last executing test programs: 1m31.882765609s ago: executing program 4 (id=356): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'xfrm0\x00'}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0x12, 0x4, 0x0, 0x0) 1m31.805759017s ago: executing program 4 (id=360): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @dev={0xac, 0x14, 0x14, 0x8b}, 0x15, 0x3, 'fo\x00', 0x1, 0x400000, 0x4}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000001c0)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@rand_addr=0x64010100, 0x4e23, 0x0, 0x244, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000280)={&(0x7f00000002c0)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m31.117720118s ago: executing program 4 (id=361): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x28) write(r0, &(0x7f0000000500)='1', 0x1) socket$inet6(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='1', 0x1) 1m16.67282602s ago: executing program 4 (id=377): syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x1a04447, &(0x7f0000000480)=ANY=[], 0x0, 0x20d, &(0x7f0000000940)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x1, &(0x7f0000000c40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000cc0)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), 0x0, &(0x7f0000000d80)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000dc0)='./file0\x00') mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./proc/thread-self/fail-nth\x00', 0x2, 0x10) write(r1, &(0x7f0000000f40)='7', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./dev\x00', 0x1ff) 1m16.072633742s ago: executing program 4 (id=380): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10040881) mkdirat(0xffffffffffffff9c, 0x0, 0x67) mount$9p_rdma(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x10400, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="3ce2", 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) syz_clone(0x84100000, &(0x7f0000000fc0)="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", 0xfc0, &(0x7f0000001fc0), &(0x7f0000002000), &(0x7f0000002040)="c59f502fcfb9b286fcb949d98d6c771752adba8f5e4caffc9bc73fc363e76f12daea7dde55970905e22bfe3faad8484431bc8e0272f5c7005d240d7e847ad601c08474c771a865dcdb14e1e3a107552070b58b269a5ad4eb75efae0bf4d2621ef8626e75e8c693b8bfa07aeebaa942179d4f9360b92586f962ccb894c984a0432ccec5328770e3c3691484b4f47d5e09986593cdd4334e1cbb5c7d691edc1256a79ab098afe944bbb23b089f61b3d2d2fd84e5a099e4b959ae037e44f5006c") r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xa6, &(0x7f0000000100)={&(0x7f0000000280)=@bridge_getvlan={0x20, 0x72, 0x301, 0x100000, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x12}]}, 0x20}, 0x1, 0xf00}, 0x0) shutdown(r0, 0x1) 1m14.619268082s ago: executing program 4 (id=392): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x10048, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2a5, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f0000000c80)='./bus\x00', 0x1c1002, 0x2c3) 1m14.583615256s ago: executing program 32 (id=392): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x10048, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2a5, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f0000000c80)='./bus\x00', 0x1c1002, 0x2c3) 12.48707204s ago: executing program 3 (id=624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x5890) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x0) 12.447953204s ago: executing program 2 (id=625): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a40)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000001ac0)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8700132001000000000000", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.418616377s ago: executing program 2 (id=626): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) 12.39283522s ago: executing program 1 (id=627): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="60040000", @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2], 0x460}}, 0x0) 12.39230683s ago: executing program 3 (id=628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 11.868533534s ago: executing program 5 (id=630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000081d46037b323fc6300000008000300", @ANYRES32=r2], 0x2c}}, 0x0) 11.535022378s ago: executing program 2 (id=631): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000116c0)={0x0, 0x0, &(0x7f0000011700)={&(0x7f0000011740)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0xa, 0x9cff) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xc, &(0x7f0000000540)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000680)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r7, &(0x7f0000000100)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r7, 0x5) write$tun(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000500030008"], 0x4a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000117c0)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000011800)={'veth0\x00', 0x0}) r10 = socket(0x2d, 0x2, 0x0) connect$netlink(r10, &(0x7f00000006c0)=@unspec={0x2d, 0xa00}, 0xc) sendmsg$nl_route(r0, &(0x7f0000011840)={0x0, 0x0, &(0x7f0000011880)={&(0x7f00000118c0)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000011900)={0x0, 0x0, &(0x7f0000011940)={&(0x7f0000011980)=ANY=[@ANYBLOB="340000001400010604000000000000000a402000", @ANYRES32=r9, @ANYBLOB="140002002001"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000119c0)={0x0, 0x0, &(0x7f0000011a00)={&(0x7f0000011a40)=ANY=[@ANYBLOB="340000001400010605000000000000000a402000", @ANYRES32=r8, @ANYBLOB="140002002001"], 0x34}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000011a80)='veth0\x00', 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r11, &(0x7f0000000340)={0x2, @short}, 0x14) sendto$inet6(r1, &(0x7f0000011ac0), 0x0, 0x0, &(0x7f0000011b00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 1.500442165s ago: executing program 1 (id=632): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001140)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x4, 0x0, 0x0, 0x2, 0x95, &(0x7f00000005c0)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000880)={'wlan1\x00', @random="0100000000eb"}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000008c0)={0xa000000d}) syz_emit_ethernet(0x32, &(0x7f0000000280)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.495000525s ago: executing program 3 (id=633): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b3f82abd7000fcdbdf251200000008001500c0000000080001"], 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x800) 1.494699815s ago: executing program 5 (id=634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x40004) 1.458950589s ago: executing program 5 (id=635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x890d}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x22}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3b, 0x28, 0x66, 0x0, 0x0, 0x1, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x2, 0x7}}}}}}, 0x3e) 1.453882709s ago: executing program 0 (id=636): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000400)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000004c0), 0x4) write(r0, &(0x7f0000000500)="56e54689e27c375f9d5571fe78f54d52d8b31f91ef6ea134adc9fdbe364e4f00f5897b8e935b0a27f104a0145c19471f4bb77f5f38d3060e3cef6f85c413ee69b46f8dda11ef9ca09dd1f0021baf76a5b76c2659a44038818af8d006b5447f437a8699a0590837b901ddec0a34746e8d78eadb39ce7ca06b3ed71ff45b97d7bd5181f39164c5cff7a22ee0074e04bff91e7c946605f4d3a6c7edb278b66b52a639", 0xa1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e23, @multicast2}, 0x10) 1.453560899s ago: executing program 1 (id=637): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x28, r0, 0x303, 0x70bf2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044080}, 0xc80) 1.44496138s ago: executing program 3 (id=638): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a40)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000001ac0)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8700132001000000000000", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.418496033s ago: executing program 2 (id=639): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f72740000"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="1a", 0x1, 0x0, &(0x7f0000000440)={0xa, 0x4e23, 0x10, @loopback}, 0x1c) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.408353514s ago: executing program 3 (id=640): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r3, &(0x7f0000000240)="240000001a005f0214f9f407000904001f000000000000000000000008000400010000", 0x23) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/kmsg\x00', 0x60000, 0x0) lseek(r4, 0x0, 0x2) read(r4, &(0x7f00000003c0)=""/174, 0xae) write$mtd(r4, &(0x7f0000000480)="265353c7ca0c23df5b775c4479231b18650a51f4f25b6f68fd6aeedd91192edd242cb1de0d1a400b2c2933e0347212a5bf85a9bf51be7495cc0a32cb5fa73bc845d3e6b354975685fd485f54b77094cf0e4288ad64d7ed870b8a67968745c9250c5ab9d2d3544c9cfb6bfc6bfe0aaecfb5c308b580294835cbc271eb41b7a54b586cb80c31a784153b8e6c2e616d83f58f827117576e872b6af6b3b277ce6a5c24953716a493947aff2ae5149beb6e617e44ab91c2e8dfabe32fc8e7363a0d2f02c57489b70a6ebeb17853e5134fc00a640041334cf24d1455b08f227f83da7949240b32d9cafd", 0xe7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setxattr$trusted_overlay_redirect(&(0x7f00000001c0)='./dev/kmsg/file0\x00', &(0x7f0000000340), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6d, 0x3) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e0701081400c80010"], 0xa) 1.394099256s ago: executing program 1 (id=641): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000007e00)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000007e40)={0xa, 0x4e22, 0xfffffffd, @empty, 0x7}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000007e80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000007ec0), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000007f00)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000007f40)={0x0, 0x0, &(0x7f0000007f80)={&(0x7f0000007fc0)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000008000)={0x0, 0x20, &(0x7f0000008040)={&(0x7f0000008080)={0x30, r3, 0x1, 0x70bd2c, 0x9000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 1.377540237s ago: executing program 0 (id=642): r0 = geteuid() syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x1000c, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], 0x1, 0x1cf, &(0x7f0000000700)="$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") getxattr(&(0x7f0000000b00)='./file1\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="757365722e757365736db7"], 0x0, 0x0) 1.25517981s ago: executing program 0 (id=643): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x204) r4 = socket$inet(0x2, 0x1, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00', 0x10}, 0x2c) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x2}) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r6 = socket$inet(0x2, 0x1, 0x6) connect(r6, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) 973.985129ms ago: executing program 1 (id=644): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000003200)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000003240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000003280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000032c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000003300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000003380), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000003400)=0x6) socket$inet6(0xa, 0x2, 0x3a) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000023c0)={0xffbffffa, 0x3, 0x0, 'queue0\x00', 0xe}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000100)={0x2020}, 0x2020) 876.147729ms ago: executing program 5 (id=645): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) bind$can_raw(r0, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000000c0)=0x4, 0x4) close(r0) 858.578481ms ago: executing program 5 (id=646): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000010c0)=@newtfilter={0x9c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_LABELS={0x14, 0x7, "ad671054a926d2b04fee11bd254fb42d"}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x9c}}, 0x0) write(r1, 0x0, 0x0) 590.764399ms ago: executing program 5 (id=647): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) write$nci(r0, &(0x7f0000000240)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="400202"], 0x5) 577.40188ms ago: executing program 2 (id=648): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) listen(r1, 0x7) 503.161868ms ago: executing program 2 (id=649): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000700)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000800)='yeah', 0x4) connect$inet(r0, &(0x7f0000000880)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000008c0)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01014102a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d4", 0xd4, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000002a80), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 111.097558ms ago: executing program 1 (id=650): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000013c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000014c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) syz_open_procfs(0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x46) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000001700)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001c80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000001dc0)={'syzkaller0\x00', @random="2b0100004ec6"}) 73.589122ms ago: executing program 0 (id=651): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/softnet_stat\x00') read$FUSE(r0, &(0x7f0000003600)={0x2020}, 0xffe4) preadv(r0, &(0x7f0000005640)=[{&(0x7f0000005680)=""/168, 0xa8}], 0x1, 0xffffffc0, 0x10000) 36.151856ms ago: executing program 0 (id=652): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000200)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000004340)=""/38, 0x26}, {&(0x7f0000004380)=""/98, 0x62}, {&(0x7f0000004580)=""/4087, 0xff7}, {&(0x7f00000055c0)=""/120, 0x78}, {&(0x7f0000005640)=""/187, 0xbb}, {&(0x7f00000004c0)=""/15, 0xf}, {&(0x7f0000000640)=""/98, 0x62}], 0x7}}, {{0x0, 0x0, 0x0}, 0x7ffffff}], 0x2, 0x40002100, 0x0) 34.801376ms ago: executing program 0 (id=653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000040000"], 0x50) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0xb00}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 0s ago: executing program 3 (id=654): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.232' (ED25519) to the list of known hosts. [ 28.492129][ T4318] cgroup: Unknown subsys name 'net' [ 28.768863][ T4318] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.024796][ T4318] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.431711][ T4336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.433556][ T4336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.442160][ T4337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.444354][ T4337] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.445990][ T4337] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.449268][ T4342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.450954][ T4342] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.452749][ T4342] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.454705][ T4344] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.456965][ T4344] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.460669][ T4339] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.462105][ T4339] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.463776][ T4339] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.465113][ T4339] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.466869][ T4339] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.468780][ T4344] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.470283][ T4339] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.471732][ T4339] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.473303][ T4344] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.474736][ T4339] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.477136][ T4344] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.478207][ T4346] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.480097][ T4346] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.482656][ T4333] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.487224][ T4333] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.489485][ T4346] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.514357][ T4336] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.516079][ T4336] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.524078][ T4337] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.526052][ T4336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.535171][ T4330] rdma_rxe: rxe_register_device failed with error -23 [ 30.535510][ T4332] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.545441][ T4343] rdma_rxe: rxe_register_device failed with error -23 [ 30.548063][ T4332] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.549573][ T4332] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.554409][ T4330] rdma_rxe: failed to add rxe_eth0 [ 30.555717][ T4331] rdma_rxe: rxe_register_device failed with error -23 [ 30.556600][ T4343] rdma_rxe: failed to add rxe_eth0 [ 30.576793][ T4331] rdma_rxe: failed to add rxe_eth0 [ 30.577203][ T4332] infiniband rxe0: set active [ 30.578971][ T4332] infiniband rxe0: added rxe_eth0 [ 30.590618][ T114] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.595423][ T4331] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.632502][ T4332] RDS/IB: rxe0: added [ 30.633547][ T4332] smc: adding ib device rxe0 with port count 1 [ 30.634775][ T4332] smc: ib device rxe0 port 1 has pnetid [ 30.647864][ T114] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.681590][ T4332] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.717729][ T4332] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.744250][ T4343] chnl_net:caif_netlink_parms(): no params data found [ 30.753797][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 30.778339][ T4340] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.813452][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.815017][ T4343] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.817173][ T4343] device bridge_slave_0 entered promiscuous mode [ 30.822284][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.823756][ T4343] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.825567][ T4343] device bridge_slave_1 entered promiscuous mode [ 30.842015][ T4332] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.846911][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 30.870092][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.871601][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.873278][ T4330] device bridge_slave_0 entered promiscuous mode [ 30.888954][ T4343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.892953][ T4343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.894829][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.896941][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.898697][ T4330] device bridge_slave_1 entered promiscuous mode [ 30.925289][ T4343] team0: Port device team_slave_0 added [ 30.927498][ T4343] team0: Port device team_slave_1 added [ 30.929924][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.933910][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.935490][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.937883][ T4331] device bridge_slave_0 entered promiscuous mode [ 30.943657][ T4343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.945046][ T4343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.951156][ T4343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.954184][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.963275][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.964711][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.966822][ T4331] device bridge_slave_1 entered promiscuous mode [ 30.968552][ T3996] infiniband rxe0: set active [ 30.970781][ T3905] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.972484][ T4343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.973946][ T4343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.980909][ T4343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.027774][ T4343] device hsr_slave_0 entered promiscuous mode [ 31.076446][ T4343] device hsr_slave_1 entered promiscuous mode [ 31.131703][ T4330] team0: Port device team_slave_0 added [ 31.133952][ T4330] team0: Port device team_slave_1 added [ 31.138905][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.154601][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.161754][ T4331] team0: Port device team_slave_0 added [ 31.163494][ T4331] team0: Port device team_slave_1 added [ 31.167160][ T4340] chnl_net:caif_netlink_parms(): no params data found [ 31.173689][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.175148][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.180256][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.188325][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.189737][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.194681][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.200711][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.201985][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.207704][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.219611][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.220870][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.225420][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.297252][ T4330] device hsr_slave_0 entered promiscuous mode [ 31.336446][ T4330] device hsr_slave_1 entered promiscuous mode [ 31.376340][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.377955][ T4330] Cannot create hsr debugfs directory [ 31.437479][ T4331] device hsr_slave_0 entered promiscuous mode [ 31.476477][ T4331] device hsr_slave_1 entered promiscuous mode [ 31.516302][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.517842][ T4331] Cannot create hsr debugfs directory [ 31.529167][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.530748][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.532432][ T4340] device bridge_slave_0 entered promiscuous mode [ 31.534441][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.535870][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.538655][ T4340] device bridge_slave_1 entered promiscuous mode [ 31.558095][ T4340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.561238][ T4332] chnl_net:caif_netlink_parms(): no params data found [ 31.568098][ T4340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.593109][ T4343] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.639286][ T4340] team0: Port device team_slave_0 added [ 31.644409][ T4343] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.708047][ T4340] team0: Port device team_slave_1 added [ 31.721697][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.723170][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.724926][ T4332] device bridge_slave_0 entered promiscuous mode [ 31.727116][ T4343] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.772994][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.774277][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.779129][ T4340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.781602][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.782928][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.784714][ T4332] device bridge_slave_1 entered promiscuous mode [ 31.793977][ T4343] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.840715][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.842212][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.847511][ T4340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.859783][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.865896][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.927799][ T4340] device hsr_slave_0 entered promiscuous mode [ 31.966499][ T4340] device hsr_slave_1 entered promiscuous mode [ 32.016348][ T4340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.017727][ T4340] Cannot create hsr debugfs directory [ 32.031366][ T4332] team0: Port device team_slave_0 added [ 32.033438][ T4332] team0: Port device team_slave_1 added [ 32.047101][ T4331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.087350][ T4331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.135503][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.137040][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.142242][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.145058][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.146396][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.150778][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.152786][ T4331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.223250][ T4331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.271245][ T4330] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.328475][ T4330] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.417347][ T4332] device hsr_slave_0 entered promiscuous mode [ 32.456535][ T4332] device hsr_slave_1 entered promiscuous mode [ 32.496354][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.497956][ T4332] Cannot create hsr debugfs directory [ 32.499607][ T4330] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.541572][ T4330] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.556498][ T4342] Bluetooth: hci3: command 0x0409 tx timeout [ 32.556501][ T4336] Bluetooth: hci4: command 0x0409 tx timeout [ 32.557821][ T4342] Bluetooth: hci2: command 0x0409 tx timeout [ 32.559071][ T4336] Bluetooth: hci0: command 0x0409 tx timeout [ 32.560239][ T4342] Bluetooth: hci1: command 0x0409 tx timeout [ 32.605767][ T4343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.622155][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.624338][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.629337][ T4343] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.639363][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.641913][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.643882][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.645273][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.651001][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.654173][ T4340] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.684274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.686137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.688533][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.689972][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.691752][ T4340] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.727863][ T4340] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.770676][ T4340] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.840357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.845265][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.853652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.869172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.871233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.874151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.885405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.890044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.891836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.893712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.898385][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.903154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.904806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.908795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.910652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.917563][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.919374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.921523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.923333][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.924885][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.928970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.931176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.933067][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.934506][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.953658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.955324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.958361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.960267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.962400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.964268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.966032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.971718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.973519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.975433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.977911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.984735][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.993375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.003196][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.007466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.009194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.011625][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.014195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.015935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.022850][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.024262][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.028972][ T4340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.035060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.041190][ T4332] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.067835][ T4332] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.110676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.112523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.114737][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.116145][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.122070][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.127118][ T4340] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.129832][ T4332] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.170852][ T4343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.172222][ T4332] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.219979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.221905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.223567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.225446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.227896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.234506][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.242509][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.244510][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.246213][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.247687][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.249399][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.251004][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.252660][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.254469][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.256147][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.258908][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.260667][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.262013][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.263487][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.265503][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.267912][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.279819][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.281630][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.283322][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.285194][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.288251][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.300684][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.303125][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.304869][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.307176][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.308756][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.310556][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.312513][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.328226][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.330079][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.332398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.334309][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.338191][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.347891][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.349663][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.351774][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.353545][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.355572][ T4331] device veth0_vlan entered promiscuous mode [ 33.361504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.363314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.377183][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.379041][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.381366][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.383238][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.385357][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.388007][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.390534][ T4331] device veth1_vlan entered promiscuous mode [ 33.392976][ T4343] device veth0_vlan entered promiscuous mode [ 33.401654][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.404655][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.411451][ T4343] device veth1_vlan entered promiscuous mode [ 33.421821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.423617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.425370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.428512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.430929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.436106][ T4331] device veth0_macvtap entered promiscuous mode [ 33.440962][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.442879][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.444721][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.447128][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.465640][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.471493][ T4331] device veth1_macvtap entered promiscuous mode [ 33.473901][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.475567][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.479957][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.481640][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.483045][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.484872][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.493923][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.502658][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.504576][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.506835][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.508258][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.510002][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.511470][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.519151][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.521216][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.522965][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.525162][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.527305][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.534375][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.539689][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.543767][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.551928][ T4340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.554333][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.556139][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.560804][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.562794][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.564662][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.567577][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.570789][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.581882][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.584095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.585912][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.588464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.590270][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.592207][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.594878][ T4331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.597629][ T4331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.599316][ T4331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.601183][ T4331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.605769][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.618495][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.620486][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.624868][ T4343] device veth0_macvtap entered promiscuous mode [ 33.627361][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.629083][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.630998][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.633050][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.635050][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.637784][ T4330] device veth0_vlan entered promiscuous mode [ 33.651062][ T4343] device veth1_macvtap entered promiscuous mode [ 33.658587][ T4330] device veth1_vlan entered promiscuous mode [ 33.691042][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.693217][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.698253][ T4343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.699864][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.701650][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.703509][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.705763][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.710962][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.714953][ T4330] device veth0_macvtap entered promiscuous mode [ 33.721063][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.723268][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.725734][ T4343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.731959][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.733766][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.735598][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.738465][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.740652][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.746966][ T4429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.748559][ T4429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.754606][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.756899][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.759453][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.762355][ T4330] device veth1_macvtap entered promiscuous mode [ 33.769036][ T4343] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.770756][ T4343] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.772378][ T4343] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.773935][ T4343] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.781702][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.783488][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.785373][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.789429][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.791055][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.801949][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.804041][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.805825][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.810743][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.813237][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.817092][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.818620][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.820174][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.822120][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.824263][ T4340] device veth0_vlan entered promiscuous mode [ 33.830752][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.836061][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.837972][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.840089][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.841859][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.843962][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.845920][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.849738][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.852311][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.868717][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.870710][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.872630][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.874506][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.881222][ T4340] device veth1_vlan entered promiscuous mode [ 33.898771][ T4330] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.900424][ T4330] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.902814][ T4330] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.904477][ T4330] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.910679][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.912325][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.914258][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.915907][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.930768][ T4332] device veth0_vlan entered promiscuous mode [ 33.940644][ T4429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.942289][ T4429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.944034][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.970912][ T4332] device veth1_vlan entered promiscuous mode [ 33.983643][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.985630][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.988651][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.996109][ T4340] device veth0_macvtap entered promiscuous mode [ 34.003874][ T4429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.005203][ T4429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.009928][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.011673][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.013371][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.018963][ T4340] device veth1_macvtap entered promiscuous mode [ 34.024113][ T4432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.025604][ T4432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.027535][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.029356][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.119043][ T4448] loop0: detected capacity change from 0 to 256 [ 34.328826][ T4448] ======================================================= [ 34.328826][ T4448] WARNING: The mand mount option has been deprecated and [ 34.328826][ T4448] and is ignored by this kernel. Remove the mand [ 34.328826][ T4448] option from the mount to silence this warning. [ 34.328826][ T4448] ======================================================= [ 34.349808][ T4448] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 34.378604][ T4332] device veth0_macvtap entered promiscuous mode [ 34.382331][ T4332] device veth1_macvtap entered promiscuous mode [ 34.401978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.403926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.405710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.409735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.432316][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.434248][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.436027][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.440102][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.442058][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.444172][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.448974][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.451492][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.452805][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.457724][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.459600][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.461540][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.465505][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.468350][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.470557][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.472730][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.474929][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.478282][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.480047][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.482155][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.485053][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.491499][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.493506][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.495358][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.498652][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.500516][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.502326][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.505042][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.509061][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.510789][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.512685][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.514465][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.517804][ T4451] device syzkaller0 entered promiscuous mode [ 34.521366][ T4340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.523140][ T4340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.524988][ T4340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.527392][ T4340] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.530229][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.532871][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.535071][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.538274][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.540462][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.542658][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.544786][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.547053][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.551725][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.555595][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.557681][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.557817][ T4451] TC_ACT_REPEAT abuse ? [ 34.569633][ T4332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.572935][ T4332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.574936][ T4332] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.577509][ T4332] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.636470][ T4342] Bluetooth: hci1: command 0x041b tx timeout [ 34.646701][ T4342] Bluetooth: hci0: command 0x041b tx timeout [ 34.646717][ T4337] Bluetooth: hci2: command 0x041b tx timeout [ 34.647832][ T4342] Bluetooth: hci4: command 0x041b tx timeout [ 34.649213][ T4337] Bluetooth: hci3: command 0x041b tx timeout [ 34.837907][ T4453] loop0: detected capacity change from 0 to 128 [ 34.855082][ T4453] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 34.895387][ T4453] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 34.909365][ T4453] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 34.921312][ T4331] EXT4-fs (loop0): unmounting filesystem. [ 35.069255][ T4468] loop0: detected capacity change from 0 to 1024 [ 35.327200][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.328616][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.330961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.341686][ T4469] loop1: detected capacity change from 0 to 256 [ 35.357009][ T4469] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.360235][ T4469] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 35.373884][ T4469] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xba97ad02, utbl_chksum : 0xe619d30d) [ 35.377364][ T4432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.377384][ T4456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.378748][ T4432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.380264][ T4456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.383282][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.387936][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.391223][ T4469] exFAT-fs (loop1): failed to load alloc-bitmap [ 35.393882][ T4469] exFAT-fs (loop1): failed to recognize exfat type [ 35.422030][ T4432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.424005][ T4432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.425720][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.706820][ T4477] Bluetooth: MGMT ver 1.22 [ 35.966290][ T4456] hfsplus: b-tree write err: -5, ino 8 [ 36.529591][ T4490] FAULT_INJECTION: forcing a failure. [ 36.529591][ T4490] name failslab, interval 1, probability 0, space 0, times 1 [ 36.532148][ T4490] CPU: 1 PID: 4490 Comm: syz.3.10 Not tainted syzkaller #0 [ 36.533511][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 36.535519][ T4490] Call trace: [ 36.536108][ T4490] dump_backtrace+0x1c4/0x1f0 [ 36.537039][ T4490] show_stack+0x2c/0x3c [ 36.537875][ T4490] __dump_stack+0x30/0x40 [ 36.538805][ T4490] dump_stack_lvl+0xf4/0x15c [ 36.539792][ T4490] dump_stack+0x1c/0x5c [ 36.540678][ T4490] should_fail_ex+0x3cc/0x524 [ 36.541552][ T4490] __should_failslab+0xc0/0x11c [ 36.542486][ T4490] should_failslab+0x10/0x28 [ 36.543366][ T4490] __kmem_cache_alloc_node+0x7c/0x318 [ 36.544439][ T4490] kmalloc_trace+0x48/0x94 [ 36.545335][ T4490] tipc_nametbl_insert_publ+0x5d8/0xf10 [ 36.546397][ T4490] tipc_nametbl_publish+0x10c/0x250 [ 36.547330][ T4490] tipc_sk_publish+0x17c/0x384 [ 36.548242][ T4490] tipc_sk_join+0x2d4/0x508 [ 36.549156][ T4490] tipc_setsockopt+0x3b8/0x7a8 [ 36.550116][ T4490] __sys_setsockopt+0x2fc/0x50c [ 36.551090][ T4490] __arm64_sys_setsockopt+0xc0/0xdc [ 36.552121][ T4490] invoke_syscall+0x98/0x290 [ 36.553036][ T4490] el0_svc_common+0x13c/0x258 [ 36.553974][ T4490] do_el0_svc+0x5c/0x134 [ 36.554847][ T4490] el0_svc+0x58/0x12c [ 36.555630][ T4490] el0t_64_sync_handler+0x84/0xf0 [ 36.556641][ T4490] el0t_64_sync+0x18c/0x190 [ 36.557628][ T4490] tipc: Failed to bind to 66,4294966268,4294966268 [ 36.573549][ T4494] loop1: detected capacity change from 0 to 512 [ 36.575230][ T4494] EXT4-fs: Ignoring removed orlov option [ 36.630687][ T4494] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 36.716594][ T4337] Bluetooth: hci3: command 0x040f tx timeout [ 36.729613][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 36.731410][ T4336] Bluetooth: hci2: command 0x040f tx timeout [ 36.732736][ T4337] Bluetooth: hci0: command 0x040f tx timeout [ 36.734079][ T4342] Bluetooth: hci1: command 0x040f tx timeout [ 36.751876][ T4500] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 36.923676][ T4513] loop2: detected capacity change from 0 to 64 [ 37.418125][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 38.796874][ T4336] Bluetooth: hci3: command 0x0419 tx timeout [ 38.798567][ T4337] Bluetooth: hci0: command 0x0419 tx timeout [ 38.799847][ T4346] Bluetooth: hci2: command 0x0419 tx timeout [ 38.801055][ T4342] Bluetooth: hci1: command 0x0419 tx timeout [ 38.802157][ T4333] Bluetooth: hci4: command 0x0419 tx timeout [ 39.246550][ T4544] IPv6: addrconf: prefix option has invalid lifetime [ 39.247921][ T4544] IPv6: addrconf: prefix option has invalid lifetime [ 39.385126][ T4547] loop1: detected capacity change from 0 to 40427 [ 39.390984][ T4547] F2FS-fs (loop1): Unrecognized mount option "whint_mode=fs-based" or missing value [ 39.517568][ T4547] loop1: detected capacity change from 0 to 256 [ 39.524535][ T4547] FAT-fs (loop1): Unrecognized mount option "uni_late=1" or missing value [ 40.445536][ T4554] orangefs_mount: mount request failed with -4 [ 40.458439][ T4518] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 40.712230][ T4568] Zero length message leads to an empty skb [ 42.124974][ T4578] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 45.449222][ T4596] FAULT_INJECTION: forcing a failure. [ 45.449222][ T4596] name failslab, interval 1, probability 0, space 0, times 0 [ 45.451484][ T4596] CPU: 0 PID: 4596 Comm: syz.1.39 Not tainted syzkaller #0 [ 45.452748][ T4596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 45.454494][ T4596] Call trace: [ 45.455096][ T4596] dump_backtrace+0x1c4/0x1f0 [ 45.455905][ T4596] show_stack+0x2c/0x3c [ 45.456658][ T4596] __dump_stack+0x30/0x40 [ 45.457522][ T4596] dump_stack_lvl+0xf4/0x15c [ 45.458464][ T4596] dump_stack+0x1c/0x5c [ 45.459297][ T4596] should_fail_ex+0x3cc/0x524 [ 45.460208][ T4596] __should_failslab+0xc0/0x11c [ 45.461177][ T4596] should_failslab+0x10/0x28 [ 45.462076][ T4596] kmem_cache_alloc_node+0x8c/0x344 [ 45.463112][ T4596] __kmem_cache_create+0x184/0x72c [ 45.464017][ T4596] kmem_cache_create_usercopy+0x184/0x2fc [ 45.465149][ T4596] kmem_cache_create+0x1c/0x28 [ 45.466129][ T4596] dm_bufio_client_create+0x538/0xf38 [ 45.467204][ T4596] dm_integrity_ctr+0x2b88/0x3ae8 [ 45.468242][ T4596] dm_table_add_target+0x4a4/0xb04 [ 45.469316][ T4596] table_load+0x26c/0x690 [ 45.470195][ T4596] dm_ctl_ioctl+0xaac/0xf1c [ 45.471093][ T4596] __arm64_sys_ioctl+0x14c/0x1c8 [ 45.472133][ T4596] invoke_syscall+0x98/0x290 [ 45.473080][ T4596] el0_svc_common+0x13c/0x258 [ 45.474164][ T4596] do_el0_svc+0x5c/0x134 [ 45.475104][ T4596] el0_svc+0x58/0x12c [ 45.476032][ T4596] el0t_64_sync_handler+0x84/0xf0 [ 45.477166][ T4596] el0t_64_sync+0x18c/0x190 [ 45.481788][ T4596] kmem_cache_create_usercopy(dm_bufio_buffer) failed with error -22 [ 45.483336][ T4596] CPU: 0 PID: 4596 Comm: syz.1.39 Not tainted syzkaller #0 [ 45.484818][ T4596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 45.486633][ T4596] Call trace: [ 45.487251][ T4596] dump_backtrace+0x1c4/0x1f0 [ 45.488217][ T4596] show_stack+0x2c/0x3c [ 45.488987][ T4596] __dump_stack+0x30/0x40 [ 45.489829][ T4596] dump_stack_lvl+0xf4/0x15c [ 45.490747][ T4596] dump_stack+0x1c/0x5c [ 45.491570][ T4596] kmem_cache_create_usercopy+0x24c/0x2fc [ 45.492681][ T4596] kmem_cache_create+0x1c/0x28 [ 45.493569][ T4596] dm_bufio_client_create+0x538/0xf38 [ 45.494815][ T4596] dm_integrity_ctr+0x2b88/0x3ae8 [ 45.495972][ T4596] dm_table_add_target+0x4a4/0xb04 [ 45.497144][ T4596] table_load+0x26c/0x690 [ 45.498139][ T4596] dm_ctl_ioctl+0xaac/0xf1c [ 45.499167][ T4596] __arm64_sys_ioctl+0x14c/0x1c8 [ 45.500241][ T4596] invoke_syscall+0x98/0x290 [ 45.501221][ T4596] el0_svc_common+0x13c/0x258 [ 45.502263][ T4596] do_el0_svc+0x5c/0x134 [ 45.503145][ T4596] el0_svc+0x58/0x12c [ 45.504011][ T4596] el0t_64_sync_handler+0x84/0xf0 [ 45.505018][ T4596] el0t_64_sync+0x18c/0x190 [ 45.617037][ T4596] device-mapper: table: 248:0: integrity: Cannot initialize dm-bufio (-ENOMEM) [ 45.618877][ T4596] device-mapper: ioctl: error adding target to table [ 50.099672][ T4416] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.204737][ T4627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.47'. [ 51.858760][ T4665] loop2: detected capacity change from 0 to 2048 [ 51.885122][ T4665] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 52.085190][ T4676] tipc: Started in network mode [ 52.093120][ T4676] tipc: Node identity 42902c0c38b1, cluster identity 4711 [ 52.670001][ T4687] loop3: detected capacity change from 0 to 2048 [ 52.772843][ T4687] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 53.029560][ T4676] tipc: Enabled bearer , priority 0 [ 53.050778][ T4689] device syzkaller0 entered promiscuous mode [ 53.136024][ T4697] loop1: detected capacity change from 0 to 256 [ 53.171697][ T4689] tipc: Resetting bearer [ 53.176611][ T4699] FAULT_INJECTION: forcing a failure. [ 53.176611][ T4699] name failslab, interval 1, probability 0, space 0, times 0 [ 53.179180][ T4699] CPU: 0 PID: 4699 Comm: syz.2.57 Not tainted syzkaller #0 [ 53.180440][ T4699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 53.182174][ T4699] Call trace: [ 53.182752][ T4699] dump_backtrace+0x1c4/0x1f0 [ 53.183532][ T4699] show_stack+0x2c/0x3c [ 53.184259][ T4699] __dump_stack+0x30/0x40 [ 53.185046][ T4699] dump_stack_lvl+0xf4/0x15c [ 53.185853][ T4699] dump_stack+0x1c/0x5c [ 53.186653][ T4699] should_fail_ex+0x3cc/0x524 [ 53.187597][ T4699] __should_failslab+0xc0/0x11c [ 53.188577][ T4699] should_failslab+0x10/0x28 [ 53.189501][ T4699] __kmem_cache_alloc_node+0x7c/0x318 [ 53.190570][ T4699] __kmalloc+0xc4/0x180 [ 53.191366][ T4699] memcg_list_lru_alloc+0x190/0x8bc [ 53.192358][ T4699] slab_pre_alloc_hook+0x2cc/0x31c [ 53.193401][ T4699] kmem_cache_alloc_lru+0x60/0x284 [ 53.194447][ T4699] __d_alloc+0x40/0x68c [ 53.195303][ T4699] d_alloc_parallel+0x80/0x1178 [ 53.196175][ T4699] __lookup_slow+0x114/0x38c [ 53.197042][ T4699] lookup_one_len+0x17c/0x298 [ 53.198008][ T4699] start_creating+0x198/0x2dc [ 53.198980][ T4699] debugfs_create_dir+0x30/0x3fc [ 53.200020][ T4699] bdi_register_va+0x284/0x81c [ 53.201009][ T4699] super_setup_bdi_name+0x100/0x208 [ 53.202099][ T4699] fuse_fill_super_common+0x500/0xe08 [ 53.203214][ T4699] fuse_fill_super+0x180/0x1ec [ 53.204202][ T4699] get_tree_nodev+0xb4/0x16c [ 53.205106][ T4699] fuse_get_tree+0x2e0/0x43c [ 53.206027][ T4699] vfs_get_tree+0x90/0x278 [ 53.206853][ T4699] do_new_mount+0x228/0x818 [ 53.207725][ T4699] path_mount+0x5ac/0xe6c [ 53.208576][ T4699] __arm64_sys_mount+0x4a0/0x5a0 [ 53.209571][ T4699] invoke_syscall+0x98/0x290 [ 53.210477][ T4699] el0_svc_common+0x13c/0x258 [ 53.211335][ T4699] do_el0_svc+0x5c/0x134 [ 53.212134][ T4699] el0_svc+0x58/0x12c [ 53.212919][ T4699] el0t_64_sync_handler+0x84/0xf0 [ 53.213882][ T4699] el0t_64_sync+0x18c/0x190 [ 53.215420][ T4672] tipc: Resetting bearer [ 53.687194][ T4672] tipc: Disabling bearer [ 54.056527][ T4714] process 'syz.2.64' launched './file1' with NULL argv: empty string added [ 54.711494][ T4718] loop3: detected capacity change from 0 to 32768 [ 54.775790][ T4718] JBD2: Ignoring recovery information on journal [ 54.781217][ T4733] nvmet: adding nsid 1 to subsystem testsubsys [ 54.789683][ T4718] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 54.795004][ T4725] null_blk: disk nullb1 created [ 54.799757][ T4718] JBD2: bad block at offset 32 [ 54.896785][ T4736] loop1: detected capacity change from 0 to 2048 [ 54.923174][ T4736] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 55.249114][ T4718] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 55.833626][ T4332] ocfs2: Unmounting device (7,3) on (node local) [ 55.842439][ T4748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.72'. [ 56.280248][ T4757] bcache: register_bcache() error : failed to open device [ 56.903743][ T4771] netlink: 'syz.4.80': attribute type 1 has an invalid length. [ 57.374202][ T4787] netlink: 76 bytes leftover after parsing attributes in process `syz.0.85'. [ 58.639439][ T4810] binder: 4807:4810 BC_ACQUIRE_DONE u0000080000000003 no match [ 59.511634][ T4823] loop2: detected capacity change from 0 to 256 [ 59.551484][ T4829] loop3: detected capacity change from 0 to 512 [ 59.554026][ T4829] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 59.557319][ T4829] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.564033][ T4829] EXT4-fs (loop3): 1 truncate cleaned up [ 59.565442][ T4829] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 59.623456][ T4833] binder: 4822:4833 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 59.625686][ T4833] binder: 4833 RLIMIT_NICE not set [ 59.891448][ T4835] netlink: 76 bytes leftover after parsing attributes in process `syz.1.98'. [ 59.929496][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 60.066495][ T4854] loop4: detected capacity change from 0 to 512 [ 60.080798][ T4854] EXT4-fs: Ignoring removed nobh option [ 60.104496][ T4854] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.107: invalid indirect mapped block 256 (level 2) [ 60.114463][ T4854] EXT4-fs (loop4): 2 truncates cleaned up [ 60.116720][ T4854] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 61.105386][ T4868] netlink: 76 bytes leftover after parsing attributes in process `syz.0.111'. [ 61.135221][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 61.235341][ T4881] loop0: detected capacity change from 0 to 16 [ 61.239278][ T4881] erofs: (device loop0): mounted with root inode @ nid 36. [ 61.245829][ T4881] erofs: (device loop0): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 61.248670][ T4881] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 61.251651][ T48] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 61.307683][ T4874] loop4: detected capacity change from 0 to 32768 [ 61.348610][ T4874] UFO tlock:0x00000000900e6540 [ 61.438953][ T4893] loop4: detected capacity change from 0 to 2048 [ 61.725247][ T4893] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 62.160604][ T4905] Bluetooth: MGMT ver 1.22 [ 62.222124][ T4909] netlink: 84 bytes leftover after parsing attributes in process `syz.3.125'. [ 62.372843][ T4923] loop3: detected capacity change from 0 to 512 [ 62.390617][ T4923] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 62.393575][ T4923] EXT4-fs (loop3): invalid journal inode [ 62.419212][ T4612] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 62.538837][ T4929] xt_NFQUEUE: number of total queues is 0 [ 63.332323][ T4944] netlink: 84 bytes leftover after parsing attributes in process `syz.3.137'. [ 63.537869][ T4955] TC_ACT_REPEAT abuse ? [ 63.739288][ T4963] loop1: detected capacity change from 0 to 8 [ 64.116614][ T4972] netlink: 84 bytes leftover after parsing attributes in process `syz.2.149'. [ 64.222881][ T4984] loop1: detected capacity change from 0 to 512 [ 64.233997][ T4984] EXT4-fs: Ignoring removed i_version option [ 64.237384][ T48] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 64.241331][ T4337] Bluetooth: hci3: command 0x1407 tx timeout [ 64.244248][ T4984] EXT4-fs (loop1): Test dummy encryption mode enabled [ 64.245554][ T4984] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.251111][ T4984] EXT4-fs (loop1): 1 truncate cleaned up [ 64.252450][ T4984] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 64.274796][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 64.616979][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.618616][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.111484][ T5002] loop2: detected capacity change from 0 to 16 [ 65.139142][ T5002] erofs: (device loop2): mounted with root inode @ nid 36. [ 65.143955][ T5002] syz.2.160: attempt to access beyond end of device [ 65.143955][ T5002] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 65.166040][ T5004] netlink: 16 bytes leftover after parsing attributes in process `syz.4.161'. [ 65.169161][ T5002] syz.2.160: attempt to access beyond end of device [ 65.169161][ T5002] loop2: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 65.185214][ T5006] device syzkaller1 entered promiscuous mode [ 65.186710][ T5002] syz.2.160: attempt to access beyond end of device [ 65.186710][ T5002] loop2: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 66.362091][ T5027] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 66.394226][ T5027] CIFS: Attempting to mount \\127.0.0.1\share [ 66.411177][ T5027] CIFS: VFS: No username specified [ 67.038960][ T5041] FAULT_INJECTION: forcing a failure. [ 67.038960][ T5041] name failslab, interval 1, probability 0, space 0, times 0 [ 67.041504][ T5043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.173'. [ 67.041750][ T5041] CPU: 0 PID: 5041 Comm: syz.3.172 Not tainted syzkaller #0 [ 67.044812][ T5041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 67.046942][ T5041] Call trace: [ 67.047597][ T5041] dump_backtrace+0x1c4/0x1f0 [ 67.048573][ T5041] show_stack+0x2c/0x3c [ 67.049419][ T5041] __dump_stack+0x30/0x40 [ 67.050329][ T5041] dump_stack_lvl+0xf4/0x15c [ 67.051265][ T5041] dump_stack+0x1c/0x5c [ 67.052184][ T5041] should_fail_ex+0x3cc/0x524 [ 67.053219][ T5041] __should_failslab+0xc0/0x11c [ 67.054185][ T5041] should_failslab+0x10/0x28 [ 67.055085][ T5041] __kmem_cache_alloc_node+0x7c/0x318 [ 67.056112][ T5041] kmalloc_trace+0x48/0x94 [ 67.057016][ T5041] snd_seq_pool_new+0x58/0x194 [ 67.057977][ T5041] seq_create_client1+0x78/0x4dc [ 67.058923][ T5041] snd_seq_open+0x64/0x484 [ 67.059758][ T5041] snd_open+0x294/0x348 [ 67.060525][ T5041] chrdev_open+0x3d0/0x51c [ 67.061455][ T5041] do_dentry_open+0x738/0xf8c [ 67.062388][ T5041] vfs_open+0x7c/0x90 [ 67.063185][ T5041] path_openat+0x1fc0/0x27a0 [ 67.064088][ T5041] do_filp_open+0x198/0x38c [ 67.064929][ T5041] do_sys_openat2+0x134/0x3fc [ 67.065888][ T5041] __arm64_sys_openat+0x11c/0x150 [ 67.066883][ T5041] invoke_syscall+0x98/0x290 [ 67.067811][ T5041] el0_svc_common+0x13c/0x258 [ 67.068744][ T5041] do_el0_svc+0x5c/0x134 [ 67.069577][ T5041] el0_svc+0x58/0x12c [ 67.070324][ T5041] el0t_64_sync_handler+0x84/0xf0 [ 67.071317][ T5041] el0t_64_sync+0x18c/0x190 [ 67.514071][ T5055] random: crng reseeded on system resumption [ 67.931390][ T5054] loop2: detected capacity change from 0 to 128 [ 68.010487][ T5069] loop1: detected capacity change from 0 to 512 [ 68.629163][ T5083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.185'. [ 69.564112][ T5111] device syzkaller0 entered promiscuous mode [ 69.609361][ T24] cfg80211: failed to load regulatory.db [ 69.708040][ T5113] loop2: detected capacity change from 0 to 32768 [ 69.755234][ T5113] OCFS2: ERROR (device loop2): int ocfs2_validate_extent_block(struct super_block *, struct buffer_head *): Extent block #17024 has bad signature [ 69.776350][ T5113] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 69.778298][ T5113] OCFS2: File system is now read-only. [ 69.779321][ T5113] (syz.2.197,5113,1):__ocfs2_find_path:1845 ERROR: status = -30 [ 69.780866][ T5113] (syz.2.197,5113,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 69.782375][ T5113] (syz.2.197,5113,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 69.784047][ T5113] (syz.2.197,5113,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 69.785522][ T5113] (syz.2.197,5113,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 69.796300][ T5113] (syz.2.197,5113,1):ocfs2_map_slot_buffers:378 ERROR: status = -30 [ 69.797807][ T5113] (syz.2.197,5113,1):ocfs2_init_slot_info:426 ERROR: status = -30 [ 69.799395][ T5113] (syz.2.197,5113,1):ocfs2_initialize_super:2277 ERROR: status = -30 [ 69.804702][ T5113] (syz.2.197,5113,1):ocfs2_fill_super:1176 ERROR: status = -30 [ 69.858513][ T4612] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 70.013706][ T5135] netlink: 44 bytes leftover after parsing attributes in process `syz.2.205'. [ 70.571542][ T5164] kernel profiling enabled (shift: 4) [ 70.615281][ T5168] TC_ACT_REPEAT abuse ? [ 70.778703][ T5180] loop3: detected capacity change from 0 to 4096 [ 70.794932][ T5184] FAULT_INJECTION: forcing a failure. [ 70.794932][ T5184] name failslab, interval 1, probability 0, space 0, times 0 [ 70.798597][ T5184] CPU: 1 PID: 5184 Comm: syz.1.222 Not tainted syzkaller #0 [ 70.800211][ T5184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 70.802627][ T5184] Call trace: [ 70.803354][ T5184] dump_backtrace+0x1c4/0x1f0 [ 70.804382][ T5184] show_stack+0x2c/0x3c [ 70.805257][ T5184] __dump_stack+0x30/0x40 [ 70.806185][ T5184] dump_stack_lvl+0xf4/0x15c [ 70.807105][ T5184] dump_stack+0x1c/0x5c [ 70.807865][ T5184] should_fail_ex+0x3cc/0x524 [ 70.808792][ T5184] __should_failslab+0xc0/0x11c [ 70.809756][ T5184] should_failslab+0x10/0x28 [ 70.810707][ T5184] __kmem_cache_alloc_node+0x7c/0x318 [ 70.811765][ T5184] kmalloc_trace+0x48/0x94 [ 70.812658][ T5184] sctp_endpoint_new+0xf8/0x838 [ 70.813660][ T5184] sctp_init_sock+0x654/0xf74 [ 70.814579][ T5184] sctp_v6_init_sock+0x20/0x80 [ 70.815486][ T5184] inet6_create+0xb9c/0xf9c [ 70.816400][ T5184] __sock_create+0x448/0x8a8 [ 70.817410][ T5184] __sys_socket+0xc0/0x1b0 [ 70.818312][ T5184] __arm64_sys_socket+0x7c/0x94 [ 70.819334][ T5184] invoke_syscall+0x98/0x290 [ 70.820375][ T5184] el0_svc_common+0x13c/0x258 [ 70.821326][ T5184] do_el0_svc+0x5c/0x134 [ 70.822180][ T5184] el0_svc+0x58/0x12c [ 70.823005][ T5184] el0t_64_sync_handler+0x84/0xf0 [ 70.823992][ T5184] el0t_64_sync+0x18c/0x190 [ 71.285022][ T5222] loop2: detected capacity change from 0 to 1024 [ 71.827222][ T5240] loop1: detected capacity change from 0 to 16 [ 71.834330][ T5240] erofs: (device loop1): mounted with root inode @ nid 36. [ 72.167861][ T5243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.170468][ T5243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.245741][ T5253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.246'. [ 72.376109][ T5269] loop2: detected capacity change from 0 to 4096 [ 72.392639][ T5269] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 72.414712][ T5272] netlink: 52 bytes leftover after parsing attributes in process `syz.0.253'. [ 72.594582][ T5281] loop0: detected capacity change from 0 to 512 [ 72.602141][ T5281] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.614919][ T5281] EXT4-fs (loop0): 1 orphan inode deleted [ 72.616310][ T5281] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 73.339720][ T5315] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 73.600849][ T4331] EXT4-fs (loop0): unmounting filesystem. [ 73.650101][ T5324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.661766][ T5324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.723140][ T5329] loop3: detected capacity change from 0 to 512 [ 74.042214][ T5329] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 74.074431][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 74.103549][ T5322] loop0: detected capacity change from 0 to 40427 [ 74.133671][ T5322] F2FS-fs (loop0): invalid crc value [ 74.189842][ T5322] F2FS-fs (loop0): Found nat_bits in checkpoint [ 74.209839][ T5322] F2FS-fs (loop0): Start checkpoint disabled! [ 74.224300][ T5322] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 74.593722][ T4750] kworker/u4:15: attempt to access beyond end of device [ 74.593722][ T4750] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 75.727745][ T5369] device syzkaller0 entered promiscuous mode [ 75.841007][ T5371] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 76.215672][ T5374] loop1: detected capacity change from 0 to 32768 [ 76.225183][ T5374] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.288 (5374) [ 76.251884][ T5374] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 76.254102][ T5374] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 76.530389][ T5374] BTRFS info (device loop1): using free space tree [ 76.642404][ T5374] BTRFS info (device loop1): enabling ssd optimizations [ 76.698815][ T4330] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 76.782081][ T5409] loop3: detected capacity change from 0 to 4096 [ 76.800422][ T5409] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 76.882245][ T5424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.297'. [ 77.305958][ T5436] FAULT_INJECTION: forcing a failure. [ 77.305958][ T5436] name failslab, interval 1, probability 0, space 0, times 0 [ 77.308675][ T5436] CPU: 0 PID: 5436 Comm: syz.2.301 Not tainted syzkaller #0 [ 77.310150][ T5436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 77.312242][ T5436] Call trace: [ 77.312889][ T5436] dump_backtrace+0x1c4/0x1f0 [ 77.313793][ T5436] show_stack+0x2c/0x3c [ 77.314658][ T5436] __dump_stack+0x30/0x40 [ 77.315554][ T5436] dump_stack_lvl+0xf4/0x15c [ 77.316463][ T5436] dump_stack+0x1c/0x5c [ 77.317295][ T5436] should_fail_ex+0x3cc/0x524 [ 77.318214][ T5436] __should_failslab+0xc0/0x11c [ 77.319154][ T5436] should_failslab+0x10/0x28 [ 77.320079][ T5436] __kmem_cache_alloc_node+0x7c/0x318 [ 77.321102][ T5436] kmalloc_trace+0x48/0x94 [ 77.321966][ T5436] ref_tracker_alloc+0x138/0x3f0 [ 77.322944][ T5436] dst_init+0xc0/0x3dc [ 77.323738][ T5436] dst_alloc+0x124/0x16c [ 77.324552][ T5436] ip_route_output_key_hash_rcu+0xfbc/0x1e18 [ 77.325669][ T5436] ip_route_output_key_hash+0x1b0/0x2fc [ 77.326734][ T5436] ip_route_output_flow+0x3c/0x158 [ 77.327700][ T5436] udp_sendmsg+0x10a8/0x1db0 [ 77.328604][ T5436] udpv6_sendmsg+0x8dc/0x20d0 [ 77.329515][ T5436] inet6_sendmsg+0xb4/0xd8 [ 77.330401][ T5436] sock_write_iter+0x268/0x368 [ 77.331317][ T5436] vfs_write+0x3c8/0x7c8 [ 77.332153][ T5436] ksys_write+0x12c/0x228 [ 77.333007][ T5436] __arm64_sys_write+0x7c/0x90 [ 77.333922][ T5436] invoke_syscall+0x98/0x290 [ 77.334828][ T5436] el0_svc_common+0x13c/0x258 [ 77.335703][ T5436] do_el0_svc+0x5c/0x134 [ 77.336547][ T5436] el0_svc+0x58/0x12c [ 77.337310][ T5436] el0t_64_sync_handler+0x84/0xf0 [ 77.338277][ T5436] el0t_64_sync+0x18c/0x190 [ 77.339566][ T5436] memory allocation failure, unreliable refcount tracker. [ 77.793552][ T5441] loop4: detected capacity change from 0 to 512 [ 77.803955][ T5441] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 77.842635][ T5441] EXT4-fs (loop4): 1 truncate cleaned up [ 77.845847][ T5441] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 77.861384][ T5449] device syzkaller0 entered promiscuous mode [ 77.951928][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 78.519036][ T5459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.310'. [ 78.523231][ T5459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.590517][ T5484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.593242][ T5484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.618466][ T5459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.020235][ T5506] device syzkaller0 entered promiscuous mode [ 80.172561][ T4461] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.619517][ T4461] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 80.621292][ T4461] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 80.623454][ T4461] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 80.625398][ T4461] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 80.628052][ T4461] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 80.632611][ T4461] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 80.634856][ T4461] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 80.636983][ T4461] usb 1-1: Product: syz [ 80.638067][ T4461] usb 1-1: Manufacturer: syz [ 80.663057][ T4461] cdc_wdm 1-1:1.0: skipping garbage [ 80.664419][ T4461] cdc_wdm 1-1:1.0: skipping garbage [ 80.665816][ T4461] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 81.076932][ T5420] usb 1-1: USB disconnect, device number 2 [ 81.973152][ T5572] device syzkaller0 entered promiscuous mode [ 82.073889][ T5582] syz.0.357 uses obsolete (PF_INET,SOCK_PACKET) [ 82.148920][ T5585] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 82.747462][ T5591] IPVS: fo: FWM 3 0x00000003 - no destination available [ 82.749290][ C0] IPVS: fo: FWM 3 0x00000003 - no destination available [ 83.737716][ T5605] loop0: detected capacity change from 0 to 40427 [ 83.749401][ T5605] F2FS-fs (loop0): invalid crc value [ 83.751268][ T5605] F2FS-fs (loop0): Found nat_bits in checkpoint [ 83.761645][ T5605] F2FS-fs (loop0): Start checkpoint disabled! [ 83.773208][ T5605] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 83.964248][ T5634] loop2: detected capacity change from 0 to 2048 [ 84.317125][ T5595] pci 0000:00:00.0: [1ae0:0042] type 00 class 0x020000 [ 84.340613][ T5595] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff] [ 84.379131][ T5595] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f] [ 84.383034][ T5595] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff] [ 84.417297][ T5595] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff]: assigned [ 84.422854][ T5595] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff]: assigned [ 84.425287][ T5595] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f]: assigned [ 84.441029][ T4416] gvnic 0000:00:00.0: Driver is running with DQO RDA queue format. [ 84.442826][ T4416] gvnic 0000:00:00.0: MAC addr: 42:01:0a:80:00:e8 [ 84.444275][ T4416] gvnic 0000:00:00.0: TX queues 2, RX queues 2 [ 84.445569][ T4416] gvnic 0000:00:00.0: Max TX queues 2, Max RX queues 2 [ 84.455732][ T60] kworker/u4:4: attempt to access beyond end of device [ 84.455732][ T60] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 84.489785][ T4416] gvnic 0000:00:00.0: GVE version 1.0.0 [ 84.490846][ T4416] gvnic 0000:00:00.0: GVE queue format 3 [ 84.499948][ T4612] gvnic 0000:00:00.0 enp0s0: renamed from eth0 [ 85.116137][ T60] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 85.125313][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready [ 97.212296][ T5761] loop4: detected capacity change from 0 to 16 [ 97.223943][ T5761] erofs: (device loop4): mounted with root inode @ nid 36. [ 97.277713][ T5761] FAULT_INJECTION: forcing a failure. [ 97.277713][ T5761] name failslab, interval 1, probability 0, space 0, times 0 [ 97.280488][ T5761] CPU: 0 PID: 5761 Comm: syz.4.377 Not tainted syzkaller #0 [ 97.281855][ T5761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 97.284094][ T5761] Call trace: [ 97.284833][ T5761] dump_backtrace+0x1c4/0x1f0 [ 97.285917][ T5761] show_stack+0x2c/0x3c [ 97.286841][ T5761] __dump_stack+0x30/0x40 [ 97.287707][ T5761] dump_stack_lvl+0xf4/0x15c [ 97.288634][ T5761] dump_stack+0x1c/0x5c [ 97.289478][ T5761] should_fail_ex+0x3cc/0x524 [ 97.290444][ T5761] __should_failslab+0xc0/0x11c [ 97.291446][ T5761] should_failslab+0x10/0x28 [ 97.292371][ T5761] slab_pre_alloc_hook+0x6c/0x31c [ 97.293414][ T5761] kmem_cache_alloc_lru+0x60/0x284 [ 97.294466][ T5761] __d_alloc+0x40/0x68c [ 97.295322][ T5761] d_alloc_parallel+0x80/0x1178 [ 97.296326][ T5761] __lookup_slow+0x114/0x38c [ 97.297255][ T5761] lookup_one_unlocked+0x148/0x268 [ 97.298255][ T5761] ovl_lookup_single+0x110/0x820 [ 97.299318][ T5761] ovl_lookup_layer+0x2f0/0x3b4 [ 97.300330][ T5761] ovl_lookup+0x5d4/0x1424 [ 97.301178][ T5761] lookup_one_qstr_excl+0x108/0x230 [ 97.302166][ T5761] filename_create+0x1d0/0x3a8 [ 97.303050][ T5761] do_mkdirat+0xac/0x3ec [ 97.303900][ T5761] __arm64_sys_mkdirat+0x90/0xa8 [ 97.304890][ T5761] invoke_syscall+0x98/0x290 [ 97.305771][ T5761] el0_svc_common+0x13c/0x258 [ 97.306738][ T5761] do_el0_svc+0x5c/0x134 [ 97.307568][ T5761] el0_svc+0x58/0x12c [ 97.308334][ T5761] el0t_64_sync_handler+0x84/0xf0 [ 97.309389][ T5761] el0t_64_sync+0x18c/0x190 [ 97.812097][ T4340] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 98.927361][ T5797] loop3: detected capacity change from 0 to 512 [ 99.088196][ T5797] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 99.089791][ T5797] System zones: 1-12 [ 99.140858][ T5797] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.386: missing EA_INODE flag [ 99.144598][ T5797] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.386: error while reading EA inode 12 err=-117 [ 99.147892][ T5797] EXT4-fs (loop3): 1 orphan inode deleted [ 99.149576][ T5797] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 