last executing test programs: 3.465611202s ago: executing program 4 (id=297): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000100), 0x4) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x4000080}, 0x40041c0) read(r1, &(0x7f0000000280)=""/206, 0xce) 3.426948317s ago: executing program 4 (id=299): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f0000000180)='syz0\x00', 0x1ff) 3.312009093s ago: executing program 4 (id=300): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="b2fc991555cf4f1b83cafc8889c21fcf"}}) close(r0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 3.275440887s ago: executing program 4 (id=302): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x5a3, &(0x7f0000000480)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0xc0089364, 0x0) 3.078462265s ago: executing program 4 (id=307): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000140)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000380)={0x0, 0x1800, r3, r4, 0x3, 0x1800, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xb4b, 0x1, 0x2, 0x10, 0x12f, 0xe154, 0x1000, 0x0, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 2.207808655s ago: executing program 4 (id=318): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket(0x15, 0x5, 0x0) recvfrom$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 2.207629923s ago: executing program 32 (id=318): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket(0x15, 0x5, 0x0) recvfrom$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1.582209016s ago: executing program 2 (id=333): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) exit(0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 1.447893618s ago: executing program 0 (id=335): unshare(0x400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000fc0)={0x11}) 1.099998008s ago: executing program 0 (id=337): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000300)={0x2e, 0x57, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x3, 0x5db, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x41}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x3, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f5a000/0x2000)=nil, 0x2, 0x0, 0x0, 0xdff, 0x3e, 0x0, 0x2, 0x54}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000140)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x64}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1.042390677s ago: executing program 1 (id=338): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x33) fsetxattr(r0, &(0x7f0000000200)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file1\x00', 0x200) 857.667553ms ago: executing program 1 (id=340): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = syz_io_uring_setup(0x7408, &(0x7f0000000400)={0x0, 0x2346, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x4, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)=""/92, 0x5c}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x4, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 857.499828ms ago: executing program 3 (id=341): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/kmsg\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000840)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000900)) 820.481625ms ago: executing program 3 (id=342): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) read$FUSE(r0, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$setownex(r0, 0xf, &(0x7f00000023c0)={0x2, r1}) 723.565339ms ago: executing program 3 (id=343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd2f, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 721.083155ms ago: executing program 0 (id=344): socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f00000001c0), 0x2, 0x790, &(0x7f0000000b40)="$eJzs3c1rHOUfAPDvbPPSX9qfjSBoPQUEDZRuTI2tgoeKBxEsFPRsGzbbULPJhuymNCGgRQQvgooHQS89W603r75c9Q/w7kFaqqbFiAeJzL6k22Y33aTZbMt+PjDJ88zM5jvfeWbmebIz7AbQs0bSH5mIwxHxURJxqDY/iYj+Sqkv4mR1vbXVlVw6JbG+/sYfSWWdW6sruWh4TepArfJERPzwfsSRzOa4paXlmclCIb9Qq4+VZ+fHSkvLR8/PTk7np/Nzx8cnJo6deP7E8d3L9a+flw9e//jVZ74++c97j1/98MckTsbB2rLGPHbLSIzU9kl/ugvv8Eq8s9vhuirp9gawI+mpua96lsfhJC33dXuTAIAOS0eh6wBAj0n0/wDQY+rvA9xaXcnVp+6+I7G3brwcEfur+dfvb1aX9NXu2e2v3AcdupXccWckiYjhXYg/EhFffPvWlXSKDt2HBGjm3UsRcXZ4ZPP1P9n0zMJ2PdvGOiN31Tfi/9J/n9GBe/kuHf+80Gz8l9kY/0ST8c9gk3N3J1qe/xsy13YhTEvp+O+lhmfb1hryrxneV6v9vzLm60/OnS/k02vbIxExGv2DaX18ixijN/+92WpZ4/jvz0/e/jKNn/6+vUbmWt/gna+ZmixP3k/OjW5ciniyr57/pYYlyUb7Jy3Gv6fbjPHaix983mpZmn+ab33anH9nrV+OeLpp+99+oi3Z8vnEscrhMFY/KJr45tfPhlrFb2z/dFpbXVlPIq7sfqbNpe0/tHX+w0nj85ql7cf46fKh71sta5J/rv6/UFXz438gebNSHqjNuzhZLi+MRwwkr2+ef+z2a+v1+vpp/qNPNT//tzr+09HJ2Tbz77v++1c7z7+z0vynttX+2y9cXZvZ1yp+e+0/USmN1uZsff2rXrfb3cD73X8AAAAAAAAAAAAAAAAAAAAAAAAA0I5MRByMJJPdKGcy2Wz1O7wfi6FMoVgqHzlXXJybisp3ZQ9Hf6b+UZeHGj4Pdbz2efj1+rG76s9FxKMR8eng/yr1bK5YmOp28gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQc6DF9/+nfhvs9tYBAB2zv9sbAADsOf0/APQe/T8A9B79PwD0Hv0/APQe/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAddvrUqXRa/3t1JZfWpy4sLc4ULxydypdmsrOLuWyuuDCfnS4Wpwv5bK44e6+/VygW5ydibvHiWDlfKo+VlpbPzBYX58pnzs9OTufP5Pv3JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2J7S0vLMZKGQX1B4CAp9tVZ7ULZnR4VMPYm9CjrQxjrr8zdPbTuLB2Bndq7QxYsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEPkvwAAAP//vI8fOA==") openat(0xffffffffffffff9c, &(0x7f0000001300)='./file1\x00', 0x80342, 0x168) r0 = syz_io_uring_setup(0xf00, &(0x7f0000002a40)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000002ac0)=0x0, &(0x7f0000002b00)=0x0, &(0x7f0000002b40)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000002b80)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, 0x0, 0x0, 0x4, 0x0, {0x2, 0x0, 0xfc, '\x00', 0x0}}) io_uring_enter(r0, 0x7c65, 0xa334, 0x1, 0x0, 0x0) 689.575893ms ago: executing program 2 (id=345): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) write(r0, &(0x7f00000006c0)='27', 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c7) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) 600.921969ms ago: executing program 2 (id=346): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core/rd_mcp_0/dev1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/dev1/attrib/is_nonrot\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/10, 0xa) 551.350501ms ago: executing program 0 (id=347): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000019680), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f000001a900), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) io_setup(0x81, &(0x7f000001a940)=0x0) io_submit(r2, 0x1, &(0x7f000001a980)=[&(0x7f000001a9c0)={0x0, 0x0, 0x0, 0x5, 0x800, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 522.420281ms ago: executing program 2 (id=348): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000480)='.\x00', &(0x7f00000004c0)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x84000, 0x0) 414.038829ms ago: executing program 1 (id=349): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$P9_RVERSION(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRES64=r3], 0x15) 411.161049ms ago: executing program 2 (id=350): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) setrlimit(0x40000000000008, &(0x7f00000000c0)) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0xc880, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484) 312.445264ms ago: executing program 3 (id=351): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x23, [0xb, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0x800a2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100005, 0xc3, 0x5d6, 0x0, 0x408a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x9, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x7, 0xf69b, 0x40000006, 0x9, 0x4, 0x1ff, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x89b, 0xad, 0x61f7032a, 0x809, 0x40, 0xa7, 0xffd, 0x0, 0x200b398, 0xff, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0x9, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x3, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x8002, 0x3ff], [0x2, 0xfffffffe, 0x9, 0x7, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x8, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x1, 0xf500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0x514d, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x8d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100008, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x20006, 0xf, 0x0, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x38, 0x0, r4, 0x0, 0x0, 0x0, 0x10040, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x5, 0x0, 0x0) 223.945453ms ago: executing program 3 (id=352): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) ioprio_set$pid(0x3, 0x0, 0x0) io_setup(0x9, &(0x7f0000000580)=0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r0, 0x2000000000000211, &(0x7f00000006c0)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x8, 0x9, r1, 0x0}]) 221.703774ms ago: executing program 1 (id=353): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000980)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000009c0)={0xa0028000}) 186.692209ms ago: executing program 0 (id=354): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x6) fcntl$notify(r0, 0x402, 0x8000001c) prlimit64(0x0, 0xb, &(0x7f00000005c0)={0x0, 0x200000000}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000600)={[0xfffffffffffffff9]}, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0) 140.473275ms ago: executing program 1 (id=355): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0xb2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 94.7676ms ago: executing program 3 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='100', 0x3) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write(r1, &(0x7f0000000240)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,hdr_digest,data_digest', 0x4b) 72.599549ms ago: executing program 0 (id=357): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x202000, 0x20) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x0) 8.417335ms ago: executing program 1 (id=358): socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0xd, &(0x7f0000000240)={0x0, 0x30b5, 0x0, 0x2, 0x5b}, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000005c0), 0x318, 0x0) 0s ago: executing program 2 (id=359): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='100', 0x3) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x4, 0x1, 0x0, @vifc_lcl_addr=@empty, @empty}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. [ 28.464630][ T4723] cgroup: Unknown subsys name 'net' [ 28.565772][ T4723] cgroup: Unknown subsys name 'cpuset' [ 28.567233][ T4723] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.735903][ T4723] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.507861][ T4748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.508860][ T4750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.509466][ T4748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.509842][ T4750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.511263][ T4751] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.511319][ T4752] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.511554][ T4748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.512020][ T4751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.512155][ T4752] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.512297][ T4748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.512786][ T4752] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.512848][ T4751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.513106][ T4751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.513229][ T4752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.514243][ T4751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.514379][ T4751] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.514591][ T4751] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.514905][ T4751] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.515100][ T4751] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.515353][ T4752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.518979][ T4751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.519687][ T4747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.522545][ T4747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.528912][ T4747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.529213][ T4747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.712600][ T4738] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.712880][ T4738] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.713233][ T4738] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.722593][ T4744] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.724542][ T4735] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.729720][ T4734] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.755852][ T4741] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.781693][ T4738] infiniband rxe0: set active [ 29.782101][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.782159][ T4738] infiniband rxe0: added rxe_eth0 [ 29.794861][ T4738] RDS/IB: rxe0: added [ 29.794926][ T4738] smc: adding ib device rxe0 with port count 1 [ 29.794947][ T4738] smc: ib device rxe0 port 1 has no pnetid [ 29.803787][ T26] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.804147][ T4738] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.866520][ T4738] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.913528][ T4738] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.982115][ T4738] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.053611][ T4734] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.053807][ T4734] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.053869][ T4734] bridge_slave_0: entered allmulticast mode [ 30.054325][ T4734] bridge_slave_0: entered promiscuous mode [ 30.056002][ T4738] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.061605][ T4744] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.061633][ T4744] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.061692][ T4744] bridge_slave_0: entered allmulticast mode [ 30.062486][ T4744] bridge_slave_0: entered promiscuous mode [ 30.084341][ T4734] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.084372][ T4734] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.084435][ T4734] bridge_slave_1: entered allmulticast mode [ 30.084933][ T4734] bridge_slave_1: entered promiscuous mode [ 30.107182][ T4744] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.107214][ T4744] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.107279][ T4744] bridge_slave_1: entered allmulticast mode [ 30.107704][ T4744] bridge_slave_1: entered promiscuous mode [ 30.129764][ T4734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.133021][ T4734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.146676][ T4744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.150049][ T4744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.150108][ T4735] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.150237][ T4735] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.150335][ T4735] bridge_slave_0: entered allmulticast mode [ 30.150814][ T4735] bridge_slave_0: entered promiscuous mode [ 30.170318][ T4735] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.170383][ T4735] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.170447][ T4735] bridge_slave_1: entered allmulticast mode [ 30.170848][ T4735] bridge_slave_1: entered promiscuous mode [ 30.177389][ T4741] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.177417][ T4741] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.177490][ T4741] bridge_slave_0: entered allmulticast mode [ 30.177895][ T4741] bridge_slave_0: entered promiscuous mode [ 30.184664][ T4744] team0: Port device team_slave_0 added [ 30.185325][ T4734] team0: Port device team_slave_0 added [ 30.188507][ T4734] team0: Port device team_slave_1 added [ 30.189289][ T4735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.192494][ T4735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.200924][ T4741] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.200987][ T4741] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.201042][ T4741] bridge_slave_1: entered allmulticast mode [ 30.201494][ T4741] bridge_slave_1: entered promiscuous mode [ 30.206797][ T4744] team0: Port device team_slave_1 added [ 30.212590][ T4734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.212599][ T4734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.212611][ T4734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.229548][ T4744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.229559][ T4744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.229573][ T4744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.231503][ T4744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.231510][ T4744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.231523][ T4744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.235457][ T4734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.235466][ T4734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.235484][ T4734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.247157][ T4734] hsr_slave_0: entered promiscuous mode [ 30.247480][ T4734] hsr_slave_1: entered promiscuous mode [ 30.267789][ T4741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.274425][ T4735] team0: Port device team_slave_0 added [ 30.275183][ T4735] team0: Port device team_slave_1 added [ 30.280882][ T4735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.280892][ T4735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.280907][ T4735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.281431][ T4735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.281443][ T4735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.281455][ T4735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.284974][ T4741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.291426][ T4741] team0: Port device team_slave_0 added [ 30.292120][ T4741] team0: Port device team_slave_1 added [ 30.323619][ T4735] hsr_slave_0: entered promiscuous mode [ 30.323905][ T4735] hsr_slave_1: entered promiscuous mode [ 30.324098][ T4735] debugfs: 'hsr0' already exists in 'hsr' [ 30.324133][ T4735] Cannot create hsr debugfs directory [ 30.324417][ T4741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.324432][ T4741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.324445][ T4741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.324997][ T4741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.325005][ T4741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.325019][ T4741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.360489][ T4744] hsr_slave_0: entered promiscuous mode [ 30.360777][ T4744] hsr_slave_1: entered promiscuous mode [ 30.360972][ T4744] debugfs: 'hsr0' already exists in 'hsr' [ 30.360981][ T4744] Cannot create hsr debugfs directory [ 30.371703][ T4741] hsr_slave_0: entered promiscuous mode [ 30.371990][ T4741] hsr_slave_1: entered promiscuous mode [ 30.372156][ T4741] debugfs: 'hsr0' already exists in 'hsr' [ 30.372166][ T4741] Cannot create hsr debugfs directory [ 30.418434][ T4738] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.418536][ T4738] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.418620][ T4738] bridge_slave_0: entered allmulticast mode [ 30.419025][ T4738] bridge_slave_0: entered promiscuous mode [ 30.421830][ T4738] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.421853][ T4738] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.421948][ T4738] bridge_slave_1: entered allmulticast mode [ 30.422317][ T4738] bridge_slave_1: entered promiscuous mode [ 30.444760][ T4738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.447109][ T4738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.452023][ T4734] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.454774][ T4734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.455103][ T4734] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.456631][ T4734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.472197][ T4734] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.473681][ T4734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.479820][ T4738] team0: Port device team_slave_0 added [ 30.480033][ T4734] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.481040][ T4734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.489120][ T4738] team0: Port device team_slave_1 added [ 30.497249][ T4738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.497259][ T4738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.497275][ T4738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.499642][ T4738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.499649][ T4738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.499662][ T4738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.521475][ T4735] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.524121][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.524433][ T4735] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.527269][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.533795][ T4735] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.534861][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.536791][ T4738] hsr_slave_0: entered promiscuous mode [ 30.537086][ T4738] hsr_slave_1: entered promiscuous mode [ 30.537263][ T4738] debugfs: 'hsr0' already exists in 'hsr' [ 30.537273][ T4738] Cannot create hsr debugfs directory [ 30.539848][ T4735] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.541019][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.549094][ T4734] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.549124][ T4734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.549256][ T4734] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.549298][ T4734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.565009][ T4741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.566609][ T4741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.576880][ T4741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.577957][ T4741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.578228][ T4741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.579205][ T4741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.593122][ T4741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.596508][ T4741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.617174][ T4735] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.617203][ T4735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.617279][ T4735] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.617307][ T4735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.641164][ T4734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.641772][ T4744] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.643003][ T4744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.644407][ T4741] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.644442][ T4741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.644516][ T4741] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.644544][ T4741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.653693][ T4744] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.657910][ T4744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.660871][ T4744] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.661876][ T4744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.670974][ T4744] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.672057][ T4744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.684663][ T4741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.686867][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.687840][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.688576][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.688827][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.689412][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.689676][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.716372][ T4734] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.718019][ T4735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.722491][ T4735] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.728850][ T2662] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.728881][ T2662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.729613][ T2662] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.729631][ T2662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.730984][ T4738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.733209][ T4738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.735115][ T4738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.736330][ T4738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.741464][ T4741] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.747197][ T2662] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.747221][ T2662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.747538][ T2662] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.747555][ T2662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.747895][ T4738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.750387][ T4738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.751711][ T4738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.755170][ T4738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.770206][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.770231][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.784848][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.784886][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.790532][ T4734] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.790546][ T4734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.800025][ T4744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.802996][ T4744] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.829843][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.829870][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.832042][ T2662] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.832062][ T2662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.846254][ T4741] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.846268][ T4741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.862079][ T4738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.900096][ T4744] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.900113][ T4744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.901248][ T4738] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.912443][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.912471][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.913037][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.913056][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.941005][ T4738] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.941023][ T4738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.035841][ T4734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.064316][ T4741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.089855][ T4741] veth0_vlan: entered promiscuous mode [ 31.091828][ T4741] veth1_vlan: entered promiscuous mode [ 31.100706][ T4741] veth0_macvtap: entered promiscuous mode [ 31.101793][ T4741] veth1_macvtap: entered promiscuous mode [ 31.109307][ T4741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.110313][ T4741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.114607][ T2662] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.115979][ T2662] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.116053][ T2662] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.116109][ T2662] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.147652][ T4735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.189700][ T4744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.190878][ T2662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.190887][ T2662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.209397][ T4735] veth0_vlan: entered promiscuous mode [ 31.221856][ T4734] veth0_vlan: entered promiscuous mode [ 31.223161][ T4738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.226777][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.226791][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.237636][ T4744] veth0_vlan: entered promiscuous mode [ 31.239675][ T4744] veth1_vlan: entered promiscuous mode [ 31.246700][ T4734] veth1_vlan: entered promiscuous mode [ 31.249719][ T4744] veth0_macvtap: entered promiscuous mode [ 31.250805][ T4744] veth1_macvtap: entered promiscuous mode [ 31.257830][ T4735] veth1_vlan: entered promiscuous mode [ 31.268695][ T4734] veth0_macvtap: entered promiscuous mode [ 31.269505][ T4741] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.270263][ T4734] veth1_macvtap: entered promiscuous mode [ 31.276337][ T4734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.277450][ T4734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.285415][ T4744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.286730][ T4744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.318036][ T4738] veth0_vlan: entered promiscuous mode [ 31.341772][ T4738] veth1_vlan: entered promiscuous mode [ 31.343982][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.344072][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.344091][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.344108][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.348740][ T4735] veth0_macvtap: entered promiscuous mode [ 31.349889][ T4735] veth1_macvtap: entered promiscuous mode [ 31.357618][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.358681][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.361212][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.361288][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.361317][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.361344][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.387069][ T2662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.387082][ T2662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.396320][ T2622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.396334][ T2622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.408155][ T4738] veth0_macvtap: entered promiscuous mode [ 31.409341][ T4738] veth1_macvtap: entered promiscuous mode [ 31.415795][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.415807][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.427621][ T4738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.434191][ T4738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.436763][ T2622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.436772][ T2622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.458259][ T2662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.458273][ T2662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.501058][ T2622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.501070][ T2622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.505086][ T4930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 31.517638][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.517649][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.524783][ T2662] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.524936][ T2662] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.525037][ T2662] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.525495][ T2662] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.525629][ T2662] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.525833][ T2662] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.525933][ T2662] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.525963][ T2662] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.544956][ T4746] Bluetooth: hci4: command tx timeout [ 31.545076][ T4746] Bluetooth: hci1: command tx timeout [ 31.545145][ T4746] Bluetooth: hci0: command tx timeout [ 31.560597][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.560608][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.611703][ T4941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 31.617676][ T4946] futex_wake_op: syz.4.8 tries to shift op by 144; fix this program [ 31.633459][ T4746] Bluetooth: hci2: command tx timeout [ 31.633621][ T4746] Bluetooth: hci3: command tx timeout [ 31.710629][ T4959] FAULT_INJECTION: forcing a failure. [ 31.710629][ T4959] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 31.710648][ T4959] CPU: 0 UID: 0 PID: 4959 Comm: syz.3.17 Not tainted syzkaller #0 PREEMPT [ 31.710658][ T4959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 31.710663][ T4959] Call trace: [ 31.710666][ T4959] show_stack+0x2c/0x3c (C) [ 31.710682][ T4959] __dump_stack+0x30/0x40 [ 31.710691][ T4959] dump_stack_lvl+0xd8/0x12c [ 31.710699][ T4959] dump_stack+0x1c/0x28 [ 31.710707][ T4959] should_fail_ex+0x418/0x58c [ 31.710718][ T4959] should_fail+0x14/0x24 [ 31.710727][ T4959] should_fail_usercopy+0x20/0x30 [ 31.710737][ T4959] bpf_verifier_vlog+0x3f4/0xbc0 [ 31.710746][ T4959] __btf_verifier_log+0xe8/0x13c [ 31.710757][ T4959] __btf_verifier_log_type+0x464/0x5e4 [ 31.710767][ T4959] btf_func_proto_check_meta+0x118/0x154 [ 31.710778][ T4959] btf_check_all_metas+0x294/0x84c [ 31.710788][ T4959] btf_parse_type_sec+0x104/0x1004 [ 31.710799][ T4959] btf_new_fd+0x33c/0x7a8 [ 31.710807][ T4959] bpf_btf_load+0x144/0x190 [ 31.710819][ T4959] __sys_bpf+0x7f0/0x82c [ 31.710830][ T4959] __arm64_sys_bpf+0xd0/0xec [ 31.710840][ T4959] invoke_syscall+0x98/0x244 [ 31.710849][ T4959] el0_svc_common+0xec/0x23c [ 31.710858][ T4959] do_el0_svc+0x4c/0x5c [ 31.710865][ T4959] el0_svc+0x60/0x1d8 [ 31.710874][ T4959] el0t_64_sync_handler+0x44/0x104 [ 31.710882][ T4959] el0t_64_sync+0x198/0x19c [ 31.809330][ T4972] capability: warning: `syz.4.21' uses 32-bit capabilities (legacy support in use) [ 31.849173][ T4981] sctp: [Deprecated]: syz.3.25 (pid 4981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 31.849173][ T4981] Use struct sctp_sack_info instead [ 31.870322][ T4984] loop3: detected capacity change from 0 to 512 [ 31.871351][ T4984] ======================================================= [ 31.871351][ T4984] WARNING: The mand mount option has been deprecated and [ 31.871351][ T4984] and is ignored by this kernel. Remove the mand [ 31.871351][ T4984] option from the mount to silence this warning. [ 31.871351][ T4984] ======================================================= [ 31.895065][ T4984] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 31.895084][ T4984] FAT-fs (loop3): Filesystem has been set read-only [ 31.914695][ T4987] loop4: detected capacity change from 0 to 512 [ 31.927526][ T4987] EXT4-fs: Mount option(s) incompatible with ext2 [ 31.961761][ T4987] loop4: detected capacity change from 0 to 512 [ 31.970565][ T4987] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.27: corrupted in-inode xattr: bad e_name length [ 31.970651][ T4987] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 31.971643][ T4987] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.27: couldn't read orphan inode 15 (err -117) [ 31.971690][ T4987] loop4: lost filesystem error report for type 5 error -117 [ 31.988357][ T4987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.021413][ T4734] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.026149][ T4997] loop3: detected capacity change from 0 to 4096 [ 32.049560][ T4997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.085421][ T4997] EXT4-fs error (device loop3): ext4_quota_enable:7257: comm syz.3.31: Bad quota inum: 131076, type: 1 [ 32.085907][ T4997] EXT4-fs warning (device loop3): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=131076). Please run e2fsck to fix. [ 32.123161][ T4738] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.206561][ T5014] netlink: 20 bytes leftover after parsing attributes in process `syz.4.38'. [ 32.438375][ T5037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46'. [ 32.721457][ T5044] FAULT_INJECTION: forcing a failure. [ 32.721457][ T5044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 32.721479][ T5044] CPU: 0 UID: 0 PID: 5044 Comm: syz.2.50 Not tainted syzkaller #0 PREEMPT [ 32.721492][ T5044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 32.721499][ T5044] Call trace: [ 32.721503][ T5044] show_stack+0x2c/0x3c (C) [ 32.721520][ T5044] __dump_stack+0x30/0x40 [ 32.721529][ T5044] dump_stack_lvl+0xd8/0x12c [ 32.721538][ T5044] dump_stack+0x1c/0x28 [ 32.721546][ T5044] should_fail_ex+0x418/0x58c [ 32.721557][ T5044] should_fail+0x14/0x24 [ 32.721566][ T5044] should_fail_usercopy+0x20/0x30 [ 32.721579][ T5044] _inline_copy_from_user+0x3c/0x174 [ 32.721594][ T5044] do_sock_getsockopt+0x210/0x720 [ 32.721606][ T5044] __sys_getsockopt+0xfc/0x168 [ 32.721617][ T5044] __arm64_sys_getsockopt+0xc8/0xe4 [ 32.721628][ T5044] invoke_syscall+0x98/0x244 [ 32.721637][ T5044] el0_svc_common+0xec/0x23c [ 32.721645][ T5044] do_el0_svc+0x4c/0x5c [ 32.721653][ T5044] el0_svc+0x60/0x1d8 [ 32.721662][ T5044] el0t_64_sync_handler+0x44/0x104 [ 32.721670][ T5044] el0t_64_sync+0x198/0x19c [ 32.930034][ T5055] syz_tun: entered allmulticast mode [ 32.932001][ T5054] syz_tun: left allmulticast mode [ 33.026173][ T5064] FAULT_INJECTION: forcing a failure. [ 33.026173][ T5064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 33.026193][ T5064] CPU: 0 UID: 0 PID: 5064 Comm: syz.1.58 Not tainted syzkaller #0 PREEMPT [ 33.026204][ T5064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 33.026210][ T5064] Call trace: [ 33.026213][ T5064] show_stack+0x2c/0x3c (C) [ 33.026229][ T5064] __dump_stack+0x30/0x40 [ 33.026239][ T5064] dump_stack_lvl+0xd8/0x12c [ 33.026247][ T5064] dump_stack+0x1c/0x28 [ 33.026255][ T5064] should_fail_ex+0x418/0x58c [ 33.026268][ T5064] should_fail+0x14/0x24 [ 33.026277][ T5064] should_fail_usercopy+0x20/0x30 [ 33.026288][ T5064] copy_from_sockptr+0x7c/0x1e0 [ 33.026303][ T5064] ip_mcast_join_leave+0xf8/0x1e8 [ 33.026311][ T5064] do_ip_setsockopt+0x118c/0x2628 [ 33.026324][ T5064] ip_setsockopt+0x80/0x128 [ 33.026331][ T5064] raw_setsockopt+0xd8/0x294 [ 33.026342][ T5064] sock_common_setsockopt+0xb0/0xcc [ 33.026354][ T5064] do_sock_setsockopt+0x1f0/0x330 [ 33.026367][ T5064] __sys_setsockopt+0x104/0x170 [ 33.026378][ T5064] __arm64_sys_setsockopt+0xc8/0xe4 [ 33.026390][ T5064] invoke_syscall+0x98/0x244 [ 33.026399][ T5064] el0_svc_common+0xec/0x23c [ 33.026407][ T5064] do_el0_svc+0x4c/0x5c [ 33.026416][ T5064] el0_svc+0x60/0x1d8 [ 33.026425][ T5064] el0t_64_sync_handler+0x44/0x104 [ 33.026440][ T5064] el0t_64_sync+0x198/0x19c [ 33.116577][ T5071] loop2: detected capacity change from 0 to 512 [ 33.122811][ T5071] EXT4-fs warning (device loop2): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 33.346542][ T5081] Set syz1 is full, maxelem 2 reached [ 33.401052][ T5085] FAULT_INJECTION: forcing a failure. [ 33.401052][ T5085] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 33.401077][ T5085] CPU: 1 UID: 0 PID: 5085 Comm: syz.4.69 Not tainted syzkaller #0 PREEMPT [ 33.401089][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 33.401095][ T5085] Call trace: [ 33.401098][ T5085] show_stack+0x2c/0x3c (C) [ 33.401114][ T5085] __dump_stack+0x30/0x40 [ 33.401123][ T5085] dump_stack_lvl+0xd8/0x12c [ 33.401132][ T5085] dump_stack+0x1c/0x28 [ 33.401139][ T5085] should_fail_ex+0x418/0x58c [ 33.401150][ T5085] should_fail_alloc_page+0xec/0x10c [ 33.401160][ T5085] prepare_alloc_pages+0x194/0x484 [ 33.401171][ T5085] __alloc_frozen_pages_noprof+0x180/0x578 [ 33.401181][ T5085] alloc_pages_mpol+0x1fc/0x3d0 [ 33.401192][ T5085] alloc_frozen_pages_noprof+0xc4/0x10c [ 33.401204][ T5085] alloc_pages_noprof+0x30/0x148 [ 33.401214][ T5085] get_free_pages_noprof+0x1c/0xbc [ 33.401225][ T5085] __kasan_populate_vmalloc+0x48/0x1d0 [ 33.401233][ T5085] alloc_vmap_area+0xcd8/0x12ec [ 33.401244][ T5085] __get_vm_area_node+0x210/0x32c [ 33.401255][ T5085] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 33.401267][ T5085] __vmalloc_node_noprof+0xec/0x14c [ 33.401278][ T5085] __vmalloc_noprof+0x64/0x8c [ 33.401289][ T5085] bpf_check+0xd90/0x2414 [ 33.401298][ T5085] bpf_prog_load+0xf4c/0x1554 [ 33.401309][ T5085] __sys_bpf+0x7d4/0x82c [ 33.401320][ T5085] __arm64_sys_bpf+0xd0/0xec [ 33.401330][ T5085] invoke_syscall+0x98/0x244 [ 33.401339][ T5085] el0_svc_common+0xec/0x23c [ 33.401347][ T5085] do_el0_svc+0x4c/0x5c [ 33.401355][ T5085] el0_svc+0x60/0x1d8 [ 33.401364][ T5085] el0t_64_sync_handler+0x44/0x104 [ 33.401372][ T5085] el0t_64_sync+0x198/0x19c [ 33.401447][ T5085] syz.4.69: vmalloc error: size 408, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 33.401502][ T5085] CPU: 1 UID: 0 PID: 5085 Comm: syz.4.69 Not tainted syzkaller #0 PREEMPT [ 33.401511][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 33.401515][ T5085] Call trace: [ 33.401518][ T5085] show_stack+0x2c/0x3c (C) [ 33.401526][ T5085] __dump_stack+0x30/0x40 [ 33.401535][ T5085] dump_stack_lvl+0xd8/0x12c [ 33.401542][ T5085] dump_stack+0x1c/0x28 [ 33.401550][ T5085] warn_alloc+0x1c4/0x1d8 [ 33.401560][ T5085] __vmalloc_node_range_noprof+0x2c4/0xe9c [ 33.401573][ T5085] __vmalloc_node_noprof+0xec/0x14c [ 33.401584][ T5085] __vmalloc_noprof+0x64/0x8c [ 33.401595][ T5085] bpf_check+0xd90/0x2414 [ 33.401603][ T5085] bpf_prog_load+0xf4c/0x1554 [ 33.401615][ T5085] __sys_bpf+0x7d4/0x82c [ 33.401626][ T5085] __arm64_sys_bpf+0xd0/0xec [ 33.401636][ T5085] invoke_syscall+0x98/0x244 [ 33.401645][ T5085] el0_svc_common+0xec/0x23c [ 33.401653][ T5085] do_el0_svc+0x4c/0x5c [ 33.401661][ T5085] el0_svc+0x60/0x1d8 [ 33.401669][ T5085] el0t_64_sync_handler+0x44/0x104 [ 33.401677][ T5085] el0t_64_sync+0x198/0x19c [ 33.401686][ T5085] Mem-Info: [ 33.401691][ T5085] active_anon:22 inactive_anon:5140 isolated_anon:0 [ 33.401691][ T5085] active_file:2226 inactive_file:4470 isolated_file:0 [ 33.401691][ T5085] unevictable:768 dirty:1710 writeback:0 [ 33.401691][ T5085] slab_reclaimable:9004 slab_unreclaimable:88934 [ 33.401691][ T5085] mapped:28989 shmem:942 pagetables:982 [ 33.401691][ T5085] sec_pagetables:0 bounce:0 [ 33.401691][ T5085] kernel_misc_reclaimable:0 [ 33.401691][ T5085] free:1480014 free_pcp:14746 free_cma:7616 [ 33.401712][ T5085] Node 0 active_anon:88kB inactive_anon:20560kB active_file:8904kB inactive_file:17880kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:115956kB dirty:6840kB writeback:0kB shmem:3768kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8740kB pagetables:3928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 33.401733][ T5085] Node 0 DMA free:3077888kB boost:0kB min:20404kB low:25504kB high:30604kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 33.401757][ T5085] lowmem_reserve[]: 0 0 3636 3636 3636 [ 33.401776][ T5085] Node 0 Normal free:2842168kB boost:0kB min:24648kB low:30808kB high:36968kB reserved_highatomic:0kB free_highatomic:0kB active_anon:88kB inactive_anon:20560kB active_file:8904kB inactive_file:17880kB unevictable:3072kB writepending:6840kB zspages:0kB present:5242880kB managed:3724172kB mlocked:0kB bounce:0kB free_pcp:58984kB local_pcp:12348kB free_cma:0kB [ 33.401800][ T5085] lowmem_reserve[]: 0 0 0 0 0 [ 33.401818][ T5085] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 33.401878][ T5085] Node 0 Normal: 2*4kB (ME) 2*8kB (ME) 0*16kB 1*32kB (M) 1*64kB (E) 1*128kB (U) 3*256kB (UM) 1*512kB (E) 4*1024kB (UME) 3*2048kB (UME) 691*4096kB (UM) = 2842104kB [ 33.401955][ T5085] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 33.401962][ T5085] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 33.401968][ T5085] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 33.401975][ T5085] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 33.401981][ T5085] 7627 total pagecache pages [ 33.401985][ T5085] 0 pages in swap cache [ 33.401989][ T5085] Free swap = 124996kB [ 33.401992][ T5085] Total swap = 124996kB [ 33.401996][ T5085] 2097152 pages RAM [ 33.401999][ T5085] 0 pages HighMem/MovableOnly [ 33.402002][ T5085] 396061 pages reserved [ 33.402006][ T5085] 8192 pages cma reserved [ 33.402009][ T5085] 0 pages hwpoisoned [ 33.446040][ T5093] loop1: detected capacity change from 0 to 512 [ 33.452216][ T5093] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 33.457922][ T5093] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a046c128, mo2=0002] [ 33.457960][ T5093] System zones: 1-12 [ 33.458086][ T5093] EXT4-fs (loop1): orphan cleanup on readonly fs [ 33.458263][ T5093] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 33.458275][ T5093] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 33.462474][ T5093] EXT4-fs (loop1): 1 truncate cleaned up [ 33.463243][ T5093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.541572][ T4735] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.575021][ T5102] loop0: detected capacity change from 0 to 128 [ 33.586353][ T5100] FAULT_INJECTION: forcing a failure. [ 33.586353][ T5100] name failslab, interval 1, probability 0, space 0, times 1 [ 33.586371][ T5100] CPU: 0 UID: 0 PID: 5100 Comm: syz.1.74 Not tainted syzkaller #0 PREEMPT [ 33.586381][ T5100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 33.586387][ T5100] Call trace: [ 33.586390][ T5100] show_stack+0x2c/0x3c (C) [ 33.586407][ T5100] __dump_stack+0x30/0x40 [ 33.586418][ T5100] dump_stack_lvl+0xd8/0x12c [ 33.586437][ T5100] dump_stack+0x1c/0x28 [ 33.586445][ T5100] should_fail_ex+0x418/0x58c [ 33.586457][ T5100] should_failslab+0xc4/0x120 [ 33.586467][ T5100] __kmalloc_cache_noprof+0x94/0x5fc [ 33.586479][ T5100] proc_pid_cmdline_read+0x484/0xa14 [ 33.586492][ T5100] vfs_read+0x230/0x8c8 [ 33.586501][ T5100] ksys_read+0x12c/0x228 [ 33.586510][ T5100] __arm64_sys_read+0x84/0x98 [ 33.586519][ T5100] invoke_syscall+0x98/0x244 [ 33.586528][ T5100] el0_svc_common+0xec/0x23c [ 33.586537][ T5100] do_el0_svc+0x4c/0x5c [ 33.586545][ T5100] el0_svc+0x60/0x1d8 [ 33.586554][ T5100] el0t_64_sync_handler+0x44/0x104 [ 33.586562][ T5100] el0t_64_sync+0x198/0x19c [ 33.610561][ T5102] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.626169][ T4737] Bluetooth: hci0: command tx timeout [ 33.626189][ T4737] Bluetooth: hci1: command tx timeout [ 33.626203][ T4737] Bluetooth: hci4: command tx timeout [ 33.656706][ T4741] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.662648][ T5108] binder: 5106:5108 got reply transaction with no transaction stack [ 33.662679][ T5108] binder: 5106:5108 transaction reply to 0:0 failed 3/29201/-71, code 0 size 0-0 line 3156 [ 33.691610][ T5114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.81'. [ 33.691895][ T5114] Zero length message leads to an empty skb [ 33.704647][ T4746] Bluetooth: hci3: command tx timeout [ 33.704660][ T4737] Bluetooth: hci2: command tx timeout [ 33.806755][ T5126] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 33.853094][ T5126] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 34.080349][ T5150] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 34.121035][ T5150] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 34.198444][ T5153] FAULT_INJECTION: forcing a failure. [ 34.198444][ T5153] name failslab, interval 1, probability 0, space 0, times 0 [ 34.198468][ T5153] CPU: 1 UID: 0 PID: 5153 Comm: syz.0.99 Not tainted syzkaller #0 PREEMPT [ 34.198483][ T5153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 34.198490][ T5153] Call trace: [ 34.198494][ T5153] show_stack+0x2c/0x3c (C) [ 34.198509][ T5153] __dump_stack+0x30/0x40 [ 34.198518][ T5153] dump_stack_lvl+0xd8/0x12c [ 34.198526][ T5153] dump_stack+0x1c/0x28 [ 34.198534][ T5153] should_fail_ex+0x418/0x58c [ 34.198546][ T5153] should_failslab+0xc4/0x120 [ 34.198555][ T5153] __kmalloc_cache_noprof+0x94/0x5fc [ 34.198566][ T5153] vkms_atomic_crtc_duplicate_state+0x78/0x170 [ 34.198581][ T5153] drm_atomic_get_crtc_state+0x17c/0x4a4 [ 34.198595][ T5153] drm_atomic_get_plane_state+0x3b0/0x568 [ 34.198607][ T5153] drm_client_modeset_commit_atomic+0x194/0x6b8 [ 34.198620][ T5153] drm_client_modeset_commit_locked+0xd0/0x494 [ 34.198633][ T5153] drm_fb_helper_pan_display+0x1b0/0x788 [ 34.198645][ T5153] fb_pan_display+0x2e4/0x53c [ 34.198655][ T5153] bit_update_start+0x4c/0x1c0 [ 34.198664][ T5153] fbcon_modechanged+0x458/0x698 [ 34.198675][ T5153] fbcon_set_all_vcs+0x3e8/0x430 [ 34.198687][ T5153] fbcon_update_vcs+0x2c/0x4c [ 34.198699][ T5153] fb_set_var_from_user+0xa8/0xe0 [ 34.198708][ T5153] do_fb_ioctl+0x554/0x7a4 [ 34.198719][ T5153] fb_ioctl+0x48/0x68 [ 34.198728][ T5153] __arm64_sys_ioctl+0x154/0x1cc [ 34.198738][ T5153] invoke_syscall+0x98/0x244 [ 34.198747][ T5153] el0_svc_common+0xec/0x23c [ 34.198755][ T5153] do_el0_svc+0x4c/0x5c [ 34.198763][ T5153] el0_svc+0x60/0x1d8 [ 34.198772][ T5153] el0t_64_sync_handler+0x44/0x104 [ 34.198780][ T5153] el0t_64_sync+0x198/0x19c [ 34.254105][ T5156] FAULT_INJECTION: forcing a failure. [ 34.254105][ T5156] name failslab, interval 1, probability 0, space 0, times 0 [ 34.254125][ T5156] CPU: 0 UID: 0 PID: 5156 Comm: syz.0.100 Not tainted syzkaller #0 PREEMPT [ 34.254137][ T5156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 34.254143][ T5156] Call trace: [ 34.254147][ T5156] show_stack+0x2c/0x3c (C) [ 34.254165][ T5156] __dump_stack+0x30/0x40 [ 34.254175][ T5156] dump_stack_lvl+0xd8/0x12c [ 34.254184][ T5156] dump_stack+0x1c/0x28 [ 34.254192][ T5156] should_fail_ex+0x418/0x58c [ 34.254203][ T5156] should_failslab+0xc4/0x120 [ 34.254214][ T5156] __kmalloc_cache_noprof+0x94/0x5fc [ 34.254224][ T5156] nfs_init_fs_context+0x68/0x10dc [ 34.254234][ T5156] alloc_fs_context+0x7d8/0xba4 [ 34.254245][ T5156] fs_context_for_mount+0x34/0x44 [ 34.254256][ T5156] do_new_mount+0x158/0x538 [ 34.254264][ T5156] path_mount+0x5f0/0xa88 [ 34.254272][ T5156] do_mount+0xe8/0x148 [ 34.254279][ T5156] __arm64_sys_mount+0x33c/0x388 [ 34.254287][ T5156] invoke_syscall+0x98/0x244 [ 34.254295][ T5156] el0_svc_common+0xec/0x23c [ 34.254304][ T5156] do_el0_svc+0x4c/0x5c [ 34.254312][ T5156] el0_svc+0x60/0x1d8 [ 34.254320][ T5156] el0t_64_sync_handler+0x44/0x104 [ 34.254328][ T5156] el0t_64_sync+0x198/0x19c [ 34.358895][ T5164] netlink: 55 bytes leftover after parsing attributes in process `syz.0.104'. [ 34.358948][ T5164] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 34.358955][ T5164] IPv6: NLM_F_CREATE should be set when creating new route [ 34.397467][ T5168] loop0: detected capacity change from 0 to 512 [ 34.407426][ T5168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.505011][ T1100] binder: undelivered TRANSACTION_ERROR: 29201 [ 34.505056][ T1100] binder: undelivered death notification, 0000000000000000 [ 34.521026][ T5172] loop1: detected capacity change from 0 to 4096 [ 34.522344][ T5172] EXT4-fs: Ignoring removed orlov option [ 34.549330][ T5172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.551920][ T5175] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 34.557532][ T5175] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 34.562787][ T5177] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 34.569422][ T5175] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 34.569449][ T5175] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 34.569550][ T4741] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.569679][ T5175] overlayfs: d_ino too big (22, ino=9223372036854775938, xinobits=3) [ 34.571112][ T5175] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 34.571233][ T5175] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 34.571325][ T5175] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 34.571410][ T5175] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 34.571507][ T5175] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 34.571591][ T5175] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 34.571850][ T5175] overlayfs: d_ino too big (instances, ino=4611686018427391145, xinobits=3) [ 34.631639][ T4735] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.695988][ T5188] loop1: detected capacity change from 0 to 512 [ 34.696490][ T5188] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.806797][ T5188] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.114: corrupted in-inode xattr: e_value size too large [ 34.806822][ T5188] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.807931][ T5188] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.114: couldn't read orphan inode 15 (err -117) [ 34.807953][ T5188] loop1: lost filesystem error report for type 5 error -117 [ 34.808772][ T5191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.809561][ T5188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.848774][ T5188] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.114: Logical block already allocated [ 34.880367][ T4741] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.897361][ T4735] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.011184][ T5196] netlink: 'syz.0.116': attribute type 11 has an invalid length. [ 35.012188][ T5196] FAULT_INJECTION: forcing a failure. [ 35.012188][ T5196] name failslab, interval 1, probability 0, space 0, times 0 [ 35.012204][ T5196] CPU: 0 UID: 0 PID: 5196 Comm: syz.0.116 Not tainted syzkaller #0 PREEMPT [ 35.012216][ T5196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 35.012224][ T5196] Call trace: [ 35.012228][ T5196] show_stack+0x2c/0x3c (C) [ 35.012244][ T5196] __dump_stack+0x30/0x40 [ 35.012255][ T5196] dump_stack_lvl+0xd8/0x12c [ 35.012263][ T5196] dump_stack+0x1c/0x28 [ 35.012271][ T5196] should_fail_ex+0x418/0x58c [ 35.012283][ T5196] should_failslab+0xc4/0x120 [ 35.012294][ T5196] kmem_cache_alloc_noprof+0x94/0x5d4 [ 35.012305][ T5196] __kernfs_new_node+0xf0/0x7d8 [ 35.012314][ T5196] kernfs_new_node+0xe8/0x130 [ 35.012322][ T5196] __kernfs_create_file+0x60/0x2e0 [ 35.012331][ T5196] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 35.012341][ T5196] internal_create_group+0x550/0xb30 [ 35.012351][ T5196] internal_create_groups+0x64/0x138 [ 35.012361][ T5196] sysfs_create_groups+0x2c/0x3c [ 35.012371][ T5196] device_add_attrs+0x17c/0x4e4 [ 35.012381][ T5196] device_add+0x420/0x9e0 [ 35.012389][ T5196] netdev_register_kobject+0x184/0x328 [ 35.012404][ T5196] register_netdevice+0xd74/0x14c0 [ 35.012413][ T5196] vxlan_newlink+0x1fc/0x630 [ 35.012425][ T5196] rtnl_newlink_create+0x294/0x6b8 [ 35.012442][ T5196] rtnl_newlink+0xfe4/0x138c [ 35.012452][ T5196] rtnetlink_rcv_msg+0x66c/0x9bc [ 35.012463][ T5196] netlink_rcv_skb+0x238/0x414 [ 35.012475][ T5196] rtnetlink_rcv+0x28/0x38 [ 35.012485][ T5196] netlink_unicast+0x600/0x7f8 [ 35.012496][ T5196] netlink_sendmsg+0x648/0x948 [ 35.012508][ T5196] __sock_sendmsg+0xc8/0x17c [ 35.012519][ T5196] ____sys_sendmsg+0x3d0/0x6c8 [ 35.012531][ T5196] ___sys_sendmsg+0x198/0x224 [ 35.012542][ T5196] __sys_sendmsg+0x158/0x204 [ 35.012554][ T5196] __arm64_sys_sendmsg+0x88/0x9c [ 35.012566][ T5196] invoke_syscall+0x98/0x244 [ 35.012575][ T5196] el0_svc_common+0xec/0x23c [ 35.012583][ T5196] do_el0_svc+0x4c/0x5c [ 35.012591][ T5196] el0_svc+0x60/0x1d8 [ 35.012600][ T5196] el0t_64_sync_handler+0x44/0x104 [ 35.012608][ T5196] el0t_64_sync+0x198/0x19c [ 35.470911][ T5201] FAULT_INJECTION: forcing a failure. [ 35.470911][ T5201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 35.470931][ T5201] CPU: 0 UID: 0 PID: 5201 Comm: syz.0.118 Not tainted syzkaller #0 PREEMPT [ 35.470941][ T5201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 35.470947][ T5201] Call trace: [ 35.470950][ T5201] show_stack+0x2c/0x3c (C) [ 35.470966][ T5201] __dump_stack+0x30/0x40 [ 35.470975][ T5201] dump_stack_lvl+0xd8/0x12c [ 35.470983][ T5201] dump_stack+0x1c/0x28 [ 35.470991][ T5201] should_fail_ex+0x418/0x58c [ 35.471001][ T5201] should_fail+0x14/0x24 [ 35.471011][ T5201] should_fail_usercopy+0x20/0x30 [ 35.471021][ T5201] bpf_verifier_vlog+0x81c/0xbc0 [ 35.471031][ T5201] __btf_verifier_log+0xe8/0x13c [ 35.471041][ T5201] btf_parse_hdr+0x3f4/0x71c [ 35.471051][ T5201] btf_new_fd+0x288/0x7a8 [ 35.471059][ T5201] bpf_btf_load+0x144/0x190 [ 35.471072][ T5201] __sys_bpf+0x7f0/0x82c [ 35.471082][ T5201] __arm64_sys_bpf+0xd0/0xec [ 35.471093][ T5201] invoke_syscall+0x98/0x244 [ 35.471102][ T5201] el0_svc_common+0xec/0x23c [ 35.471110][ T5201] do_el0_svc+0x4c/0x5c [ 35.471118][ T5201] el0_svc+0x60/0x1d8 [ 35.471127][ T5201] el0t_64_sync_handler+0x44/0x104 [ 35.471135][ T5201] el0t_64_sync+0x198/0x19c [ 35.649647][ T5215] ubi0: attaching mtd0 [ 35.650279][ T5215] FAULT_INJECTION: forcing a failure. [ 35.650279][ T5215] name failslab, interval 1, probability 0, space 0, times 0 [ 35.650294][ T5215] CPU: 0 UID: 0 PID: 5215 Comm: syz.4.125 Not tainted syzkaller #0 PREEMPT [ 35.650311][ T5215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 35.650317][ T5215] Call trace: [ 35.650321][ T5215] show_stack+0x2c/0x3c (C) [ 35.650337][ T5215] __dump_stack+0x30/0x40 [ 35.650348][ T5215] dump_stack_lvl+0xd8/0x12c [ 35.650357][ T5215] dump_stack+0x1c/0x28 [ 35.650365][ T5215] should_fail_ex+0x418/0x58c [ 35.650376][ T5215] should_failslab+0xc4/0x120 [ 35.650386][ T5215] kmem_cache_alloc_noprof+0x94/0x5d4 [ 35.650396][ T5215] add_to_list+0xc8/0x490 [ 35.650405][ T5215] ubi_attach+0x704/0x4178 [ 35.650413][ T5215] ubi_attach_mtd_dev+0x1240/0x2a70 [ 35.650424][ T5215] ctrl_cdev_ioctl+0x340/0x558 [ 35.650442][ T5215] __arm64_sys_ioctl+0x154/0x1cc [ 35.650451][ T5215] invoke_syscall+0x98/0x244 [ 35.650460][ T5215] el0_svc_common+0xec/0x23c [ 35.650469][ T5215] do_el0_svc+0x4c/0x5c [ 35.650477][ T5215] el0_svc+0x60/0x1d8 [ 35.650486][ T5215] el0t_64_sync_handler+0x44/0x104 [ 35.650494][ T5215] el0t_64_sync+0x198/0x19c [ 35.699767][ T5220] binder: 5219:5220 ioctl c0306201 20000080 returned -14 [ 35.753526][ T4737] Bluetooth: hci4: command tx timeout [ 35.753554][ T4737] Bluetooth: hci1: command tx timeout [ 35.753570][ T4737] Bluetooth: hci0: command tx timeout [ 35.783452][ T4746] Bluetooth: hci3: command tx timeout [ 35.784127][ T4746] Bluetooth: hci2: command tx timeout [ 36.296479][ T5227] nullb0: [POWERTEC] p1 [ 36.296610][ T5227] nullb0: p1 start 809004142 is beyond EOD, truncated [ 36.448560][ T5215] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -12 [ 36.579085][ T5240] netlink: 27 bytes leftover after parsing attributes in process `syz.2.135'. [ 36.795511][ T5252] warning: `syz.1.140' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 36.816270][ T5251] syz.2.142 uses obsolete (PF_INET,SOCK_PACKET) [ 36.840164][ T5255] block nbd4: shutting down sockets [ 36.853109][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 36.853168][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 36.861491][ T4409] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 36.861507][ T4409] Buffer I/O error on dev nbd4, logical block 0, async page read [ 36.868143][ T4409] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 36.868163][ T4409] Buffer I/O error on dev nbd4, logical block 0, async page read [ 36.868222][ T4409] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 36.868233][ T4409] Buffer I/O error on dev nbd4, logical block 0, async page read [ 36.868278][ T4409] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 36.868288][ T4409] Buffer I/O error on dev nbd4, logical block 0, async page read [ 36.868306][ T4761] ldm_validate_partition_table(): Disk read failed. [ 36.868337][ T4409] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 36.868347][ T4409] Buffer I/O error on dev nbd4, logical block 0, async page read [ 36.868389][ T4409] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 36.868398][ T4409] Buffer I/O error on dev nbd4, logical block 0, async page read [ 36.868457][ T4409] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 36.868468][ T4409] Buffer I/O error on dev nbd4, logical block 0, async page read [ 36.868512][ T4409] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 36.868521][ T4409] Buffer I/O error on dev nbd4, logical block 0, async page read [ 36.868538][ T4761] Dev nbd4: unable to read RDB block 0 [ 36.868567][ T4409] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 36.868577][ T4409] Buffer I/O error on dev nbd4, logical block 0, async page read [ 36.868667][ T4761] nbd4: unable to read partition table [ 36.868735][ T4761] nbd4: partition table beyond EOD, truncated [ 36.964981][ T4761] ldm_validate_partition_table(): Disk read failed. [ 36.966642][ T4761] Dev nbd4: unable to read RDB block 0 [ 36.967034][ T4761] nbd4: unable to read partition table [ 36.967091][ T4761] nbd4: partition table beyond EOD, truncated [ 37.011765][ T5258] ubi0: attaching mtd0 [ 37.012218][ T5258] ubi0: scanning is finished [ 37.012225][ T5258] ubi0: empty MTD device detected [ 37.012263][ T5258] FAULT_INJECTION: forcing a failure. [ 37.012263][ T5258] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 37.012276][ T5258] CPU: 0 UID: 0 PID: 5258 Comm: syz.3.145 Not tainted syzkaller #0 PREEMPT [ 37.012286][ T5258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 37.012291][ T5258] Call trace: [ 37.012294][ T5258] show_stack+0x2c/0x3c (C) [ 37.012310][ T5258] __dump_stack+0x30/0x40 [ 37.012320][ T5258] dump_stack_lvl+0xd8/0x12c [ 37.012328][ T5258] dump_stack+0x1c/0x28 [ 37.012336][ T5258] should_fail_ex+0x418/0x58c [ 37.012349][ T5258] should_fail_alloc_page+0xec/0x10c [ 37.012361][ T5258] prepare_alloc_pages+0x194/0x484 [ 37.012372][ T5258] __alloc_frozen_pages_noprof+0x180/0x578 [ 37.012383][ T5258] alloc_pages_mpol+0x1fc/0x3d0 [ 37.012395][ T5258] alloc_frozen_pages_noprof+0xc4/0x10c [ 37.012407][ T5258] alloc_pages_noprof+0x30/0x148 [ 37.012418][ T5258] get_free_pages_noprof+0x1c/0xbc [ 37.012436][ T5258] __kasan_populate_vmalloc+0x48/0x1d0 [ 37.012445][ T5258] alloc_vmap_area+0xcd8/0x12ec [ 37.012457][ T5258] __get_vm_area_node+0x210/0x32c [ 37.012469][ T5258] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 37.012481][ T5258] __vmalloc_node_noprof+0xec/0x14c [ 37.012493][ T5258] vzalloc_noprof+0x3c/0x4c [ 37.012504][ T5258] ubi_read_volume_table+0x208/0x254c [ 37.012516][ T5258] ubi_attach+0x2830/0x4178 [ 37.012524][ T5258] ubi_attach_mtd_dev+0x1240/0x2a70 [ 37.012535][ T5258] ctrl_cdev_ioctl+0x340/0x558 [ 37.012548][ T5258] __arm64_sys_ioctl+0x154/0x1cc [ 37.012558][ T5258] invoke_syscall+0x98/0x244 [ 37.012567][ T5258] el0_svc_common+0xec/0x23c [ 37.012575][ T5258] do_el0_svc+0x4c/0x5c [ 37.012584][ T5258] el0_svc+0x60/0x1d8 [ 37.012593][ T5258] el0t_64_sync_handler+0x44/0x104 [ 37.012601][ T5258] el0t_64_sync+0x198/0x19c [ 37.294276][ T5280] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.150'. [ 37.294299][ T5280] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.150'. [ 37.414251][ T5258] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -12 [ 37.617252][ T5259] device-mapper: ioctl: device has been removed from the dev hash table. [ 37.647779][ T5290] set_capacity_and_notify: 3 callbacks suppressed [ 37.647795][ T5290] loop3: detected capacity change from 0 to 2048 [ 37.678683][ T5290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.783500][ T4737] Bluetooth: hci1: command tx timeout [ 37.783527][ T4737] Bluetooth: hci4: command tx timeout [ 37.783559][ T4746] Bluetooth: hci0: command tx timeout [ 37.799032][ T5297] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 37.799559][ T5297] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 37.799573][ T5297] EXT4-fs (loop3): This should not happen!! Data will be lost [ 37.799573][ T5297] [ 37.799581][ T5297] EXT4-fs (loop3): Total free blocks count 0 [ 37.799588][ T5297] EXT4-fs (loop3): Free/Dirty block details [ 37.799599][ T5297] EXT4-fs (loop3): free_blocks=66060288 [ 37.799609][ T5297] EXT4-fs (loop3): dirty_blocks=32 [ 37.799616][ T5297] EXT4-fs (loop3): Block reservation details [ 37.799622][ T5297] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 37.801479][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'. [ 37.801497][ T5296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.801513][ T5296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.849990][ T5301] loop2: detected capacity change from 0 to 512 [ 37.857297][ T5301] EXT4-fs: Ignoring removed nobh option [ 37.864701][ T4739] Bluetooth: hci2: command tx timeout [ 37.864720][ T4739] Bluetooth: hci3: command tx timeout [ 37.875370][ T5296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.875384][ T5296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.891042][ T5301] EXT4-fs (loop2): 1 truncate cleaned up [ 37.891520][ T5301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.980492][ T58] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 37.999312][ T4744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.274790][ T5315] binder: 5313:5315 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 38.274810][ T5315] binder: 5315 RLIMIT_NICE not set [ 38.275118][ T5315] binder: 5313:5315 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 38.275129][ T5315] binder: 5315 RLIMIT_NICE not set [ 38.532443][ T5326] loop4: detected capacity change from 0 to 1024 [ 38.550283][ T5326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.614987][ T5331] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.162: bg 0: block 112: padding at end of block bitmap is not set [ 38.685930][ T4734] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.714117][ T5336] netlink: 52 bytes leftover after parsing attributes in process `syz.4.170'. [ 38.716932][ T5336] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.717218][ T5336] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.043275][ C1] sched: DL replenish lagged too much [ 41.006360][ T5407] loop3: detected capacity change from 0 to 512 [ 41.047970][ T5407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.123351][ T5407] EXT4-fs (loop3): shut down requested (1) [ 41.163949][ T4738] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.270056][ T5423] loop0: detected capacity change from 0 to 512 [ 41.398272][ T5435] loop2: detected capacity change from 0 to 128 [ 41.507676][ T5435] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.512559][ T1100] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.591434][ T4744] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.766054][ T5463] loop0: detected capacity change from 0 to 256 [ 41.808110][ T5463] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 41.808130][ T5463] FAT-fs (loop0): Filesystem has been set read-only [ 41.844718][ T5457] loop4: detected capacity change from 0 to 512 [ 41.869214][ T5457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.972398][ T4734] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.271784][ T5489] sctp: [Deprecated]: syz.2.204 (pid 5489) Use of int in max_burst socket option deprecated. [ 42.271784][ T5489] Use struct sctp_assoc_value instead [ 42.298410][ T5488] binder: 5486:5488 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 42.439092][ T5501] loop1: detected capacity change from 0 to 256 [ 42.459452][ T5498] FAULT_INJECTION: forcing a failure. [ 