last executing test programs: 17.95270686s ago: executing program 0 (id=155): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, &(0x7f0000000d40)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x22304000, 0x0, 0x0, 0x0, 0x0, 0x0) 17.900612068s ago: executing program 0 (id=157): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x140d, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) 17.891637996s ago: executing program 0 (id=159): r0 = syz_open_dev$mtd(&(0x7f0000000780), 0x0, 0x2) ioctl$BLKPG(r0, 0x40104d14, &(0x7f00000008c0)={0x2, 0x0, 0x98, &(0x7f0000000900)={0x0, 0x200000000009, 0xb}}) 17.820522784s ago: executing program 0 (id=162): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10005, @local, 0x1b}, r1}}, 0x30) 17.820275348s ago: executing program 0 (id=164): mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x1000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 17.797790687s ago: executing program 0 (id=166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xb, 0xffff}, {0x300, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x2b}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000d00)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed282811"], 0xfdef) 2.641922999s ago: executing program 32 (id=166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xb, 0xffff}, {0x300, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x2b}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000d00)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed282811"], 0xfdef) 2.590386743s ago: executing program 4 (id=435): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='100', 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000300), 0x207, 0x82) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xc08, 0x80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) 2.463057103s ago: executing program 4 (id=437): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c00)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000c40)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) ioctl$DM_DEV_SUSPEND(r4, 0xc138fd06, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TARGET_MSG(r4, 0xc138fd0e, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}}) ioctl$DM_DEV_SUSPEND(r4, 0xc138fd06, &(0x7f0000000a00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xa4200, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '0\x00'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000800)='./dm0\x00', 0x6180, r5) r6 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000840)='./dm0\x00', 0x2, 0x0) pwrite64(r6, &(0x7f0000000880)="01020304", 0x4, 0x1000) ioctl$DM_DEV_REMOVE(r4, 0xc138fd04, &(0x7f00000008c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) connect$unix(r2, &(0x7f0000000cc0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000d40), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000f00), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1c, 0x9, &(0x7f0000000d40)=@raw=[@generic={0x85, 0x0, 0x0, 0x0, 0x9e}, @generic={0x15, 0x0, 0x0, 0x2, 0x2}, @generic={0xbf, 0x1}, @ringbuf_query, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.740153739s ago: executing program 1 (id=446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x401041, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8880}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x2, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xffe0}, {0x1, 0xb}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x3ff, 0x2, 0x7f, 0x4, 0x6714e122}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) r8 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f0000000880)={&(0x7f00000008c0)=@xdp={0x2c, 0x0, r10, 0x36}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000980)="27030200000214000e00002fb96dffff", 0x10}, {0x0}], 0x2}, 0x20000085) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f00000009c0)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x200000, 0x200000}) r12 = socket$netlink(0x10, 0x3, 0x15) writev(r12, &(0x7f0000000180)=[{&(0x7f00000001c0)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) ioctl$DM_DEV_CREATE(r11, 0xc138fd03, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xc00, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) r13 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) write$char_usb(r13, &(0x7f0000000000)="65a97ffe8fd87c8a54ac5a280933aab58795b8f4f4fa3b7c03ad4123901bf52ed28344caac9ea032857c3454b30bfe6e385cf22f29a517c6d8507af141798cb632a877ab796aa26eab2102ff1f7ecb114f290ad220eef864df592bfe4d2cf63e8c22cf2efedf6ca7e65fcf411006c1336dee4e3bd57357dc21c96468e395c7ba8bea90eb354d7171ae81d8fd698010cb50b1d99a5a233fdcc356649490c67b352a59641017c714491596bea1bbeb7c80fbed38dcf0693cdee2f1f89aa0635b643741b95bfd313d3ca428db", 0xcb) ioctl$DM_TABLE_LOAD(r11, 0xc138fd09, &(0x7f0000001040)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@snapshot={0x0, 0x2000, 0x0, 0x80, 'snapshot\x00', {@rnull={'/dev/syzrnull', 0x0}, 0x20, @ram_num={'1:', 0x0}, 0x20, 'N', 0x20, '7', ' 2 discard_zeroes_cow discard_passdown_origin'}}]}) 1.611699506s ago: executing program 1 (id=448): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c00)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000c40)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) ioctl$DM_DEV_SUSPEND(r4, 0xc138fd06, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TARGET_MSG(r4, 0xc138fd0e, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}}) ioctl$DM_DEV_SUSPEND(r4, 0xc138fd06, &(0x7f0000000a00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xa4200, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '0\x00'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000800)='./dm0\x00', 0x6180, r5) r6 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000840)='./dm0\x00', 0x2, 0x0) pwrite64(r6, &(0x7f0000000880)="01020304", 0x4, 0x1000) ioctl$DM_DEV_REMOVE(r4, 0xc138fd04, &(0x7f00000008c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) connect$unix(r2, &(0x7f0000000cc0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000d40), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000f00), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1c, 0x9, &(0x7f0000000d40)=@raw=[@generic={0x85, 0x0, 0x0, 0x0, 0x9e}, @generic={0x15, 0x0, 0x0, 0x2, 0x2}, @generic={0xbf, 0x1}, @ringbuf_query, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.587729545s ago: executing program 4 (id=449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r1, 0x301, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48011}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @link_local}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="6a3f9ab8d42d2f", 0x7}], 0x1}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x20000000) write$tun(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="001c86dd07001000000040"], 0xffe) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xdd86}}}}}}}, 0xfdef) 940.979287ms ago: executing program 3 (id=452): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xc08, 0x80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) 940.452234ms ago: executing program 2 (id=453): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000000), 0x22003, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000015c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000001700)={0x4, 0x0, 0x0, 0x1c8, 0x138, 0x1, 0x0, 0x80000, 0x0, 0x0, @by_dev={r1}, [@crypt={0x0, 0x3440, 0x0, 0x90, 'crypt\x00', {'capi:cbc(aes)-essiv:sha256', 0x20, @fixed='0123456789abcdef0123456789abcdef', 0x20, '0', 0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '1024'}, ' 1 integrity:32:aead'}}]}) 928.314586ms ago: executing program 4 (id=454): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c00)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000c40)=0x7) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) ioctl$DM_DEV_SUSPEND(r2, 0xc138fd06, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TARGET_MSG(r2, 0xc138fd0e, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000800)='./dm0\x00', 0x6180, r3) r4 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000840)='./dm0\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000880)="01020304", 0x4, 0x1000) 871.223608ms ago: executing program 2 (id=455): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000002300000008000300", @ANYRES32=r2, @ANYBLOB="05001f0006000000080021"], 0x2c}}, 0x0) 864.79857ms ago: executing program 3 (id=456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1001}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) 858.529323ms ago: executing program 4 (id=457): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c00)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000c40)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) ioctl$DM_TARGET_MSG(r4, 0xc138fd0e, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}}) ioctl$DM_DEV_SUSPEND(r4, 0xc138fd06, &(0x7f0000000a00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xa4200, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '0\x00'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000800)='./dm0\x00', 0x6180, r5) r6 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000840)='./dm0\x00', 0x2, 0x0) pwrite64(r6, &(0x7f0000000880)="01020304", 0x4, 0x1000) ioctl$DM_DEV_REMOVE(r4, 0xc138fd04, &(0x7f00000008c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) connect$unix(r2, &(0x7f0000000cc0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000d40), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f40)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1c, 0x9, &(0x7f0000000d40)=@raw=[@generic={0x85, 0x0, 0x0, 0x0, 0x9e}, @generic={0x15, 0x0, 0x0, 0x2, 0x2}, @generic={0xbf, 0x1}, @ringbuf_query, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 825.67554ms ago: executing program 2 (id=458): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1001}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) (fail_nth: 1) 804.661759ms ago: executing program 3 (id=459): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003240), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000003280)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f00000032c0)={&(0x7f0000003300)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000003340)=[{0x0}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000033c0)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000003400)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000003500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000003540)="2d76b4", 0x3) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f0000004f00)=[{&(0x7f0000001080)="ad", 0x1}], 0x1) write$binfmt_script(r3, &(0x7f0000003a00)={'#! ', './file0', [], 0xa, "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"}, 0x3ef) close_range(r0, 0xffffffffffffffff, 0x0) 712.262543ms ago: executing program 1 (id=460): syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3820420, 0x0, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x8042, 0x34) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x8, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0/file1\x00', 0x40, 0x83) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000000000000000e41b0000900ac0006031100000004000b000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccc7ac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000348cc5614f7da773c20c6a6c8bd414c8", 0xd8}], 0x1}, 0x0) fsync(r0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3820420, 0x0, 0x2, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x8042, 0x34) (async) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x8, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0/file1\x00', 0x40, 0x83) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000000000000000e41b0000900ac0006031100000004000b000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccc7ac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000348cc5614f7da773c20c6a6c8bd414c8", 0xd8}], 0x1}, 0x0) (async) fsync(r0) (async) 670.71646ms ago: executing program 2 (id=461): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000000), 0x22003, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000015c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000001700)={0x4, 0x0, 0x0, 0x1c8, 0x138, 0x1, 0x0, 0x80000, 0x0, 0x0, @by_dev={r1}, [@crypt={0x0, 0x3440, 0x0, 0x90, 'crypt\x00', {'capi:cbc(aes)-essiv:sha256', 0x20, @fixed='0123456789abcdef0123456789abcdef', 0x20, '0', 0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '1024'}, ' 1 integrity:32:aead'}}]}) 669.891843ms ago: executing program 3 (id=462): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000040)={0x2, @raw_data="a91bfbdc92d1051acbbc0d458e274af6cb1114326aec9ec5e6490313fd803a107530665c241237c717a49cfd15cc9cffa5545352b8a82f185bf68c250d56265cc87820a31ffc270528041ad30835704976772439d573af71bc79eee1da45407a590fc0798c267cc3498d1fe9e91d823b88b0f5961ac83b5f0e2299991e189115f5369ef37905b99a082b64020bbd3af36ffe70a38e4238bd7f3789b4caa5a1ac1420d4ca2c4736df05a84dea61ef3cdfbddf4fb85b96d84e4763953e5ee6b840f04a21e25f821a08"}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@newtclass={0x470, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0xfff1}, {0x1, 0xfff1}, {0x0, 0x1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x444, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x8, 0xd, 0x1c0000, 0x2, 0x81, 0x2, 0x1, 0x1ff, 0x81, 0x8, 0x8, 0x100, 0x8, 0xf, 0x3, 0xdbd4, 0xfffffff8, 0xd37, 0x1, 0x5, 0x9, 0x804, 0x5, 0x3, 0x800, 0x8, 0xb43, 0x7, 0x7, 0xfffffffc, 0xffffff4e, 0x1, 0x9, 0x1, 0x81, 0x7ff, 0x4, 0x3, 0xfffffeff, 0x8, 0x4, 0x10, 0x3, 0x9, 0xfffffff7, 0x5, 0x8, 0x6, 0x0, 0xd3e, 0x2d, 0x276, 0x9, 0x4, 0x748, 0x7f, 0x9, 0xffffffff, 0x2, 0x7, 0x4, 0xfffffffb, 0x56, 0x9, 0xdf, 0x1ff, 0xc7, 0x8, 0xff, 0x0, 0x3, 0x2, 0x400, 0x7, 0xffff, 0x101, 0x1, 0xc0000, 0x5, 0xffff, 0x6, 0x7fffffff, 0x3, 0x477, 0x9, 0x1, 0xbe, 0x100, 0x0, 0x6, 0x1, 0x7, 0xe, 0x3, 0x9, 0x4, 0x9000000, 0x8, 0xd, 0xee11, 0x6, 0x6, 0x405, 0x4, 0x5, 0xc, 0x80, 0xffffffff, 0x1, 0x0, 0x3, 0x1, 0x8, 0x401, 0x6, 0xbdd, 0x3, 0x2, 0xd, 0x100, 0x5, 0xfffffffc, 0x200, 0x3, 0xe4f6, 0x7f, 0x3, 0x7, 0x5, 0x80, 0x100, 0x5a6, 0x7, 0x4, 0xeebe, 0x47ac1a21, 0xff, 0x5, 0x9, 0x1ff, 0x101, 0x19, 0x8, 0x6, 0xfff, 0x9, 0x2, 0x100, 0x2, 0x2, 0x8, 0xfff, 0x7fff, 0x2, 0x0, 0x1, 0x1ff, 0x2, 0xffffffff, 0x3039, 0x1, 0x2, 0x5a, 0x0, 0x7, 0x7, 0x9, 0x5, 0xfffffb5b, 0x101, 0x3, 0x485, 0xfffffeff, 0x400, 0x5, 0x7, 0x200, 0x585, 0xfffffffd, 0x0, 0xa, 0x1, 0x6, 0x40007fff, 0x9000, 0xb, 0x917, 0xfffff000, 0x505, 0x8, 0x5, 0xfffffffc, 0xb, 0xfffff70f, 0x80000001, 0x4, 0x3355d8d5, 0x1, 0x81, 0x7fff, 0xfffffffd, 0xb5d, 0x7, 0x7, 0x4, 0x791f, 0x3, 0xfff, 0x6, 0x1ff, 0x1000, 0x8, 0x1000, 0x72e, 0x100, 0x0, 0x25, 0xfffffffb, 0x7, 0xff, 0x0, 0x7, 0xfff, 0x401, 0xffffffff, 0x81, 0x3, 0x1, 