5805] device veth1_vlan entered promiscuous mode [ 135.675137][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.689827][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.717344][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 135.869986][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 135.890968][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.901421][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.912365][ T5805] device veth0_macvtap entered promiscuous mode [ 136.021700][ T5805] device veth1_macvtap entered promiscuous mode [ 136.047945][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.059443][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.078036][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.088546][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.098716][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.109229][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.123972][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.188952][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.197306][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.205453][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.215347][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.230555][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.242522][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.253796][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.264852][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.274883][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.285412][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.296461][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.307228][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.327555][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.340763][ T5805] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.349514][ T5805] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.359190][ T5805] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.368666][ T5805] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.527642][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 136.570768][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.578635][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.586348][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 136.614213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.629501][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 136.653296][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.653331][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 136.676421][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.700341][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 136.803074][ T5833] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 136.830562][ T5833] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 136.847295][ T5998] CIFS: Attempting to mount \\127.0.0.1\share [ 136.861486][ T49] Bluetooth: hci5: command 0x0419 tx timeout [ 136.877608][ T5833] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 136.887039][ T5833] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 136.941426][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 136.976046][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.988762][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 137.008100][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 137.020558][ T49] Bluetooth: hci6: command 0x0419 tx timeout [ 137.034003][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 137.098626][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.110716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.122122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.135055][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.153758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.166441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.177805][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.184929][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.195809][ T6004] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 137.239687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.255274][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.269607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.289981][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.297368][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.313506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.327588][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.348433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.382797][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.389673][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.398669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.412403][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.423158][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.433154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.457575][ T5852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.475225][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.497257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.507788][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.516578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.526731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.538050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.557826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.590793][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.613878][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.632853][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.640027][ T4303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.656640][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.674787][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.689623][ T5998] CIFS: VFS: Error connecting to socket. Aborting operation. [ 137.700979][ T5998] CIFS: VFS: cifs_mount failed w/return code = -4 [ 137.708638][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.720082][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.727236][ T4343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.758032][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.802500][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.819681][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.845616][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.865566][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.911116][ T4316] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 137.924315][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.948055][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.967609][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.991599][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.019521][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.031408][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.040607][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.049192][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.072169][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.081299][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.093517][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.122503][ T4316] usb 9-1: config 0 has no interfaces? [ 138.128419][ T4316] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 138.152592][ T4316] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.162056][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.184246][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.190868][ T4316] usb 9-1: config 0 descriptor?? [ 138.213356][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.220551][ T4303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.251215][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.264415][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.291123][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.298316][ T4303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.330775][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.349922][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.389962][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.435263][ T4317] usb 9-1: USB disconnect, device number 2 [ 138.450967][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.462754][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.491870][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.503278][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.523198][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.541361][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.579719][ T5856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.632529][ T5856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.658381][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.675983][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.686674][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.706829][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.736302][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.766329][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.852190][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.871590][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.941715][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.957310][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.981120][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.009020][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.033995][ T5852] device veth0_vlan entered promiscuous mode [ 139.073255][ T5852] device veth1_vlan entered promiscuous mode [ 139.171537][ T5852] device veth0_macvtap entered promiscuous mode [ 139.190582][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.198794][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 139.208475][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.218223][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.231274][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.261509][ T5852] device veth1_macvtap entered promiscuous mode [ 139.276862][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.303085][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.331440][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.339006][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.391210][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.413362][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.425288][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.438473][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.459485][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.481495][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.502903][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.545369][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.569970][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.580865][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.589633][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.631086][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.658418][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.679095][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.698617][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.717819][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.729809][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.756160][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.784747][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.805834][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.819388][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.829500][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.840813][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.849395][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.862201][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.882708][ T5852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.900614][ T5852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.916257][ T5852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.933196][ T5852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.009699][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.023471][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.089229][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.099704][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.118962][ T5856] device veth0_vlan entered promiscuous mode [ 140.133260][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.154952][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.166926][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.176227][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.203332][ T5856] device veth1_vlan entered promiscuous mode [ 140.236606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.245811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.256587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.264996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.276086][ T5833] device veth0_vlan entered promiscuous mode [ 140.282333][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.298876][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.310925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.322375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.330458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.345901][ T5856] device veth0_macvtap entered promiscuous mode [ 140.364755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.373600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.384860][ T5833] device veth1_vlan entered promiscuous mode [ 140.398363][ T5856] device veth1_macvtap entered promiscuous mode [ 140.408573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.418410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.427073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.438049][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.471507][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.482782][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.490153][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.499965][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.512230][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.525286][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.535835][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.547580][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.558761][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.568646][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.579143][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.591825][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.605585][ T5833] device veth0_macvtap entered promiscuous mode [ 140.613837][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.623770][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.632469][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.641929][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.653069][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.662953][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.676886][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.690868][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.703414][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.714203][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.724525][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.735431][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.745601][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.756298][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.767771][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.778749][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.793628][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.823326][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.837655][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.855150][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.866937][ T5833] device veth1_macvtap entered promiscuous mode [ 140.887511][ T5856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.892010][ T6050] loop0: detected capacity change from 0 to 2048 [ 140.918119][ T5856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.927281][ T5856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.939891][ T5856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.979366][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.015768][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.027210][ T6050] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 141.048618][ T6050] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.062160][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.077247][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.087590][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.098392][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.120471][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.131627][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.141834][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.152481][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.162646][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.174035][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.190856][ T5852] EXT4-fs (loop0): unmounting filesystem. [ 141.208118][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.247905][ T6057] netlink: 'syz.5.421': attribute type 1 has an invalid length. [ 141.286765][ T6057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.321792][ T6058] bond2: (slave veth0_to_bond): making interface the new active one [ 141.338611][ T6058] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 141.349629][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.363268][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.373171][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 141.389523][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.401175][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.412805][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.424158][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.434389][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.445164][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.455317][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.466098][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.476627][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.488707][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.498967][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.510602][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.523225][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.549515][ T6059] device bond2 entered promiscuous mode [ 141.556016][ T6059] device veth0_to_bond entered promiscuous mode [ 141.591541][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.619780][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.659809][ T5833] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.691415][ T5833] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.705883][ T5833] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.716003][ T5833] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.750156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 141.884293][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.901313][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.917852][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.943828][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.964354][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.003145][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.005390][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.029304][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.051932][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.055831][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.072736][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.088181][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.384683][ T6078] loop9: detected capacity change from 0 to 2048 [ 142.534166][ T6082] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.616495][ T6088] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 143.339884][ T6110] loop0: detected capacity change from 0 to 164 [ 143.536178][ T6113] netlink: 20 bytes leftover after parsing attributes in process `syz.9.429'. [ 143.611472][ T6113] netlink: 48 bytes leftover after parsing attributes in process `syz.9.429'. [ 143.654135][ T6118] netlink: 20 bytes leftover after parsing attributes in process `syz.9.429'. [ 143.696366][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.9.429'. [ 143.732409][ T6113] netlink: 20 bytes leftover after parsing attributes in process `syz.9.429'. [ 143.987883][ T6126] loop9: detected capacity change from 0 to 2048 [ 144.046940][ T6126] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 144.069645][ T6126] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.293814][ T5833] EXT4-fs (loop9): unmounting filesystem. [ 144.329918][ T6138] loop5: detected capacity change from 0 to 16 [ 144.404296][ T6138] erofs: (device loop5): mounted with root inode @ nid 36. [ 144.407661][ T6140] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 144.600754][ T6140] device dummy0 entered promiscuous mode [ 145.011833][ T6148] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 145.056644][ T6163] netlink: 'syz.2.451': attribute type 1 has an invalid length. [ 145.120845][ T6163] device vxcan0 entered promiscuous mode [ 145.319982][ T6170] loop5: detected capacity change from 0 to 128 [ 145.369752][ T6173] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 145.387273][ T6170] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 145.766108][ T6171] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input7 [ 145.888886][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.305268][ T6207] loop2: detected capacity change from 0 to 256 [ 146.376344][ T6207] FAT-fs (loop2): Directory bread(block 64) failed [ 146.419572][ T6207] FAT-fs (loop2): Directory bread(block 65) failed [ 146.440491][ T6207] FAT-fs (loop2): Directory bread(block 66) failed [ 146.454983][ T6207] FAT-fs (loop2): Directory bread(block 67) failed [ 146.476645][ T6207] FAT-fs (loop2): Directory bread(block 68) failed [ 146.497027][ T6207] FAT-fs (loop2): Directory bread(block 69) failed [ 146.534956][ T6207] FAT-fs (loop2): Directory bread(block 70) failed [ 146.564533][ T6207] FAT-fs (loop2): Directory bread(block 71) failed [ 146.600474][ T6207] FAT-fs (loop2): Directory bread(block 72) failed [ 146.627469][ T6207] FAT-fs (loop2): Directory bread(block 73) failed [ 147.035500][ T6218] FAULT_INJECTION: forcing a failure. [ 147.035500][ T6218] name failslab, interval 1, probability 0, space 0, times 0 [ 147.076873][ T6218] CPU: 0 PID: 6218 Comm: syz.0.455 Not tainted syzkaller #0 [ 147.084231][ T6218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 147.094314][ T6218] Call Trace: [ 147.097614][ T6218] [ 147.100561][ T6218] dump_stack_lvl+0x188/0x24e [ 147.105272][ T6218] ? show_regs_print_info+0x12/0x12 [ 147.110507][ T6218] ? load_image+0x410/0x410 [ 147.115046][ T6218] ? __might_sleep+0xd0/0xd0 [ 147.119666][ T6218] ? __lock_acquire+0x7ea0/0x7ea0 [ 147.124716][ T6218] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.130811][ T6218] should_fail_ex+0x390/0x4c0 [ 147.135518][ T6218] should_failslab+0x5/0x20 [ 147.140042][ T6218] slab_pre_alloc_hook+0x59/0x300 [ 147.145180][ T6218] ? nfs_alloc_server+0x4a/0x480 [ 147.150143][ T6218] __kmem_cache_alloc_node+0x4f/0x270 [ 147.155544][ T6218] ? nfs_alloc_server+0x4a/0x480 [ 147.160496][ T6218] kmalloc_trace+0x26/0xe0 [ 147.164929][ T6218] nfs_alloc_server+0x4a/0x480 [ 147.169725][ T6218] nfs4_create_server+0xa1/0x10c0 [ 147.174775][ T6218] ? __rwlock_init+0x140/0x140 [ 147.179565][ T6218] ? nfs4_set_ds_client+0x490/0x490 [ 147.184805][ T6218] ? get_nfs_version+0x1e7/0x200 [ 147.189765][ T6218] ? nfs_get_tree+0x10b6/0x1520 [ 147.194637][ T6218] nfs4_try_get_tree+0x45/0x110 [ 147.199505][ T6218] vfs_get_tree+0x88/0x270 [ 147.203941][ T6218] do_new_mount+0x247/0xa40 [ 147.208467][ T6218] __se_sys_mount+0x2e3/0x3d0 [ 147.213168][ T6218] ? __x64_sys_mount+0xc0/0xc0 [ 147.217959][ T6218] ? lockdep_hardirqs_on+0x94/0x140 [ 147.223189][ T6218] ? __x64_sys_mount+0x1c/0xc0 [ 147.227974][ T6218] do_syscall_64+0x4c/0xa0 [ 147.232414][ T6218] ? clear_bhb_loop+0x60/0xb0 [ 147.237128][ T6218] ? clear_bhb_loop+0x60/0xb0 [ 147.241839][ T6218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.247763][ T6218] RIP: 0033:0x7ff03279e199 [ 147.252206][ T6218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.271841][ T6218] RSP: 002b:00007ff0335a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 147.280282][ T6218] RAX: ffffffffffffffda RBX: 00007ff032a25fa0 RCX: 00007ff03279e199 [ 147.288280][ T6218] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 147.296292][ T6218] RBP: 00007ff0328350b8 R08: 0000200000000140 R09: 0000000000000000 [ 147.304292][ T6218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.312284][ T6218] R13: 00007ff032a26038 R14: 00007ff032a25fa0 R15: 00007ffdf6c0c6d8 [ 147.320297][ T6218] [ 147.351092][ T6217] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 147.509972][ T6226] netlink: 'syz.2.458': attribute type 27 has an invalid length. [ 148.000120][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.007638][ T6226] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.198791][ T6226] device vxcan0 left promiscuous mode [ 148.783796][ T6226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.842208][ T6226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.363682][ T6226] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.378390][ T6226] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.387884][ T6226] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.397312][ T6226] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.597370][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.932069][ T6296] loop0: detected capacity change from 0 to 1024 [ 155.390232][ T49] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.402950][ T49] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.425342][ T49] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.434676][ T49] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.442342][ T49] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.449711][ T49] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.797369][ T6492] chnl_net:caif_netlink_parms(): no params data found [ 155.998633][ T6521] netlink: 'syz.5.478': attribute type 4 has an invalid length. [ 156.091768][ T6492] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.112890][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.132507][ T6492] device bridge_slave_0 entered promiscuous mode [ 156.159976][ T6526] netlink: 'syz.5.478': attribute type 4 has an invalid length. [ 156.201312][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.208494][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.240923][ T6492] device bridge_slave_1 entered promiscuous mode [ 156.371536][ T6492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.461430][ T6492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.584944][ T6492] team0: Port device team_slave_0 added [ 156.630897][ T6492] team0: Port device team_slave_1 added [ 156.777241][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.787059][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.909117][ T6492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.954756][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.009012][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.085200][ T6492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.248858][ T6492] device hsr_slave_0 entered promiscuous mode [ 157.291164][ T6492] device hsr_slave_1 entered promiscuous mode [ 157.313791][ T6492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.340395][ T6492] Cannot create hsr debugfs directory [ 157.497404][ T6564] netlink: 64 bytes leftover after parsing attributes in process `syz.5.496'. [ 157.509550][ T4282] Bluetooth: hci7: command 0x0409 tx timeout [ 157.833787][ T6572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.501'. [ 158.037412][ T6581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.503'. [ 158.054008][ T6581] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.097237][ T6581] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.123085][ T6581] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.134670][ T6568] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input8 [ 158.171999][ T6581] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.909151][ T6492] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 158.923981][ T6492] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 158.936419][ T6492] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 158.963415][ T6492] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 159.152757][ T6492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.195452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.222211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.243205][ T6492] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.256885][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.266630][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.275866][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.283099][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.303628][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.312637][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.321993][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.331510][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.338624][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.357906][ T4282] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 159.366681][ T4282] Bluetooth: hci4: Injecting HCI hardware error event [ 159.379645][ T49] Bluetooth: hci4: hardware error 0x00 [ 159.431560][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.473807][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.507065][ T6616] loop0: detected capacity change from 0 to 256 [ 159.521275][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.531291][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.541322][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.551070][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.563741][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.593801][ T4282] Bluetooth: hci7: command 0x041b tx timeout [ 159.599202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.673218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.703044][ T6616] FAT-fs (loop0): Directory bread(block 64) failed [ 159.721104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.750283][ T6616] FAT-fs (loop0): Directory bread(block 65) failed [ 159.757544][ T6616] FAT-fs (loop0): Directory bread(block 66) failed [ 159.769054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.800614][ T6616] FAT-fs (loop0): Directory bread(block 67) failed [ 159.807961][ T6616] FAT-fs (loop0): Directory bread(block 68) failed [ 159.822004][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.848569][ T6616] FAT-fs (loop0): Directory bread(block 69) failed [ 159.862465][ T6616] FAT-fs (loop0): Directory bread(block 70) failed [ 159.899815][ T6616] FAT-fs (loop0): Directory bread(block 71) failed [ 159.929080][ T6616] FAT-fs (loop0): Directory bread(block 72) failed [ 159.956241][ T6616] FAT-fs (loop0): Directory bread(block 73) failed [ 160.577647][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.591042][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.632900][ T6642] FAULT_INJECTION: forcing a failure. [ 160.632900][ T6642] name failslab, interval 1, probability 0, space 0, times 0 [ 160.646466][ T6492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.702787][ T6642] CPU: 0 PID: 6642 Comm: syz.0.512 Not tainted syzkaller #0 [ 160.710131][ T6642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 160.720209][ T6642] Call Trace: [ 160.723506][ T6642] [ 160.726455][ T6642] dump_stack_lvl+0x188/0x24e [ 160.731165][ T6642] ? show_regs_print_info+0x12/0x12 [ 160.736392][ T6642] ? load_image+0x410/0x410 [ 160.740939][ T6642] ? __might_sleep+0xd0/0xd0 [ 160.745561][ T6642] ? __lock_acquire+0x7ea0/0x7ea0 [ 160.750749][ T6642] should_fail_ex+0x390/0x4c0 [ 160.755489][ T6642] should_failslab+0x5/0x20 [ 160.756953][ T6492] device veth0_vlan entered promiscuous mode [ 160.759999][ T6642] slab_pre_alloc_hook+0x59/0x300 [ 160.771023][ T6642] ? lockdep_softirqs_off+0x430/0x430 [ 160.776427][ T6642] ? nvmet_fc_alloc_ls_iodlist+0x38e/0x8d0 [ 160.782273][ T6642] __kmem_cache_alloc_node+0x4f/0x270 [ 160.787681][ T6642] ? _raw_spin_unlock+0x40/0x40 [ 160.792563][ T6642] ? nvmet_fc_alloc_ls_iodlist+0x38e/0x8d0 [ 160.798405][ T6642] kmalloc_trace+0x26/0xe0 [ 160.802145][ T6492] device veth1_vlan entered promiscuous mode [ 160.802830][ T6642] nvmet_fc_alloc_ls_iodlist+0x38e/0x8d0 [ 160.814566][ T6642] nvmet_fc_register_targetport+0x761/0x9d0 [ 160.820501][ T6642] fcloop_create_target_port+0x132/0x490 [ 160.826157][ T6642] ? kernfs_fop_write_iter+0x1d8/0x520 [ 160.831642][ T6642] ? fcloop_delete_remote_port+0x360/0x360 [ 160.837480][ T6642] ? sysfs_kf_write+0x183/0x2a0 [ 160.842362][ T6642] ? sysfs_kf_read+0x350/0x350 [ 160.847152][ T6642] kernfs_fop_write_iter+0x3a0/0x520 [ 160.852467][ T6642] vfs_write+0x482/0x9a0 [ 160.856744][ T6642] ? file_end_write+0x250/0x250 [ 160.861626][ T6642] ? __fget_files+0x3fc/0x460 [ 160.866379][ T6642] ? __fdget_pos+0x2ae/0x360 [ 160.871000][ T6642] ? ksys_write+0x70/0x260 [ 160.875445][ T6642] ksys_write+0x14d/0x260 [ 160.879806][ T6642] ? __ia32_sys_read+0x80/0x80 [ 160.884594][ T6642] ? lockdep_hardirqs_on+0x94/0x140 [ 160.889799][ T6642] do_syscall_64+0x4c/0xa0 [ 160.894216][ T6642] ? clear_bhb_loop+0x60/0xb0 [ 160.898894][ T6642] ? clear_bhb_loop+0x60/0xb0 [ 160.903573][ T6642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.909483][ T6642] RIP: 0033:0x7ff03279e199 [ 160.913898][ T6642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.933505][ T6642] RSP: 002b:00007ff0335a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 160.941923][ T6642] RAX: ffffffffffffffda RBX: 00007ff032a25fa0 RCX: 00007ff03279e199 [ 160.949890][ T6642] RDX: 000000000000002f RSI: 0000200000000400 RDI: 0000000000000004 [ 160.957856][ T6642] RBP: 00007ff0328350b8 R08: 0000000000000000 R09: 0000000000000000 [ 160.965825][ T6642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.973796][ T6642] R13: 00007ff032a26038 R14: 00007ff032a25fa0 R15: 00007ffdf6c0c6d8 [ 160.981774][ T6642] [ 161.028394][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.051424][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.070761][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.108857][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.136284][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 161.155073][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 161.169018][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.187503][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.204685][ T6492] device veth0_macvtap entered promiscuous mode [ 161.225704][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.253747][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.281281][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.310524][ T6492] device veth1_macvtap entered promiscuous mode [ 161.374954][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.400305][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.417988][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.427149][ T6660] fuse: Bad value for 'fd' [ 161.440730][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.462208][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.483806][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.502715][ T49] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 161.507665][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.530197][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.540067][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.602529][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.647861][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.660799][ T49] Bluetooth: hci7: command 0x040f tx timeout [ 161.673716][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.702632][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.715792][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.740814][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.787761][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.820721][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.850229][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.884566][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.925588][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.971051][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.994301][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.016067][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.032654][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.049724][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.064638][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.076347][ T6680] loop2: detected capacity change from 0 to 128 [ 162.083146][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.103609][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.127588][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 162.129687][ T6680] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 162.148394][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 162.195149][ T6492] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.229816][ T6492] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.256012][ T6492] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.290269][ T6492] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.369746][ T6686] netlink: 12 bytes leftover after parsing attributes in process `syz.9.525'. [ 162.483750][ T6689] netlink: 'syz.2.526': attribute type 4 has an invalid length. [ 162.524845][ T6689] netlink: 'syz.2.526': attribute type 4 has an invalid length. [ 162.590312][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.648896][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.683199][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.752408][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.765575][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.808999][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 163.030215][ T4354] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 163.127308][ T6713] 9pnet: p9_errstr2errno: server reported unknown error @cÿÿÿÿÿÿÿÿ [ 163.145065][ T6684] loop0: detected capacity change from 0 to 32768 [ 163.222210][ T4354] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 163.246192][ T4354] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 163.258350][ T6684] XFS (loop0): Mounting V5 Filesystem [ 163.277617][ T4354] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 163.303907][ T4354] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 163.322271][ T4354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.346286][ T6684] XFS (loop0): Ending clean mount [ 163.363174][ T6695] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.384996][ T6695] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.416631][ T4354] pl2303 3-1:1.0: pl2303 converter detected [ 163.444466][ T4354] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 163.740699][ T49] Bluetooth: hci7: command 0x0419 tx timeout [ 163.760656][ T6695] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 163.805464][ T6695] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 163.860352][ T6695] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 163.893487][ T6695] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 163.927624][ T6695] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 164.270537][ T6695] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 164.299135][ T6695] pl2303 ttyUSB0: error sending break = -32 [ 164.309953][ T5852] XFS (loop0): Unmounting Filesystem [ 164.431924][ T4354] usb 3-1: USB disconnect, device number 2 [ 164.451907][ T4354] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 164.482497][ T4354] pl2303 3-1:1.0: device disconnected [ 164.509032][ T6751] net_ratelimit: 11 callbacks suppressed [ 164.509049][ T6751] sock: sock_set_timeout: `syz.5.536' (pid 6751) tries to set negative timeout [ 164.675820][ T6753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.537'. [ 166.773552][ T6838] loop0: detected capacity change from 0 to 512 [ 167.148336][ T49] Bluetooth: Wrong link type (-71) [ 167.855074][ T6874] syz.3.568 sent an empty control message without MSG_MORE. [ 168.688303][ T6907] FAULT_INJECTION: forcing a failure. [ 168.688303][ T6907] name failslab, interval 1, probability 0, space 0, times 0 [ 168.725452][ T6907] CPU: 0 PID: 6907 Comm: syz.0.580 Not tainted syzkaller #0 [ 168.732840][ T6907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 168.742920][ T6907] Call Trace: [ 168.746236][ T6907] [ 168.749209][ T6907] dump_stack_lvl+0x188/0x24e [ 168.753919][ T6907] ? show_regs_print_info+0x12/0x12 [ 168.759148][ T6907] ? load_image+0x410/0x410 [ 168.763686][ T6907] ? __might_sleep+0xd0/0xd0 [ 168.768299][ T6907] ? __lock_acquire+0x7ea0/0x7ea0 [ 168.773358][ T6907] should_fail_ex+0x390/0x4c0 [ 168.778078][ T6907] should_failslab+0x5/0x20 [ 168.782603][ T6907] slab_pre_alloc_hook+0x59/0x300 [ 168.787645][ T6907] kmem_cache_alloc_lru+0x49/0x2e0 [ 168.792762][ T6907] ? __d_alloc+0x2e/0x6e0 [ 168.797092][ T6907] __d_alloc+0x2e/0x6e0 [ 168.801269][ T6907] d_alloc_parallel+0xdc/0x1590 [ 168.806120][ T6907] ? __d_lookup+0x8b/0x7c0 [ 168.810534][ T6907] ? __lock_acquire+0x7ea0/0x7ea0 [ 168.815561][ T6907] ? __d_lookup+0x8b/0x7c0 [ 168.819977][ T6907] ? d_hash_and_lookup+0x1b0/0x1b0 [ 168.825105][ T6907] path_openat+0x949/0x2f10 [ 168.829661][ T6907] ? kasan_set_track+0x60/0x70 [ 168.834426][ T6907] ? verify_lock_unused+0x140/0x140 [ 168.839627][ T6907] ? do_filp_open+0x420/0x420 [ 168.844313][ T6907] do_filp_open+0x1ee/0x420 [ 168.848815][ T6907] ? vfs_tmpfile+0x470/0x470 [ 168.853412][ T6907] ? noop_direct_IO+0x10/0x10 [ 168.858088][ T6907] ? _raw_spin_unlock+0x24/0x40 [ 168.862932][ T6907] ? alloc_fd+0x590/0x640 [ 168.867266][ T6907] do_sys_openat2+0x14b/0x4f0 [ 168.871947][ T6907] ? do_sys_open+0xe0/0xe0 [ 168.876364][ T6907] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 168.882356][ T6907] ? lock_chain_count+0x20/0x20 [ 168.887217][ T6907] __x64_sys_openat+0x135/0x160 [ 168.892067][ T6907] do_syscall_64+0x4c/0xa0 [ 168.896480][ T6907] ? clear_bhb_loop+0x60/0xb0 [ 168.901151][ T6907] ? clear_bhb_loop+0x60/0xb0 [ 168.905824][ T6907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.911711][ T6907] RIP: 0033:0x7ff03275e9ce [ 168.916123][ T6907] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 168.935727][ T6907] RSP: 002b:00007ff03359fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 168.944140][ T6907] RAX: ffffffffffffffda RBX: 00007ff0335a06c0 RCX: 00007ff03275e9ce [ 168.952105][ T6907] RDX: 0000000000000002 RSI: 00007ff03359ff90 RDI: ffffffffffffff9c [ 168.960068][ T6907] RBP: 00007ff0328350b8 R08: 0000000000000000 R09: 0000000000000000 [ 168.968036][ T6907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.976002][ T6907] R13: 00007ff032a26038 R14: 00007ff032a25fa0 R15: 00007ffdf6c0c6d8 [ 168.983980][ T6907] [ 169.976790][ T6952] FAULT_INJECTION: forcing a failure. [ 169.976790][ T6952] name failslab, interval 1, probability 0, space 0, times 0 [ 169.990178][ T6952] CPU: 0 PID: 6952 