42.459452][ T5498] name failslab, interval 1, probability 0, space 0, times 0 [ 42.459472][ T5498] CPU: 0 UID: 0 PID: 5498 Comm: syz.0.211 Not tainted syzkaller #0 PREEMPT [ 42.459484][ T5498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 42.459489][ T5498] Call trace: [ 42.459492][ T5498] show_stack+0x2c/0x3c (C) [ 42.459507][ T5498] __dump_stack+0x30/0x40 [ 42.459516][ T5498] dump_stack_lvl+0xd8/0x12c [ 42.459525][ T5498] dump_stack+0x1c/0x28 [ 42.459532][ T5498] should_fail_ex+0x418/0x58c [ 42.459543][ T5498] should_failslab+0xc4/0x120 [ 42.459553][ T5498] kmem_cache_alloc_noprof+0x94/0x5d4 [ 42.459563][ T5498] __kernfs_new_node+0xf0/0x7d8 [ 42.459572][ T5498] kernfs_new_node+0xe8/0x130 [ 42.459579][ T5498] __kernfs_create_file+0x60/0x2e0 [ 42.459588][ T5498] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 42.459598][ T5498] sysfs_merge_group+0x164/0x2ac [ 42.459608][ T5498] dpm_sysfs_add+0xc8/0x258 [ 42.459619][ T5498] device_add+0x468/0x9e0 [ 42.459628][ T5498] netdev_register_kobject+0x184/0x328 [ 42.459641][ T5498] register_netdevice+0xd74/0x14c0 [ 42.459650][ T5498] __ip_tunnel_create+0x34c/0x4b0 [ 42.459660][ T5498] ip_tunnel_ctl+0x3fc/0x810 [ 42.459669][ T5498] ipip_tunnel_ctl+0xfc/0x1d0 [ 42.459681][ T5498] ip_tunnel_siocdevprivate+0xf8/0x194 [ 42.459691][ T5498] dev_ifsioc+0x654/0xc34 [ 42.459698][ T5498] dev_ioctl+0x560/0xc88 [ 42.459706][ T5498] sock_ioctl+0x734/0x7ec [ 42.459718][ T5498] __arm64_sys_ioctl+0x154/0x1cc [ 42.459728][ T5498] invoke_syscall+0x98/0x244 [ 42.459736][ T5498] el0_svc_common+0xec/0x23c [ 42.459745][ T5498] do_el0_svc+0x4c/0x5c [ 42.459753][ T5498] el0_svc+0x60/0x1d8 [ 42.459761][ T5498] el0t_64_sync_handler+0x44/0x104 [ 42.459769][ T5498] el0t_64_sync+0x198/0x19c [ 42.647245][ T5508] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input2 [ 42.732919][ T4746] block nbd2: Receive control failed (result -32) [ 42.737041][ T5503] block nbd2: shutting down sockets [ 42.820372][ T5512] FAULT_INJECTION: forcing a failure. [ 42.820372][ T5512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.820396][ T5512] CPU: 0 UID: 0 PID: 5512 Comm: syz.0.214 Not tainted syzkaller #0 PREEMPT [ 42.820409][ T5512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 42.820415][ T5512] Call trace: [ 42.820419][ T5512] show_stack+0x2c/0x3c (C) [ 42.820440][ T5512] __dump_stack+0x30/0x40 [ 42.820449][ T5512] dump_stack_lvl+0xd8/0x12c [ 42.820459][ T5512] dump_stack+0x1c/0x28 [ 42.820467][ T5512] should_fail_ex+0x418/0x58c [ 42.820478][ T5512] should_fail+0x14/0x24 [ 42.820487][ T5512] should_fail_usercopy+0x20/0x30 [ 42.820498][ T5512] _inline_copy_from_user+0x3c/0x174 [ 42.820507][ T5512] do_handle_open+0x47c/0x95c [ 42.820515][ T5512] __arm64_sys_open_by_handle_at+0x88/0x9c [ 42.820523][ T5512] invoke_syscall+0x98/0x244 [ 42.820532][ T5512] el0_svc_common+0xec/0x23c [ 42.820541][ T5512] do_el0_svc+0x4c/0x5c [ 42.820549][ T5512] el0_svc+0x60/0x1d8 [ 42.820558][ T5512] el0t_64_sync_handler+0x44/0x104 [ 42.820566][ T5512] el0t_64_sync+0x198/0x19c [ 42.887849][ T5516] loop2: detected capacity change from 0 to 4096 [ 42.893376][ T5516] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.895377][ T5516] EXT4-fs (loop2): Test dummy encryption mode enabled [ 42.900058][ T5516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.943015][ T4744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.007723][ T5519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.217'. [ 43.216341][ T5523] loop1: detected capacity change from 0 to 1024 [ 43.228565][ T5523] EXT4-fs: Ignoring removed oldalloc option [ 43.254932][ T5523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 43.294802][ T5523] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.220: bg 0: block 112: padding at end of block bitmap is not set [ 43.295832][ T5523] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 43.295848][ T5523] EXT4-fs (loop1): This should not happen!! Data will be lost [ 43.295848][ T5523] [ 43.295856][ T5523] EXT4-fs (loop1): Total free blocks count 0 [ 43.295863][ T5523] EXT4-fs (loop1): Free/Dirty block details [ 43.295873][ T5523] EXT4-fs (loop1): free_blocks=0 [ 43.295882][ T5523] EXT4-fs (loop1): dirty_blocks=64 [ 43.295888][ T5523] EXT4-fs (loop1): Block reservation details [ 43.295895][ T5523] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 43.379008][ T4735] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.450605][ T5541] capability: warning: `syz.2.224' uses deprecated v2 capabilities in a way that may be insecure [ 43.534540][ T5549] FAULT_INJECTION: forcing a failure. [ 43.534540][ T5549] name failslab, interval 1, probability 0, space 0, times 0 [ 43.534563][ T5549] CPU: 0 UID: 0 PID: 5549 Comm: syz.0.230 Not tainted syzkaller #0 PREEMPT [ 43.534574][ T5549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 43.534580][ T5549] Call trace: [ 43.534583][ T5549] show_stack+0x2c/0x3c (C) [ 43.534599][ T5549] __dump_stack+0x30/0x40 [ 43.534608][ T5549] dump_stack_lvl+0xd8/0x12c [ 43.534616][ T5549] dump_stack+0x1c/0x28 [ 43.534624][ T5549] should_fail_ex+0x418/0x58c [ 43.534635][ T5549] should_failslab+0xc4/0x120 [ 43.534645][ T5549] __kmalloc_node_noprof+0x10c/0x6e4 [ 43.534655][ T5549] __vmalloc_node_range_noprof+0x43c/0xe9c [ 43.534668][ T5549] __vmalloc_node_noprof+0xec/0x14c [ 43.534679][ T5549] vmalloc_noprof+0x3c/0x4c [ 43.534690][ T5549] xt_copy_counters+0x21c/0x324 [ 43.534703][ T5549] do_ip6t_set_ctl+0x220/0xc38 [ 43.534711][ T5549] nf_setsockopt+0xa0/0xe4 [ 43.534720][ T5549] ipv6_setsockopt+0x130/0x16c [ 43.534731][ T5549] tcp_setsockopt+0xcc/0xe8 [ 43.534742][ T5549] sock_common_setsockopt+0xb0/0xcc [ 43.534754][ T5549] do_sock_setsockopt+0x1f0/0x330 [ 43.534766][ T5549] __sys_setsockopt+0x104/0x170 [ 43.534777][ T5549] __arm64_sys_setsockopt+0xc8/0xe4 [ 43.534788][ T5549] invoke_syscall+0x98/0x244 [ 43.534797][ T5549] el0_svc_common+0xec/0x23c [ 43.534805][ T5549] do_el0_svc+0x4c/0x5c [ 43.534813][ T5549] el0_svc+0x60/0x1d8 [ 43.534822][ T5549] el0t_64_sync_handler+0x44/0x104 [ 43.534830][ T5549] el0t_64_sync+0x198/0x19c [ 43.534841][ T5549] warn_alloc: 1 callbacks suppressed [ 43.534846][ T5549] syz.0.230: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0 [ 43.534875][ T5549] CPU: 0 UID: 0 PID: 5549 Comm: syz.0.230 Not tainted syzkaller #0 PREEMPT [ 43.534883][ T5549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 43.534888][ T5549] Call trace: [ 43.534890][ T5549] show_stack+0x2c/0x3c (C) [ 43.534898][ T5549] __dump_stack+0x30/0x40 [ 43.534906][ T5549] dump_stack_lvl+0xd8/0x12c [ 43.534914][ T5549] dump_stack+0x1c/0x28 [ 43.534922][ T5549] warn_alloc+0x1c4/0x1d8 [ 43.534932][ T5549] __vmalloc_node_range_noprof+0x670/0xe9c [ 43.534944][ T5549] __vmalloc_node_noprof+0xec/0x14c [ 43.534955][ T5549] vmalloc_noprof+0x3c/0x4c [ 43.534966][ T5549] xt_copy_counters+0x21c/0x324 [ 43.534978][ T5549] do_ip6t_set_ctl+0x220/0xc38 [ 43.534985][ T5549] nf_setsockopt+0xa0/0xe4 [ 43.534993][ T5549] ipv6_setsockopt+0x130/0x16c [ 43.535004][ T5549] tcp_setsockopt+0xcc/0xe8 [ 43.535015][ T5549] sock_common_setsockopt+0xb0/0xcc [ 43.535026][ T5549] do_sock_setsockopt+0x1f0/0x330 [ 43.535037][ T5549] __sys_setsockopt+0x104/0x170 [ 43.535048][ T5549] __arm64_sys_setsockopt+0xc8/0xe4 [ 43.535060][ T5549] invoke_syscall+0x98/0x244 [ 43.535068][ T5549] el0_svc_common+0xec/0x23c [ 43.535076][ T5549] do_el0_svc+0x4c/0x5c [ 43.535084][ T5549] el0_svc+0x60/0x1d8 [ 43.535092][ T5549] el0t_64_sync_handler+0x44/0x104 [ 43.535100][ T5549] el0t_64_sync+0x198/0x19c [ 43.535109][ T5549] Mem-Info: [ 43.535113][ T5549] active_anon:47 inactive_anon:5281 isolated_anon:0 [ 43.535113][ T5549] active_file:2335 inactive_file:4473 isolated_file:0 [ 43.535113][ T5549] unevictable:768 dirty:1786 writeback:0 [ 43.535113][ T5549] slab_reclaimable:8567 slab_unreclaimable:93172 [ 43.535113][ T5549] mapped:29165 shmem:953 pagetables:1112 [ 43.535113][ T5549] sec_pagetables:0 bounce:0 [ 43.535113][ T5549] kernel_misc_reclaimable:0 [ 43.535113][ T5549] free:1474019 free_pcp:17064 free_cma:7616 [ 43.536076][ T5549] Node 0 active_anon:188kB inactive_anon:21124kB active_file:9340kB inactive_file:17892kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:116660kB dirty:7144kB writeback:0kB shmem:3812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8908kB pagetables:4448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 43.536102][ T5549] Node 0 DMA free:3077888kB boost:0kB min:20404kB low:25504kB high:30604kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 43.536127][ T5549] lowmem_reserve[]: 0 0 3636 3636 3636 [ 43.536349][ T5549] Node 0 Normal free:2818188kB boost:0kB min:24648kB low:30808kB high:36968kB reserved_highatomic:0kB free_highatomic:0kB active_anon:188kB inactive_anon:21124kB active_file:9340kB inactive_file:17892kB unevictable:3072kB writepending:7144kB zspages:0kB present:5242880kB managed:3724172kB mlocked:0kB bounce:0kB free_pcp:68188kB local_pcp:41576kB free_cma:0kB [ 43.536374][ T5549] lowmem_reserve[]: 0 0 0 0 0 [ 43.536393][ T5549] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 43.536459][ T5549] Node 0 Normal: 121*4kB (UM) 335*8kB (UME) 37*16kB (UME) 45*32kB (ME) 33*64kB (UME) 48*128kB (UME) 26*256kB (UME) 13*512kB (UME) 8*1024kB (UM) 7*2048kB (UME) 676*4096kB (UM) = 2818188kB [ 43.536539][ T5549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 43.536546][ T5549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 43.536553][ T5549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 43.536559][ T5549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 43.536566][ T5549] 7772 total pagecache pages [ 43.536570][ T5549] 0 pages in swap cache [ 43.536573][ T5549] Free swap = 124996kB [ 43.536577][ T5549] Total swap = 124996kB [ 43.536580][ T5549] 2097152 pages RAM [ 43.536583][ T5549] 0 pages HighMem/MovableOnly [ 43.536587][ T5549] 396061 pages reserved [ 43.536590][ T5549] 8192 pages cma reserved [ 43.536593][ T5549] 0 pages hwpoisoned [ 43.787640][ T5555] syz_tun: entered allmulticast mode [ 43.788146][ T5554] syz_tun: left allmulticast mode [ 43.898746][ T5562] FAULT_INJECTION: forcing a failure. [ 43.898746][ T5562] name failslab, interval 1, probability 0, space 0, times 0 [ 43.898767][ T5562] CPU: 0 UID: 0 PID: 5562 Comm: syz.4.236 Not tainted syzkaller #0 PREEMPT [ 43.898778][ T5562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 43.898783][ T5562] Call trace: [ 43.898786][ T5562] show_stack+0x2c/0x3c (C) [ 43.898802][ T5562] __dump_stack+0x30/0x40 [ 43.898811][ T5562] dump_stack_lvl+0xd8/0x12c [ 43.898819][ T5562] dump_stack+0x1c/0x28 [ 43.898827][ T5562] should_fail_ex+0x418/0x58c [ 43.898838][ T5562] should_failslab+0xc4/0x120 [ 43.898848][ T5562] __kmalloc_noprof+0x108/0x6c8 [ 43.898859][ T5562] security_sk_alloc+0x60/0x35c [ 43.898869][ T5562] sk_prot_alloc+0xe0/0x1e8 [ 43.898880][ T5562] sk_alloc+0x44/0x320 [ 43.898888][ T5562] can_create+0x19c/0x530 [ 43.898900][ T5562] __sock_create+0x31c/0x670 [ 43.898911][ T5562] __sys_socket_create+0xc0/0x11c [ 43.898922][ T5562] __sys_socket+0x44/0xec [ 43.898932][ T5562] __arm64_sys_socket+0x84/0x9c [ 43.898943][ T5562] invoke_syscall+0x98/0x244 [ 43.898952][ T5562] el0_svc_common+0xec/0x23c [ 43.898960][ T5562] do_el0_svc+0x4c/0x5c [ 43.898969][ T5562] el0_svc+0x60/0x1d8 [ 43.898977][ T5562] el0t_64_sync_handler+0x44/0x104 [ 43.898985][ T5562] el0t_64_sync+0x198/0x19c [ 44.284034][ T30] audit: type=1400 audit(44.240:2): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=5574 comm="syz.0.242" src=65532 dest=20002 netif=wpan0 [ 44.575245][ T5591] netlink: 'syz.2.249': attribute type 1 has an invalid length. [ 44.683819][ T5591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.749727][ T5593] bond1: (slave erspan1): making interface the new active one [ 44.750422][ T5593] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 44.942684][ T5601] ip6erspan0: entered allmulticast mode [ 45.134452][ T5612] FAULT_INJECTION: forcing a failure. [ 45.134452][ T5612] name failslab, interval 1, probability 0, space 0, times 0 [ 45.134480][ T5612] CPU: 0 UID: 0 PID: 5612 Comm: syz.2.257 Tainted: G L syzkaller #0 PREEMPT [ 45.134493][ T5612] Tainted: [L]=SOFTLOCKUP [ 45.134496][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 45.134502][ T5612] Call trace: [ 45.134505][ T5612] show_stack+0x2c/0x3c (C) [ 45.134520][ T5612] __dump_stack+0x30/0x40 [ 45.134530][ T5612] dump_stack_lvl+0xd8/0x12c [ 45.134538][ T5612] dump_stack+0x1c/0x28 [ 45.134546][ T5612] should_fail_ex+0x418/0x58c [ 45.134556][ T5612] should_failslab+0xc4/0x120 [ 45.134566][ T5612] __kmalloc_cache_noprof+0x94/0x5fc [ 45.134577][ T5612] alloc_pipe_info+0xec/0x420 [ 45.134586][ T5612] splice_direct_to_actor+0x63c/0x7a8 [ 45.134596][ T5612] do_splice_direct_actor+0x140/0x228 [ 45.134604][ T5612] do_splice_direct+0x58/0x70 [ 45.134612][ T5612] do_sendfile+0x40c/0x6c0 [ 45.134622][ T5612] __arm64_sys_sendfile64+0x1c4/0x28c [ 45.134632][ T5612] invoke_syscall+0x98/0x244 [ 45.134641][ T5612] el0_svc_common+0xec/0x23c [ 45.134649][ T5612] do_el0_svc+0x4c/0x5c [ 45.134657][ T5612] el0_svc+0x60/0x1d8 [ 45.134666][ T5612] el0t_64_sync_handler+0x44/0x104 [ 45.134674][ T5612] el0t_64_sync+0x198/0x19c [ 45.219402][ T5616] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 45.934200][ T30] audit: type=1326 audit(45.900:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5649 