0x8, 0x7, 0x8cc0, 0x1, 0xffff, 0x7, 0x2, 0xfffffff4, 0x8000, 0x9, 0x5, 0x1, 0x100, 0x350, 0x3, 0x7d84, 0xf75, 0x78e, 0xfff, 0x2e, 0x20000000, 0x2, 0xc, 0x5, 0x5, 0x2, 0x5, 0x9]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x1, 0x2, 0x3f1, 0x2, 0x5}, {0x8, 0x0, 0x8, 0x7b, 0x7ff, 0x4}, 0x4, 0x7, 0xffff, 0x8, 0x644}}, @TCA_HTB_RATE64={0xc, 0x6, 0x1}]}}]}, 0x470}}, 0x0) 428.75564ms ago: executing program 1 (id=463): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000000), 0x22003, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000015c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000001700)={0x4, 0x0, 0x0, 0x1c8, 0x138, 0x1, 0x0, 0x80000, 0x0, 0x0, @by_dev={r1}, [@crypt={0x0, 0x3440, 0x0, 0x90, 'crypt\x00', {'capi:cbc(aes)-essiv:sha256', 0x20, @fixed='0123456789abcdef0123456789abcdef', 0x20, '0', 0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '1024'}, ' 1 integrity:32:aead'}}]}) (fail_nth: 1) 428.561ms ago: executing program 3 (id=464): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 409.01823ms ago: executing program 2 (id=465): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) (fail_nth: 1) 362.44207ms ago: executing program 1 (id=466): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xc08, 0x80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) 275.178264ms ago: executing program 2 (id=467): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000006040), 0x0, 0x6089850) 267.361508ms ago: executing program 1 (id=468): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000002300000008000300", @ANYRES32=r2, @ANYBLOB="05001f0006000000080021"], 0x2c}}, 0x0) 90.283382ms ago: executing program 3 (id=469): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000980)=0x80000004, 0x4) bind$inet6(r2, &(0x7f00000009c0)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a00)={r1, &(0x7f0000000a40), &(0x7f0000000a80)=@udp6=r2}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=470): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c00)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000c40)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) ioctl$DM_DEV_SUSPEND(r2, 0xc138fd06, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TARGET_MSG(r2, 0xc138fd0e, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}}) ioctl$DM_DEV_SUSPEND(r2, 0xc138fd06, &(0x7f0000000a00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xa4200, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '0\x00'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000800)='./dm0\x00', 0x6180, r3) r4 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000840)='./dm0\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000880)="01020304", 0x4, 0x1000) ioctl$DM_DEV_REMOVE(r2, 0xc138fd04, &(0x7f00000008c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.68' (ED25519) to the list of known hosts. [ 21.248728][ T4715] cgroup: Unknown subsys name 'net' [ 21.398947][ T4715] cgroup: Unknown subsys name 'cpuset' [ 21.400364][ T4715] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 21.589273][ T4715] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 22.693848][ T4746] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 22.694287][ T4748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 22.694634][ T4748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 22.694779][ T4746] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 22.695451][ T4748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 22.695649][ T4746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 22.695913][ T4746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 22.695998][ T4748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 22.696234][ T4748] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 22.696254][ T4746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 22.696416][ T4748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 22.696510][ T4748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 22.696769][ T4748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 22.696816][ T4748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 22.697048][ T4746] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 22.698316][ T4746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 22.698716][ T4746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 22.698864][ T4746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 22.700281][ T4746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 22.701035][ T4746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 22.703891][ T4746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 22.706056][ T4746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 22.706306][ T4746] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 22.706508][ T4746] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 22.716203][ T4745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 22.897488][ T4737] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.897782][ T4734] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 22.897830][ T4737] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.898945][ T4737] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.913297][ T4741] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 22.914385][ T4733] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 22.920250][ T4738] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 22.961716][ T4737] infiniband rxe0: set active [ 22.962364][ T4737] infiniband rxe0: added rxe_eth0 [ 22.970056][ T4495] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.985442][ T4737] RDS/IB: rxe0: added [ 22.985508][ T4737] smc: adding ib device rxe0 with port count 1 [ 22.985529][ T4737] smc: ib device rxe0 port 1 has no pnetid [ 22.994106][ T4495] rxe_eth0 speed is unknown, defaulting to 1000 [ 23.012258][ T4737] rxe_eth0 speed is unknown, defaulting to 1000 [ 23.050412][ T4737] rxe_eth0 speed is unknown, defaulting to 1000 [ 23.110428][ T4737] rxe_eth0 speed is unknown, defaulting to 1000 [ 23.154514][ T4737] rxe_eth0 speed is unknown, defaulting to 1000 [ 23.219915][ T4733] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.220132][ T4733] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.220229][ T4733] bridge_slave_0: entered allmulticast mode [ 23.220680][ T4733] bridge_slave_0: entered promiscuous mode [ 23.234719][ T4741] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.234744][ T4741] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.235178][ T4741] bridge_slave_0: entered allmulticast mode [ 23.235633][ T4741] bridge_slave_0: entered promiscuous mode [ 23.242450][ T4733] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.242510][ T4733] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.242570][ T4733] bridge_slave_1: entered allmulticast mode [ 23.243008][ T4733] bridge_slave_1: entered promiscuous mode [ 23.255704][ T4741] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.255740][ T4741] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.255838][ T4741] bridge_slave_1: entered allmulticast mode [ 23.256211][ T4741] bridge_slave_1: entered promiscuous mode [ 23.260435][ T4737] rxe_eth0 speed is unknown, defaulting to 1000 [ 23.266889][ T4734] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.266979][ T4734] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.267060][ T4734] bridge_slave_0: entered allmulticast mode [ 23.267889][ T4734] bridge_slave_0: entered promiscuous mode [ 23.270335][ T4733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.271371][ T4733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.271450][ T4738] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.271475][ T4738] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.271527][ T4738] bridge_slave_0: entered allmulticast mode [ 23.272282][ T4738] bridge_slave_0: entered promiscuous mode [ 23.273096][ T4738] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.273116][ T4738] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.273159][ T4738] bridge_slave_1: entered allmulticast mode [ 23.273952][ T4738] bridge_slave_1: entered promiscuous mode [ 23.280840][ T4738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.281780][ T4738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.287902][ T4738] team0: Port device team_slave_0 added [ 23.289034][ T4738] team0: Port device team_slave_1 added [ 23.294575][ T4738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.294584][ T4738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.294596][ T4738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.295382][ T4738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.295389][ T4738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.295400][ T4738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.315345][ T4734] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.315398][ T4734] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.315450][ T4734] bridge_slave_1: entered allmulticast mode [ 23.315908][ T4734] bridge_slave_1: entered promiscuous mode [ 23.335291][ T4738] hsr_slave_0: entered promiscuous mode [ 23.335622][ T4738] hsr_slave_1: entered promiscuous mode [ 23.336816][ T4741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.344635][ T4733] team0: Port device team_slave_0 added [ 23.345369][ T4734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.346224][ T4734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.354418][ T4741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.359750][ T4733] team0: Port device team_slave_1 added [ 23.363145][ T4734] team0: Port device team_slave_0 added [ 23.375397][ T4734] team0: Port device team_slave_1 added [ 23.375576][ T4733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.375585][ T4733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.375599][ T4733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.394099][ T4741] team0: Port device team_slave_0 added [ 23.397207][ T4741] team0: Port device team_slave_1 added [ 23.398031][ T4733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.398041][ T4733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.398058][ T4733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.402345][ T4734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.402353][ T4734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.402366][ T4734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.402925][ T4734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.402932][ T4734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.402948][ T4734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.418840][ T4733] hsr_slave_0: entered promiscuous mode [ 23.419128][ T4733] hsr_slave_1: entered promiscuous mode [ 23.419335][ T4733] debugfs: 'hsr0' already exists in 'hsr' [ 23.419371][ T4733] Cannot create hsr debugfs directory [ 23.447132][ T4741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.447143][ T4741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.447156][ T4741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.451076][ T4734] hsr_slave_0: entered promiscuous mode [ 23.451344][ T4734] hsr_slave_1: entered promiscuous mode [ 23.451522][ T4734] debugfs: 'hsr0' already exists in 'hsr' [ 23.451530][ T4734] Cannot create hsr debugfs directory [ 23.465441][ T4741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.465449][ T4741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.465461][ T4741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.528617][ T4741] hsr_slave_0: entered promiscuous mode [ 23.529227][ T4741] hsr_slave_1: entered promiscuous mode [ 23.529395][ T4741] debugfs: 'hsr0' already exists in 'hsr' [ 23.529405][ T4741] Cannot create hsr debugfs directory [ 23.576116][ T4738] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 23.581460][ T4738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.581708][ T4737] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.581769][ T4737] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.581875][ T4737] bridge_slave_0: entered allmulticast mode [ 23.582324][ T4737] bridge_slave_0: entered promiscuous mode [ 23.583622][ T4737] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.583640][ T4737] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.583836][ T4737] bridge_slave_1: entered allmulticast mode [ 23.584267][ T4737] bridge_slave_1: entered promiscuous mode [ 23.600142][ T4738] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 23.601358][ T4738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.610936][ T4738] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 23.612992][ T4738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.621920][ T4733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 23.623052][ T4733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.623586][ T4733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 23.624586][ T4733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.624750][ T4738] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 23.625829][ T4738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.627407][ T4737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.628993][ T4737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.642165][ T4733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 23.643577][ T4733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.645843][ T4737] team0: Port device team_slave_0 added [ 23.652828][ T4733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 23.653782][ T4733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.655610][ T4737] team0: Port device team_slave_1 added [ 23.666224][ T4738] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.666256][ T4738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.666407][ T4738] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.666435][ T4738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.674756][ T4737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.674767][ T4737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.674783][ T4737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.693030][ T4737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.693041][ T4737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.693057][ T4737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.695749][ T4734] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 23.696860][ T4734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.709847][ T4734] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 23.711199][ T4734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.711520][ T4734] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 23.713037][ T4734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.713447][ T4734] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 