99.612706][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 99.689364][ T4346] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.691703][ T4346] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.693746][ T4346] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.695354][ T4346] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.698094][ T4346] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 99.699634][ T4346] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.840156][ T4456] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.131272][ T4456] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.151459][ T5819] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.324370][ T4456] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.627882][ T4456] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.205435][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 101.804650][ T4346] Bluetooth: hci3: command 0x0409 tx timeout [ 101.978319][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.979909][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.982108][ T5819] device bridge_slave_0 entered promiscuous mode [ 101.994387][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.000212][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.004565][ T5819] device bridge_slave_1 entered promiscuous mode [ 102.045367][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.093955][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.309657][ T5880] FAULT_INJECTION: forcing a failure. [ 102.309657][ T5880] name failslab, interval 1, probability 0, space 0, times 0 [ 102.312479][ T5880] CPU: 0 PID: 5880 Comm: syz.0.409 Not tainted syzkaller #0 [ 102.313986][ T5880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 102.316081][ T5880] Call trace: [ 102.316706][ T5880] dump_backtrace+0x1c4/0x1f0 [ 102.317657][ T5880] show_stack+0x2c/0x3c [ 102.318494][ T5880] __dump_stack+0x30/0x40 [ 102.319342][ T5880] dump_stack_lvl+0xf4/0x15c [ 102.320284][ T5880] dump_stack+0x1c/0x5c [ 102.320868][ T5819] team0: Port device team_slave_0 added [ 102.321134][ T5880] should_fail_ex+0x3cc/0x524 [ 102.323363][ T5880] __should_failslab+0xc0/0x11c [ 102.324229][ T5880] should_failslab+0x10/0x28 [ 102.325129][ T5880] __kmem_cache_alloc_node+0x7c/0x318 [ 102.326117][ T5880] kmalloc_trace+0x48/0x94 [ 102.326962][ T5880] ref_tracker_alloc+0x138/0x3f0 [ 102.327952][ T5880] dst_init+0xc0/0x3dc [ 102.328801][ T5880] dst_alloc+0x124/0x16c [ 102.329628][ T5880] ip_route_output_key_hash_rcu+0xfbc/0x1e18 [ 102.330708][ T5880] ip_route_output_key_hash+0x1b0/0x2fc [ 102.331761][ T5880] ip_route_output_flow+0x3c/0x158 [ 102.332669][ T5819] team0: Port device team_slave_1 added [ 102.332721][ T5880] udp_sendmsg+0x10a8/0x1db0 [ 102.334622][ T5880] udpv6_sendmsg+0x8dc/0x20d0 [ 102.335487][ T5880] inet6_sendmsg+0xb4/0xd8 [ 102.336357][ T5880] sock_write_iter+0x268/0x368 [ 102.337200][ T5880] vfs_write+0x3c8/0x7c8 [ 102.338029][ T5880] ksys_write+0x12c/0x228 [ 102.338876][ T5880] __arm64_sys_write+0x7c/0x90 [ 102.339811][ T5880] invoke_syscall+0x98/0x290 [ 102.340677][ T5880] el0_svc_common+0x13c/0x258 [ 102.341612][ T5880] do_el0_svc+0x5c/0x134 [ 102.342378][ T5880] el0_svc+0x58/0x12c [ 102.342724][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.343122][ T5880] el0t_64_sync_handler+0x84/0xf0 [ 102.344368][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.345217][ T5880] el0t_64_sync+0x18c/0x190 [ 102.350285][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.354850][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.357424][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.362698][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.410521][ T4456] tipc: Left network mode [ 102.448054][ T5819] device hsr_slave_0 entered promiscuous mode [ 102.490817][ T5889] loop1: detected capacity change from 0 to 4096 [ 102.497023][ T5819] device hsr_slave_1 entered promiscuous mode [ 102.518884][ T5889] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 102.547572][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.550162][ T5819] Cannot create hsr debugfs directory [ 103.299079][ T5819] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.317643][ T5819] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.349208][ T5819] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.440787][ T5819] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.628103][ T5941] overlayfs: failed to clone upperpath [ 103.876344][ T4346] Bluetooth: hci3: command 0x041b tx timeout [ 103.978227][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.989804][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.992657][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.002273][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.011411][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.013599][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.015350][ T4659] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.016929][ T4659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.091489][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.093682][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.101413][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.104409][ T4659] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.105867][ T4659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.114338][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.120872][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.125347][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.134788][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.139985][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.145168][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.152560][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.158937][ T5947] loop0: detected capacity change from 0 to 40427 [ 104.162076][ T5865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.164094][ T5865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.199694][ T5947] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 104.201291][ T5947] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 104.203476][ T5947] F2FS-fs (loop0): invalid crc value [ 104.210365][ T5947] F2FS-fs (loop0): Found nat_bits in checkpoint [ 104.215583][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.223220][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.233628][ T5819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.276772][ T5947] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 104.278815][ T5947] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 104.420040][ T5947] syz.0.421: attempt to access beyond end of device [ 104.420040][ T5947] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 104.983369][ T4586] kworker/u4:11: attempt to access beyond end of device [ 104.983369][ T4586] loop0: rw=1, sector=77824, nr_sectors = 8 limit=40427 [ 104.992310][ T4586] kworker/u4:11: attempt to access beyond end of device [ 104.992310][ T4586] loop0: rw=1, sector=77888, nr_sectors = 8 limit=40427 [ 105.011816][ T4331] syz-executor: attempt to access beyond end of device [ 105.011816][ T4331] loop0: rw=2051, sector=77832, nr_sectors = 56 limit=40427 [ 105.025549][ T4331] F2FS-fs (loop0): Issue discard(9729, 9729, 7) failed, ret: -5 [ 105.170694][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.174367][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.180966][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.916368][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 106.010365][ T6018] loop3: detected capacity change from 0 to 128 [ 106.018289][ T6018] FAT-fs (loop3): bogus number of reserved sectors [ 106.019712][ T6018] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 106.021730][ T6018] FAT-fs (loop3): Can't find a valid FAT filesystem [ 106.515179][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.519455][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.528108][ T6024] loop3: detected capacity change from 0 to 4096 [ 106.533321][ T6024] EXT4-fs: Ignoring removed orlov option [ 106.534714][ T4456] device hsr_slave_0 left promiscuous mode [ 106.558279][ T6024] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.642481][ T4456] device hsr_slave_1 left promiscuous mode [ 106.926995][ T4456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.928796][ T4456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.999126][ T4456] device bridge_slave_1 left promiscuous mode [ 107.003975][ T4456] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.049732][ T4456] device bridge_slave_0 left promiscuous mode [ 107.052342][ T4456] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.177949][ T4456] device veth1_macvtap left promiscuous mode [ 107.180184][ T4456] device veth0_macvtap left promiscuous mode [ 107.182157][ T4456] device veth1_vlan left promiscuous mode [ 107.183688][ T4456] device veth0_vlan left promiscuous mode [ 107.227483][ T6067] netlink: 60 bytes leftover after parsing attributes in process `syz.1.446'. [ 107.996535][ T4346] Bluetooth: hci3: command 0x0419 tx timeout [ 109.378737][ T4456] team0 (unregistering): Port device team_slave_1 removed [ 109.536924][ T4456] team0 (unregistering): Port device team_slave_0 removed [ 109.697711][ T4456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.907267][ T4456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.971954][ T6069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.437832][ T4456] bond0 (unregistering): Released all slaves [ 111.727741][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 111.760276][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.766902][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.769736][ T5819] device veth0_vlan entered promiscuous mode [ 111.773322][ T5819] device veth1_vlan entered promiscuous mode [ 111.796965][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.798904][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.801197][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 111.803258][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 111.820438][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.822413][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.836926][ T5819] device veth0_macvtap entered promiscuous mode [ 111.843571][ T5819] device veth1_macvtap entered promiscuous mode [ 111.927782][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.930604][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.933061][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.935181][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.938810][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.940831][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.942968][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.945261][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.948455][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.951788][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 111.953840][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.955553][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.205663][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.328930][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.332049][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.334293][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.339602][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.343955][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.351204][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.356729][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.362169][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.370257][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.374583][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.376964][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.382247][ T5819] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.389998][ T5819] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.393130][ T5819] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.396170][ T5819] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.472024][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.473942][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.475737][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 112.505148][ T4586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.507805][ T4586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.509635][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 112.681153][ T6117] loop5: detected capacity change from 0 to 256 [ 112.746406][ T6117] loop5: detected capacity change from 0 to 4096 [ 112.751129][ T6117] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 112.753568][ T6117] ntfs3: loop5: Failed to load $Volume. [ 113.094222][ T6135] loop0: detected capacity change from 0 to 164 [ 113.105861][ T6135] rock: directory entry would overflow storage [ 113.107270][ T6135] rock: sig=0x5252, size=5, remaining=3 [ 113.108314][ T6135] isofs_fill_super: root inode is not a directory. Corrupted media? [ 113.149739][ T5739] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 113.334309][ T6149] loop1: detected capacity change from 0 to 40427 [ 113.347368][ T6149] F2FS-fs (loop1): invalid crc value [ 113.352851][ T6149] F2FS-fs (loop1): Found nat_bits in checkpoint [ 113.376701][ T6149] F2FS-fs (loop1): Start checkpoint disabled! [ 113.385844][ T6149] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 113.513253][ T4586] kworker/u4:11: attempt to access beyond end of device [ 113.513253][ T4586] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 113.605297][ T6164] loop5: detected capacity change from 0 to 8 [ 114.116904][ T6181] SQUASHFS error: Unable to read directory block [631:26] [ 114.122234][ T6181] SQUASHFS error: Unable to read directory block [631:26] [ 114.483564][ T6190] loop1: detected capacity change from 0 to 512 [ 114.578325][ T6190] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 114.920753][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 115.162970][ T6226] loop1: detected capacity change from 0 to 512 [ 115.181498][ T6226] EXT4-fs: Ignoring removed nobh option [ 115.216096][ T6226] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.483: invalid indirect mapped block 256 (level 2) [ 115.220656][ T6226] EXT4-fs (loop1): 2 truncates cleaned up [ 115.222194][ T6226] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 115.311779][ T6232] 9pnet_fd: Insufficient options for proto=fd [ 115.536715][ T6236] x_tables: ip_tables: CT.1 target: invalid size 72 (kernel) != (user) 0 [ 115.769933][ T6229] loop3: detected capacity change from 0 to 32768 [ 115.792361][ T6229] XFS (loop3): Mounting V5 Filesystem [ 115.820597][ T6229] XFS (loop3): Ending clean mount [ 115.828032][ T6229] XFS (loop3): Quotacheck needed: Please wait. [ 115.889779][ T6229] XFS (loop3): Quotacheck: Done. [ 116.022196][ T4332] XFS (loop3): Unmounting Filesystem [ 116.089438][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 116.992541][ T6316] loop3: detected capacity change from 0 to 1024 [ 117.004974][ T6316] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 117.182444][ T6316] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 117.221942][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 117.258293][ T6321] netlink: 'syz.0.507': attribute type 10 has an invalid length. [ 117.305612][ T6327] loop1: detected capacity change from 0 to 256 [ 117.338757][ T6321] team0: Port device netdevsim0 added [ 117.355412][ T6327] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 117.358759][ T6327] ntfs3: loop1: Failed to load $Volume. [ 117.380016][ T6328] netlink: 'syz.0.507': attribute type 10 has an invalid length. [ 117.404327][ T6328] team0: Failed to send options change via netlink (err -105) [ 117.406546][ T6328] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 117.417441][ T6328] team0: Port device netdevsim0 removed [ 117.420308][ T6328] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 118.020174][ T6354] input: syz0 as /devices/virtual/input/input2 [ 118.623298][ T6390] set_capacity_and_notify: 1 callbacks suppressed [ 118.623307][ T6390] loop0: detected capacity change from 0 to 8 [ 118.724324][ T6398] loop5: detected capacity change from 0 to 256 [ 118.748166][ T6395] tipc: Enabling of bearer rejected, failed to enable media [ 118.759550][ T6398] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 118.902830][ T6403] SQUASHFS error: Unable to read directory block [631:26] [ 119.561697][ T6432] loop1: detected capacity change from 0 to 512 [ 120.000180][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.541'. [ 120.406354][ T4346] Bluetooth: hci3: command 0x0411 tx timeout [ 121.257275][ T6480] tipc: Enabling of bearer rejected, failed to enable media [ 121.542749][ T6495] loop0: detected capacity change from 0 to 128 [ 121.548869][ T6495] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4621: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 121.555904][ T6495] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 121.583351][ T5739] udevd[5739]: incorrect ext4 checksum on /dev/loop0 [ 122.155394][ T6487] pci 0000:00:00.0: [1ae0:0042] type 00 class 0x020000 [ 122.181205][ T6487] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff] [ 122.192956][ T6487] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f] [ 122.209959][ T6487] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff] [ 122.276154][ T6487] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff]: assigned [ 122.281324][ T6487] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff]: assigned [ 122.285351][ T6487] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f]: assigned [ 122.303638][ T14] gvnic 0000:00:00.0: Driver is running with DQO RDA queue format. [ 122.305321][ T14] gvnic 0000:00:00.0: MAC addr: 42:01:0a:80:00:e8 [ 122.307086][ T14] gvnic 0000:00:00.0: TX queues 2, RX queues 2 [ 122.308550][ T14] gvnic 0000:00:00.0: Max TX queues 2, Max RX queues 2 [ 122.345424][ T14] gvnic 0000:00:00.0: GVE version 1.0.0 [ 122.349078][ T14] gvnic 0000:00:00.0: GVE queue format 3 [ 122.353755][ T5739] gvnic 0000:00:00.0 enp0s0: renamed from eth5 [ 122.630422][ T6538] tipc: Started in network mode [ 122.631487][ T6538] tipc: Node identity ae6997c3f10e, cluster identity 4711 [ 122.632964][ T6538] tipc: Enabled bearer , priority 0 [ 122.641969][ T6538] device syzkaller0 entered promiscuous mode [ 122.655798][ T6538] tipc: Resetting bearer [ 122.663231][ T6537] tipc: Resetting bearer [ 122.766923][ T6537] tipc: Disabling bearer [ 123.202515][ T4640] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 123.209450][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready [ 125.917209][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.918560][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.822541][ T6709] fuse: Bad value for 'fd' [ 135.837379][ T6709] 9pnet_fd: Insufficient options for proto=fd [ 135.841559][ T6712] FAULT_INJECTION: forcing a failure. [ 135.841559][ T6712] name failslab, interval 1, probability 0, space 0, times 0 [ 135.843686][ T6712] CPU: 0 PID: 6712 Comm: syz.0.568 Not tainted syzkaller #0 [ 135.845043][ T6712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 135.847068][ T6712] Call trace: [ 135.847687][ T6712] dump_backtrace+0x1c4/0x1f0 [ 135.848598][ T6712] show_stack+0x2c/0x3c [ 135.849486][ T6712] __dump_stack+0x30/0x40 [ 135.850408][ T6712] dump_stack_lvl+0xf4/0x15c [ 135.851394][ T6712] dump_stack+0x1c/0x5c [ 135.852294][ T6712] should_fail_ex+0x3cc/0x524 [ 135.853325][ T6712] __should_failslab+0xc0/0x11c [ 135.854316][ T6712] should_failslab+0x10/0x28 [ 135.855220][ T6712] __kmem_cache_alloc_node+0x7c/0x318 [ 135.856286][ T6712] kmalloc_trace+0x48/0x94 [ 135.857189][ T6712] raw_ioctl+0x1594/0x326c [ 135.858092][ T6712] __arm64_sys_ioctl+0x14c/0x1c8 [ 135.859068][ T6712] invoke_syscall+0x98/0x290 [ 135.859997][ T6712] el0_svc_common+0x13c/0x258 [ 135.860942][ T6712] do_el0_svc+0x5c/0x134 [ 135.861801][ T6712] el0_svc+0x58/0x12c [ 135.862617][ T6712] el0t_64_sync_handler+0x84/0xf0 [ 135.863538][ T6712] el0t_64_sync+0x18c/0x190 [ 137.153565][ T6745] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 148.112741][ T6751] tipc: Enabling of bearer rejected, failed to enable media [ 149.332335][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.5.592'. [ 153.596283][ T4337] Bluetooth: hci0: command 0x0406 tx timeout [ 153.596346][ T4346] Bluetooth: hci1: command 0x0406 tx timeout [ 153.597495][ T4337] Bluetooth: hci2: command 0x0406 tx timeout [ 160.392711][ T6864] tipc: Enabling of bearer rejected, failed to enable media [ 160.508259][ T6900] device syzkaller0 entered promiscuous mode [ 161.405038][ T6918] device syzkaller0 entered promiscuous mode [ 161.529594][ T6935] netlink: 1092 bytes leftover after parsing attributes in process `syz.1.627'. [ 161.748944][ C0] vxcan0: j1939_tp_rxtimer: 0x000000003101727c: rx timeout, send abort [ 162.023523][ T6940] netlink: 16 bytes leftover after parsing attributes in process `syz.5.630'. [ 162.249382][ C0] vxcan0: j1939_tp_rxtimer: 0x000000008b4dcfc2: rx timeout, send abort [ 162.251710][ C0] vxcan0: j1939_tp_rxtimer: 0x000000003101727c: abort rx timeout. Force session deactivation [ 162.751145][ C0] vxcan0: j1939_tp_rxtimer: 0x000000008b4dcfc2: abort rx timeout. Force session deactivation [ 172.390513][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 172.397076][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 172.511614][ T6976] loop0: detected capacity change from 0 to 8 [ 172.549536][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.639'. [ 173.841246][ T7009] device syzkaller0 entered promiscuous mode [ 173.855776][ T7011] device syzkaller1 entered promiscuous mode [ 173.959030][ T7012] [ 173.959591][ T7012] ====================================================== [ 173.961197][ T7012] WARNING: possible circular locking dependency detected [ 173.962643][ T7012] syzkaller #0 Not tainted [ 173.963582][ T7012] ------------------------------------------------------ [ 173.965071][ T7012] syz.3.654/7012 is trying to acquire lock: [ 173.966365][ T7012] ffff0000d3a4b618 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xe4/0x1ec [ 173.968638][ T7012] [ 173.968638][ T7012] but task is already holding lock: [ 173.970071][ T7012] ffff0000d3a497b0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x514 [ 173.971841][ T7012] [ 173.971841][ T7012] which lock already depends on the new lock. [ 173.971841][ T7012] [ 173.973978][ T7012] [ 173.973978][ T7012] the existing dependency chain (in reverse order) is: [ 173.975861][ T7012] [ 173.975861][ T7012] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 173.977507][ T7012] lock_sock_nested+0x70/0x130 [ 173.978477][ T7012] smc_listen_out+0xf0/0x3b8 [ 173.979514][ T7012] smc_listen_work+0x480/0xd98 [ 173.980545][ T7012] process_one_work+0x7e4/0x13bc [ 173.981538][ T7012] worker_thread+0x8cc/0xfe8 [ 173.982503][ T7012] kthread+0x254/0x2e0 [ 173.983460][ T7012] ret_from_fork+0x10/0x20 [ 173.984453][ T7012] [ 173.984453][ T7012] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 173.986363][ T7012] __lock_acquire+0x3504/0x7280 [ 173.987473][ T7012] lock_acquire+0x210/0x63c [ 173.988447][ T7012] __flush_work+0x10c/0x1ec [ 173.989416][ T7012] __cancel_work_timer+0x2f8/0x450 [ 173.990533][ T7012] cancel_work_sync+0x24/0x38 [ 173.991515][ T7012] smc_clcsock_release+0x64/0xe8 [ 173.992621][ T7012] __smc_release+0x56c/0x6c0 [ 173.993633][ T7012] smc_close_non_accepted+0xd8/0x254 [ 173.994789][ T7012] smc_close_active+0x9c0/0xd60 [ 173.995827][ T7012] __smc_release+0x490/0x6c0 [ 173.996805][ T7012] smc_release+0x258/0x514 [ 173.997810][ T7012] sock_close+0xac/0x1ec [ 173.998805][ T7012] __fput+0x1b4/0x7b0 [ 173.999680][ T7012] ____fput+0x20/0x30 [ 174.000559][ T7012] task_work_run+0x1f4/0x280 [ 174.001533][ T7012] do_notify_resume+0x20f8/0x2c84 [ 174.002608][ T7012] el0_svc+0x9c/0x12c [ 174.003463][ T7012] el0t_64_sync_handler+0x84/0xf0 [ 174.004561][ T7012] el0t_64_sync+0x18c/0x190 [ 174.005519][ T7012] [ 174.005519][ T7012] other info that might help us debug this: [ 174.005519][ T7012] [ 174.007524][ T7012] Possible unsafe locking scenario: [ 174.007524][ T7012] [ 174.008985][ T7012] CPU0 CPU1 [ 174.010062][ T7012] ---- ---- [ 174.011048][ T7012] lock(sk_lock-AF_SMC/1); [ 174.011943][ T7012] lock((work_completion)(&new_smc->smc_listen_work)); [ 174.013876][ T7012] lock(sk_lock-AF_SMC/1); [ 174.015459][ T7012] lock((work_completion)(&new_smc->smc_listen_work)); [ 174.016962][ T7012] [ 174.016962][ T7012] *** DEADLOCK *** [ 174.016962][ T7012] [ 174.018858][ T7012] 2 locks held by syz.3.654/7012: [ 174.019992][ T7012] #0: ffff0000fb981410 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: sock_close+0x74/0x1ec [ 174.022394][ T7012] #1: ffff0000d3a497b0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x514 [ 174.024287][ T7012] [ 174.024287][ T7012] stack backtrace: [ 174.025482][ T7012] CPU: 0 PID: 7012 Comm: syz.3.654 Not tainted syzkaller #0 [ 174.026983][ T7012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 174.029096][ T7012] Call trace: [ 174.029779][ T7012] dump_backtrace+0x1c4/0x1f0 [ 174.030733][ T7012] show_stack+0x2c/0x3c [ 174.031618][ T7012] __dump_stack+0x30/0x40 [ 174.032560][ T7012] dump_stack_lvl+0xf4/0x15c [ 174.033552][ T7012] dump_stack+0x1c/0x5c [ 174.034448][ T7012] print_circular_bug+0x148/0x1b0 [ 174.035449][ T7012] check_noncircular+0x290/0x370 [ 174.036435][ T7012] __lock_acquire+0x3504/0x7280 [ 174.037423][ T7012] lock_acquire+0x210/0x63c [ 174.038341][ T7012] __flush_work+0x10c/0x1ec [ 174.039249][ T7012] __cancel_work_timer+0x2f8/0x450 [ 174.040327][ T7012] cancel_work_sync+0x24/0x38 [ 174.041272][ T7012] smc_clcsock_release+0x64/0xe8 [ 174.042190][ T7012] __smc_release+0x56c/0x6c0 [ 174.043074][ T7012] smc_close_non_accepted+0xd8/0x254 [ 174.044119][ T7012] smc_close_active+0x9c0/0xd60 [ 174.045118][ T7012] __smc_release+0x490/0x6c0 [ 174.046062][ T7012] smc_release+0x258/0x514 [ 174.046940][ T7012] sock_close+0xac/0x1ec [ 174.047756][ T7012] __fput+0x1b4/0x7b0 [ 174.048582][ T7012] ____fput+0x20/0x30 [ 174.049402][ T7012] task_work_run+0x1f4/0x280 [ 174.050301][ T7012] do_notify_resume+0x20f8/0x2c84 [ 174.051313][ T7012] el0_svc+0x9c/0x12c [ 174.052090][ T7012] el0t_64_sync_handler+0x84/0xf0 [ 174.053113][ T7012] el0t_64_sync+0x18c/0x190 [ 174.054133][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.297094][ T6994] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512