Comm: syz.0.592 Not tainted syzkaller #0 [ 169.997495][ T6952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 170.007568][ T6952] Call Trace: [ 170.010872][ T6952] [ 170.013818][ T6952] dump_stack_lvl+0x188/0x24e [ 170.018533][ T6952] ? show_regs_print_info+0x12/0x12 [ 170.023748][ T6952] ? load_image+0x410/0x410 [ 170.028257][ T6952] should_fail_ex+0x390/0x4c0 [ 170.032948][ T6952] should_failslab+0x5/0x20 [ 170.037443][ T6952] slab_pre_alloc_hook+0x59/0x300 [ 170.042458][ T6952] ? netlink_table_grab+0x255/0x2e0 [ 170.047645][ T6952] ? netlink_realloc_groups+0x114/0x270 [ 170.053180][ T6952] __kmem_cache_alloc_node+0x4f/0x270 [ 170.058546][ T6952] ? netlink_realloc_groups+0x114/0x270 [ 170.064081][ T6952] __kmalloc_node_track_caller+0xa0/0x240 [ 170.069800][ T6952] krealloc+0x6a/0x100 [ 170.073885][ T6952] netlink_realloc_groups+0x114/0x270 [ 170.079255][ T6952] netlink_bind+0x2a7/0xd30 [ 170.083783][ T6952] ? netlink_release+0x19b0/0x19b0 [ 170.088889][ T6952] ? __might_fault+0xa6/0x120 [ 170.093562][ T6952] ? bpf_lsm_socket_bind+0x5/0x10 [ 170.098581][ T6952] ? security_socket_bind+0x7c/0xa0 [ 170.103779][ T6952] __sys_bind+0x2e9/0x3e0 [ 170.108101][ T6952] ? __ia32_sys_socketpair+0xb0/0xb0 [ 170.113385][ T6952] __x64_sys_bind+0x76/0x80 [ 170.117879][ T6952] do_syscall_64+0x4c/0xa0 [ 170.122287][ T6952] ? clear_bhb_loop+0x60/0xb0 [ 170.126954][ T6952] ? clear_bhb_loop+0x60/0xb0 [ 170.131641][ T6952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.137543][ T6952] RIP: 0033:0x7ff03279e199 [ 170.141950][ T6952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.161545][ T6952] RSP: 002b:00007ff0335a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 170.169951][ T6952] RAX: ffffffffffffffda RBX: 00007ff032a25fa0 RCX: 00007ff03279e199 [ 170.177935][ T6952] RDX: 000000000000000c RSI: 0000200000514ff4 RDI: 0000000000000003 [ 170.185895][ T6952] RBP: 00007ff0328350b8 R08: 0000000000000000 R09: 0000000000000000 [ 170.193859][ T6952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.201821][ T6952] R13: 00007ff032a26038 R14: 00007ff032a25fa0 R15: 00007ffdf6c0c6d8 [ 170.209800][ T6952] [ 171.192282][ T6979] loop9: detected capacity change from 0 to 512 [ 171.322491][ T6979] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 171.343370][ T6979] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.431887][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.599'. [ 171.470958][ T6990] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.479771][ T6990] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.489313][ T6990] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.498321][ T6990] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.755057][ T5833] EXT4-fs (loop9): unmounting filesystem. [ 172.154628][ T7004] tipc: Failed to remove unknown binding: 66,1,1/0:996732368/996732370 [ 172.184058][ T7004] tipc: Failed to remove unknown binding: 66,1,1/0:996732368/996732370 [ 172.770309][ T7018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.845377][ T7018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.535538][ T7048] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 173.535538][ T7048] The task syz.5.614 (7048) triggered the difference, watch for misbehavior. [ 174.375182][ T7074] overlayfs: failed to clone upperpath [ 174.503813][ T7077] FAULT_INJECTION: forcing a failure. [ 174.503813][ T7077] name failslab, interval 1, probability 0, space 0, times 0 [ 174.570373][ T7077] CPU: 0 PID: 7077 Comm: syz.0.622 Not tainted syzkaller #0 [ 174.577720][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 174.587796][ T7077] Call Trace: [ 174.591095][ T7077] [ 174.594048][ T7077] dump_stack_lvl+0x188/0x24e [ 174.598762][ T7077] ? show_regs_print_info+0x12/0x12 [ 174.604003][ T7077] ? load_image+0x410/0x410 [ 174.608552][ T7077] ? __lock_acquire+0x7ea0/0x7ea0 [ 174.613613][ T7077] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 174.620801][ T7077] should_fail_ex+0x390/0x4c0 [ 174.625692][ T7077] should_failslab+0x5/0x20 [ 174.630221][ T7077] slab_pre_alloc_hook+0x59/0x300 [ 174.635273][ T7077] ? pipapo_clone+0x4a/0xae0 [ 174.639898][ T7077] __kmem_cache_alloc_node+0x4f/0x270 [ 174.645314][ T7077] ? pipapo_clone+0x4a/0xae0 [ 174.649936][ T7077] __kmalloc+0xa3/0x240 [ 174.654120][ T7077] pipapo_clone+0x4a/0xae0 [ 174.658592][ T7077] nft_pipapo_init+0x50f/0x680 [ 174.663395][ T7077] nf_tables_newset+0x1c0b/0x2530 [ 174.668467][ T7077] ? nf_tables_delrule+0x1100/0x1100 [ 174.673791][ T7077] ? __lock_acquire+0x7ea0/0x7ea0 [ 174.678862][ T7077] ? __nla_parse+0x3c/0x50 [ 174.683327][ T7077] nfnetlink_rcv+0x1119/0x2470 [ 174.688161][ T7077] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 174.693740][ T7077] ? ref_tracker_free+0x682/0x830 [ 174.698821][ T7077] ? netlink_deliver_tap+0x2e/0x1b0 [ 174.704046][ T7077] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 174.709540][ T7077] ? netlink_deliver_tap+0x2e/0x1b0 [ 174.714772][ T7077] netlink_unicast+0x7ad/0x920 [ 174.719573][ T7077] netlink_sendmsg+0x8ad/0xbd0 [ 174.724376][ T7077] ? netlink_getsockopt+0x550/0x550 [ 174.729604][ T7077] ? apparmor_socket_sendmsg+0x8a/0x330 [ 174.735205][ T7077] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 174.740508][ T7077] ? security_socket_sendmsg+0x7c/0xa0 [ 174.745997][ T7077] ? netlink_getsockopt+0x550/0x550 [ 174.751227][ T7077] ____sys_sendmsg+0x5ed/0x9a0 [ 174.756040][ T7077] ? __sys_sendmsg_sock+0x30/0x30 [ 174.761091][ T7077] ? __import_iovec+0x306/0x510 [ 174.765994][ T7077] ? import_iovec+0x6f/0xa0 [ 174.770538][ T7077] ___sys_sendmsg+0x2a2/0x360 [ 174.775248][ T7077] ? __sys_sendmsg+0x2a0/0x2a0 [ 174.780085][ T7077] __se_sys_sendmsg+0x1c3/0x2b0 [ 174.784974][ T7077] ? __x64_sys_sendmsg+0x80/0x80 [ 174.789948][ T7077] ? lockdep_hardirqs_on+0x94/0x140 [ 174.795186][ T7077] do_syscall_64+0x4c/0xa0 [ 174.799634][ T7077] ? clear_bhb_loop+0x60/0xb0 [ 174.804339][ T7077] ? clear_bhb_loop+0x60/0xb0 [ 174.809049][ T7077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.814972][ T7077] RIP: 0033:0x7ff03279e199 [ 174.819426][ T7077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.839071][ T7077] RSP: 002b:00007ff0335a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.847517][ T7077] RAX: ffffffffffffffda RBX: 00007ff032a25fa0 RCX: 00007ff03279e199 [ 174.855520][ T7077] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 174.863524][ T7077] RBP: 00007ff0328350b8 R08: 0000000000000000 R09: 0000000000000000 [ 174.871523][ T7077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.879517][ T7077] R13: 00007ff032a26038 R14: 00007ff032a25fa0 R15: 00007ffdf6c0c6d8 [ 174.887530][ T7077] [ 175.570880][ T7044] loop3: detected capacity change from 0 to 32768 [ 175.712820][ T7044] XFS (loop3): Mounting V5 Filesystem [ 176.092223][ T7125] gadgetfs: bound to dummy_udc driver [ 176.100054][ T7044] XFS (loop3): Ending clean mount [ 176.177965][ T7044] XFS (loop3): Quotacheck needed: Please wait. [ 176.429794][ T7044] XFS (loop3): Quotacheck: Done. [ 176.698814][ T6492] XFS (loop3): Unmounting Filesystem [ 177.280737][ T7155] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 178.188765][ T7186] loop0: detected capacity change from 0 to 128 [ 178.442440][ T7193] loop0: detected capacity change from 0 to 512 [ 178.491389][ T7193] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 178.540647][ C1] Unknown status report in ack skb [ 178.780787][ T49] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 179.066747][ T7211] ip_tables: iptables: counters copy to user failed while replacing table [ 179.067236][ T7207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.162704][ T7207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.625539][ T7238] FAULT_INJECTION: forcing a failure. [ 179.625539][ T7238] name failslab, interval 1, probability 0, space 0, times 0 [ 179.670282][ T7238] CPU: 0 PID: 7238 Comm: syz.3.658 Not tainted syzkaller #0 [ 179.677716][ T7238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 179.687794][ T7238] Call Trace: [ 179.691093][ T7238] [ 179.694041][ T7238] dump_stack_lvl+0x188/0x24e [ 179.698744][ T7238] ? sctp_sendmsg+0x1686/0x2940 [ 179.703611][ T7238] ? ___sys_sendmsg+0x2a2/0x360 [ 179.708478][ T7238] ? show_regs_print_info+0x12/0x12 [ 179.713696][ T7238] ? load_image+0x410/0x410 [ 179.718237][ T7238] should_fail_ex+0x390/0x4c0 [ 179.722947][ T7238] should_failslab+0x5/0x20 [ 179.727466][ T7238] slab_pre_alloc_hook+0x59/0x300 [ 179.732510][ T7238] ? sctp_add_bind_addr+0x89/0x350 [ 179.737648][ T7238] __kmem_cache_alloc_node+0x4f/0x270 [ 179.743037][ T7238] ? sctp_add_bind_addr+0x89/0x350 [ 179.748186][ T7238] kmalloc_trace+0x26/0xe0 [ 179.752602][ T7238] sctp_add_bind_addr+0x89/0x350 [ 179.757543][ T7238] sctp_copy_local_addr_list+0x317/0x4d0 [ 179.763172][ T7238] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 179.768891][ T7238] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 179.774957][ T7238] ? sctp_v6_is_any+0x60/0x70 [ 179.779643][ T7238] ? sctp_copy_one_addr+0x93/0x660 [ 179.784760][ T7238] sctp_bind_addr_copy+0xaf/0x3c0 [ 179.789788][ T7238] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 179.796119][ T7238] sctp_connect_new_asoc+0x2f5/0x6a0 [ 179.801405][ T7238] ? __sctp_connect+0xd80/0xd80 [ 179.806249][ T7238] ? __local_bh_enable_ip+0x136/0x1c0 [ 179.811619][ T7238] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 179.817157][ T7238] ? security_sctp_bind_connect+0x85/0xb0 [ 179.822876][ T7238] sctp_sendmsg+0x1686/0x2940 [ 179.827561][ T7238] ? sctp_getsockopt+0x8a0/0x8a0 [ 179.832498][ T7238] ? __might_fault+0xa6/0x120 [ 179.837169][ T7238] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 179.843622][ T7238] ? aa_sock_msg_perm+0x94/0x150 [ 179.848579][ T7238] ? inet_sendmsg+0xca/0x2a0 [ 179.853168][ T7238] ? inet_send_prepare+0x250/0x250 [ 179.858290][ T7238] ____sys_sendmsg+0x5ed/0x9a0 [ 179.863056][ T7238] ? __sys_sendmsg_sock+0x30/0x30 [ 179.868072][ T7238] ? __import_iovec+0x306/0x510 [ 179.872931][ T7238] ? import_iovec+0x6f/0xa0 [ 179.877434][ T7238] ___sys_sendmsg+0x2a2/0x360 [ 179.882105][ T7238] ? release_firmware_map_entry+0x187/0x187 [ 179.888005][ T7238] ? __sys_sendmsg+0x2a0/0x2a0 [ 179.892794][ T7238] __sys_sendmmsg+0x2c3/0x510 [ 179.897472][ T7238] ? __ia32_sys_sendmsg+0x80/0x80 [ 179.902496][ T7238] ? __ia32_sys_get_robust_list+0x100/0x100 [ 179.908390][ T7238] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 179.914373][ T7238] ? lock_chain_count+0x20/0x20 [ 179.919228][ T7238] __x64_sys_sendmmsg+0x9c/0xb0 [ 179.924075][ T7238] do_syscall_64+0x4c/0xa0 [ 179.928495][ T7238] ? clear_bhb_loop+0x60/0xb0 [ 179.933172][ T7238] ? clear_bhb_loop+0x60/0xb0 [ 179.937844][ T7238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.943729][ T7238] RIP: 0033:0x7f124e79e199 [ 179.948138][ T7238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.967746][ T7238] RSP: 002b:00007f124f728028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 179.976162][ T7238] RAX: ffffffffffffffda RBX: 00007f124ea25fa0 RCX: 00007f124e79e199 [ 179.984130][ T7238] RDX: 0000000000000001 RSI: 0000200000002680 RDI: 0000000000000004 [ 179.992097][ T7238] RBP: 00007f124e8350b8 R08: 0000000000000000 R09: 0000000000000000 [ 180.000064][ T7238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.008052][ T7238] R13: 00007f124ea26038 R14: 00007f124ea25fa0 R15: 00007ffe68a249e8 [ 180.016052][ T7238] [ 181.901996][ T7302] netlink: 64 bytes leftover after parsing attributes in process `syz.5.673'. [ 182.284636][ T27] audit: type=1326 audit(1791210385.962:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.0.674" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff03279e199 code=0x0 [ 182.820540][ T7328] 9pnet_fd: p9_fd_create_tcp (7328): problem connecting socket to 127.0.0.1 [ 183.546888][ T7362] netlink: 'syz.3.689': attribute type 1 has an invalid length. [ 183.775599][ T7364] bond1: (slave macvlan1): making interface the new active one [ 183.834542][ T7364] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 183.954670][ T7365] bond1 (unregistering): (slave macvlan1): Releasing active interface [ 184.007198][ T7365] bond1 (unregistering): Released all slaves [ 184.315261][ T7373] FAULT_INJECTION: forcing a failure. [ 184.315261][ T7373] name failslab, interval 1, probability 0, space 0, times 0 [ 184.360792][ T7373] CPU: 0 PID: 7373 Comm: syz.3.690 Not tainted syzkaller #0 [ 184.368149][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 184.378234][ T7373] Call Trace: [ 184.381534][ T7373] [ 184.384484][ T7373] dump_stack_lvl+0x188/0x24e [ 184.389196][ T7373] ? show_regs_print_info+0x12/0x12 [ 184.394420][ T7373] ? load_image+0x410/0x410 [ 184.398970][ T7373] ? __might_sleep+0xd0/0xd0 [ 184.403595][ T7373] ? __lock_acquire+0x7ea0/0x7ea0 [ 184.408644][ T7373] should_fail_ex+0x390/0x4c0 [ 184.413351][ T7373] should_failslab+0x5/0x20 [ 184.417878][ T7373] slab_pre_alloc_hook+0x59/0x300 [ 184.422961][ T7373] kmem_cache_alloc+0x56/0x2f0 [ 184.427777][ T7373] ? posix_lock_inode+0x365/0x32f0 [ 184.432929][ T7373] posix_lock_inode+0x365/0x32f0 [ 184.437905][ T7373] ? aa_path_link+0x8a0/0x8a0 [ 184.442609][ T7373] ? lockdep_softirqs_off+0x430/0x430 [ 184.448008][ T7373] ? __kasan_slab_alloc+0x6b/0x80 [ 184.453070][ T7373] ? slab_pre_alloc_hook+0x59/0x300 [ 184.458300][ T7373] ? posix_lock_file+0x50/0x50 [ 184.463101][ T7373] ? bpf_lsm_file_lock+0x5/0x10 [ 184.467988][ T7373] fcntl_setlk+0xaa7/0x10e0 [ 184.472533][ T7373] ? vfs_lock_file+0xd0/0xd0 [ 184.477178][ T7373] ? __might_fault+0xa6/0x120 [ 184.481852][ T7373] ? __might_fault+0xc2/0x120 [ 184.486528][ T7373] ? __might_fault+0xa6/0x120 [ 184.491208][ T7373] do_fcntl+0x543/0x1280 [ 184.495458][ T7373] ? __ia32_sys_get_robust_list+0x100/0x100 [ 184.501349][ T7373] ? kill_fasync+0x4b0/0x4b0 [ 184.505944][ T7373] ? __fget_files+0x28/0x460 [ 184.510535][ T7373] ? __fget_files+0x3fc/0x460 [ 184.515216][ T7373] ? tomoyo_file_fcntl+0x74/0x210 [ 184.520255][ T7373] ? bpf_lsm_file_fcntl+0x5/0x10 [ 184.525215][ T7373] ? security_file_fcntl+0x7c/0xa0 [ 184.530342][ T7373] __se_sys_fcntl+0xc9/0x190 [ 184.534943][ T7373] do_syscall_64+0x4c/0xa0 [ 184.539361][ T7373] ? clear_bhb_loop+0x60/0xb0 [ 184.544035][ T7373] ? clear_bhb_loop+0x60/0xb0 [ 184.548709][ T7373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.554624][ T7373] RIP: 0033:0x7f124e79e199 [ 184.559037][ T7373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.578646][ T7373] RSP: 002b:00007f124f728028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 184.587061][ T7373] RAX: ffffffffffffffda RBX: 00007f124ea25fa0 RCX: 00007f124e79e199 [ 184.595030][ T7373] RDX: 