23.714286][ T4734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.733802][ T4738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.735995][ T4733] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.736019][ T4733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.736094][ T4733] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.736126][ T4733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.741888][ T4734] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.741913][ T4734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.741976][ T4734] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.742003][ T4734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.752995][ T4737] hsr_slave_0: entered promiscuous mode [ 23.753258][ T4737] hsr_slave_1: entered promiscuous mode [ 23.753434][ T4737] debugfs: 'hsr0' already exists in 'hsr' [ 23.753444][ T4737] Cannot create hsr debugfs directory [ 23.760823][ T4738] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.765349][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.765846][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.767010][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.772189][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.782559][ T4734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.793056][ T4734] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.795779][ T4741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 23.796707][ T4741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.797182][ T4741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 23.800627][ T4741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.810542][ T4741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 23.811503][ T4741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.812318][ T4741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 23.813195][ T4741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.814293][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.814339][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.815145][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.815164][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.822764][ T4738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.871756][ T4733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.891838][ T4734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.893303][ T4733] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.906358][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.906383][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.906760][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.906777][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.932932][ T4733] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 23.932946][ T4733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.949105][ T4737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 23.950340][ T4737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.952152][ T4737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 23.953444][ T4737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.953749][ T4737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 23.954947][ T4737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.955278][ T4737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 23.956339][ T4737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.966867][ T4741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.971587][ T4741] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.000132][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.000160][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.000532][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.000550][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.067334][ T4738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.092041][ T4737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.095685][ T4737] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.101522][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.101551][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.126940][ T4737] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.126955][ T4737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.147094][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.147118][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.155923][ T4734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.170138][ T4734] veth0_vlan: entered promiscuous mode [ 24.172213][ T4734] veth1_vlan: entered promiscuous mode [ 24.193411][ T4733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.216978][ T4734] veth0_macvtap: entered promiscuous mode [ 24.225357][ T4734] veth1_macvtap: entered promiscuous mode [ 24.230771][ T4733] veth0_vlan: entered promiscuous mode [ 24.233611][ T4733] veth1_vlan: entered promiscuous mode [ 24.244459][ T4734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.245972][ T4734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.257337][ T4733] veth0_macvtap: entered promiscuous mode [ 24.261333][ T4741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.276493][ T4738] veth0_vlan: entered promiscuous mode [ 24.281548][ T4738] veth1_vlan: entered promiscuous mode [ 24.282009][ T4733] veth1_macvtap: entered promiscuous mode [ 24.315524][ T4733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.317894][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.317979][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.318008][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.318036][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.326176][ T4738] veth0_macvtap: entered promiscuous mode [ 24.327344][ T4738] veth1_macvtap: entered promiscuous mode [ 24.333859][ T4733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.337733][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.337883][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.337958][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.338022][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.341081][ T4741] veth0_vlan: entered promiscuous mode [ 24.342726][ T4741] veth1_vlan: entered promiscuous mode [ 24.350570][ T4738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.351630][ T4738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.376818][ T4737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.388667][ T4890] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.388884][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.388913][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.388934][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.395183][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.395196][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.409691][ T4741] veth0_macvtap: entered promiscuous mode [ 24.412269][ T4741] veth1_macvtap: entered promiscuous mode [ 24.414466][ T4737] veth0_vlan: entered promiscuous mode [ 24.416445][ T4741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.417085][ T4737] veth1_vlan: entered promiscuous mode [ 24.422156][ T4741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.423715][ T4890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.423725][ T4890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.441718][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.441995][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.442065][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.442127][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.443233][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.443245][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.472199][ T4737] veth0_macvtap: entered promiscuous mode [ 24.476719][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.476729][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.477339][ T4737] veth1_macvtap: entered promiscuous mode [ 24.488624][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.488637][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.495089][ T4737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.506928][ T4734] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.510683][ T4737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.512458][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.512469][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.537853][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.537864][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.555105][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.555116][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.557810][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.557968][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.575175][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.575188][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.578464][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.584727][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.606385][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.606395][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.618568][ T4929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.618797][ T4929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.698145][ T4923] device-mapper: table: 248:0: raid: RAID device lookup failure (-ENOENT) [ 24.698162][ T4923] device-mapper: ioctl: error adding target to table [ 24.748843][ T4740] Bluetooth: hci4: command tx timeout [ 24.748944][ T4740] Bluetooth: hci2: command tx timeout [ 24.749009][ T4740] Bluetooth: hci0: command tx timeout [ 24.749154][ T4746] Bluetooth: hci1: command tx timeout [ 24.766751][ T4945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 24.809567][ T4837] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 24.827599][ T4746] Bluetooth: hci3: command tx timeout [ 24.969442][ T4837] usb 1-1: unable to get BOS descriptor or descriptor too short [ 24.969501][ T4837] usb 1-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 24.970330][ T4837] usb 1-1: config 142 has an invalid interface number: 251 but max is 0 [ 24.970342][ T4837] usb 1-1: config 142 descriptor has 1 excess byte, ignoring [ 24.970350][ T4837] usb 1-1: config 142 has no interface number 0 [ 24.970377][ T4837] usb 1-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 24.970388][ T4837] usb 1-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 24.970398][ T4837] usb 1-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 24.970407][ T4837] usb 1-1: config 142 interface 251 has no altsetting 0 [ 24.972362][ T4837] usb 1-1: string descriptor 0 read error: -22 [ 24.972416][ T4837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.981051][ T4926] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 24.981097][ T4926] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 24.982577][ T4837] cypress_m8 1-1:142.251: HID->COM RS232 Adapter converter detected [ 24.990078][ T4837] usb 1-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 25.692009][ T4969] TC_ACT_REPEAT abuse ? [ 25.703515][ T4971] FAULT_INJECTION: forcing a failure. [ 25.703515][ T4971] name failslab, interval 1, probability 0, space 0, times 1 [ 25.703537][ T4971] CPU: 1 UID: 0 PID: 4971 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT [ 25.703548][ T4971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 25.703554][ T4971] Call trace: [ 25.703557][ T4971] show_stack+0x2c/0x3c (C) [ 25.703573][ T4971] __dump_stack+0x30/0x40 [ 25.703582][ T4971] dump_stack_lvl+0xd8/0x12c [ 25.703590][ T4971] dump_stack+0x1c/0x28 [ 25.703598][ T4971] should_fail_ex+0x418/0x58c [ 25.703609][ T4971] should_failslab+0xc4/0x120 [ 25.703619][ T4971] __kmalloc_cache_noprof+0x94/0x5fc [ 25.703630][ T4971] vhost_net_open+0x118/0x418 [ 25.703641][ T4971] misc_open+0x2dc/0x338 [ 25.703652][ T4971] chrdev_open+0x398/0x3e8 [ 25.703671][ T4971] do_dentry_open+0x5c4/0xfbc [ 25.703680][ T4971] vfs_open+0x44/0x2dc [ 25.703687][ T4971] path_openat+0x1084/0x18f0 [ 25.703699][ T4971] do_file_open+0x1c8/0x2e8 [ 25.703711][ T4971] do_sys_openat2+0x114/0x1e8 [ 25.703719][ T4971] do_sys_open+0xb0/0xe0 [ 25.703727][ T4971] __arm64_sys_openat+0xa8/0xc4 [ 25.703735][ T4971] invoke_syscall+0x98/0x244 [ 25.703744][ T4971] el0_svc_common+0xec/0x23c [ 25.703753][ T4971] do_el0_svc+0x4c/0x5c [ 25.703760][ T4971] el0_svc+0x60/0x1d8 [ 25.703769][ T4971] el0t_64_sync_handler+0x44/0x104 [ 25.703777][ T4971] el0t_64_sync+0x198/0x19c [ 25.768235][ T4926] cyphidcom ttyUSB0: cypress_serial_control - failed to retrieve serial line settings - -32 [ 25.768254][ T4926] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 25.768419][ C1] usb 1-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 26.039989][ T4837] usb 1-1: USB disconnect, device number 2 [ 26.045761][ T4837] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 26.046226][ T4837] cypress_m8 1-1:142.251: device disconnected [ 26.773566][ T4996] FAULT_INJECTION: forcing a failure. [ 26.773566][ T4996] name failslab, interval 1, probability 0, space 0, times 0 [ 26.773587][ T4996] CPU: 0 UID: 0 PID: 4996 Comm: syz.4.28 Not tainted syzkaller #0 PREEMPT [ 26.773598][ T4996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 26.773604][ T4996] Call trace: [ 26.773607][ T4996] show_stack+0x2c/0x3c (C) [ 26.773623][ T4996] __dump_stack+0x30/0x40 [ 26.773633][ T4996] dump_stack_lvl+0xd8/0x12c [ 26.773641][ T4996] dump_stack+0x1c/0x28 [ 26.773658][ T4996] should_fail_ex+0x418/0x58c [ 26.773671][ T4996] should_failslab+0xc4/0x120 [ 26.773683][ T4996] __kmalloc_cache_noprof+0x94/0x5fc [ 26.773696][ T4996] io_manage_buffers_legacy+0x2c4/0x9ac [ 26.773711][ T4996] __io_issue_sqe+0x134/0x364 [ 26.773722][ T4996] io_issue_sqe+0x94/0xadc [ 26.773732][ T4996] io_submit_sqes+0xa54/0x1e10 [ 26.773744][ T4996] __arm64_sys_io_uring_enter+0x308/0x16c4 [ 26.773756][ T4996] invoke_syscall+0x98/0x244 [ 26.773765][ T4996] el0_svc_common+0xec/0x23c [ 26.773773][ T4996] do_el0_svc+0x4c/0x5c [ 26.773781][ T4996] el0_svc+0x60/0x1d8 [ 26.773790][ T4996] el0t_64_sync_handler+0x44/0x104 [ 26.773798][ T4996] el0t_64_sync+0x198/0x19c [ 26.808033][ T4829] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.827665][ T4746] Bluetooth: hci1: command tx timeout [ 26.827688][ T4746] Bluetooth: hci0: command tx timeout [ 26.827703][ T4746] Bluetooth: hci2: command tx timeout [ 26.827717][ T4746] Bluetooth: hci4: command tx timeout [ 26.837616][ T5003] syzkaller0: entered promiscuous mode [ 26.837630][ T5003] syzkaller0: entered allmulticast mode [ 26.957986][ T4829] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 26.959839][ T4829] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.959861][ T4829] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 26.959872][ T4829] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 