last executing test programs: 3.015734181s ago: executing program 3 (id=188): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r4, 0x8000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000200)={0x8, 'syz_tun\x00', {'wlan1\x00'}, 0x100}) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800084000000008140005"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x621, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000240)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) io_setup(0x7, &(0x7f0000000680)=0x0) r9 = openat$sysfs(0xffffff9c, &(0x7f00000006c0)='/sys/power/wakeup_count', 0x2042, 0x1a2) io_submit(r8, 0x1, &(0x7f0000000700)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f0000000780), 0xfffffc98}]) add_key(&(0x7f0000000280)='encrypted\x00', &(0x7f0000000400), &(0x7f0000000440), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='upda'], 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000540)='encrypted\x00', &(0x7f0000000640), &(0x7f0000000680), 0xca, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'veth1\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000004c0)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000500)={0x11, 0x300, r10, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 2.493098101s ago: executing program 3 (id=191): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, 0x0, &(0x7f00000002c0)=""/132}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) ioctl$PPPIOCSFLAGS(r2, 0x40047459, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xfffffffffffffffd, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x26}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc001}, 0x0) 2.468964341s ago: executing program 3 (id=193): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f00000001c0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000480)=0x80000001, 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000004c0)={0x4, 0x3}, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f00000006c0)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/78, 0x4e}], 0x1}, 0x1}], 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) shutdown(r5, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) 2.410869659s ago: executing program 4 (id=195): mknodat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1000, 0xfffffbfb) r0 = io_uring_setup(0x579e, &(0x7f0000000000)={0x0, 0xb90f, 0x400, 0x2, 0x1d6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000300)=[{0x80, 0x0, 0x0, 0xfffff010}, {0x6, 0x4}]}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/195, 0xc3}], 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40042, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002680), 0xa0402, 0x0) io_setup(0x3, &(0x7f00000026c0)=0x0) io_submit(r7, 0x2, &(0x7f0000002700)=[&(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x1000, r6, 0x0, 0x0, 0x9, 0x0, 0x2}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x6, 0x3, r6, 0x0}]) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f00000024c0)={0x0, 0x2800, &(0x7f0000002500)={&(0x7f0000002540)={0x54, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002640)={0x34, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x8c, &(0x7f0000000200)=ANY=[@ANYBLOB="74722c7208006e6f3d80a940ac35ca79769800835554fd2d6de00765c6ecebb5bb642564744477331ba1", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) 2.410644691s ago: executing program 1 (id=196): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x82b01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000180)=0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000080)=0x7, 0x4) ioctl$PPPIOCATTCHAN(r1, 0x40047457, 0x0) 2.361094065s ago: executing program 1 (id=197): r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x2c020400) recvfrom$packet(r0, &(0x7f0000000100)=""/134, 0x86, 0x20, &(0x7f00000001c0)={0x11, 0x1, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0xfffffffffffffea7) r1 = semget(0x2, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x1, 0x800}, {0x0, 0x7, 0x2800}], 0x2, &(0x7f0000000080)={r2, r3+10000000}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x7, @private0, 0x7f}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000300)="1f1a", 0x2}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000003c0)="49ee", 0x2}], 0x1}}], 0x2, 0x0) shutdown(r4, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000480)=@assoc_id=0x2, &(0x7f00000004c0)=0x4) 2.303889146s ago: executing program 4 (id=198): r0 = socket(0x400000000010, 0x3, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000280)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xaa182, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000180)={0x1, 0x0, 0x98, &(0x7f00000001c0)={0x0, 0x1000, 0x200001}}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x2, 0x7, 0x200, 0x0, 0x8000, 0x8, 0x1000, 0xd}}}}]}, 0x58}}, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x1255, 0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x255fdbfd, {0x0, 0x0, 0x0, r1, {0xfff2, 0x2}, {0xfff3, 0xfff3}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20045005}, 0x0) 2.240197845s ago: executing program 4 (id=199): r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x6a, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) write$binfmt_misc(r1, &(0x7f00000005c0)='}', 0x1) sendto$inet(r1, &(0x7f0000000600)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f82c0000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) 2.095636197s ago: executing program 2 (id=200): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0), 0x0, 0x49f, &(0x7f0000000180)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000000)={@desc={0x1, 0x0, @desc4}, 0x21, 0x0, '\x00', @c}) 2.06037007s ago: executing program 2 (id=202): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x802, 0x0) write(r4, &(0x7f0000000300)='27', 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x1000) syz_usb_control_io(r3, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="20c81e0000004d61501d01000000000000001000000000008007000000000000380400003a7c207af9abd890c9ba35eaeaf69a81fcaef4b134bcc3d50974d17165f26bcdccc2680603b6cfa342ad09927f36e60ced2088ea49638c70093a4c5c3eb8c6b5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x1000000010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0xf154a000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r2, 0x0, &(0x7f0000000200)={0x2e, 0xf1, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0xe25, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x2}}}, &(0x7f00000001c0)) setns(0xc9, 0x0) r6 = socket(0xa, 0x2, 0x5) r7 = syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f0000000400)={0x2c, &(0x7f0000000440)=[{0x4, '\x00', @data=0x401, 0x5}, {0x1d, '\x00', @data=0x2, 0x1}, {0x8, '\x00', @buffer={"079308b1f691a71742a8fc6e5748899f67c595ce43c07a374086f073091327f2", 0x20}, 0x3}]}) shutdown(r6, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) semget$private(0x0, 0x6, 0x3b1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) setpgid(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.908647129s ago: executing program 1 (id=203): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMGETINFO(r0, 0x80204d01, &(0x7f0000000140)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x2383, @private=0xa010100}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2383, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="18120000", @ANYRES32=r2, @ANYBLOB="fec7430000000000003377000000857a55d9e0ec612ec4013f91b539000075c397b2a91e80445ce5363fa87df8308cb003e464bcfd7ea335f2685d99cac4f96c7823cd7783f5f13bd2af41166d17285da9c9078e1a2b3324ae32b2871559e0eab8b55f59da8977efb5accce0fe438e02194948a1c094d302b16e167e7100000000000011f1299b055603598349421c7ac419241cdfac5b292d6e29faf37080a8a03172adccaaa61c"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500000000000000", @ANYRES32=0x0, @ANYBLOB="3a37d8cf09cd40b69bedeb1d1060a3598a975dbf8e69cecca8f04560a45f1ae4f99813a43167c3dc0829a77033f55e714757f7380151481b75572a54955d19d792000f4fda396d34", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r4 = getpid() sched_setscheduler(r4, 0x0, &(0x7f0000000080)=0x5) r5 = socket$kcm(0x29, 0x5, 0x0) getpeername(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r6, &(0x7f00000005c0), 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) r8 = fanotify_init(0x4, 0x1) socket(0x8, 0x5, 0x5) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) fanotify_mark(r8, 0x105, 0x10000839, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x9, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r2, &(0x7f0000000780), &(0x7f00000007c0)=@tcp=r1}, 0x20) write(r1, &(0x7f0000000800)='h', 0x100000) 1.557258361s ago: executing program 3 (id=204): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000a00}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0xc000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000009c0)='./bus\x00', 0x1400c, &(0x7f0000000a00)={[{@test_dummy_encryption}, {@jqfmt_vfsv0}, {@usrquota}]}, 0x3, 0x470, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file2\x00', 0x970a40, 0x6ab858183a7ef6cb) r3 = fanotify_init(0xf00, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000f00)='.\x00', 0xa880, 0x97) fanotify_mark(r3, 0x5, 0x4800003e, r4, 0x0) truncate(&(0x7f0000000f40)='./file2\x00', 0x800007) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f00000000c0)={0x1, 0x0, {0xf72a, 0x0, 0x0, 0x8}}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x3ff, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@data_err_ignore}, {@dax}, {@nodiscard}, {@inlinecrypt}, {@lazytime}]}, 0x6, 0x601, &(0x7f0000000280)="$eJzs3c9rHFUcAPDvzCYxaaJpRaQtigEPLUi3SS1Wvdj2Yg8FC/Yg4qGhSWro9gdNCrYWTMGDgoKIV5Fe/Ae8S+/eRFBvnoUqUlFQ6crszqabZDfdptndNvP5wGTnvZnd9747+zJvZvbtBFBYE9mfNGJXxJ1TScR407KxqC+cyNe7/ce109mURLX65u9JJHleY/0kfxzNE8MR8f3RiCdLa8tduHL17HSlWvdBxP7Fcxf3L1y5um/+3PSZ2TOz56cOvHzw0OQrUwenNiXO0fzx2PE3nvn0w3dfmvuhsi+Jw3Fy8P2ZWBXHZpmIibiTh9icPxARh7KZFu/Lo2YLhFBopfzzOBgRT8d4lGqpuvGY/6SvlQO6qlqKqAIFlWj/UFCNfkDj2L6z4+CTXe6V9M6tI/UDoLXxD9TPjcRw7dho2+2k6ciofm5j+yaUn5Xx37XdX2ZTrDgP8ffy1hnYhHLaWboeETtbxZ/U6ra9FmkWf7qiHklETEbEUFa/0QerQ9I0343zMOvZaPxpRBzOH7P8oxssf2JVutfxA1BMN4/kO/KlLHV3/5f1PRr9n2jR/xlrse/aiH7v/9r3/xr7++HaOfK0nrmz8bysz3Ki9UsOrs745eNjn7crv7n/l01Z+Y2+YC/cuh6xe1X8H9WCTZa3f9Ji+2ernDrcWRmv//jbsXbL+h1/9UbEnpbHP3d7pdncOtcn98/NV2Yn639blvHtd+983a78+4x/0y+3Zdt/W5v4m7Z/uvp52XtyscMyvjlx41y7ZWP3jD/9dSipH28O5TnvTS8uXpqKGEqO56s05R9Yvy6NdRqvkcW/9/nW7X/F5//6ytcZafzL7MDFt87ebrdsI5//povJd6od1qGdLP6Ze2//Ne0/y/uswzL+evvys+2WrRf/yIMEBgAAAAAAAAWU1q7BJml5eT5Ny+X6eNmnYltaubCw+MLchcvnZyL21r4POZg2rnSP19NJlp7Kvw/bSB9YlX4xInZExBelkVq6fPpCZabfwQMAAAAAAAAAAAAAAAAAAMBDYjQf/9+4T/Wfpfr4f6AgunmDOeDhpv1DcdXa/5pbPAFFYP8PxaX9Q3Fp/1Bc2j8Ul/YPxaX9Q3Fp/1Bc2j8AAAAAbEk7nrv5cxIRS6+O1KbMUL7MiCDY2gb7XQGgb0r9rgDQN8uX/nX2oXA66v//k/84YPerA/RB0iqz1jmort/4b7Z8JgAAAAAAAAAAAADQBXt2tR//b2wwbG2G/UFxPcD4fz8dAI84P/0PxeUYH7jXKP7hdguM/wcAAAAAAAAAAACAnhmrTUlazscCj0WalssRj0fE9hhM5uYrs5MR8URE/FQafCxLT/W70gAAAAAAAAAAAAAAAAAAALDFLFy5ena6Upm91Dzz75qcrT3TuAtqD8p6Le7zWZH0/m0ZiYi+b5SuzQw05SQRS9mWfygqdmkhOl95qNv16fM/JgAAAAAAAAAAAAAAAAAAKKCmscet7f6qxzUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN67e///7s30O0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NH0fwAAAP//GkM/nw==") 1.531658398s ago: executing program 0 (id=205): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newtaction={0xb0, 0x30, 0x871a15abc695fa3d, 0x0, 0x80000, {0x0, 0x0, 0xe4ff}, [{0x9c, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x10001, 0x3, 0x8, 0x1, 0x99ad}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc44}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x3c, 0xf, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xdfc, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x804c}, 0x0) 1.403836977s ago: executing program 0 (id=206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$smackfs_syslog(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0xa, 0x1) ioctl$DVB_DEMUX_DMX_REQBUFS(r4, 0xc0086f3c, &(0x7f0000000180)={0x7f, 0x6}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000000)={0x28, 0x2, 0x0, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f0000000100)={0x28, 0x7, r6, 0x0, 0xa0, 0x6fff, 0x3ffe}) fsopen(0x0, 0x1) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x1ff) mount(&(0x7f00000005c0), &(0x7f0000000600)='./mnt\x00', 0x0, 0x0, &(0x7f0000000680)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') 1.383002155s ago: executing program 4 (id=207): prlimit64(0x0, 0xe, &(0x7f0000000a00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000a80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000bc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c00)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000b80), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000bc0)={0x6, 0x1, 0x200, "9070f301a58da4b18427dc3282c761eb4dd920ad05eb6b1cba9282f7bf887268", 0x30314442}) shmctl$SHM_INFO(0x0, 0xe, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xe, 0x101301) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0xc, &(0x7f0000000380), 