0000000000000000 RSI: 0000000000000026 RDI: 0000000000000003 [ 184.603017][ T7373] RBP: 00007f124e8350b8 R08: 0000000000000000 R09: 0000000000000000 [ 184.610992][ T7373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.618972][ T7373] R13: 00007f124ea26038 R14: 00007f124ea25fa0 R15: 00007ffe68a249e8 [ 184.626966][ T7373] [ 185.200246][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.9.695'. [ 185.245825][ T7395] netlink: 668 bytes leftover after parsing attributes in process `syz.0.697'. [ 185.259888][ T7393] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.269443][ T7393] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.278231][ T7393] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.287001][ T7393] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.298986][ T4282] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 185.309666][ T4282] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 185.330908][ T4282] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 185.343588][ T4282] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 185.351294][ T4282] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 185.371325][ T4282] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 185.615857][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.764131][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.980391][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 185.981152][ T4289] Bluetooth: hci3: command 0x0406 tx timeout [ 186.064510][ T7422] overlayfs: failed to clone upperpath [ 186.132770][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.318113][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.387986][ T7397] chnl_net:caif_netlink_parms(): no params data found [ 186.834422][ T7397] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.871117][ T7397] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.910940][ T7397] device bridge_slave_0 entered promiscuous mode [ 186.976323][ T7397] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.000368][ T7397] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.034057][ T7397] device bridge_slave_1 entered promiscuous mode [ 187.238957][ T7397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.420232][ T4289] Bluetooth: hci6: command 0x0409 tx timeout [ 187.550476][ T7397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.916609][ T7397] team0: Port device team_slave_0 added [ 187.998912][ T7397] team0: Port device team_slave_1 added [ 188.233985][ T7397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.247409][ T7397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.339786][ T7397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.462056][ T7397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.469146][ T7397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.550293][ T7397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.827479][ T7397] device hsr_slave_0 entered promiscuous mode [ 188.860284][ T14] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 188.868335][ T7397] device hsr_slave_1 entered promiscuous mode [ 188.889395][ T7397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.904062][ T7493] loop3: detected capacity change from 0 to 128 [ 188.909185][ T7397] Cannot create hsr debugfs directory [ 188.977606][ T7493] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 188.991728][ T7493] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.053777][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.064624][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.078297][ T6492] EXT4-fs (loop3): unmounting filesystem. [ 189.086278][ T14] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.097091][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.106552][ T14] usb 1-1: Product: syz [ 189.115840][ T14] usb 1-1: Manufacturer: syz [ 189.120621][ T14] usb 1-1: SerialNumber: syz [ 189.384550][ T14] usb 1-1: 0:2 : does not exist [ 189.389548][ T14] usb 1-1: unit 9 not found! [ 189.418622][ T14] usb 1-1: 4:0: cannot get min/max values for control 2 (id 4) [ 189.455726][ T14] usb 1-1: 4:0: cannot get min/max values for control 3 (id 4) [ 189.482416][ T14] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4) [ 189.511542][ T4289] Bluetooth: hci6: command 0x041b tx timeout [ 189.565577][ T7513] netlink: 24 bytes leftover after parsing attributes in process `syz.5.718'. [ 189.585621][ T14] usb 1-1: USB disconnect, device number 4 [ 189.648495][ T7318] udevd[7318]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.880633][ T127] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 189.943273][ T11] device hsr_slave_0 left promiscuous mode [ 189.961679][ T11] device hsr_slave_1 left promiscuous mode [ 190.000650][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.018734][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.050337][ T11] device bridge_slave_1 left promiscuous mode [ 190.070447][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.080405][ T127] usb 4-1: Using ep0 maxpacket: 16 [ 190.097272][ T127] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.120255][ T127] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.145139][ T7528] FAULT_INJECTION: forcing a failure. [ 190.145139][ T7528] name failslab, interval 1, probability 0, space 0, times 0 [ 190.161266][ T127] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.161522][ T7530] overlayfs: failed to clone upperpath [ 190.181551][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.190347][ T11] device bridge_slave_0 left promiscuous mode [ 190.197453][ T127] usb 4-1: Product: syz [ 190.202014][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.218707][ T7528] CPU: 0 PID: 7528 Comm: syz.0.721 Not tainted syzkaller #0 [ 190.226041][ T7528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 190.236113][ T7528] Call Trace: [ 190.239418][ T7528] [ 190.242713][ T7528] dump_stack_lvl+0x188/0x24e [ 190.247430][ T7528] ? show_regs_print_info+0x12/0x12 [ 190.252660][ T7528] ? load_image+0x410/0x410 [ 190.257201][ T7528] ? __lock_acquire+0x7ea0/0x7ea0 [ 190.262266][ T7528] ? __mutex_trylock_common+0x15c/0x260 [ 190.267847][ T7528] should_fail_ex+0x390/0x4c0 [ 190.272568][ T7528] should_failslab+0x5/0x20 [ 190.277097][ T7528] slab_pre_alloc_hook+0x59/0x300 [ 190.282155][ T7528] ? cgroup_init_fs_context+0x50/0x3c0 [ 190.287641][ T7528] __kmem_cache_alloc_node+0x4f/0x270 [ 190.293050][ T7528] ? cgroup_init_fs_context+0x50/0x3c0 [ 190.298534][ T7528] kmalloc_trace+0x26/0xe0 [ 190.302979][ T7528] cgroup_init_fs_context+0x50/0x3c0 [ 190.308294][ T7528] ? cgroup_do_get_tree+0x510/0x510 [ 190.313531][ T7528] finish_clean_context+0x9b/0x1f0 [ 190.318687][ T7528] vfs_fsconfig_locked+0x21/0x400 [ 190.323754][ T7528] ? __se_sys_fsconfig+0x68c/0x7e0 [ 190.328908][ T7528] __se_sys_fsconfig+0x69e/0x7e0 [ 190.333879][ T7528] ? __x64_sys_fsconfig+0xc0/0xc0 [ 190.338935][ T7528] ? lockdep_hardirqs_on+0x94/0x140 [ 190.344173][ T7528] ? __x64_sys_fsconfig+0x1c/0xc0 [ 190.349201][ T7528] do_syscall_64+0x4c/0xa0 [ 190.353615][ T7528] ? clear_bhb_loop+0x60/0xb0 [ 190.358287][ T7528] ? clear_bhb_loop+0x60/0xb0 [ 190.362963][ T7528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.368883][ T7528] RIP: 0033:0x7ff03279e199 [ 190.373312][ T7528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.392934][ T7528] RSP: 002b:00007ff0335a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 190.401352][ T7528] RAX: ffffffffffffffda RBX: 00007ff032a25fa0 RCX: 00007ff03279e199 [ 190.409341][ T7528] RDX: 0000200000000180 RSI: 0000000000000002 RDI: 0000000000000003 [ 190.417318][ T7528] RBP: 00007ff0328350b8 R08: 0000000000000002 R09: 0000000000000000 [ 190.425300][ T7528] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 190.433280][ T7528] R13: 00007ff032a26038 R14: 00007ff032a25fa0 R15: 00007ffdf6c0c6d8 [ 190.441266][ T7528] [ 190.455241][ T127] usb 4-1: Manufacturer: syz [ 190.461473][ T127] usb 4-1: SerialNumber: syz [ 190.698479][ T127] usb 4-1: 0:2 : does not exist [ 190.719632][ T127] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 190.781456][ T127] usb 4-1: USB disconnect, device number 3 [ 191.069329][ T7318] udevd[7318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.334923][ T11] team0 (unregistering): Port device team_slave_1 removed [ 191.389589][ T11] team0 (unregistering): Port device team_slave_0 removed [ 191.433376][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.462590][ T7541] ceph: No mds server is up or the cluster is laggy [ 191.506967][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.581789][ T4289] Bluetooth: hci6: command 0x040f tx timeout [ 192.046970][ T11] bond0 (unregistering): Released all slaves [ 192.355087][ T7549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.726'. [ 192.392081][ T7572] loop3: detected capacity change from 0 to 4096 [ 192.420932][ T7551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.726'. [ 192.442604][ T7572] EXT4-fs (loop3): Test dummy encryption mode enabled [ 192.544281][ T7572] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 192.837966][ T6672] device offline error, dev sda, sector 790838 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 192.870920][ T6672] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 98854) [ 192.897582][ T6672] Buffer I/O error on device sda1, logical block 98816 [ 192.914800][ T6672] Buffer I/O error on device sda1, logical block 98817 [ 192.937383][ T6672] Buffer I/O error on device sda1, logical block 98818 [ 192.962433][ T6672] Buffer I/O error on device sda1, logical block 98819 [ 192.984452][ T6672] Buffer I/O error on device sda1, logical block 98820 [ 192.996561][ T7593] ip_tables: iptables: counters copy to user failed while replacing table [ 193.005897][ T6672] Buffer I/O error on device sda1, logical block 98821 [ 193.027342][ T6672] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 98860) [ 193.060799][ T5955] Buffer I/O error on device sda1, logical block 98822 [ 193.065417][ T6672] device offline error, dev sda, sector 819510 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 193.068137][ T5955] Buffer I/O error on device sda1, logical block 98823 [ 193.105395][ T6672] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2036 starting block 102438) [ 193.142939][ T6672] Buffer I/O error on device sda1, logical block 102400 [ 193.148653][ T5955] Buffer I/O error on device sda1, logical block 98824 [ 193.165596][ T6672] device offline error, dev sda, sector 827694 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 193.199892][ T6672] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2036 starting block 103461) [ 193.240245][ T6672] device offline error, dev sda, sector 831478 op 0x1:(WRITE) flags 0x0 phys_seg 23 prio class 2 [ 193.268384][ T6672] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2036 starting block 103934) [ 193.290408][ T6672] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2036 starting block 103950) [ 193.346778][ T6672] device offline error, dev sda, sector 835894 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 193.397285][ T6672] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2038 starting block 104486) [ 193.438117][ T6672] device offline error, dev sda, sector 897326 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 193.461271][ T6672] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2038 starting block 112165) [ 193.480412][ T6672] device offline error, dev sda, sector 713014 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 193.503403][ T6672] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2029 starting block 89126) [ 193.515612][ T6672] device offline error, dev sda, sector 721238 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 193.526785][ T6672] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90154) [ 193.538616][ T6672] device offline error, dev sda, sector 721278 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 193.559351][ T6672] device offline error, dev sda, sector 721302 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 193.587759][ T6492] EXT4-fs (loop3): unmounting filesystem. [ 193.640671][ T3601] Buffer I/O error on dev sda1, logical block 131422, lost sync page write [ 193.652957][ T7579] Buffer I/O error on dev sda1, logical block 129, lost async page write [ 193.671708][ T4289] Bluetooth: hci6: command 0x0419 tx timeout [ 193.678210][ T7579] Buffer I/O error on dev sda1, logical block 131, lost async page write [ 193.690707][ T3601] Aborting journal on device sda1-8. [ 193.699278][ T94] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 193.700494][ T7579] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 193.724192][ T7613] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.738: Detected aborted journal [ 193.753267][ T3601] JBD2: I/O error when updating journal superblock for sda1-8. [ 193.770352][ T7579] Buffer I/O error on dev sda1, logical block 224, lost async page write [ 193.779695][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 193.813000][ T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 193.824044][ T4260] EXT4-fs (sda1): previous I/O error to superblock detected [ 193.830371][ T7579] Buffer I/O error on dev sda1, logical block 273, lost async page write [ 193.831748][ T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 193.839800][ T7579] Buffer I/O error on dev sda1, logical block 8202, lost async page write [ 193.849674][ T7613] EXT4-fs (sda1): I/O error while writing superblock [ 193.865184][ T7613] EXT4-fs (sda1): Remounting filesystem read-only [ 193.876314][ T7613] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.738: Detected aborted journal [ 193.885977][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 193.887792][ T7613] EXT4-fs (sda1): I/O error while writing superblock [ 193.900832][ T7613] EXT4-fs (sda1): Remounting filesystem read-only [ 193.908668][ T7613] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.738: Detected aborted journal [ 193.916854][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 193.920754][ T7613] EXT4-fs (sda1): I/O error while writing superblock [ 193.937649][ T7613] EXT4-fs (sda1): Remounting filesystem read-only [ 193.944962][ T7613] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.738: Detected aborted journal [ 193.956278][ T7613] EXT4-fs (sda1): I/O error while writing superblock [ 193.963132][ T7613] EXT4-fs (sda1): Remounting filesystem read-only [ 193.966031][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 193.983216][ T7608] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.740: Detected aborted journal [ 193.989749][ T7613] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.738: Detected aborted journal [ 194.006918][ T7608] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.740: Detected aborted journal [ 194.143819][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.150233][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.637783][ T7579] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 194.855004][ T7397] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 194.874010][ T7654] resource: resource sanity check: requesting [mem 0x00000000fe800000-0x00000000fe801fff], which spans more than 0000:00:03.0 [mem 0xfe800000-0xfe80007f] [ 194.897330][ T7397] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 194.922703][ T7397] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 194.950763][ T7654] caller generic_access_phys+0x1eb/0x370 mapping multiple BARs [ 194.992775][ T7397] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 195.381303][ T7397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.451376][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.478557][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.532923][ T7397] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.573724][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.606809][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.631607][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.638778][ T4338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.661271][ T7583] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 195.684178][ T7583] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 195.730571][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.738824][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.762033][ T7583] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 195.769682][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.800611][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.807742][ T4338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.846468][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.910652][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.935212][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.962848][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.980592][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.011399][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.037085][ T7397] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.074829][ T7397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.116478][ T4322] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 196.128527][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.146350][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.155367][ T7583] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 196.176685][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.208927][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.230966][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.292372][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.351125][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.358671][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.449247][ T7397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.594962][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.613916][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.676826][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.698571][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.726448][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.760992][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.779163][ T7710] FAULT_INJECTION: forcing a failure. [ 196.779163][ T7710] name failslab, interval 1, probability 0, space 0, times 0 [ 196.833986][ T7397] device veth0_vlan entered promiscuous mode [ 196.863819][ T7710] CPU: 0 PID: 7710 Comm: syz.3.759 Not tainted syzkaller #0 [ 196.871155][ T7710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 196.881205][ T7710] Call Trace: [ 196.884475][ T7710] [ 196.887394][ T7710] dump_stack_lvl+0x188/0x24e [ 196.892065][ T7710] ? show_regs_print_info+0x12/0x12 [ 196.897257][ T7710] ? load_image+0x410/0x410 [ 196.901789][ T7710] ? __might_sleep+0xd0/0xd0 [ 196.906378][ T7710] ? __lock_acquire+0x7ea0/0x7ea0 [ 196.911403][ T7710] ? percpu_ref_put+0x12/0x100 [ 196.916159][ T7710] should_fail_ex+0x390/0x4c0 [ 196.920830][ T7710] should_failslab+0x5/0x20 [ 196.925322][ T7710] slab_pre_alloc_hook+0x59/0x300 [ 196.930367][ T7710] kmem_cache_alloc+0x56/0x2f0 [ 196.935117][ T7710] ? __kvm_mmu_topup_memory_cache+0x197/0x480 [ 196.941177][ T7710] __kvm_mmu_topup_memory_cache+0x197/0x480 [ 196.947064][ T7710] kvm_mmu_load+0x98/0x2480 [ 196.951557][ T7710] ? kvm_hv_setup_tsc_page+0x5f4/0xa80 [ 196.957006][ T7710] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 196.962991][ T7710] ? kvm_msr_ignored_check+0x180/0x180 [ 196.968464][ T7710] ? kvm_apic_has_interrupt+0x72d/0x740 [ 196.974003][ T7710] vcpu_enter_guest+0x4338/0x7a90 [ 196.979064][ T7710] ? trace_kvm_fpu+0x230/0x230 [ 196.983818][ T7710] ? is_bpf_text_address+0x28b/0x2a0 [ 196.989089][ T7710] ? is_bpf_text_address+0x22/0x2a0 [ 196.994278][ T7710] ? kernel_text_address+0x9c/0xd0 [ 196.999375][ T7710] ? __kernel_text_address+0x9/0x30 [ 197.004560][ T7710] ? unwind_get_return_address+0x49/0x80 [ 197.010191][ T7710] ? mark_lock+0x94/0x320 [ 197.014532][ T7710] ? __lock_acquire+0x142d/0x7ea0 [ 197.019550][ T7710] ? mark_lock+0x94/0x320 [ 197.023896][ T7710] ? __lock_acquire+0x1359/0x7ea0 [ 197.028943][ T7710] ? verify_lock_unused+0x140/0x140 [ 197.034156][ T7710] ? mark_lock+0x94/0x320 [ 197.038494][ T7710] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 197.044486][ T7710] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 197.049761][ T7710] ? lock_chain_count+0x20/0x20 [ 197.054625][ T7710] ? __mutex_trylock_common+0x15c/0x260 [ 197.060186][ T7710] ? read_lock_is_recursive+0x10/0x10 [ 197.065580][ T7710] ? fpregs_activate+0xb0/0x230 [ 197.070437][ T7710] kvm_arch_vcpu_ioctl_run+0xf2c/0x22c0 [ 197.075984][ T7710] ? kvm_arch_vcpu_ioctl_run+0x11c/0x22c0 [ 197.081729][ T7710] kvm_vcpu_ioctl+0x986/0xd00 [ 197.086425][ T7710] ? xa_release+0x50/0x50 [ 197.090754][ T7710] ? __fget_files+0x28/0x460 [ 197.095342][ T7710] ? bpf_lsm_file_ioctl+0x5/0x10 [ 197.100278][ T7710] ? security_file_ioctl+0x7c/0xa0 [ 197.105387][ T7710] ? xa_release+0x50/0x50 [ 197.109711][ T7710] __se_sys_ioctl+0xfa/0x170 [ 197.114312][ T7710] do_syscall_64+0x4c/0xa0 [ 197.118728][ T7710] ? clear_bhb_loop+0x60/0xb0 [ 197.123397][ T7710] ? clear_bhb_loop+0x60/0xb0 [ 197.128095][ T7710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.134016][ T7710] RIP: 0033:0x7f124e79e199 [ 197.138453][ T7710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.141275][ T7397] device veth1_vlan entered promiscuous mode [ 197.158059][ T7710] RSP: 002b:00007f124f728028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.158119][ T7710] RAX: ffffffffffffffda RBX: 00007f124ea25fa0 RCX: 00007f124e79e199 [ 197.158133][ T7710] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 197.188434][ T7710] RBP: 00007f124e8350b8 R08: 0000000000000000 R09: 0000000000000000 [ 197.196404][ T7710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.204405][ T7710] R13: 00007f124ea26038 R14: 00007f124ea25fa0 R15: 00007ffe68a249e8 [ 197.212405][ T7710] [ 197.217108][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880572de800: rx timeout, send abort Oct 5 14:26:40 syzkaller kern.alert kernel: [ 197.217108][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880572de800: rx timeout, send abort [ 197.345606][ T7714] loop0: detected capacity change from 0 to 2048 [ 197.374220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.392974][ T7714] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 197.426890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 197.438753][ T7714] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.465797][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.496252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.530867][ T7397] device veth0_macvtap entered promiscuous mode [ 197.598595][ T7397] device veth1_macvtap entered promiscuous mode [ 197.614929][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.628697][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.697402][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.719883][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.727305][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880572de800: abort rx timeout. Force session deactivation Oct 5 14:26:41 syzkaller kern.alert kernel: [ 197.727305][ C0] vcan0: j1939[ 197.745912][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 _tp_rxtimer: 0xffff8880572de800: abort rx timeout. Force session deactivation [ 197.768260][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.779675][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.800974][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.843928][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.874398][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.882067][ T7726] Write-error on swap-device (8:0:279510) Oct 5 14:26:41 syzkaller kern.alert kernel: [ 197.882067][ T7726] Write-error on swap-device (8:0:279510) [ 197.916643][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.927426][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.928697][ T7726] Write-error on swap-device (8:0:279518) [ 197.937923][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 Oct 5 14:26:41 [ 197.956229][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! syzkaller kern.a[ 197.967669][ T7726] Write-error on swap-device (8:0:279526) [ 197.971284][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 lert kernel: [ 197.928697][ T7726] Write-error on swap-device (8:0:279518) Oct 5 14:26:41 syzkaller kern.aler[ 197.993577][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! t kernel: [ 197.967669][ T7726][ 198.006056][ T7726] Write-error on swap-device (8:0:279534) Write-error on [ 198.006711][ T7397] batman_adv: batadv0: Interface activated: batadv_slave_0 swap-device (8:0[ 198.020203][ T7726] Write-error on swap-device (8:0:279542) :279526) [ 198.028832][ T7726] Write-error on swap-device (8:0:279550) Oct 5 14:26:41 [ 198.036091][ T7726] Write-error on swap-device (8:0:279558) syzkaller kern.a[ 198.042662][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready lert kernel: [ 198.006056][ T7726] Write-error on swap-device (8:0:279534) Oct[ 198.057532][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 5 14:26:41 syz[ 198.067531][ T7726] Write-error on swap-device (8:0:279566) kaller kern.aler[ 198.074224][ T7726] Write-error on swap-device (8:0:279574) t kernel: [ 198.020203][ T7726] Write-error on [ 198.084779][ T7726] Write-error on swap-device (8:0:279582) swap-device (8:0[ 198.086001][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 :279542) Oct 5 14:26:41 syzkaller kern.alert kernel: [ 198.028832][ T7726] Write-error on swap-device (8:0:279550) Oct 5 14:26:41 syzkaller kern.alert kernel: [ 198.036091][ T7726] Write-error on swap-device (8:0:279558) Oct 5 14:26:41 syzkaller kern.alert kernel: [ 198.067531][ T7726] Write-error on swap-device (8:0:279566) Oct 5 14:26:41 syzkaller kern.[ 198.134060][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! alert kernel: [ 198.074224][ T7726] Write-error on swap-device (8:0:279574) Oct 5 14:26:41 syzkaller kern.alert kernel: [ 198.084779][ T7726] Write-error on swap-device (8:0:279582) [ 198.179786][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.208420][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.222252][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.234487][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.244660][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.255528][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.265763][ T26] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 198.273555][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.289875][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.301082][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.313436][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.323637][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.334573][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.351116][ T7397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.360616][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.376997][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.389840][ T7397] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.401203][ T7397] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.418964][ T7397] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.428129][ T7397] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.518919][ T26] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 198.540722][ T26] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.559109][ T26] usb 10-1: Product: syz [ 198.579138][ T26] usb 10-1: Manufacturer: syz [ 198.590212][ T26] usb 10-1: SerialNumber: syz [ 198.612513][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.631049][ T26] usb 10-1: config 0 descriptor?? [ 198.649194][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.658741][ T26] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 198.710130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 198.730122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 198.740115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 198.750119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 198.760115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 198.770112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 198.780112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 198.790113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 198.800113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 199.191646][ T4260] EXT4-fs error: 167 callbacks suppressed [ 199.191663][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 199.198736][ T7727] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.763: Detected aborted journal [ 199.249498][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 199.250316][ T7727] EXT4-fs: 153 callbacks suppressed [ 199.250327][ T7727] EXT4-fs (sda1): Remounting filesystem read-only [ 199.294185][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.314942][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 199.342807][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.358714][ T3934] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #116: comm dhcpcd: reading