last executing test programs: 21.639376544s ago: executing program 1 (id=338): pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) syz_emit_ethernet(0x56, &(0x7f0000000000)={@broadcast, @remote, @val={@val={0x88a8, 0x6, 0x1}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x3, 0x40, 0x65, 0x0, 0xc, 0x6, 0x0, @broadcast, @rand_addr=0x64010100}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x1, 0xb, 0x1, 0x2, 0xe5b9, 0x0, 0x2, 0x2, 0x0, 0x1, 0x3, 0x0, 0x4, 0x4e24, 0x4e21}, 0x2, 0x2}}, 0x2}}}}}}}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 21.523779716s ago: executing program 1 (id=342): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(0xffffffffffffffff, 0x0, 0x80000, 0x4) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000180)) 21.413649437s ago: executing program 1 (id=346): r0 = io_uring_setup(0x2d4b, &(0x7f0000000180)={0x0, 0x2c3c, 0x80, 0x20, 0xec}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000004980)=0x100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000004ac0)=0x9) connect$inet6(r1, &(0x7f0000004b00)={0xa, 0x0, 0x100, @empty, 0x8d}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000004b40)=0x2, 0x4) writev(r1, &(0x7f0000004bc0)=[{&(0x7f0000004c00)="ec", 0xfdef}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 21.295805269s ago: executing program 1 (id=349): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2208414, &(0x7f0000000e80)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRES32=0x0, @ANYRES8, @ANYBLOB="c5ce1b0300c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1fe015e1203fb7b57c6304b9bbf1de3f4d593fe54ac5721496f9ff26b96c57aaef7987972acd042203fdb0fca1a50c79aa234042b33ec782767b27952e1575c33287da01587fa8979f7bf20617cd24b9b442a044e489b989dfe48e4c0426b1200183940b1b"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000003c0)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount$bind(&(0x7f0000000780)='.\x00', &(0x7f0000000a80)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000ac0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000b00)='./file0/../file0\x00', &(0x7f0000000b40)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000b80)='./file0/../file0\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000cc0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000001040)={0x2020}, 0x2020) 21.116771927s ago: executing program 1 (id=353): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000280)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000002c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) lgetxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000) 20.671875092s ago: executing program 1 (id=362): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2b0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x89, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/tcp_ehash_entries\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 20.580940401s ago: executing program 32 (id=362): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2b0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x89, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/tcp_ehash_entries\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 15.604346596s ago: executing program 0 (id=444): timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x18000000) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) 14.694824389s ago: executing program 0 (id=448): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='5', 0x1, 0x20000000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140)='J', 0x1, 0x4800, 0x0, 0x0) shutdown(r0, 0x1) 14.694364469s ago: executing program 0 (id=449): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@crypt={0x0, 0x2000, 0x0, 0x88, 'crypt\x00', {'aes-xts-plain64', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '0', 0x20, {@ram={'/dev/ram', 0x1}, 0x20, '0'}}}]}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000640)='./dm0\x00', 0x6180, r1) r2 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000680)='./dm0\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000006c0)="0102030405060708", 0x8, 0x0) ioctl$DM_DEV_REMOVE(r0, 0xc138fd04, &(0x7f0000000700)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}}) 14.624293746s ago: executing program 0 (id=450): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x2aa, &(0x7f0000000380)="$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") ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000002c80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) mount$bind(&(0x7f0000000a80)='.\x00', &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000b00)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000b40)='./file0/../file0\x00', &(0x7f0000000b80)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c00)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000c40)={0x2020}, 0x2020) 14.552730123s ago: executing program 0 (id=451): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x300, 0x2, 0x1, 0x6, 0x6, 0xbf}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080)="8b"}, 0xffffffffffffff11) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e27, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x70, 0x0, 0xfffffffffffffcbc, 0x0, 0x0, 0x40084}, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$setregset(0x4205, r0, 0x403, &(0x7f0000000000)={0x0}) 11.850543788s ago: executing program 0 (id=460): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x401}, 0x8) 11.754201098s ago: executing program 33 (id=460): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x401}, 0x8) 5.92136647s ago: executing program 3 (id=542): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fcdbdf25021f00ff", @ANYRES32=r2, @ANYBLOB="0800040064010104080008000001000008000200e0000002080001040a0101020800090003000000080009"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 4.53725262s ago: executing program 2 (id=560): syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800810, &(0x7f0000000240)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f0000000580)="$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") syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000005e00)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000006380)='./file1\x00', 0xc41, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000063c0)='./file1\x00', 0x8a141, 0x59) pwrite64(r1, &(0x7f0000006400)="f6", 0x1, 0xe32d) fallocate(r0, 0x0, 0x2000, 0x18003) r2 = openat(0xffffffffffffff9c, &(0x7f0000005d80)='./file1\x00', 0x101042, 0x1d8) pwrite64(r2, &(0x7f0000005dc0)='2', 0xfdef, 0xc00) 4.284977316s ago: executing program 2 (id=561): openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000100)=0xeea, 0x4) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x0, {0x2, 0x3, 0x0, {0x0, 0x6, 0x400000000000000b, 0x0, 0x7ff, 0x2, 0x2, 0xd, 0x5, 0xa000, 0xa40, 0x0, 0x0, 0x3001, 0x2}}}, 0xffffff03) 4.087863126s ago: executing program 2 (id=562): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000200)=0x20, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000240)=r1, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) listen(r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.017438283s ago: executing program 2 (id=563): r0 = fsopen(&(0x7f00000001c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_COOKIE(r4, 0x1, 0x39, 0x0, &(0x7f00000003c0)) 4.017086843s ago: executing program 2 (id=564): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000800)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000980)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) 932.078996ms ago: executing program 3 (id=565): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x80000001, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x29c, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x20000014}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001180)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 796.79225ms ago: executing program 2 (id=570): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write(r1, &(0x7f0000000140), 0xffffff4a) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f00000001c0)={0x1f}, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000240)={0x2020}, 0x2020) 681.046202ms ago: executing program 4 (id=572): r0 = fsopen(&(0x7f0000001100)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x19, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001280)={r2, r1, 0x15, 0x0, @val=@iter={0x0}}, 0x20) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000fc0)={0x1, &(0x7f0000001000)=[{0x6, 0xfc, 0x1}]}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000001040)=0x2) 673.792452ms ago: executing program 3 (id=573): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=""/236, 0xec) 619.498288ms ago: executing program 4 (id=574): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) write$vhost_msg(r2, &(0x7f0000002400)={0x1, {&(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) 529.425687ms ago: executing program 3 (id=575): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000540)=0x1) 510.107919ms ago: executing program 3 (id=576): fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x2, 0x4, 0x20008, 0xfff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x40) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40084}, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$setregset(0x4205, r0, 0x402, &(0x7f0000000000)={0x0}) 447.920495ms ago: executing program 4 (id=577): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) 388.922841ms ago: executing program 3 (id=578): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r5, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 387.649112ms ago: executing program 4 (id=579): syz_mount_image$erofs(&(0x7f0000000f00), &(0x7f0000000f40)='./file0\x00', 0x18000c6, &(0x7f0000000f80)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f0000000fc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001140)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000011c0)='./bus\x00', &(0x7f0000001200), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001280)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x8880, 0x0) lseek(r0, 0x101, 0x1) getdents64(r0, 0x0, 0x0) 279.087872ms ago: executing program 4 (id=581): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x1, 0x0, &(0x7f0000000080)=""/70, 0x0, 0xfec00000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000140)=""/85, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0xfffffffe) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000280)={0x1}) 173.035743ms ago: executing program 5 (id=584): mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/tomoyo/domain_policy\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 149.345565ms ago: executing program 5 (id=585): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18, 0xb, 0x0, {0x1}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x4, &(0x7f0000000b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}]}}) lremovexattr(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)=@known='user.incfs.metadata\x00') 120.338438ms ago: executing program 5 (id=586): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x7fffffff, 0x4) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080)=0x80000000, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) write(r0, &(0x7f0000000000)="01", 0x1) 54.983365ms ago: executing program 4 (id=587): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x0, 0x559e, &(0x7f00000003c0)="$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") chdir(&(0x7f00000061c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006200)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000006280), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 54.645785ms ago: executing program 5 (id=588): mkdirat(0xffffffffffffff9c, &(0x7f0000000f40)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000fc0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x101042, 0x57) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x9}}, 0x20) write(r0, &(0x7f0000001040)='27', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0xb) fallocate(r2, 0x0, 0x0, 0x8ffff) 28.615988ms ago: executing program 5 (id=589): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x400, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x300, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x7, 0x0, 0xe}}}}}}, 0x0) 0s ago: executing program 5 (id=590): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000540)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000640)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="aa", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="307ddfb90fb58ea26e7519ece1faecb59bf6246bb080d7543699ad6e25f0049775959f73da3df93437fea1341d5222b70ef28f3ae42b1399cddfe4fd55493029141662", 0x43}], 0x1}}], 0x3, 0x2000c8c0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="e8000000100001"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmmsg$inet6(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)="93", 0x1}], 0x1}}], 0x1, 0x40) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)=""/225, 0xe1}], 0x1}, 0x1003}], 0x1, 0x100, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. [ 30.898362][ T4318] cgroup: Unknown subsys name 'net' [ 31.130211][ T4318] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.396803][ T4318] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 32.628242][ T4338] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 32.631280][ T4340] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 32.633378][ T4343] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 32.634991][ T4343] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.636419][ T4343] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 32.638192][ T4343] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 32.640025][ T4343] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 32.640448][ T4345] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 32.641501][ T4343] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.642841][ T4345] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 32.643798][ T4343] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 32.645661][ T4345] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 32.646218][ T4343] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 32.647960][ T4345] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 32.650211][ T4343] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.650639][ T4345] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 32.651553][ T4343] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 32.653368][ T4345] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 32.655369][ T4346] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 32.655717][ T4345] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 32.658722][ T4345] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 32.658772][ T4346] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 32.660419][ T4345] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 32.662802][ T4345] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 32.664177][ T4347] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 32.667783][ T4345] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 32.668022][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 32.669103][ T4345] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 32.683139][ T4345] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 32.684536][ T4345] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 32.735418][ T4331] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.737105][ T4331] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.740709][ T4330] rdma_rxe: rxe_register_device failed with error -23 [ 32.742098][ T4330] rdma_rxe: failed to add rxe_eth0 [ 32.745264][ T4342] rdma_rxe: rxe_register_device failed with error -23 [ 32.746244][ T4335] rdma_rxe: rxe_register_device failed with error -23 [ 32.746677][ T4342] rdma_rxe: failed to add rxe_eth0 [ 32.749644][ T4337] rdma_rxe: rxe_register_device failed with error -23 [ 32.750921][ T4337] rdma_rxe: failed to add rxe_eth0 [ 32.752645][ T4331] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.753005][ T4335] rdma_rxe: failed to add rxe_eth0 [ 32.783442][ T4331] infiniband rxe0: set active [ 32.785221][ T4331] infiniband rxe0: added rxe_eth0 [ 32.789469][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.802451][ T4331] RDS/IB: rxe0: added [ 32.803368][ T4331] smc: adding ib device rxe0 with port count 1 [ 32.804502][ T4331] smc: ib device rxe0 port 1 has pnetid [ 32.811468][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.818430][ T4331] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.866353][ T4331] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.905644][ T4331] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.918608][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 32.939239][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 32.948981][ T4331] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.971968][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 32.977262][ T4342] chnl_net:caif_netlink_parms(): no params data found [ 32.987968][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.989782][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.991502][ T4335] device bridge_slave_0 entered promiscuous mode [ 33.001607][ T3903] rxe_eth0 speed is unknown, defaulting to 1000 [ 33.008308][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.009642][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.011306][ T4335] device bridge_slave_1 entered promiscuous mode [ 33.017373][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.019461][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.021052][ T4337] device bridge_slave_0 entered promiscuous mode [ 33.030803][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.035539][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.039220][ T4331] rxe_eth0 speed is unknown, defaulting to 1000 [ 33.040432][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.041765][ T4342] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.043446][ T4342] device bridge_slave_0 entered promiscuous mode [ 33.045211][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.046401][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.048275][ T4337] device bridge_slave_1 entered promiscuous mode [ 33.054236][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.057061][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.074860][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.076297][ T4342] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.078245][ T4342] device bridge_slave_1 entered promiscuous mode [ 33.085362][ T4337] team0: Port device team_slave_0 added [ 33.087907][ T4337] team0: Port device team_slave_1 added [ 33.091989][ T4335] team0: Port device team_slave_0 added [ 33.100783][ T4342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.103746][ T4342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.116576][ T4335] team0: Port device team_slave_1 added [ 33.122419][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.123752][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.128788][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.134677][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.135981][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.140150][ T4330] device bridge_slave_0 entered promiscuous mode [ 33.144459][ T4342] team0: Port device team_slave_0 added [ 33.146012][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.147199][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.149391][ T4330] device bridge_slave_1 entered promiscuous mode [ 33.153337][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.154477][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.161173][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.165829][ T4342] team0: Port device team_slave_1 added [ 33.167267][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.168646][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.173062][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.175506][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.176736][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.184305][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.207167][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.220103][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.298892][ T4335] device hsr_slave_0 entered promiscuous mode [ 33.327709][ T4335] device hsr_slave_1 entered promiscuous mode [ 33.390756][ T4342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.392092][ T4342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.396730][ T4342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.429008][ T4337] device hsr_slave_0 entered promiscuous mode [ 33.468053][ T4337] device hsr_slave_1 entered promiscuous mode [ 33.507653][ T4337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.509036][ T4337] Cannot create hsr debugfs directory [ 33.511109][ T4330] team0: Port device team_slave_0 added [ 33.512944][ T4330] team0: Port device team_slave_1 added [ 33.529903][ T4342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.531135][ T4342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.535440][ T4342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.538479][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.539628][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.543961][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.550734][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 33.557194][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.559129][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.563870][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.571979][ T3996] infiniband rxe0: set active [ 33.593752][ T115] rxe_eth0 speed is unknown, defaulting to 1000 [ 33.658821][ T4330] device hsr_slave_0 entered promiscuous mode [ 33.707755][ T4330] device hsr_slave_1 entered promiscuous mode [ 33.747604][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.749131][ T4330] Cannot create hsr debugfs directory [ 33.760807][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.762282][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.764103][ T4331] device bridge_slave_0 entered promiscuous mode [ 33.769876][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.771191][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.772878][ T4331] device bridge_slave_1 entered promiscuous mode [ 33.838757][ T4342] device hsr_slave_0 entered promiscuous mode [ 33.877734][ T4342] device hsr_slave_1 entered promiscuous mode [ 33.917590][ T4342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.918961][ T4342] Cannot create hsr debugfs directory [ 33.938315][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.941856][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.973037][ T4331] team0: Port device team_slave_0 added [ 33.978597][ T4331] team0: Port device team_slave_1 added [ 33.995042][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.996348][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.001377][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.006467][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.007729][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.012026][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.015437][ T4335] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.060609][ T4335] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.110968][ T4335] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.148613][ T4335] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.228764][ T4331] device hsr_slave_0 entered promiscuous mode [ 34.267690][ T4331] device hsr_slave_1 entered promiscuous mode [ 34.307546][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.308852][ T4331] Cannot create hsr debugfs directory [ 34.311831][ T4337] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.363941][ T4337] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.418807][ T4337] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.466332][ T4337] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.516216][ T4342] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.570976][ T4342] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.619479][ T4342] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.666085][ T4342] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.717936][ T4334] Bluetooth: hci2: command 0x0409 tx timeout [ 34.719199][ T4334] Bluetooth: hci1: command 0x0409 tx timeout [ 34.720348][ T4334] Bluetooth: hci0: command 0x0409 tx timeout [ 34.721448][ T4334] Bluetooth: hci4: command 0x0409 tx timeout [ 34.722882][ T4334] Bluetooth: hci3: command 0x0409 tx timeout [ 34.733668][ T4330] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.787036][ T4330] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.838650][ T4330] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.892782][ T4330] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.955285][ T4331] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.002575][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.006504][ T4331] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.058712][ T4331] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.115484][ T4331] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.143086][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.145537][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.149148][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.153165][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.162711][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.164408][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.172147][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.174337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.176262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.179369][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.180650][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.182490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.187128][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.189188][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.190691][ T236] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.191875][ T236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.194939][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.203145][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.204979][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.206584][ T236] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.207900][ T236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.211362][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.213148][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.214693][ T236] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.215911][ T236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.223115][ T4342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.229205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.231136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.232816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.234233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.242572][ T4342] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.244633][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.254209][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.256198][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.258683][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.260231][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.262018][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.263697][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.265440][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.267100][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.268608][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.270967][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.272638][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.274406][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.284898][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.286945][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.289387][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.290965][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.293152][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.294954][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.296620][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.301247][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.303091][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.304680][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.306381][ T236] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.307797][ T236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.316409][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.321683][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.323377][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.325208][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.327195][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.330536][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.333724][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.349891][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.351875][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.353811][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.355518][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.357254][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.366128][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.369482][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.371153][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.375093][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.380390][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.382295][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.386749][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.394969][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.401144][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.411575][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.413346][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.414896][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.416565][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.420575][ T4421] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.422034][ T4421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.423649][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.425463][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.427048][ T4421] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.428469][ T4421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.433589][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.435470][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.437451][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.442959][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.448471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.450117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.451667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.453284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.454974][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.456178][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.460982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.463118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.466788][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.468226][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.471087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.483887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.485704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.489050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.490892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.492491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.494271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.496065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.498666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.500269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.501832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.503608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.505748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.511307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.522097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.535741][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.538421][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.540335][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.541983][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.544457][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.545795][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.550453][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.552037][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.553666][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.558601][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.561583][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.563938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.565272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.571567][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.577558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.578981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.584489][ T4342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.595390][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.597227][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.621753][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.623727][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.625348][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.626984][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.633873][ T4337] device veth0_vlan entered promiscuous mode [ 35.648791][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.650689][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.655223][ T4342] device veth0_vlan entered promiscuous mode [ 35.659631][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.661716][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.663935][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.665575][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.671095][ T4337] device veth1_vlan entered promiscuous mode [ 35.680764][ T4342] device veth1_vlan entered promiscuous mode [ 35.702077][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.703823][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.705292][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.706860][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.710358][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.712226][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.729134][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.733009][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.734981][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.736650][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.739895][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.741267][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.743059][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.744780][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.746267][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.752128][ T4337] device veth0_macvtap entered promiscuous mode [ 35.757380][ T4337] device veth1_macvtap entered promiscuous mode [ 35.760892][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.762592][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.764092][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.765438][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.772908][ T4335] device veth0_vlan entered promiscuous mode [ 35.775495][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.786235][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.788315][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.789926][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.791796][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.795043][ T4342] device veth0_macvtap entered promiscuous mode [ 35.802080][ T4335] device veth1_vlan entered promiscuous mode [ 35.811886][ T4330] device veth0_vlan entered promiscuous mode [ 35.816292][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.819274][ T4342] device veth1_macvtap entered promiscuous mode [ 35.820964][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.822641][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.824311][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.825938][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.830526][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.832167][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.833945][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.835661][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.837299][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.842184][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.846103][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.847831][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.849579][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.851245][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.852954][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.862627][ T4337] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.864268][ T4337] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.865889][ T4337] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.867763][ T4337] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.875362][ T4330] device veth1_vlan entered promiscuous mode [ 35.881351][ T4331] device veth0_vlan entered promiscuous mode [ 35.884637][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.886282][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.888441][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.890433][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.891989][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.903460][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.905072][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.906677][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.912436][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.914236][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.917107][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.920062][ T4330] device veth0_macvtap entered promiscuous mode [ 35.922854][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.924436][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.926248][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.933938][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.935740][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.939500][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.941307][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.943687][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.945427][ T4331] device veth1_vlan entered promiscuous mode [ 35.953941][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.955729][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.958182][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.961958][ T4335] device veth0_macvtap entered promiscuous mode [ 35.965861][ T4330] device veth1_macvtap entered promiscuous mode [ 35.971322][ T4335] device veth1_macvtap entered promiscuous mode [ 35.985234][ T4342] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.986822][ T4342] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.988882][ T4342] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.990362][ T4342] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.012064][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.013421][ T4331] device veth0_macvtap entered promiscuous mode [ 36.013673][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.016431][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.019217][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.020905][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.023341][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.026359][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.028808][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.030653][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.032583][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.034577][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.036605][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.039807][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.042599][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.045312][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.046964][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.049733][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.051333][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.052959][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.054471][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.056264][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.060806][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.062459][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.064130][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.065794][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.070110][ T4331] device veth1_macvtap entered promiscuous mode [ 36.074283][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.076856][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.079694][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.081212][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.082913][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.085965][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.096724][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.099089][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.100726][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.102656][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.104472][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.106322][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.111253][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.112620][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.114497][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.116241][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.119772][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.129192][ T4421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.130632][ T4421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.133132][ T4330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.134644][ T4330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.136132][ T4330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.138144][ T4330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.142023][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.144503][ T4335] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.145891][ T4335] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.147326][ T4335] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.153160][ T4335] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.158680][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.160487][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.162151][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.163848][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.165364][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.167046][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.172072][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.173652][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.176051][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.179786][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.181467][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.203541][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.205495][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.207142][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.209312][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.211284][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.213302][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.215137][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.216987][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.225144][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.232369][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.234406][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.240833][ T4331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.242520][ T4331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.244254][ T4331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.245725][ T4331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.323463][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.324981][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.326736][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.328468][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.335060][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.336440][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.371797][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.373323][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.379332][ T4421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.380862][ T4421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.382923][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.384610][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.399687][ T4421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.401206][ T4421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.402693][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.423592][ T4421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.425146][ T4421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.432513][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.436899][ T4421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.441031][ T4421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.445167][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.451139][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.452633][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.454152][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.534765][ T4454] batman_adv: batadv0: Adding interface: syz_tun [ 36.535974][ T4454] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.547759][ T4454] batman_adv: batadv0: Interface activated: syz_tun [ 36.621837][ T4470] loop0: detected capacity change from 0 to 512 [ 36.691656][ T4470] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 36.751627][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 36.797870][ T4332] Bluetooth: hci3: command 0x041b tx timeout [ 36.799106][ T4332] Bluetooth: hci4: command 0x041b tx timeout [ 36.800202][ T4332] Bluetooth: hci0: command 0x041b tx timeout [ 36.801295][ T4332] Bluetooth: hci1: command 0x041b tx timeout [ 36.802387][ T4332] Bluetooth: hci2: command 0x041b tx timeout [ 36.814075][ T4486] TCP: MD5 Hash mismatch for [fe88::103]:20004->[ff02::1]:20004 L3 index 0 [ 36.859552][ T4493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17'. [ 37.033083][ T4517] loop3: detected capacity change from 0 to 2048 [ 37.059638][ T4517] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 37.065835][ T4517] NILFS (loop3): mounting unchecked fs [ 37.082114][ T4517] NILFS (loop3): recovery complete [ 37.100690][ T4520] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 37.419811][ T4525] loop1: detected capacity change from 0 to 32768 [ 37.423552][ T4552] loop4: detected capacity change from 0 to 8 [ 37.441559][ T4525] ======================================================= [ 37.441559][ T4525] WARNING: The mand mount option has been deprecated and [ 37.441559][ T4525] and is ignored by this kernel. Remove the mand [ 37.441559][ T4525] option from the mount to silence this warning. [ 37.441559][ T4525] ======================================================= [ 37.498093][ T4525] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 37.512236][ T4525] JBD2: Ignoring recovery information on journal [ 37.539460][ T4525] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 37.742191][ T4567] (syz.1.29,4567,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 38.270308][ T4588] netlink: 'syz.0.50': attribute type 1 has an invalid length. [ 38.353720][ T4331] ocfs2: Unmounting device (7,1) on (node local) [ 38.721513][ T4607] batman_adv: batadv0: Interface deactivated: syz_tun [ 38.723062][ T4607] batman_adv: batadv0: Removing