comm="syz.4.274" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8597a228 code=0x0 [ 45.954842][ T5653] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 46.064941][ T5646] pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 46.092435][ T5646] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f] [ 46.092472][ T5646] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf] [ 46.104270][ T5646] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf]: assigned [ 46.104317][ T5646] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f]: assigned [ 46.124790][ T9] virtio-pci 0000:00:01.0: virtio_pci: leaving for legacy driver [ 46.214456][ T5667] IPv4: Oversized IP packet from 127.202.26.0 [ 46.380368][ T5678] loop2: detected capacity change from 0 to 4096 [ 46.475050][ T5686] FAULT_INJECTION: forcing a failure. [ 46.475050][ T5686] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 46.475072][ T5686] CPU: 0 UID: 0 PID: 5686 Comm: syz.0.287 Tainted: G L syzkaller #0 PREEMPT [ 46.475085][ T5686] Tainted: [L]=SOFTLOCKUP [ 46.475088][ T5686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 46.475094][ T5686] Call trace: [ 46.475097][ T5686] show_stack+0x2c/0x3c (C) [ 46.475113][ T5686] __dump_stack+0x30/0x40 [ 46.475122][ T5686] dump_stack_lvl+0xd8/0x12c [ 46.475130][ T5686] dump_stack+0x1c/0x28 [ 46.475138][ T5686] should_fail_ex+0x418/0x58c [ 46.475149][ T5686] should_fail_alloc_page+0xec/0x10c [ 46.475159][ T5686] prepare_alloc_pages+0x194/0x484 [ 46.475170][ T5686] __alloc_frozen_pages_noprof+0x180/0x578 [ 46.475180][ T5686] alloc_pages_mpol+0x1fc/0x3d0 [ 46.475192][ T5686] alloc_frozen_pages_noprof+0xc4/0x10c [ 46.475203][ T5686] alloc_pages_noprof+0x30/0x148 [ 46.475214][ T5686] get_free_pages_noprof+0x1c/0xbc [ 46.475224][ T5686] get_zeroed_page_noprof+0x18/0x24 [ 46.475235][ T5686] mon_alloc_buff+0x70/0x1ac [ 46.475248][ T5686] mon_bin_ioctl+0x500/0xcd4 [ 46.475260][ T5686] __arm64_sys_ioctl+0x154/0x1cc [ 46.475270][ T5686] invoke_syscall+0x98/0x244 [ 46.475279][ T5686] el0_svc_common+0xec/0x23c [ 46.475287][ T5686] do_el0_svc+0x4c/0x5c [ 46.475295][ T5686] el0_svc+0x60/0x1d8 [ 46.475303][ T5686] el0t_64_sync_handler+0x44/0x104 [ 46.475312][ T5686] el0t_64_sync+0x198/0x19c [ 46.556461][ T5678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.568535][ T5678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 46.706158][ T5697] loop1: detected capacity change from 0 to 512 [ 46.725471][ T5697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.732508][ T5697] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.292: corrupted xattr block 33: invalid header [ 46.747605][ T5697] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.292: corrupted xattr block 33: invalid header [ 46.750571][ T5697] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.292: corrupted xattr block 33: invalid header [ 46.763476][ T5697] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.292: corrupted xattr block 33: invalid header [ 46.804011][ T5697] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 46.804783][ T5697] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 46.804799][ T5697] EXT4-fs (loop1): This should not happen!! Data will be lost [ 46.804799][ T5697] [ 46.804806][ T5697] EXT4-fs (loop1): Total free blocks count 0 [ 46.804813][ T5697] EXT4-fs (loop1): Free/Dirty block details [ 46.804821][ T5697] EXT4-fs (loop1): free_blocks=65280 [ 46.804829][ T5697] EXT4-fs (loop1): dirty_blocks=33 [ 46.804835][ T5697] EXT4-fs (loop1): Block reservation details [ 46.804841][ T5697] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 46.863246][ T5703] ip_tables: iptables: counters copy to user failed while replacing table [ 46.910472][ T5711] ubi0: attaching mtd0 [ 46.910918][ T5711] ubi0: scanning is finished [ 46.910925][ T5711] ubi0: empty MTD device detected [ 46.933891][ T4735] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.948045][ T5713] loop3: detected capacity change from 0 to 512 [ 46.957092][ T5715] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 46.960918][ T5713] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.298: inode has both inline data and extents flags [ 46.960934][ T5713] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 46.961035][ T5713] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.298: couldn't read orphan inode 15 (err -117) [ 46.961047][ T5713] loop3: lost filesystem error report for type 5 error -117 [ 46.961552][ T5713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.017097][ T4738] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.114699][ T4744] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.160321][ T5723] loop4: detected capacity change from 0 to 1024 [ 47.214197][ T5727] syz_tun: entered allmulticast mode [ 47.216251][ T5723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 47.221817][ T5725] syz_tun: left allmulticast mode [ 47.274193][ T4734] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 16: comm syz-executor: path /61/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 47.277226][ T4734] EXT4-fs error (device loop4): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /61/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 47.277629][ T4734] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 47.278640][ T4734] EXT4-fs error (device loop4): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /61/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 47.278903][ T4734] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 47.279895][ T4734] EXT4-fs error (device loop4): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /61/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 47.280139][ T4734] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 47.280388][ T4734] EXT4-fs error (device loop4): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /61/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 47.280627][ T4734] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 47.280880][ T4734] EXT4-fs error (device loop4): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /61/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 47.416338][ T5711] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 47.416362][ T5711] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 47.416373][ T5711] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 47.416381][ T5711] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 47.416388][ T5711] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 47.416395][ T5711] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 47.416401][ T5711] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4117938986 [ 47.416409][ T5711] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 47.416774][ T5735] ubi0: background thread "ubi_bgt0d" started, PID 5735 [ 47.973515][ T4734] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 48.004675][ T5759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'. [ 48.006464][ T5759] hsr_slave_0: left promiscuous mode [ 48.013054][ T5759] hsr_slave_1: left promiscuous mode [ 48.084049][ T2662] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.226050][ T4739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.226540][ T4739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.226786][ T4739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.227889][ T4739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.228900][ T4739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.271678][ T5775] loop2: detected capacity change from 0 to 1024 [ 48.283024][ T2662] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.356610][ T5775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.379383][ T5775] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: comm syz.2.320: lblock 0 mapped to illegal pblock 0 (length 6) [ 48.383139][ T5775] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 48.383159][ T5775] EXT4-fs (loop2): This should not happen!! Data will be lost [ 48.383159][ T5775] [ 48.402925][ T5775] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: comm syz.2.320: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.412701][ T5775] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: comm syz.2.320: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.418593][ T5775] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: comm syz.2.320: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.418839][ T5775] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: comm syz.2.320: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.419182][ T5775] EXT4-fs error (device loop2): ext4_ext_remove_space:2977: inode #15: comm syz.2.320: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 48.446806][ T40] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm kworker/u8:2: bg 0: block 112: padding at end of block bitmap is not set [ 48.464893][ T40] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 48.464911][ T40] EXT4-fs (loop2): This should not happen!! Data will be lost [ 48.464911][ T40] [ 48.464919][ T40] EXT4-fs (loop2): Total free blocks count 0 [ 48.464925][ T40] EXT4-fs (loop2): Free/Dirty block details [ 48.464932][ T40] EXT4-fs (loop2): free_blocks=0 [ 48.464940][ T40] EXT4-fs (loop2): dirty_blocks=32 [ 48.464946][ T40] EXT4-fs (loop2): Block reservation details [ 48.471538][ T2662] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.564212][ T5793] FAULT_INJECTION: forcing a failure. [ 48.564212][ T5793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.564234][ T5793] CPU: 0 UID: 0 PID: 5793 Comm: syz.2.326 Tainted: G L syzkaller #0 PREEMPT [ 48.564246][ T5793] Tainted: [L]=SOFTLOCKUP [ 48.564250][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 48.564255][ T5793] Call trace: [ 48.564258][ T5793] show_stack+0x2c/0x3c (C) [ 48.564274][ T5793] __dump_stack+0x30/0x40 [ 48.564283][ T5793] dump_stack_lvl+0xd8/0x12c [ 48.564292][ T5793] dump_stack+0x1c/0x28 [ 48.564299][ T5793] should_fail_ex+0x418/0x58c [ 48.564310][ T5793] should_fail+0x14/0x24 [ 48.564320][ T5793] should_fail_usercopy+0x20/0x30 [ 48.564330][ T5793] bpf_verifier_vlog+0x81c/0xbc0 [ 48.564340][ T5793] __btf_verifier_log+0xe8/0x13c [ 48.564350][ T5793] btf_verifier_log_member+0x3c0/0x718 [ 48.564360][ T5793] btf_struct_check_meta+0x394/0x5a4 [ 48.564371][ T5793] btf_check_all_metas+0x294/0x84c [ 48.564381][ T5793] btf_parse_type_sec+0x104/0x1004 [ 48.564392][ T5793] btf_new_fd+0x33c/0x7a8 [ 48.564401][ T5793] bpf_btf_load+0x144/0x190 [ 48.564413][ T5793] __sys_bpf+0x7f0/0x82c [ 48.564424][ T5793] __arm64_sys_bpf+0xd0/0xec [ 48.564442][ T5793] invoke_syscall+0x98/0x244 [ 48.564451][ T5793] el0_svc_common+0xec/0x23c [ 48.564459][ T5793] do_el0_svc+0x4c/0x5c [ 48.564467][ T5793] el0_svc+0x60/0x1d8 [ 48.564476][ T5793] el0t_64_sync_handler+0x44/0x104 [ 48.564484][ T5793] el0t_64_sync+0x198/0x19c [ 48.751992][ T2662] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.792809][ T5769] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.996790][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.996826][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.996880][ T5769] bridge_slave_0: entered allmulticast mode [ 48.997310][ T5769] bridge_slave_0: entered promiscuous mode [ 49.014509][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.015533][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.015619][ T5769] bridge_slave_1: entered allmulticast mode [ 49.016050][ T5769] bridge_slave_1: entered promiscuous mode [ 49.052654][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.058425][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.079110][ T5769] team0: Port device team_slave_0 added [ 49.082781][ T5769] team0: Port device team_slave_1 added [ 49.098513][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.098529][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.098540][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.099102][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.099109][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.099122][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.140118][ T2662] bridge_slave_1: left allmulticast mode [ 49.140145][ T2662] bridge_slave_1: left promiscuous mode [ 49.140846][ T2662] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.164314][ T2662] bridge_slave_0: left allmulticast mode [ 49.164332][ T2662] bridge_slave_0: left promiscuous mode [ 49.164416][ T2662] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.208714][ T5825] loop1: detected capacity change from 0 to 128 [ 49.218056][ T5825] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 49.260930][ T5825] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.327982][ T4735] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.424135][ T5838] overlayfs: refusing to follow metacopy origin for (/file1) [ 49.510470][ T2662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.573950][ T5849] FAULT_INJECTION: forcing a failure. [ 49.573950][ T5849] name failslab, interval 1, probability 0, space 0, times 0 [ 49.573972][ T5849] CPU: 0 UID: 0 PID: 5849 Comm: syz.3.342 Tainted: G L syzkaller #0 PREEMPT [ 49.573984][ T5849] Tainted: [L]=SOFTLOCKUP [ 49.573987][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 49.573993][ T5849] Call trace: [ 49.573996][ T5849] show_stack+0x2c/0x3c (C) [ 49.574011][ T5849] __dump_stack+0x30/0x40 [ 49.574020][ T5849] dump_stack_lvl+0xd8/0x12c [ 49.574028][ T5849] dump_stack+0x1c/0x28 [ 