directory lblock 0 [ 199.372396][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 199.402370][ T7727] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.763: Detected aborted journal [ 199.410750][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 199.431809][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.436685][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 199.454664][ T7397] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 199.466305][ T7727] EXT4-fs (sda1): Remounting filesystem read-only [ 199.490338][ T7727] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.763: Detected aborted journal [ 199.505571][ T7397] EXT4-fs (sda1): Remounting filesystem read-only [ 199.515489][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 199.525590][ T7397] EXT4-fs error (device sda1) in __ext4_new_inode:1096: Journal has aborted [ 199.539676][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 199.566475][ T7727] EXT4-fs (sda1): Remounting filesystem read-only [ 199.579974][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 199.610394][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 199.611088][ T7727] EXT4-fs (sda1): Remounting filesystem read-only [ 201.090304][ T26] gspca_stk1135: reg_w 0x200 err -71 [ 201.106882][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 201.130172][ T26] gspca_stk1135: Sensor write failed [ 201.135533][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 201.168562][ T26] gspca_stk1135: Sensor write failed [ 201.198524][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 201.219991][ T26] gspca_stk1135: Sensor read failed [ 201.242820][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 201.259456][ T26] gspca_stk1135: Sensor read failed [ 201.280258][ T26] gspca_stk1135: Detected sensor type unknown (0x0) [ 201.297554][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 201.324581][ T26] gspca_stk1135: Sensor read failed [ 201.344856][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 201.373722][ T26] gspca_stk1135: Sensor read failed [ 201.398196][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 201.410117][ T26] gspca_stk1135: Sensor write failed [ 201.425649][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 201.458650][ T26] gspca_stk1135: Sensor write failed [ 201.480366][ T26] stk1135: probe of 10-1:0.0 failed with error -71 [ 201.505113][ T26] usb 10-1: USB disconnect, device number 2 [ 201.644186][ T4303] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.871293][ T4303] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.914940][ T7838] PM: suspend entry (s2idle) [ 201.977572][ T7838] Filesystems sync: 0.048 seconds [ 201.987501][ T4303] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.015129][ T11] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db.p7s failed with error -5 [ 202.015298][ T47] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -5 [ 202.040807][ T47] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -5 [ 202.053351][ T47] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db failed with error -5 [ 202.069978][ T11] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -5 [ 202.076636][ T47] (NULL device *): loading /lib/firmware/regulatory.db failed with error -5 [ 202.089992][ T11] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db.p7s failed with error -5 [ 202.097959][ T47] (NULL device *): Direct firmware load for regulatory.db failed with error -5 [ 202.110669][ T4354] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 202.120518][ T11] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -5 [ 202.127727][ T47] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 202.139872][ T11] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -5 [ 202.149828][ T11] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 202.161959][ T4303] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.308211][ T4354] usb 1-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 202.353639][ T4354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.362357][ T4354] usb 1-1: Product: syz [ 202.366703][ T4354] usb 1-1: Manufacturer: syz [ 202.372200][ T4354] usb 1-1: SerialNumber: syz [ 202.613380][ T4354] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 202.634940][ T4354] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to g@b4.vu [ 202.656673][ T4354] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 202.728904][ T4354] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 202.800003][ T4354] usb 1-1: USB disconnect, device number 5 [ 202.802242][ T7318] udevd[7318]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.588208][ T4303] device hsr_slave_0 left promiscuous mode [ 203.596482][ T4303] device hsr_slave_1 left promiscuous mode [ 203.603326][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.611143][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.618795][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.627135][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.635833][ T4303] device bridge_slave_1 left promiscuous mode [ 203.642315][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.652680][ T4303] device bridge_slave_0 left promiscuous mode [ 203.658870][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.688455][ T4303] device veth1_macvtap left promiscuous mode [ 203.694564][ T4303] device veth0_macvtap left promiscuous mode [ 203.705539][ T4303] device veth1_vlan left promiscuous mode [ 203.711413][ T4303] device veth0_vlan left promiscuous mode [ 204.263057][ T7887] EXT4-fs error: 200 callbacks suppressed [ 204.263070][ T7887] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.789: Detected aborted journal [ 204.304701][ T3934] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 204.356667][ T7887] EXT4-fs: 114 callbacks suppressed [ 204.356682][ T7887] EXT4-fs (sda1): Remounting filesystem read-only [ 204.405911][ T7887] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.789: Detected aborted journal [ 204.440678][ T3934] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 204.460292][ T7887] EXT4-fs (sda1): Remounting filesystem read-only [ 204.477065][ T7887] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.789: Detected aborted journal [ 204.498483][ T7887] EXT4-fs (sda1): Remounting filesystem read-only [ 204.518816][ T7887] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.789: Detected aborted journal [ 204.544351][ T3934] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 204.557129][ T7887] EXT4-fs (sda1): Remounting filesystem read-only [ 204.574968][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 204.587018][ T7887] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.789: Detected aborted journal [ 204.618630][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 204.627114][ T7887] EXT4-fs (sda1): Remounting filesystem read-only [ 204.640264][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 204.653057][ T7887] EXT4-fs (sda1): Remounting filesystem read-only [ 204.669075][ T7894] EXT4-fs (sda1): Remounting filesystem read-only [ 204.676801][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 204.710307][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 205.308001][ T4303] team0 (unregistering): Port device team_slave_1 removed [ 205.445860][ T4303] team0 (unregistering): Port device team_slave_0 removed [ 205.508179][ T4303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.555159][ T4303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.125128][ T4303] bond0 (unregistering): Released all slaves [ 206.712407][ T7934] netlink: 'syz.0.793': attribute type 1 has an invalid length. [ 206.730476][ T7934] netlink: 'syz.0.793': attribute type 2 has an invalid length. [ 206.739345][ T7934] netlink: 216 bytes leftover after parsing attributes in process `syz.0.793'. [ 208.857280][ T7950] netlink: 24 bytes leftover after parsing attributes in process `syz.5.797'. [ 210.060733][ T4260] EXT4-fs error: 60 callbacks suppressed [ 210.060751][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 210.089392][ T7962] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.798: Detected aborted journal [ 210.099611][ T7961] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 210.101115][ T4260] EXT4-fs: 43 callbacks suppressed [ 210.101126][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 210.115678][ T7963] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.799: Detected aborted journal [ 210.134204][ T7961] EXT4-fs (sda1): Remounting filesystem read-only [ 210.135759][ T7962] EXT4-fs (sda1): Remounting filesystem read-only [ 210.141034][ T7963] EXT4-fs (sda1): Remounting filesystem read-only [ 210.154459][ T7961] EXT4-fs error (device sda1) in __ext4_new_inode:1096: Journal has aborted [ 210.160453][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 210.174640][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 210.209567][ T7963] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.799: Detected aborted journal [ 210.240372][ T7963] EXT4-fs (sda1): Remounting filesystem read-only [ 210.266193][ T7963] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.799: Detected aborted journal [ 210.277315][ T7963] EXT4-fs (sda1): Remounting filesystem read-only [ 210.291749][ T7963] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.799: Detected aborted journal [ 210.305054][ T7963] EXT4-fs (sda1): Remounting filesystem read-only [ 210.319073][ T7963] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.799: Detected aborted journal [ 210.337208][ T7963] EXT4-fs (sda1): Remounting filesystem read-only [ 210.344321][ T7963] EXT4-fs (sda1): Remounting filesystem read-only [ 212.764102][ T7838] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 212.771459][ T7838] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 212.796824][ T7838] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 212.804173][ T7838] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 212.812586][ T7838] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 212.818549][ T7838] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 212.826999][ T7838] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 212.836329][ T7838] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 212.842565][ T7838] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 212.849003][ T7838] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 212.856331][ T7838] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 212.862597][ T7838] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 212.869053][ T7838] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 212.878371][ T7838] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 212.884432][ T7838] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 212.891920][ T7838] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 212.904509][ T7838] Freezing user space processes [ 212.913972][ T7838] ------------[ cut here ]------------ [ 212.914928][ T7838] [ 212.914932][ T7838] ====================================================== [ 212.914936][ T7838] WARNING: possible circular locking dependency detected [ 212.914946][ T7838] syzkaller #0 Not tainted [ 212.914955][ T7838] ------------------------------------------------------ [ 212.914959][ T7838] syz.3.784/7838 is trying to acquire lock: [ 212.914964][ T7838] ffffffff8cb21a80 (console_owner){..-.}-{0:0}, at: console_emit_next_record+0x68f/0xb50 [ 212.914993][ T7838] [ 212.914993][ T7838] but task is already holding lock: [ 212.914995][ T7838] ffff888018bac618 (&p->pi_lock){-.-.}-{2:2}, at: task_call_func+0x3f/0x260 [ 212.915019][ T7838] [ 212.915019][ T7838] which lock already depends on the new lock. [ 212.915019][ T7838] [ 212.915021][ T7838] [ 212.915021][ T7838] the existing dependency chain (in reverse order) is: [ 212.915024][ T7838] [ 212.915024][ T7838] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 212.915035][ T7838] _raw_spin_lock_irqsave+0xb0/0x100 [ 212.915050][ T7838] try_to_wake_up+0x5a/0x10b0 [ 212.915061][ T7838] __wake_up_common+0x28e/0x4d0 [ 212.915074][ T7838] __wake_up+0x121/0x1a0 [ 212.915084][ T7838] pty_unthrottle+0x38/0x60 [ 212.915095][ T7838] tty_unthrottle_safe+0x109/0x160 [ 212.915107][ T7838] n_tty_receive_buf_common+0x10d5/0x1470 [ 212.915119][ T7838] tty_port_default_receive_buf+0x69/0x90 [ 212.915128][ T7838] flush_to_ldisc+0x2b9/0x800 [ 212.915135][ T7838] process_one_work+0x8ab/0x1160 [ 212.915146][ T7838] worker_thread+0xaf5/0x12a0 [ 212.915155][ T7838] kthread+0x29d/0x330 [ 212.915162][ T7838] ret_from_fork+0x1f/0x30 [ 212.915174][ T7838] [ 212.915174][ T7838] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 212.915185][ T7838] _raw_spin_lock_irqsave+0xb0/0x100 [ 212.915198][ T7838] __wake_up+0x107/0x1a0 [ 212.915209][ T7838] tty_port_default_wakeup+0x9e/0xf0 [ 212.915217][ T7838] serial8250_tx_chars+0x615/0x800 [ 212.915227][ T7838] serial8250_handle_irq+0x6b0/0x8b0 [ 212.915236][ T7838] serial8250_default_handle_irq+0xb4/0x1a0 [ 212.915247][ T7838] serial8250_interrupt+0x9b/0x1c0 [ 212.915255][ T7838] __handle_irq_event_percpu+0x293/0xa50 [ 212.915265][ T7838] handle_irq_event+0x87/0x1e0 [ 212.915273][ T7838] handle_edge_irq+0x242/0xb20 [ 212.915284][ T7838] __common_interrupt+0xd7/0x1e0 [ 212.915297][ T7838] common_interrupt+0xb0/0xd0 [ 212.915308][ T7838] asm_common_interrupt+0x22/0x40 [ 212.915318][ T7838] _raw_spin_unlock_irqrestore+0xbc/0x120 [ 212.915325][ T7838] uart_write+0x67a/0x900 [ 212.915338][ T7838] n_tty_write+0xd61/0x11e0 [ 212.915349][ T7838] file_tty_write+0x4c7/0x840 [ 212.915358][ T7838] vfs_write+0x482/0x9a0 [ 212.915371][ T7838] ksys_write+0x14d/0x260 [ 212.915383][ T7838] do_syscall_64+0x4c/0xa0 [ 212.915392][ T7838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.915402][ T7838] [ 212.915402][ T7838] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 212.915413][ T7838] _raw_spin_lock_irqsave+0xb0/0x100 [ 212.915426][ T7838] serial8250_console_write+0x17d/0x18b0 [ 212.915436][ T7838] console_emit_next_record+0x795/0xb50 [ 212.915444][ T7838] console_unlock+0x223/0x630 [ 212.915456][ T7838] vprintk_emit+0x4b3/0x6a0 [ 212.915467][ T7838] _printk+0xda/0x130 [ 212.915479][ T7838] register_console+0x6bd/0x9b0 [ 212.915491][ T7838] univ8250_console_init+0x41/0x43 [ 212.915502][ T7838] console_init+0x1bc/0x78e [ 212.915514][ T7838] start_kernel+0x2f3/0x50d [ 212.915526][ T7838] secondary_startup_64_no_verify+0xcf/0xdb [ 212.915537][ T7838] [ 212.915537][ T7838] -> #0 (console_owner){..-.