interface: syz_tun [ 38.726623][ T4607] bridge0: port 3(syz_tun) entered blocking state [ 38.732113][ T4607] bridge0: port 3(syz_tun) entered disabled state [ 38.735828][ T4607] device syz_tun entered promiscuous mode [ 38.741539][ T4607] bridge0: port 3(syz_tun) entered blocking state [ 38.742818][ T4607] bridge0: port 3(syz_tun) entered forwarding state [ 38.782909][ T4610] loop4: detected capacity change from 0 to 512 [ 38.805547][ T4610] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 38.833967][ T4610] FAULT_INJECTION: forcing a failure. [ 38.833967][ T4610] name failslab, interval 1, probability 0, space 0, times 1 [ 38.837184][ T4610] CPU: 0 PID: 4610 Comm: syz.4.57 Not tainted syzkaller #0 [ 38.838632][ T4610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.840685][ T4610] Call trace: [ 38.841360][ T4610] dump_backtrace+0x1c4/0x1f0 [ 38.842311][ T4610] show_stack+0x2c/0x3c [ 38.843122][ T4610] __dump_stack+0x30/0x40 [ 38.843969][ T4610] dump_stack_lvl+0xf4/0x15c [ 38.844847][ T4610] dump_stack+0x1c/0x5c [ 38.845633][ T4610] should_fail_ex+0x3cc/0x524 [ 38.846517][ T4610] __should_failslab+0xc0/0x11c [ 38.847415][ T4610] should_failslab+0x10/0x28 [ 38.848277][ T4610] __kmem_cache_alloc_node+0x7c/0x318 [ 38.849292][ T4610] __kmalloc+0xc4/0x180 [ 38.850084][ T4610] ext4_find_extent+0x284/0xb60 [ 38.851021][ T4610] ext4_ext_map_blocks+0x268/0x5680 [ 38.852013][ T4610] ext4_map_blocks+0x2dc/0x160c [ 38.852947][ T4610] ext4_alloc_file_blocks+0x274/0x8b4 [ 38.853958][ T4610] ext4_fallocate+0x77c/0x1b4c [ 38.854857][ T4610] vfs_fallocate+0x4a4/0x5fc [ 38.855705][ T4610] __arm64_sys_fallocate+0xc4/0x114 [ 38.856692][ T4610] invoke_syscall+0x98/0x290 [ 38.857569][ T4610] el0_svc_common+0x13c/0x258 [ 38.858460][ T4610] do_el0_svc+0x5c/0x134 [ 38.859377][ T4610] el0_svc+0x58/0x12c [ 38.860223][ T4610] el0t_64_sync_handler+0x84/0xf0 [ 38.861253][ T4610] el0t_64_sync+0x18c/0x190 [ 38.877950][ T4334] Bluetooth: hci2: command 0x040f tx timeout [ 38.879360][ T4334] Bluetooth: hci1: command 0x040f tx timeout [ 38.880608][ T4334] Bluetooth: hci0: command 0x040f tx timeout [ 38.881766][ T4334] Bluetooth: hci4: command 0x040f tx timeout [ 38.882928][ T4334] Bluetooth: hci3: command 0x040f tx timeout [ 38.889341][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 38.895110][ T4614] process 'syz.0.58' launched './file1' with NULL argv: empty string added [ 39.051429][ T4629] Zero length message leads to an empty skb [ 39.127086][ T4637] loop0: detected capacity change from 0 to 128 [ 39.142506][ T4637] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.152638][ T4637] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.170966][ T4332] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 39.242346][ T4639] loop4: detected capacity change from 0 to 32768 [ 39.254379][ T4639] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.69 (4639) [ 39.261225][ T4639] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 39.263072][ T4639] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 39.264773][ T4639] BTRFS info (device loop4): setting nodatasum [ 39.265952][ T4639] BTRFS info (device loop4): force zlib compression, level 3 [ 39.267585][ T4639] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 39.269530][ T4639] BTRFS info (device loop4): use lzo compression, level 0 [ 39.270932][ T4639] BTRFS info (device loop4): turning on flush-on-commit [ 39.272206][ T4639] BTRFS info (device loop4): enabling auto defrag [ 39.273422][ T4639] BTRFS info (device loop4): max_inline at 0 [ 39.274461][ T4639] BTRFS info (device loop4): turning on sync discard [ 39.275863][ T4639] BTRFS info (device loop4): using free space tree [ 39.317666][ T4639] BTRFS info (device loop4): enabling ssd optimizations [ 39.376045][ T4335] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 39.506677][ T4669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.73'. [ 39.526210][ T4673] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 39.532052][ T4673] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 39.615538][ T4681] overlayfs: failed to clone upperpath [ 39.729965][ T4691] loop4: detected capacity change from 0 to 512 [ 39.750671][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.770929][ T4691] EXT4-fs (loop4): Test dummy encryption mode enabled [ 39.776153][ T4691] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.84: inode has both inline data and extents flags [ 39.780843][ T4691] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.84: couldn't read orphan inode 15 (err -117) [ 39.783307][ T4691] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 39.804775][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 39.946959][ T4712] openvswitch: netlink: Missing key (keys=240, expected=2000) [ 40.193536][ T4724] block device autoloading is deprecated and will be removed. [ 40.201704][ T4724] md4: error: bitmap file is already in use [ 40.656867][ T4764] loop0: detected capacity change from 0 to 2048 [ 40.691860][ T4764] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.699487][ T9] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 40.731252][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.732886][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.736437][ T4764] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 40.742304][ T4764] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 40.744940][ T4764] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.744940][ T4764] [ 40.746927][ T4764] EXT4-fs (loop0): Total free blocks count 0 [ 40.749514][ T4764] EXT4-fs (loop0): Free/Dirty block details [ 40.751566][ T4764] EXT4-fs (loop0): free_blocks=66060288 [ 40.752591][ T4764] EXT4-fs (loop0): dirty_blocks=32 [ 40.753548][ T4764] EXT4-fs (loop0): Block reservation details [ 40.754576][ T4764] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 40.766637][ T87] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 40.841834][ T4779] loop4: detected capacity change from 0 to 2048 [ 40.869591][ T4779] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 40.906706][ T4779] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5985: Corrupt filesystem [ 40.911249][ T4779] EXT4-fs error (device loop4): ext4_dirty_inode:6199: inode #15: comm syz.4.119: mark_inode_dirty error [ 40.940873][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 40.957735][ T4332] Bluetooth: hci3: command 0x0419 tx timeout [ 40.958886][ T4332] Bluetooth: hci4: command 0x0419 tx timeout [ 40.959956][ T4332] Bluetooth: hci0: command 0x0419 tx timeout [ 40.960967][ T4332] Bluetooth: hci1: command 0x0419 tx timeout [ 40.962019][ T4332] Bluetooth: hci2: command 0x0419 tx timeout [ 40.973541][ T4784] Bluetooth: MGMT ver 1.22 [ 40.977486][ T4777] JBD2: Ignoring recovery information on journal [ 41.008584][ T4777] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 41.063415][ T4337] ocfs2: Unmounting device (7,0) on (node local) [ 41.148094][ T4795] Injecting memory failure for pfn 0x13d60c at process virtual address 0x20000000 [ 41.150595][ T4795] Memory failure: 0x13d60c: keeping poisoned page in swap cache [ 41.152373][ T4795] Memory failure: 0x13d60c: recovery action for clean swapcache page: Recovered [ 41.508658][ T4826] batman_adv: batadv0: Adding interface: veth0 [ 41.512207][ T4826] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.523716][ T4826] batman_adv: batadv0: Interface activated: veth0 [ 41.531260][ T4826] batman_adv: batadv0: Interface deactivated: veth0 [ 41.534818][ T4826] batman_adv: batadv0: Removing interface: veth0 [ 41.538620][ T4826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.541197][ T4826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.544985][ T4826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.547461][ T4826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.693321][ T4833] fuse: Bad value for 'fd' [ 41.724390][ T4836] set_capacity_and_notify: 1 callbacks suppressed [ 41.724401][ T4836] loop0: detected capacity change from 0 to 512 [ 41.727461][ T4836] EXT4-fs: Ignoring removed oldalloc option [ 41.731669][ T4836] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.752531][ T4836] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.764152][ T4838] overlayfs: failed to clone upperpath [ 41.778152][ T4836] EXT4-fs (loop0): 1 truncate cleaned up [ 41.781866][ T4836] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 41.852872][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 41.857958][ T4844] loop1: detected capacity change from 0 to 512 [ 41.880239][ T4844] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.900497][ T4844] EXT4-fs (loop1): 1 truncate cleaned up [ 41.902045][ T4844] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 42.023265][ T4856] netlink: 'syz.4.149': attribute type 10 has an invalid length. [ 42.032604][ T4856] team0: Port device netdevsim0 added [ 42.057290][ T4856] netlink: 'syz.4.149': attribute type 10 has an invalid length. [ 42.076883][ T4856] team0: Port device netdevsim0 removed [ 42.091037][ T4856] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 42.121918][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 42.459849][ T4904] FAULT_INJECTION: forcing a failure. [ 42.459849][ T4904] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 42.462698][ T4904] CPU: 1 PID: 4904 Comm: syz.4.166 Not tainted syzkaller #0 [ 42.464147][ T4904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.466162][ T4904] Call trace: [ 42.466826][ T4904] dump_backtrace+0x1c4/0x1f0 [ 42.467798][ T4904] show_stack+0x2c/0x3c [ 42.468646][ T4904] __dump_stack+0x30/0x40 [ 42.469516][ T4904] dump_stack_lvl+0xf4/0x15c [ 42.470422][ T4904] dump_stack+0x1c/0x5c [ 42.471196][ T4904] should_fail_ex+0x3cc/0x524 [ 42.472125][ T4904] should_fail_alloc_page+0x74/0xb8 [ 42.473093][ T4904] prepare_alloc_pages+0x1b8/0x4f0 [ 42.474078][ T4904] __alloc_pages+0x134/0x544 [ 42.474970][ T4904] alloc_pages+0x434/0x6fc [ 42.475802][ T4904] append_pipe+0x1f4/0x51c [ 42.476681][ T4904] pipe_zero+0xbc/0x1a8 [ 42.477459][ T4904] iov_iter_zero+0x2dc/0xea8 [ 42.478323][ T4904] shmem_file_read_iter+0x540/0x954 [ 42.479293][ T4904] generic_file_splice_read+0x180/0x454 [ 42.480321][ T4904] splice_direct_to_actor+0x33c/0x9e4 [ 42.481295][ T4904] do_splice_direct+0x168/0x25c [ 42.482167][ T4904] do_sendfile+0x460/0xc8c [ 42.482967][ T4904] __arm64_sys_sendfile64+0x138/0x374 [ 42.483929][ T4904] invoke_syscall+0x98/0x290 [ 42.484751][ T4904] el0_svc_common+0x13c/0x258 [ 42.485611][ T4904] do_el0_svc+0x5c/0x134 [ 42.486392][ T4904] el0_svc+0x58/0x12c [ 42.487110][ T4904] el0t_64_sync_handler+0x84/0xf0 [ 42.488010][ T4904] el0t_64_sync+0x18c/0x190 [ 43.065543][ T4925] FAULT_INJECTION: forcing a failure. [ 43.065543][ T4925] name failslab, interval 1, probability 0, space 0, times 0 [ 43.068982][ T4925] CPU: 0 PID: 4925 Comm: syz.0.176 Not tainted syzkaller #0 [ 43.070232][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 43.072207][ T4925] Call trace: [ 43.072863][ T4925] dump_backtrace+0x1c4/0x1f0 [ 43.073773][ T4925] show_stack+0x2c/0x3c [ 43.074556][ T4925] __dump_stack+0x30/0x40 [ 43.075375][ T4925] dump_stack_lvl+0xf4/0x15c [ 43.076233][ T4925] dump_stack+0x1c/0x5c [ 43.077024][ T4925] should_fail_ex+0x3cc/0x524 [ 43.077910][ T4925] __should_failslab+0xc0/0x11c [ 43.078829][ T4925] should_failslab+0x10/0x28 [ 43.079689][ T4925] __kmem_cache_alloc_node+0x7c/0x318 [ 43.080857][ T4925] __kmalloc+0xc4/0x180 [ 43.081733][ T4925] memcg_list_lru_alloc+0x280/0x8bc [ 43.082809][ T4925] slab_pre_alloc_hook+0x2cc/0x31c [ 43.083859][ T4925] kmem_cache_alloc_lru+0x60/0x284 [ 43.084919][ T4925] iget_locked+0x1d8/0x754 [ 43.085833][ T4925] kernfs_get_inode+0x5c/0x5b4 [ 43.086830][ T4925] kernfs_iop_lookup+0x244/0x354 [ 43.087837][ T4925] __lookup_slow+0x25c/0x38c [ 43.088770][ T4925] lookup_slow+0x60/0x84 [ 43.089629][ T4925] link_path_walk+0x818/0xcd8 [ 43.090583][ T4925] path_openat+0x1c0/0x27a0 [ 43.091498][ T4925] do_filp_open+0x198/0x38c [ 43.092408][ T4925] do_sys_openat2+0x134/0x3fc [ 43.093353][ T4925] __arm64_sys_openat+0x11c/0x150 [ 43.094359][ T4925] invoke_syscall+0x98/0x290 [ 43.095299][ T4925] el0_svc_common+0x13c/0x258 [ 43.096239][ T4925] do_el0_svc+0x5c/0x134 [ 43.097070][ T4925] el0_svc+0x58/0x12c [ 43.097822][ T4925] el0t_64_sync_handler+0x84/0xf0 [ 43.098765][ T4925] el0t_64_sync+0x18c/0x190 [ 43.253625][ T4930] fuse: root generation should be zero [ 43.283632][ T4941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.182'. [ 43.310139][ T4945] FAULT_INJECTION: forcing a failure. [ 43.310139][ T4945] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.312625][ T4945] CPU: 0 PID: 4945 Comm: syz.2.183 Not tainted syzkaller #0 [ 43.313924][ T4945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 43.315854][ T4945] Call trace: [ 43.316482][ T4945] dump_backtrace+0x1c4/0x1f0 [ 43.317413][ T4945] show_stack+0x2c/0x3c [ 43.318213][ T4945] __dump_stack+0x30/0x40 [ 43.319039][ T4945] dump_stack_lvl+0xf4/0x15c [ 43.319909][ T4945] dump_stack+0x1c/0x5c [ 43.320732][ T4945] should_fail_ex+0x3cc/0x524 [ 43.321637][ T4945] should_fail+0x14/0x24 [ 43.322551][ T4945] should_fail_usercopy+0x20/0x30 [ 43.323622][ T4945] do_timer_create+0xb14/0x1220 [ 43.324636][ T4945] __arm64_sys_timer_create+0x1f8/0x288 [ 43.325757][ T4945] invoke_syscall+0x98/0x290 [ 43.326696][ T4945] el0_svc_common+0x13c/0x258 [ 43.327680][ T4945] do_el0_svc+0x5c/0x134 [ 43.328516][ T4945] el0_svc+0x58/0x12c [ 43.329265][ T4945] el0t_64_sync_handler+0x84/0xf0 [ 43.330206][ T4945] el0t_64_sync+0x18c/0x190 [ 43.406417][ T4951] loop2: detected capacity change from 0 to 256 [ 43.443348][ T4951] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 43.596717][ T4961] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 43.604675][ T4961] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 43.659427][ T4967] FAULT_INJECTION: forcing a failure. [ 43.659427][ T4967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.661902][ T4967] CPU: 0 PID: 4967 Comm: syz.4.192 Not tainted syzkaller #0 [ 43.663262][ T4967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 43.665156][ T4967] Call trace: [ 43.665837][ T4967] dump_backtrace+0x1c4/0x1f0 [ 43.666839][ T4967] show_stack+0x2c/0x3c [ 43.667673][ T4967] __dump_stack+0x30/0x40 [ 43.668553][ T4967] dump_stack_lvl+0xf4/0x15c [ 43.669463][ T4967] dump_stack+0x1c/0x5c [ 43.670302][ T4967] should_fail_ex+0x3cc/0x524 [ 43.671260][ T4967] should_fail+0x14/0x24 [ 43.672110][ T4967] should_fail_usercopy+0x20/0x30 [ 43.673126][ T4967] ____sys_sendmsg+0x270/0x90c [ 43.674094][ T4967] __sys_sendmsg+0x288/0x374 [ 43.675048][ T4967] __arm64_sys_sendmsg+0x80/0x94 [ 43.676073][ T4967] invoke_syscall+0x98/0x290 [ 43.677007][ T4967] el0_svc_common+0x13c/0x258 [ 43.677916][ T4967] do_el0_svc+0x5c/0x134 [ 43.678709][ T4967] el0_svc+0x58/0x12c [ 43.679577][ T4967] el0t_64_sync_handler+0x84/0xf0 [ 43.680662][ T4967] el0t_64_sync+0x18c/0x190 [ 43.803415][ T4965] overlayfs: failed to clone upperpath [ 43.938758][ T4980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.940567][ T4980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.983499][ T4982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.199'. [ 44.199390][ T4989] loop4: detected capacity change from 0 to 32768 [ 44.205270][ T4989] xfs: Unknown parameter 'nobarrier' [ 44.208047][ T4989] netlink: 64 bytes leftover after parsing attributes in process `syz.4.202'. [ 44.426662][ T5007] overlayfs: failed to clone upperpath [ 44.455824][ T5011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.212'. [ 44.721029][ T5017] loop4: detected capacity change from 0 to 32768 [ 44.722969][ T5017] xfs: Unknown parameter 'mtpt' [ 44.769171][ T4322] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 45.112467][ T4415] rxe_eth0 speed is unknown, defaulting to 1000 [ 45.162526][ T5030] overlayfs: failed to clone upperpath [ 45.594237][ T5066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.226'. [ 46.163649][ T5086] fuse: Bad value for 'fd' [ 46.209877][ T5091] fuse: Bad value for 'fd' [ 46.231744][ T5093] fuse: Bad value for 'fd' [ 46.292934][ T5097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.241'. [ 46.344684][ T5097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 46.361337][ T5105] FAULT_INJECTION: forcing a failure. [ 46.361337][ T5105] name failslab, interval 