26.959889][ T4829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.375050][ T4829] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 27.375078][ T4829] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 27.375086][ T4829] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 27.377278][ T4829] cxacru 1-1:1.0: probe with driver cxacru failed with error -71 [ 27.392906][ T4829] usb 1-1: USB disconnect, device number 3 [ 27.459303][ T5056] syz_tun: entered allmulticast mode [ 27.460207][ T5056] Bluetooth: MGMT ver 1.23 [ 27.461475][ T5056] geneve0: entered allmulticast mode [ 27.464149][ T5055] syz_tun: left allmulticast mode [ 27.564150][ T5068] FAULT_INJECTION: forcing a failure. [ 27.564150][ T5068] name failslab, interval 1, probability 0, space 0, times 0 [ 27.564169][ T5068] CPU: 0 UID: 0 PID: 5068 Comm: syz.3.53 Not tainted syzkaller #0 PREEMPT [ 27.564179][ T5068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 27.564185][ T5068] Call trace: [ 27.564188][ T5068] show_stack+0x2c/0x3c (C) [ 27.564203][ T5068] __dump_stack+0x30/0x40 [ 27.564212][ T5068] dump_stack_lvl+0xd8/0x12c [ 27.564220][ T5068] dump_stack+0x1c/0x28 [ 27.564228][ T5068] should_fail_ex+0x418/0x58c [ 27.564239][ T5068] should_failslab+0xc4/0x120 [ 27.564249][ T5068] kmem_cache_alloc_node_noprof+0x98/0x604 [ 27.564260][ T5068] __alloc_skb+0x1f0/0x610 [ 27.564275][ T5068] netlink_ack+0x11c/0x890 [ 27.564287][ T5068] netlink_rcv_skb+0x21c/0x414 [ 27.564298][ T5068] rtnetlink_rcv+0x28/0x38 [ 27.564309][ T5068] netlink_unicast+0x600/0x7f8 [ 27.564320][ T5068] netlink_sendmsg+0x648/0x948 [ 27.564331][ T5068] __sock_sendmsg+0xc8/0x17c [ 27.564342][ T5068] ____sys_sendmsg+0x3d0/0x6c8 [ 27.564353][ T5068] ___sys_sendmsg+0x198/0x224 [ 27.564365][ T5068] __sys_sendmsg+0x158/0x204 [ 27.564376][ T5068] __arm64_sys_sendmsg+0x88/0x9c [ 27.564388][ T5068] invoke_syscall+0x98/0x244 [ 27.564397][ T5068] el0_svc_common+0xec/0x23c [ 27.564405][ T5068] do_el0_svc+0x4c/0x5c [ 27.564413][ T5068] el0_svc+0x60/0x1d8 [ 27.564422][ T5068] el0t_64_sync_handler+0x44/0x104 [ 27.564430][ T5068] el0t_64_sync+0x198/0x19c [ 27.618447][ T5072] syzkaller0: entered promiscuous mode [ 27.618465][ T5072] syzkaller0: entered allmulticast mode [ 27.964863][ T5086] syzkaller0: entered promiscuous mode [ 27.964882][ T5086] syzkaller0: entered allmulticast mode [ 28.321741][ T5117] FAULT_INJECTION: forcing a failure. [ 28.321741][ T5117] name failslab, interval 1, probability 0, space 0, times 0 [ 28.321763][ T5117] CPU: 0 UID: 0 PID: 5117 Comm: syz.3.70 Not tainted syzkaller #0 PREEMPT [ 28.321774][ T5117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 28.321779][ T5117] Call trace: [ 28.321782][ T5117] show_stack+0x2c/0x3c (C) [ 28.321797][ T5117] __dump_stack+0x30/0x40 [ 28.321805][ T5117] dump_stack_lvl+0xd8/0x12c [ 28.321813][ T5117] dump_stack+0x1c/0x28 [ 28.321821][ T5117] should_fail_ex+0x418/0x58c [ 28.321832][ T5117] should_failslab+0xc4/0x120 [ 28.321842][ T5117] kmem_cache_alloc_noprof+0x94/0x5d4 [ 28.321852][ T5117] do_getname+0x48/0x234 [ 28.321863][ T5117] getname_flags+0x2c/0x3c [ 28.321872][ T5117] do_sys_openat2+0xd0/0x1e8 [ 28.321881][ T5117] do_sys_open+0xb0/0xe0 [ 28.321889][ T5117] __arm64_sys_openat+0xa8/0xc4 [ 28.321897][ T5117] invoke_syscall+0x98/0x244 [ 28.321906][ T5117] el0_svc_common+0xec/0x23c [ 28.321914][ T5117] do_el0_svc+0x4c/0x5c [ 28.321922][ T5117] el0_svc+0x60/0x1d8 [ 28.321931][ T5117] el0t_64_sync_handler+0x44/0x104 [ 28.321939][ T5117] el0t_64_sync+0x198/0x19c [ 28.436762][ T5132] syzkaller0: entered promiscuous mode [ 28.436780][ T5132] syzkaller0: entered allmulticast mode [ 28.500544][ T5149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 28.766295][ T5162] FAULT_INJECTION: forcing a failure. [ 28.766295][ T5162] name fail_futex, interval 1, probability 0, space 0, times 1 [ 28.766316][ T5162] CPU: 1 UID: 0 PID: 5162 Comm: syz.4.86 Not tainted syzkaller #0 PREEMPT [ 28.766327][ T5162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 28.766333][ T5162] Call trace: [ 28.766336][ T5162] show_stack+0x2c/0x3c (C) [ 28.766353][ T5162] __dump_stack+0x30/0x40 [ 28.766362][ T5162] dump_stack_lvl+0xd8/0x12c [ 28.766370][ T5162] dump_stack+0x1c/0x28 [ 28.766378][ T5162] should_fail_ex+0x418/0x58c [ 28.766389][ T5162] should_fail+0x14/0x24 [ 28.766399][ T5162] get_futex_key+0x1ec/0x12b0 [ 28.766411][ T5162] futex_wake+0x10c/0x594 [ 28.766419][ T5162] do_futex+0x2c4/0x378 [ 28.766431][ T5162] __arm64_sys_futex+0x2e4/0x418 [ 28.766443][ T5162] invoke_syscall+0x98/0x244 [ 28.766452][ T5162] el0_svc_common+0xec/0x23c [ 28.766460][ T5162] do_el0_svc+0x4c/0x5c [ 28.766468][ T5162] el0_svc+0x60/0x1d8 [ 28.766477][ T5162] el0t_64_sync_handler+0x44/0x104 [ 28.766485][ T5162] el0t_64_sync+0x198/0x19c [ 28.767535][ T4829] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 28.908374][ T4750] Bluetooth: hci1: command tx timeout [ 28.908430][ T4743] Bluetooth: hci4: command tx timeout [ 28.918025][ T4750] Bluetooth: hci2: command tx timeout [ 28.918071][ T4743] Bluetooth: hci0: command tx timeout [ 28.927490][ T4829] usb 1-1: Using ep0 maxpacket: 8 [ 28.928730][ T4829] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 28.929431][ T4829] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 28.929441][ T4829] usb 1-1: config 16 has an invalid interface number: 128 but max is 0 [ 28.929450][ T4829] usb 1-1: config 16 has no interface number 0 [ 28.929461][ T4829] usb 1-1: config 16 interface 128 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 28.929470][ T4829] usb 1-1: config 16 interface 128 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 28.929480][ T4829] usb 1-1: config 16 interface 128 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 28.929489][ T4829] usb 1-1: config 16 interface 128 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 28.929505][ T4829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.134083][ T4829] usb 1-1: GET_CAPABILITIES returned 0 [ 29.134108][ T4829] usbtmc 1-1:16.128: can't read capabilities [ 29.148700][ T4743] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 29.148724][ T4743] Bluetooth: hci3: Injecting HCI hardware error event [ 29.149307][ T4743] Bluetooth: hci3: hardware error 0x00 [ 29.268751][ T5181] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.269084][ T5181] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.318937][ T5181] bridge_slave_0: left allmulticast mode [ 29.318957][ T5181] bridge_slave_0: left promiscuous mode [ 29.319036][ T5181] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.369500][ T5181] bridge_slave_1: left allmulticast mode [ 29.369618][ T5181] bridge_slave_1: left promiscuous mode [ 29.369699][ T5181] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.387157][ T5181] bond0: (slave bond_slave_0): Releasing backup interface [ 29.400248][ T4827] usb 1-1: USB disconnect, device number 4 [ 29.425331][ T5181] bond0: (slave bond_slave_1): Releasing backup interface [ 29.459194][ T5181] team0: Port device team_slave_0 removed [ 29.461442][ T5181] team0: Port device team_slave_1 removed [ 29.462455][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 29.463335][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 29.465855][ T5181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 29.478435][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 29.484106][ T5181] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 29.558676][ T5203] syzkaller0: entered promiscuous mode [ 29.558696][ T5203] syzkaller0: entered allmulticast mode [ 29.566871][ T5205] FAULT_INJECTION: forcing a failure. [ 29.566871][ T5205] name failslab, interval 1, probability 0, space 0, times 0 [ 29.566890][ T5205] CPU: 1 UID: 0 PID: 5205 Comm: syz.1.99 Not tainted syzkaller #0 PREEMPT [ 29.566901][ T5205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 29.566907][ T5205] Call trace: [ 29.566910][ T5205] show_stack+0x2c/0x3c (C) [ 29.566926][ T5205] __dump_stack+0x30/0x40 [ 29.566935][ T5205] dump_stack_lvl+0xd8/0x12c [ 29.566943][ T5205] dump_stack+0x1c/0x28 [ 29.566951][ T5205] should_fail_ex+0x418/0x58c [ 29.566962][ T5205] should_failslab+0xc4/0x120 [ 29.566972][ T5205] kmem_cache_alloc_noprof+0x94/0x5d4 [ 29.566983][ T5205] security_file_alloc+0x3c/0x300 [ 29.566996][ T5205] init_file+0x90/0x28c [ 29.567006][ T5205] alloc_empty_file+0x80/0x1cc [ 29.567016][ T5205] alloc_file+0x58/0x98 [ 29.567026][ T5205] alloc_file_pseudo+0xe0/0x198 [ 29.567037][ T5205] sock_alloc_file+0xb4/0x1ac [ 29.567048][ T5205] __sys_socket+0x90/0xec [ 29.567059][ T5205] __arm64_sys_socket+0x84/0x9c [ 29.567070][ T5205] invoke_syscall+0x98/0x244 [ 29.567079][ T5205] el0_svc_common+0xec/0x23c [ 29.567087][ T5205] do_el0_svc+0x4c/0x5c [ 29.567095][ T5205] el0_svc+0x60/0x1d8 [ 29.567104][ T5205] el0t_64_sync_handler+0x44/0x104 [ 29.567112][ T5205] el0t_64_sync+0x198/0x19c [ 29.983991][ T5208] syz_tun: entered allmulticast mode [ 29.984160][ T5213] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 29.987780][ T5208] syz_tun: left allmulticast mode [ 30.116021][ T5234] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 30.173376][ T5242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.173545][ T5242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.188525][ T5239] FAULT_INJECTION: forcing a failure. [ 30.188525][ T5239] name failslab, interval 1, probability 0, space 0, times 0 [ 30.188544][ T5239] CPU: 1 UID: 0 PID: 5239 Comm: syz.2.110 Not tainted syzkaller #0 PREEMPT [ 30.188556][ T5239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 30.188561][ T5239] Call trace: [ 30.188564][ T5239] show_stack+0x2c/0x3c (C) [ 30.188580][ T5239] __dump_stack+0x30/0x40 [ 30.188589][ T5239] dump_stack_lvl+0xd8/0x12c [ 30.188597][ T5239] dump_stack+0x1c/0x28 [ 30.188605][ T5239] should_fail_ex+0x418/0x58c [ 30.188616][ T5239] should_failslab+0xc4/0x120 [ 30.188626][ T5239] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 30.188638][ T5239] kstrdup+0x50/0x104 [ 30.188648][ T5239] kstrdup_const+0x54/0x6c [ 30.188658][ T5239] __kernfs_new_node+0xb0/0x7d8 [ 30.188675][ T5239] kernfs_new_node+0xe8/0x130 [ 30.188682][ T5239] kernfs_create_link+0x98/0x1e4 [ 30.188692][ T5239] sysfs_do_create_link_sd+0x8c/0x120 [ 30.188702][ T5239] sysfs_create_link+0x74/0x94 [ 30.188712][ T5239] device_add_class_symlinks+0x1e0/0x254 [ 30.188722][ T5239] device_add+0x3fc/0x9e0 [ 30.188730][ T5239] netdev_register_kobject+0x184/0x328 [ 30.188745][ T5239] register_netdevice+0xd74/0x14c0 [ 30.188754][ T5239] wg_newlink+0x330/0x59c [ 30.188767][ T5239] rtnl_newlink_create+0x294/0x6b8 [ 30.188778][ T5239] rtnl_newlink+0xfe4/0x138c [ 30.188788][ T5239] rtnetlink_rcv_msg+0x66c/0x9bc [ 30.188798][ T5239] netlink_rcv_skb+0x238/0x414 [ 30.188811][ T5239] rtnetlink_rcv+0x28/0x38 [ 30.188820][ T5239] netlink_unicast+0x600/0x7f8 [ 30.188831][ T5239] netlink_sendmsg+0x648/0x948 [ 30.188843][ T5239] __sock_sendmsg+0xc8/0x17c [ 30.188854][ T5239] ____sys_sendmsg+0x3d0/0x6c8 [ 30.188868][ T5239] ___sys_sendmsg+0x198/0x224 [ 30.188880][ T5239] __sys_sendmsg+0x158/0x204 [ 30.188892][ T5239] __arm64_sys_sendmsg+0x88/0x9c [ 30.188904][ T5239] invoke_syscall+0x98/0x244 [ 30.188913][ T5239] el0_svc_common+0xec/0x23c [ 30.188921][ T5239] do_el0_svc+0x4c/0x5c [ 30.188929][ T5239] el0_svc+0x60/0x1d8 [ 30.188938][ T5239] el0t_64_sync_handler+0x44/0x104 [ 30.188946][ T5239] el0t_64_sync+0x198/0x19c [ 30.344487][ T5255] FAULT_INJECTION: forcing a failure. [ 30.344487][ T5255] name failslab, interval 1, probability 0, space 0, times 0 [ 30.344509][ T5255] CPU: 1 UID: 0 PID: 5255 Comm: syz.4.116 Not tainted syzkaller #0 PREEMPT [ 30.344520][ T5255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 30.344525][ T5255] Call trace: [ 30.344528][ T5255] show_stack+0x2c/0x3c (C) [ 30.344542][ T5255] __dump_stack+0x30/0x40 [ 30.344551][ T5255] dump_stack_lvl+0xd8/0x12c [ 30.344559][ T5255] dump_stack+0x1c/0x28 [ 30.344567][ T5255] should_fail_ex+0x418/0x58c [ 30.344578][ T5255] should_failslab+0xc4/0x120 [ 30.344587][ T5255] kmem_cache_alloc_noprof+0x94/0x5d4 [ 30.344598][ T5255] security_inode_alloc+0x40/0x304 [ 30.344610][ T5255] inode_init_always_gfp+0x704/0xb20 [ 30.344623][ T5255] alloc_inode+0x9c/0x198 [ 30.344634][ T5255] new_inode+0x20/0x50 [ 30.344642][ T5255] proc_pid_make_inode+0x30/0x148 [ 30.344653][ T5255] proc_pid_make_base_inode+0x38/0x12c [ 30.344671][ T5255] proc_task_instantiate+0x50/0x1a8 [ 30.344683][ T5255] proc_task_lookup+0x350/0x534 [ 30.344695][ T5255] __lookup_slow+0x1e4/0x2b4 [ 30.344706][ T5255] lookup_slow+0x60/0x84 [ 30.344716][ T5255] link_path_walk+0xfd0/0x1584 [ 30.344724][ T5255] path_openat+0x160/0x18f0 [ 30.344736][ T5255] do_file_open+0x1c8/0x2e8 [ 30.344747][ T5255] do_sys_openat2+0x114/0x1e8 [ 30.344756][ T5255] do_sys_open+0xb0/0xe0 [ 30.344764][ T5255] __arm64_sys_openat+0xa8/0xc4 [ 30.344772][ T5255] invoke_syscall+0x98/0x244 [ 30.344781][ T5255] el0_svc_common+0xec/0x23c [ 30.344790][ T5255] do_el0_svc+0x4c/0x5c [ 30.344798][ T5255] el0_svc+0x60/0x1d8 [ 30.344806][ T5255] el0t_64_sync_handler+0x44/0x104 [ 30.344814][ T5255] el0t_64_sync+0x198/0x19c [ 30.390366][ T5262] FAULT_INJECTION: forcing a failure. [ 30.390366][ T5262] name failslab, interval 1, probability 0, space 0, times 0 [ 30.390384][ T5262] CPU: 1 UID: 0 PID: 5262 Comm: syz.4.118 Not tainted syzkaller #0 PREEMPT [ 30.390394][ T5262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 30.390399][ T5262] Call trace: [ 30.390402][ T5262] show_stack+0x2c/0x3c (C) [ 30.390416][ T5262] __dump_stack+0x30/0x40 [ 30.390425][ T5262] dump_stack_lvl+0xd8/0x12c [ 30.390433][ T5262] dump_stack+0x1c/0x28 [ 30.390441][ T5262] should_fail_ex+0x418/0x58c [ 30.390451][ T5262] should_failslab+0xc4/0x120 [ 30.390462][ T5262] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 30.390472][ T5262] __d_alloc+0x50/0x600 [ 30.390483][ T5262] d_alloc+0x54/0x17c [ 30.390493][ T5262] lookup_one_qstr_excl+0x9c/0x200 [ 30.390502][ T5262] __start_dirop+0xb8/0xf4 [ 30.390512][ T5262] start_dirop+0x38/0x4c [ 30.390523][ T5262] simple_start_creating+0xcc/0x114 [ 30.390532][ T5262] gadgetfs_create_file+0x7c/0xd8 [ 30.390545][ T5262] gadgetfs_bind+0x3f8/0x75c [ 30.390557][ T5262] gadget_bind_driver+0x274/0x834 [ 30.390569][ T5262] really_probe+0x29c/0x800 [ 30.390582][ T5262] __driver_probe_device+0x1e0/0x350 [ 30.390594][ T5262] driver_probe_device+0x6c/0x19c [ 30.390606][ T5262] __driver_attach+0x168/0x384 [ 30.390617][ T5262] bus_for_each_dev+0x128/0x1b4 [ 30.390628][ T5262] driver_attach+0x50/0x60 [ 30.390639][ T5262] bus_add_driver+0x208/0x500 [ 30.390649][ T5262] driver_register+0x220/0x310 [ 30.390657][ T5262] usb_gadget_register_driver_owner+0xf0/0x25c [ 30.390674][ T5262] dev_config+0x91c/0xcc0 [ 30.390686][ T5262] vfs_write+0x2a4/0xa0c [ 