0x2, 0x55a, &(0x7f0000000440)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000009c0)='./file1\x00', 0x0) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f0000000100)={0x3ba6, 0x1, [{0x1, 0x1}]}) r5 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r5, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x80}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x842) ioctl$USBDEVFS_CONNECTINFO(r4, 0x40085511, &(0x7f0000000200)) lsm_list_modules(0xfffffffffffffffe, &(0x7f0000000c40)=0xfffffcbd, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{0x8000, 0x80, 0x3, 0x101}, {0x3, 0xf3, 0x4, 0x2}, {0x7fff, 0x40, 0xf0, 0x2}, {0x80, 0x4, 0x38, 0xc}, {0xfff, 0x0, 0xf7, 0x4}]}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000001c0)={0x0, r6, 0xffe, 0x0, 0xffffffff, 0xb9e}) r7 = socket$netlink(0x10, 0x3, 0x15) writev(r7, &(0x7f0000000280)=[{&(0x7f00000002c0)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) 1.293340854s ago: executing program 3 (id=208): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) write$ppp(r0, &(0x7f0000000200)="1206", 0x2) ioctl(r0, 0x4010744d, &(0x7f0000000100)="0002002000") 790.023784ms ago: executing program 2 (id=209): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000480)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000540)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000005c0)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x8, 0x0, &(0x7f0000000640)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfc}], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nullb/features\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/124, 0x7c}], 0x100000000000017a, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0/file0\x00', 0x10e, &(0x7f0000000280)={[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@dont_measure}, {@euid_gt={'euid>', r0}}, {@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}]}, 0x3, 0x464, &(0x7f0000000b40)="$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") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) writev(r6, &(0x7f0000000040), 0x2) 652.422623ms ago: executing program 1 (id=210): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x82b01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)=0x7, 0x4) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)=0x250) 483.844202ms ago: executing program 0 (id=211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xb}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x5, 0xf, 0x1, 0x3d3f, 0x0, 0x1002, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x5}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, {[@generic={0x13, 0x11, "d5226ece9085b75ccf4bf7b00aa21f"}]}}}}}}}}, 0x0) 483.120686ms ago: executing program 1 (id=212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f008714acb13b07f7d960421d89b9"], 0x0, 0x28}, 0x28) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB="00000000e6ff00000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000100"/24], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000e40)={0x0, 0x7, 0xfffffffffffffffb, 0x1}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000001240)={{r2}, {@val={r4}, @max}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001300)={0x0, 0x0, "e907f8f9951e76c13f64320a643e67c0683ea9d3bc0100000000000000e03423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ceb24506807badfbdc5af7044246d267c18b9cf1fc8f72566153c97e4af37017aa6ef8f2129507324606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e444800", "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"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000002300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000380), 0x1, 0x73a, &(0x7f0000000600)="$eJzs3E9rXOUaAPDnnCZtb5t7Jxfu4uJKqFih9iRN1a6EiOtCoR+ghslJCDnJhMykNjFg68KFIKgI/ulGv4EbRXBT+h0UwZ2CC0FrGheCi8iZzEx1OpOObdKR+vvBmfO875kzz/vMHF7mwLwTwD/W4+VDEjEWERciotLqTyPicDM6GnF193m3tzar21ub1SR2di7eSsrTmn3t10pa++PRPCX+HxE3RyNOvXZ33vr6xuJMUeSrrfZEY2llor6+cXphaWY+n8+XpyYnz559burZZyb3rdY3X/nkpzc+f/HLD88t/fb8radnk5hu1h1ddeyn3fdkNKa7+pcPItkQJcMeAAAAAym/5x+KiJHmt9RKHGpGAAAAwKNk58gOAAAA8MhLYtgjAAAAAA5W+3cAt7c2q+3tYf7+4McXImL8ztri7U7+keYa4oijMRoRx7aTP61MSHZPgwdy9VpE3Jjucf0nrevv/nWvXLdG+u/nRjn/TPea/9LO/BM95p+R9n8nPKD2/Ld91/x3J/+hPvPfhQFzHFk9+VXf/NciHhvplT/p5E/65H9pwPyfjn3zbb9jOx9HnIze+f+Ya4//h5iYWyjy1mPPHCc+e/XUXvUf65c/2bv+lQHr/+761Hy/uaTM/9SJvT//XvnLa+Kt1jjSiHi7tS/b73TlePLm5Ad71T/bp/57ff4fDVj/F69vfD/gUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKApjYixSNKsE6dplkUcj4j/xbG0qNUbp+Zqa8uz5bGI8RhN5xaKfDIiKrvtpGyfacZ32lNd7bMR8d+IeLfyr2Y7q9aK2WEXDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMfxiBiLJM0iIo2IXyppmmXDHhUAAACw78aHPQAAAADgwLn/BwAAgEef+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIbhw/ny57WxvbVbL9uzl9bXF2uXTs3l9MVtaq2bV2upKNl+rzRd5Vq0t3ev1ilpt5Vwsr12ZaOT1xkR9fePSUm1tuXFpYWlmPr+Ujz6UqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPirxppbkmYRkTbjNM2yiH9HxHiMJnMLRT4ZEf+JiK8ro0fK9plhDxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9V1/fWJwpinxVIBAIOsGwZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIahvr6xOFMU+Wp92CMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABguNIfkogot5OVJ8a6jx5Ofq009xHx8vWL712ZaTRWz5T9P3f6G++3+qeGMX4AAACgW/s+vX0fDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKj6+sbiTFHkqwcYDLtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/vweAAD//4rSy1s=") syz_mount_image$fuse(0x0, &(0x7f0000000d40)='./bus\x00', 0x870499, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000002340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000dc0), 0x804008, &(0x7f0000002440)={[{@upperdir={'upperdir', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x2, 0xa}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x4008000) 482.782697ms ago: executing program 2 (id=213): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000440)="fad33075218151db00316f3a277eedbc86ddfcfe793440b427b7d439d8d51f7c83b86d280a1a0a0140a7f8fc49829c9d8fdcccedc9af17ff07e8", 0x3a, 0x6008092, &(0x7f0000000480)={0x11, 0x88a8, r3, 0x1, 0xda, 0x6, @random="43947e1218bf"}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x322b, 0x6000b}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x48, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x4}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}]}}}]}, 0x78}}, 0x40080) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000100)=0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x2080de, &(0x7f0000000140)={[{@nobarrier}, {@grpjquota_path={'grpjquota', 0x3d, './bus'}}, {@noauto_da_alloc}, {@grpjquota_path={'grpjquota', 0x3d, './bus'}}], [{@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, 'bridge\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}, 0xe, 0x4d6, &(0x7f0000000680)="$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") 481.341058ms ago: executing program 3 (id=214): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_create_resource$futex(&(0x7f0000000000)=0x1) futex(r0, 0x80, 0x1, 0x0, 0x0, 0x0) futex$unlock_wake_list64(r0, 0x281, 0xfff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9, 0xffff) (async) r1 = syz_create_resource$futex(&(0x7f0000000080)=0x1) futex(r1, 0x9, 0x1, 0x0, r1, 0x2) (async) r2 = syz_create_resource$futex(&(0x7f00000000c0)=0x2) (async) futex(r1, 0x0, 0x1, 0x0, r1, 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0x401) (async, rerun: 64) futex(r1, 0x3, 0x0, &(0x7f0000000100), r2, 0x0) (async, rerun: 64) futex(0x0, 0x2, 0x3, 0x0, r1, 0x7000000) 384.882184ms ago: executing program 0 (id=215): r0 = getpid() ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) syz_emit_ethernet(0x82, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000740000000000019078ac1e0001ac1414aa05009078e00000e0460000000000000000110000ac1414aa00000000830300070300443c00030a010101000000000000000000000000ac14140000000000ac1414000000000000000000ac141400000000000000000000008000000800000000bb28e57c3862ace1120178c459e2580f9b9523997a4676c16c3106123d662f25d5aee77d685bdc64da00d0c167770723ce07413528c275f92c1ccfc074c0ee9c93"], 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e1100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, '.\x00'}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r1) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000000c0)={0x38, 0x5, 0x80, "d30580c9162f88a90000e6f37c2fad000000001d00", 0x20323159}) mmap$IORING_OFF_CQ_RING(0x0, 0x9, 0x1000000, 0x1010, r5, 0x8000000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000180)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f00000001c0)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000340)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) recvmmsg(r7, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x62, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r5, 0x4) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000380), 0x2008000, &(0x7f00000003c0)={[{@release_agent={'release_agent', 0x3d, './file0'}}]}) 379.36938ms ago: executing program 4 (id=216): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) splice(0xffffffffffffffff, &(0x7f0000000000)=0x6, r0, &(0x7f0000000140)=0x8, 0x10001, 0x1) fcntl$notify(r0, 0x402, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8932, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue=0xd}) 245.838249ms ago: executing program 2 (id=217): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) shutdown(r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_128={{0x304}, "2286694c8c70714f", "b0b5c8408edfd16c7d4972b0abfd23f3", "301b3a81", "226ef139560d7c66"}, 0x28) splice(r2, 0x0, r1, 0x0, 0x37c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001a00010000000000000000000a"], 0x38}}, 0x0) 245.586201ms ago: executing program 0 (id=218): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/net/ip_vs_conn\x00', 0x0, 0x0) lseek(r0, 0x50, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x162503, 0x0) fcntl$setstatus(r1, 0x4, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x3b1, 0x1000002, 0x10, r1, 0x0) 244.035556ms ago: executing program 1 (id=219): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x7a2002, 0x23456}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000580)) syz_ublk_add_dev(r1, r2, r3, r4, 0x0, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000100000000000000000000085000000c500000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r7 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x5, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000600)) mq_timedreceive(r7, &(0x7f00000001c0)=""/116, 0x74, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) 183.557593ms ago: executing program 2 (id=220): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/udc/dummy_udc.0/b_hnp_enable\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/100, 0x64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="21000000000000f0ffefffff0f00000000000000", @ANYRES32=r0, @ANYBLOB="209e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000100"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r1}, &(0x7f0000000c00)=0x7d8, &(0x7f0000000c40)='%ps \x00'}, 0x20) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)='virtiofs\x00', 0x30040, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000002380)={'gre0\x00', 0x0, 0x40, 0x8000, 0x7, 0x8, {{0x3f, 0x4, 0x1, 0x3a, 0xfc, 0x66, 0x0, 0xd9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@cipso={0x86, 0x2a, 0x1, [{0x7, 0x2}, {0x6, 0xc, "e0d70695c5309ec9a25a"}, {0x0, 0xf, "423344e3b09cc0d97c16957a03"}, {0x7, 0x7, "987a8103b0"}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0x6d, [@multicast2, @empty, @multicast2, @rand_addr=0x64010100, @loopback, @remote, @empty]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0x84, [@empty, @private=0xa010100, @rand_addr=0x64010100, @loopback, @loopback, @local]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xc8, [@remote, @empty, @broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x1f, 0xffffffffffffffff, [{0x2, 0x10, "dfea479296411aa2781b12f309f0"}, {0x5, 0x5, "2acaec"}, {0x5, 0x4, "9821"}]}, @rr={0x7, 0x27, 0x19, [@multicast2, @rand_addr=0x64010101, @local, @loopback, @local, @empty, @local, @broadcast, @local]}, @rr={0x7, 0x1b, 0x3a, [@rand_addr=0x64010102, @broadcast, @multicast1, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000d40)={'gre0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x20, 0x700, 0x4, 0x499, {{0x19, 0x4, 0x0, 0x8, 0x64, 0x64, 0x0, 0xcd, 0x2f, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x17, 0xb, [@multicast1, @empty, @private=0xa010101, @multicast1, @loopback]}, @generic={0x94, 0x9, "defa968888058c"}, @timestamp_addr={0x44, 0x1c, 0x5f, 0x1, 0xd, [{@rand_addr=0x64010101, 0xffffffff}, {@local, 0x10000}, {@broadcast, 0x8}]}, @timestamp_prespec={0x44, 0x14, 0x3c, 0x3, 0xb, [{@broadcast, 0x1}, {@loopback, 0xfffffffb}]}]}}}}}) r6 = syz_open_dev$vim2m(&(0x7f0000000b40), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000002280)={0x1, @pix_mp={0x0, 0x0, 0x32314752, 0x0, 0x2, [{}, {0x0, 