last executing test programs: 591.747237ms ago: executing program 1 (id=2): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x5cb, &(0x7f0000000640)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) rmdir(0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0xfffffd8a}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r1, r2, 0x2) landlock_create_ruleset(&(0x7f0000000040)={0x4008, 0x2, 0x0, 0x820, 0x8}, 0x30, 0x2) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000100)={0x2}) 424.57604ms ago: executing program 2 (id=3): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000001040)=ANY=[@ANYRES32=0x0, @ANYBLOB="9c8a4f967ca55468510ec76d6db61f", @ANYRESDEC, @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="4399cfc629121e30a90803fb0bbda3f5496515b0b503d4d3a7282610902f3a3e35d431a26945a9fda42f0aa1ad87e8daacacb32d7e1d15b0157d94cd08e5e1f2b2714381ca0e44584fe078505b8f1aa3a21ab76677d987e3336e248e8f51bfe3d28f834ef99c09bd3a486ab5234339fda2c40bf8ca778d3b8037699ad987fff7bb6c478b5c422b761722188b7a8e0d1fef0dbb5f67339e624345bc72b856cdf479c8bbfe4cf293df9b8d326fe9cbef174eb9", @ANYRESOCT=0x0, @ANYRESOCT], 0xfe, 0x4b5, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) write$tun(r0, &(0x7f0000000580)={@void, @val={0x0, 0x4, 0x7, 0x4, 0x4, 0x799f}, @x25={0x1, 0x3, 0xb}}, 0xd) 42.238968ms ago: executing program 0 (id=1): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x8010, 0xffffffffffffffff, 0x1001000) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40000, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_mount_image$erofs(&(0x7f0000000500), &(0x7f0000000000)='./bus\x00', 0x1000410, &(0x7f0000000200)=ANY=[@ANYRES64], 0xfe, 0x181, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)) 21.421469ms ago: executing program 2 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x40004) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x4d0, 0x0, 0x1e0, 0xffffffff, 0x0, 0x1e0, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'dvmrp0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv6=@loopback, @ipv6=@mcast2, @gre_key, @gre_key}}}, {{@ipv6={@dev, @loopback, [], [], 'dvmrp0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@private0, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"a7fe"}}, @common=@srh={{0x30}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x530) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sock_addr=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_ino']) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, &(0x7f00000005c0)=ANY=[@ANYRES64=r5, @ANYRES8=r3, @ANYRESOCT=r5, @ANYRES32=0x0]) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r6, 0xfe53, 0xfe53, 0x4) 0s ago: executing program 3 (id=4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xa101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000280)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0x4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)={0x0, 0x22, 0x2, {0x2, 0xf}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000f, 0x1, 0x0, 0x1, 0x0, 0xd, 0x87b, 0x2, 0x0, 0x1, 0x0, 0x3, 0x6, 0x1, 0x2], 0x70000, 0x203c1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts. [ 66.147776][ T5756] cgroup: Unknown subsys name 'net' [ 66.251959][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.660627][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.604649][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.615525][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.624517][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.630185][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.632715][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.646457][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.647940][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.657994][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.661317][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.669076][ T5772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.675272][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.683748][ T5772] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.697283][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.698276][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.705943][ T5772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.712921][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.727691][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.735706][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.743117][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.752082][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.761619][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.773636][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.781055][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.789351][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.187283][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 70.270450][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 70.343919][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 70.361199][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.370993][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.378786][ T5769] bridge_slave_0: entered allmulticast mode [ 70.386208][ T5769] bridge_slave_0: entered promiscuous mode [ 70.398732][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.405934][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.414313][ T5769] bridge_slave_1: entered allmulticast mode [ 70.421056][ T5769] bridge_slave_1: entered promiscuous mode [ 70.441662][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 70.493128][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.502255][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.509830][ T5768] bridge_slave_0: entered allmulticast mode [ 70.517855][ T5768] bridge_slave_0: entered promiscuous mode [ 70.541931][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.549193][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.556511][ T5768] bridge_slave_1: entered allmulticast mode [ 70.563857][ T5768] bridge_slave_1: entered promiscuous mode [ 70.591285][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.625832][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.652602][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.692417][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.725361][ T5769] team0: Port device team_slave_0 added [ 70.751505][ T5769] team0: Port device team_slave_1 added [ 70.757660][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.767692][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.775168][ T5774] bridge_slave_0: entered allmulticast mode [ 70.781947][ T5774] bridge_slave_0: entered promiscuous mode [ 70.818916][ T5768] team0: Port device team_slave_0 added [ 70.827977][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.835283][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.842462][ T5774] bridge_slave_1: entered allmulticast mode [ 70.849923][ T5774] bridge_slave_1: entered promiscuous mode [ 70.864611][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.872515][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.880023][ T5777] bridge_slave_0: entered allmulticast mode [ 70.887503][ T5777] bridge_slave_0: entered promiscuous mode [ 70.896042][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.903295][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.910723][ T5777] bridge_slave_1: entered allmulticast mode [ 70.918295][ T5777] bridge_slave_1: entered promiscuous mode [ 70.934023][ T5768] team0: Port device team_slave_1 added [ 70.962270][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.972441][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.979740][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.006078][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.039120][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.051342][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.058494][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.084479][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.107398][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.121946][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.157637][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.164657][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.190865][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.231851][ T5777] team0: Port device team_slave_0 added [ 71.241183][ T5774] team0: Port device team_slave_0 added [ 71.248202][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.255447][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.282191][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.302535][ T5777] team0: Port device team_slave_1 added [ 71.310059][ T5774] team0: Port device team_slave_1 added [ 71.368313][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.375596][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.401738][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.430971][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.437991][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.464889][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.476639][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.483602][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.509897][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.526522][ T5769] hsr_slave_0: entered promiscuous mode [ 71.533038][ T5769] hsr_slave_1: entered promiscuous mode [ 71.550535][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.557656][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.584728][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.632149][ T5777] hsr_slave_0: entered promiscuous mode [ 71.638715][ T5777] hsr_slave_1: entered promiscuous mode [ 71.644831][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.652691][ T5777] Cannot create hsr debugfs directory [ 71.676214][ T5768] hsr_slave_0: entered promiscuous mode [ 71.682736][ T5768] hsr_slave_1: entered promiscuous mode [ 71.692240][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.692410][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.700110][ T5768] Cannot create hsr debugfs directory [ 71.712575][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.765350][ T5784] Bluetooth: hci2: command tx timeout [ 71.776032][ T5774] hsr_slave_0: entered promiscuous mode [ 71.782924][ T5774] hsr_slave_1: entered promiscuous mode [ 71.789235][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.796875][ T5774] Cannot create hsr debugfs directory [ 71.845497][ T5784] Bluetooth: hci3: command tx timeout [ 71.845582][ T5084] Bluetooth: hci1: command tx timeout [ 71.851154][ T5784] Bluetooth: hci0: command tx timeout [ 72.175327][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.190020][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.200000][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.211934][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.279342][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.291826][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.301991][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.312448][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.409165][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.421347][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.431063][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.443369][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.554612][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.581827][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.593395][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.617947][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.651406][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.676606][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.722267][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.734663][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.761157][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.769994][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.786743][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.817280][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.824407][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.833761][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.840957][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.861038][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.879731][ T4953] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.886945][ T4953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.910980][ T4953] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.918163][ T4953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.947435][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.954761][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.042296][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.106360][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.218294][ T4994] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.225525][ T4994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.239522][ T4994] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.246733][ T4994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.523510][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.641210][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.659296][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.690370][ T5774] veth0_vlan: entered promiscuous mode [ 73.712100][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.736588][ T5774] veth1_vlan: entered promiscuous mode [ 73.788991][ T5777] veth0_vlan: entered promiscuous mode [ 73.802319][ T5777] veth1_vlan: entered promiscuous mode [ 73.846960][ T5784] Bluetooth: hci2: command tx timeout [ 73.860744][ T5768] veth0_vlan: entered promiscuous mode [ 73.869935][ T5774] veth0_macvtap: entered promiscuous mode [ 73.891728][ T5768] veth1_vlan: entered promiscuous mode [ 73.907768][ T5769] veth0_vlan: entered promiscuous mode [ 73.921870][ T5774] veth1_macvtap: entered promiscuous mode [ 73.928030][ T5784] Bluetooth: hci1: command tx timeout [ 73.928079][ T5779] Bluetooth: hci3: command tx timeout [ 73.933429][ T5784] Bluetooth: hci0: command tx timeout [ 73.953649][ T5769] veth1_vlan: entered promiscuous mode [ 73.992893][ T5777] veth0_macvtap: entered promiscuous mode [ 74.013460][ T5768] veth0_macvtap: entered promiscuous mode [ 74.026081][ T5768] veth1_macvtap: entered promiscuous mode [ 74.037332][ T5777] veth1_macvtap: entered promiscuous mode [ 74.047809][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.071105][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.092596][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.108041][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.120326][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.131524][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.141539][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.151529][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.161585][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.182042][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.193856][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.206761][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.231246][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.244313][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.258984][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.269512][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.280995][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.293427][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.304006][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.314351][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.326327][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.337979][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.348576][ T5769] veth0_macvtap: entered promiscuous mode [ 74.361865][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.372068][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.381229][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.390186][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.406933][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.419179][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.429024][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.437919][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.452169][ T5769] veth1_macvtap: entered promiscuous mode [ 74.527031][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.538270][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.549699][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.560948][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.572591][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.583703][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.598580][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.630697][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.644279][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.648423][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.666298][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.676948][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.687804][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.697719][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.708449][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.719591][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.754638][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.766204][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.776142][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.785104][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.824363][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.836938][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.902807][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.912471][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.990199][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.009114][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.031410][ T4994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.052975][ T4994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.130439][ T5834] syz.1.2[5834]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 75.144644][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.177710][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.189999][ T5834] loop1: detected capacity change from 0 to 512 [ 75.248808][ T4994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.263547][ T5837] loop2: detected capacity change from 0 to 128 [ 75.269479][ T4994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.280149][ T5834] EXT4-fs error (device loop1): __ext4_fill_super:5517: inode #2: comm syz.1.2: iget: checksum invalid [ 75.308558][ T5834] EXT4-fs (loop1): get root inode failed [ 75.314382][ T5834] EXT4-fs (loop1): mount failed [ 75.339499][ T4994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.350872][ T4994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.374466][ T5837] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 75.540532][ T5834] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.935671][ T5784] Bluetooth: hci2: command tx timeout [ 75.947395][ T5851] loop2: detected capacity change from 0 to 2048 [ 76.005186][ T5784] Bluetooth: hci0: command tx timeout [ 76.012004][ T5084] Bluetooth: hci1: command tx timeout [ 76.017660][ T5779] Bluetooth: hci3: command tx timeout [ 76.208362][ T5851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.222655][ T5851] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.571086][ T5849] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.5: bg 0: block 345: padding at end of block bitmap is not set [ 76.587529][ T5850] loop0: detected capacity change from 0 to 16 [ 76.603663][ T5850] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 76.624749][ T5849] EXT4-fs (loop2): Remounting filesystem read-only [ 76.680565][ T1097] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 76.692323][ T1097] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 76.700851][ T1097] CPU: 1 PID: 1097 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 76.708415][ T1097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 76.718511][ T1097] Workqueue: ext4-rsv-conversion ext4_end_io_rsv_work [ 76.725329][ T1097] RIP: 0010:ext4_ext_map_blocks+0x2d14/0x6890 [ 76.731432][ T1097] Code: 44 24 08 89 18 89 9c 24 38 01 00 00 4c 8b 7c 24 18 4d 85 ff 0f 84 b1 e2 ff ff e8 47 b5 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 e7 1d 00 00 41 0f b7 47 08 c1 e0 04 48 [ 76.751061][ T1097] RSP: 0018:ffffc9000483f520 EFLAGS: 00010246 [ 76.757130][ T1097] RAX: 0000000000000000 RBX: fffffffffffffffb RCX: ffff888023e0bc00 [ 76.765099][ T1097] RDX: 0000000000000000 RSI: ffffffff8acacb60 RDI: 0000000000000003 [ 76.773061][ T1097] RBP: ffffc9000483f7d0 R08: ffffffff911e759f R09: 1ffffffff223ceb3 [ 76.781025][ T1097] R10: dffffc0000000000 R11: fffffbfff223ceb4 R12: 0000000000000001 [ 76.788992][ T1097] R13: 1ffff92000907ed0 R14: dffffc0000000000 R15: fffffffffffffffb [ 76.796955][ T1097] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 76.805885][ T1097] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.812459][ T1097] CR2: 0000001b2d7f2ff8 CR3: 000000007e25b000 CR4: 00000000003526e0 [ 76.820423][ T1097] Call Trace: [ 76.823694][ T1097] [ 76.826621][ T1097] ? rwsem_down_read_slowpath+0x880/0x880 [ 76.832385][ T1097] ? ext4_ext_release+0x10/0x10 [ 76.837251][ T1097] ? ext4_es_lookup_extent+0x601/0x9f0 [ 76.842710][ T1097] ext4_map_blocks+0x9db/0x1a90 [ 76.847563][ T1097] ? ext4_issue_zeroout+0x250/0x250 [ 76.852757][ T1097] ? ext4_journal_check_start+0x178/0x250 [ 76.859280][ T1097] ? __ext4_journal_start_sb+0x259/0x560 [ 76.865463][ T1097] ext4_convert_unwritten_extents+0x2c0/0x5e0 [ 76.871540][ T1097] ? trace_ext4_fallocate_exit+0x1d0/0x1d0 [ 76.877345][ T1097] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 76.883238][ T1097] ? lockdep_hardirqs_on+0x98/0x150 [ 76.888448][ T1097] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 76.894342][ T1097] ? _raw_spin_unlock+0x40/0x40 [ 76.899186][ T1097] ext4_convert_unwritten_io_end_vec+0xff/0x170 [ 76.905425][ T1097] ext4_end_io_rsv_work+0x2af/0x640 [ 76.910616][ T1097] ? __lock_acquire+0x7d80/0x7d80 [ 76.915634][ T1097] ? ext4_last_io_end_vec+0x70/0x70 [ 76.920830][ T1097] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.926024][ T1097] ? process_scheduled_works+0x975/0x1600 [ 76.931741][ T1097] ? process_scheduled_works+0x975/0x1600 [ 76.937462][ T1097] process_scheduled_works+0xa60/0x1600 [ 76.943012][ T1097] ? worker_attach_to_pool+0x370/0x370 [ 76.948472][ T1097] ? assign_work+0x3cc/0x5d0 [ 76.953059][ T1097] worker_thread+0xa5e/0xfe0 [ 76.957652][ T1097] ? _raw_spin_unlock+0x40/0x40 [ 76.962497][ T1097] ? __kthread_parkme+0x71/0x1c0 [ 76.967429][ T1097] kthread+0x2fa/0x390 [ 76.971491][ T1097] ? pr_cont_work+0x550/0x550 [ 76.976162][ T1097] ? kthread_blkcg+0xd0/0xd0 [ 76.980749][ T1097] ret_from_fork+0x48/0x80 [ 76.985165][ T1097] ? kthread_blkcg+0xd0/0xd0 [ 76.989757][ T1097] ret_from_fork_asm+0x11/0x20 [ 76.994521][ T1097] [ 76.997532][ T1097] Modules linked in: [ 77.036268][ T5851] syz.2.5 (5851) used greatest stack depth: 20872 bytes left [ 77.432626][ T5778] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 77.457028][ T1097] ---[ end trace 0000000000000000 ]--- [ 77.495450][ T1097] RIP: 0010:ext4_ext_map_blocks+0x2d14/0x6890 [ 77.529169][ T1097] Code: 44 24 08 89 18 89 9c 24 38 01 00 00 4c 8b 7c 24 18 4d 85 ff 0f 84 b1 e2 ff ff e8 47 b5 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 e7 1d 00 00 41 0f b7 47 08 c1 e0 04 48 [ 77.612588][ T1097] RSP: 0018:ffffc9000483f520 EFLAGS: 00010246 [ 77.630195][ T1097] RAX: 0000000000000000 RBX: fffffffffffffffb RCX: ffff888023e0bc00 [ 77.641437][ T1097] RDX: 0000000000000000 RSI: ffffffff8acacb60 RDI: 0000000000000003 [ 77.653533][ T1097] RBP: ffffc9000483f7d0 R08: ffffffff911e759f R09: 1ffffffff223ceb3 [ 77.663583][ T1097] R10: dffffc0000000000 R11: fffffbfff223ceb4 R12: 0000000000000001 [ 77.673753][ T1097] R13: 1ffff92000907ed0 R14: dffffc0000000000 R15: fffffffffffffffb [ 77.683022][ T1097] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 77.694218][ T1097] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.709009][ T1097] CR2: 0000001b2d91bff8 CR3: 000000002f300000 CR4: 00000000003526e0 [ 77.718038][ T1097] Kernel panic - not syncing: Fatal exception [ 77.724259][ T1097] Kernel Offset: disabled [ 77.728586][ T1097] Rebooting in 86400 seconds..