}-{0:0}: [ 212.915547][ T7838] __lock_acquire+0x3a03/0x7ea0 [ 212.915560][ T7838] lock_acquire+0x1bc/0x4a0 [ 212.915570][ T7838] console_emit_next_record+0x6b0/0xb50 [ 212.915579][ T7838] console_unlock+0x223/0x630 [ 212.915590][ T7838] vprintk_emit+0x4b3/0x6a0 [ 212.915601][ T7838] _printk+0xda/0x130 [ 212.915613][ T7838] report_bug+0x34a/0x4f0 [ 212.915623][ T7838] handle_bug+0x3a/0x70 [ 212.915633][ T7838] exc_invalid_op+0x16/0x40 [ 212.915643][ T7838] asm_exc_invalid_op+0x16/0x20 [ 212.915651][ T7838] __set_task_frozen+0x1e9/0x290 [ 212.915662][ T7838] task_call_func+0x19e/0x260 [ 212.915673][ T7838] freeze_task+0x213/0x3a0 [ 212.915682][ T7838] try_to_freeze_tasks+0x190/0x600 [ 212.915694][ T7838] freeze_processes+0xc5/0x1e0 [ 212.915704][ T7838] pm_suspend+0x289/0x9a0 [ 212.915713][ T7838] state_store+0x202/0x290 [ 212.915721][ T7838] kernfs_fop_write_iter+0x3a0/0x520 [ 212.915741][ T7838] vfs_write+0x482/0x9a0 [ 212.915753][ T7838] ksys_write+0x14d/0x260 [ 212.915765][ T7838] do_syscall_64+0x4c/0xa0 [ 212.915774][ T7838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.915784][ T7838] [ 212.915784][ T7838] other info that might help us debug this: [ 212.915784][ T7838] [ 212.915787][ T7838] Chain exists of: [ 212.915787][ T7838] console_owner --> &tty->write_wait --> &p->pi_lock [ 212.915787][ T7838] [ 212.915799][ T7838] Possible unsafe locking scenario: [ 212.915799][ T7838] [ 212.915802][ T7838] CPU0 CPU1 [ 212.915804][ T7838] ---- ---- [ 212.915806][ T7838] lock(&p->pi_lock); [ 212.915811][ T7838] lock(&tty->write_wait); [ 212.915817][ T7838] lock(&p->pi_lock); [ 212.915822][ T7838] lock(console_owner); [ 212.915827][ T7838] [ 212.915827][ T7838] *** DEADLOCK *** [ 212.915827][ T7838] [ 212.915829][ T7838] 9 locks held by syz.3.784/7838: [ 212.915834][ T7838] #0: ffff88805ccc59e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 212.915859][ T7838] #1: ffff88802e9ae460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 212.915886][ T7838] #2: ffff888056f0ac88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1d8/0x520 [ 212.915908][ T7838] #3: ffff888017687830 (kn->active#74){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x520 [ 212.915933][ T7838] #4: ffffffff8c9e2aa8 (system_transition_mutex){+.+.}-{3:3}, at: pm_suspend+0x11c/0x9a0 [ 212.915955][ T7838] #5: ffffffff8c80a058 (tasklist_lock){.+.+}-{2:2}, at: try_to_freeze_tasks+0xe5/0x600 [ 212.915979][ T7838] #6: ffffffff8cb40398 (freezer_lock){....}-{2:2}, at: freeze_task+0x7c/0x3a0 [ 212.916001][ T7838] #7: ffff888018bac618 (&p->pi_lock){-.-.}-{2:2}, at: task_call_func+0x3f/0x260 [ 212.916023][ T7838] #8: ffffffff8cb21b60 (console_lock){+.+.}-{0:0}, at: _printk+0xda/0x130 [ 212.916047][ T7838] [ 212.916047][ T7838] stack backtrace: [ 212.916050][ T7838] CPU: 0 PID: 7838 Comm: syz.3.784 Not tainted syzkaller #0 [ 212.916059][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 212.916065][ T7838] Call Trace: [ 212.916068][ T7838] [ 212.916071][ T7838] dump_stack_lvl+0x188/0x24e [ 212.916083][ T7838] ? load_image+0x410/0x410 [ 212.916096][ T7838] ? show_regs_print_info+0x12/0x12 [ 212.916108][ T7838] ? print_circular_bug+0x12b/0x1a0 [ 212.916123][ T7838] check_noncircular+0x2f8/0x400 [ 212.916136][ T7838] ? print_deadlock_bug+0x5d0/0x5d0 [ 212.916149][ T7838] ? lockdep_lock+0xf1/0x1f0 [ 212.916163][ T7838] __lock_acquire+0x3a03/0x7ea0 [ 212.916180][ T7838] ? verify_lock_unused+0x140/0x140 [ 212.916196][ T7838] lock_acquire+0x1bc/0x4a0 [ 212.916208][ T7838] ? console_emit_next_record+0x68f/0xb50 [ 212.916218][ T7838] ? __lock_acquire+0x7ea0/0x7ea0 [ 212.916237][ T7838] ? do_raw_spin_lock+0x128/0x2f0 [ 212.916246][ T7838] ? read_lock_is_recursive+0x10/0x10 [ 212.916258][ T7838] ? __rwlock_init+0x140/0x140 [ 212.916267][ T7838] ? do_raw_spin_unlock+0x11d/0x230 [ 212.916277][ T7838] console_emit_next_record+0x6b0/0xb50 [ 212.916285][ T7838] ? console_emit_next_record+0x68f/0xb50 [ 212.916294][ T7838] ? console_emit_next_record+0x68f/0xb50 [ 212.916303][ T7838] ? info_print_prefix+0x360/0x360 [ 212.916312][ T7838] ? do_raw_spin_unlock+0x11d/0x230 [ 212.916321][ T7838] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 212.916329][ T7838] ? _raw_spin_unlock+0x40/0x40 [ 212.916344][ T7838] ? __down_trylock_console_sem+0x19f/0x1f0 [ 212.916358][ T7838] ? _printk+0xda/0x130 [ 212.916370][ T7838] ? _printk+0xda/0x130 [ 212.916382][ T7838] ? console_trylock+0x160/0x160 [ 212.916399][ T7838] console_unlock+0x223/0x630 [ 212.916412][ T7838] ? _printk+0xda/0x130 [ 212.916424][ T7838] vprintk_emit+0x4b3/0x6a0 [ 212.916437][ T7838] ? printk_sprint+0x460/0x460 [ 212.916449][ T7838] ? verify_lock_unused+0x140/0x140 [ 212.916464][ T7838] _printk+0xda/0x130 [ 212.916476][ T7838] ? verify_lock_unused+0x140/0x140 [ 212.916489][ T7838] ? load_image+0x410/0x410 [ 212.916503][ T7838] ? find_bug+0xa1/0x3a0 [ 212.916512][ T7838] ? __set_task_frozen+0x1e9/0x290 [ 212.916524][ T7838] report_bug+0x34a/0x4f0 [ 212.916534][ T7838] ? __set_task_frozen+0x1e9/0x290 [ 212.916546][ T7838] handle_bug+0x3a/0x70 [ 212.916556][ T7838] exc_invalid_op+0x16/0x40 [ 212.916567][ T7838] asm_exc_invalid_op+0x16/0x20 [ 212.916576][ T7838] RIP: 0010:__set_task_frozen+0x1e9/0x290 [ 212.916589][ T7838] Code: 68 c7 03 00 80 00 00 bd 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 33 88 11 00 0f 0b e9 2c ff ff ff e8 27 88 11 00 <0f> 0b eb bf 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 38 fe ff ff 48 89 [ 212.916597][ T7838] RSP: 0018:ffffc90004b77a50 EFLAGS: 00010046 [ 212.916605][ T7838] RAX: ffffffff8170be59 RBX: ffff888018babc18 RCX: 0000000000080000 [ 212.916612][ T7838] RDX: ffffc900229ea000 RSI: 000000000007ffff RDI: 0000000000080000 [ 212.916618][ T7838] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 212.916624][ T7838] R10: dffffc0000000000 R11: fffff5200096ef2c R12: 0000000000000000 [ 212.916630][ T7838] R13: 1ffff11003175783 R14: ffff888018bac6d8 R15: dffffc0000000000 [ 212.916639][ T7838] ? __set_task_frozen+0x1e9/0x290 [ 212.916651][ T7838] ? set_freezable+0x230/0x230 [ 212.916662][ T7838] task_call_func+0x19e/0x260 [ 212.916674][ T7838] freeze_task+0x213/0x3a0 [ 212.916685][ T7838] ? __refrigerator+0x570/0x570 [ 212.916698][ T7838] try_to_freeze_tasks+0x190/0x600 [ 212.916712][ T7838] freeze_processes+0xc5/0x1e0 [ 212.916727][ T7838] pm_suspend+0x289/0x9a0 [ 212.916737][ T7838] state_store+0x202/0x290 [ 212.916747][ T7838] ? sysfs_kf_read+0x350/0x350 [ 212.916763][ T7838] kernfs_fop_write_iter+0x3a0/0x520 [ 212.916775][ T7838] vfs_write+0x482/0x9a0 [ 212.916788][ T7838] ? file_end_write+0x250/0x250 [ 212.916802][ T7838] ? __fget_files+0x3fc/0x460 [ 212.916816][ T7838] ? __fdget_pos+0x2ae/0x360 [ 212.916828][ T7838] ? ksys_write+0x70/0x260 [ 212.916841][ T7838] ksys_write+0x14d/0x260 [ 212.916855][ T7838] ? __ia32_sys_read+0x80/0x80 [ 212.916868][ T7838] ? lockdep_hardirqs_on+0x94/0x140 [ 212.916881][ T7838] do_syscall_64+0x4c/0xa0 [ 212.916891][ T7838] ? clear_bhb_loop+0x60/0xb0 [ 212.916901][ T7838] ? clear_bhb_loop+0x60/0xb0 [ 212.916911][ T7838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.916920][ T7838] RIP: 0033:0x7f124e79e199 [ 212.916929][ T7838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.916937][ T7838] RSP: 002b:00007f124f728028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 212.916946][ T7838] RAX: ffffffffffffffda RBX: 00007f124ea25fa0 RCX: 00007f124e79e199 [ 212.916952][ T7838] RDX: 0000000000000007 RSI: 00002000000001c0 RDI: 0000000000000003 [ 212.916958][ T7838] RBP: 00007f124e8350b8 R08: 0000000000000000 R09: 0000000000000000 [ 212.916963][ T7838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.916969][ T7838] R13: 00007f124ea26038 R14: 00007f124ea25fa0 R15: 00007ffe68a249e8 [ 212.916978][ T7838] [ 214.036979][ T7838] WARNING: CPU: 0 PID: 7838 at kernel/freezer.c:129 __set_task_frozen+0x1e9/0x290 [ 214.046172][ T7838] Modules linked in: [ 214.050041][ T7838] CPU: 0 PID: 7838 Comm: syz.3.784 Not tainted syzkaller #0 [ 214.057300][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 214.067333][ T7838] RIP: 0010:__set_task_frozen+0x1e9/0x290 [ 214.073037][ T7838] Code: 68 c7 03 00 80 00 00 bd 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 33 88 11 00 0f 0b e9 2c ff ff ff e8 27 88 11 00 <0f> 0b eb bf 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 38 fe ff ff 48 89 [ 214.092633][ T7838] RSP: 0018:ffffc90004b77a50 EFLAGS: 00010046 [ 214.098697][ T7838] RAX: ffffffff8170be59 RBX: ffff888018babc18 RCX: 0000000000080000 [ 214.106659][ T7838] RDX: ffffc900229ea000 RSI: 000000000007ffff RDI: 0000000000080000 [ 214.114644][ T7838] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 214.122594][ T7838] R10: dffffc0000000000 R11: fffff5200096ef2c R12: 0000000000000000 [ 214.130556][ T7838] R13: 1ffff11003175783 R14: ffff888018bac6d8 R15: dffffc0000000000 [ 214.138522][ T7838] FS: 00007f124f7286c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 214.147444][ T7838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.154013][ T7838] CR2: 000055ce33f720a0 CR3: 00000000419e7000 CR4: 00000000003526f0 [ 214.161974][ T7838] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 214.169945][ T7838] DR3: 3a810b1eb6134bdc DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 214.177915][ T7838] Call Trace: [ 214.181264][ T7838] [ 214.184191][ T7838] ? set_freezable+0x230/0x230 [ 214.188976][ T7838] task_call_func+0x19e/0x260 [ 214.193648][ T7838] freeze_task+0x213/0x3a0 [ 214.198054][ T7838] ? __refrigerator+0x570/0x570 [ 214.202889][ T7838] try_to_freeze_tasks+0x190/0x600 [ 214.208006][ T7838] freeze_processes+0xc5/0x1e0 [ 214.212752][ T7838] pm_suspend+0x289/0x9a0 [ 214.217059][ T7838] state_store+0x202/0x290 [ 214.221455][ T7838] ? sysfs_kf_read+0x350/0x350 [ 214.226199][ T7838] kernfs_fop_write_iter+0x3a0/0x520 [ 214.231474][ T7838] vfs_write+0x482/0x9a0 [ 214.235714][ T7838] ? file_end_write+0x250/0x250 [ 214.240548][ T7838] ? __fget_files+0x3fc/0x460 [ 214.245208][ T7838] ? __fdget_pos+0x2ae/0x360 [ 214.249780][ T7838] ? ksys_write+0x70/0x260 [ 214.254182][ T7838] ksys_write+0x14d/0x260 [ 214.258502][ T7838] ? __ia32_sys_read+0x80/0x80 [ 214.263249][ T7838] ? lockdep_hardirqs_on+0x94/0x140 [ 214.268440][ T7838] do_syscall_64+0x4c/0xa0 [ 214.272838][ T7838] ? clear_bhb_loop+0x60/0xb0 [ 214.278774][ T7838] ? clear_bhb_loop+0x60/0xb0 [ 214.283535][ T7838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.289431][ T7838] RIP: 0033:0x7f124e79e199 [ 214.294021][ T7838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.313715][ T7838] RSP: 002b:00007f124f728028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 214.322139][ T7838] RAX: ffffffffffffffda RBX: 00007f124ea25fa0 RCX: 00007f124e79e199 [ 214.330095][ T7838] RDX: 0000000000000007 RSI: 00002000000001c0 RDI: 0000000000000003 [ 214.338049][ T7838] RBP: 00007f124e8350b8 R08: 0000000000000000 R09: 0000000000000000 [ 214.346044][ T7838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.354005][ T7838] R13: 00007f124ea26038 R14: 00007f124ea25fa0 R15: 00007ffe68a249e8 [ 214.361968][ T7838] [ 214.364987][ T7838] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 214.372255][ T7838] CPU: 0 PID: 7838 Comm: syz.3.784 Not tainted syzkaller #0 [ 214.379550][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 214.389597][ T7838] Call Trace: [ 214.392862][ T7838] [ 214.395778][ T7838] dump_stack_lvl+0x188/0x24e [ 214.400441][ T7838] ? memcpy+0x3c/0x60 [ 214.404401][ T7838] ? show_regs_print_info+0x12/0x12 [ 214.409579][ T7838] ? load_image+0x410/0x410 [ 214.414070][ T7838] panic+0x2d3/0x710 [ 214.417950][ T7838] ? bpf_jit_dump+0xd0/0xd0 [ 214.422435][ T7838] __warn+0x2f8/0x4f0 [ 214.426397][ T7838] ? __set_task_frozen+0x1e9/0x290 [ 214.431487][ T7838] ? __set_task_frozen+0x1e9/0x290 [ 214.436581][ T7838] report_bug+0x2ba/0x4f0 [ 214.440888][ T7838] ? __set_task_frozen+0x1e9/0x290 [ 214.445981][ T7838] handle_bug+0x3a/0x70 [ 214.450118][ T7838] exc_invalid_op+0x16/0x40 [ 214.454620][ T7838] asm_exc_invalid_op+0x16/0x20 [ 214.459453][ T7838] RIP: 0010:__set_task_frozen+0x1e9/0x290 [ 214.465154][ T7838] Code: 68 c7 03 00 80 00 00 bd 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 33 88 11 00 0f 0b e9 2c ff ff ff e8 27 88 11 00 <0f> 0b eb bf 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 38 fe ff ff 48 89 [ 214.484739][ T7838] RSP: 0018:ffffc90004b77a50 EFLAGS: 00010046 [ 214.490800][ T7838] RAX: ffffffff8170be59 RBX: ffff888018babc18 RCX: 0000000000080000 [ 214.498766][ T7838] RDX: ffffc900229ea000 RSI: 000000000007ffff RDI: 0000000000080000 [ 214.506736][ T7838] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 214.514686][ T7838] R10: dffffc0000000000 R11: fffff5200096ef2c R12: 0000000000000000 [ 214.522635][ T7838] R13: 1ffff11003175783 R14: ffff888018bac6d8 R15: dffffc0000000000 [ 214.530591][ T7838] ? __set_task_frozen+0x1e9/0x290 [ 214.535691][ T7838] ? set_freezable+0x230/0x230 [ 214.540433][ T7838] task_call_func+0x19e/0x260 [ 214.545094][ T7838] freeze_task+0x213/0x3a0 [ 214.549490][ T7838] ? __refrigerator+0x570/0x570 [ 214.554409][ T7838] try_to_freeze_tasks+0x190/0x600 [ 214.559506][ T7838] freeze_processes+0xc5/0x1e0 [ 214.564248][ T7838] pm_suspend+0x289/0x9a0 [ 214.568568][ T7838] state_store+0x202/0x290 [ 214.572970][ T7838] ? sysfs_kf_read+0x350/0x350 [ 214.577715][ T7838] kernfs_fop_write_iter+0x3a0/0x520 [ 214.583000][ T7838] vfs_write+0x482/0x9a0 [ 214.587231][ T7838] ? file_end_write+0x250/0x250 [ 214.592067][ T7838] ? __fget_files+0x3fc/0x460 [ 214.597161][ T7838] ? __fdget_pos+0x2ae/0x360 [ 214.601737][ T7838] ? ksys_write+0x70/0x260 [ 214.606137][ T7838] ksys_write+0x14d/0x260 [ 214.610451][ T7838] ? __ia32_sys_read+0x80/0x80 [ 214.615202][ T7838] ? lockdep_hardirqs_on+0x94/0x140 [ 214.620400][ T7838] do_syscall_64+0x4c/0xa0 [ 214.624797][ T7838] ? clear_bhb_loop+0x60/0xb0 [ 214.629452][ T7838] ? clear_bhb_loop+0x60/0xb0 [ 214.634110][ T7838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.639981][ T7838] RIP: 0033:0x7f124e79e199 [ 214.644383][ T7838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.663972][ T7838] RSP: 002b:00007f124f728028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 214.672365][ T7838] RAX: ffffffffffffffda RBX: 00007f124ea25fa0 RCX: 00007f124e79e199 [ 214.680849][ T7838] RDX: 0000000000000007 RSI: 00002000000001c0 RDI: 0000000000000003 [ 214.688816][ T7838] RBP: 00007f124e8350b8 R08: 0000000000000000 R09: 0000000000000000 [ 214.696777][ T7838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.704735][ T7838] R13: 00007f124ea26038 R14: 00007f124ea25fa0 R15: 00007ffe68a249e8 [ 214.712697][ T7838] [ 215.817024][ T7838] Shutting down cpus with NMI [ 215.822000][ T7838] Kernel Offset: disabled [ 215.826342][ T7838] Rebooting in 86400 seconds..