30.390696][ T5262] ksys_write+0x12c/0x228 [ 30.390705][ T5262] __arm64_sys_write+0x84/0x98 [ 30.390714][ T5262] invoke_syscall+0x98/0x244 [ 30.390723][ T5262] el0_svc_common+0xec/0x23c [ 30.390732][ T5262] do_el0_svc+0x4c/0x5c [ 30.390739][ T5262] el0_svc+0x60/0x1d8 [ 30.390748][ T5262] el0t_64_sync_handler+0x44/0x104 [ 30.390756][ T5262] el0t_64_sync+0x198/0x19c [ 30.391592][ T5262] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 30.391606][ T5262] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 30.391786][ T5262] gadgetfs expected dummy_udc controller not usbip-vudc [ 30.391794][ T5262] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 30.392617][ T5262] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 30.774866][ T5277] syzkaller0: entered promiscuous mode [ 30.774883][ T5277] syzkaller0: entered allmulticast mode [ 30.988397][ T4750] Bluetooth: hci0: command tx timeout [ 30.988423][ T4750] Bluetooth: hci2: command tx timeout [ 30.988440][ T4750] Bluetooth: hci4: command tx timeout [ 30.988455][ T4750] Bluetooth: hci1: command tx timeout [ 31.307512][ T4743] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 32.100219][ T5290] use of bytesused == 0 is deprecated and will be removed in the future, [ 32.100230][ T5290] use the actual size instead. [ 33.336919][ T5254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 33.358956][ T13] bond0: (slave bond_slave_0): interface is now down [ 33.358974][ T13] bond0: (slave bond_slave_1): interface is now down [ 33.379999][ T13] bond0: (slave bond_slave_0): interface is now down [ 33.380015][ T13] bond0: (slave bond_slave_1): interface is now down [ 33.380646][ T13] bond0: now running without any active interface! [ 33.380787][ T5305] FAULT_INJECTION: forcing a failure. [ 33.380787][ T5305] name failslab, interval 1, probability 0, space 0, times 0 [ 33.380804][ T5305] CPU: 1 UID: 0 PID: 5305 Comm: syz.4.135 Not tainted syzkaller #0 PREEMPT [ 33.380815][ T5305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 33.380821][ T5305] Call trace: [ 33.380824][ T5305] show_stack+0x2c/0x3c (C) [ 33.380839][ T5305] __dump_stack+0x30/0x40 [ 33.380848][ T5305] dump_stack_lvl+0xd8/0x12c [ 33.380856][ T5305] dump_stack+0x1c/0x28 [ 33.380864][ T5305] should_fail_ex+0x418/0x58c [ 33.380875][ T5305] should_failslab+0xc4/0x120 [ 33.380885][ T5305] __kmalloc_cache_noprof+0x94/0x5fc [ 33.380895][ T5305] fuse_pqueue_alloc+0x58/0xe0 [ 33.380904][ T5305] fuse_dev_chan_new+0x28/0xb0 [ 33.380912][ T5305] cuse_channel_open+0x2c/0x6c0 [ 33.380923][ T5305] misc_open+0x2dc/0x338 [ 33.380935][ T5305] chrdev_open+0x398/0x3e8 [ 33.380948][ T5305] do_dentry_open+0x5c4/0xfbc [ 33.380956][ T5305] vfs_open+0x44/0x2dc [ 33.380964][ T5305] path_openat+0x1084/0x18f0 [ 33.380976][ T5305] do_file_open+0x1c8/0x2e8 [ 33.380987][ T5305] do_sys_openat2+0x114/0x1e8 [ 33.380996][ T5305] do_sys_open+0xb0/0xe0 [ 33.381003][ T5305] __arm64_sys_openat+0xa8/0xc4 [ 33.381012][ T5305] invoke_syscall+0x98/0x244 [ 33.381021][ T5305] el0_svc_common+0xec/0x23c [ 33.381029][ T5305] do_el0_svc+0x4c/0x5c [ 33.381037][ T5305] el0_svc+0x60/0x1d8 [ 33.381045][ T5305] el0t_64_sync_handler+0x44/0x104 [ 33.381053][ T5305] el0t_64_sync+0x198/0x19c [ 33.387081][ T5307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.137'. [ 33.416594][ T5307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 33.432665][ T5303] FAULT_INJECTION: forcing a failure. [ 33.432665][ T5303] name failslab, interval 1, probability 0, space 0, times 0 [ 33.432684][ T5303] CPU: 0 UID: 0 PID: 5303 Comm: syz.2.136 Not tainted syzkaller #0 PREEMPT [ 33.432696][ T5303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 33.432701][ T5303] Call trace: [ 33.432704][ T5303] show_stack+0x2c/0x3c (C) [ 33.432719][ T5303] __dump_stack+0x30/0x40 [ 33.432728][ T5303] dump_stack_lvl+0xd8/0x12c [ 33.432736][ T5303] dump_stack+0x1c/0x28 [ 33.432744][ T5303] should_fail_ex+0x418/0x58c [ 33.432755][ T5303] should_failslab+0xc4/0x120 [ 33.432765][ T5303] __kmalloc_noprof+0x108/0x6c8 [ 33.432775][ T5303] __alloc_workqueue+0x160/0x11a0 [ 33.432786][ T5303] alloc_workqueue_va+0x5c/0x138 [ 33.432797][ T5303] alloc_workqueue_noprof+0xe0/0x130 [ 33.432807][ T5303] wg_newlink+0x25c/0x59c [ 33.432820][ T5303] rtnl_newlink_create+0x294/0x6b8 [ 33.432832][ T5303] rtnl_newlink+0xfe4/0x138c [ 33.432841][ T5303] rtnetlink_rcv_msg+0x66c/0x9bc [ 33.432851][ T5303] netlink_rcv_skb+0x238/0x414 [ 33.432864][ T5303] rtnetlink_rcv+0x28/0x38 [ 33.432873][ T5303] netlink_unicast+0x600/0x7f8 [ 33.432884][ T5303] netlink_sendmsg+0x648/0x948 [ 33.432896][ T5303] __sock_sendmsg+0xc8/0x17c [ 33.432907][ T5303] ____sys_sendmsg+0x3d0/0x6c8 [ 33.432918][ T5303] ___sys_sendmsg+0x198/0x224 [ 33.432930][ T5303] __sys_sendmsg+0x158/0x204 [ 33.432941][ T5303] __arm64_sys_sendmsg+0x88/0x9c [ 33.432953][ T5303] invoke_syscall+0x98/0x244 [ 33.432962][ T5303] el0_svc_common+0xec/0x23c [ 33.432970][ T5303] do_el0_svc+0x4c/0x5c [ 33.432978][ T5303] el0_svc+0x60/0x1d8 [ 33.432987][ T5303] el0t_64_sync_handler+0x44/0x104 [ 33.432995][ T5303] el0t_64_sync+0x198/0x19c [ 33.502735][ T5317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.502916][ T5317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.872287][ T5364] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 33.875475][ T5364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'. [ 33.876529][ T5364] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 33.905208][ T5345] mmap: syz.3.154 (5345) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.960915][ T4927] rxe_eth0 speed is unknown, defaulting to 1000 [ 33.966270][ T5371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.966432][ T5371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.102442][ T5386] syzkaller0: entered promiscuous mode [ 34.102457][ T5386] syzkaller0: entered allmulticast mode [ 34.104779][ T5382] FAULT_INJECTION: forcing a failure. [ 34.104779][ T5382] name failslab, interval 1, probability 0, space 0, times 0 [ 34.104797][ T5382] CPU: 0 UID: 0 PID: 5382 Comm: syz.4.170 Not tainted syzkaller #0 PREEMPT [ 34.104810][ T5382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 34.104815][ T5382] Call trace: [ 34.104818][ T5382] show_stack+0x2c/0x3c (C) [ 34.104834][ T5382] __dump_stack+0x30/0x40 [ 34.104843][ T5382] dump_stack_lvl+0xd8/0x12c [ 34.104852][ T5382] dump_stack+0x1c/0x28 [ 34.104859][ T5382] should_fail_ex+0x418/0x58c [ 34.104871][ T5382] should_failslab+0xc4/0x120 [ 34.104881][ T5382] __kmalloc_cache_node_noprof+0x98/0x618 [ 34.104892][ T5382] alloc_cpumask_var_node+0x90/0x138 [ 34.104904][ T5382] alloc_workqueue_attrs_noprof+0x84/0x154 [ 34.104916][ T5382] __alloc_workqueue+0x16c/0x11a0 [ 34.104926][ T5382] alloc_workqueue_va+0x5c/0x138 [ 34.104936][ T5382] alloc_workqueue_noprof+0xe0/0x130 [ 34.104946][ T5382] wg_newlink+0x25c/0x59c [ 34.104959][ T5382] rtnl_newlink_create+0x294/0x6b8 [ 34.104971][ T5382] rtnl_newlink+0xfe4/0x138c [ 34.104981][ T5382] rtnetlink_rcv_msg+0x66c/0x9bc [ 34.104991][ T5382] netlink_rcv_skb+0x238/0x414 [ 34.105003][ T5382] rtnetlink_rcv+0x28/0x38 [ 34.105013][ T5382] netlink_unicast+0x600/0x7f8 [ 34.105024][ T5382] netlink_sendmsg+0x648/0x948 [ 34.105035][ T5382] __sock_sendmsg+0xc8/0x17c [ 34.105046][ T5382] ____sys_sendmsg+0x3d0/0x6c8 [ 34.105058][ T5382] ___sys_sendmsg+0x198/0x224 [ 34.105070][ T5382] __sys_sendmsg+0x158/0x204 [ 34.105081][ T5382] __arm64_sys_sendmsg+0x88/0x9c [ 34.105093][ T5382] invoke_syscall+0x98/0x244 [ 34.105102][ T5382] el0_svc_common+0xec/0x23c [ 34.105110][ T5382] do_el0_svc+0x4c/0x5c [ 34.105118][ T5382] el0_svc+0x60/0x1d8 [ 34.105126][ T5382] el0t_64_sync_handler+0x44/0x104 [ 34.105134][ T5382] el0t_64_sync+0x198/0x19c [ 34.105144][ T5382] => alloc_cpumask_var: failed! [ 34.105148][ T5382] CPU: 0 UID: 0 PID: 5382 Comm: syz.4.170 Not tainted syzkaller #0 PREEMPT [ 34.105156][ T5382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 34.105160][ T5382] Call trace: [ 34.105163][ T5382] show_stack+0x2c/0x3c (C) [ 34.105171][ T5382] __dump_stack+0x30/0x40 [ 34.105179][ T5382] dump_stack_lvl+0xd8/0x12c [ 34.105187][ T5382] dump_stack+0x1c/0x28 [ 34.105195][ T5382] alloc_cpumask_var_node+0xfc/0x138 [ 34.105206][ T5382] alloc_workqueue_attrs_noprof+0x84/0x154 [ 34.105217][ T5382] __alloc_workqueue+0x16c/0x11a0 [ 34.105227][ T5382] alloc_workqueue_va+0x5c/0x138 [ 34.105237][ T5382] alloc_workqueue_noprof+0xe0/0x130 [ 34.105247][ T5382] wg_newlink+0x25c/0x59c [ 34.105259][ T5382] rtnl_newlink_create+0x294/0x6b8 [ 34.105270][ T5382] rtnl_newlink+0xfe4/0x138c [ 34.105279][ T5382] rtnetlink_rcv_msg+0x66c/0x9bc [ 34.105289][ T5382] netlink_rcv_skb+0x238/0x414 [ 34.105301][ T5382] rtnetlink_rcv+0x28/0x38 [ 34.105310][ T5382] netlink_unicast+0x600/0x7f8 [ 34.105321][ T5382] netlink_sendmsg+0x648/0x948 [ 34.105333][ T5382] __sock_sendmsg+0xc8/0x17c [ 34.105343][ T5382] ____sys_sendmsg+0x3d0/0x6c8 [ 34.105355][ T5382] ___sys_sendmsg+0x198/0x224 [ 34.105366][ T5382] __sys_sendmsg+0x158/0x204 [ 34.105381][ T5382] __arm64_sys_sendmsg+0x88/0x9c [ 34.105393][ T5382] invoke_syscall+0x98/0x244 [ 34.105402][ T5382] el0_svc_common+0xec/0x23c [ 34.105410][ T5382] do_el0_svc+0x4c/0x5c [ 34.105418][ T5382] el0_svc+0x60/0x1d8 [ 34.105426][ T5382] el0t_64_sync_handler+0x44/0x104 [ 34.105434][ T5382] el0t_64_sync+0x198/0x19c [ 36.099213][ T5424] bridge0: port 1(syz_tun) entered blocking state [ 36.099284][ T5424] bridge0: port 1(syz_tun) entered disabled state [ 36.099380][ T5424] syz_tun: entered allmulticast mode [ 36.099934][ T5424] FAULT_INJECTION: forcing a failure. [ 36.099934][ T5424] name failslab, interval 1, probability 0, space 0, times 0 [ 36.099948][ T5424] CPU: 1 UID: 0 PID: 5424 Comm: syz.4.183 Not tainted syzkaller #0 PREEMPT [ 36.099959][ T5424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 36.099965][ T5424] Call trace: [ 36.099968][ T5424] show_stack+0x2c/0x3c (C) [ 36.099983][ T5424] __dump_stack+0x30/0x40 [ 36.099992][ T5424] dump_stack_lvl+0xd8/0x12c [ 36.100000][ T5424] dump_stack+0x1c/0x28 [ 36.100008][ T5424] should_fail_ex+0x418/0x58c [ 36.100019][ T5424] should_failslab+0xc4/0x120 [ 36.100029][ T5424] __kmalloc_cache_noprof+0x94/0x5fc [ 36.100039][ T5424] netdevice_event+0x314/0x7a8 [ 36.100050][ T5424] notifier_call_chain+0x1a4/0x4cc [ 36.100063][ T5424] raw_notifier_call_chain+0x3c/0x50 [ 36.100071][ T5424] call_netdevice_notifiers_info+0xb8/0x120 [ 36.100081][ T5424] __netdev_upper_dev_link+0x364/0x4d0 [ 36.100094][ T5424] netdev_master_upper_dev_link+0xc0/0x110 [ 36.100106][ T5424] br_add_if+0x404/0xc80 [ 36.100116][ T5424] br_add_slave+0x34/0x48 [ 36.100124][ T5424] do_set_master+0x400/0x56c [ 36.100135][ T5424] do_setlink+0xca8/0x31e8 [ 36.100145][ T5424] rtnl_setlink+0x3cc/0x550 [ 36.100155][ T5424] rtnetlink_rcv_msg+0x66c/0x9bc [ 36.100165][ T5424] netlink_rcv_skb+0x238/0x414 [ 36.100176][ T5424] rtnetlink_rcv+0x28/0x38 [ 36.100186][ T5424] netlink_unicast+0x600/0x7f8 [ 36.100196][ T5424] netlink_sendmsg+0x648/0x948 [ 36.100208][ T5424] __sock_sendmsg+0xc8/0x17c [ 36.100219][ T5424] ____sys_sendmsg+0x3d0/0x6c8 [ 36.100230][ T5424] ___sys_sendmsg+0x198/0x224 [ 36.100241][ T5424] __sys_sendmsg+0x158/0x204 [ 36.100252][ T5424] __arm64_sys_sendmsg+0x88/0x9c [ 36.100264][ T5424] invoke_syscall+0x98/0x244 [ 36.100273][ T5424] el0_svc_common+0xec/0x23c [ 36.100281][ T5424] do_el0_svc+0x4c/0x5c [ 36.100289][ T5424] el0_svc+0x60/0x1d8 [ 36.100297][ T5424] el0t_64_sync_handler+0x44/0x104 [ 36.100305][ T5424] el0t_64_sync+0x198/0x19c [ 36.100332][ T5424] syz_tun: entered promiscuous mode [ 37.501177][ T5398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 37.600524][ T5439] FAULT_INJECTION: forcing a failure. [ 37.600524][ T5439] name failslab, interval 1, probability 0, space 0, times 0 [ 37.600545][ T5439] CPU: 0 UID: 0 PID: 5439 Comm: syz.4.188 Not tainted syzkaller #0 PREEMPT [ 37.600555][ T5439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 37.600561][ T5439] Call trace: [ 37.600564][ T5439] show_stack+0x2c/0x3c (C) [ 37.600579][ T5439] __dump_stack+0x30/0x40 [ 37.600588][ T5439] dump_stack_lvl+0xd8/0x12c [ 37.600597][ T5439] dump_stack+0x1c/0x28 [ 37.600604][ T5439] should_fail_ex+0x418/0x58c [ 37.600615][ T5439] should_failslab+0xc4/0x120 [ 37.600625][ T5439] __kmalloc_noprof+0x108/0x6c8 [ 37.600636][ T5439] mpi_resize+0x84/0x1e0 [ 37.600654][ T5439] mpi_sub_ui+0x7c/0x7b8 [ 37.600666][ T5439] rsa_check_payload+0x60/0xe4 [ 37.600677][ T5439] rsa_enc+0x150/0x30c [ 37.600687][ T5439] crypto_akcipher_sync_encrypt+0x158/0x1dc [ 37.600698][ T5439] software_key_eds_op+0x5ac/0x8e4 [ 37.600711][ T5439] asymmetric_key_eds_op+0x108/0x128 [ 37.600723][ T5439] keyctl_pkey_e_d_s+0x238/0x3ac [ 37.600733][ T5439] __arm64_sys_keyctl+0x3ac/0x3e8 [ 37.600745][ T5439] invoke_syscall+0x98/0x244 [ 37.600754][ T5439] el0_svc_common+0xec/0x23c [ 37.600763][ T5439] do_el0_svc+0x4c/0x5c [ 37.600771][ T5439] el0_svc+0x60/0x1d8 [ 37.600779][ T5439] el0t_64_sync_handler+0x44/0x104 [ 37.600787][ T5439] el0t_64_sync+0x198/0x19c [ 37.649109][ T5443] syzkaller0: entered promiscuous mode [ 37.649125][ T5443] syzkaller0: entered allmulticast mode [ 37.694490][ T5441] device-mapper: table: 248:7: crypt: Integrity profile not supported. (-EINVAL) [ 37.694510][ T5441] device-mapper: ioctl: error adding target to table [ 37.806846][ T5465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.807039][ T5465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.016813][ T5465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.016987][ T5465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.422275][ T5505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.425695][ T5505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.448273][ T5502] FAULT_INJECTION: forcing a failure. [ 38.448273][ T5502] name failslab, interval 1, probability 0, space 0, times 0 [ 38.448291][ T5502] CPU: 1 UID: 0 PID: 5502 Comm: syz.4.207 Not tainted syzkaller #0 PREEMPT [ 38.448301][ T5502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.448306][ T5502] Call trace: [ 38.448309][ T5502] show_stack+0x2c/0x3c (C) [ 38.448325][ T5502] __dump_stack+0x30/0x40 [ 38.448333][ T5502] dump_stack_lvl+0xd8/0x12c [ 38.448341][ T5502] dump_stack+0x1c/0x28 [ 38.448348][ T5502] should_fail_ex+0x418/0x58c [ 38.448357][ T5502] should_failslab+0xc4/0x120 [ 38.448366][ T5502] kmem_cache_alloc_node_noprof+0x98/0x604 [ 38.448376][ T5502] alloc_vmap_area+0x210/0x12ec [ 38.448386][ T5502] __get_vm_area_node+0x210/0x32c [ 38.448396][ T5502] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 38.448406][ T5502] __vmalloc_node_noprof+0xec/0x14c [ 38.448415][ T5502] vzalloc_noprof+0x3c/0x4c [ 38.448425][ T5502] vc_uniscr_alloc+0x38/0xcc [ 38.448433][ T5502] vc_uniscr_check+0x158/0x4b0 [ 38.448440][ T5502] vc_get_glyph+0x110/0x1a8 [ 38.448448][ T5502] do_con_write+0x840/0x426c [ 38.448456][ T5502] con_write+0x34/0x58 [ 38.448464][ T5502] n_tty_write+0x994/0xd90 [ 38.448472][ T5502] file_tty_write+0x3dc/0x66c [ 38.448479][ T5502] tty_write+0x44/0x54 [ 38.448486][ T5502] vfs_write+0x51c/0xa0c [ 38.448494][ T5502] ksys_write+0x12c/0x228 [ 38.448502][ T5502] __arm64_sys_write+0x84/0x98 [ 38.448510][ T5502] invoke_syscall+0x98/0x244 [ 38.448518][ T5502] el0_svc_common+0xec/0x23c [ 38.448525][ T5502] do_el0_svc+0x4c/0x5c [ 38.448532][ T5502] el0_svc+0x60/0x1d8 [ 38.448540][ T5502] el0t_64_sync_handler+0x44/0x104 [ 38.448548][ T5502] el0t_64_sync+0x198/0x19c [ 38.448614][ T5502] syz.4.207: vmalloc error: size 28416, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 38.448678][ T5502] CPU: 1 UID: 0 PID: 5502 Comm: syz.4.207 Not tainted syzkaller #0 PREEMPT [ 38.448686][ T5502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.448690][ T5502] Call trace: [ 38.448692][ T5502] show_stack+0x2c/0x3c (C) [ 38.448700][ T5502] __dump_stack+0x30/0x40 [ 38.448708][ T5502] dump_stack_lvl+0xd8/0x12c [ 38.448715][ T5502] dump_stack+0x1c/0x28 [ 38.448722][ T5502] warn_alloc+0x1c4/0x1d8 [ 38.448731][ T5502] __vmalloc_node_range_noprof+0x2c4/0xe9c [ 38.448742][ T5502] __vmalloc_node_noprof+0xec/0x14c [ 38.448752][ T5502] vzalloc_noprof+0x3c/0x4c [ 38.448761][ T5502] vc_uniscr_alloc+0x38/0xcc [ 38.448769][ T5502] vc_uniscr_check+0x158/0x4b0 [ 38.448776][ T5502] vc_get_glyph+0x110/0x1a8 [ 38.448784][ T5502] do_con_write+0x840/0x426c [ 38.448793][ T5502] con_write+0x34/0x58 [ 38.448800][ T5502] n_tty_write+0x994/0xd90 [ 38.448808][ T5502] file_tty_write+0x3dc/0x66c [ 38.448815][ T5502] tty_write+0x44/0x54 [ 38.448822][ T5502] vfs_write+0x51c/0xa0c [ 38.448830][ T5502] ksys_write+0x12c/0x228 [ 38.448838][ T5502] __arm64_sys_write+0x84/0x98 [ 38.448846][ T5502] invoke_syscall+0x98/0x244 [ 38.448854][ T5502] el0_svc_common+0xec/0x23c [ 38.448861][ T5502] do_el0_svc+0x4c/0x5c [ 38.448869][ T5502] el0_svc+0x60/0x1d8 [ 38.448876][ T5502] el0t_64_sync_handler+0x44/0x104 [ 38.448883][ T5502] el0t_64_sync+0x198/0x19c [ 38.448891][ T5502] Mem-Info: [ 38.448896][ T5502] active_anon:22 inactive_anon:5124 isolated_anon:0 [ 38.448896][ T5502] active_file:2405 inactive_file:4575 isolated_file:0 [ 38.448896][ T5502] unevictable:776 dirty:1830 writeback:0 [ 38.448896][ T5502] slab_reclaimable:8432 slab_unreclaimable:93665 [ 38.448896][ T5502] mapped:29268 shmem:943 pagetables:1026 [ 38.448896][ T5502] sec_pagetables:0 bounce:0 [ 38.448896][ T5502] kernel_misc_reclaimable:0 [ 38.448896][ T5502] free:1476963 free_pcp:16096 free_cma:7616 [ 38.448916][ T5502] Node 0 active_anon:88kB inactive_anon:20496kB active_file:9620kB inactive_file:18300kB unevictable:3104kB isolated(anon):0kB isolated(file):0kB mapped:117072kB dirty:7320kB writeback:0kB shmem:3772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9324kB pagetables:4104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 38.448936][ T5502] Node 0 DMA free:3077888kB boost:0kB min:20404kB low:25504kB high:30604kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 38.448959][ T5502] lowmem_reserve[]: 0 0 3636 3636 3636 [ 38.448977][ T5502] Node 0 Normal free:2829964kB boost:0kB min:24648kB low:30808kB high:36968kB reserved_highatomic:0kB free_highatomic:0kB active_anon:88kB inactive_anon:20496kB active_file:9620kB inactive_file:18300kB unevictable:3104kB writepending:7320kB zspages:0kB present:5242880kB managed:3724172kB mlocked:32kB bounce:0kB free_pcp:64384kB local_pcp:35736kB free_cma:0kB [ 38.449000][ T5502] lowmem_reserve[]: 0 0 0 0 0 [ 38.449017][ T5502] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 38.449078][ T5502] Node 0 Normal: 1790*4kB (UME) 434*8kB (UME) 161*16kB (UME) 199*32kB (UM) 17*64kB (UM) 4*128kB (UM) 0*256kB 2*512kB (ME) 2*1024kB (ME) 4*2048kB (UME) 683*4096kB (M) = 2830008kB [ 38.449152][ T5502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 38.449159][ T5502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 38.449165][ T5502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 38.449171][ T5502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 38.449178][ T5502] 7919 total pagecache pages [ 38.449181][ T5502] 0 pages in swap cache [ 38.449184][ T5502] Free swap = 124996kB [ 38.449188][ T5502] Total swap = 124996kB [ 38.449191][ T5502] 2097152 pages RAM [ 38.449195][ T5502] 0 pages HighMem/MovableOnly [ 38.449198][ T5502] 396061 pages reserved [ 38.449201][ T5502] 8192 pages cma reserved [ 38.449205][ T5502] 0 pages hwpoisoned [ 38.615085][ T5509] syzkaller0: entered promiscuous mode [ 38.615101][ T5509] syzkaller0: entered allmulticast mode [ 39.668948][ T5552] could not allocate digest TFM handle xcbc(cast6) [ 39.707087][ T5559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.708512][ T5559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.739689][ T10] cfg80211: failed to load regulatory.db [ 40.264111][ T5571] syz.2.231 uses obsolete (PF_INET,SOCK_PACKET) [ 40.395652][ T5579] syzkaller0: entered promiscuous mode [ 40.395676][ T5579] syzkaller0: entered allmulticast mode [ 40.543634][ C1] vcan0: j1939_tp_rxtimer: 0x00000000d1a02b13: rx timeout, send abort [ 40.544066][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000d1a02b13: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 40.546879][ C1] vcan0: j1939_tp_rxtimer: 0x00000000f8968328: rx timeout, send abort [ 40.546934][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000f8968328: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 41.026614][ T5624] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 41.036275][ T5626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.040722][ T5626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.066186][ T5628] syzkaller1: entered promiscuous mode [ 41.066401][ T5628] syzkaller1: entered allmulticast mode [ 41.123835][ T5630] veth1_macvtap: left promiscuous mode [ 41.161361][ T5630] macsec0: entered promiscuous mode [ 41.226748][ T5636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.230621][ T5636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.376951][ T4424] veth1_macvtap: entered promiscuous mode [ 41.413030][ T5655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.416654][ T5655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.786531][ T5687] ip_tables: iptables: counters copy to user failed while replacing table [ 41.878616][ T5691] Zero length message leads to an empty skb [ 42.090459][ T5728] IPVS: Unknown mcast interface: wg2 [ 42.202414][ T5734] FAULT_INJECTION: forcing a failure. [ 42.202414][ T5734] name failslab, interval 1, probability 0, space 0, times 0 [ 42.202436][ T5734] CPU: 0 UID: 0 PID: 5734 Comm: syz.3.273 Tainted: G L syzkaller #0 PREEMPT [ 42.202448][ T5734] Tainted: [L]=SOFTLOCKUP [ 42.202451][ T5734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 42.202457][ T5734] Call trace: [ 42.202460][ T5734] show_stack+0x2c/0x3c (C) [ 42.202475][ T5734] __dump_stack+0x30/0x40 [ 42.202484][ T5734] dump_stack_lvl+0xd8/0x12c [ 42.202492][ T5734] dump_stack+0x1c/0x28 [ 42.202500][ T5734] should_fail_ex+0x418/0x58c [ 42.202511][ T5734] should_failslab+0xc4/0x120 [ 42.202521][ T5734] kmem_cache_alloc_noprof+0x94/0x5d4 [ 42.202532][ T5734] dup_fd+0x68/0x848 [ 42.202542][ T5734] __arm64_sys_close_range+0x194/0x808 [ 42.202553][ T5734] invoke_syscall+0x98/0x244 [ 42.202562][ T5734] el0_svc_common+0xec/0x23c [ 42.202570][ T5734] do_el0_svc+0x4c/0x5c [ 42.202578][ T5734] el0_svc+0x60/0x1d8 [ 42.202587][ T5734] el0t_64_sync_handler+0x44/0x104 [ 42.202599][ T5734] el0t_64_sync+0x198/0x19c [ 42.419142][ T5751] syzkaller0: entered promiscuous mode [ 42.419158][ T5751] syzkaller0: entered allmulticast mode [ 42.575061][ T5760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.575562][ T5760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.614060][ T5764] netlink: 196 bytes leftover after parsing attributes in process `syz.3.287'. [ 42.761074][ T4743] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 43.089346][ T5791] netlink: 16 bytes leftover after parsing attributes in process `syz.2.297'. [ 43.119932][ T5796] nftables ruleset with unbound chain [ 43.146989][ T5800] syzkaller0: entered promiscuous mode [ 43.147006][ T5800] syzkaller0: entered allmulticast mode [ 43.289083][ T5814] hub 1-0:1.0: USB hub found [ 43.289198][ T5814] hub 1-0:1.0: 1 port detected [ 43.362128][ T5826] netlink: 16 bytes leftover after parsing attributes in process `syz.2.310'. [ 43.454742][ T5838] ip_tables: iptables: counters copy to user failed while replacing table [ 43.573090][ T5853] FAULT_INJECTION: forcing a failure. [ 43.573090][ T5853] name failslab, interval 1, probability 0, space 0, times 0 [ 43.573111][ T5853] CPU: 0 UID: 0 PID: 5853 Comm: syz.2.320 Tainted: G L syzkaller #0 PREEMPT [ 43.573124][ T5853] Tainted: [L]=SOFTLOCKUP [ 43.573127][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 43.573132][ T5853] Call trace: [ 43.573135][ T5853] show_stack+0x2c/0x3c (C) [ 43.573151][ T5853] __dump_stack+0x30/0x40 [ 43.573160][ T5853] dump_stack_lvl+0xd8/0x12c [ 43.573168][ T5853] dump_stack+0x1c/0x28 [ 43.573176][ T5853] should_fail_ex+0x418/0x58c [ 43.573187][ T5853] should_failslab+0xc4/0x120 [ 43.573197][ T5853] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 43.573209][ T5853] kstrdup+0x50/0x104 [ 43.573219][ T5853] kstrdup_const+0x54/0x6c [ 43.573228][ T5853] __kernfs_new_node+0xb0/0x7d8 [ 43.573237][ T5853] kernfs_new_node+0xe8/0x130 [ 43.573244][ T5853] __kernfs_create_file+0x60/0x2e0 [ 43.573253][ T5853] cgroup_addrm_files+0x694/0xaf8 [ 43.573263][ T5853] css_populate_dir+0x30c/0x348 [ 43.573271][ T5853] cgroup_mkdir+0x744/0xbac [ 43.573280][ T5853] kernfs_iop_mkdir+0xe0/0x128 [ 43.573288][ T5853] vfs_mkdir+0x2e4/0x46c [ 43.573300][ T5853] filename_mkdirat+0x228/0x3f4 [ 43.573312][ T5853] __arm64_sys_mkdirat+0x9c/0xc0 [ 43.573324][ T5853] invoke_syscall+0x98/0x244 [ 43.573333][ T5853] el0_svc_common+0xec/0x23c [ 43.573341][ T5853] do_el0_svc+0x4c/0x5c [ 43.573349][ T5853] el0_svc+0x60/0x1d8 [ 43.573358][ T5853] el0t_64_sync_handler+0x44/0x104 [ 43.573366][ T5853] el0t_64_sync+0x198/0x19c [ 43.573376][ T5853] cgroup: cgroup_addrm_files: failed to add cgroup.pressure, err=-12 [ 43.663943][ T5858] capability: warning: `syz.4.322' uses 32-bit capabilities (legacy support in use) [ 43.702656][ T5862] 9pnet_virtio: no channels available for device syz [ 43.736725][ T5866] Bluetooth: MGMT ver 1.23 [ 43.737359][ T5864] ip_tables: iptables: counters copy to user failed while replacing table [ 44.000849][ T5899] tipc: Started in network mode [ 44.000871][ T5899] tipc: Node identity ac14140f, cluster identity 4711 [ 44.001260][ T5899] tipc: New replicast peer: 255.255.255.255 [ 44.004139][ T5899] tipc: Enabled bearer , priority 10 [ 44.048460][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 44.048577][ T5903] veth0_macvtap: Device is already in use. [ 44.267634][ T4743] Bluetooth: hci0: command tx timeout [ 44.316102][ T4743] Bluetooth: hci1: unexpected subevent 0x10 length: 5 > 2 [ 45.023851][ T6005] FAULT_INJECTION: forcing a failure. [ 45.023851][ T6005] name failslab, interval 1, probability 0, space 0, times 0 [ 45.023874][ T6005] CPU: 0 UID: 0 PID: 6005 Comm: syz.1.368 Tainted: G L syzkaller #0 PREEMPT [ 45.023887][ T6005] Tainted: [L]=SOFTLOCKUP [ 45.023891][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 45.023896][ T6005] Call trace: [ 45.023899][ T6005] show_stack+0x2c/0x3c (C) [ 45.023913][ T6005] __dump_stack+0x30/0x40 [ 45.023922][ T6005] dump_stack_lvl+0xd8/0x12c [ 45.023931][ T6005] dump_stack+0x1c/0x28 [ 45.023938][ T6005] should_fail_ex+0x418/0x58c [ 45.023950][ T6005] should_failslab+0xc4/0x120 [ 45.023960][ T6005] __kmalloc_cache_noprof+0x94/0x5fc [ 45.023972][ T6005] bpf_int_jit_compile+0x1bc/0x1184 [ 45.023985][ T6005] bpf_jit_subprogs+0x182c/0x395c [ 45.023996][ T6005] bpf_fixup_call_args+0x288/0x308 [ 45.024007][ T6005] bpf_check+0x136c/0x2414 [ 45.024016][ T6005] bpf_prog_load+0xf4c/0x1554 [ 45.024028][ T6005] __sys_bpf+0x7d4/0x82c [ 45.024039][ T6005] __arm64_sys_bpf+0xd0/0xec [ 45.024050][ T6005] invoke_syscall+0x98/0x244 [ 45.024059][ T6005] el0_svc_common+0xec/0x23c [ 45.024067][ T6005] do_el0_svc+0x4c/0x5c [ 45.024075][ T6005] el0_svc+0x60/0x1d8 [ 45.024084][ T6005] el0t_64_sync_handler+0x44/0x104 [ 45.024092][ T6005] el0t_64_sync+0x198/0x19c [ 45.102450][ T6011] tc action pedit offset must be on 32 bit boundaries [ 45.118237][ T9] tipc: Node number set to 2886997007 [ 45.504588][ T6062] FAULT_INJECTION: forcing a failure. [ 45.504588][ T6062] name failslab, interval 1, probability 0, space 0, times 0 [ 45.504612][ T6062] CPU: 0 UID: 0 PID: 6062 Comm: syz.4.384 Tainted: G L syzkaller #0 PREEMPT [ 45.504628][ T6062] Tainted: [L]=SOFTLOCKUP [ 45.504632][ T6062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 45.504637][ T6062] Call trace: [ 45.504640][ T6062] show_stack+0x2c/0x3c (C) [ 45.504661][ T6062] __dump_stack+0x30/0x40 [ 45.504671][ T6062] dump_stack_lvl+0xd8/0x12c [ 45.504681][ T6062] dump_stack+0x1c/0x28 [ 45.504690][ T6062] should_fail_ex+0x418/0x58c [ 45.504701][ T6062] should_failslab+0xc4/0x120 [ 45.504712][ T6062] kmem_cache_alloc_noprof+0x94/0x5d4 [ 45.504722][ T6062] dup_fd+0x68/0x848 [ 45.504732][ T6062] __arm64_sys_close_range+0x194/0x808 [ 45.504743][ T6062] invoke_syscall+0x98/0x244 [ 45.504751][ T6062] el0_svc_common+0xec/0x23c [ 45.504760][ T6062] do_el0_svc+0x4c/0x5c [ 45.504768][ T6062] el0_svc+0x60/0x1d8 [ 45.504776][ T6062] el0t_64_sync_handler+0x44/0x104 [ 45.504784][ T6062] el0t_64_sync+0x198/0x19c [ 45.607151][ T6069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.607319][ T6069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.333177][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.397'. [ 46.649673][ T6093] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.718304][ T6093] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.821762][ T6093] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.830778][ T4743] Bluetooth: Wrong link type (-71) [ 46.905367][ T6093] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.038304][ T1195] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.038333][ T1195] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.047534][ T5604] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.057601][ T1195] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.844053][ T6176] ======================================================= [ 47.844053][ T6176] WARNING: The mand mount option has been deprecated and [ 47.844053][ T6176] and is ignored by this kernel. Remove the mand [ 47.844053][ T6176] option from the mount to silence this warning. [ 47.844053][ T6176] ======================================================= [ 