1, probability 0, space 0, times 0 [ 46.363675][ T5105] CPU: 1 PID: 5105 Comm: syz.2.242 Not tainted syzkaller #0 [ 46.364976][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 46.367003][ T5105] Call trace: [ 46.367009][ T5105] dump_backtrace+0x1c4/0x1f0 [ 46.368657][ T5105] show_stack+0x2c/0x3c [ 46.369126][ T5107] overlayfs: failed to clone upperpath [ 46.369469][ T5105] __dump_stack+0x30/0x40 [ 46.371367][ T5105] dump_stack_lvl+0xf4/0x15c [ 46.372228][ T5105] dump_stack+0x1c/0x5c [ 46.372983][ T5105] should_fail_ex+0x3cc/0x524 [ 46.373833][ T5105] __should_failslab+0xc0/0x11c [ 46.374742][ T5105] should_failslab+0x10/0x28 [ 46.375647][ T5105] slab_pre_alloc_hook+0x6c/0x31c [ 46.376602][ T5105] kmem_cache_alloc_lru+0x60/0x284 [ 46.377571][ T5105] __d_alloc+0x40/0x68c [ 46.378356][ T5105] d_alloc_pseudo+0x28/0x8c [ 46.379204][ T5105] alloc_file_pseudo+0xd8/0x1f4 [ 46.380088][ T5105] anon_inode_getfile+0xc4/0x16c [ 46.380978][ T5105] do_eventfd+0x164/0x2b4 [ 46.381752][ T5105] __arm64_sys_eventfd2+0x5c/0x74 [ 46.382677][ T5105] invoke_syscall+0x98/0x290 [ 46.383513][ T5105] el0_svc_common+0x13c/0x258 [ 46.384372][ T5105] do_el0_svc+0x5c/0x134 [ 46.385151][ T5105] el0_svc+0x58/0x12c [ 46.386016][ T5105] el0t_64_sync_handler+0x84/0xf0 [ 46.387045][ T5105] el0t_64_sync+0x18c/0x190 [ 46.444294][ T5114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.246'. [ 46.477060][ T5114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.726206][ T5135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.255'. [ 46.820908][ T5145] loop2: detected capacity change from 0 to 256 [ 46.832506][ T5145] exFAT-fs (loop2): error, The cluster chain has a loop [ 46.833970][ T5145] exFAT-fs (loop2): Filesystem has been set read-only [ 46.835401][ T5145] exFAT-fs (loop2): failed to count the number of clusters in root [ 46.837115][ T5145] exFAT-fs (loop2): failed to recognize exfat type [ 47.041505][ T5163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.266'. [ 47.059117][ T5163] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.061127][ T5163] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.062731][ T5163] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.062763][ T5163] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.181721][ T5165] device syzkaller0 entered promiscuous mode [ 47.199976][ T4413] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 47.378142][ T4413] usb 1-1: Using ep0 maxpacket: 8 [ 47.382917][ T4413] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.385080][ T4413] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 47.389472][ T4413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.411744][ T4413] usb 1-1: config 0 descriptor?? [ 47.439281][ T4413] ldusb 1-1:0.0: Interrupt in endpoint not found [ 47.825282][ T4413] usb 1-1: USB disconnect, device number 2 [ 48.717525][ C1] net_ratelimit: 52 callbacks suppressed [ 50.399959][ T4334] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 50.404147][ T4334] Bluetooth: hci3: Injecting HCI hardware error event [ 50.406037][ T4334] Bluetooth: hci3: hardware error 0x00 [ 50.557707][ T4345] Bluetooth: hci5: command 0x1003 tx timeout [ 50.559936][ T4332] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 52.637595][ T4334] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 53.917516][ C1] net_ratelimit: 53 callbacks suppressed [ 58.365070][ T5182] __nla_validate_parse: 1 callbacks suppressed [ 58.365084][ T5182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.275'. [ 58.391811][ T5185] netlink: 44 bytes leftover after parsing attributes in process `syz.3.275'. [ 58.394243][ T5188] FAULT_INJECTION: forcing a failure. [ 58.394243][ T5188] name failslab, interval 1, probability 0, space 0, times 0 [ 58.396364][ T5188] CPU: 1 PID: 5188 Comm: syz.4.276 Not tainted syzkaller #0 [ 58.397730][ T5188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 58.399626][ T5188] Call trace: [ 58.400267][ T5188] dump_backtrace+0x1c4/0x1f0 [ 58.401180][ T5188] show_stack+0x2c/0x3c [ 58.401964][ T5188] __dump_stack+0x30/0x40 [ 58.402757][ T5188] dump_stack_lvl+0xf4/0x15c [ 58.403604][ T5188] dump_stack+0x1c/0x5c [ 58.404392][ T5188] should_fail_ex+0x3cc/0x524 [ 58.405283][ T5188] __should_failslab+0xc0/0x11c [ 58.406167][ T5188] should_failslab+0x10/0x28 [ 58.406992][ T5188] kmem_cache_alloc+0x88/0x310 [ 58.407823][ T5188] __kernfs_new_node+0xec/0x5fc [ 58.408678][ T5188] kernfs_new_node+0x120/0x230 [ 58.409551][ T5188] __kernfs_create_file+0x60/0x2e0 [ 58.410488][ T5188] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 58.411479][ T5188] internal_create_group+0x3e8/0xb24 [ 58.412429][ T5188] sysfs_create_groups+0x60/0x134 [ 58.413325][ T5188] device_add_attrs+0x17c/0x6f8 [ 58.414194][ T5188] device_add+0x5ac/0xe4c [ 58.414963][ T5188] netdev_register_kobject+0x170/0x2f4 [ 58.415934][ T5188] register_netdevice+0xf28/0x1650 [ 58.416835][ T5188] macvlan_common_newlink+0xd7c/0x1374 [ 58.417956][ T5188] macvlan_newlink+0x48/0x60 [ 58.418792][ T5188] rtnl_newlink+0x10b4/0x1af0 [ 58.419624][ T5188] rtnetlink_rcv_msg+0x694/0xcc4 [ 58.420489][ T5188] netlink_rcv_skb+0x220/0x3ec [ 58.421343][ T5188] rtnetlink_rcv+0x28/0x38 [ 58.422105][ T5188] netlink_unicast+0x5fc/0x80c [ 58.422914][ T5188] netlink_sendmsg+0x6f0/0x9d8 [ 58.423762][ T5188] ____sys_sendmsg+0x588/0x90c [ 58.424627][ T5188] __sys_sendmsg+0x288/0x374 [ 58.425441][ T5188] __arm64_sys_sendmsg+0x80/0x94 [ 58.426309][ T5188] invoke_syscall+0x98/0x290 [ 58.427115][ T5188] el0_svc_common+0x13c/0x258 [ 58.427936][ T5188] do_el0_svc+0x5c/0x134 [ 58.428698][ T5188] el0_svc+0x58/0x12c [ 58.429398][ T5188] el0t_64_sync_handler+0x84/0xf0 [ 58.430293][ T5188] el0t_64_sync+0x18c/0x190 [ 58.455651][ T39] Bluetooth: hci5: Frame reassembly failed (-84) [ 58.461072][ T4340] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 58.475351][ T5205] tipc: Started in network mode [ 58.476485][ T5205] tipc: Node identity b2b053ef9727, cluster identity 4711 [ 58.482918][ T5205] tipc: Enabled bearer , priority 0 [ 58.484175][ T5206] +: renamed from syzkaller0 [ 58.519839][ T5206] tipc: Disabling bearer [ 58.793703][ T5249] FAULT_INJECTION: forcing a failure. [ 58.793703][ T5249] name failslab, interval 1, probability 0, space 0, times 0 [ 58.796355][ T5249] CPU: 1 PID: 5249 Comm: syz.0.300 Not tainted syzkaller #0 [ 58.797597][ T5249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 58.799541][ T5249] Call trace: [ 58.800191][ T5249] dump_backtrace+0x1c4/0x1f0 [ 58.801124][ T5249] show_stack+0x2c/0x3c [ 58.801932][ T5249] __dump_stack+0x30/0x40 [ 58.802773][ T5249] dump_stack_lvl+0xf4/0x15c [ 58.803648][ T5249] dump_stack+0x1c/0x5c [ 58.804420][ T5249] should_fail_ex+0x3cc/0x524 [ 58.805278][ T5249] __should_failslab+0xc0/0x11c [ 58.806185][ T5249] should_failslab+0x10/0x28 [ 58.807082][ T5249] __kmem_cache_alloc_node+0x7c/0x318 [ 58.808102][ T5249] __kmalloc_node_track_caller+0xb8/0x174 [ 58.809173][ T5249] kmemdup+0x5c/0x98 [ 58.809931][ T5249] sctp_addr_wq_mgmt+0x280/0x5fc [ 58.810883][ T5249] sctp_inet6addr_event+0x46c/0x610 [ 58.811868][ T5249] atomic_notifier_call_chain+0x178/0x2a4 [ 58.812928][ T5249] inet6addr_notifier_call_chain+0x30/0x40 [ 58.813995][ T5249] ipv6_add_addr+0xa90/0xd74 [ 58.814843][ T5249] inet6_addr_add+0x388/0x844 [ 58.815715][ T5249] addrconf_add_ifaddr+0x1f8/0x298 [ 58.816666][ T5249] inet6_ioctl+0x154/0x378 [ 58.817522][ T5249] sock_do_ioctl+0x100/0x258 [ 58.818406][ T5249] sock_ioctl+0x234/0x828 [ 58.819189][ T5249] __arm64_sys_ioctl+0x14c/0x1c8 [ 58.820096][ T5249] invoke_syscall+0x98/0x290 [ 58.820948][ T5249] el0_svc_common+0x13c/0x258 [ 58.821813][ T5249] do_el0_svc+0x5c/0x134 [ 58.822602][ T5249] el0_svc+0x58/0x12c [ 58.823347][ T5249] el0t_64_sync_handler+0x84/0xf0 [ 58.824437][ T5249] el0t_64_sync+0x18c/0x190 [ 58.874968][ T5253] loop4: detected capacity change from 0 to 8192 [ 58.879561][ T5253] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 58.881777][ T5253] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 58.881875][ T5253] REISERFS (device loop4): using ordered data mode [ 58.884627][ T5253] reiserfs: using flush barriers [ 58.885904][ T5253] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 58.889976][ T5253] REISERFS (device loop4): checking transaction log (loop4) [ 58.896424][ T5253] REISERFS (device loop4): Using r5 hash to sort names [ 58.898548][ T5253] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 58.902384][ T5255] device veth0 entered promiscuous mode [ 59.021893][ T5262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.304'. [ 59.034794][ T5262] netlink: 40 bytes leftover after parsing attributes in process `syz.0.304'. [ 59.036547][ T5262] netlink: 3 bytes leftover after parsing attributes in process `syz.0.304'. [ 59.058777][ T5264] xt_hashlimit: size too large, truncated to 1048576 [ 59.117544][ C1] net_ratelimit: 71 callbacks suppressed [ 59.531887][ T5273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.307'. [ 59.533500][ T5273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.307'. [ 59.620407][ T5278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.307'. [ 59.622284][ T5278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.307'. [ 59.924274][ T5283] loop2: detected capacity change from 0 to 32768 [ 60.001419][ T5283] XFS (loop2): Mounting V5 Filesystem [ 60.012302][ T5291] xt_hashlimit: size too large, truncated to 1048576 [ 60.032820][ T5283] XFS (loop2): Ending clean mount [ 60.226884][ T4342] XFS (loop2): Unmounting Filesystem [ 60.392489][ T5297] loop0: detected capacity change from 0 to 512 [ 60.418442][ T5297] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 60.477658][ T4340] Bluetooth: hci5: command 0x1003 tx timeout [ 60.481989][ T4334] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 60.593365][ T5310] FAULT_INJECTION: forcing a failure. [ 60.593365][ T5310] name failslab, interval 1, probability 0, space 0, times 0 [ 60.595739][ T5310] CPU: 0 PID: 5310 Comm: syz.2.313 Not tainted syzkaller #0 [ 60.596988][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 60.598851][ T5310] Call trace: [ 60.599534][ T5310] dump_backtrace+0x1c4/0x1f0 [ 60.600481][ T5310] show_stack+0x2c/0x3c [ 60.601278][ T5310] __dump_stack+0x30/0x40 [ 60.602064][ T5310] dump_stack_lvl+0xf4/0x15c [ 60.602900][ T5310] dump_stack+0x1c/0x5c [ 60.603698][ T5310] should_fail_ex+0x3cc/0x524 [ 60.604584][ T5310] __should_failslab+0xc0/0x11c [ 60.605473][ T5310] should_failslab+0x10/0x28 [ 60.606342][ T5310] __kmem_cache_alloc_node+0x7c/0x318 [ 60.607333][ T5310] __kmalloc+0xc4/0x180 [ 60.608118][ T5310] sg_kmalloc+0x54/0x64 [ 60.608910][ T5310] __sg_alloc_table+0xbc/0x578 [ 60.609828][ T5310] sg_alloc_table+0x48/0x88 [ 60.610664][ T5310] system_heap_allocate+0x57c/0xc88 [ 60.611634][ T5310] dma_heap_ioctl+0x440/0x6f4 [ 60.612499][ T5310] __arm64_sys_ioctl+0x14c/0x1c8 [ 60.613400][ T5310] invoke_syscall+0x98/0x290 [ 60.614250][ T5310] el0_svc_common+0x13c/0x258 [ 60.615124][ T5310] do_el0_svc+0x5c/0x134 [ 60.615902][ T5310] el0_svc+0x58/0x12c [ 60.616634][ T5310] el0t_64_sync_handler+0x84/0xf0 [ 60.617565][ T5310] el0t_64_sync+0x18c/0x190 [ 61.225875][ T27] audit: type=1326 audit(61.210:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.0.314" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdb79728 code=0x7fc00000 [ 61.251877][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 61.367735][ T5344] loop0: detected capacity change from 0 to 2048 [ 61.430605][ T5350] loop1: detected capacity change from 0 to 164 [ 61.456147][ T5344] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 61.461881][ T5344] fs-verity: sha512 using implementation "sha512-ce" [ 61.633407][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 61.831369][ T5381] capability: warning: `syz.0.347' uses deprecated v2 capabilities in a way that may be insecure [ 61.853680][ T5381] loop0: detected capacity change from 0 to 16 [ 61.913314][ T5386] loop1: detected capacity change from 0 to 128 [ 61.930879][ T5386] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.934322][ T5386] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.943229][ T5260] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 62.068004][ T5392] syz.3.352 uses obsolete (PF_INET,SOCK_PACKET) [ 62.332328][ T5390] loop0: detected capacity change from 0 to 32768 [ 62.393103][ T5390] XFS (loop0): Mounting V5 Filesystem [ 62.427765][ T5390] XFS (loop0): Ending clean mount [ 62.492039][ T4421] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.510349][ T5390] mmap: syz.0.351 (5390) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.614156][ T4337] XFS (loop0): Unmounting Filesystem [ 62.654879][ T5426] capability: warning: `syz.3.365' uses 32-bit capabilities (legacy support in use) [ 62.715168][ T4340] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.717638][ T4340] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.719622][ T4340] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.722468][ T4340] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.724788][ T4340] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.727620][ T4340] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.852761][ T4427] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.999787][ T4427] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.059589][ T5458] loop4: detected capacity change from 0 to 8 [ 63.075790][ T5458] SQUASHFS error: zlib decompression failed, data probably corrupt [ 63.077393][ T5458] SQUASHFS error: Failed to read block 0x9b: -5 [ 63.082686][ T5458] SQUASHFS error: Unable to read metadata cache entry [99] [ 63.085249][ T5458] SQUASHFS error: Unable to read inode 0x127 [ 63.091172][ T4427] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.095547][ T5458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.102673][ T5430] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.112905][ T5458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.164572][ T5460] loop2: detected capacity change from 0 to 7 [ 63.168066][ T5260] loop2: [ 63.168731][ T5260] loop2: partition table partially beyond EOD, truncated [ 63.175862][ T5460] loop2: [ 63.176469][ T5460] loop2: partition table partially beyond EOD, truncated [ 63.180548][ T4427] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.420162][ T5430] chnl_net:caif_netlink_parms(): no params data found [ 63.615283][ T5478] hub 1-0:1.0: USB hub found [ 63.621990][ T5478] hub 1-0:1.0: 1 port detected [ 63.863240][ T5430] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.864611][ T5430] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.866660][ T5430] device bridge_slave_0 entered promiscuous mode [ 63.987994][ T5430] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.989559][ T5430] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.991409][ T5430] device bridge_slave_1 entered promiscuous mode [ 64.028200][ T5519] loop0: detected capacity change from 0 to 1024 [ 64.065305][ T5430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.073214][ T5519] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 64.081766][ T5519] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm syz.0.385: lblock 3 mapped to illegal pblock 3 (length 2) [ 64.093833][ T5430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.101728][ T5519] EXT4-fs (loop0): Remounting filesystem read-only [ 64.116920][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 64.156199][ T5430] team0: Port device team_slave_0 added [ 64.182392][ T5430] team0: Port device team_slave_1 added [ 64.251337][ T5536] net_ratelimit: 63 callbacks suppressed [ 64.251343][ T5536] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 64.355368][ T5430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.356778][ T5430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.391585][ T5430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.479775][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.481207][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.491766][ T5430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.493139][ T5430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.509950][ T5430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.613596][ T5565] Illegal XDP return value 4025004032 on prog (id 54) dev syz_tun, expect packet loss! [ 64.721751][ T5430] device hsr_slave_0 entered promiscuous mode [ 64.758051][ T5430] device hsr_slave_1 entered promiscuous mode [ 64.768664][ T5430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.770277][ T5430] Cannot create hsr debugfs directory [ 64.791569][ T5582] overlayfs: failed to clone upperpath [ 64.797907][ T4340] Bluetooth: hci1: command 0x0409 tx timeout [ 65.656903][ T5430] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 65.661776][ T5632] loop5: detected capacity change from 0 to 7 [ 65.671917][ T5260] loop5: [ 65.672502][ T5260] loop5: partition table partially beyond EOD, [ 65.673708][ T5260] truncated [ 65.685478][ T5632] loop5: [ 65.686085][ T5632] loop5: partition table partially beyond EOD, truncated [ 65.812871][ T5430] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 65.863649][ T5430] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 65.903860][ T5430] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 65.959402][ T4427] device hsr_slave_0 left promiscuous mode [ 65.998868][ T4427] device hsr_slave_1 left promiscuous mode [ 66.076222][ T5662] overlayfs: failed to set xattr on upper [ 66.078572][ T5662] overlayfs: ...falling back to index=off,metacopy=off. [ 66.088456][ T4427] device bridge_slave_1 left promiscuous mode [ 66.090795][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.141058][ T4427] device bridge_slave_0 left promiscuous mode [ 66.142480][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.268246][ T4427] device veth1_macvtap left promiscuous mode [ 66.269729][ T4427] device veth0_macvtap left promiscuous mode [ 66.270940][ T4427] device veth1_vlan left promiscuous mode [ 66.272161][ T4427] device veth0_vlan left promiscuous mode [ 66.793096][ T5690] overlayfs: failed to clone upperpath [ 66.817137][ T5692] overlayfs: failed to clone upperpath [ 66.877645][ T4340] Bluetooth: hci1: command 0x041b tx timeout [ 66.920443][ C0] vcan0: j1939_tp_rxtimer: 0x000000006b69df60: rx timeout, send abort [ 66.923411][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000006b69df60: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 67.803177][ T5714] loop2: detected capacity change from 0 to 512 [ 67.846521][ T5714] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 67.858070][ T5714] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.446: Invalid inode bitmap blk 3171692 in block_group 0 [ 67.902306][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 68.491933][ T4427] team0 (unregistering): Port device team_slave_1 removed [ 68.565733][ T5731] loop0: detected capacity change from 0 to 128 [ 68.593259][ T5731] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 68.637266][ T4337] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 68.639614][ T4337] FAT-fs (loop0): Filesystem has been set read-only [ 68.641469][ T4337] VFS: Lookup of 'file0' in vfat loop0 would have caused loop [ 68.643827][ T4337] VFS: Lookup of 'file0' in vfat loop0 would have caused loop [ 68.683470][ T4427] team0 (unregistering): Port device team_slave_0 removed [ 68.868474][ T4427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.958485][ T4340] Bluetooth: hci1: command 0x040f tx timeout [ 69.069650][ T4427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.277585][ C0] net_ratelimit: 64 callbacks suppressed [ 69.437761][ T4411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.517768][ T4413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.599873][ T22] cfg80211: failed to load regulatory.db [ 70.559418][ T4427] bond0 (unregistering): Released all slaves [ 70.805911][ T5670] device hsr_slave_0 left promiscuous mode [ 70.839829][ T5670] device hsr_slave_1 left promiscuous mode [ 71.032833][ T5719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.447'. [ 71.047669][ T4340] Bluetooth: hci1: command 0x0419 tx timeout [ 71.180201][ T5430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.208312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.210191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.216770][ T5430] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.238825][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.240679][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.242315][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.243494][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.245373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.263497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.265504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.267443][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.267639][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.290634][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.299480][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.339434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.342344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.344189][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.357448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.360492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.366293][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.374477][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.377344][ T5765] netlink: 'syz.2.461': attribute type 3 has an invalid length. [ 71.397609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.399506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.402377][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.604820][ T4340] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.608326][ T4340] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.610980][ T4340] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.614363][ T4340] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.616231][ T4340] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.618955][ T4340] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.666367][ T5795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.469'. [ 71.796262][ T5430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.840283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.842043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.980958][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.221447][ T5833] loop4: detected capacity change from 0 to 16 [ 72.245135][ T5833] erofs: (device loop4): mounted with root inode @ nid 36. [ 72.279496][ T5833] Injecting memory failure for pfn 0x149787 at process virtual address 0x20001000 [ 72.287457][ T5833] Memory failure: 0x149787: corrupted page was clean: dropped without side effects [ 72.296608][ T5833] Memory failure: 0x149787: recovery action for clean LRU page: Recovered [ 72.304069][ T5833] Injecting memory failure for pfn 0x14979c at process virtual address 0x20002000 [ 72.309804][ T5833] Memory failure: 0x14979c: corrupted page was clean: dropped without side effects [ 72.311988][ T5833] Memory failure: 0x14979c: recovery action for clean LRU page: Recovered [ 72.324850][ T5833] Injecting memory failure for pfn 0x20ebcb at process virtual address 0x20003000 [ 72.331132][ T5833] Memory failure: 0x20ebcb: recovery action for reserved kernel page: Ignored [ 72.440582][ T4427] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.453153][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.455436][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.558826][ T4427] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.581726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.583651][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.610815][ T5430] device veth0_vlan entered promiscuous mode [ 72.614821][ T5430] device veth1_vlan entered promiscuous mode [ 72.701479][ T4427] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.720426][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.722347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.723921][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.725569][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.811074][ T4427] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.815461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.817368][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.825908][ T5430] device veth0_macvtap entered promiscuous mode [ 72.833255][ T5430] device veth1_macvtap entered promiscuous mode [ 72.849919][ T5430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.851947][ T5430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.853883][ T5430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.855789][ T5430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.865930][ T5430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.868234][ T5430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.880381][ T5430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.882221][ T5430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.889933][ T5430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.893624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.895414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.896965][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.901402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.907318][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 72.925304][ T5430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.927231][ T5430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.941340][ T5430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.943347][ T5430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.945101][ T5430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.947051][ T5430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.960046][ T5430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.961904][ T5430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.973033][ T5430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.985606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.987484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.045356][ T5430] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.046990][ T5430] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.052630][ T5430] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.054155][ T5430] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.207201][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.217914][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.220685][ T5790] device bridge_slave_0 entered promiscuous mode [ 73.224383][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.227807][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.233100][ T5790] device bridge_slave_1 entered promiscuous mode [ 73.258567][ T4427] tipc: Left network mode [ 73.382452][ T5888] FAULT_INJECTION: forcing a failure. [ 73.382452][ T5888] name failslab, interval 1, probability 0, space 0, times 0 [ 73.384811][ T5888] CPU: 0 PID: 5888 Comm: syz.4.486 Not tainted syzkaller #0 [ 73.386062][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.387939][ T5888] Call trace: [ 73.388585][ T5888] dump_backtrace+0x1c4/0x1f0 [ 73.389520][ T5888] show_stack+0x2c/0x3c [ 73.390369][ T5888] __dump_stack+0x30/0x40 [ 73.391222][ T5888] dump_stack_lvl+0xf4/0x15c [ 73.392080][ T5888] dump_stack+0x1c/0x5c [ 73.392895][ T5888] should_fail_ex+0x3cc/0x524 [ 73.393794][ T5888] __should_failslab+0xc0/0x11c [ 73.394709][ T5888] should_failslab+0x10/0x28 [ 73.395562][ T5888] kmem_cache_alloc+0x88/0x310 [ 73.396432][ T5888] taskstats_exit+0x360/0xa30 [ 73.397278][ T5888] do_exit+0x4c4/0x19ac [ 73.398005][ T5888] do_group_exit+0x198/0x238 [ 73.398808][ T5888] get_signal+0x11f4/0x133c [ 73.399612][ T5888] do_notify_resume+0x364/0x2c84 [ 73.400484][ T5888] el0_svc+0x9c/0x12c [ 73.401189][ T5888] el0t_64_sync_handler+0x84/0xf0 [ 73.402100][ T5888] el0t_64_sync+0x18c/0x190 [ 73.555821][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.619638][ T5903] loop4: detected capacity change from 0 to 8192 [ 73.631290][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.640781][ T5903] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 73.643150][ T5903] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 73.644855][ T5903] REISERFS (device loop4): using ordered data mode [ 73.646022][ T5903] reiserfs: using flush barriers [ 73.668083][ T5903] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 73.671230][ T5903] REISERFS (device loop4): checking transaction log (loop4) [ 73.679019][ T4334] Bluetooth: hci3: command 0x0409 tx timeout [ 73.707699][ T5903] REISERFS (device loop4): Using tea hash to sort names [ 73.709343][ T5903] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 73.720075][ T5903] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 73.762105][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.767908][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.846631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.903044][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.904527][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.906533][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.911401][ T5790] team0: Port device team_slave_0 added [ 74.035892][ T5790] team0: Port device team_slave_1 added [ 74.074751][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.076130][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.081457][ T4332] Bluetooth: hci5: command 0x1003 tx timeout [ 74.083541][ T4340] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 74.099575][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.103549][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.104869][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.131831][ T5922] CIFS: Attempting to mount \\127.0.0.1\share [ 74.168426][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.188021][ T5925] CIFS: VFS: Invalid response size 0 for command 0 [ 74.190915][ T5922] CIFS: VFS: cifs_mount failed w/return code = -5 [ 74.244067][ T5933] overlayfs: failed to clone upperpath [ 74.391532][ T5790] device hsr_slave_0 entered promiscuous mode [ 74.397464][ T5953] af_packet: tpacket_rcv: packet too big, clamped from 4087 to 3944. macoff=96 [ 74.399878][ C1] net_ratelimit: 1116 callbacks suppressed [ 74.405195][ T5951] overlayfs: failed to clone upperpath [ 74.418053][ T5790] device hsr_slave_1 entered promiscuous mode [ 74.656851][ T5954] loop2: detected capacity change from 0 to 32768 [ 74.694044][ T5954] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.504 (5954) [ 74.721780][ T4382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.732311][ T5954] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 74.734181][ T5954] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 74.735692][ T5954] BTRFS error (device loop2): superblock checksum mismatch [ 74.753854][ T5954] BTRFS error (device loop2): open_ctree failed: -22 [ 74.861157][ T5260] udevd[5260]: incorrect btrfs checksum on /dev/loop2 [ 75.081461][ T5999] loop4: detected capacity change from 0 to 1024 [ 75.083226][ T5999] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.094320][ T5999] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e002c028, mo2=0002] [ 75.095934][ T5999] System zones: 0-1, 3-12 [ 75.111979][ T5999] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 75.115539][ T6004] loop5: detected capacity change from 0 to 512 [ 75.126275][ T6004] EXT4-fs: Ignoring removed oldalloc option [ 75.166284][ T6004] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 75.304169][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 75.566699][ T5430] EXT4-fs (loop5): unmounting filesystem. [ 75.592414][ T6040] loop5: detected capacity change from 0 to 512 [ 75.646212][ T6038] netlink: 'syz.4.524': attribute type 1 has an invalid length. [ 75.685097][ T6038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.696373][ T6041] bridge0: port 3(syz_tun) entered disabled state [ 75.711671][ T6041] device syz_tun left promiscuous mode [ 75.713840][ T6041] bridge0: port 3(syz_tun) entered disabled state [ 75.758029][ T4340] Bluetooth: hci3: command 0x041b tx timeout [ 75.771060][ T6041] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 75.775986][ T5790] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 75.860873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 76.002554][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.004666][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.385405][ T6049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.405518][ T6049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.727434][ T6049] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.729294][ T6049] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.731241][ T6049] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.732876][ T6049] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.780025][ T6068] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 76.782554][ T6068] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 76.906514][ T5790] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 76.950639][ T5790] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 77.038206][ T5790] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 77.066988][ T4427] device hsr_slave_0 left promiscuous mode [ 77.097925][ T4427] device hsr_slave_1 left promiscuous mode [ 77.178949][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.180428][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.182676][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.184147][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.186826][ T4427] device bridge_slave_1 left promiscuous mode [ 77.191445][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.248792][ T4427] device bridge_slave_0 left promiscuous mode [ 77.250072][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.305972][ T6107] raw_sendmsg: syz.5.544 forgot to set AF_INET. Fix it! [ 77.397723][ T4427] device veth1_macvtap left promiscuous mode [ 77.398902][ T4427] device veth0_macvtap left promiscuous mode [ 77.400047][ T4427] device veth1_vlan left promiscuous mode [ 77.402455][ T4427] device veth0_vlan left promiscuous mode [ 77.455303][ T6116] loop5: detected capacity change from 0 to 512 [ 77.466397][ T6116] EXT4-fs: Ignoring removed bh option [ 77.501231][ T6116] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 77.503762][ T6116] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 77.505821][ T6116] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.547: Corrupt directory, running e2fsck is recommended [ 77.511674][ T6116] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 77.513435][ T6116] EXT4-fs error (device loop5): ext4_iget_extra_inode:4766: inode #15: comm syz.5.547: corrupted in-inode xattr [ 77.516277][ T6116] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.547: couldn't read orphan inode 15 (err -117) [ 77.521185][ T6116] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 77.547155][ T6116] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 77.551690][ T6116] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 77.554609][ T6116] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.547: Corrupt directory, running e2fsck is recommended [ 77.565741][ T6116] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 77.568438][ T6116] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 77.570568][ T6116] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.547: Corrupt directory, running e2fsck is recommended [ 77.573341][ T6116] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.547: path /21/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 77.580199][ T6116] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 22: comm syz.5.547: path /21/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0 [ 77.584056][ T6116] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 8: comm syz.5.547: path /21/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 77.604901][ T5430] EXT4-fs (loop5): unmounting filesystem. [ 77.837732][ T4340] Bluetooth: hci3: command 0x040f tx timeout [ 77.846616][ T6130] loop5: detected capacity change from 0 to 128 [ 77.851805][ T4340] Bluetooth: hci2: link tx timeout [ 77.852763][ T4340] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 77.877445][ T6130] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 77.892950][ T6130] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 77.904842][ T6130] fscrypt: loop5: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 77.923833][ T5430] EXT4-fs (loop5): unmounting filesystem. [ 78.686988][ T6148] loop2: detected capacity change from 0 to 32768 [ 78.693908][ T6148] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.560 (6148) [ 78.705326][ T6148] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 78.713030][ T6148] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 78.714876][ T6148] BTRFS info (device loop2): setting nodatasum [ 78.715951][ T6148] BTRFS info (device loop2): force zlib compression, level 3 [ 78.717227][ T6148] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 78.732391][ T6148] BTRFS info (device loop2): use lzo compression, level 0 [ 78.733702][ T6148] BTRFS info (device loop2): turning on flush-on-commit [ 78.734932][ T6148] BTRFS info (device loop2): enabling auto defrag [ 78.736081][ T6148] BTRFS info (device loop2): max_inline at 4096 [ 78.737223][ T6148] BTRFS info (device loop2): using free space tree [ 78.799857][ T6148] BTRFS info (device loop2): enabling ssd optimizations [ 78.907204][ T4342] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 79.517654][ C0] net_ratelimit: 71 callbacks suppressed [ 79.687758][ T4411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.871573][ T4427] team0 (unregistering): Port device team_slave_1 removed [ 79.917699][ T4413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.927635][ T4340] Bluetooth: hci2: command 0x0406 tx timeout [ 79.927649][ T4332] Bluetooth: hci3: command 0x0419 tx timeout [ 80.048750][ T4427] team0 (unregistering): Port device team_slave_0 removed [ 80.209087][ T4427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.429035][ T4427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.938805][ T4427] bond0 (unregistering): Released all slaves [ 82.209571][ T6106] netlink: 7 bytes leftover after parsing attributes in process `syz.3.542'. [ 82.347981][ T6192] netlink: 'syz.5.567': attribute type 4 has an invalid length. [ 82.349550][ T6192] netlink: 17 bytes leftover after parsing attributes in process `syz.5.567'. [ 82.351340][ T6192] FAULT_INJECTION: forcing a failure. [ 82.351340][ T6192] name failslab, interval 1, probability 0, space 0, times 0 [ 82.353647][ T6192] CPU: 0 PID: 6192 Comm: syz.5.567 Not tainted syzkaller #0 [ 82.354992][ T6192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 82.356950][ T6192] Call trace: [ 82.357579][ T6192] dump_backtrace+0x1c4/0x1f0 [ 82.358491][ T6192] show_stack+0x2c/0x3c [ 82.359294][ T6192] __dump_stack+0x30/0x40 [ 82.360110][ T6192] dump_stack_lvl+0xf4/0x15c [ 82.360944][ T6192] dump_stack+0x1c/0x5c [ 82.361723][ T6192] should_fail_ex+0x3cc/0x524 [ 82.362549][ T6192] __should_failslab+0xc0/0x11c [ 82.363419][ T6192] should_failslab+0x10/0x28 [ 82.364238][ T6192] __kmem_cache_alloc_node+0x7c/0x318 [ 82.365196][ T6192] __kmalloc+0xc4/0x180 [ 82.365945][ T6192] tnode_new+0xbc/0x318 [ 82.366696][ T6192] resize+0x3a8/0x251c [ 82.367418][ T6192] fib_insert_alias+0xb98/0xf14 [ 82.368322][ T6192] fib_trie_unmerge+0x288/0xb38 [ 82.369237][ T6192] fib_unmerge+0xdc/0x2fc [ 82.370065][ T6192] fib4_rule_configure+0xe0/0x980 [ 82.371031][ T6192] fib_nl_newrule+0xe30/0x1618 [ 82.371950][ T6192] rtnetlink_rcv_msg+0x694/0xcc4 [ 82.372911][ T6192] netlink_rcv_skb+0x220/0x3ec [ 82.373832][ T6192] rtnetlink_rcv+0x28/0x38 [ 82.374619][ T6192] netlink_unicast+0x5fc/0x80c [ 82.375494][ T6192] netlink_sendmsg+0x6f0/0x9d8 [ 82.376352][ T6192] ____sys_sendmsg+0x588/0x90c [ 82.377211][ T6192] __sys_sendmsg+0x288/0x374 [ 82.378020][ T6192] __arm64_sys_sendmsg+0x80/0x94 [ 82.378922][ T6192] invoke_syscall+0x98/0x290 [ 82.379746][ T6192] el0_svc_common+0x13c/0x258 [ 82.380624][ T6192] do_el0_svc+0x5c/0x134 [ 82.381413][ T6192] el0_svc+0x58/0x12c [ 82.381435][ T6192] el0t_64_sync_handler+0x84/0xf0 [ 82.383264][ T6192] el0t_64_sync+0x18c/0x190 [ 82.403476][ T6199] binder: 6198:6199 ioctl 4018620d 0 returned -22 [ 82.420375][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.464557][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.466349][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.475379][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.495829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.497862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.499796][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.501071][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.503047][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.505385][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 82.509737][ T6208] binder: 6198:6208 ioctl c018620b 0 returned -14 [ 82.536360][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.537134][ T6211] overlayfs: failed to clone upperpath [ 82.539570][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.541061][ T4421] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.542390][ T4421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.544108][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.545969][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.555147][ T24] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 82.587105][ T5790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.603968][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.613848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.616535][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.618465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.620281][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.624662][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.626835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.633400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.639137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.643255][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.648023][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.829781][ T6240] loop4: detected capacity change from 0 to 16 [ 82.845262][ T6240] erofs: (device loop4): mounted with root inode @ nid 36. [ 83.013354][ T4416] kernel write not supported for file net/rpc/auth.unix.gid/channel (pid: 4416 comm: kworker/0:7) [ 83.112308][ T6261] FAULT_INJECTION: forcing a failure. [ 83.112308][ T6261] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 83.115470][ T6261] CPU: 0 PID: 6261 Comm: syz.5.588 Not tainted syzkaller #0 [ 83.116813][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 83.118966][ T6261] Call trace: [ 83.119604][ T6261] dump_backtrace+0x1c4/0x1f0 [ 83.120491][ T6261] show_stack+0x2c/0x3c [ 83.121336][ T6261] __dump_stack+0x30/0x40 [ 83.122183][ T6261] dump_stack_lvl+0xf4/0x15c [ 83.123063][ T6261] dump_stack+0x1c/0x5c [ 83.123860][ T6261] should_fail_ex+0x3cc/0x524 [ 83.124731][ T6261] should_fail_alloc_page+0x74/0xb8 [ 83.125730][ T6261] prepare_alloc_pages+0x1b8/0x4f0 [ 83.125746][ T6261] __alloc_pages+0x134/0x544 [ 83.126775][ T6261] __folio_alloc+0x1c/0x44 [ 83.128436][ T6261] vma_alloc_folio+0x37c/0x8ac [ 83.129367][ T6261] shmem_alloc_and_acct_folio+0x3bc/0x948 [ 83.130479][ T6261] shmem_get_folio_gfp+0xedc/0x2038 [ 83.131446][ T6261] shmem_fallocate+0x6cc/0xb88 [ 83.131464][ T6261] vfs_fallocate+0x4a4/0x5fc [ 83.133172][ T6261] __arm64_sys_fallocate+0xc4/0x114 [ 83.134176][ T6261] invoke_syscall+0x98/0x290 [ 83.135060][ T6261] el0_svc_common+0x13c/0x258 [ 83.135965][ T6261] do_el0_svc+0x5c/0x134 [ 83.136775][ T6261] el0_svc+0x58/0x12c [ 83.137530][ T6261] el0t_64_sync_handler+0x84/0xf0 [ 83.138508][ T6261] el0t_64_sync+0x18c/0x190 [ 83.194545][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.590'. [ 83.206194][ T6238] ------------[ cut here ]------------ [ 83.207450][ T6238] WARNING: CPU: 0 PID: 6238 at net/mac80211/chan.c:2038 ieee80211_link_release_channel+0x16c/0x19c [ 83.209399][ T6238] Modules linked in: [ 83.210108][ T6238] CPU: 0 PID: 6238 Comm: syz.3.578 Not tainted syzkaller #0 [ 83.211425][ T6238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 83.213231][ T6238] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 83.214682][ T6238] pc : ieee80211_link_release_channel+0x16c/0x19c [ 83.215881][ T6238] lr : ieee80211_link_release_channel+0x16c/0x19c [ 83.217083][ T6238] sp : ffff800021ce6f60 [ 83.217830][ T6238] x29: ffff800021ce6f60 x28: ffff70000439ce10 x27: ffff0000f8550000 [ 83.219335][ T6238] x26: ffff0000de451910 x25: ffff800021ce7080 x24: ffff0000cf52a950 [ 83.220777][ T6238] x23: 1fffe0001f0aa2b1 x22: dfff800000000000 x21: 0000000000000000 [ 83.222238][ T6238] x20: ffff0000f8552208 x19: ffff0000f8551588 x18: 1fffe00033c2177e [ 83.223728][ T6238] x17: ffff8000163dd000 x16: ffff8000082dce18 x15: ffff80000fe5a768 [ 83.225242][ T6238] x14: 0000000000000001 x13: 1ffff0000439cda0 x12: 0000000000080000 [ 83.226777][ T6238] x11: 000000000007ffff x10: ffff8000295ab000 x9 : ffff8000114b29dc [ 83.228304][ T6238] x8 : 0000000000080000 x7 : ffff8000114b28dc x6 : 0000000000000000 [ 83.229816][ T6238] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082d5590 [ 83.231327][ T6238] x2 : ffff0000c4ec8000 x1 : 0000000000000000 x0 : 0000000000000000 [ 83.232840][ T6238] Call trace: [ 83.233449][ T6238] ieee80211_link_release_channel+0x16c/0x19c [ 83.234610][ T6238] ieee80211_link_stop+0x9c/0xc4 [ 83.235544][ T6238] ieee80211_uninit+0x1f8/0x25c [ 83.236450][ T6238] unregister_netdevice_many_notify+0x1200/0x1900 [ 83.237668][ T6238] unregister_netdevice_queue+0x2bc/0x310 [ 83.238771][ T6238] _cfg80211_unregister_wdev+0x1ec/0x928 [ 83.239851][ T6238] cfg80211_unregister_wdev+0x24/0x34 [ 83.240878][ T6238] ieee80211_if_remove+0x1a8/0x2ac [ 83.241842][ T6238] ieee80211_del_iface+0x20/0x34 [ 83.242774][ T6238] cfg80211_remove_virtual_intf+0x24c/0x4b0 [ 83.243866][ T6238] nl80211_del_interface+0x10c/0x124 [ 83.244860][ T6238] genl_family_rcv_msg_doit+0x210/0x308 [ 83.245916][ T6238] genl_rcv_msg+0x424/0x600 [ 83.246760][ T6238] netlink_rcv_skb+0x220/0x3ec [ 83.247659][ T6238] genl_rcv+0x38/0x50 [ 83.248430][ T6238] netlink_unicast+0x5fc/0x80c [ 83.249340][ T6238] netlink_sendmsg+0x6f0/0x9d8 [ 83.250242][ T6238] ____sys_sendmsg+0x588/0x90c [ 83.251144][ T6238] __sys_sendmsg+0x288/0x374 [ 83.252014][ T6238] __arm64_sys_sendmsg+0x80/0x94 [ 83.252939][ T6238] invoke_syscall+0x98/0x290 [ 83.253820][ T6238] el0_svc_common+0x13c/0x258 [ 83.254771][ T6238] do_el0_svc+0x5c/0x134 [ 83.255558][ T6238] el0_svc+0x58/0x12c [ 83.256289][ T6238] el0t_64_sync_handler+0x84/0xf0 [ 83.257181][ T6238] el0t_64_sync+0x18c/0x190 [ 83.258001][ T6238] irq event stamp: 7292 [ 83.258740][ T6238] hardirqs last enabled at (7291): [] __cancel_work_timer+0x2bc/0x450 [ 83.260479][ T6238] hardirqs last disabled at (7292): [] el1_dbg+0x24/0x80 [ 83.261996][ T6238] softirqs last enabled at (5884): [] dev_mc_flush+0x1b8/0x200 [ 83.263611][ T6238] softirqs last disabled at (5882): [] local_bh_disable+0x10/0x34 [ 83.265270][ T6238] ---[ end trace 0000000000000000 ]--- [ 83.271865][ T6257] loop4: detected capacity change from 0 to 32768 [ 83.274787][ T6257] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.587 (6257) [ 83.292087][ T6257] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 83.293985][ T6257] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 83.295321][ T6257] BTRFS info (device loop4): using free space tree [ 83.301986][ T6238] ------------[ cut here ]------------ [ 83.303011][ T6238] wlan0: Failed check-sdata-in-driver check, flags: 0x0 [ 83.304478][ T6238] WARNING: CPU: 0 PID: 6238 at net/mac80211/driver-ops.c:315 drv_unassign_vif_chanctx+0x35c/0x63c [ 83.306497][ T6238] Modules linked in: [ 83.307360][ T6238] CPU: 0 PID: 6238 Comm: syz.3.578 Tainted: G W syzkaller #0 [ 83.309137][ T6238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 83.311120][ T6238] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 83.312551][ T6238] pc : drv_unassign_vif_chanctx+0x35c/0x63c [ 83.313637][ T6238] lr : drv_unassign_vif_chanctx+0x35c/0x63c [ 83.314748][ T6238] sp : ffff800021ce6e00 [ 83.315542][ T6238] x29: ffff800021ce6e00 x28: dfff800000000000 x27: 0000000000000000 [ 83.317067][ T6238] x26: ffff0000f8552648 x25: dfff800000000000 x24: ffff0000f8552798 [ 83.318607][ T6238] x23: 0000000000000000 x22: ffff0000cbc15000 x21: ffff0000f8552798 [ 83.320117][ T6238] x20: ffff800018db4000 x19: ffff0000f8550cc0 x18: 1fffe00033c2177e [ 83.321619][ T6238] x17: ffff8000163dd000 x16: ffff8000082de324 x15: 0000000040000000 [ 83.323106][ T6238] x14: 0000000000000001 x13: 1fffe00033c23e88 x12: 0000000000000000 [ 83.324589][ T6238] x11: ff0080000a932840 x10: 0000000000000003 x9 : f72213a190ad7800 [ 83.326099][ T6238] x8 : f72213a190ad7800 x7 : ffff80000825b754 x6 : 0000000000000000 [ 83.327606][ T6238] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 83.329133][ T6238] x2 : 0000000000000006 x1 : ffff800011cfdca0 x0 : ffff800187dd5000 [ 83.330671][ T6238] Call trace: [ 83.331319][ T6238] drv_unassign_vif_chanctx+0x35c/0x63c [ 83.332363][ T6238] ieee80211_assign_link_chanctx+0x140/0x82c [ 83.333511][ T6238] __ieee80211_link_release_channel+0x298/0x5c4 [ 83.334707][ T6238] ieee80211_link_release_channel+0x130/0x19c [ 83.335869][ T6238] ieee80211_link_stop+0x9c/0xc4 [ 83.336811][ T6238] ieee80211_uninit+0x1f8/0x25c [ 83.337727][ T6238] unregister_netdevice_many_notify+0x1200/0x1900 [ 83.338946][ T6238] unregister_netdevice_queue+0x2bc/0x310 [ 83.340019][ T6238] _cfg80211_unregister_wdev+0x1ec/0x928 [ 83.341089][ T6238] cfg80211_unregister_wdev+0x24/0x34 [ 83.342132][ T6238] ieee80211_if_remove+0x1a8/0x2ac [ 83.343106][ T6238] ieee80211_del_iface+0x20/0x34 [ 83.344019][ T6238] cfg80211_remove_virtual_intf+0x24c/0x4b0 [ 83.345109][ T6238] nl80211_del_interface+0x10c/0x124 [ 83.346131][ T6238] genl_family_rcv_msg_doit+0x210/0x308 [ 83.347158][ T6238] genl_rcv_msg+0x424/0x600 [ 83.347996][ T6238] netlink_rcv_skb+0x220/0x3ec [ 83.348873][ T6238] genl_rcv+0x38/0x50 [ 83.349617][ T6238] netlink_unicast+0x5fc/0x80c [ 83.350505][ T6238] netlink_sendmsg+0x6f0/0x9d8 [ 83.351411][ T6238] ____sys_sendmsg+0x588/0x90c [ 83.352319][ T6238] __sys_sendmsg+0x288/0x374 [ 83.353198][ T6238] __arm64_sys_sendmsg+0x80/0x94 [ 83.354160][ T6238] invoke_syscall+0x98/0x290 [ 83.355072][ T6238] el0_svc_common+0x13c/0x258 [ 83.355987][ T6238] do_el0_svc+0x5c/0x134 [ 83.356792][ T6238] el0_svc+0x58/0x12c [ 83.357594][ T6238] el0t_64_sync_handler+0x84/0xf0 [ 83.358549][ T6238] el0t_64_sync+0x18c/0x190 [ 83.359427][ T6238] irq event stamp: 7458 [ 83.360235][ T6238] hardirqs last enabled at (7457): [] finish_lock_switch+0xb0/0x1c8 [ 83.362038][ T6238] hardirqs last disabled at (7458): [] el1_dbg+0x24/0x80 [ 83.363669][ T6238] softirqs last enabled at (7428): [] handle_softirqs+0xb1c/0xc90 [ 83.365337][ T6238] softirqs last disabled at (7295): [] __do_softirq+0x14/0x20 [ 83.367082][ T6238] ---[ end trace 0000000000000000 ]--- [ 83.374224][ T6238] ------------[ cut here ]------------ [ 83.375326][ T6238] wlan0: Failed check-sdata-in-driver check, flags: 0x0 [ 83.376927][ T6238] WARNING: CPU: 0 PID: 6238 at net/mac80211/driver-ops.h:156 ieee80211_vif_cfg_change_notify+0x220/0x260 [ 83.378810][ T6238] Modules linked in: [ 83.379650][ T6238] CPU: 0 PID: 6238 Comm: syz.3.578 Tainted: G W syzkaller #0 [ 83.381437][ T6238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 83.383404][ T6238] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 83.384940][ T6238] pc : ieee80211_vif_cfg_change_notify+0x220/0x260 [ 83.386245][ T6238] lr : ieee80211_vif_cfg_change_notify+0x220/0x260 [ 83.387537][ T6238] sp : ffff800021ce6e00 [ 83.388351][ T6238] x29: ffff800021ce6e00 x28: dfff800000000000 x27: ffff8000163e0394 [ 83.389859][ T6238] x26: ffff0000cbc15020 x25: 0000000000000000 x24: dfff800000000000 [ 83.391383][ T6238] x23: 0000000000000000 x22: ffff0000f8552740 x21: ffff0000cf528e80 [ 83.392938][ T6238] x20: ffff800018db4000 x19: ffff0000f8550cc0 x18: 1fffe00033c2177e [ 83.394478][ T6238] x17: ffff8000163dd000 x16: ffff8000082de324 x15: 0000000040000000 [ 83.395993][ T6238] x14: 0000000000000001 x13: 1fffe00033c23e88 x12: 0000000000000000 [ 83.397524][ T6238] x11: ff0080000a932840 x10: 0000000000000003 x9 : f72213a190ad7800 [ 83.399050][ T6238] x8 : f72213a190ad7800 x7 : ffff80000825b754 x6 : 0000000000000000 [ 83.400558][ T6238] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 83.402064][ T6238] x2 : 0000000000000006 x1 : ffff800011cfdca0 x0 : ffff800187dd5000 [ 83.403591][ T6238] Call trace: [ 83.404208][ T6238] ieee80211_vif_cfg_change_notify+0x220/0x260 [ 83.405356][ T6238] ieee80211_assign_link_chanctx+0x6f0/0x82c [ 83.406490][ T6238] __ieee80211_link_release_channel+0x298/0x5c4 [ 83.407650][ T6238] ieee80211_link_release_channel+0x130/0x19c [ 83.408798][ T6238] ieee80211_link_stop+0x9c/0xc4 [ 83.409720][ T6238] ieee80211_uninit+0x1f8/0x25c [ 83.410638][ T6238] unregister_netdevice_many_notify+0x1200/0x1900 [ 83.411841][ T6238] unregister_netdevice_queue+0x2bc/0x310 [ 83.412926][ T6238] _cfg80211_unregister_wdev+0x1ec/0x928 [ 83.414014][ T6238] cfg80211_unregister_wdev+0x24/0x34 [ 83.415037][ T6238] ieee80211_if_remove+0x1a8/0x2ac [ 83.416001][ T6238] ieee80211_del_iface+0x20/0x34 [ 83.416928][ T6238] cfg80211_remove_virtual_intf+0x24c/0x4b0 [ 83.418017][ T6238] nl80211_del_interface+0x10c/0x124 [ 83.419010][ T6238] genl_family_rcv_msg_doit+0x210/0x308 [ 83.420048][ T6238] genl_rcv_msg+0x424/0x600 [ 83.420895][ T6238] netlink_rcv_skb+0x220/0x3ec [ 83.421740][ T6238] genl_rcv+0x38/0x50 [ 83.422469][ T6238] netlink_unicast+0x5fc/0x80c [ 83.423371][ T6238] netlink_sendmsg+0x6f0/0x9d8 [ 83.424229][ T6238] ____sys_sendmsg+0x588/0x90c [ 83.425104][ T6238] __sys_sendmsg+0x288/0x374 [ 83.425949][ T6238] __arm64_sys_sendmsg+0x80/0x94 [ 83.426850][ T6238] invoke_syscall+0x98/0x290 [ 83.427665][ T6238] el0_svc_common+0x13c/0x258 [ 83.427695][ T6238] do_el0_svc+0x5c/0x134 [ 83.427705][ T6238] el0_svc+0x58/0x12c [ 83.427713][ T6238] el0t_64_sync_handler+0x84/0xf0 [ 83.427720][ T6238] el0t_64_sync+0x18c/0x190 [ 83.427726][ T6238] irq event stamp: 7948 [ 83.427729][ T6238] hardirqs last enabled at (7947): [] finish_lock_switch+0xb0/0x1c8 [ 83.430128][ T6238] hardirqs last disabled at (7948): [] el1_dbg+0x24/0x80 [ 83.432095][ T6238] softirqs last enabled at (7918): [] handle_softirqs+0xb1c/0xc90 [ 83.434562][ T6238] softirqs last disabled at (7461): [] __do_softirq+0x14/0x20 [ 83.437767][ T6238] ---[ end trace 0000000000000000 ]--- [ 83.454247][ T6238] ------------[ cut here ]------------ [ 83.455303][ T6238] WARNING: CPU: 0 PID: 6238 at net/mac80211/iface.c:113 ieee80211_recalc_idle+0x298/0x338 [ 83.457261][ T6238] Modules linked in: [ 83.458019][ T6238] CPU: 0 PID: 6238 Comm: syz.3.578 Tainted: G W syzkaller #0 [ 83.459740][ T6238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 83.461615][ T6238] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 83.463288][ T6238] pc : ieee80211_recalc_idle+0x298/0x338 [ 83.464505][ T6238] lr : ieee80211_recalc_idle+0x298/0x338 [ 83.465691][ T6238] sp : ffff800021ce6e00 [ 83.466548][ T6238] x29: ffff800021ce6e00 x28: 0000000000000000 x27: 0000000000000000 [ 83.468214][ T6238] x26: ffff0000cbc15020 x25: 0000000000000000 x24: dfff800000000000 [ 83.469743][ T6238] x23: 1fffe00019ea558c x22: 1fffe00019ea51d7 x21: dfff800000000000 [ 83.471247][ T6238] x20: 0000000000000000 x19: ffff0000cf528e80 x18: 1fffe00033c2177e [ 83.472855][ T6238] x17: ffff8000163dd000 x16: ffff8000082dce18 x15: 0000000000000002 [ 83.474469][ T6238] x14: 1ffff00002c7c073 x13: dfff800000000000 x12: 0000000000080000 [ 83.476066][ T6238] x11: 000000000007ffff x10: ffff8000295ab000 x9 : ffff8000113e8ffc [ 83.477591][ T6238] x8 : 0000000000080000 x7 : ffff800011388894 x6 : 0000000000000000 [ 83.479166][ T6238] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 83.480758][ T6238] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 83.482295][ T6238] Call trace: [ 83.482917][ T6238] ieee80211_recalc_idle+0x298/0x338 [ 83.483950][ T6238] ieee80211_del_chanctx+0x35c/0x70c [ 83.484981][ T6238] ieee80211_free_chanctx+0x258/0x33c [ 83.486045][ T6238] __ieee80211_link_release_channel+0x454/0x5c4 [ 83.487219][ T6238] ieee80211_link_release_channel+0x130/0x19c [ 83.488364][ T6238] ieee80211_link_stop+0x9c/0xc4 [ 83.489318][ T6238] ieee80211_uninit+0x1f8/0x25c [ 83.490257][ T6238] unregister_netdevice_many_notify+0x1200/0x1900 [ 83.491458][ T6238] unregister_netdevice_queue+0x2bc/0x310 [ 83.492519][ T6238] _cfg80211_unregister_wdev+0x1ec/0x928 [ 83.493562][ T6238] cfg80211_unregister_wdev+0x24/0x34 [ 83.494546][ T6238] ieee80211_if_remove+0x1a8/0x2ac [ 83.495503][ T6238] ieee80211_del_iface+0x20/0x34 [ 83.496449][ T6238] cfg80211_remove_virtual_intf+0x24c/0x4b0 [ 83.497561][ T6238] nl80211_del_interface+0x10c/0x124 [ 83.498571][ T6238] genl_family_rcv_msg_doit+0x210/0x308 [ 83.499599][ T6238] genl_rcv_msg+0x424/0x600 [ 83.500417][ T6238] netlink_rcv_skb+0x220/0x3ec [ 83.501291][ T6238] genl_rcv+0x38/0x50 [ 83.502043][ T6238] netlink_unicast+0x5fc/0x80c [ 83.502939][ T6238] netlink_sendmsg+0x6f0/0x9d8 [ 83.503849][ T6238] ____sys_sendmsg+0x588/0x90c [ 83.504754][ T6238] __sys_sendmsg+0x288/0x374 [ 83.505615][ T6238] __arm64_sys_sendmsg+0x80/0x94 [ 83.506665][ T6238] invoke_syscall+0x98/0x290 [ 83.507631][ T6238] el0_svc_common+0x13c/0x258 [ 83.508544][ T6238] do_el0_svc+0x5c/0x134 [ 83.509366][ T6238] el0_svc+0x58/0x12c [ 83.510130][ T6238] el0t_64_sync_handler+0x84/0xf0 [ 83.511107][ T6238] el0t_64_sync+0x18c/0x190 [ 83.511966][ T6238] irq event stamp: 8032 [ 83.512765][ T6238] hardirqs last enabled at (8031): [] exit_to_kernel_mode+0xcc/0xfc [ 83.514606][ T6238] hardirqs last disabled at (8032): [] el1_dbg+0x24/0x80 [ 83.516203][ T6238] softirqs last enabled at (8026): [] handle_softirqs+0xb1c/0xc90 [ 83.517982][ T6238] softirqs last disabled at (7951): [] __do_softirq+0x14/0x20 [ 83.519642][ T6238] ---[ end trace 0000000000000000 ]--- [ 83.540401][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.558364][ T6238] ------------[ cut here ]------------ [ 83.559448][ T6238] ODEBUG: free active (active state 0) object type: timer_list hint: ieee80211_mesh_housekeeping_timer+0x0/0xb4 [ 83.561539][ T6238] WARNING: CPU: 0 PID: 6238 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x2d4/0x454 [ 83.563134][ T6238] Modules linked in: [ 83.563788][ T6238] CPU: 0 PID: 6238 Comm: syz.3.578 Tainted: G W syzkaller #0 [ 83.565220][ T6238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 83.566956][ T6238] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 83.568337][ T6238] pc : debug_check_no_obj_freed+0x2d4/0x454 [ 83.569438][ T6238] lr : debug_check_no_obj_freed+0x2d4/0x454 [ 83.570500][ T6238] sp : ffff800021ce6f50 [ 83.571296][ T6238] x29: ffff800021ce6f80 x28: ffff0000f84aa3a0 x27: 0000000000000000 [ 83.572798][ T6238] x26: ffff800011d1b3a0 x25: ffff0000f85519d8 x24: ffff800011563948 [ 83.574283][ T6238] x23: 1ffff00003b0a2db x22: ffff0000f8554000 x21: dfff800000000000 [ 83.575821][ T6238] x20: ffff800011d1b3a8 x19: ffff0000f8550000 x18: 1fffe00033c2177e [ 83.577339][ T6238] x17: 6e6968207473696c x16: ffff8000082de324 x15: 6570797420746365 [ 83.578904][ T6238] x14: 0000000000000001 x13: 1ffff00002cb5a30 x12: 0000000000080000 [ 83.580482][ T6238] x11: 000000000007ffff x10: ffff8000295ab000 x9 : f72213a190ad7800 [ 83.581290][ T6257] BTRFS info (device loop4): enabling ssd optimizations [ 83.581991][ T6238] x8 : f72213a190ad7800 x7 : ffff80000831ae74 x6 : 0000000000000000 [ 83.584814][ T6238] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 83.584846][ T6238] x2 : 0000000000000007 x1 : 0000000100000000 [ 83.586514][ T6238] x0 : 0000000000000000 [ 83.586551][ T6238] Call trace: [ 83.586556][ T6238] debug_check_no_obj_freed+0x2d4/0x454 [ 83.588454][ T6238] free_unref_page_prepare+0x740/0xb24 [ 83.589137][ T6238] free_unref_page+0x7c/0x3a0 [ 83.589157][ T6238] __free_pages+0x1a0/0x1cc [ 83.591994][ T6238] free_large_kmalloc+0xc8/0x158 [ 83.592020][ T6238] kfree+0xf4/0x1a8 [ 83.593852][ T6238] kvfree+0x40/0x50 [ 83.595280][ T6238] netdev_freemem+0x4c/0x68 [ 83.596123][ T6238] netdev_release+0x88/0xb0 [ 83.596999][ T6238] device_release+0x94/0x1b4 [ 83.597861][ T6238] kobject_put+0x2a8/0x41c [ 83.598702][ T6238] netdev_run_todo+0xc34/0xd60 [ 83.599619][ T6238] rtnl_unlock+0x14/0x20 [ 83.600446][ T6238] nl80211_post_doit+0x1ec/0x308 [ 83.601390][ T6238] genl_family_rcv_msg_doit+0x248/0x308 [ 83.602442][ T6238] genl_rcv_msg+0x424/0x600 [ 83.603270][ T6238] netlink_rcv_skb+0x220/0x3ec [ 83.604182][ T6238] genl_rcv+0x38/0x50 [ 83.604923][ T6238] netlink_unicast+0x5fc/0x80c [ 83.605814][ T6238] netlink_sendmsg+0x6f0/0x9d8 [ 83.606726][ T6238] ____sys_sendmsg+0x588/0x90c [ 83.607637][ T6238] __sys_sendmsg+0x288/0x374 [ 83.608505][ T6238] __arm64_sys_sendmsg+0x80/0x94 [ 83.609423][ T6238] invoke_syscall+0x98/0x290 [ 83.610292][ T6238] el0_svc_common+0x13c/0x258 [ 83.611192][ T6238] do_el0_svc+0x5c/0x134 [ 83.611998][ T6238] el0_svc+0x58/0x12c [ 83.612776][ T6238] el0t_64_sync_handler+0x84/0xf0 [ 83.613718][ T6238] el0t_64_sync+0x18c/0x190 [ 83.614524][ T6238] irq event stamp: 10364 [ 83.615266][ T6238] hardirqs last enabled at (10363): [] console_emit_next_record+0x61c/0x808 [ 83.617118][ T6238] hardirqs last disabled at (10364): [] el1_dbg+0x24/0x80 [ 83.618678][ T6238] softirqs last enabled at (10272): [] cfg80211_mgmt_registrations_update+0x444/0x840 [ 83.620738][ T6238] softirqs last disabled at (10270): [] cfg80211_mgmt_registrations_update+0x110/0x840 [ 83.622813][ T6238] ---[ end trace 0000000000000000 ]--- [ 83.632265][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.633792][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.799612][ T5732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.801692][ T5732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.805863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.807829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.810125][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.811577][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.817597][ T5790] device veth0_vlan entered promiscuous mode [ 83.824625][ T5790] device veth1_vlan entered promiscuous mode [ 83.844224][ T5790] device veth0_macvtap entered promiscuous mode [ 83.846402][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.848833][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.850455][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.852422][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.855729][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.864704][ T5790] device veth1_macvtap entered promiscuous mode [ 83.878510][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.881182][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.883190][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.887827][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.889798][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.897678][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.900518][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.902118][ T5732] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.904134][ T5732] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.905998][ T5732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.911299][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.913453][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.915377][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.924420][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.926333][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.928678][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.937980][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.940916][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.942838][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.945491][ T5790] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.947383][ T5790] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.949660][ T5790] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.951264][ T5790] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.024087][ T5732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.025516][ T5732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.027336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.058737][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.060095][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.062324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.153631][ T4335] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 84.717541][ C1] net_ratelimit: 76 callbacks suppressed [ 85.118438][ T3903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.917513][ C1] net_ratelimit: 56 callbacks suppressed [ 90.317700][ T3903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog