last executing test programs: 49.500528463s ago: executing program 0 (id=1): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x202}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, 0x2, 0x9800, 0x0, 0x4}}, 0x2e) 49.472289042s ago: executing program 0 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a00)=[{0x4, 0x1, 0xe, 0xa}], 0x10, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl(r0, 0xc0484e43, &(0x7f0000000a00)) 49.407368607s ago: executing program 0 (id=10): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f00000002c0)={[{@resuid}, {@jqfmt_vfsv0}, {@minixdf}]}, 0x5, 0x50c, &(0x7f0000001640)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 49.241741335s ago: executing program 0 (id=13): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="60060202"], 0x6) 47.934844875s ago: executing program 0 (id=43): r0 = socket(0xa, 0x3, 0x87) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1c}, 0x18, r2}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x18, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 47.931168476s ago: executing program 32 (id=43): r0 = socket(0xa, 0x3, 0x87) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1c}, 0x18, r2}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x18, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 45.426181259s ago: executing program 5 (id=116): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f00000005c0)='7', 0x1) write(r0, &(0x7f00000002c0)='252:0 ', 0x6) 45.276781707s ago: executing program 5 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000180)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syslog(0x4, &(0x7f00000001c0)=""/99, 0x63) 45.185574595s ago: executing program 5 (id=119): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="41084c060a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 45.064487293s ago: executing program 5 (id=120): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x442d, 0x80000, 0x0, 0x60055}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x4004}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 45.031104643s ago: executing program 5 (id=121): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de) chdir(&(0x7f0000000300)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 43.352994617s ago: executing program 5 (id=160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000090)={&(0x7f0000000300)=@newtclass={0x24, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x1}, {0x0, 0x1}}}, 0x24}}, 0x40) 43.31208434s ago: executing program 33 (id=160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000090)={&(0x7f0000000300)=@newtclass={0x24, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x1}, {0x0, 0x1}}}, 0x24}}, 0x40) 36.906689388s ago: executing program 1 (id=247): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000980)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000009c0)={0xa0028000}) 36.855619919s ago: executing program 1 (id=249): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000340)=0xd031, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x84, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e86dd60006400004e0601fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x0, @ANYBLOB="5018000990"], 0x0) 35.980863825s ago: executing program 1 (id=274): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)={0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x1, r2, 0x3, 0x80000}) 35.586427472s ago: executing program 6 (id=292): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000080)={0x1, 0x1}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0xa000000c, 0x0) ptrace$cont(0x7, 0x0, 0x5, 0xa) 35.528710859s ago: executing program 6 (id=293): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x32648a4) pwritev(r0, &(0x7f0000000940)=[{&(0x7f0000000980)="00214500002c00000000400600000a0000010a0000020050005800000001e7ffff00601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000440)=[{&(0x7f00000003c0)="002145000b2c000b0000400600000a0000010a000002005000500000000200000001601003e80000000001010101", 0x2e}], 0x1, 0x2, 0xfffffffc) 35.126480841s ago: executing program 2 (id=295): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x4, 0x400, 0x800, 0x4, 0x8000001000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x9, 0xc, 0x9e22, 0x334b2fb0, 0x100}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) 35.126050526s ago: executing program 1 (id=296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x6, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000009bc0)=@newtfilter={0x3c, 0x2c, 0xf2f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 35.005791344s ago: executing program 6 (id=297): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000300)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x45) 34.995225225s ago: executing program 2 (id=298): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e24, 0x180000, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@pktinfo={{0x24, 0x29, 0x34, {@private1={0xfc, 0x1, '\x00', 0x1}}}}], 0x28}, 0x34000094) 34.9349306s ago: executing program 6 (id=299): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000a80), 0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 34.934646509s ago: executing program 6 (id=300): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./mnt\x00', 0x840, &(0x7f0000000080), 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x133042, 0x19) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x100) 34.574336523s ago: executing program 3 (id=303): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000002a40)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad;\x92\n\x8d\xb6I\x1fQ\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\xa7Wd\xa4Eu\x8cs\xe0\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceYH\x8f\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xbf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xb6\x87\xa43\xdc50V-\x13F\xb6&\xcb\xa3\xe0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xad\xcf`*8&\feeV\x17U=(\xff\xe5t\xe4\xe6\xd8\x8f\x81\xa02\xfed\xde\x03\xdbN98\xb1\x8b\xccg2_\xc4bA\xf1\xf8\xfb\xf8\xd0\xfb_\x1e\"\xedF\x17$\x9e\xd8\xae\xc1\xaf\xee%\x1c\xc6V\x17\x03\xa6&\xa86\xc3\xd5\x02\x10g\x02(EI\x8d\x19\xefJ\xc1x\x92\x8c\x05\xb9\xd2Y\xa0\x13|\x95\xce\x86in\xd4\xd0\xb4\x02?gl\x8f\x1e\xa0\xe5\xf9\xe5\xc9\x9eG\xa9\x14\xff\xe2p\xb4\xda\x1b\t\xc7t\xe3\xe8\xb2\xa5\\\xc6\f\r\xb4\xc1o\x9aS\xf2+\xf7\r04\xb3\xf8\xe38\v\xa4\xbdf', 0x1) mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r1, 0xbc4cd000) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 34.573523457s ago: executing program 6 (id=304): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_pidfd_open(r0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) process_mrelease(r1, 0x0) 34.476508214s ago: executing program 3 (id=306): syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3820420, 0x0, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x8042, 0x34) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x8, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0/file1\x00', 0x40, 0x83) fsync(r0) 34.464415769s ago: executing program 2 (id=307): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000500)="e996", 0x2}, {&(0x7f0000000040)="18f1", 0x2}, {&(0x7f0000000740)="6ff60bb169e2924d6a751cd8463169ef82bfd3e69bdac83cefa978fdd56a236c05c87b9cfaa08c43ca47ef1c104766b5ecfd3ab1547d219aa2b242aa8317a38577817e16a1bd9e2d414bd64de25d2d1bcc58a74c86ec9cd052e1", 0x5a}, {&(0x7f0000000440)="8540e24d77fac0ea006fd54ba9985aa752231622b8094b0016ce", 0x1a}, {&(0x7f0000000480)="8f7fd4e3582868c3336731b4bfb4381623daa3468606a23b", 0x18}], 0x5) 34.327891339s ago: executing program 3 (id=309): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000500)={&(0x7f0000000340)={0x50, 0x0, 0x8, {0x7, 0x28, 0x1, 0x1108c10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10, 0xff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') close_range(r0, r0, 0x0) 34.327619429s ago: executing program 2 (id=310): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x1810800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./dev/kmsg\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 34.238886858s ago: executing program 1 (id=311): r0 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7ff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 34.230900437s ago: executing program 3 (id=312): r0 = syz_io_uring_setup(0x65d0, &(0x7f0000000380)={0x0, 0x595d, 0x40000, 0x0, 0x237}, &(0x7f0000000240), &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x103f, &(0x7f00000005c0)={0x0, 0x0, 0x10000, 0x0, 0x40055, 0x0, r0}, &(0x7f0000000640)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_submit(r3, r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x10, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x40040, 0x0, 0x20}, 0x0, 0x18, 0x0, 0xd2b8b90a8f99fcbe}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 34.174221854s ago: executing program 3 (id=313): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syz_tun\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000f5"], 0xa) 33.880492431s ago: executing program 4 (id=314): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x6358, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x399}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}, 0x1}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 33.828257355s ago: executing program 4 (id=315): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="b2fc991555cf4f1b83cafc8889c21fcf"}}) close(r0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 33.768916187s ago: executing program 4 (id=316): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='nfsd 127.0.0.1 2147483647 *\n', 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/content\x00', 0x0, 0x0) read(r1, &(0x7f0000000300)=""/100, 0x64) 33.734388293s ago: executing program 4 (id=317): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001b40)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1, 0xa, 0x10, 0x10, 0x10, 0x2710, 0xea60}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002140)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) 33.698906717s ago: executing program 4 (id=318): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080)={[{@usrjquota}, {@debug}, {@mblk_io_submit}, {@usrquota}]}, 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') llistxattr(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 33.575901531s ago: executing program 4 (id=319): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='27', 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 33.463719631s ago: executing program 3 (id=320): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 33.410652293s ago: executing program 2 (id=321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @local}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x2}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 33.392727654s ago: executing program 1 (id=322): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) 26.263923969s ago: executing program 2 (id=323): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xf0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) recvmmsg(r0, &(0x7f0000004200)=[{{0x0, 0x0, 0x0}, 0xb35}], 0x1, 0x0, 0x0) 0s ago: executing program 34 (id=304): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_pidfd_open(r0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) process_mrelease(r1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. [ 28.758001][ T4697] cgroup: Unknown subsys name 'net' [ 28.918082][ T4697] cgroup: Unknown subsys name 'cpuset' [ 28.919376][ T4697] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.069287][ T4697] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.873656][ T4722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.873776][ T4722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.873860][ T4722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.873940][ T4722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.874017][ T4722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.874583][ T4722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.874744][ T4722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.874871][ T4722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.874938][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.875013][ T4722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.875276][ T4722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.875407][ T4722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.875452][ T4722] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.875709][ T4722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.875805][ T4722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.878294][ T4722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.878347][ T4722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.878575][ T4722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.878740][ T4722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.879400][ T4722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.879623][ T4722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.879792][ T4722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.893503][ T4725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.893719][ T4725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.904902][ T4725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.037188][ T4710] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.037472][ T4710] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.037842][ T4710] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.075204][ T4708] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.109608][ T4709] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.128005][ T4720] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.171154][ T4710] infiniband rxe0: set active [ 30.171412][ T4710] infiniband rxe0: added rxe_eth0 [ 30.173945][ T4711] rxe0: rxe_newlink: already configured on rxe_eth0 [ 30.185889][ T4710] RDS/IB: rxe0: added [ 30.185973][ T4710] smc: adding ib device rxe0 with port count 1 [ 30.185996][ T4710] smc: ib device rxe0 port 1 has no pnetid [ 30.191217][ T4717] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.191612][ T1091] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.195362][ T4710] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.256625][ T4710] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.310726][ T4711] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.388661][ T4710] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.396079][ T4717] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.401748][ T1091] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.448816][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.448854][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.448909][ T4709] bridge_slave_0: entered allmulticast mode [ 30.449373][ T4709] bridge_slave_0: entered promiscuous mode [ 30.472218][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.472433][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.472534][ T4709] bridge_slave_1: entered allmulticast mode [ 30.472986][ T4709] bridge_slave_1: entered promiscuous mode [ 30.485067][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.485090][ T4710] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.486016][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.498807][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.498831][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.498879][ T4708] bridge_slave_0: entered allmulticast mode [ 30.499528][ T4708] bridge_slave_0: entered promiscuous mode [ 30.518914][ T4709] team0: Port device team_slave_0 added [ 30.529215][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.529238][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.529288][ T4708] bridge_slave_1: entered allmulticast mode [ 30.529907][ T4708] bridge_slave_1: entered promiscuous mode [ 30.536845][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.536888][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.536959][ T4720] bridge_slave_0: entered allmulticast mode [ 30.537420][ T4720] bridge_slave_0: entered promiscuous mode [ 30.539073][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.539101][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.539200][ T4720] bridge_slave_1: entered allmulticast mode [ 30.539628][ T4720] bridge_slave_1: entered promiscuous mode [ 30.541236][ T4709] team0: Port device team_slave_1 added [ 30.561865][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.563908][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.574305][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.575518][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.582175][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.582184][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.582197][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.588488][ T4708] team0: Port device team_slave_0 added [ 30.589181][ T4708] team0: Port device team_slave_1 added [ 30.595311][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.595320][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.595336][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.595885][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.595892][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.595906][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.607104][ T4708] hsr_slave_0: entered promiscuous mode [ 30.607459][ T4708] hsr_slave_1: entered promiscuous mode [ 30.636160][ T4720] team0: Port device team_slave_0 added [ 30.639562][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.639572][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.639584][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.655647][ T4720] team0: Port device team_slave_1 added [ 30.664252][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.664263][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.664277][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.665994][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.666002][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.666017][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.708295][ T4720] hsr_slave_0: entered promiscuous mode [ 30.708604][ T4720] hsr_slave_1: entered promiscuous mode [ 30.708783][ T4720] debugfs: 'hsr0' already exists in 'hsr' [ 30.708820][ T4720] Cannot create hsr debugfs directory [ 30.711806][ T4709] hsr_slave_0: entered promiscuous mode [ 30.712116][ T4709] hsr_slave_1: entered promiscuous mode [ 30.712320][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 30.712329][ T4709] Cannot create hsr debugfs directory [ 30.739077][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.739136][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.739202][ T4711] bridge_slave_0: entered allmulticast mode [ 30.739637][ T4711] bridge_slave_0: entered promiscuous mode [ 30.745638][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.745665][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.745737][ T4711] bridge_slave_1: entered allmulticast mode [ 30.746165][ T4711] bridge_slave_1: entered promiscuous mode [ 30.775754][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.783899][ T4708] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.789046][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.790854][ T4708] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.791878][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.792987][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.805439][ T4708] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.806564][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.806857][ T4708] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.808479][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.822910][ T4711] team0: Port device team_slave_0 added [ 30.836105][ T4711] team0: Port device team_slave_1 added [ 30.854085][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.854098][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.854112][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.855264][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.855270][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.855282][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.890313][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.890586][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.890686][ T4710] bridge_slave_0: entered allmulticast mode [ 30.891224][ T4710] bridge_slave_0: entered promiscuous mode [ 30.892684][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.892716][ T4708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.892863][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.892890][ T4708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.894417][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.894448][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.894506][ T4710] bridge_slave_1: entered allmulticast mode [ 30.894939][ T4710] bridge_slave_1: entered promiscuous mode [ 30.920896][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.922077][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.928166][ T4709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.929562][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.929870][ T4709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.932458][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.938196][ T4711] hsr_slave_0: entered promiscuous mode [ 30.938480][ T4711] hsr_slave_1: entered promiscuous mode [ 30.938662][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 30.938672][ T4711] Cannot create hsr debugfs directory [ 30.938725][ T4709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.940069][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.944912][ T4710] team0: Port device team_slave_0 added [ 30.945992][ T4709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.948577][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.954797][ T4710] team0: Port device team_slave_1 added [ 30.982079][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.982108][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.982191][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.982226][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.986126][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.986142][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.986158][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.987598][ T4720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.991781][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.007682][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.007694][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.007707][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.014033][ T4720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.015100][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.015838][ T4720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.018054][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.023505][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.027455][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.031892][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.032857][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.034126][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.039341][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.048746][ T4720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.049816][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.064774][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.072559][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.072648][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.073066][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.073094][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.084035][ T4710] hsr_slave_0: entered promiscuous mode [ 31.084327][ T4710] hsr_slave_1: entered promiscuous mode [ 31.084514][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 31.084523][ T4710] Cannot create hsr debugfs directory [ 31.096179][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.111926][ T1368] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.111953][ T1368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.141304][ T1368] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.141331][ T1368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.159091][ T4711] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.161704][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.174741][ T4711] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.176271][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.180472][ T4711] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.182057][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.182473][ T4711] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.183455][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.244088][ T4710] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.245397][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.245716][ T4710] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.250183][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.262722][ T4710] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.263974][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.264321][ T4710] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.265161][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.280133][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.283524][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.290327][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.290353][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.294934][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.303757][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.303781][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.315531][ T4720] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.345007][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.352413][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.359504][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.359534][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.371905][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.371933][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.381396][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.384177][ T4720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.394245][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.394264][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.398244][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.398270][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.398782][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.398800][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.431486][ T4708] veth0_vlan: entered promiscuous mode [ 31.444074][ T4708] veth1_vlan: entered promiscuous mode [ 31.453039][ T4708] veth0_macvtap: entered promiscuous mode [ 31.454151][ T4708] veth1_macvtap: entered promiscuous mode [ 31.464733][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.466120][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.478629][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.479678][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.479870][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.535040][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.535057][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.539982][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.560371][ T1445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.560386][ T1445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.566934][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.585260][ T4709] veth0_vlan: entered promiscuous mode [ 31.595809][ T4709] veth1_vlan: entered promiscuous mode [ 31.612759][ T4709] veth0_macvtap: entered promiscuous mode [ 31.616112][ T4708] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.618663][ T4709] veth1_macvtap: entered promiscuous mode [ 31.621890][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.623781][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.666920][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.667398][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.667510][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.667530][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.674903][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.700268][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.700283][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.702495][ T4903] loop3: detected capacity change from 0 to 512 [ 31.733961][ T1251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.733978][ T1251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.752940][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.786268][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.790262][ T4710] veth0_vlan: entered promiscuous mode [ 31.813035][ T4710] veth1_vlan: entered promiscuous mode [ 31.825217][ T4720] veth0_vlan: entered promiscuous mode [ 31.833101][ T4720] veth1_vlan: entered promiscuous mode [ 31.844583][ T4710] veth0_macvtap: entered promiscuous mode [ 31.865626][ T4720] veth0_macvtap: entered promiscuous mode [ 31.873847][ T4710] veth1_macvtap: entered promiscuous mode [ 31.885504][ T4921] nvme nvme0: using deprecated NVME_IOCTL_IO_CMD ioctl on the char device! [ 31.895661][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.897505][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.897758][ T4720] veth1_macvtap: entered promiscuous mode [ 31.901856][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.902876][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.947456][ T4725] Bluetooth: hci0: command tx timeout [ 31.957382][ T4725] Bluetooth: hci4: command tx timeout [ 31.957476][ T4725] Bluetooth: hci1: command tx timeout [ 31.957543][ T4725] Bluetooth: hci3: command tx timeout [ 31.957608][ T4725] Bluetooth: hci2: command tx timeout [ 31.968663][ T4925] loop0: detected capacity change from 0 to 512 [ 31.981355][ T4925] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 32.000420][ T4925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.011526][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.011539][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.021262][ T1368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.021270][ T1368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.041262][ T4711] veth0_vlan: entered promiscuous mode [ 32.064998][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.065013][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.070158][ T4711] veth1_vlan: entered promiscuous mode [ 32.070757][ T1251] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.072398][ T1251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.072596][ T1251] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.072623][ T1251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.072631][ T1251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.072785][ T1251] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.073499][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.073640][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.095009][ T4709] VFS: Lookup of 'ÿÿ' in ext4 loop0 would have caused loop [ 32.095078][ T4709] VFS: Lookup of 'ÿÿ' in ext4 loop0 would have caused loop [ 32.103133][ T4711] veth0_macvtap: entered promiscuous mode [ 32.118447][ T4711] veth1_macvtap: entered promiscuous mode [ 32.126989][ T1368] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.127022][ T1368] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.139307][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.140372][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.159887][ T1251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.160049][ T1251] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.183864][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.183877][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.201932][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.202241][ T1368] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.250686][ T1368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.250702][ T1368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.254948][ T4945] binder: 4944:4945 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 32.254960][ T4945] binder: 4944:4945 ioctl c0306201 20000040 returned -22 [ 32.402717][ T4964] syz.4.26 uses obsolete (PF_INET,SOCK_PACKET) [ 32.468045][ T4969] loop1: detected capacity change from 0 to 128 [ 32.475235][ T4969] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.500619][ T4710] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.520730][ T4972] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 32.785634][ T4977] loop2: detected capacity change from 0 to 512 [ 32.789295][ T4977] EXT4-fs (loop2): Test dummy encryption mode enabled [ 32.792375][ T4977] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.31: inode has both inline data and extents flags [ 32.792446][ T4977] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 32.793365][ T4977] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.31: couldn't read orphan inode 15 (err -117) [ 32.793447][ T4977] loop2: lost filesystem error report for type 5 error -117 [ 32.795453][ T4977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.825493][ T4977] fscrypt: AES-256-XTS using blk-crypto-fallback [ 32.935416][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.068095][ T4985] loop2: detected capacity change from 0 to 512 [ 33.069776][ T4985] EXT4-fs: Ignoring removed nobh option [ 33.082604][ T4985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.118366][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.246272][ T5005] loop4: detected capacity change from 0 to 1024 [ 33.252985][ T5005] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 33.281167][ T5005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.292101][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.322522][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.401626][ T5005] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #12: block 7: comm syz.4.41: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 33.412632][ T5005] EXT4-fs (loop4): Remounting filesystem read-only [ 33.461458][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.478349][ T4725] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 33.478948][ T4725] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 33.479153][ T4725] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 33.479515][ T4725] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 33.479712][ T4725] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 33.589547][ T5025] loop3: detected capacity change from 0 to 512 [ 33.668261][ T5025] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002] [ 33.669471][ T5025] System zones: 1-12 [ 33.682494][ T5025] EXT4-fs error (device loop3): ext4_xattr_inode_iget:473: comm syz.3.49: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 33.682512][ T5025] loop3: lost filesystem error report for type 5 error -117 [ 33.686485][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 33.686500][ C0] EXT4-fs (loop3): initial error at time 33: ext4_xattr_inode_iget:473 [ 33.686513][ C0] EXT4-fs (loop3): last error at time 33: ext4_xattr_inode_iget:473 [ 33.697863][ T5025] EXT4-fs (loop3): 1 orphan inode deleted [ 33.698330][ T5025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.723566][ T5011] rxe_eth0 speed is unknown, defaulting to 1000 [ 33.730207][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.734120][ T5041] FAULT_INJECTION: forcing a failure. [ 33.734120][ T5041] name failslab, interval 1, probability 0, space 0, times 1 [ 33.734139][ T5041] CPU: 1 UID: 0 PID: 5041 Comm: syz.1.54 Not tainted syzkaller #0 PREEMPT [ 33.734155][ T5041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 33.734161][ T5041] Call trace: [ 33.734164][ T5041] show_stack+0x2c/0x3c (C) [ 33.734187][ T5041] __dump_stack+0x30/0x40 [ 33.734201][ T5041] dump_stack_lvl+0xd8/0x12c [ 33.734213][ T5041] dump_stack+0x1c/0x28 [ 33.734224][ T5041] should_fail_ex+0x418/0x58c [ 33.734237][ T5041] should_failslab+0xc4/0x120 [ 33.734250][ T5041] kmem_cache_alloc_noprof+0x94/0x5d4 [ 33.734259][ T5041] security_inode_alloc+0x40/0x304 [ 33.734268][ T5041] inode_init_always_gfp+0x704/0xb20 [ 33.734279][ T5041] alloc_inode+0x9c/0x198 [ 33.734289][ T5041] new_inode+0x20/0x50 [ 33.734300][ T5041] shmem_get_inode+0xac/0x788 [ 33.734312][ T5041] shmem_mknod+0x140/0x2f8 [ 33.734320][ T5041] shmem_mkdir+0x40/0x84 [ 33.734327][ T5041] vfs_mkdir+0x2e4/0x46c [ 33.734338][ T5041] filename_mkdirat+0x228/0x3f4 [ 33.734348][ T5041] __arm64_sys_mkdirat+0x9c/0xc0 [ 33.734358][ T5041] invoke_syscall+0x98/0x244 [ 33.734370][ T5041] el0_svc_common+0xec/0x23c [ 33.734382][ T5041] do_el0_svc+0x4c/0x5c [ 33.734393][ T5041] el0_svc+0x60/0x1d8 [ 33.734405][ T5041] el0t_64_sync_handler+0x44/0x104 [ 33.734417][ T5041] el0t_64_sync+0x198/0x19c [ 33.806372][ T5047] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 33.822145][ T5049] netlink: 'syz.1.57': attribute type 16 has an invalid length. [ 33.868799][ T5051] netlink: 'syz.3.58': attribute type 4 has an invalid length. [ 33.894681][ T5051] netlink: 'syz.3.58': attribute type 4 has an invalid length. [ 33.981363][ T5011] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.981420][ T5011] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.981489][ T5011] bridge_slave_0: entered allmulticast mode [ 33.981912][ T5011] bridge_slave_0: entered promiscuous mode [ 33.983051][ T5011] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.983098][ T5011] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.983152][ T5011] bridge_slave_1: entered allmulticast mode [ 33.983656][ T5011] bridge_slave_1: entered promiscuous mode [ 33.995489][ T5011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.996856][ T5011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.003898][ T5011] team0: Port device team_slave_0 added [ 34.004739][ T5011] team0: Port device team_slave_1 added [ 34.011375][ T5011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.011385][ T5011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.011397][ T5011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.011950][ T5011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.011957][ T5011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.011972][ T5011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.026376][ T5011] hsr_slave_0: entered promiscuous mode [ 34.026601][ T4725] Bluetooth: hci2: command tx timeout [ 34.026619][ T4725] Bluetooth: hci3: command tx timeout [ 34.026634][ T4725] Bluetooth: hci4: command tx timeout [ 34.026648][ T4725] Bluetooth: hci0: command tx timeout [ 34.028124][ T5011] hsr_slave_1: entered promiscuous mode [ 34.028323][ T5011] debugfs: 'hsr0' already exists in 'hsr' [ 34.028333][ T5011] Cannot create hsr debugfs directory [ 34.105030][ T5011] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 34.107639][ T5011] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.108605][ T5011] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 34.120081][ T5011] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.120776][ T5011] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 34.129194][ T5011] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.129581][ T5011] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 34.140373][ T5011] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.164960][ T5011] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.165004][ T5011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.165075][ T5011] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.165102][ T5011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.189785][ T5011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.194056][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.194357][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.205292][ T5011] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.213374][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.213403][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.213771][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.213789][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.239558][ T5094] evm: overlay not supported [ 34.369058][ T5115] loop3: detected capacity change from 0 to 128 [ 34.378945][ T5115] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.401989][ T5011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.517501][ T5122] loop4: detected capacity change from 0 to 512 [ 34.545648][ T5011] veth0_vlan: entered promiscuous mode [ 34.555569][ T5011] veth1_vlan: entered promiscuous mode [ 34.569350][ T5011] veth0_macvtap: entered promiscuous mode [ 34.569554][ T5122] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 34.569575][ T5122] FAT-fs (loop4): Filesystem has been set read-only [ 34.571696][ T5011] veth1_macvtap: entered promiscuous mode [ 34.575078][ T5011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.576177][ T5011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.599470][ T5122] FAT-fs (loop4): error, invalid access to FAT (entry 0x00020000) [ 34.599671][ T5122] FAT-fs (loop4): error, invalid access to FAT (entry 0x00020000) [ 34.603333][ T4708] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.622013][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.671585][ T40] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.671788][ T40] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.671805][ T40] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.671819][ T40] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.684871][ T1445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.684886][ T1445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.696901][ T5140] FAULT_INJECTION: forcing a failure. [ 34.696901][ T5140] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 34.696921][ T5140] CPU: 0 UID: 0 PID: 5140 Comm: syz.2.83 Not tainted syzkaller #0 PREEMPT [ 34.696931][ T5140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 34.696937][ T5140] Call trace: [ 34.696940][ T5140] show_stack+0x2c/0x3c (C) [ 34.696960][ T5140] __dump_stack+0x30/0x40 [ 34.696975][ T5140] dump_stack_lvl+0xd8/0x12c [ 34.696987][ T5140] dump_stack+0x1c/0x28 [ 34.696998][ T5140] should_fail_ex+0x418/0x58c [ 34.697012][ T5140] should_fail+0x14/0x24 [ 34.697023][ T5140] should_fail_usercopy+0x20/0x30 [ 34.697036][ T5140] bpf_verifier_vlog+0x3f4/0xbc0 [ 34.697049][ T5140] __btf_verifier_log+0xe8/0x13c [ 34.697058][ T5140] btf_parse_hdr+0x334/0x71c [ 34.697066][ T5140] btf_new_fd+0x288/0x77c [ 34.697078][ T5140] bpf_btf_load+0x144/0x190 [ 34.697088][ T5140] __sys_bpf+0x7f0/0x82c [ 34.697098][ T5140] __arm64_sys_bpf+0xd0/0xec [ 34.697106][ T5140] invoke_syscall+0x98/0x244 [ 34.697119][ T5140] el0_svc_common+0xec/0x23c [ 34.697131][ T5140] do_el0_svc+0x4c/0x5c [ 34.697147][ T5140] el0_svc+0x60/0x1d8 [ 34.697160][ T5140] el0t_64_sync_handler+0x44/0x104 [ 34.697172][ T5140] el0t_64_sync+0x198/0x19c [ 34.701725][ T1445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.701738][ T1445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.754572][ T5145] loop3: detected capacity change from 0 to 512 [ 34.760416][ T5146] netlink: 'syz.4.85': attribute type 8 has an invalid length. [ 34.760490][ T5146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.85'. [ 34.774305][ T5146] netlink: 'syz.4.85': attribute type 8 has an invalid length. [ 34.774322][ T5146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.85'. [ 34.774480][ T5146] Zero length message leads to an empty skb [ 34.774487][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.774527][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.774546][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.786801][ T1251] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.813163][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.841713][ T5150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.869475][ T5150] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.44: corrupted xattr block 33: invalid header [ 34.870630][ T5150] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.44: corrupted xattr block 33: invalid header [ 34.870796][ T5150] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.44: corrupted xattr block 33: invalid header [ 34.890983][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.901613][ T5160] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 34.916542][ T5158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.90'. [ 34.927598][ T5150] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.44: corrupted xattr block 33: invalid header [ 34.930128][ T5150] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 34.930933][ T5150] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 34.930948][ T5150] EXT4-fs (loop5): This should not happen!! Data will be lost [ 34.930948][ T5150] [ 34.930957][ T5150] EXT4-fs (loop5): Total free blocks count 0 [ 34.930964][ T5150] EXT4-fs (loop5): Free/Dirty block details [ 34.931047][ T5150] EXT4-fs (loop5): free_blocks=65280 [ 34.931066][ T5150] EXT4-fs (loop5): dirty_blocks=31 [ 34.931072][ T5150] EXT4-fs (loop5): Block reservation details [ 34.931078][ T5150] EXT4-fs (loop5): i_reserved_data_blocks=31 [ 34.948323][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 63 with error 28 [ 34.979891][ T5158] hsr_slave_1 (unregistering): left promiscuous mode [ 35.051789][ T49] bridge_slave_1: left allmulticast mode [ 35.051813][ T49] bridge_slave_1: left promiscuous mode [ 35.052108][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.061712][ T5169] FAULT_INJECTION: forcing a failure. [ 35.061712][ T5169] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 35.061732][ T5169] CPU: 1 UID: 0 PID: 5169 Comm: syz.2.95 Not tainted syzkaller #0 PREEMPT [ 35.061743][ T5169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 35.061748][ T5169] Call trace: [ 35.061751][ T5169] show_stack+0x2c/0x3c (C) [ 35.061772][ T5169] __dump_stack+0x30/0x40 [ 35.061785][ T5169] dump_stack_lvl+0xd8/0x12c [ 35.061796][ T5169] dump_stack+0x1c/0x28 [ 35.061808][ T5169] should_fail_ex+0x418/0x58c [ 35.061821][ T5169] should_fail_alloc_page+0xec/0x10c [ 35.061835][ T5169] prepare_alloc_pages+0x194/0x484 [ 35.061844][ T5169] __alloc_frozen_pages_noprof+0x180/0x578 [ 35.061853][ T5169] alloc_pages_mpol+0x1fc/0x3d0 [ 35.061863][ T5169] alloc_frozen_pages_noprof+0xc4/0x10c [ 35.061872][ T5169] alloc_pages_noprof+0x30/0x148 [ 35.061881][ T5169] get_free_pages_noprof+0x1c/0xbc [ 35.061890][ T5169] get_zeroed_page_noprof+0x18/0x24 [ 35.061898][ T5169] mon_alloc_buff+0x70/0x1ac [ 35.061911][ T5169] mon_bin_open+0x1c0/0x380 [ 35.061923][ T5169] chrdev_open+0x398/0x3e8 [ 35.061933][ T5169] do_dentry_open+0x5c4/0xfbc [ 35.061945][ T5169] vfs_open+0x44/0x2dc [ 35.061956][ T5169] path_openat+0x1084/0x18f0 [ 35.061966][ T5169] do_file_open+0x1c8/0x2e8 [ 35.061976][ T5169] do_sys_openat2+0x114/0x1e8 [ 35.061988][ T5169] do_sys_open+0xb0/0xe0 [ 35.061999][ T5169] __arm64_sys_openat+0xa8/0xc4 [ 35.062010][ T5169] invoke_syscall+0x98/0x244 [ 35.062023][ T5169] el0_svc_common+0xec/0x23c [ 35.062034][ T5169] do_el0_svc+0x4c/0x5c [ 35.062046][ T5169] el0_svc+0x60/0x1d8 [ 35.062059][ T5169] el0t_64_sync_handler+0x44/0x104 [ 35.062071][ T5169] el0t_64_sync+0x198/0x19c [ 35.067199][ T49] bridge_slave_0: left allmulticast mode [ 35.067218][ T49] bridge_slave_0: left promiscuous mode [ 35.067297][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.114237][ T5168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.114565][ T4711] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.220639][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.258623][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.287527][ T49] bond0 (unregistering): Released all slaves [ 35.315320][ T5184] ======================================================= [ 35.315320][ T5184] WARNING: The mand mount option has been deprecated and [ 35.315320][ T5184] and is ignored by this kernel. Remove the mand [ 35.315320][ T5184] option from the mount to silence this warning. [ 35.315320][ T5184] ======================================================= [ 35.335359][ T5188] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 35.349405][ T5184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.490478][ T5190] netlink: 'syz.1.103': attribute type 10 has an invalid length. [ 35.519693][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.526015][ T5201] EXT4-fs: Ignoring removed oldalloc option [ 35.537178][ T5201] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.537196][ T5201] EXT4-fs (loop3): Test dummy encryption mode enabled [ 35.546734][ T4712] Bluetooth: hci1: command tx timeout [ 35.562556][ T5201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.665091][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.751102][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0 [ 35.865816][ T49] hsr_slave_0: left promiscuous mode [ 35.870705][ T5168] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 35.878545][ T49] hsr_slave_1: left promiscuous mode [ 35.878958][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.878977][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.892608][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.892626][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.900945][ T5011] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.918454][ T49] veth1_macvtap: left promiscuous mode [ 35.918498][ T49] veth0_macvtap: left promiscuous mode [ 35.918548][ T49] veth1_vlan: left promiscuous mode [ 35.918598][ T49] veth0_vlan: left promiscuous mode [ 36.010688][ T5241] FAULT_INJECTION: forcing a failure. [ 36.010688][ T5241] name failslab, interval 1, probability 0, space 0, times 0 [ 36.010714][ T5241] CPU: 0 UID: 0 PID: 5241 Comm: syz.5.116 Not tainted syzkaller #0 PREEMPT [ 36.010727][ T5241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 36.010733][ T5241] Call trace: [ 36.010736][ T5241] show_stack+0x2c/0x3c (C) [ 36.010757][ T5241] __dump_stack+0x30/0x40 [ 36.010770][ T5241] dump_stack_lvl+0xd8/0x12c [ 36.010782][ T5241] dump_stack+0x1c/0x28 [ 36.010793][ T5241] should_fail_ex+0x418/0x58c [ 36.010807][ T5241] should_failslab+0xc4/0x120 [ 36.010820][ T5241] __kmalloc_cache_node_noprof+0x98/0x618 [ 36.010829][ T5241] blkg_alloc+0xd8/0x6cc [ 36.010841][ T5241] blkg_conf_prep+0x530/0x934 [ 36.010852][ T5241] tg_set_conf+0x1e4/0x46c [ 36.010859][ T5241] tg_set_conf_uint+0x38/0x4c [ 36.010867][ T5241] cgroup_file_write+0x23c/0x6e4 [ 36.010876][ T5241] kernfs_fop_write_iter+0x260/0x3b8 [ 36.010888][ T5241] vfs_write+0x51c/0xa0c [ 36.010901][ T5241] ksys_write+0x12c/0x228 [ 36.010913][ T5241] __arm64_sys_write+0x84/0x98 [ 36.010925][ T5241] invoke_syscall+0x98/0x244 [ 36.010938][ T5241] el0_svc_common+0xec/0x23c [ 36.010950][ T5241] do_el0_svc+0x4c/0x5c [ 36.010961][ T5241] el0_svc+0x60/0x1d8 [ 36.010974][ T5241] el0t_64_sync_handler+0x44/0x104 [ 36.010986][ T5241] el0t_64_sync+0x198/0x19c [ 36.104529][ T5250] FAULT_INJECTION: forcing a failure. [ 36.104529][ T5250] name failslab, interval 1, probability 0, space 0, times 0 [ 36.104554][ T5250] CPU: 0 UID: 0 PID: 5250 Comm: syz.5.117 Not tainted syzkaller #0 PREEMPT [ 36.104566][ T5250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 36.104572][ T5250] Call trace: [ 36.104575][ T5250] show_stack+0x2c/0x3c (C) [ 36.104596][ T5250] __dump_stack+0x30/0x40 [ 36.104611][ T5250] dump_stack_lvl+0xd8/0x12c [ 36.104623][ T5250] dump_stack+0x1c/0x28 [ 36.104634][ T5250] should_fail_ex+0x418/0x58c [ 36.104650][ T5250] should_failslab+0xc4/0x120 [ 36.104664][ T5250] __kmalloc_cache_noprof+0x94/0x5fc [ 36.104673][ T5250] syslog_print_all+0x108/0x51c [ 36.104685][ T5250] do_syslog+0x2b0/0x5b4 [ 36.104695][ T5250] __arm64_sys_syslog+0x88/0xa0 [ 36.104706][ T5250] invoke_syscall+0x98/0x244 [ 36.104719][ T5250] el0_svc_common+0x19c/0x23c [ 36.104731][ T5250] do_el0_svc+0x4c/0x5c [ 36.104742][ T5250] el0_svc+0x60/0x1d8 [ 36.104755][ T5250] el0t_64_sync_handler+0x44/0x104 [ 36.104767][ T5250] el0t_64_sync+0x198/0x19c [ 36.106978][ T4725] Bluetooth: hci4: command tx timeout [ 36.106998][ T4725] Bluetooth: hci3: command tx timeout [ 36.107014][ T4725] Bluetooth: hci2: command tx timeout [ 36.107088][ T4712] Bluetooth: hci0: command tx timeout [ 36.165940][ T49] team0 (unregistering): Port device team_slave_1 removed [ 36.173597][ T49] team0 (unregistering): Port device team_slave_0 removed [ 36.239512][ T4400] 8021q: adding VLAN 0 to HW filter on device eth1 [ 36.312191][ T5267] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 36.312261][ T5267] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 36.463170][ T5288] gadgetfs: bound to dummy_udc driver [ 36.473695][ T4400] 8021q: adding VLAN 0 to HW filter on device eth3 [ 36.658271][ T4400] 8021q: adding VLAN 0 to HW filter on device eth2 [ 36.849728][ T5339] FAULT_INJECTION: forcing a failure. [ 36.849728][ T5339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.849749][ T5339] CPU: 0 UID: 0 PID: 5339 Comm: syz.3.140 Not tainted syzkaller #0 PREEMPT [ 36.849761][ T5339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 36.849768][ T5339] Call trace: [ 36.849772][ T5339] show_stack+0x2c/0x3c (C) [ 36.849791][ T5339] __dump_stack+0x30/0x40 [ 36.849804][ T5339] dump_stack_lvl+0xd8/0x12c [ 36.849816][ T5339] dump_stack+0x1c/0x28 [ 36.849828][ T5339] should_fail_ex+0x418/0x58c [ 36.849841][ T5339] should_fail+0x14/0x24 [ 36.849853][ T5339] should_fail_usercopy+0x20/0x30 [ 36.849865][ T5339] _inline_copy_from_user+0x3c/0x188 [ 36.849875][ T5339] memdup_user+0x78/0xec [ 36.849883][ T5339] strndup_user+0x78/0xe0 [ 36.849891][ T5339] __arm64_sys_fsopen+0x84/0x1a4 [ 36.849901][ T5339] invoke_syscall+0x98/0x244 [ 36.849913][ T5339] el0_svc_common+0xec/0x23c [ 36.849924][ T5339] do_el0_svc+0x4c/0x5c [ 36.849936][ T5339] el0_svc+0x60/0x1d8 [ 36.849948][ T5339] el0t_64_sync_handler+0x44/0x104 [ 36.849960][ T5339] el0t_64_sync+0x198/0x19c [ 37.245632][ T5355] set_capacity_and_notify: 6 callbacks suppressed [ 37.245647][ T5355] loop3: detected capacity change from 0 to 512 [ 37.280047][ T5355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.309273][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.455543][ T5376] loop3: detected capacity change from 0 to 128 [ 37.522971][ T5378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.522992][ T5378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.523702][ T5378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.523712][ T5378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.560511][ T5380] ip_tables: iptables: counters copy to user failed while replacing table [ 37.775503][ T30] audit: type=1400 audit(37.740:2): lsm=SMACK fn=smack_task_setscheduler action=denied subject="w" object="_" requested=w pid=5388 comm="syz.3.157" opid=5388 ocomm="syz.3.157" [ 38.014624][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.047055][ T4725] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 38.047507][ T4725] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 38.048774][ T4725] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 38.049095][ T4725] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 38.049303][ T4725] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 38.081897][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.090129][ C1] vcan0: j1939_tp_rxtimer: 0x00000000bef2ca08: rx timeout, send abort [ 38.090802][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000bef2ca08: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 38.139222][ T5409] loop2: detected capacity change from 0 to 2048 [ 38.151196][ T5395] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.154342][ T5409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.171950][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.187480][ T4725] Bluetooth: hci0: command tx timeout [ 38.187494][ T4712] Bluetooth: hci3: command tx timeout [ 38.187508][ T4725] Bluetooth: hci4: command tx timeout [ 38.212581][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.217177][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.219557][ T5414] loop1: detected capacity change from 0 to 512 [ 38.220338][ T5414] EXT4-fs: Ignoring removed bh option [ 38.233657][ T5414] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 38.233675][ T5414] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 38.233683][ T5414] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.164: Corrupt directory, running e2fsck is recommended [ 38.234920][ T5414] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 38.234964][ T5414] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.164: corrupted in-inode xattr: e_name out of bounds [ 38.234981][ T5414] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 38.235408][ T5414] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.164: couldn't read orphan inode 15 (err -117) [ 38.235425][ T5414] loop1: lost filesystem error report for type 5 error -117 [ 38.239308][ T5414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.261331][ T5414] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 38.261355][ T5414] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 38.261365][ T5414] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.164: Corrupt directory, running e2fsck is recommended [ 38.262294][ T5414] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 38.262311][ T5414] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 38.262320][ T5414] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.164: Corrupt directory, running e2fsck is recommended [ 38.262793][ T5414] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 38.262803][ T5414] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 38.262811][ T5414] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.164: Corrupt directory, running e2fsck is recommended [ 38.264156][ T5414] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 38.264236][ T5414] EXT4-fs error (device loop1): ext4_readdir:280: inode #2: block 3: comm syz.1.164: path /34/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 38.287292][ T5414] EXT4-fs error (device loop1): ext4_readdir:280: inode #2: block 8: comm syz.1.164: path /34/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 38.290846][ T5417] netlink: 16 bytes leftover after parsing attributes in process `syz.2.165'. [ 38.315486][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.389897][ T12] bridge_slave_1: left allmulticast mode [ 38.389919][ T12] bridge_slave_1: left promiscuous mode [ 38.390008][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.391263][ T12] bridge_slave_0: left allmulticast mode [ 38.391275][ T12] bridge_slave_0: left promiscuous mode [ 38.391336][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.475587][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.501164][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.517487][ T12] bond0 (unregistering): Released all slaves [ 38.539802][ T5440] bridge_slave_0: left allmulticast mode [ 38.539821][ T5440] bridge_slave_0: left promiscuous mode [ 38.539896][ T5440] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.548819][ T5440] bridge_slave_1: left allmulticast mode [ 38.548836][ T5440] bridge_slave_1: left promiscuous mode [ 38.548903][ T5440] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.554898][ T5440] bond0: (slave bond_slave_0): Releasing backup interface [ 38.579286][ T5443] netlink: 'syz.2.173': attribute type 10 has an invalid length. [ 38.580943][ T5440] bond0: (slave bond_slave_1): Releasing backup interface [ 38.593873][ T5440] team0: Port device team_slave_0 removed [ 38.595758][ T5440] team0: Port device team_slave_1 removed [ 38.596057][ T5440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.596067][ T5440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.602195][ T5440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.602208][ T5440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.607162][ T5440] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 38.628707][ T5448] loop1: detected capacity change from 0 to 512 [ 38.635890][ T5448] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 38.647080][ T5448] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a046c128, mo2=0002] [ 38.647124][ T5448] System zones: 1-12 [ 38.647266][ T5448] EXT4-fs (loop1): orphan cleanup on readonly fs [ 38.647500][ T5448] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 38.647513][ T5448] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 38.673722][ T5443] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 38.678358][ T5448] EXT4-fs (loop1): 1 truncate cleaned up [ 38.683891][ T5448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.704843][ T5440] netlink: 'syz.2.173': attribute type 10 has an invalid length. [ 38.709168][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.730623][ T5395] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.730649][ T5395] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.730701][ T5395] bridge_slave_0: entered allmulticast mode [ 38.734629][ T5395] bridge_slave_0: entered promiscuous mode [ 38.745560][ T5440] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.749464][ T5440] bond0: (slave team0): Enslaving as an active interface with an up link [ 38.749666][ T5395] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.749693][ T5395] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.749771][ T5395] bridge_slave_1: entered allmulticast mode [ 38.750249][ T5395] bridge_slave_1: entered promiscuous mode [ 38.760296][ T5395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.761140][ T5395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.767629][ T5395] team0: Port device team_slave_0 added [ 38.768297][ T5395] team0: Port device team_slave_1 added [ 38.773861][ T5395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.773872][ T5395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.773886][ T5395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.774369][ T5395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.774375][ T5395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.774386][ T5395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.835974][ T4400] 8021q: adding VLAN 0 to HW filter on device eth4 [ 38.840319][ T5469] FAULT_INJECTION: forcing a failure. [ 38.840319][ T5469] name failslab, interval 1, probability 0, space 0, times 0 [ 38.840341][ T5469] CPU: 1 UID: 0 PID: 5469 Comm: syz.1.178 Not tainted syzkaller #0 PREEMPT [ 38.840352][ T5469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.840358][ T5469] Call trace: [ 38.840361][ T5469] show_stack+0x2c/0x3c (C) [ 38.840381][ T5469] __dump_stack+0x30/0x40 [ 38.840393][ T5469] dump_stack_lvl+0xd8/0x12c [ 38.840405][ T5469] dump_stack+0x1c/0x28 [ 38.840416][ T5469] should_fail_ex+0x418/0x58c [ 38.840429][ T5469] should_failslab+0xc4/0x120 [ 38.840442][ T5469] kmem_cache_alloc_noprof+0x94/0x5d4 [ 38.840451][ T5469] __kernfs_new_node+0xf0/0x7d8 [ 38.840461][ T5469] kernfs_new_node+0xe8/0x130 [ 38.840471][ T5469] __kernfs_create_file+0x60/0x2e0 [ 38.840482][ T5469] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 38.840493][ T5469] sysfs_merge_group+0x164/0x2ac [ 38.840505][ T5469] dpm_sysfs_add+0xc8/0x258 [ 38.840517][ T5469] device_add+0x468/0x9e0 [ 38.840527][ T5469] netdev_register_kobject+0x184/0x328 [ 38.840540][ T5469] register_netdevice+0xd74/0x14c0 [ 38.840553][ T5469] ip6gre_tunnel_locate+0x260/0x350 [ 38.840566][ T5469] ip6gre_tunnel_siocdevprivate+0x508/0x6e0 [ 38.840578][ T5469] dev_ifsioc+0x654/0xc34 [ 38.840590][ T5469] dev_ioctl+0x560/0xc88 [ 38.840602][ T5469] sock_ioctl+0x734/0x7ec [ 38.840613][ T5469] __arm64_sys_ioctl+0x154/0x1cc [ 38.840626][ T5469] invoke_syscall+0x98/0x244 [ 38.840638][ T5469] el0_svc_common+0xec/0x23c [ 38.840650][ T5469] do_el0_svc+0x4c/0x5c [ 38.840661][ T5469] el0_svc+0x60/0x1d8 [ 38.840673][ T5469] el0t_64_sync_handler+0x44/0x104 [ 38.840685][ T5469] el0t_64_sync+0x198/0x19c [ 38.868782][ T5395] hsr_slave_0: entered promiscuous mode [ 38.869064][ T5395] hsr_slave_1: entered promiscuous mode [ 38.869254][ T5395] debugfs: 'hsr0' already exists in 'hsr' [ 38.869264][ T5395] Cannot create hsr debugfs directory [ 38.897146][ T5473] FAULT_INJECTION: forcing a failure. [ 38.897146][ T5473] name failslab, interval 1, probability 0, space 0, times 0 [ 38.897169][ T5473] CPU: 0 UID: 0 PID: 5473 Comm: syz.2.180 Not tainted syzkaller #0 PREEMPT [ 38.897181][ T5473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.897187][ T5473] Call trace: [ 38.897190][ T5473] show_stack+0x2c/0x3c (C) [ 38.897208][ T5473] __dump_stack+0x30/0x40 [ 38.897221][ T5473] dump_stack_lvl+0xd8/0x12c [ 38.897232][ T5473] dump_stack+0x1c/0x28 [ 38.897244][ T5473] should_fail_ex+0x418/0x58c [ 38.897257][ T5473] should_failslab+0xc4/0x120 [ 38.897270][ T5473] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 38.897279][ T5473] __d_alloc+0x50/0x600 [ 38.897288][ T5473] d_alloc_anon+0x24/0x34 [ 38.897296][ T5473] path_from_stashed+0x300/0x4ec [ 38.897308][ T5473] ns_get_path+0x74/0x94 [ 38.897315][ T5473] proc_ns_get_link+0x154/0x29c [ 38.897328][ T5473] pick_link+0x5cc/0xcf4 [ 38.897338][ T5473] step_into_slowpath+0x468/0x670 [ 38.897350][ T5473] path_openat+0x78c/0x18f0 [ 38.897359][ T5473] do_file_open+0x1c8/0x2e8 [ 38.897369][ T5473] do_sys_openat2+0x114/0x1e8 [ 38.897380][ T5473] do_sys_open+0xb0/0xe0 [ 38.897391][ T5473] __arm64_sys_openat+0xa8/0xc4 [ 38.897402][ T5473] invoke_syscall+0x98/0x244 [ 38.897414][ T5473] el0_svc_common+0xec/0x23c [ 38.897426][ T5473] do_el0_svc+0x4c/0x5c [ 38.897437][ T5473] el0_svc+0x60/0x1d8 [ 38.897450][ T5473] el0t_64_sync_handler+0x44/0x104 [ 38.897462][ T5473] el0t_64_sync+0x198/0x19c [ 39.042081][ T5483] input: syz0 as /devices/virtual/input/input2 [ 39.065331][ T12] hsr_slave_0: left promiscuous mode [ 39.065663][ T12] hsr_slave_1: left promiscuous mode [ 39.065930][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.065940][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.067808][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.067820][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.072358][ T12] veth1_macvtap: left promiscuous mode [ 39.072384][ T12] veth0_macvtap: left promiscuous mode [ 39.072431][ T12] veth1_vlan: left promiscuous mode [ 39.072464][ T12] veth0_vlan: left promiscuous mode [ 39.091749][ C1] vcan0: j1939_tp_rxtimer: 0x0000000040595a1a: rx timeout, send abort [ 39.091829][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000040595a1a: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 39.291461][ T5509] process 'syz.1.188' launched './file0' with NULL argv: empty string added [ 39.314757][ T12] team0 (unregistering): Port device team_slave_1 removed [ 39.326353][ T12] team0 (unregistering): Port device team_slave_0 removed [ 39.396144][ T4400] 8021q: adding VLAN 0 to HW filter on device eth5 [ 39.415655][ T5395] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 39.422519][ T5395] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.422848][ T5395] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 39.431931][ T5395] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.432268][ T5395] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 39.433903][ T5395] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.434589][ T5520] FAULT_INJECTION: forcing a failure. [ 39.434589][ T5520] name failslab, interval 1, probability 0, space 0, times 0 [ 39.434610][ T5520] CPU: 1 UID: 0 PID: 5520 Comm: syz.1.193 Not tainted syzkaller #0 PREEMPT [ 39.434620][ T5520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 39.434626][ T5520] Call trace: [ 39.434629][ T5520] show_stack+0x2c/0x3c (C) [ 39.434649][ T5520] __dump_stack+0x30/0x40 [ 39.434662][ T5520] dump_stack_lvl+0xd8/0x12c [ 39.434678][ T5520] dump_stack+0x1c/0x28 [ 39.434689][ T5520] should_fail_ex+0x418/0x58c [ 39.434702][ T5520] should_failslab+0xc4/0x120 [ 39.434716][ T5520] __kvmalloc_node_noprof+0x160/0x7fc [ 39.434725][ T5520] alloc_netdev_mqs+0x6fc/0xf34 [ 39.434739][ T5520] ip6_tnl_locate+0x458/0x5b0 [ 39.434751][ T5520] ip6_tnl_siocdevprivate+0x4ac/0x68c [ 39.434762][ T5520] dev_ifsioc+0x654/0xc34 [ 39.434774][ T5520] dev_ioctl+0x560/0xc88 [ 39.434786][ T5520] sock_ioctl+0x734/0x7ec [ 39.434798][ T5520] __arm64_sys_ioctl+0x154/0x1cc [ 39.434811][ T5520] invoke_syscall+0x98/0x244 [ 39.434823][ T5520] el0_svc_common+0xec/0x23c [ 39.434835][ T5520] do_el0_svc+0x4c/0x5c [ 39.434846][ T5520] el0_svc+0x60/0x1d8 [ 39.434859][ T5520] el0t_64_sync_handler+0x44/0x104 [ 39.434870][ T5520] el0t_64_sync+0x198/0x19c [ 39.436166][ T5395] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 39.473944][ T5395] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.493300][ T5395] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.493329][ T5395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.493396][ T5395] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.493425][ T5395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.561198][ T5395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.563551][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.568691][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.592957][ T5395] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.595202][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.595229][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.601614][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.601646][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.611642][ T5395] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.611658][ T5395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.708399][ T4723] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 39.817770][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.825476][ T4400] 8021q: adding VLAN 0 to HW filter on device eth6 [ 39.903837][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.000035][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.003485][ T5395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.068903][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.107743][ T4723] Bluetooth: hci5: command tx timeout [ 40.128057][ T4718] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 40.131458][ T4718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 40.132199][ T4718] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 40.132643][ T4718] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 40.134524][ T4718] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 40.236322][ T5395] veth0_vlan: entered promiscuous mode [ 40.289577][ T5596] FAULT_INJECTION: forcing a failure. [ 40.289577][ T5596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.289598][ T5596] CPU: 0 UID: 0 PID: 5596 Comm: syz.1.202 Not tainted syzkaller #0 PREEMPT [ 40.289609][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 40.289614][ T5596] Call trace: [ 40.289617][ T5596] show_stack+0x2c/0x3c (C) [ 40.289637][ T5596] __dump_stack+0x30/0x40 [ 40.289650][ T5596] dump_stack_lvl+0xd8/0x12c [ 40.289662][ T5596] dump_stack+0x1c/0x28 [ 40.289673][ T5596] should_fail_ex+0x418/0x58c [ 40.289687][ T5596] should_fail+0x14/0x24 [ 40.289698][ T5596] should_fail_usercopy+0x20/0x30 [ 40.289711][ T5596] _inline_copy_from_user+0x3c/0x174 [ 40.289721][ T5596] generic_map_update_batch+0x6bc/0x9a4 [ 40.289730][ T5596] bpf_map_do_batch+0x2f0/0x4d0 [ 40.289740][ T5596] __sys_bpf+0x7b4/0x82c [ 40.289749][ T5596] __arm64_sys_bpf+0xd0/0xec [ 40.289758][ T5596] invoke_syscall+0x98/0x244 [ 40.289770][ T5596] el0_svc_common+0xec/0x23c [ 40.289782][ T5596] do_el0_svc+0x4c/0x5c [ 40.289794][ T5596] el0_svc+0x60/0x1d8 [ 40.289806][ T5596] el0t_64_sync_handler+0x44/0x104 [ 40.289818][ T5596] el0t_64_sync+0x198/0x19c [ 40.389450][ T5605] loop3: detected capacity change from 0 to 128 [ 40.390683][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 40.390696][ T12] bond0 (unregistering): (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 40.424470][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 40.447755][ T12] bond0 (unregistering): Released all slaves [ 40.451380][ T5395] veth1_vlan: entered promiscuous mode [ 40.455952][ T40] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 40.461594][ T4400] 8021q: adding VLAN 0 to HW filter on device eth7 [ 40.478375][ T5395] veth0_macvtap: entered promiscuous mode [ 40.479472][ T5395] veth1_macvtap: entered promiscuous mode [ 40.482591][ T5395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.484398][ T5395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.534800][ T5578] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.536649][ T1368] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.536799][ T1368] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.536901][ T1368] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.537047][ T1368] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.622769][ T5617] FAULT_INJECTION: forcing a failure. [ 40.622769][ T5617] name failslab, interval 1, probability 0, space 0, times 0 [ 40.622791][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: syz.4.207 Not tainted syzkaller #0 PREEMPT [ 40.622803][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 40.622808][ T5617] Call trace: [ 40.622811][ T5617] show_stack+0x2c/0x3c (C) [ 40.622830][ T5617] __dump_stack+0x30/0x40 [ 40.622842][ T5617] dump_stack_lvl+0xd8/0x12c [ 40.622854][ T5617] dump_stack+0x1c/0x28 [ 40.622865][ T5617] should_fail_ex+0x418/0x58c [ 40.622879][ T5617] should_failslab+0xc4/0x120 [ 40.622892][ T5617] kmem_cache_alloc_noprof+0x94/0x5d4 [ 40.622900][ T5617] sk_prot_alloc+0x60/0x1e8 [ 40.622910][ T5617] sk_alloc+0x44/0x320 [ 40.622917][ T5617] rds_create+0x98/0x414 [ 40.622930][ T5617] __sock_create+0x31c/0x670 [ 40.622940][ T5617] __sys_socket_create+0xc0/0x11c [ 40.622950][ T5617] __sys_socket+0x44/0xec [ 40.622960][ T5617] __arm64_sys_socket+0x84/0x9c [ 40.622969][ T5617] invoke_syscall+0x98/0x244 [ 40.622982][ T5617] el0_svc_common+0xec/0x23c [ 40.622993][ T5617] do_el0_svc+0x4c/0x5c [ 40.623004][ T5617] el0_svc+0x60/0x1d8 [ 40.623016][ T5617] el0t_64_sync_handler+0x44/0x104 [ 40.623028][ T5617] el0t_64_sync+0x198/0x19c [ 40.731411][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.731473][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.731528][ T5578] bridge_slave_0: entered allmulticast mode [ 40.732494][ T5578] bridge_slave_0: entered promiscuous mode [ 40.753712][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.753744][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.753818][ T5578] bridge_slave_1: entered allmulticast mode [ 40.755474][ T5578] bridge_slave_1: entered promiscuous mode [ 40.784755][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.794819][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.799071][ T5632] FAULT_INJECTION: forcing a failure. [ 40.799071][ T5632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.799091][ T5632] CPU: 1 UID: 0 PID: 5632 Comm: syz.4.211 Not tainted syzkaller #0 PREEMPT [ 40.799102][ T5632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 40.799107][ T5632] Call trace: [ 40.799110][ T5632] show_stack+0x2c/0x3c (C) [ 40.799129][ T5632] __dump_stack+0x30/0x40 [ 40.799142][ T5632] dump_stack_lvl+0xd8/0x12c [ 40.799158][ T5632] dump_stack+0x1c/0x28 [ 40.799170][ T5632] should_fail_ex+0x418/0x58c [ 40.799183][ T5632] should_fail+0x14/0x24 [ 40.799195][ T5632] should_fail_usercopy+0x20/0x30 [ 40.799208][ T5632] _inline_copy_from_user+0x3c/0x174 [ 40.799221][ T5632] io_query+0x118/0x810 [ 40.799231][ T5632] __arm64_sys_io_uring_register+0x374/0x12d0 [ 40.799243][ T5632] invoke_syscall+0x98/0x244 [ 40.799256][ T5632] el0_svc_common+0xec/0x23c [ 40.799267][ T5632] do_el0_svc+0x4c/0x5c [ 40.799279][ T5632] el0_svc+0x60/0x1d8 [ 40.799292][ T5632] el0t_64_sync_handler+0x44/0x104 [ 40.799304][ T5632] el0t_64_sync+0x198/0x19c [ 40.825038][ T5634] loop4: detected capacity change from 0 to 512 [ 40.829591][ T5578] team0: Port device team_slave_0 added [ 40.830343][ T5578] team0: Port device team_slave_1 added [ 40.837140][ T4723] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 40.838104][ T4723] Bluetooth: hci2: Injecting HCI hardware error event [ 40.838632][ T4723] Bluetooth: hci2: hardware error 0x00 [ 40.862404][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.862416][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.862430][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.863090][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.863097][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.863110][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.869975][ T5634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.875258][ T5634] capability: warning: `syz.4.212' uses deprecated v2 capabilities in a way that may be insecure [ 40.881299][ T5634] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.212: corrupted xattr block 33: invalid header [ 40.881580][ T5634] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.212: corrupted xattr block 33: invalid header [ 40.881727][ T5634] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.212: corrupted xattr block 33: invalid header [ 40.926280][ T5578] hsr_slave_0: entered promiscuous mode [ 40.928165][ T5578] hsr_slave_1: entered promiscuous mode [ 40.928400][ T5578] debugfs: 'hsr0' already exists in 'hsr' [ 40.928412][ T5578] Cannot create hsr debugfs directory [ 40.935245][ T40] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 40.936024][ T40] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 127 with error 28 [ 40.936038][ T40] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.936038][ T40] [ 40.936045][ T40] EXT4-fs (loop4): Total free blocks count 0 [ 40.936051][ T40] EXT4-fs (loop4): Free/Dirty block details [ 40.936058][ T40] EXT4-fs (loop4): free_blocks=65280 [ 40.936066][ T40] EXT4-fs (loop4): dirty_blocks=127 [ 40.936072][ T40] EXT4-fs (loop4): Block reservation details [ 40.936077][ T40] EXT4-fs (loop4): i_reserved_data_blocks=127 [ 40.952924][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.995266][ T12] hsr_slave_0: left promiscuous mode [ 40.995497][ T12] hsr_slave_1: left promiscuous mode [ 41.002312][ T12] veth1_macvtap: left promiscuous mode [ 41.002342][ T12] veth0_macvtap: left promiscuous mode [ 41.002387][ T12] veth1_vlan: left promiscuous mode [ 41.002421][ T12] veth0_vlan: left promiscuous mode [ 41.080959][ T5644] ip_tables: iptables: counters copy to user failed while replacing table [ 41.183704][ T5649] netlink: 'syz.4.218': attribute type 16 has an invalid length. [ 41.183721][ T5649] netlink: 'syz.4.218': attribute type 3 has an invalid length. [ 41.183730][ T5649] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.218'. [ 42.196522][ T4718] Bluetooth: hci1: command tx timeout [ 42.197022][ T4718] Bluetooth: hci5: command tx timeout [ 42.986501][ T4723] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 43.371617][ T5600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 43.398390][ T5578] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 43.406068][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 43.410850][ T5578] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 43.414051][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 43.417389][ T5578] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 43.421211][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 43.421541][ T5578] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 43.429704][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 43.432644][ T1368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.432655][ T1368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.450477][ T1368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.450493][ T1368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.482508][ T5681] loop4: detected capacity change from 0 to 1024 [ 43.482899][ T5681] EXT4-fs: Ignoring removed bh option [ 43.507342][ T5681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.533249][ T5677] netlink: 'syz.3.229': attribute type 16 has an invalid length. [ 43.533268][ T5677] netlink: 'syz.3.229': attribute type 3 has an invalid length. [ 43.533276][ T5677] netlink: 'syz.3.229': attribute type 27 has an invalid length. [ 43.533283][ T5677] netlink: 64042 bytes leftover after parsing attributes in process `syz.3.229'. [ 43.538283][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.542530][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.550889][ T1368] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.550919][ T1368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.551799][ T1368] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.551819][ T1368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.563572][ T5578] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.563588][ T5578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.622543][ T5693] ftl_cs: FTL header not found. [ 43.650312][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.685404][ T5693] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096] [ 43.822476][ T866] rxe_eth0 speed is unknown, defaulting to 1000 [ 43.857166][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.901024][ T5578] veth0_vlan: entered promiscuous mode [ 43.903453][ T5578] veth1_vlan: entered promiscuous mode [ 43.939080][ T5578] veth0_macvtap: entered promiscuous mode [ 43.948492][ T5578] veth1_macvtap: entered promiscuous mode [ 43.975087][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.991145][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.213468][ T5763] loop1: detected capacity change from 0 to 1024 [ 44.218440][ T5763] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.238054][ T5763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.267796][ T5763] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.244: bg 0: block 112: padding at end of block bitmap is not set [ 44.268386][ T4725] Bluetooth: hci1: command tx timeout [ 44.268445][ T4723] Bluetooth: hci5: command tx timeout [ 44.286864][ T95] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.290116][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.290175][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.290184][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.290342][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.290788][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.291524][ T5763] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 44.291544][ T5763] EXT4-fs (loop1): This should not happen!! Data will be lost [ 44.291544][ T5763] [ 44.291554][ T5763] EXT4-fs (loop1): Total free blocks count 0 [ 44.291562][ T5763] EXT4-fs (loop1): Free/Dirty block details [ 44.291570][ T5763] EXT4-fs (loop1): free_blocks=0 [ 44.291579][ T5763] EXT4-fs (loop1): dirty_blocks=64 [ 44.291586][ T5763] EXT4-fs (loop1): Block reservation details [ 44.291592][ T5763] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 44.322140][ T1368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.322156][ T1368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.322975][ T49] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 51 with error 28 [ 44.444001][ T5779] misc userio: Can't change port extra on an already running userio instance [ 44.490804][ T5783] loop6: detected capacity change from 0 to 1 [ 44.495755][ T5783] Dev loop6: unable to read RDB block 1 [ 44.495778][ T5783] loop6: unable to read partition table [ 44.495844][ T5783] loop6: partition table beyond EOD, truncated [ 44.495863][ T5783] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 44.511090][ C1] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10800800 phys_seg 0 prio class 2 [ 44.580800][ T30] audit: type=1400 audit(44.550:3): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=5787 comm="syz.4.252" src=65532 dest=20002 netif=wpan0 [ 44.647337][ T5799] netlink: 'syz.4.253': attribute type 1 has an invalid length. [ 44.647354][ T5799] netlink: 'syz.4.253': attribute type 4 has an invalid length. [ 44.647363][ T5799] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.253'. [ 45.099912][ T5851] warning: `syz.6.265' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 45.195877][ T5859] syz_tun: entered allmulticast mode [ 45.199485][ T5859] pimreg: entered allmulticast mode [ 45.200587][ T5859] pimreg: left allmulticast mode [ 45.200635][ T5859] syz_tun: left allmulticast mode [ 45.275032][ T5862] loop4: detected capacity change from 0 to 128 [ 45.292089][ T5862] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 45.292121][ T5862] System zones: 1-3, 19-19, 35-36 [ 45.292670][ T5862] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 45.299530][ T5862] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 7995393 (only 1 groups) [ 45.314160][ T4711] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.383317][ T5874] FAULT_INJECTION: forcing a failure. [ 45.383317][ T5874] name failslab, interval 1, probability 0, space 0, times 0 [ 45.383336][ T5874] CPU: 0 UID: 0 PID: 5874 Comm: syz.4.276 Not tainted syzkaller #0 PREEMPT [ 45.383347][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 45.383352][ T5874] Call trace: [ 45.383355][ T5874] show_stack+0x2c/0x3c (C) [ 45.383375][ T5874] __dump_stack+0x30/0x40 [ 45.383388][ T5874] dump_stack_lvl+0xd8/0x12c [ 45.383399][ T5874] dump_stack+0x1c/0x28 [ 45.383410][ T5874] should_fail_ex+0x418/0x58c [ 45.383423][ T5874] should_failslab+0xc4/0x120 [ 45.383436][ T5874] __kvmalloc_node_noprof+0x160/0x7fc [ 45.383445][ T5874] bpf_compute_scc+0x874/0x94c [ 45.383455][ T5874] bpf_check+0x1d34/0x2428 [ 45.383467][ T5874] bpf_prog_load+0xf4c/0x1554 [ 45.383477][ T5874] __sys_bpf+0x7d4/0x82c [ 45.383486][ T5874] __arm64_sys_bpf+0xd0/0xec [ 45.383494][ T5874] invoke_syscall+0x98/0x244 [ 45.383507][ T5874] el0_svc_common+0xec/0x23c [ 45.383518][ T5874] do_el0_svc+0x4c/0x5c [ 45.383529][ T5874] el0_svc+0x60/0x1d8 [ 45.383542][ T5874] el0t_64_sync_handler+0x44/0x104 [ 45.383554][ T5874] el0t_64_sync+0x198/0x19c [ 45.440671][ T5880] loop4: detected capacity change from 0 to 128 [ 45.453687][ T5880] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.469902][ T10] atkbd serio0: keyboard reset failed on [ 45.481989][ T4711] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.514648][ T5885] loop4: detected capacity change from 0 to 128 [ 45.518876][ T5885] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 45.518897][ T5885] FAT-fs (loop4): data area starts beyond volume (36 > 11) [ 45.518904][ T5885] FAT-fs (loop4): Can't find a valid FAT filesystem [ 45.532348][ T5885] Soft offlining pfn 0x11fef5 at process virtual address 0x20000000 [ 45.544382][ T5885] Soft offlining pfn 0x116509 at process virtual address 0x20001000 [ 45.544761][ T5885] Soft offlining pfn 0x216be0 at process virtual address 0x20002000 [ 45.544790][ T5885] Memory failure: 0x216be0: unhandlable page. [ 45.563837][ T5885] Injecting memory failure for pfn 0x137cd0 at process virtual address 0x20001000 [ 45.565130][ T5885] Memory failure: 0x137cd0: keeping poisoned page in swap cache [ 45.565194][ T5885] Memory failure: 0x137cd0: failed to unmap page (folio mapcount=1) [ 45.565202][ T5885] Memory failure: 0x137cd0: Sending SIGBUS to syz.4.280:5885 due to hardware memory corruption [ 45.565255][ T5885] Memory failure: 0x137cd0: recovery action for unmapping failed page: Failed [ 45.645837][ T5897] usb251xb 0-002c: supply vdd not found, using dummy regulator [ 45.649826][ T5897] usb251xb 0-002c: configuring block 0 failed: -5 [ 45.649840][ T5897] usb251xb 0-002c: Failed to connect hub (-5) [ 45.653600][ T5897] usb251xb 0-002c: probe with driver usb251xb failed with error -5 [ 45.654235][ T5897] i2c i2c-0: new_device: Instantiated device usb2512b at 0x2c [ 46.126359][ T5954] FAULT_INJECTION: forcing a failure. [ 46.126359][ T5954] name failslab, interval 1, probability 0, space 0, times 0 [ 46.126379][ T5954] CPU: 1 UID: 0 PID: 5954 Comm: syz.2.294 Not tainted syzkaller #0 PREEMPT [ 46.126393][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 46.126398][ T5954] Call trace: [ 46.126401][ T5954] show_stack+0x2c/0x3c (C) [ 46.126421][ T5954] __dump_stack+0x30/0x40 [ 46.126436][ T5954] dump_stack_lvl+0xd8/0x12c [ 46.126448][ T5954] dump_stack+0x1c/0x28 [ 46.126459][ T5954] should_fail_ex+0x418/0x58c [ 46.126475][ T5954] should_failslab+0xc4/0x120 [ 46.126489][ T5954] kmem_cache_alloc_noprof+0x94/0x5d4 [ 46.126497][ T5954] __kernfs_new_node+0xf0/0x7d8 [ 46.126508][ T5954] kernfs_new_node+0xe8/0x130 [ 46.126518][ T5954] __kernfs_create_file+0x60/0x2e0 [ 46.126529][ T5954] cgroup_addrm_files+0x694/0xaf8 [ 46.126538][ T5954] css_populate_dir+0xe0/0x348 [ 46.126550][ T5954] cgroup_apply_control_enable+0x618/0xae8 [ 46.126563][ T5954] cgroup_mkdir+0x768/0xbac [ 46.126575][ T5954] kernfs_iop_mkdir+0xe0/0x128 [ 46.126585][ T5954] vfs_mkdir+0x2e4/0x46c [ 46.126595][ T5954] filename_mkdirat+0x228/0x3f4 [ 46.126606][ T5954] __arm64_sys_mkdirat+0x9c/0xc0 [ 46.126616][ T5954] invoke_syscall+0x98/0x244 [ 46.126629][ T5954] el0_svc_common+0xec/0x23c [ 46.126641][ T5954] do_el0_svc+0x4c/0x5c [ 46.126653][ T5954] el0_svc+0x60/0x1d8 [ 46.126665][ T5954] el0t_64_sync_handler+0x44/0x104 [ 46.126678][ T5954] el0t_64_sync+0x198/0x19c [ 46.158588][ T5954] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12 [ 46.346975][ T4723] Bluetooth: hci5: command tx timeout [ 46.347001][ T4723] Bluetooth: hci1: command tx timeout [ 46.396933][ T5983] loop6: detected capacity change from 0 to 128 [ 46.408541][ T5983] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.774921][ T5395] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.909146][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'. [ 46.913692][ T6025] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 46.921124][ T6025] gretap0: entered promiscuous mode [ 46.946949][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'. [ 47.602153][ T6073] ip_tables: iptables: counters copy to user failed while replacing table [ 47.603170][ T6073] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 47.603727][ T6073] ip_tables: iptables: counters copy to user failed while replacing table [ 47.635337][ T6075] loop4: detected capacity change from 0 to 128 [ 47.640555][ T6075] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.698883][ T6075] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 47.698916][ T6075] System zones: 1-3, 19-19, 35-36 [ 47.699455][ T6075] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 47.725174][ T6075] syz.4.318 (pid 6075) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 47.751501][ T4711] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.885343][ T4725] block nbd1: Receive control failed (result -32) [ 47.896332][ T6037] block nbd1: shutting down sockets [ 48.444967][ T4725] Bluetooth: hci1: command tx timeout [ 55.156443][ C0] sched: DL replenish lagged too much [ 66.187991][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.197751][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 90.748640][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 34s! [ 90.748676][ C0] Showing busy workqueues and worker pools: [ 90.748681][ C0] workqueue events: flags=0x100 [ 90.748700][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=8 refcnt=9 [ 90.748717][ C0] pending: 3*nsim_dev_hwstats_traffic_work, 2*psi_avgs_work, vmstat_shepherd, psi_avgs_work, ovs_dp_masks_rebalance [ 90.748763][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=13 refcnt=14 [ 90.748778][ C0] in-flight: 26:request_firmware_work_func for 87s [ 90.748794][ C0] pending: 4*nsim_dev_hwstats_traffic_work, 2*psi_avgs_work, 4*ovs_dp_masks_rebalance, free_obj_work, delayed_vfree_work [ 90.748841][ C0] workqueue events_unbound: flags=0x2 [ 90.748846][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=19 refcnt=20 [ 90.748859][ C0] in-flight: 1251:cfg80211_wiphy_work for 36s ,95:cfg80211_wiphy_work for 35s ,6006:cfg80211_wiphy_work for 33s [ 90.748898][ C0] pending: 4*nsim_dev_trap_report_work, macvlan_process_broadcast, cfg80211_wiphy_work, nsim_dev_trap_report_work, cfg80211_wiphy_work, nsim_dev_trap_report_work, macvlan_process_broadcast, cfg80211_wiphy_work, 3*macvlan_process_broadcast, flush_memcg_stats_dwork, macvlan_process_broadcast [ 90.748967][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=18 refcnt=19 [ 90.748980][ C0] in-flight: 14:cfg80211_wiphy_work for 38s ,12:cfg80211_wiphy_work for 30s ,40:nsim_dev_trap_report_work for 34s ,1445:cfg80211_wiphy_work for 27s ,68:cfg80211_wiphy_work for 40s cfg80211_wiphy_work [ 90.749042][ C0] pending: 3*cfg80211_wiphy_work, toggle_allocation_gate, macvlan_process_broadcast, 2*cfg80211_wiphy_work, 3*macvlan_process_broadcast, cfg80211_wiphy_work, crng_reseed [ 90.749089][ C0] workqueue events_power_efficient: flags=0x82 [ 90.749094][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=4 refcnt=5 [ 90.749106][ C0] in-flight: 49:neigh_periodic_work for 38s [ 90.749124][ C0] pending: fb_flashcursor, wg_ratelimiter_gc_entries, neigh_periodic_work [ 90.749154][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=4 refcnt=5 [ 90.749168][ C0] pending: 2*neigh_managed_work, gc_worker, do_cache_clean [ 90.749196][ C0] workqueue events_dfl_long: flags=0x2 [ 90.749200][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=5 refcnt=6 [ 90.749213][ C0] pending: 5*defense_work_handler [ 90.749224][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 90.749236][ C0] pending: defense_work_handler [ 90.749248][ C0] workqueue mm_percpu_wq: flags=0x108 [ 90.749253][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 90.749267][ C0] pending: vmstat_update [ 90.749277][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 90.749292][ C0] pending: vmstat_update [ 90.749307][ C0] workqueue writeback: flags=0x4a [ 90.749312][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 90.749324][ C0] in-flight: 1368:wb_workfn for 37s [ 90.749378][ C0] workqueue bat_events: flags=0x6000a [ 90.749382][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=37 MAYDAY [ 90.749395][ C0] in-flight: 2858(RESCUER):batadv_dat_purge for 5s [ 90.749413][ C0] pending: mayday_cursor_func [ 90.749423][ C0] inactive: batadv_bla_periodic_work, 3*batadv_iv_send_outstanding_bat_ogm_packet, 2*batadv_purge_orig, 3*batadv_tt_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, 2*batadv_dat_purge, batadv_bla_periodic_work, 4*batadv_mcast_mla_update, 6*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, 2*batadv_iv_send_outstanding_bat_ogm_packet, batadv_tt_purge [ 90.749543][ C0] workqueue wg-kex-wg0: flags=0x6 [ 90.749547][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 90.749560][ C0] pending: wg_packet_handshake_send_worker [ 90.749573][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 90.749578][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 90.749592][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 90.749607][ C0] workqueue wg-kex-wg1: flags=0x6 [ 90.749611][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 90.749624][ C0] pending: wg_packet_handshake_send_worker [ 90.749636][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 90.749640][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 90.749655][ C0] pending: wg_packet_encrypt_worker [ 90.749664][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 90.749679][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 90.749698][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 90.749703][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 90.749718][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker, wg_packet_tx_worker [ 90.749739][ C0] workqueue wg-kex-wg0: flags=0x6 [ 90.749743][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 90.749756][ C0] pending: wg_packet_handshake_send_worker [ 90.749768][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 90.749773][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 90.749787][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 90.749802][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 90.749807][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 90.749821][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 90.749841][ C0] workqueue wg-kex-wg2: flags=0x6 [ 90.749845][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 90.749858][ C0] pending: wg_packet_handshake_send_worker [ 90.749870][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 90.749875][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 90.749889][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker, wg_packet_tx_worker [ 90.749909][ C0] workqueue wg-kex-wg0: flags=0x6 [ 90.749913][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 90.749926][ C0] pending: wg_packet_handshake_send_worker [ 90.749937][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 90.749943][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 90.749957][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 90.749972][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 90.749977][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 90.749991][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 90.750011][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 90.750016][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 90.750030][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker, wg_packet_tx_worker [ 90.750056][ C0] workqueue wg-kex-wg0: flags=0x6 [ 90.750060][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 90.750073][ C0] pending: wg_packet_handshake_send_worker [ 90.750085][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 90.750090][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 90.750104][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 90.750119][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 90.750124][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 90.750142][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 90.750165][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 90.750170][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 90.750184][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 90.750205][ C0] workqueue wg-kex-wg0: flags=0x6 [ 90.750209][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 90.750222][ C0] pending: wg_packet_handshake_send_worker [ 90.750234][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 90.750239][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 90.750253][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 90.750268][ C0] workqueue wg-kex-wg1: flags=0x6 [ 90.750272][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 90.750284][ C0] pending: wg_packet_handshake_send_worker [ 90.750296][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 90.750301][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 90.750315][ C0] in-flight: 5079:wg_packet_encrypt_worker for 18s [ 90.750330][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 90.750345][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 90.750364][ C0] workqueue wg-kex-wg2: flags=0x6 [ 90.750368][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 90.750381][ C0] pending: wg_packet_handshake_send_worker [ 90.750393][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 90.750398][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 90.750412][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker, wg_packet_tx_worker [ 90.750436][ C0] pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=2s workers=7 idle: 4826 1155 10 4839 4825 9 [ 90.750482][ C0] pool 6: cpus=1 node=0 flags=0x0 nice=0 hung=34s workers=8 idle: 866 4869 24 4717 4833 1091 4834 [ 90.750529][ C0] pool 8: cpus=0-1 flags=0x6 nice=0 hung=5s workers=11 manager: 1189 [ 90.750548][ C0] Showing backtraces of busy workers in stalled worker pools: [ 90.750553][ C0] pool 6: [ 90.750556][ C0] task:kworker/1:1 state:R running task stack:0 pid:26 tgid:26 ppid:2 task_flags:0x4288060 flags:0x00000010 [ 90.750570][ C0] Workqueue: events request_firmware_work_func [ 90.750580][ C0] Call trace: [ 90.750583][ C0] __switch_to+0x2b4/0x6e4 (T) [ 90.750598][ C0] __schedule+0x135c/0x2b00 [ 90.750607][ C0] preempt_schedule_irq+0x74/0x174 [ 90.750617][ C0] raw_irqentry_exit_cond_resched+0x30/0x40 [ 90.750628][ C0] irqentry_exit_to_kernel_mode_preempt+0x44/0x54 [ 90.750639][ C0] arm64_exit_to_kernel_mode_preempt+0x1c/0x38 [ 90.750651][ C0] el1_interrupt+0x4c/0x60 [ 90.750661][ C0] el1h_64_irq_handler+0x18/0x24 [ 90.750672][ C0] el1h_64_irq+0x78/0x7c [ 90.750680][ C0] qlist_free_all+0x94/0x120 (P) [ 90.750690][ C0] kasan_quarantine_reduce+0x118/0x124 [ 90.750700][ C0] __kasan_kmalloc+0x2c/0xb4 [ 90.750708][ C0] __kmalloc_cache_noprof+0x2f4/0x5fc [ 90.750717][ C0] kobject_uevent_env+0x250/0x944 [ 90.750725][ C0] kobject_uevent+0x2c/0x3c [ 90.750733][ C0] device_del+0x5f8/0x71c [ 90.750742][ C0] firmware_fallback_sysfs+0x330/0x930 [ 90.750750][ C0] _request_firmware+0xb34/0xf5c [ 90.750761][ C0] request_firmware_work_func+0xa4/0x24c [ 90.750768][ C0] process_scheduled_works+0x91c/0x1250 [ 90.750778][ C0] worker_thread+0x798/0xbd0 [ 90.750787][ C0] kthread+0x304/0x3d4 [ 90.750796][ C0] ret_from_fork+0x10/0x20