47.848591][ T6176] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 48.166251][ T26] kernel read not supported for file /video9 (pid: 26 comm: kworker/1:1) [ 48.172896][ T6182] binder: 6179:6182 ioctl 8108551b 20000540 returned -22 [ 48.174156][ T6182] binder: 6179:6182 tried to acquire reference to desc 0, got 1 instead [ 48.182600][ T6182] binder: 6179:6182 got transaction with unaligned buffers size, 1023 [ 48.182684][ T6182] binder: 6179:6182 transaction call to 6179:0 failed 5/29201/-22, code 0 size 104-24 line 3465 [ 48.187136][ T6182] loop2: detected capacity change from 0 to 1024 [ 48.264866][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 48.264981][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.428'. [ 48.283025][ T6184] macvlan2: entered allmulticast mode [ 48.283058][ T6184] ip6gretap0: entered allmulticast mode [ 48.457889][ T6182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 48.546676][ T4741] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 48.549918][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 48.773167][ T6200] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 49.173368][ T4740] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 49.174034][ T4740] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 49.175154][ T4740] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 49.175585][ T4740] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 49.175911][ T4740] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 49.300206][ T6208] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.706555][ T5604] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.714612][ T6245] FAULT_INJECTION: forcing a failure. [ 49.714612][ T6245] name failslab, interval 1, probability 0, space 0, times 0 [ 49.714631][ T6245] CPU: 0 UID: 0 PID: 6245 Comm: syz.1.441 Tainted: G L syzkaller #0 PREEMPT [ 49.714643][ T6245] Tainted: [L]=SOFTLOCKUP [ 49.714653][ T6245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 49.714659][ T6245] Call trace: [ 49.714662][ T6245] show_stack+0x2c/0x3c (C) [ 49.714679][ T6245] __dump_stack+0x30/0x40 [ 49.714689][ T6245] dump_stack_lvl+0xd8/0x12c [ 49.714698][ T6245] dump_stack+0x1c/0x28 [ 49.714706][ T6245] should_fail_ex+0x418/0x58c [ 49.714717][ T6245] should_failslab+0xc4/0x120 [ 49.714727][ T6245] kmem_cache_alloc_noprof+0x94/0x5d4 [ 49.714741][ T6245] __kernfs_new_node+0xf0/0x7d8 [ 49.714750][ T6245] kernfs_new_node+0xe8/0x130 [ 49.714758][ T6245] __kernfs_create_file+0x60/0x2e0 [ 49.714767][ T6245] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 49.714776][ T6245] internal_create_group+0x550/0xb30 [ 49.714786][ T6245] internal_create_groups+0x64/0x138 [ 49.714796][ T6245] sysfs_create_groups+0x2c/0x3c [ 49.714806][ T6245] device_add_attrs+0xdc/0x4e4 [ 49.714816][ T6245] device_add+0x420/0x9e0 [ 49.714824][ T6245] netdev_register_kobject+0x184/0x328 [ 49.714838][ T6245] register_netdevice+0xd74/0x14c0 [ 49.714847][ T6245] wg_newlink+0x330/0x59c [ 49.714860][ T6245] rtnl_newlink_create+0x294/0x6b8 [ 49.714871][ T6245] rtnl_newlink+0xfe4/0x138c [ 49.714881][ T6245] rtnetlink_rcv_msg+0x66c/0x9bc [ 49.714891][ T6245] netlink_rcv_skb+0x238/0x414 [ 49.714903][ T6245] rtnetlink_rcv+0x28/0x38 [ 49.714913][ T6245] netlink_unicast+0x600/0x7f8 [ 49.714923][ T6245] netlink_sendmsg+0x648/0x948 [ 49.714935][ T6245] __sock_sendmsg+0xc8/0x17c [ 49.714946][ T6245] ____sys_sendmsg+0x3d0/0x6c8 [ 49.714958][ T6245] ___sys_sendmsg+0x198/0x224 [ 49.714969][ T6245] __sys_sendmsg+0x158/0x204 [ 49.714981][ T6245] __arm64_sys_sendmsg+0x88/0x9c [ 49.714992][ T6245] invoke_syscall+0x98/0x244 [ 49.715001][ T6245] el0_svc_common+0xec/0x23c [ 49.715009][ T6245] do_el0_svc+0x4c/0x5c [ 49.715017][ T6245] el0_svc+0x60/0x1d8 [ 49.715026][ T6245] el0t_64_sync_handler+0x44/0x104 [ 49.715034][ T6245] el0t_64_sync+0x198/0x19c [ 49.729004][ T6208] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.729063][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.729112][ T6208] bridge_slave_0: entered allmulticast mode [ 49.729686][ T6208] bridge_slave_0: entered promiscuous mode [ 49.730605][ T6208] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.730737][ T6208] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.730785][ T6208] bridge_slave_1: entered allmulticast mode [ 49.731158][ T6208] bridge_slave_1: entered promiscuous mode [ 49.739282][ T6208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.740262][ T6208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.747719][ T6208] team0: Port device team_slave_0 added [ 49.748515][ T6208] team0: Port device team_slave_1 added [ 49.755723][ T6208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.755731][ T6208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.755742][ T6208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.756987][ T6208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.756994][ T6208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.757007][ T6208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.772073][ T6208] hsr_slave_0: entered promiscuous mode [ 49.772432][ T6208] hsr_slave_1: entered promiscuous mode [ 49.772619][ T6208] debugfs: 'hsr0' already exists in 'hsr' [ 49.772628][ T6208] Cannot create hsr debugfs directory [ 49.867185][ T5604] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.874280][ T6208] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 49.875663][ T6208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.876101][ T6208] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 49.876983][ T6208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.886197][ T6208] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 49.891841][ T6208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.892181][ T6208] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 49.895052][ T6208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.926339][ T6208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.934904][ T5604] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.944980][ T6208] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.948057][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.948084][ T5588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.955339][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.955368][ T5586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.980199][ T6269] tipc: Enabled bearer , priority 0 [ 49.982091][ T6269] capability: warning: `syz.1.446' uses deprecated v2 capabilities in a way that may be insecure [ 49.982305][ T6269] netlink: 56 bytes leftover after parsing attributes in process `syz.1.446'. [ 49.989408][ T6269] device-mapper: table: 248:4: snapshot: Cannot get origin device (-ENOENT) [ 49.989419][ T6269] device-mapper: ioctl: error adding target to table [ 50.004074][ T5604] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.007081][ T6269] tipc: Disabling bearer [ 50.065682][ T6278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.065870][ T6278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.134923][ T5604] bridge_slave_1: left allmulticast mode [ 50.134950][ T5604] bridge_slave_1: left promiscuous mode [ 50.135377][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.144487][ T5604] bridge_slave_0: left allmulticast mode [ 50.144501][ T5604] bridge_slave_0: left promiscuous mode [ 50.145062][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.225748][ T5604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.249054][ T5604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.279374][ T5604] bond0 (unregistering): Released all slaves [ 50.579836][ T6208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.741937][ T4424] 8021q: adding VLAN 0 to HW filter on device eth0 [ 50.856152][ T6208] veth0_vlan: entered promiscuous mode [ 50.873297][ T6208] veth1_vlan: entered promiscuous mode [ 50.896566][ T6208] veth0_macvtap: entered promiscuous mode [ 50.911522][ T6353] FAULT_INJECTION: forcing a failure. [ 50.911522][ T6353] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.911543][ T6353] CPU: 1 UID: 0 PID: 6353 Comm: syz.2.458 Tainted: G L syzkaller #0 PREEMPT [ 50.911558][ T6353] Tainted: [L]=SOFTLOCKUP [ 50.911562][ T6353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 50.911567][ T6353] Call trace: [ 50.911570][ T6353] show_stack+0x2c/0x3c (C) [ 50.911585][ T6353] __dump_stack+0x30/0x40 [ 50.911593][ T6353] dump_stack_lvl+0xd8/0x12c [ 50.911601][ T6353] dump_stack+0x1c/0x28 [ 50.911608][ T6353] should_fail_ex+0x418/0x58c [ 50.911617][ T6353] should_fail+0x14/0x24 [ 50.911625][ T6353] should_fail_usercopy+0x20/0x30 [ 50.911634][ T6353] _copy_from_iter+0x188/0x1064 [ 50.911644][ T6353] copy_page_from_iter+0x220/0x2e8 [ 50.911653][ T6353] tun_get_user+0x1e24/0x37fc [ 50.911668][ T6353] tun_chr_write_iter+0xfc/0x168 [ 50.911676][ T6353] vfs_write+0x51c/0xa0c [ 50.911685][ T6353] ksys_write+0x12c/0x228 [ 50.911693][ T6353] __arm64_sys_write+0x84/0x98 [ 50.911702][ T6353] invoke_syscall+0x98/0x244 [ 50.911710][ T6353] el0_svc_common+0xec/0x23c [ 50.911717][ T6353] do_el0_svc+0x4c/0x5c [ 50.911724][ T6353] el0_svc+0x60/0x1d8 [ 50.911732][ T6353] el0t_64_sync_handler+0x44/0x104 [ 50.911739][ T6353] el0t_64_sync+0x198/0x19c [ 50.916979][ T6208] veth1_macvtap: entered promiscuous mode [ 51.001931][ T5604] hsr_slave_0: left promiscuous mode [ 51.002268][ T5604] hsr_slave_1: left promiscuous mode [ 51.002540][ T5604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.002553][ T5604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.003229][ T5604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.003238][ T5604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.018266][ T6366] netlink: 'syz.1.460': attribute type 5 has an invalid length. [ 51.019640][ T5604] veth1_macvtap: left promiscuous mode [ 51.019687][ T5604] veth0_macvtap: left promiscuous mode [ 51.019735][ T5604] veth1_vlan: left promiscuous mode [ 51.019805][ T5604] veth0_vlan: left promiscuous mode [ 51.072905][ T6373] netlink: 'syz.1.460': attribute type 5 has an invalid length. [ 51.085063][ T6377] overlay: filesystem on ./file0 not supported as upperdir [ 51.145972][ T5604] team0 (unregistering): Port device team_slave_1 removed [ 51.153811][ T5604] team0 (unregistering): Port device team_slave_0 removed [ 51.202477][ T4424] 8021q: adding VLAN 0 to HW filter on device eth1 [ 51.206489][ T6208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.223451][ T6208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.232290][ T4743] Bluetooth: hci5: command tx timeout [ 51.243424][ T5585] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.243469][ T5585] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.243487][ T5585] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.279209][ T5585] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.292516][ T6386] FAULT_INJECTION: forcing a failure. [ 51.292516][ T6386] name failslab, interval 1, probability 0, space 0, times 0 [ 51.292534][ T6386] CPU: 0 UID: 0 PID: 6386 Comm: syz.1.463 Tainted: G L syzkaller #0 PREEMPT [ 51.292546][ T6386] Tainted: [L]=SOFTLOCKUP [ 51.292549][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 51.292553][ T6386] Call trace: [ 51.292556][ T6386] show_stack+0x2c/0x3c (C) [ 51.292570][ T6386] __dump_stack+0x30/0x40 [ 51.292579][ T6386] dump_stack_lvl+0xd8/0x12c [ 51.292586][ T6386] dump_stack+0x1c/0x28 [ 51.292593][ T6386] should_fail_ex+0x418/0x58c [ 51.292603][ T6386] should_failslab+0xc4/0x120 [ 51.292612][ T6386] __kmalloc_noprof+0x108/0x6c8 [ 51.292621][ T6386] tomoyo_realpath_from_path+0xbc/0x4dc [ 51.292629][ T6386] tomoyo_path_number_perm+0x1f0/0x500 [ 51.292640][ T6386] tomoyo_file_ioctl+0x2c/0x3c [ 51.292657][ T6386] security_file_ioctl+0xdc/0x2b0 [ 51.292668][ T6386] __arm64_sys_ioctl+0xb0/0x1cc [ 51.292677][ T6386] invoke_syscall+0x98/0x244 [ 51.292685][ T6386] el0_svc_common+0xec/0x23c [ 51.292694][ T6386] do_el0_svc+0x4c/0x5c [ 51.292702][ T6386] el0_svc+0x60/0x1d8 [ 51.292710][ T6386] el0t_64_sync_handler+0x44/0x104 [ 51.292717][ T6386] el0t_64_sync+0x198/0x19c [ 51.294220][ T6386] ERROR: Out of memory at tomoyo_realpath_from_path. [ 51.353764][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.353780][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.371931][ T6390] FAULT_INJECTION: forcing a failure. [ 51.371931][ T6390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.371949][ T6390] CPU: 1 UID: 0 PID: 6390 Comm: syz.2.465 Tainted: G L syzkaller #0 PREEMPT [ 51.371962][ T6390] Tainted: [L]=SOFTLOCKUP [ 51.371966][ T6390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 51.371970][ T6390] Call trace: [ 51.371973][ T6390] show_stack+0x2c/0x3c (C) [ 51.371987][ T6390] __dump_stack+0x30/0x40 [ 51.371995][ T6390] dump_stack_lvl+0xd8/0x12c [ 51.372003][ T6390] dump_stack+0x1c/0x28 [ 51.372010][ T6390] should_fail_ex+0x418/0x58c [ 51.372019][ T6390] should_fail+0x14/0x24 [ 51.372027][ T6390] should_fail_usercopy+0x20/0x30 [ 51.372035][ T6390] simple_read_from_buffer+0xc4/0x238 [ 51.372043][ T6390] proc_fail_nth_read+0x1a8/0x248 [ 51.372054][ T6390] vfs_read+0x230/0x8c8 [ 51.372062][ T6390] ksys_read+0x12c/0x228 [ 51.372070][ T6390] __arm64_sys_read+0x84/0x98 [ 51.372077][ T6390] invoke_syscall+0x98/0x244 Jan 1 00:00:51 syzkaller kern.alert kernel: [ 51.381139][ T6383] EXT4-fs (nvme0n1p2): shut down requested (2)[ 51.372085][ T6390] el0_svc_common+0xec/0x23c [ 51.372092][ T6390] do_el0_svc+0x4c/0x5c [ 51.372099][ T6390] el0_svc+0x60/0x1d8 [ 51.372107][ T6390] el0t_64_sync_handler+0x44/0x104 [ 51.372114][ T6390] el0t_64_sync+0x198/0x19c [ 51.381139][ T6383] EXT4-fs (nvme0n1p2): shut down requested (2) [ 51.381236][ T6383] Aborting journal on device nvme0n1p2-8. [ 51.429617][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.429630][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.469772][ T4424] 8021q: adding VLAN 0 to HW filter on device eth3 [ 51.493054][ T4424] 8021q: adding VLAN 0 to HW filter on device eth2 [ 51.721138][ T5684] ================================================================== [ 51.721150][ T5684] BUG: KASAN: slab-use-after-free in put_dev+0x2c/0xf8 [ 51.721170][ T5684] Write of size 4 at addr ffff0000c9429840 by task syz.4.254/5684 [ 51.721177][ T5684] [ 51.721183][ T5684] CPU: 1 UID: 0 PID: 5684 Comm: syz.4.254 Tainted: G L syzkaller #0 PREEMPT [ 51.721193][ T5684] Tainted: [L]=SOFTLOCKUP [ 51.721196][ T5684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 51.721201][ T5684] Call trace: [ 51.721203][ T5684] show_stack+0x2c/0x3c (C) [ 51.721214][ T5684] __dump_stack+0x30/0x40 [ 51.721221][ T5684] dump_stack_lvl+0xd8/0x12c [ 51.721228][ T5684] print_address_description+0xb0/0x238 [ 51.721238][ T5684] print_report+0x68/0x84 [ 51.721245][ T5684] kasan_report+0x8c/0xc4 [ 51.721255][ T5684] kasan_check_range+0x17c/0x1ac [ 51.721264][ T5684] __kasan_check_write+0x20/0x30 [ 51.721271][ T5684] put_dev+0x2c/0xf8 [ 51.721281][ T5684] gadgetfs_kill_sb+0x48/0x80 [ 51.721290][ T5684] deactivate_locked_super+0xcc/0x128 [ 51.721300][ T5684] deactivate_super+0xd4/0xf4 [ 51.721308][ T5684] cleanup_mnt+0x190/0x220 [ 51.721316][ T5684] __cleanup_mnt+0x20/0x30 [ 51.721323][ T5684] task_work_run+0x1cc/0x25c [ 51.721331][ T5684] do_exit+0x58c/0x1a74 [ 51.721339][ T5684] do_group_exit+0x198/0x238 [ 51.721346][ T5684] get_signal+0xfb0/0x1094 [ 51.721354][ T5684] arch_do_signal_or_restart+0x288/0x444c [ 51.721362][ T5684] exit_to_user_mode_loop+0x70/0x17c [ 51.721373][ T5684] el0_svc+0x12c/0x1d8 [ 51.721380][ T5684] el0t_64_sync_handler+0x44/0x104 [ 51.721387][ T5684] el0t_64_sync+0x198/0x19c [ 51.721395][ T5684] [ 51.721397][ T5684] Allocated by task 5586: [ 51.721401][ T5684] kasan_save_track+0x40/0x78 [ 51.721409][ T5684] kasan_save_alloc_info+0x40/0x50 [ 51.721417][ T5684] __kasan_kmalloc+0x9c/0xb4 [ 51.721425][ T5684] __kmalloc_noprof+0x34c/0x6c8 [ 51.721432][ T5684] ieee802_11_parse_elems_full+0x114/0x2208 [ 51.721441][ T5684] ieee80211_inform_bss+0x114/0xd70 [ 51.721447][ T5684] cfg80211_inform_single_bss_data+0xac4/0x17a0 [ 51.721455][ T5684] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 51.721461][ T5684] cfg80211_inform_bss_frame_data+0x348/0x714 [ 51.721468][ T5684] ieee80211_bss_info_update+0x5d0/0x944 [ 51.721474][ T5684] ieee80211_ibss_rx_queued_mgmt+0x830/0x242c [ 51.721482][ T5684] ieee80211_iface_work+0x600/0xd3c [ 51.721489][ T5684] cfg80211_wiphy_work+0x278/0x464 [ 51.721496][ T5684] process_scheduled_works+0x91c/0x1250 [ 51.721504][ T5684] worker_thread+0x798/0xbd0 [ 51.721512][ T5684] kthread+0x304/0x3d4 [ 51.721519][ T5684] ret_from_fork+0x10/0x20 [ 51.721526][ T5684] [ 51.721527][ T5684] Freed by task 5586: [ 51.721530][ T5684] kasan_save_track+0x40/0x78 [ 51.721537][ T5684] kasan_save_free_info+0x54/0x6c [ 51.721545][ T5684] __kasan_slab_free+0x74/0xa4 [ 51.721553][ T5684] kfree+0x188/0x658 [ 51.721559][ T5684] ieee80211_inform_bss+0x914/0xd70 [ 51.721565][ T5684] cfg80211_inform_single_bss_data+0xac4/0x17a0 [ 51.721571][ T5684] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 51.721578][ T5684] cfg80211_inform_bss_frame_data+0x348/0x714 [ 51.721585][ T5684] ieee80211_bss_info_update+0x5d0/0x944 [ 51.721590][ T5684] ieee80211_ibss_rx_queued_mgmt+0x830/0x242c [ 51.721598][ T5684] ieee80211_iface_work+0x600/0xd3c [ 51.721606][ T5684] cfg80211_wiphy_work+0x278/0x464 [ 51.721612][ T5684] process_scheduled_works+0x91c/0x1250 [ 51.721620][ T5684] worker_thread+0x798/0xbd0 [ 51.721628][ T5684] kthread+0x304/0x3d4 [ 51.721635][ T5684] ret_from_fork+0x10/0x20 [ 51.721641][ T5684] [ 51.721643][ T5684] The buggy address belongs to the object at ffff0000c9429800 [ 51.721643][ T5684] which belongs to the cache kmalloc-1k of size 1024 [ 51.721649][ T5684] The buggy address is located 64 bytes inside of [ 51.721649][ T5684] freed 1024-byte region [ffff0000c9429800, ffff0000c9429c00) [ 51.721655][ T5684] [ 51.721657][ T5684] The buggy address belongs to the physical page: [ 51.721665][ T5684] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109428 [ 51.721672][ T5684] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 51.721678][ T5684] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 51.721686][ T5684] page_type: f5(slab) [ 51.721693][ T5684] raw: 05ffc00000000040 ffff0000c0001dc0 dead000000000100 dead000000000122 [ 51.721699][ T5684] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 51.721705][ T5684] head: 05ffc00000000040 ffff0000c0001dc0 dead000000000100 dead000000000122 [ 51.721711][ T5684] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 51.721717][ T5684] head: 05ffc00000000003 fffffdffc3250a01 00000000ffffffff 00000000ffffffff [ 51.721722][ T5684] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 51.721725][ T5684] page dumped because: kasan: bad access detected [ 51.721728][ T5684] [ 51.721730][ T5684] Memory state around the buggy address: [ 51.721734][ T5684] ffff0000c9429700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 51.721738][ T5684] ffff0000c9429780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 51.721742][ T5684] >ffff0000c9429800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.721745][ T5684] ^ [ 51.721749][ T5684] ffff0000c9429880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.721753][ T5684] ffff0000c9429900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.721756][ T5684] ================================================================== [ 51.721760][ T5684] Disabling lock debugging due to kernel taint [ 51.721763][ T5684] ------------[ cut here ]------------ [ 51.721766][ T5684] refcount_t: underflow; use-after-free. [ 51.721870][ T5684] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0x154/0x1f8, CPU#1: syz.4.254/5684 [ 51.830655][ T5684] Modules linked in: [ 51.831551][ T5684] CPU: 1 UID: 0 PID: 5684 Comm: syz.4.254 Tainted: G B L syzkaller #0 PREEMPT [ 51.834031][ T5684] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 51.835313][ T5684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 51.837487][ T5684] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 51.839105][ T5684] pc : refcount_warn_saturate+0x154/0x1f8 [ 51.840348][ T5684] lr : refcount_warn_saturate+0x154/0x1f8 [ 51.841601][ T5684] sp : ffff80009b5576c0 [ 51.842501][ T5684] x29: ffff80009b5576c0 x28: 00007dfe9bf8f864 x27: 0000000000000001 [ 51.844048][ T5684] x26: ffff8000897fa960 x25: 1fffe0001950795b x24: 0000000000000003 [ 51.845768][ T5684] x23: ffff0000ca83cad8 x22: ffff80008a46f220 x21: 00000000c250de31 [ 51.847477][ T5684] x20: ffff0000c9429840 x19: ffff80008ae88000 x18: 1fffe000359eee28 [ 51.849280][ T5684] x17: 3d3d3d3d3d3d3d3d x16: 3d3d3d3d3d3d3d3d x15: 3d3d3d3d3d3d3d3d [ 51.851022][ T5684] x14: 0000000000000faf x13: 0000000000000001 x12: 0000000000000003 [ 51.852731][ T5684] x11: 0000000000000000 x10: 0000000000000002 x9 : 4b90bcb829719a00 [ 51.854536][ T5684] x8 : 4b90bcb829719a00 x7 : 0000000000000000 x6 : ffff800080484084 [ 51.856328][ T5684] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f4d68 [ 51.858041][ T5684] x2 : 0000000100000000 x1 : ffff0000c51f3b00 x0 : 0000000000000000 [ 51.859898][ T5684] Call trace: [ 51.860603][ T5684] refcount_warn_saturate+0x154/0x1f8 (P) [ 51.861840][ T5684] put_dev+0xcc/0xf8 [ 51.862708][ T5684] gadgetfs_kill_sb+0x48/0x80 [ 51.863744][ T5684] deactivate_locked_super+0xcc/0x128 [ 51.864873][ T5684] deactivate_super+0xd4/0xf4 [ 51.865936][ T5684] cleanup_mnt+0x190/0x220 [ 51.866955][ T5684] __cleanup_mnt+0x20/0x30 [ 51.868001][ T5684] task_work_run+0x1cc/0x25c [ 51.869038][ T5684] do_exit+0x58c/0x1a74 [ 51.870018][ T5684] do_group_exit+0x198/0x238 [ 51.871115][ T5684] get_signal+0xfb0/0x1094 [ 51.872145][ T5684] arch_do_signal_or_restart+0x288/0x444c [ 51.873507][ T5684] exit_to_user_mode_loop+0x70/0x17c [ 51.874574][ T5684] el0_svc+0x12c/0x1d8 [ 51.875362][ T5684] el0t_64_sync_handler+0x44/0x104 [ 51.876359][ T5684] el0t_64_sync+0x198/0x19c [ 51.877276][ T5684] irq event stamp: 2615 [ 51.878132][ T5684] hardirqs last enabled at (2615): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 51.880156][ T5684] hardirqs last disabled at (2614): [] _raw_spin_lock_irqsave+0x2c/0x7c [ 51.882030][ T5684] softirqs last enabled at (1078): [] handle_softirqs+0xb2c/0xcbc [ 51.883814][ T5684] softirqs last disabled at (679): [] __do_softirq+0x14/0x20 [ 51.885440][ T5684] ---[ end trace 0000000000000000 ]--- [ 51.918894][ T5586] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.935748][ T5684] syz_tun (unregistering): left allmulticast mode [ 51.935764][ T5684] syz_tun (unregistering): left promiscuous mode [ 51.935791][ T5684] bridge0: port 1(syz_tun) entered disabled state [ 51.989879][ T5586] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.103518][ T5586] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.179419][ T5586] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.315218][ T5586] bridge_slave_1: left allmulticast mode [ 52.315235][ T5586] bridge_slave_1: left promiscuous mode [ 52.315292][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.326872][ T5586] bridge_slave_0: left allmulticast mode [ 52.326886][ T5586] bridge_slave_0: left promiscuous mode [ 52.326949][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.366527][ T5586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.375252][ T5586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.388068][ T5586] bond0 (unregistering): Released all slaves [ 52.396765][ T4424] 8021q: adding VLAN 0 to HW filter on device eth5 [ 52.409390][ T4424] 8021q: adding VLAN 0 to HW filter on device eth6 [ 52.415613][ T4424] 8021q: adding VLAN 0 to HW filter on device eth4 [ 52.425611][ T4424] 8021q: adding VLAN 0 to HW filter on device eth7 [ 52.444445][ T5586] tipc: Disabling bearer [ 52.444589][ T5586] tipc: Left network mode [ 52.742579][ T5586] hsr_slave_0: left promiscuous mode [ 52.742777][ T5586] hsr_slave_1: left promiscuous mode [ 52.742986][ T5586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.742996][ T5586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.743227][ T5586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.743235][ T5586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.745150][ T5586] veth0_macvtap: left promiscuous mode [ 52.745190][ T5586] veth1_vlan: left promiscuous mode [ 52.745220][ T5586] veth0_vlan: left promiscuous mode [ 52.856351][ T5586] team0 (unregistering): Port device team_slave_1 removed [ 52.862819][ T5586] team0 (unregistering): Port device team_slave_0 removed [ 53.318984][ T5586] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.209064][ T5586] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.309022][ T5586] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.389098][ T5586] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.515340][ T4424] 8021q: adding VLAN 0 to HW filter on device eth8 [ 54.523555][ T4424] 8021q: adding VLAN 0 to HW filter on device eth9 [ 54.532846][ T4424] 8021q: adding VLAN 0 to HW filter on device eth10 [ 54.541268][ T5586] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 54.541720][ T5586] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.544296][ T4424] 8021q: adding VLAN 0 to HW filter on device eth11 [ 54.609314][ T5586] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.710061][ T5586] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.788982][ T5586] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.931603][ T4424] 8021q: adding VLAN 0 to HW filter on device eth12 [ 54.940578][ T4424] 8021q: adding VLAN 0 to HW filter on device eth13 [ 54.950705][ T5586] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.952574][ T4424] 8021q: adding VLAN 0 to HW filter on device eth14 [ 54.969034][ T4424] 8021q: adding VLAN 0 to HW filter on device eth15 [ 55.019617][ T5586] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.099103][ T5586] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.168990][ T5586] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.372514][ T5586] bridge_slave_1: left allmulticast mode [ 55.372535][ T5586] bridge_slave_1: left promiscuous mode [ 55.372601][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.373269][ T5586] bridge_slave_0: left allmulticast mode [ 55.373278][ T5586] bridge_slave_0: left promiscuous mode [ 55.373327][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.386104][ T5586] bridge_slave_1: left allmulticast mode [ 55.386118][ T5586] bridge_slave_1: left promiscuous mode [ 55.386168][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.386786][ T5586] bridge_slave_0: left allmulticast mode [ 55.386795][ T5586] bridge_slave_0: left promiscuous mode [ 55.386842][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.396942][ T5586] geneve0: left allmulticast mode [ 55.452730][ T5586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.468498][ T5586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.481401][ T5586] bond0 (unregistering): Released all slaves [ 55.505443][ T5586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.538413][ T5586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.551073][ T5586] bond0 (unregistering): Released all slaves [ 55.556730][ T5586] ip6gretap0 (unregistering): left allmulticast mode [ 55.582487][ T5586] bond0 (unregistering): Released all slaves [ 55.597357][ T4424] 8021q: adding VLAN 0 to HW filter on device eth16 [ 55.621716][ T4424] 8021q: adding VLAN 0 to HW filter on device eth18 [ 55.633165][ T4424] 8021q: adding VLAN 0 to HW filter on device eth17 [ 55.660626][ T4424] 8021q: adding VLAN 0 to HW filter on device eth19 [ 56.585501][ T5586] hsr_slave_0: left promiscuous mode [ 56.585708][ T5586] hsr_slave_1: left promiscuous mode [ 56.585894][ T5586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.585903][ T5586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.586491][ T5586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.586500][ T5586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.596367][ T5586] hsr_slave_0: left promiscuous mode [ 56.596584][ T5586] hsr_slave_1: left promiscuous mode [ 56.596777][ T5586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.596785][ T5586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.596992][ T5586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.596998][ T5586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.606391][ T5586] hsr_slave_0: left promiscuous mode [ 56.606574][ T5586] hsr_slave_1: left promiscuous mode [ 56.612977][ T5586] veth1_macvtap: left promiscuous mode [ 56.612997][ T5586] veth0_macvtap: left promiscuous mode [ 56.613034][ T5586] veth1_vlan: left promiscuous mode [ 56.613062][ T5586] veth0_vlan: left promiscuous mode [ 56.613538][ T5586] veth1_macvtap: left promiscuous mode [ 56.613552][ T5586] veth0_macvtap: left promiscuous mode [ 56.613586][ T5586] veth1_vlan: left promiscuous mode [ 56.613611][ T5586] veth0_vlan: left promiscuous mode [ 56.614055][ T5586] veth1_macvtap: left promiscuous mode [ 56.614073][ T5586] veth0_macvtap: left promiscuous mode [ 56.614105][ T5586] veth1_vlan: left promiscuous mode [ 56.614128][ T5586] veth0_vlan: left promiscuous mode [ 56.729606][ T5586] team0 (unregistering): Port device team_slave_1 removed [ 56.731833][ T5586] team0 (unregistering): Port device team_slave_0 removed [ 56.813881][ T5586] team0 (unregistering): Port device team_slave_1 removed [ 56.816102][ T5586] team0 (unregistering): Port device team_slave_0 removed [ 60.823945][ T4499] EXT4-fs warning (device nvme0n1p2): htree_dirblock_to_tree:1051: inode #98: lblock 0: comm crond: error -EIO reading directory block