0x800}, {}, {0x80000000}, {0xfffffffc}, {0x9}]}}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000d80)=0x0, &(0x7f0000000dc0)=0x4) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000e00)=0x0, &(0x7f0000000e40)=0x4) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000e80)={'vcan0\x00', 0x0}) bind(r9, &(0x7f0000000ec0)=@can={0x1d, r10, 0x1, 0x2}, 0x10) io_uring_enter(r0, 0x7c49, 0xfab4, 0x1, &(0x7f0000000b80)={[0x7]}, 0x8) r11 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r11, &(0x7f0000000f80)={&(0x7f0000001fc0)={0x1d, r10}, 0x10, &(0x7f0000002000)={&(0x7f0000002040)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, "0100"}, 0x10}}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000002080)={@local, @initdev, 0x0}, &(0x7f00000020c0)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000002240)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002200)={&(0x7f0000002100)={0xcc, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) r13 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r13, &(0x7f0000000880)={0xa, 0x4e28, 0x3, @loopback, 0x7}, 0x1c) writev(r13, &(0x7f00000008c0)=[{&(0x7f0000000900)=',', 0xffdf}], 0x1) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="180004000000e1001c0012800900010069706970000000000c000280060011004e200000"], 0x3c}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r1, &(0x7f0000000f80), &(0x7f0000000fc0)=""/4096}, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) 183.262781ms ago: executing program 4 (id=221): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)={[{@fat=@check_strict}, {@rodir}, {@shortname_lower}, {@fat=@umask={'umask', 0x3d, 0x800}}, {@utf8no}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@fat=@quiet}, {@shortname_mixed}, {@numtail}, {@rodir}, {@shortname_winnt}]}, 0x1, 0x2c1, &(0x7f0000000240)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/sda1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000580)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x40004c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="127c297c04ef7402b03db1d9151e533fc7fdff38959ca5b7c892990b420d49461dabb944a754f24a9d52b44fdaaed5aa207ab0bb6ea434f25f9bcb333b8c55d3f6cc7f85d7a24b8a24", 0x49}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)='\a', 0x1}], 0x1}}], 0x2, 0x119e75c40673edef) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) 0s ago: executing program 0 (id=222): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x82b01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)=0x7, 0x4) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)=0x250) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.63' (ED25519) to the list of known hosts. [ 29.058327][ T4699] cgroup: Unknown subsys name 'net' [ 29.189420][ T4699] cgroup: Unknown subsys name 'cpuset' [ 29.190991][ T4699] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.377299][ T4699] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.209827][ T4713] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.210537][ T4713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.211129][ T4713] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.211301][ T4713] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.211591][ T4713] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.212701][ T4713] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.212791][ T4713] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.213617][ T4713] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.214187][ T4716] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.216215][ T4712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.231654][ T4716] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.233958][ T4716] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.234476][ T4716] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.242855][ T4716] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.243274][ T4716] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.245610][ T4716] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.246210][ T4712] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.253359][ T4712] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.255332][ T4712] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.258379][ T4712] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.259149][ T4722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.259582][ T4712] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.267598][ T4712] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.273088][ T4712] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.273338][ T4712] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.425300][ T4710] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.425717][ T4710] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.426085][ T4710] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.427346][ T4717] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.438498][ T4709] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.477144][ T4719] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.498404][ T4718] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.506639][ T4710] infiniband rxe0: set active [ 30.507033][ T866] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.507097][ T4710] infiniband rxe0: added rxe_eth0 [ 30.523323][ T4710] RDS/IB: rxe0: added [ 30.523386][ T4710] smc: adding ib device rxe0 with port count 1 [ 30.523408][ T4710] smc: ib device rxe0 port 1 has no pnetid [ 30.536048][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.540849][ T4710] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.585214][ T4710] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.637984][ T4710] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.666768][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.668665][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.668735][ T4717] bridge_slave_0: entered allmulticast mode [ 30.669379][ T4717] bridge_slave_0: entered promiscuous mode [ 30.683093][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.683149][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.683251][ T4717] bridge_slave_1: entered allmulticast mode [ 30.683972][ T4717] bridge_slave_1: entered promiscuous mode [ 30.702836][ T4710] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.730768][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.730824][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.730883][ T4719] bridge_slave_0: entered allmulticast mode [ 30.731533][ T4719] bridge_slave_0: entered promiscuous mode [ 30.734302][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.735211][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.757067][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.757121][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.757179][ T4719] bridge_slave_1: entered allmulticast mode [ 30.757577][ T4719] bridge_slave_1: entered promiscuous mode [ 30.769907][ T4717] team0: Port device team_slave_0 added [ 30.770762][ T4717] team0: Port device team_slave_1 added [ 30.776633][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.776688][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.776736][ T4718] bridge_slave_0: entered allmulticast mode [ 30.782963][ T4718] bridge_slave_0: entered promiscuous mode [ 30.784624][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.794366][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.794684][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.794694][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.794705][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.798233][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.798260][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.798311][ T4718] bridge_slave_1: entered allmulticast mode [ 30.798714][ T4718] bridge_slave_1: entered promiscuous mode [ 30.805239][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.806090][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.810040][ T4710] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.814697][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.814705][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.814717][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.821922][ T4719] team0: Port device team_slave_0 added [ 30.822606][ T4719] team0: Port device team_slave_1 added [ 30.836826][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.836835][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.836852][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.841151][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.841159][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.841181][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.847909][ T4718] team0: Port device team_slave_0 added [ 30.848672][ T4718] team0: Port device team_slave_1 added [ 30.869371][ T4717] hsr_slave_0: entered promiscuous mode [ 30.869720][ T4717] hsr_slave_1: entered promiscuous mode [ 30.874217][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.874225][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.874236][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.897128][ T4719] hsr_slave_0: entered promiscuous mode [ 30.897423][ T4719] hsr_slave_1: entered promiscuous mode [ 30.897599][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 30.897630][ T4719] Cannot create hsr debugfs directory [ 30.897891][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.897899][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.897915][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.912340][ T4718] hsr_slave_0: entered promiscuous mode [ 30.912594][ T4718] hsr_slave_1: entered promiscuous mode [ 30.912767][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 30.912777][ T4718] Cannot create hsr debugfs directory [ 30.928489][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.928552][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.928611][ T4709] bridge_slave_0: entered allmulticast mode [ 30.929054][ T4709] bridge_slave_0: entered promiscuous mode [ 30.935950][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.935978][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.936029][ T4709] bridge_slave_1: entered allmulticast mode [ 30.936452][ T4709] bridge_slave_1: entered promiscuous mode [ 30.970879][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.973006][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.992520][ T4709] team0: Port device team_slave_0 added [ 30.995612][ T4709] team0: Port device team_slave_1 added [ 31.025468][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.025481][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.025496][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.037377][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.037388][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.037399][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.068234][ T4709] hsr_slave_0: entered promiscuous mode [ 31.068529][ T4709] hsr_slave_1: entered promiscuous mode [ 31.069026][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 31.069037][ T4709] Cannot create hsr debugfs directory [ 31.100126][ T4718] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.102129][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.102437][ T4718] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.104112][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.111011][ T4718] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.113596][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.113901][ T4718] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.115728][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.134825][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.134868][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.134936][ T4710] bridge_slave_0: entered allmulticast mode [ 31.135332][ T4710] bridge_slave_0: entered promiscuous mode [ 31.143435][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.143458][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.143517][ T4710] bridge_slave_1: entered allmulticast mode [ 31.143914][ T4710] bridge_slave_1: entered promiscuous mode [ 31.167542][ T4717] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.169953][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.171455][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.171482][ T4717] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.172344][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.174258][ T4717] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.175254][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.175529][ T4717] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.176492][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.178753][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.178783][ T4718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.178927][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.178955][ T4718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.194515][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.195785][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.209078][ T4710] team0: Port device team_slave_0 added [ 31.213074][ T4710] team0: Port device team_slave_1 added [ 31.221287][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.224962][ T1611] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.225378][ T1611] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.253483][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.253519][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.253899][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.253918][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.254409][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.254418][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.254432][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.255838][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.255848][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.255864][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.256036][ T4719] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.257412][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.258742][ T4719] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.261230][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.261541][ T4719] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.263446][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.280930][ T4710] hsr_slave_0: entered promiscuous mode [ 31.281252][ T4710] hsr_slave_1: entered promiscuous mode [ 31.281456][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 31.281466][ T4710] Cannot create hsr debugfs directory [ 31.285942][ T4709] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.287308][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.288421][ T4719] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.289682][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.293080][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.305544][ T4709] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.306755][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.311475][ T4709] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.312892][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.313186][ T4709] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.314294][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.364872][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.393875][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.405764][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.410537][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.410562][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.421946][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.431366][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.431393][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.441416][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.443934][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.452388][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.452412][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.463123][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.466171][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.466203][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.466718][ T4710] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.472879][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.473169][ T4710] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.474091][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.474915][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.480444][ T4710] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.481580][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.490810][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.490834][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.511043][ T4710] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.512518][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.514143][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.514171][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.533517][ T4718] veth0_vlan: entered promiscuous mode [ 31.536190][ T4718] veth1_vlan: entered promiscuous mode [ 31.536503][ T4719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.536518][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.581593][ T4718] veth0_macvtap: entered promiscuous mode [ 31.582988][ T4718] veth1_macvtap: entered promiscuous mode [ 31.590825][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.592851][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.640796][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.641784][ T3249] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.641979][ T3249] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.642052][ T3249] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.691861][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.693358][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.702960][ T3249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.702974][ T3249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.705611][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.705624][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.719686][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.722278][ T3034] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.722305][ T3034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.722817][ T3034] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.722837][ T3034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.752852][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.764609][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.773560][ T4718] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.810842][ T4719] veth0_vlan: entered promiscuous mode [ 31.813982][ T4717] veth0_vlan: entered promiscuous mode [ 31.815870][ T4717] veth1_vlan: entered promiscuous mode [ 31.828054][ T4719] veth1_vlan: entered promiscuous mode [ 31.835123][ T4719] veth0_macvtap: entered promiscuous mode [ 31.841456][ T4717] veth0_macvtap: entered promiscuous mode [ 31.842637][ T4717] veth1_macvtap: entered promiscuous mode [ 31.844232][ T4719] veth1_macvtap: entered promiscuous mode [ 31.854068][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.855004][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.861381][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.862378][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.916489][ T1611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.916502][ T1611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.927811][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.935315][ T3034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.935330][ T3034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.945416][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.945430][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.190811][ T4709] veth0_vlan: entered promiscuous mode [ 32.210056][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.210071][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.214519][ T4709] veth1_vlan: entered promiscuous mode [ 32.242963][ T4709] veth0_macvtap: entered promiscuous mode [ 32.246836][ T4709] veth1_macvtap: entered promiscuous mode [ 32.247416][ T51] Bluetooth: hci0: command tx timeout [ 32.247502][ T51] Bluetooth: hci1: command tx timeout [ 32.266839][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.268098][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.278283][ T3505] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.278551][ T3505] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.278704][ T3505] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.278719][ T3505] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.278733][ T3505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.278747][ T3505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.278760][ T3505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.287125][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.287272][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.287290][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.287307][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.294353][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.316252][ T4902] loop2: detected capacity change from 0 to 2048 [ 32.320215][ T4902] ======================================================= [ 32.320215][ T4902] WARNING: The mand mount option has been deprecated and [ 32.320215][ T4902] and is ignored by this kernel. Remove the mand [ 32.320215][ T4902] option from the mount to silence this warning. [ 32.320215][ T4902] ======================================================= [ 32.320268][ T4902] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.329556][ T4712] Bluetooth: hci3: command tx timeout [ 32.337859][ T4712] Bluetooth: hci4: command tx timeout [ 32.337943][ T4712] Bluetooth: hci2: command tx timeout [ 32.351668][ T4902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.352751][ T4710] veth0_vlan: entered promiscuous mode [ 32.355062][ T4710] veth1_vlan: entered promiscuous mode [ 32.365272][ T4710] veth0_macvtap: entered promiscuous mode [ 32.370514][ T4710] veth1_macvtap: entered promiscuous mode [ 32.371937][ T4902] EXT4-fs error (device loop2): ext4_read_inline_dir:1512: inode #12: block 5: comm syz.2.3: path /0/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=60 fake=0 [ 32.373045][ T4902] EXT4-fs (loop2): Remounting filesystem read-only [ 32.381757][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.382789][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.398485][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.422060][ T3249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.422075][ T3249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.432465][ T4912] FAULT_INJECTION: forcing a failure. [ 32.432465][ T4912] name failslab, interval 1, probability 0, space 0, times 1 [ 32.432480][ T4912] CPU: 0 UID: 0 PID: 4912 Comm: syz.2.7 Not tainted syzkaller #0 PREEMPT [ 32.432490][ T4912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 32.432495][ T4912] Call trace: [ 32.432498][ T4912] show_stack+0x2c/0x3c (C) [ 32.432516][ T4912] __dump_stack+0x30/0x40 [ 32.432529][ T4912] dump_stack_lvl+0xd8/0x12c [ 32.432538][ T4912] dump_stack+0x1c/0x28 [ 32.432547][ T4912] should_fail_ex+0x418/0x58c [ 32.432556][ T4912] should_failslab+0xc4/0x120 [ 32.432564][ T4912] __kmalloc_noprof+0x108/0x6c8 [ 32.432574][ T4912] alloc_pipe_info+0x208/0x420 [ 32.432583][ T4912] splice_direct_to_actor+0x63c/0x7a8 [ 32.432595][ T4912] do_splice_direct_actor+0x140/0x228 [ 32.432605][ T4912] do_splice_direct+0x58/0x70 [ 32.432614][ T4912] do_sendfile+0x40c/0x6c0 [ 32.432622][ T4912] __arm64_sys_sendfile64+0x1c4/0x28c [ 32.432630][ T4912] invoke_syscall+0x98/0x244 [ 32.432641][ T4912] el0_svc_common+0xec/0x23c [ 32.432651][ T4912] do_el0_svc+0x4c/0x5c [ 32.432660][ T4912] el0_svc+0x60/0x1d8 [ 32.432668][ T4912] el0t_64_sync_handler+0x44/0x104 [ 32.432676][ T4912] el0t_64_sync+0x198/0x19c [ 32.477035][ T218] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.477063][ T218] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.477078][ T218] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.477093][ T218] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.493208][ T3249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.493223][ T3249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.516415][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.516426][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.537842][ T218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.537855][ T218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.624361][ T4930] loop4: detected capacity change from 0 to 512 [ 32.626664][ T4930] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 32.626685][ T4930] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.626693][ T4930] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 32.636701][ T4932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.636714][ T4932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.941868][ T4939] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 32.941883][ T4939] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.957134][ T4939] .`: renamed from bond0 [ 32.958188][ T4930] EXT4-fs (loop4): 1 truncate cleaned up [ 32.958642][ T4930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.990697][ T4930] EXT4-fs error (device loop4): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.4.5: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 32.991082][ T4930] EXT4-fs (loop4): Remounting filesystem read-only [ 32.991092][ T4930] EXT4-fs warning (device loop4): ext4_rename_delete:3741: inode #2: comm syz.4.5: Deleting old file: nlink 5, error=-117 [ 33.012192][ T4930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 33.085796][ T4942] FAULT_INJECTION: forcing a failure. [ 33.085796][ T4942] name failslab, interval 1, probability 0, space 0, times 0 [ 33.085818][ T4942] CPU: 1 UID: 0 PID: 4942 Comm: syz.1.13 Not tainted syzkaller #0 PREEMPT [ 33.085829][ T4942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 33.085835][ T4942] Call trace: [ 33.085838][ T4942] show_stack+0x2c/0x3c (C) [ 33.085860][ T4942] __dump_stack+0x30/0x40 [ 33.085873][ T4942] dump_stack_lvl+0xd8/0x12c [ 33.085884][ T4942] dump_stack+0x1c/0x28 [ 33.085895][ T4942] should_fail_ex+0x418/0x58c [ 33.085904][ T4942] should_failslab+0xc4/0x120 [ 33.085913][ T4942] __kmalloc_cache_noprof+0x94/0x5fc [ 33.085923][ T4942] sctp_endpoint_new+0xe4/0x860 [ 33.085934][ T4942] sctp_init_sock+0x684/0x115c [ 33.085943][ T4942] sctp_v6_init_sock+0x20/0x80 [ 33.085953][ T4942] inet6_create+0xb4c/0xfc8 [ 33.085964][ T4942] __sock_create+0x31c/0x670 [ 33.085976][ T4942] __sys_socket_create+0xc0/0x11c [ 33.085987][ T4942] __sys_socket+0x44/0xec [ 33.085997][ T4942] __arm64_sys_socket+0x84/0x9c [ 33.086008][ T4942] invoke_syscall+0x98/0x244 [ 33.086020][ T4942] el0_svc_common+0xec/0x23c [ 33.086031][ T4942] do_el0_svc+0x4c/0x5c [ 33.086043][ T4942] el0_svc+0x60/0x1d8 [ 33.086051][ T4942] el0t_64_sync_handler+0x44/0x104 [ 33.086059][ T4942] el0t_64_sync+0x198/0x19c [ 33.089440][ T4942] loop1: detected capacity change from 0 to 128 [ 33.101599][ T4942] EXT4-fs (loop1): Test dummy encryption mode enabled [ 33.103672][ T4942] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.125860][ T4942] fscrypt: AES-256-XTS using blk-crypto-fallback [ 33.156060][ T4718] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.681824][ T4984] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 33.710208][ T4988] loop3: detected capacity change from 0 to 512 [ 33.713679][ T4983] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 33.734847][ T4988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.741051][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.779778][ T4988] netlink: 64 bytes leftover after parsing attributes in process `syz.3.19'. [ 33.780308][ T4995] loop0: detected capacity change from 0 to 8 [ 33.801554][ T4995] Major/Minor mismatch, trying to mount newer 8192.0 filesystem [ 33.801574][ T4995] Please update your kernel [ 33.805317][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.832464][ T4999] FAULT_INJECTION: forcing a failure. [ 33.832464][ T4999] name failslab, interval 1, probability 0, space 0, times 0 [ 33.832485][ T4999] CPU: 1 UID: 0 PID: 4999 Comm: syz.2.23 Not tainted syzkaller #0 PREEMPT [ 33.832496][ T4999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 33.832502][ T4999] Call trace: [ 33.832505][ T4999] show_stack+0x2c/0x3c (C) [ 33.832526][ T4999] __dump_stack+0x30/0x40 [ 33.832539][ T4999] dump_stack_lvl+0xd8/0x12c [ 33.832551][ T4999] dump_stack+0x1c/0x28 [ 33.832562][ T4999] should_fail_ex+0x418/0x58c [ 33.832570][ T4999] should_failslab+0xc4/0x120 [ 33.832579][ T4999] kmem_cache_alloc_node_noprof+0x98/0x604 [ 33.832589][ T4999] __alloc_skb+0x1f0/0x610 [ 33.832602][ T4999] _sctp_make_chunk+0x70/0x240 [ 33.832614][ T4999] sctp_make_datafrag_empty+0x114/0x218 [ 33.832626][ T4999] sctp_datamsg_from_user+0x670/0xdd0 [ 33.832637][ T4999] sctp_sendmsg_to_asoc+0xf6c/0x13f4 [ 33.832649][ T4999] sctp_sendmsg+0xc70/0x17bc [ 33.832659][ T4999] inet_sendmsg+0xb4/0xd8 [ 33.832670][ T4999] __sock_sendmsg+0xc8/0x17c [ 33.832680][ T4999] __sys_sendto+0x250/0x328 [ 33.832691][ T4999] __arm64_sys_sendto+0xec/0x10c [ 33.832702][ T4999] invoke_syscall+0x98/0x244 [ 33.832714][ T4999] el0_svc_common+0xec/0x23c [ 33.832725][ T4999] do_el0_svc+0x4c/0x5c [ 33.832737][ T4999] el0_svc+0x60/0x1d8 [ 33.832745][ T4999] el0t_64_sync_handler+0x44/0x104 [ 33.832753][ T4999] el0t_64_sync+0x198/0x19c [ 33.836264][ T5001] loop0: detected capacity change from 0 to 256 [ 33.872693][ T3034] IPVS: starting estimator thread 0... [ 33.875274][ T5004] loop4: detected capacity change from 0 to 256 [ 33.888381][ T4999] IPVS: dh: UDP 127.0.0.1:21 - no destination available [ 33.912625][ T4999] loop2: detected capacity change from 0 to 128 [ 33.922957][ T4999] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.925276][ T5009] IPv6: addrconf: prefix option has invalid lifetime [ 33.958237][ T5003] IPVS: using max 60 ests per chain, 144000 per kthread [ 33.972547][ T4719] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.038693][ T5022] Zero length message leads to an empty skb [ 34.110965][ T5035] netlink: 'syz.2.30': attribute type 1 has an invalid length. [ 34.118950][ T5039] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20001000 [ 34.121638][ T5039] Memory failure: 0x216bf1: unhandlable page. [ 34.121652][ T5039] Memory failure: 0x216bf1: recovery action for reserved kernel page: Ignored [ 34.225796][ T5043] loop3: detected capacity change from 0 to 1024 [ 34.243953][ T5043] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 34.244034][ T5043] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 34.244044][ T5043] EXT4-fs error (device loop3): ext4_acquire_dquot:7070: comm syz.3.40: Failed to acquire dquot type 0 [ 34.244105][ T5043] loop3: lost filesystem error report for type 5 error -5 [ 34.246120][ T5043] EXT4-fs (loop3): 1 truncate cleaned up [ 34.246583][ T5043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.261787][ T5043] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 34.261829][ T5043] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 34.261839][ T5043] EXT4-fs error (device loop3): ext4_acquire_dquot:7070: comm syz.3.40: Failed to acquire dquot type 0 [ 34.309811][ T5050] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 34.328477][ T4712] Bluetooth: hci0: command tx timeout [ 34.328536][ T51] Bluetooth: hci1: command tx timeout [ 34.408334][ T4712] Bluetooth: hci4: command tx timeout [ 34.408349][ T4713] Bluetooth: hci3: command tx timeout [ 34.408385][ T51] Bluetooth: hci2: command tx timeout [ 34.912626][ T5064] loop4: detected capacity change from 0 to 8 [ 34.915279][ T5064] Major/Minor mismatch, trying to mount newer 8192.0 filesystem [ 34.915297][ T5064] Please update your kernel [ 34.955562][ T5074] trusted_key: encrypted_key: insufficient parameters specified [ 34.958200][ T5074] trusted_key: encrypted_key: insufficient parameters specified [ 34.994729][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.056468][ T1611] IPVS: starting estimator thread 0... [ 35.125008][ T5093] mmap: syz.3.54 (5093) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.138971][ T5089] IPVS: using max 59 ests per chain, 141600 per kthread [ 35.170568][ T5097] netlink: 'syz.4.57': attribute type 29 has an invalid length. [ 35.170586][ T5097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.57'. [ 35.575673][ T5113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 35.582396][ T5113] bond1: down delay (1986356271) is not a multiple of miimon (41943040), value rounded to 1971322880 ms [ 35.601666][ T5116] netlink: 20 bytes leftover after parsing attributes in process `syz.1.62'. [ 35.603585][ T5116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 35.684880][ T5124] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 35.733300][ T30] audit: type=1326 audit(35.710:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5128 comm="syz.3.68" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99b78be8 code=0x7ffc0000 [ 35.733401][ T30] audit: type=1326 audit(35.710:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5128 comm="syz.3.68" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99b78be8 code=0x7ffc0000 [ 35.733755][ T30] audit: type=1326 audit(35.710:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5128 comm="syz.3.68" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99b78be8 code=0x7ffc0000 [ 35.733773][ T30] audit: type=1326 audit(35.710:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5128 comm="syz.3.68" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99b78be8 code=0x7ffc0000 [ 35.733835][ T30] audit: type=1326 audit(35.710:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5128 comm="syz.3.68" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff99b78be8 code=0x7ffc0000 [ 35.733992][ T30] audit: type=1326 audit(35.710:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5128 comm="syz.3.68" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99b78be8 code=0x7ffc0000 [ 35.743364][ T5129] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.748220][ T5129] EXT4-fs (loop3): orphan cleanup on readonly fs [ 35.748233][ T5129] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 35.750023][ T5129] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.68: attempt to clear invalid blocks 2 len 1 [ 35.750102][ T5129] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 35.751668][ T5129] EXT4-fs (loop3): Remounting filesystem read-only [ 35.751949][ T5129] EXT4-fs (loop3): 1 truncate cleaned up [ 35.752400][ T5129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.854760][ T5136] No such timeout policy "syz1" [ 36.426761][ T5147] FAULT_INJECTION: forcing a failure. [ 36.426761][ T5147] name failslab, interval 1, probability 0, space 0, times 0 [ 36.426915][ T5147] CPU: 1 UID: 0 PID: 5147 Comm: syz.4.73 Not tainted syzkaller #0 PREEMPT [ 36.426927][ T5147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.426932][ T5147] Call trace: [ 36.426935][ T5147] show_stack+0x2c/0x3c (C) [ 36.426960][ T5147] __dump_stack+0x30/0x40 [ 36.426971][ T5147] dump_stack_lvl+0xd8/0x12c [ 36.426980][ T5147] dump_stack+0x1c/0x28 [ 36.426990][ T5147] should_fail_ex+0x418/0x58c [ 36.426998][ T5147] should_failslab+0xc4/0x120 [ 36.427006][ T5147] __kmalloc_flags_noprof+0x140/0x724 [ 36.427014][ T5147] __alloc_empty_sheaf+0x38/0x50 [ 36.427022][ T5147] __pcs_replace_empty_main+0x274/0x4f4 [ 36.427030][ T5147] kmem_cache_alloc_noprof+0x35c/0x5d4 [ 36.427038][ T5147] xfrm_state_alloc+0x2c/0x270 [ 36.427047][ T5147] xfrm_state_find+0x2c60/0x45f4 [ 36.427055][ T5147] xfrm_resolve_and_create_bundle+0x4d0/0x2c60 [ 36.427062][ T5147] xfrm_lookup_with_ifid+0x430/0x19e4 [ 36.427069][ T5147] xfrm_lookup_route+0x4c/0x1cc [ 36.427076][ T5147] ip6_dst_lookup_flow+0xec/0x148 [ 36.427087][ T5147] ip6_sk_dst_lookup_flow+0x5b0/0x7c4 [ 36.427096][ T5147] udpv6_sendmsg+0x13e8/0x1eec [ 36.427106][ T5147] inet6_sendmsg+0xb4/0xd8 [ 36.427115][ T5147] __sock_sendmsg+0xc8/0x17c [ 36.427124][ T5147] __sys_sendto+0x250/0x328 [ 36.427133][ T5147] __arm64_sys_sendto+0xec/0x10c [ 36.427143][ T5147] invoke_syscall+0x98/0x244 [ 36.427153][ T5147] el0_svc_common+0xec/0x23c [ 36.427163][ T5147] do_el0_svc+0x4c/0x5c [ 36.427172][ T5147] el0_svc+0x60/0x1d8 [ 36.427187][ T5147] el0t_64_sync_handler+0x44/0x104 [ 36.427194][ T5147] el0t_64_sync+0x198/0x19c [ 36.457414][ T51] Bluetooth: hci1: command tx timeout [ 36.457493][ T51] Bluetooth: hci0: command tx timeout [ 36.487308][ T51] Bluetooth: hci3: command tx timeout [ 36.492544][ T4713] Bluetooth: hci4: command tx timeout [ 36.620509][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.643532][ T4713] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 36.661202][ T5155] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 36.858447][ T5164] loop0: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 36.870927][ T5171] process 'syz.2.82' launched './file1' with NULL argv: empty string added [ 37.023470][ T5180] netlink: 256 bytes leftover after parsing attributes in process `syz.1.86'. [ 37.542719][ T5188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.626563][ T4718] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 37.645370][ T4718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.654993][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 37.658771][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 37.661124][ T4726] udevd[4726]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 37.676018][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 37.695691][ T4726] udevd[4726]: inotify_add_watch(7, /dev/loop0p17, 10) failed: No such file or directory [ 37.702801][ T4726] udevd[4726]: inotify_add_watch(7, /dev/loop0p18, 10) failed: No such file or directory [ 37.705090][ T4726] udevd[4726]: inotify_add_watch(7, /dev/loop0p19, 10) failed: No such file or directory [ 37.744964][ T5202] udevd[5202]: inotify_add_watch(7, /dev/loop0p8, 10) failed: No such file or directory [ 37.753513][ T5202] udevd[5202]: inotify_add_watch(7, /dev/loop0p21, 10) failed: No such file or directory [ 37.755450][ T5207] udevd[5207]: inotify_add_watch(7, /dev/loop0p13, 10) failed: No such file or directory [ 37.770950][ T4713] Bluetooth: hci2: command tx timeout [ 37.804376][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.897150][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.897598][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.898139][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.900294][ T4712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.901099][ T4712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.902080][ T4712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.902485][ T4712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.916954][ T4712] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.918227][ T4712] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.918591][ T4712] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.950985][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.963225][ T5229] netlink: 76 bytes leftover after parsing attributes in process `syz.1.100'. [ 38.033257][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.107473][ T5241] FAULT_INJECTION: forcing a failure. [ 38.107473][ T5241] name fail_futex, interval 1, probability 0, space 0, times 1 [ 38.107494][ T5241] CPU: 1 UID: 0 PID: 5241 Comm: syz.2.102 Not tainted syzkaller #0 PREEMPT [ 38.107505][ T5241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.107510][ T5241] Call trace: [ 38.107513][ T5241] show_stack+0x2c/0x3c (C) [ 38.107532][ T5241] __dump_stack+0x30/0x40 [ 38.107544][ T5241] dump_stack_lvl+0xd8/0x12c [ 38.107556][ T5241] dump_stack+0x1c/0x28 [ 38.107567][ T5241] should_fail_ex+0x418/0x58c [ 38.107576][ T5241] should_fail+0x14/0x24 [ 38.107583][ T5241] get_futex_key+0x1ec/0x12b0 [ 38.107594][ T5241] futex_wait_setup+0x58/0x674 [ 38.107606][ T5241] __futex_wait+0x108/0x25c [ 38.107617][ T5241] futex_wait+0x108/0x2c0 [ 38.107628][ T5241] do_futex+0x320/0x378 [ 38.107638][ T5241] __arm64_sys_futex+0x2e4/0x418 [ 38.107649][ T5241] invoke_syscall+0x98/0x244 [ 38.107661][ T5241] el0_svc_common+0xec/0x23c [ 38.107673][ T5241] do_el0_svc+0x4c/0x5c [ 38.107684][ T5241] el0_svc+0x60/0x1d8 [ 38.107693][ T5241] el0t_64_sync_handler+0x44/0x104 [ 38.107701][ T5241] el0t_64_sync+0x198/0x19c [ 38.174707][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.310736][ T5219] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.403383][ T5261] netlink: 27 bytes leftover after parsing attributes in process `syz.3.107'. [ 38.479996][ T40] bridge_slave_1: left allmulticast mode [ 38.480025][ T40] bridge_slave_1: left promiscuous mode [ 38.480754][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.500324][ T40] bridge_slave_0: left allmulticast mode [ 38.500342][ T40] bridge_slave_0: left promiscuous mode [ 38.500436][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.566973][ T51] Bluetooth: hci4: command tx timeout [ 38.566999][ T51] Bluetooth: hci3: command tx timeout [ 38.761402][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.772087][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.798288][ T40] bond0 (unregistering): Released all slaves [ 38.806425][ T5221] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.123786][ T4402] 8021q: adding VLAN 0 to HW filter on device eth0 [ 39.124584][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.124653][ T5219] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.124721][ T5219] bridge_slave_0: entered allmulticast mode [ 39.125139][ T5219] bridge_slave_0: entered promiscuous mode [ 39.136291][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.136355][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.136424][ T5219] bridge_slave_1: entered allmulticast mode [ 39.139987][ T5219] bridge_slave_1: entered promiscuous mode [ 39.421861][ T5219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.422776][ T5219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.437367][ T40] hsr_slave_0: left promiscuous mode [ 39.437657][ T40] hsr_slave_1: left promiscuous mode [ 39.437943][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.437996][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.438391][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.438400][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.442987][ T40] veth1_macvtap: left promiscuous mode [ 39.443051][ T40] veth0_macvtap: left promiscuous mode [ 39.443098][ T40] veth1_vlan: left promiscuous mode [ 39.443140][ T40] veth0_vlan: left promiscuous mode [ 39.536106][ T40] team0 (unregistering): Port device team_slave_1 removed [ 39.547500][ T40] team0 (unregistering): Port device team_slave_0 removed [ 39.606730][ T5219] team0: Port device team_slave_0 added [ 39.615239][ T5219] team0: Port device team_slave_1 added [ 39.633184][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.633196][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.633209][ T5219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.653349][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.653365][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.653378][ T5219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.707064][ T5219] hsr_slave_0: entered promiscuous mode [ 39.707915][ T5219] hsr_slave_1: entered promiscuous mode [ 39.708122][ T5219] debugfs: 'hsr0' already exists in 'hsr' [ 39.708131][ T5219] Cannot create hsr debugfs directory [ 39.711613][ T5320] netlink: 168 bytes leftover after parsing attributes in process `syz.2.117'. [ 39.714184][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.714241][ T5221] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.714518][ T5221] bridge_slave_0: entered allmulticast mode [ 39.715097][ T5221] bridge_slave_0: entered promiscuous mode [ 39.722043][ T5310] netlink: 128 bytes leftover after parsing attributes in process `syz.1.115'. [ 39.722852][ T5310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 39.727094][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.727128][ T5221] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.727198][ T5221] bridge_slave_1: entered allmulticast mode [ 39.727601][ T5221] bridge_slave_1: entered promiscuous mode [ 39.768302][ T5221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.771358][ T5221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.814859][ T5221] team0: Port device team_slave_0 added [ 39.815658][ T5221] team0: Port device team_slave_1 added [ 39.826578][ T4402] 8021q: adding VLAN 0 to HW filter on device eth1 [ 39.838076][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.838088][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.838104][ T5221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.840679][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.840692][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.840703][ T5221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.891856][ T5221] hsr_slave_0: entered promiscuous mode [ 39.892166][ T5221] hsr_slave_1: entered promiscuous mode [ 39.892357][ T5221] debugfs: 'hsr0' already exists in 'hsr' [ 39.892367][ T5221] Cannot create hsr debugfs directory [ 39.927097][ T51] Bluetooth: hci1: command tx timeout [ 39.927331][ T51] Bluetooth: hci0: command tx timeout [ 39.968896][ T5354] set_capacity_and_notify: 3 callbacks suppressed [ 39.968909][ T5354] loop1: detected capacity change from 0 to 512 [ 39.969280][ T5354] EXT4-fs: Ignoring removed bh option [ 39.973603][ T5354] EXT4-fs: old and new quota format mixing [ 40.013436][ T5352] loop2: detected capacity change from 0 to 4096 [ 40.045704][ T5359] netlink: 80 bytes leftover after parsing attributes in process `syz.1.126'. [ 40.054858][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.130718][ T5352] loop2: detected capacity change from 0 to 4096 [ 40.139343][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.163126][ T5370] 9p: Could not find request transport: f [ 40.235446][ T5375] loop1: detected capacity change from 0 to 512 [ 40.239399][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.242268][ T5375] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.242937][ T5375] EXT4-fs error (device loop1): __ext4_fill_super:5622: inode #2: comm syz.1.130: iget: special inode unallocated [ 40.242951][ T5375] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 40.243060][ T5375] EXT4-fs (loop1): get root inode failed [ 40.243067][ T5375] EXT4-fs (loop1): mount failed [ 40.246913][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 40.246924][ C0] EXT4-fs (loop1): initial error at time 40: __ext4_fill_super:5622: inode 2 [ 40.246938][ C0] EXT4-fs (loop1): last error at time 40: __ext4_fill_super:5622: inode 2 [ 40.268349][ T5352] loop2: detected capacity change from 0 to 4096 [ 40.319441][ T5382] netlink: 316 bytes leftover after parsing attributes in process `syz.1.131'. [ 40.319459][ T5382] netlink: 316 bytes leftover after parsing attributes in process `syz.1.131'. [ 40.374027][ T5382] loop1: detected capacity change from 0 to 2048 [ 40.381467][ T5352] loop2: detected capacity change from 0 to 4096 [ 40.412546][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.412707][ T5382] loop1: p1 < > p3 p4 [ 40.412707][ T5382] p4: [ 40.418640][ T5382] loop1: p3 start 458752 is beyond EOD, truncated [ 40.418655][ T5382] loop1: p4 size 722688 extends beyond EOD, truncated [ 40.493114][ T5352] loop2: detected capacity change from 0 to 4096 [ 40.552081][ T5396] netlink: 40 bytes leftover after parsing attributes in process `syz.1.132'. [ 40.553777][ T40] bridge_slave_1: left allmulticast mode [ 40.553796][ T40] bridge_slave_1: left promiscuous mode [ 40.553876][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.556210][ T40] bridge_slave_0: left allmulticast mode [ 40.556223][ T40] bridge_slave_0: left promiscuous mode [ 40.556292][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.604191][ T5352] loop2: detected capacity change from 0 to 4096 [ 40.633940][ T5400] loop1: detected capacity change from 0 to 1024 [ 40.666360][ T5400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.681730][ T5400] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 3: comm syz.1.133: lblock 3 mapped to illegal pblock 3 (length 3) [ 40.689100][ T5400] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 40.689118][ T5400] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.689118][ T5400] [ 40.689882][ T5400] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 8: comm syz.1.133: lblock 8 mapped to illegal pblock 8 (length 8) [ 40.692862][ T5400] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 40.692881][ T5400] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.692881][ T5400] [ 40.721764][ T40] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.747979][ T40] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.770632][ T5410] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.133: bg 0: block 112: padding at end of block bitmap is not set [ 40.780532][ T40] .` (unregistering): Released all slaves [ 40.782366][ T5410] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 65 with error 28 [ 40.782380][ T5410] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.782380][ T5410] [ 40.782387][ T5410] EXT4-fs (loop1): Total free blocks count 0 [ 40.782394][ T5410] EXT4-fs (loop1): Free/Dirty block details [ 40.782401][ T5410] EXT4-fs (loop1): free_blocks=0 [ 40.785538][ T5400] tipc: Started in network mode [ 40.785560][ T5400] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 40.785741][ T5400] tipc: Enabled bearer , priority 0 [ 40.797146][ T5414] tipc: Enabling of bearer rejected, already enabled [ 41.371919][ T40] hsr_slave_0: left promiscuous mode [ 41.372162][ T40] hsr_slave_1: left promiscuous mode [ 41.372414][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.372424][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.372803][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.372813][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.376216][ T40] veth1_macvtap: left promiscuous mode [ 41.376240][ T40] veth0_macvtap: left promiscuous mode [ 41.376285][ T40] veth1_vlan: left promiscuous mode [ 41.376315][ T40] veth0_vlan: left promiscuous mode [ 41.618054][ T40] team0 (unregistering): Port device team_slave_1 removed [ 41.622796][ T40] team0 (unregistering): Port device team_slave_0 removed [ 41.706462][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.721100][ T5221] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 41.725822][ T5221] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.726231][ T5221] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 41.737454][ T5221] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.743591][ T5221] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 41.749305][ T5221] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.754708][ T5221] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 41.756374][ T5221] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.824727][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.825713][ T5219] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 41.883081][ T5219] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.914665][ T5219] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 41.918610][ T5219] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.918934][ T5219] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 41.925278][ T5219] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.925453][ T4908] tipc: Node number set to 43690 [ 41.932678][ T5219] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 41.936523][ T5219] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 42.218380][ T5488] capability: warning: `syz.1.140' uses deprecated v2 capabilities in a way that may be insecure [ 42.219726][ T4712] Bluetooth: hci0: command tx timeout [ 42.219750][ T4712] Bluetooth: hci1: command tx timeout [ 42.245551][ T5221] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.260761][ T3249] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.260790][ T3249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.275595][ T3249] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.275629][ T3249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.367872][ T5219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.380730][ T5219] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.384281][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.384307][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.394256][ T3249] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.394284][ T3249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.441660][ T5496] openvswitch: netlink: Missing key (keys=40, expected=100) [ 42.471191][ T5496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.503107][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.516675][ T5221] veth0_vlan: entered promiscuous mode [ 42.520120][ T5221] veth1_vlan: entered promiscuous mode [ 42.530489][ T5221] veth0_macvtap: entered promiscuous mode [ 42.531671][ T5221] veth1_macvtap: entered promiscuous mode [ 42.536400][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.545483][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.550757][ T3505] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.579569][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.579847][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.581088][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.594273][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.594283][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.613251][ T1611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.613266][ T1611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.645511][ T5219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.797486][ T5219] veth0_vlan: entered promiscuous mode [ 42.800028][ T5219] veth1_vlan: entered promiscuous mode [ 42.810089][ T5219] veth0_macvtap: entered promiscuous mode [ 42.811596][ T5219] veth1_macvtap: entered promiscuous mode [ 42.820379][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.822979][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.824804][ T5529] Illegal XDP return value 93 on prog (id 86) dev syz_tun, expect packet loss! [ 42.838407][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.838445][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.838469][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.838485][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.842784][ T5531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.857939][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.857951][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.900070][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.900085][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.000534][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.289788][ T5554] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 43.291489][ T5554] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 43.291956][ T5554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.332962][ T5554] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 43.343001][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.499306][ T5575] netlink: 56 bytes leftover after parsing attributes in process `syz.3.159'. [ 43.620246][ T5590] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 43.620271][ T5590] vhci_hcd vhci_hcd.2: invalid port number 96 [ 43.620282][ T5590] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 43.620695][ T5590] netlink: 72 bytes leftover after parsing attributes in process `syz.4.167'. [ 43.622898][ T5592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168'. [ 43.623954][ T5592] bridge_slave_0: default FDB implementation only supports local addresses [ 43.680501][ T5599] netlink: 36 bytes leftover after parsing attributes in process `syz.0.170'. [ 43.680581][ T4718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.758797][ T5608] binder: 5606:5608 ioctl 5000943f 20001140 returned -22 [ 43.760451][ T5605] syzkaller1: entered allmulticast mode [ 43.813812][ T5614] usb usb4: usbfs: process 5614 (syz.4.178) did not claim interface 0 before use [ 43.842301][ T5619] 9p: Bad value for 'rfdno' [ 43.850070][ T5622] EXT4-fs: Ignoring removed oldalloc option [ 43.894569][ T5622] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.898686][ T5628] tmpfs: Bad value for 'mpol' [ 43.936540][ T5633] syzkaller0: entered promiscuous mode [ 43.936556][ T5633] syzkaller0: entered allmulticast mode [ 44.241387][ T5221] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.247822][ T51] Bluetooth: hci1: command tx timeout [ 44.247831][ T4712] Bluetooth: hci0: command tx timeout [ 44.288412][ T5645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 44.288433][ T5645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.188'. [ 44.290107][ T5645] trusted_key: encrypted_key: insufficient parameters specified [ 44.290320][ T5645] trusted_key: encrypted_key: insufficient parameters specified [ 44.290713][ T5645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.290784][ T5645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.303375][ T5645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.303388][ T5645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.838073][ T5660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.838286][ T5660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.883885][ T5665] tipc: Started in network mode [ 44.883928][ T5665] tipc: Node identity ac14140f, cluster identity 4711 [ 44.884261][ T5665] tipc: New replicast peer: 255.255.255.255 [ 44.884597][ T5665] tipc: Enabled bearer , priority 10 [ 44.946037][ T5669] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 44.946070][ T5669] System zones: 1-3, 19-19, 35-36 [ 44.946689][ T5669] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 44.957505][ T5671] sctp: [Deprecated]: syz.1.197 (pid 5671) Use of int in maxseg socket option. [ 44.957505][ T5671] Use struct sctp_assoc_value instead [ 45.158214][ T5681] set_capacity_and_notify: 8 callbacks suppressed [ 45.158228][ T5681] loop2: detected capacity change from 0 to 512 [ 45.163767][ T5681] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 45.163783][ T5681] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 45.185675][ T5681] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.200: bg 0: block 104: invalid block bitmap [ 45.185707][ T5681] loop2: lost filesystem error report for type 5 error -117 [ 45.186882][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 45.186896][ C0] EXT4-fs (loop2): initial error at time 45: ext4_validate_block_bitmap:436 [ 45.186910][ C0] EXT4-fs (loop2): last error at time 45: ext4_validate_block_bitmap:436 [ 45.187229][ T5681] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 45.187242][ T5681] loop2: lost filesystem error report for type 5 error -117 [ 45.189040][ T5681] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.200: invalid indirect mapped block 1 (level 1) [ 45.189059][ T5681] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.191086][ T5681] EXT4-fs (loop2): 1 truncate cleaned up [ 45.192290][ T5681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.314904][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.487668][ T5694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.487919][ T5694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.503188][ T5694] FAULT_INJECTION: forcing a failure. [ 45.503188][ T5694] name failslab, interval 1, probability 0, space 0, times 0 [ 45.503207][ T5694] CPU: 0 UID: 0 PID: 5694 Comm: syz.2.202 Not tainted syzkaller #0 PREEMPT [ 45.503219][ T5694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 45.503225][ T5694] Call trace: [ 45.503228][ T5694] show_stack+0x2c/0x3c (C) [ 45.503250][ T5694] __dump_stack+0x30/0x40 [ 45.503262][ T5694] dump_stack_lvl+0xd8/0x12c [ 45.503274][ T5694] dump_stack+0x1c/0x28 [ 45.503285][ T5694] should_fail_ex+0x418/0x58c [ 45.503294][ T5694] should_failslab+0xc4/0x120 [ 45.503302][ T5694] __kmalloc_cache_noprof+0x94/0x5fc [ 45.503312][ T5694] subflow_create_ctx+0x88/0x204 [ 45.503324][ T5694] subflow_ulp_init+0xa8/0x3b4 [ 45.503334][ T5694] tcp_set_ulp+0x580/0x660 [ 45.503344][ T5694] mptcp_subflow_create_socket+0x1f0/0x61c [ 45.503354][ T5694] __mptcp_nmpc_sk+0x138/0x57c [ 45.503365][ T5694] mptcp_listen+0x100/0x3bc [ 45.503374][ T5694] __sys_listen_socket+0x100/0x128 [ 45.503386][ T5694] __sys_listen+0xa8/0x10c [ 45.503396][ T5694] __arm64_sys_listen+0x64/0x7c [ 45.503407][ T5694] invoke_syscall+0x98/0x244 [ 45.503419][ T5694] el0_svc_common+0xec/0x23c [ 45.503431][ T5694] do_el0_svc+0x4c/0x5c [ 45.503442][ T5694] el0_svc+0x60/0x1d8 [ 45.503450][ T5694] el0t_64_sync_handler+0x44/0x104 [ 45.503458][ T5694] el0t_64_sync+0x198/0x19c [ 45.579885][ T5694] Trying to write to read-only block-device nullb0 [ 45.756717][ T4717] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.844849][ T5714] loop3: detected capacity change from 0 to 512 [ 45.855619][ T5714] EXT4-fs (loop3): Test dummy encryption mode enabled [ 45.855635][ T5714] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 45.855642][ T5714] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.867002][ T5714] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.204: bad orphan inode 131083 [ 45.867022][ T5714] loop3: lost filesystem error report for type 5 error -117 [ 45.869632][ T5714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.057851][ T4816] tipc: Node number set to 2886997007 [ 46.061297][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.281600][ T5724] loop4: detected capacity change from 0 to 512 [ 46.327306][ T4712] Bluetooth: hci1: command tx timeout [ 46.336976][ T4712] Bluetooth: hci0: command tx timeout [ 46.371249][ T5724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.376646][ T5722] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.207: corrupted xattr block 33: bad e_name length [ 46.383984][ T5722] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.207: corrupted xattr block 33: bad e_name length [ 46.384887][ T5722] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.207: corrupted xattr block 33: bad e_name length [ 46.391870][ T5722] usb usb4: usbfs: process 5722 (syz.4.207) did not claim interface 0 before use [ 46.411696][ T4815] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #15: comm kworker/0:4: corrupted xattr block 33: bad e_name length [ 46.413356][ T4815] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 46.442599][ T4815] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117) [ 46.614617][ T5736] binder: 5732:5736 tried to acquire reference to desc 0, got 1 instead [ 46.615260][ T5736] binder: 5732:5736 got transaction with unaligned buffers size, 252 [ 46.615335][ T5736] binder: 5732:5736 transaction call to 5732:0 failed 5/29201/-22, code 0 size 0-0 line 3465 [ 46.633622][ T5736] loop2: detected capacity change from 0 to 512 [ 46.644738][ T5736] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.209'. [ 46.645562][ T5736] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.209'. [ 46.645979][ T4908] binder: undelivered TRANSACTION_ERROR: 29201 [ 46.866656][ T5754] loop2: detected capacity change from 0 to 512 [ 46.872231][ T5754] EXT4-fs: quotafile must be on filesystem root [ 46.909223][ T5219] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.038083][ T5769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.217'. [ 47.132138][ T5777] loop4: detected capacity change from 0 to 128 [ 47.141578][ T5777] FAT-fs (loop4): invalid media value (0x00) [ 47.141596][ T5777] FAT-fs (loop4): Can't find a valid FAT filesystem [ 51.049748][ C1] sched: DL replenish lagged too much [ 64.607095][ T1581] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.617124][ T1581] ieee802154 phy1 wpan1: encryption failed: -22 [ 90.729909][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 36s! [ 90.729944][ C0] Showing busy workqueues and worker pools: [ 90.729949][ C0] workqueue events: flags=0x100 [ 90.729983][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=9 refcnt=10 [ 90.730002][ C0] pending: 2*nsim_dev_hwstats_traffic_work, 2*psi_avgs_work, vmstat_shepherd, 3*ovs_dp_masks_rebalance, drm_fb_helper_damage_work [ 90.730056][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=14 refcnt=15 [ 90.730071][ C0] in-flight: 26:request_firmware_work_func for 87s ,4808:nsim_fib_event_work for 45s ,1091:nsim_fib_event_work for 43s [ 90.730110][ C0] pending: 3*nsim_dev_hwstats_traffic_work, 3*psi_avgs_work, 2*ovs_dp_masks_rebalance, psi_avgs_work, ovs_dp_masks_rebalance, free_obj_work [ 90.730157][ C0] workqueue events_unbound: flags=0x2 [ 90.730168][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=25 refcnt=26 [ 90.730184][ C0] in-flight: 218:cfg80211_wiphy_work for 32s cfg80211_wiphy_work ,12:cfg80211_wiphy_work for 36s cfg80211_wiphy_work ,3034:cfg80211_wiphy_work for 38s cfg80211_wiphy_work ,49:cfg80211_wiphy_work for 22s ,40:cfg80211_wiphy_work for 39s cfg80211_wiphy_work ,13:cfg80211_wiphy_work for 41s cfg80211_wiphy_work [ 90.730293][ C0] pending: macvlan_process_broadcast, cfg80211_wiphy_work, 2*macvlan_process_broadcast, crng_reseed, cfg80211_wiphy_work, nsim_dev_trap_report_work, 2*macvlan_process_broadcast, 3*nsim_dev_trap_report_work, macvlan_process_broadcast, toggle_allocation_gate [ 90.730364][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=11 refcnt=12 [ 90.730376][ C0] in-flight: 3178:cfg80211_wiphy_work for 40s cfg80211_wiphy_work ,3249:cfg80211_wiphy_work for 31s cfg80211_wiphy_work ,58:nsim_dev_trap_report_work for 9s ,3505:cfg80211_wiphy_work for 42s cfg80211_wiphy_work [ 90.730442][ C0] pending: 4*macvlan_process_broadcast [ 90.730454][ C0] workqueue events_power_efficient: flags=0x82 [ 90.730459][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3 [ 90.730471][ C0] pending: neigh_periodic_work, fb_flashcursor [ 90.730491][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=5 refcnt=6 [ 90.730504][ C0] pending: wg_ratelimiter_gc_entries, hash_netportnet4_gc, gc_worker, neigh_managed_work, do_cache_clean [ 90.730545][ C0] workqueue events_dfl_long: flags=0x2 [ 90.730551][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=6 refcnt=7 [ 90.730563][ C0] pending: 6*defense_work_handler [ 90.730576][ C0] workqueue mm_percpu_wq: flags=0x108 [ 90.730580][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 90.730595][ C0] pending: vmstat_update [ 90.730606][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 90.730620][ C0] pending: vmstat_update [ 90.730635][ C0] workqueue writeback: flags=0x4a [ 90.730639][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 90.730651][ C0] in-flight: 1611:wb_workfn for 38s [ 90.730671][ C0] workqueue kblockd: flags=0x118 [ 90.730676][ C0] pwq 3: cpus=0 node=0 flags=0x0 nice=-20 active=1 refcnt=2 [ 90.730690][ C0] pending: blk_mq_run_work_fn [ 90.730738][ C0] workqueue bat_events: flags=0x6000a [ 90.730742][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=35 MAYDAY [ 90.730755][ C0] in-flight: 2855(RESCUER):batadv_tt_purge for 2s [ 90.730770][ C0] pending: mayday_cursor_func [ 90.730780][ C0] inactive: batadv_dat_purge, batadv_bla_periodic_work, batadv_mcast_mla_update, 2*batadv_tt_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, 3*batadv_mcast_mla_update, 3*batadv_purge_orig, 5*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, 7*batadv_iv_send_outstanding_bat_ogm_packet, batadv_tt_purge [ 90.730890][ C0] workqueue wg-kex-wg0: flags=0x6 [ 90.730894][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 90.730906][ C0] pending: wg_packet_handshake_send_worker [ 90.730919][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 90.730924][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 90.730938][ C0] pending: wg_packet_encrypt_worker [ 90.730948][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 90.730962][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 90.730977][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 90.730982][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 90.730995][ C0] pending: wg_packet_encrypt_worker [ 90.731005][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 90.731019][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 90.731040][ C0] workqueue wg-kex-wg2: flags=0x124 [ 90.731044][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 90.731058][ C0] in-flight: 10:wg_packet_handshake_receive_worker for 16s [ 90.731076][ C0] workqueue wg-kex-wg2: flags=0x6 [ 90.731080][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 90.731092][ C0] in-flight: 2976:wg_packet_handshake_send_worker for 0s [ 90.731110][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 90.731115][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 90.731129][ C0] pending: wg_packet_encrypt_worker [ 90.731138][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 90.731153][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 90.731179][ C0] workqueue wg-kex-wg0: flags=0x6 [ 90.731184][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 90.731196][ C0] pending: wg_packet_handshake_send_worker [ 90.731209][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 90.731213][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 90.731227][ C0] pending: wg_packet_encrypt_worker [ 90.731237][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 90.731251][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 90.731266][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 90.731270][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 90.731284][ C0] pending: wg_packet_encrypt_worker [ 90.731294][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 90.731308][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 90.731329][ C0] workqueue wg-kex-wg2: flags=0x124 [ 90.731333][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 90.731347][ C0] in-flight: 866:wg_packet_handshake_receive_worker for 9s [ 90.731364][ C0] workqueue wg-kex-wg2: flags=0x6 [ 90.731368][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 90.731380][ C0] pending: wg_packet_handshake_send_worker [ 90.731393][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 90.731397][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 90.731411][ C0] pending: wg_packet_encrypt_worker [ 90.731421][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 90.731435][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 90.731456][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 90.731461][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 90.731475][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 90.731490][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 90.731495][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 90.731509][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 90.731525][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 90.731530][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 90.731544][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 90.731566][ C0] workqueue wg-kex-wg0: flags=0x6 [ 90.731570][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 90.731583][ C0] pending: wg_packet_handshake_send_worker [ 90.731595][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 90.731600][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 90.731614][ C0] pending: wg_packet_encrypt_worker [ 90.731624][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 90.731637][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 90.731653][ C0] workqueue wg-kex-wg1: flags=0x6 [ 90.731657][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 90.731669][ C0] pending: wg_packet_handshake_send_worker [ 90.731681][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 90.731686][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 90.731700][ C0] pending: wg_packet_encrypt_worker [ 90.731710][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 90.731724][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 90.731744][ C0] workqueue wg-kex-wg2: flags=0x124 [ 90.731748][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 90.731762][ C0] in-flight: 4815:wg_packet_handshake_receive_worker for 5s [ 90.731780][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 90.731784][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 90.731798][ C0] pending: wg_packet_encrypt_worker [ 90.731808][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 90.731822][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 90.731843][ C0] workqueue wg-kex-wg0: flags=0x6 [ 90.731847][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 90.731859][ C0] pending: wg_packet_handshake_send_worker [ 90.731871][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 90.731876][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 90.731890][ C0] in-flight: 4866:wg_packet_encrypt_worker for 4s [ 90.731904][ C0] pending: wg_packet_tx_worker [ 90.731914][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 90.731928][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 90.731943][ C0] workqueue wg-kex-wg1: flags=0x6 [ 90.731947][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 90.731960][ C0] pending: wg_packet_handshake_send_worker [ 90.731972][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 90.731976][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 90.731990][ C0] pending: wg_packet_encrypt_worker [ 90.732000][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 90.732014][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 90.732034][ C0] workqueue wg-kex-wg2: flags=0x124 [ 90.732038][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 90.732052][ C0] in-flight: 9:wg_packet_handshake_receive_worker for 9s [ 90.732070][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 90.732074][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 90.732088][ C0] in-flight: 4816:wg_packet_decrypt_worker for 17s [ 90.732103][ C0] pending: wg_packet_encrypt_worker [ 90.732112][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 90.732126][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 90.732151][ C0] pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=4s workers=8 idle: 4908 4721 [ 90.732183][ C0] pool 6: cpus=1 node=0 flags=0x0 nice=0 hung=36s workers=7 idle: 24 1092 4823 4818 [ 90.732218][ C0] pool 8: cpus=0-1 flags=0x6 nice=0 hung=0s workers=13 manager: 5782 [ 90.732236][ C0] Showing backtraces of busy workers in stalled worker pools: [ 90.732242][ C0] pool 6: [ 90.732245][ C0] task:kworker/1:1 state:R running task stack:0 pid:26 tgid:26 ppid:2 task_flags:0x4208060 flags:0x00000010 [ 90.732259][ C0] Workqueue: events request_firmware_work_func [ 90.732267][ C0] Call trace: [ 90.732270][ C0] __switch_to+0x2b4/0x6e4 (T) [ 90.732283][ C0] __schedule+0x135c/0x2b00 [ 90.732293][ C0] schedule+0x13c/0x20c [ 90.732303][ C0] schedule_timeout+0x13c/0x28c [ 90.732311][ C0] wait_for_common+0x220/0x394 [ 90.732320][ C0] wait_for_completion_killable_timeout+0x14/0x20 [ 90.732331][ C0] firmware_fallback_sysfs+0x4ec/0x930 [ 90.732340][ C0] _request_firmware+0xb34/0xf5c [ 90.732347][ C0] request_firmware_work_func+0xa4/0x24c [ 90.732355][ C0] process_scheduled_works+0x91c/0x1250 [ 90.732365][ C0] worker_thread+0x798/0xbd0 [ 90.732374][ C0] kthread+0x304/0x3d4 [ 90.732383][ C0] ret_from_fork+0x10/0x20 [ 90.732392][ C0] pool 6: [ 90.732394][ C0] task:kworker/1:4 state:R running task stack:0 pid:4808 tgid:4808 ppid:2 task_flags:0x4208060 flags:0x00000010 [ 90.732407][ C0] Workqueue: events nsim_fib_event_work [ 90.732414][ C0] Call trace: [ 90.732417][ C0] __switch_to+0x2b4/0x6e4 (T) [ 90.732427][ C0] __schedule+0x135c/0x2b00 [ 90.732436][ C0] preempt_schedule_common+0xd4/0x190 [ 90.732446][ C0] preempt_schedule+0x60/0x78 [ 90.732456][ C0] _raw_spin_unlock_irqrestore+0x94/0x98 [ 90.732464][ C0] __slab_free+0x15c/0x1d0 [ 90.732473][ C0] ___cache_free+0x80/0x94 [ 90.732481][ C0] qlist_free_all+0xb4/0x120 [ 90.732491][ C0] kasan_quarantine_reduce+0x118/0x124 [ 90.732501][ C0] __kasan_kmalloc+0x2c/0xb4 [ 90.732510][ C0] __kmalloc_cache_noprof+0x2f4/0x5fc [ 90.732518][ C0] nsim_fib_event+0xa04/0x60c4 [ 90.732527][ C0] nsim_fib_event_work+0x1d8/0x320 [ 90.732535][ C0] process_scheduled_works+0x91c/0x1250 [ 90.732544][ C0] worker_thread+0x798/0xbd0 [ 90.732554][ C0] kthread+0x304/0x3d4 [ 90.732562][ C0] ret_from_fork+0x10/0x20 [ 90.732570][ C0] pool 6: [ 90.732572][ C0] task:kworker/1:2 state:R running task stack:0 pid:1091 tgid:1091 ppid:2 task_flags:0x4208060 flags:0x00000010 [ 90.732584][ C0] Workqueue: events nsim_fib_event_work [ 90.732592][ C0] Call trace: [ 90.732594][ C0] __switch_to+0x2b4/0x6e4 (T) [ 90.732604][ C0] __schedule+0x135c/0x2b00 [ 90.732613][ C0] schedule+0x13c/0x20c [ 90.732623][ C0] schedule_timeout+0x13c/0x28c [ 90.732630][ C0] schedule_timeout_uninterruptible+0x78/0xbc [ 90.732638][ C0] msleep+0x3c/0x68 [ 90.732647][ C0] nsim_fib_event+0x57a0/0x60c4 [ 90.732656][ C0] nsim_fib_event_work+0x1d8/0x320 [ 90.732664][ C0] process_scheduled_works+0x91c/0x1250 [ 90.732673][ C0] worker_thread+0x798/0xbd0 [ 90.732683][ C0] kthread+0x304/0x3d4 [ 90.732691][ C0] ret_from_fork+0x10/0x20 [ 90.830000][ T4712] Bluetooth: hci4: link tx timeout [ 90.830016][ T4712] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 90.833478][ T4712] Bluetooth: hci4: link tx timeout [ 90.833486][ T4712] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 93.780442][ T51] Bluetooth: hci4: command 0x0406 tx timeout