49.574036][ T5849] should_fail_ex+0x418/0x58c [ 49.574046][ T5849] should_failslab+0xc4/0x120 [ 49.574056][ T5849] __kmalloc_cache_noprof+0x94/0x5fc [ 49.574067][ T5849] file_f_owner_allocate+0x80/0x144 [ 49.574076][ T5849] do_fcntl+0x944/0x15b0 [ 49.574085][ T5849] __arm64_sys_fcntl+0x118/0x1ac [ 49.574094][ T5849] invoke_syscall+0x98/0x244 [ 49.574102][ T5849] el0_svc_common+0xec/0x23c [ 49.574110][ T5849] do_el0_svc+0x4c/0x5c [ 49.574118][ T5849] el0_svc+0x60/0x1d8 [ 49.574127][ T5849] el0t_64_sync_handler+0x44/0x104 [ 49.574135][ T5849] el0t_64_sync+0x198/0x19c [ 49.645886][ T2662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.683141][ T5857] FAULT_INJECTION: forcing a failure. [ 49.683141][ T5857] name failslab, interval 1, probability 0, space 0, times 0 [ 49.683176][ T5857] CPU: 0 UID: 0 PID: 5857 Comm: syz.2.345 Tainted: G L syzkaller #0 PREEMPT [ 49.683191][ T5857] Tainted: [L]=SOFTLOCKUP [ 49.683194][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 49.683201][ T5857] Call trace: [ 49.683204][ T5857] show_stack+0x2c/0x3c (C) [ 49.683218][ T5857] __dump_stack+0x30/0x40 [ 49.683227][ T5857] dump_stack_lvl+0xd8/0x12c [ 49.683236][ T5857] dump_stack+0x1c/0x28 [ 49.683243][ T5857] should_fail_ex+0x418/0x58c [ 49.683257][ T5857] should_failslab+0xc4/0x120 [ 49.683268][ T5857] __kmalloc_cache_noprof+0x94/0x5fc [ 49.683279][ T5857] v4l2_m2m_ctx_init+0x64/0x268 [ 49.683293][ T5857] vicodec_open+0x588/0x9a0 [ 49.683306][ T5857] v4l2_open+0x198/0x338 [ 49.683315][ T5857] chrdev_open+0x398/0x3e8 [ 49.683328][ T5857] do_dentry_open+0x5c4/0xfbc [ 49.683336][ T5857] vfs_open+0x44/0x2dc [ 49.683344][ T5857] path_openat+0x1084/0x18f0 [ 49.683356][ T5857] do_file_open+0x1c8/0x2e8 [ 49.683367][ T5857] do_sys_openat2+0x114/0x1e8 [ 49.683376][ T5857] do_sys_open+0xb0/0xe0 [ 49.683384][ T5857] __arm64_sys_openat+0xa8/0xc4 [ 49.683392][ T5857] invoke_syscall+0x98/0x244 [ 49.683401][ T5857] el0_svc_common+0xec/0x23c [ 49.683409][ T5857] do_el0_svc+0x4c/0x5c [ 49.683417][ T5857] el0_svc+0x60/0x1d8 [ 49.683426][ T5857] el0t_64_sync_handler+0x44/0x104 [ 49.683440][ T5857] el0t_64_sync+0x198/0x19c [ 49.728767][ T2662] bond0 (unregistering): Released all slaves [ 49.752374][ T4424] 8021q: adding VLAN 0 to HW filter on device eth1 [ 49.995354][ T5769] hsr_slave_0: entered promiscuous mode [ 49.995777][ T5769] hsr_slave_1: entered promiscuous mode [ 49.995983][ T5769] debugfs: 'hsr0' already exists in 'hsr' [ 49.995994][ T5769] Cannot create hsr debugfs directory [ 50.080769][ T5871] 9pnet: p9_errstr2errno: server reported unknown error  [ 50.263926][ T4746] Bluetooth: hci0: command tx timeout [ 52.915248][ T4746] Bluetooth: hci0: command tx timeout [ 54.999806][ T4746] Bluetooth: hci0: command tx timeout [ 55.983953][ T5894] nvme nvme1: failed to connect socket: -512 [ 57.163493][ T4746] Bluetooth: hci0: command tx timeout [ 64.973360][ T1599] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.985158][ T1599] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.986760][ T875] cfg80211: failed to load regulatory.db [ 120.825256][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 52s! [ 120.825296][ C0] Showing busy workqueues and worker pools: [ 120.825301][ C0] workqueue events: flags=0x100 [ 120.825336][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=11 refcnt=12 [ 120.825354][ C0] pending: 3*nsim_dev_hwstats_traffic_work, vmstat_shepherd, psi_avgs_work, 3*ovs_dp_masks_rebalance, delayed_vfree_work, 2*psi_avgs_work [ 120.825419][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=4 refcnt=5 [ 120.825439][ C0] in-flight: 875:request_firmware_work_func for 117s [ 120.825460][ C0] pending: 2*nsim_dev_hwstats_traffic_work, psi_avgs_work [ 120.825482][ C0] workqueue events_unbound: flags=0x2 [ 120.825486][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=12 refcnt=13 [ 120.825501][ C0] in-flight: 13:linkwatch_event for 67s ,2622:cfg80211_wiphy_work for 63s cfg80211_wiphy_work ,54:cfg80211_wiphy_work for 58s cfg80211_wiphy_work ,58:cfg80211_wiphy_work for 68s cfg80211_wiphy_work ,4909:cfg80211_wiphy_work for 69s cfg80211_wiphy_work [ 120.825591][ C0] pending: crng_reseed, flush_memcg_stats_dwork, toggle_allocation_gate [ 120.825621][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=13 refcnt=14 [ 120.825634][ C0] in-flight: 204:cfg80211_wiphy_work for 65s cfg80211_wiphy_work ,40:cfg80211_wiphy_work for 52s ,5901:cfg80211_wiphy_work for 45s ,12:cfg80211_wiphy_work for 69s cfg80211_wiphy_work [ 120.825696][ C0] pending: 2*cfg80211_wiphy_work, 5*nsim_dev_trap_report_work [ 120.825715][ C0] workqueue events_power_efficient: flags=0x82 [ 120.825719][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=4 refcnt=5 [ 120.825732][ C0] in-flight: 5904:neigh_managed_work for 1s [ 120.825750][ C0] pending: neigh_periodic_work, wg_ratelimiter_gc_entries, neigh_managed_work [ 120.825776][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=4 refcnt=5 [ 120.825788][ C0] in-flight: 5903:gc_worker for 0s [ 120.825806][ C0] pending: fb_flashcursor, reg_check_chans_work, do_cache_clean [ 120.825832][ C0] workqueue events_dfl_long: flags=0x2 [ 120.825836][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=5 refcnt=6 [ 120.825849][ C0] pending: 5*defense_work_handler [ 120.825860][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.825872][ C0] pending: defense_work_handler [ 120.825884][ C0] workqueue netns: flags=0x6000a [ 120.825889][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=5 [ 120.825901][ C0] in-flight: 2662:cleanup_net for 72s [ 120.825918][ C0] inactive: cleanup_net [ 120.825930][ C0] workqueue mm_percpu_wq: flags=0x108 [ 120.825935][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.825949][ C0] pending: vmstat_update [ 120.825968][ C0] workqueue writeback: flags=0x4a [ 120.825973][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=4 MAYDAY [ 120.825986][ C0] in-flight: 33(RESCUER):wb_workfn for 7s [ 120.826003][ C0] pending: mayday_cursor_func [ 120.826022][ C0] workqueue gid-cache-wq: flags=0x20002 [ 120.826027][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=4 [ 120.826039][ C0] pending: netdevice_event_work_handler [ 120.826081][ C0] workqueue bat_events: flags=0x6000a [ 120.826086][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=43 MAYDAY [ 120.826098][ C0] in-flight: 2879(RESCUER):batadv_dat_purge for 4s [ 120.826116][ C0] pending: mayday_cursor_func [ 120.826127][ C0] inactive: batadv_purge_orig, 9*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, 5*batadv_iv_send_outstanding_bat_ogm_packet, 4*batadv_tt_purge, batadv_dat_purge, 3*batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, 4*batadv_mcast_mla_update, batadv_dat_purge, batadv_mcast_mla_update, 3*batadv_purge_orig, batadv_tt_purge [ 120.826243][ C0] workqueue ext4-rsv-conversion: flags=0xa [ 120.826249][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=4 MAYDAY [ 120.826261][ C0] in-flight: 4334(RESCUER):ext4_end_io_rsv_work for 3s [ 120.826276][ C0] pending: mayday_cursor_func [ 120.826293][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.826297][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.826311][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 120.826331][ C0] workqueue wg-kex-wg1: flags=0x6 [ 120.826336][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 120.826348][ C0] pending: wg_packet_handshake_send_worker [ 120.826360][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.826364][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.826378][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker, wg_packet_tx_worker [ 120.826398][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.826402][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.826417][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 120.826442][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.826447][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.826462][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 120.826477][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.826482][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.826496][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 120.826511][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.826515][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.826529][ C0] in-flight: 10:wg_packet_decrypt_worker for 52s [ 120.826544][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 120.826559][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.826563][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.826577][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 120.826597][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.826601][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.826616][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker, wg_packet_decrypt_worker [ 120.826636][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.826640][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.826654][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker, wg_packet_decrypt_worker [ 120.826674][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.826678][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.826692][ C0] in-flight: 1100:wg_packet_decrypt_worker for 52s [ 120.826706][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 120.826721][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.826726][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.826740][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 120.826760][ C0] workqueue wg-kex-wg2: flags=0x124 [ 120.826765][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.826779][ C0] in-flight: 5341:wg_packet_handshake_receive_worker for 0s [ 120.826795][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.826799][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.826814][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 120.826829][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.826834][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=4 refcnt=5 [ 120.826848][ C0] in-flight: 4834:wg_packet_encrypt_worker for 52s [ 120.826862][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker, wg_packet_decrypt_worker [ 120.826881][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.826886][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.826900][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 120.826915][ C0] workqueue wg-kex-wg2: flags=0x124 [ 120.826919][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.826934][ C0] pending: wg_packet_handshake_receive_worker [ 120.826945][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.826949][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.826963][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 120.826983][ C0] workqueue bond1: flags=0x2000a [ 120.826987][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=5 [ 120.827000][ C0] pending: bond_mii_monitor [ 120.827009][ C0] inactive: bond_alb_monitor [ 120.827027][ C0] pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=52s workers=8 idle: 9 4857 4833 4854 4743 [ 120.827068][ C0] pool 6: cpus=1 node=0 flags=0x0 nice=0 hung=0s workers=9 idle: 4839 4495 4844 24 26 4842 5340 [ 120.827115][ C0] pool 8: cpus=0-1 flags=0x4 nice=0 hung=0s workers=13 idle: 5905 [ 120.827136][ C0] Showing backtraces of busy workers in stalled worker pools: [ 120.827141][ C0] pool 2: [ 120.827144][ C0] task:kworker/0:1 state:R running task stack:0 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00000010 [ 120.827158][ C0] Workqueue: wg-crypt-wg2 wg_packet_decrypt_worker [ 120.827167][ C0] Call trace: [ 120.827169][ C0] __switch_to+0x2b4/0x6e4 (T) [ 120.827182][ C0] __schedule+0x135c/0x2b00 [ 120.827192][ C0] preempt_schedule_common+0xd4/0x190 [ 120.827202][ C0] preempt_schedule+0x60/0x78 [ 120.827212][ C0] __local_bh_enable_ip+0x16c/0x234 [ 120.827222][ C0] _raw_spin_unlock_bh+0x3c/0x4c [ 120.827230][ C0] wg_packet_decrypt_worker+0x254/0xa00 [ 120.827238][ C0] process_scheduled_works+0x91c/0x1250 [ 120.827248][ C0] worker_thread+0x798/0xbd0 [ 120.827258][ C0] kthread+0x304/0x3d4 [ 120.827268][ C0] ret_from_fork+0x10/0x20 [ 120.827278][ C0] pool 2: [ 120.827280][ C0] task:kworker/0:2 state:R running task stack:0 pid:1100 tgid:1100 ppid:2 task_flags:0x4208060 flags:0x20000010 [ 120.827293][ C0] Workqueue: wg-crypt-wg2 wg_packet_decrypt_worker [ 120.827300][ C0] Call trace: [ 120.827302][ C0] __switch_to+0x2b4/0x6e4 (T) [ 120.827312][ C0] __schedule+0x135c/0x2b00 [ 120.827322][ C0] preempt_schedule_common+0xd4/0x190 [ 120.827332][ C0] preempt_schedule+0x60/0x78 [ 120.827342][ C0] __local_bh_enable_ip+0x16c/0x234 [ 120.827351][ C0] kernel_neon_begin+0x29c/0x400 [ 120.827360][ C0] poly1305_blocks+0x110/0x204 [ 120.827370][ C0] poly1305_update+0x168/0x39c [ 120.827378][ C0] chacha20poly1305_crypt_sg_inplace+0x888/0xc30 [ 120.827387][ C0] chacha20poly1305_decrypt_sg_inplace+0x6c/0x94 [ 120.827396][ C0] wg_packet_decrypt_worker+0x490/0xa00 [ 120.827404][ C0] process_scheduled_works+0x91c/0x1250 [ 120.827414][ C0] worker_thread+0x798/0xbd0 [ 120.827425][ C0] kthread+0x304/0x3d4 [ 120.827438][ C0] ret_from_fork+0x10/0x20 [ 120.827446][ C0] pool 2: [ 120.827449][ C0] task:kworker/0:5 state:R running task stack:0 pid:4834 tgid:4834 ppid:2 task_flags:0x4208060 flags:0x00000010 [ 120.827461][ C0] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 120.827468][ C0] Call trace: