last executing test programs: 2.319599527s ago: executing program 3 (id=4): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@grpid}, {@jqfmt_vfsv0}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001040)='./file1\x00', 0x250942, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x6}]}) socket$alg(0x26, 0x5, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}}, 0x8000800) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) 2.117289114s ago: executing program 2 (id=3): syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@local}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r1]) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xd1e2, 0x47fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001000)=@abs={0x0, 0x0, 0xce27}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000480)={{0xffff, 0x3, 0x91c, 0x218b}, 'syz0\x00', 0x13}) ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_DEV_DESTROY(r6, 0x5502) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f0000000300)='usrquota') r7 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r7, &(0x7f0000000980)={0x2020}, 0x2020) 1.142489233s ago: executing program 3 (id=6): syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@local}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r1]) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xd1e2, 0x47fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001000)=@abs={0x0, 0x0, 0xce27}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000480)={{0xffff, 0x3, 0x91c, 0x218b}, 'syz0\x00', 0x13}) ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_DEV_DESTROY(r6, 0x5502) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f0000000300)='usrquota') r7 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r7, &(0x7f0000000980)={0x2020}, 0x2020) 191.064093ms ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000080), 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc) 0s ago: executing program 2 (id=7): syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@local}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r1]) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xd1e2, 0x47fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001000)=@abs={0x0, 0x0, 0xce27}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000480)={{0xffff, 0x3, 0x91c, 0x218b}, 'syz0\x00', 0x13}) ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_DEV_DESTROY(r6, 0x5502) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000380)={[{@nobarrier}, {@noblock_validity}, {@discard}, {@errors_continue}, {@nogrpid, 0x0}, {@noauto_da_alloc}, {@data_err_abort}, {@journal_checksum}, {@mblk_io_submit}, {@data_err_ignore}, {@sysvgroups}, {@nodiscard}, {@oldalloc}, {@orlov}, {@data_journal}, {@data_writeback}, {@auto_da_alloc}], [{@audit}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}], 0x2c}, 0x0, 0x4f8, &(0x7f0000000700)="$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") mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f0000000300)='usrquota') r7 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r7, &(0x7f0000000980)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.13' (ED25519) to the list of known hosts. [ 28.646359][ T4696] cgroup: Unknown subsys name 'net' [ 28.796095][ T4696] cgroup: Unknown subsys name 'cpuset' [ 28.798183][ T4696] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.976136][ T4696] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.753456][ T4716] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.755365][ T4716] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.755557][ T4716] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.757007][ T4714] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.757217][ T4714] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.757631][ T4714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.757765][ T4714] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.757929][ T4714] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.759357][ T4714] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.768006][ T4720] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.769474][ T4720] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.769895][ T4720] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.770172][ T4720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.770275][ T4720] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.770735][ T4720] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.770799][ T4720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.771247][ T4720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.771708][ T4720] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.772752][ T4720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.772872][ T4720] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.773496][ T4720] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.773633][ T4720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.773860][ T4720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.786937][ T4725] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.789259][ T4714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.172319][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.172878][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.172965][ T4718] bridge_slave_0: entered allmulticast mode [ 30.173577][ T4718] bridge_slave_0: entered promiscuous mode [ 30.175999][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.176023][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.176082][ T4718] bridge_slave_1: entered allmulticast mode [ 30.176478][ T4718] bridge_slave_1: entered promiscuous mode [ 30.184125][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.187216][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.193978][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.194029][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.194096][ T4708] bridge_slave_0: entered allmulticast mode [ 30.194592][ T4708] bridge_slave_0: entered promiscuous mode [ 30.195671][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.195752][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.195813][ T4708] bridge_slave_1: entered allmulticast mode [ 30.196227][ T4708] bridge_slave_1: entered promiscuous mode [ 30.209628][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.223111][ T4718] team0: Port device team_slave_0 added [ 30.224331][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.235303][ T4718] team0: Port device team_slave_1 added [ 30.252279][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.252308][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.252497][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.274215][ T4708] team0: Port device team_slave_0 added [ 30.275214][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.275222][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.275238][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.291885][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.293297][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.294715][ T4709] bridge_slave_0: entered allmulticast mode [ 30.295181][ T4709] bridge_slave_0: entered promiscuous mode [ 30.299769][ T4708] team0: Port device team_slave_1 added [ 30.302643][ T4718] hsr_slave_0: entered promiscuous mode [ 30.303045][ T4718] hsr_slave_1: entered promiscuous mode [ 30.307372][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.308798][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.310174][ T4709] bridge_slave_1: entered allmulticast mode [ 30.311737][ T4709] bridge_slave_1: entered promiscuous mode [ 30.313280][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.313347][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.313420][ T4713] bridge_slave_0: entered allmulticast mode [ 30.313859][ T4713] bridge_slave_0: entered promiscuous mode [ 30.315781][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.315804][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.315863][ T4713] bridge_slave_1: entered allmulticast mode [ 30.316276][ T4713] bridge_slave_1: entered promiscuous mode [ 30.332232][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.333619][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.334889][ T4719] bridge_slave_0: entered allmulticast mode [ 30.335337][ T4719] bridge_slave_0: entered promiscuous mode [ 30.336473][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.336503][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.336555][ T4719] bridge_slave_1: entered allmulticast mode [ 30.336999][ T4719] bridge_slave_1: entered promiscuous mode [ 30.347664][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.348657][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.351578][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.352830][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.354653][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.355398][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.355407][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.355422][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.362048][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.363432][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.383541][ T4719] team0: Port device team_slave_0 added [ 30.385138][ T4719] team0: Port device team_slave_1 added [ 30.386065][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.390645][ T4713] team0: Port device team_slave_0 added [ 30.392139][ T4713] team0: Port device team_slave_1 added [ 30.401098][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.406153][ T4708] hsr_slave_0: entered promiscuous mode [ 30.406460][ T4708] hsr_slave_1: entered promiscuous mode [ 30.406654][ T4708] debugfs: 'hsr0' already exists in 'hsr' [ 30.406695][ T4708] Cannot create hsr debugfs directory [ 30.420269][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.420298][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.420316][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.420917][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.420925][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.420941][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.425579][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.425588][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.425602][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.426449][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.426456][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.426467][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.431648][ T4709] team0: Port device team_slave_0 added [ 30.433051][ T4709] team0: Port device team_slave_1 added [ 30.472289][ T4713] hsr_slave_0: entered promiscuous mode [ 30.472617][ T4713] hsr_slave_1: entered promiscuous mode [ 30.472804][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 30.472815][ T4713] Cannot create hsr debugfs directory [ 30.478497][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.479791][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.484322][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.488151][ T4719] hsr_slave_0: entered promiscuous mode [ 30.488488][ T4719] hsr_slave_1: entered promiscuous mode [ 30.488686][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 30.488696][ T4719] Cannot create hsr debugfs directory [ 30.498062][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.499417][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.503955][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.550428][ T4709] hsr_slave_0: entered promiscuous mode [ 30.550776][ T4709] hsr_slave_1: entered promiscuous mode [ 30.550997][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 30.551008][ T4709] Cannot create hsr debugfs directory [ 30.603261][ T4718] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.606508][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.608310][ T4718] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.611011][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.615852][ T4718] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.617205][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.617563][ T4718] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.618684][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.657189][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.657250][ T4718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.657410][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.657445][ T4718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.662705][ T4713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.665675][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.675716][ T4713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.678179][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.680329][ T4713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.682544][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.688974][ T4713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.691273][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.706876][ T4719] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.709208][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.714366][ T4719] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.717238][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.717833][ T4719] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.719301][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.722835][ T4719] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.725550][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.746345][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.748879][ T4709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.751006][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.751967][ T4709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.753163][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.754575][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.754603][ T4719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.754673][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.754701][ T4719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.766084][ T4709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.768313][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.768914][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.768939][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.769029][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.769057][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.774230][ T134] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.775599][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.781066][ T134] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.782854][ T134] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.784143][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.786009][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.791993][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.793987][ T4709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.796540][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.799784][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.799844][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.807705][ T4708] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.810047][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.811804][ T4708] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.813869][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.815897][ T4708] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.818332][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.819961][ T4708] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.822161][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.831932][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.831985][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.876270][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.890892][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.899834][ T1237] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.899880][ T1237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.900400][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.900437][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.907225][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.931334][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.938559][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.946909][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.952147][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.955641][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.955682][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.969862][ T4719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.969895][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.982165][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.982213][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.983862][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.983886][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.986094][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.986118][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.021279][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.033876][ T4713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.036095][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.052123][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.052171][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.069610][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.069661][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.091510][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.111417][ T4709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.111470][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.133304][ T4718] veth0_vlan: entered promiscuous mode [ 31.138449][ T4718] veth1_vlan: entered promiscuous mode [ 31.145957][ T4718] veth0_macvtap: entered promiscuous mode [ 31.148757][ T4718] veth1_macvtap: entered promiscuous mode [ 31.153935][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.161069][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.198620][ T1237] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.199230][ T1237] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.199255][ T1237] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.199272][ T1237] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.230116][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.252321][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.252361][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.288907][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.297041][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.297081][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.322555][ T4719] veth0_vlan: entered promiscuous mode [ 31.326743][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.335618][ T4719] veth1_vlan: entered promiscuous mode [ 31.343237][ T4719] veth0_macvtap: entered promiscuous mode [ 31.347245][ T4719] veth1_macvtap: entered promiscuous mode [ 31.352452][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.355456][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.362428][ T4718] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.379275][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.379338][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.379363][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.379381][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.407127][ T4889] loop3: detected capacity change from 0 to 512 [ 31.427057][ T4889] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 31.433620][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.433652][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.441159][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.441190][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.449991][ T4713] veth0_vlan: entered promiscuous mode [ 31.453555][ T4713] veth1_vlan: entered promiscuous mode [ 31.464041][ T4889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.473965][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.501442][ T4713] veth0_macvtap: entered promiscuous mode [ 31.507652][ T4713] veth1_macvtap: entered promiscuous mode [ 31.511718][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.514121][ T4708] veth0_vlan: entered promiscuous mode [ 31.516888][ T4709] veth0_vlan: entered promiscuous mode [ 31.518277][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.524919][ T4708] veth1_vlan: entered promiscuous mode [ 31.528564][ T4709] veth1_vlan: entered promiscuous mode [ 31.571857][ T4843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.571915][ T4843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.571934][ T4843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.571951][ T4843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.584034][ T4708] veth0_macvtap: entered promiscuous mode [ 31.591904][ T4708] veth1_macvtap: entered promiscuous mode [ 31.596636][ T4709] veth0_macvtap: entered promiscuous mode [ 31.603133][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.758879][ T30] audit: type=1326 audit(31.640:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4887 comm="syz.3.4" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd7a168 code=0x0 [ 31.872240][ T4725] Bluetooth: hci0: command tx timeout [ 31.872501][ T4725] Bluetooth: hci4: command tx timeout [ 31.872707][ T4725] Bluetooth: hci1: command tx timeout [ 31.872901][ T4725] Bluetooth: hci2: command tx timeout [ 31.873213][ T4725] Bluetooth: hci3: command tx timeout [ 32.370314][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.421401][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.421466][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.421500][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.421525][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.528821][ T4709] veth1_macvtap: entered promiscuous mode [ 32.533266][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.538014][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.538050][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.557325][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.564085][ T4843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.564117][ T4843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.588380][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.595555][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.595610][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.595647][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.595670][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.605281][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.605310][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.656115][ T4904] input: syz0 as /devices/virtual/input/input2 [ 33.412996][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.413032][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.604285][ T4910] input: syz0 as /devices/virtual/input/input3 [ 33.740965][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.741012][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.944813][ T4725] Bluetooth: hci2: command tx timeout [ 33.944918][ T4725] Bluetooth: hci1: command tx timeout [ 33.944979][ T4725] Bluetooth: hci4: command tx timeout [ 33.945042][ T4725] Bluetooth: hci0: command tx timeout [ 33.950688][ T4710] Bluetooth: hci3: command tx timeout [ 34.755509][ T4912] configfs-gadget.g1 gadget.1: uvc: uvc_function_bind() [ 34.756153][ T4912] Unable to handle kernel paging request at virtual address dfff8000000000f4 [ 34.756179][ T4912] KASAN: null-ptr-deref in range [0x00000000000007a0-0x00000000000007a7] [ 34.756193][ T4912] Mem abort info: [ 34.756203][ T4912] ESR = 0x0000000096000005 [ 34.756213][ T4912] EC = 0x25: DABT (current EL), IL = 32 bits [ 34.756224][ T4912] SET = 0, FnV = 0 [ 34.756233][ T4912] EA = 0, S1PTW = 0 [ 34.756241][ T4912] FSC = 0x05: level 1 translation fault [ 34.756250][ T4912] Data abort info: [ 34.756256][ T4912] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 34.756264][ T4912] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 34.756273][ T4912] GCS = 0, Overlay = 0, DirtyBit = 0 [ 34.756282][ T4912] [dfff8000000000f4] address between user and kernel address ranges [ 34.756315][ T4912] Internal error: Oops: 0000000096000005 [#1] SMP [ 34.771165][ T4912] Modules linked in: [ 34.771801][ T4912] CPU: 0 UID: 0 PID: 4912 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT [ 34.773219][ T4912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 34.774856][ T4912] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 34.776219][ T4912] pc : uvcg_video_init+0x460/0x598 [ 34.777037][ T4912] lr : uvcg_video_init+0x424/0x598 [ 34.777885][ T4912] sp : ffff800095a37500 [ 34.778566][ T4912] x29: ffff800095a37500 x28: 0000000000000000 x27: ffff0000cb036528 [ 34.779950][ T4912] x26: ffff0000cecc0e00 x25: 1fffe00019606ca5 x24: 0000000000000000 [ 34.781252][ T4912] x23: 1fffe00019d98116 x22: dfff800000000000 x21: fffffffffffffffc [ 34.782566][ T4912] x20: ffff0000cecc08b0 x19: 00000000000007a0 x18: 00000000ffffffff [ 34.783889][ T4912] x17: ffff80008a791000 x16: 0000000000000007 x15: ffff800080c9daa4 [ 34.785204][ T4912] x14: ffff800080c9d924 x13: 0000000000000001 x12: 0000000000000000 [ 34.786573][ T4912] x11: ffff80008a590e28 x10: 0000000000080000 x9 : 0000000000013290 [ 34.787900][ T4912] x8 : 00000000000000f4 x7 : 0000000000000000 x6 : ffff80008016855c [ 34.789180][ T4912] x5 : ffff0000f473c940 x4 : 0000000000000008 x3 : ffff8000801571a8 [ 34.790525][ T4912] x2 : 0000000000000006 x1 : ffff0000c79fd7c0 x0 : 0000000000000001 [ 34.791856][ T4912] Call trace: [ 34.792358][ T4912] uvcg_video_init+0x460/0x598 (P) [ 34.793227][ T4912] uvc_function_bind+0xd9c/0x1230 [ 34.794054][ T4912] usb_add_function+0x1d0/0x6bc [ 34.794838][ T4912] configfs_composite_bind+0xb4c/0x10b8 [ 34.795712][ T4912] gadget_bind_driver+0x274/0x834 [ 34.796528][ T4912] really_probe+0x29c/0x800 [ 34.797270][ T4912] __driver_probe_device+0x1e0/0x350 [ 34.798144][ T4912] driver_probe_device+0x6c/0x19c [ 34.798951][ T4912] __driver_attach+0x168/0x384 [ 34.799716][ T4912] bus_for_each_dev+0x128/0x1b4 [ 34.800519][ T4912] driver_attach+0x50/0x60 [ 34.801239][ T4912] bus_add_driver+0x208/0x500 [ 34.802029][ T4912] driver_register+0x220/0x310 [ 34.802878][ T4912] usb_gadget_register_driver_owner+0xf0/0x25c [ 34.803898][ T4912] gadget_dev_desc_UDC_store+0x164/0x22c [ 34.804813][ T4912] configfs_write_iter+0x27c/0x354 [ 34.805612][ T4912] vfs_write+0x51c/0xa0c [ 34.806291][ T4912] ksys_write+0x12c/0x228 [ 34.807025][ T4912] __arm64_sys_write+0x84/0x98 [ 34.807920][ T4912] invoke_syscall+0x98/0x244 [ 34.808712][ T4912] el0_svc_common+0xec/0x23c [ 34.809493][ T4912] do_el0_svc+0x4c/0x5c [ 34.810219][ T4912] el0_svc+0x64/0x260 [ 34.810890][ T4912] el0t_64_sync_handler+0x48/0x148 [ 34.811775][ T4912] el0t_64_sync+0x198/0x19c [ 34.812581][ T4912] Code: 9753c18d f9400278 911e8313 d343fe68 (38766908) [ 34.813792][ T4912] ---[ end trace 0000000000000000 ]--- [ 34.974823][ T4917] input: syz0 as /devices/virtual/input/input4 [ 35.074311][ T4916] loop2: detected capacity change from 0 to 512 [ 35.074642][ T4916] ======================================================= [ 35.074642][ T4916] WARNING: The mand mount option has been deprecated and [ 35.074642][ T4916] and is ignored by this kernel. Remove the mand [ 35.074642][ T4916] option from the mount to silence this warning. [ 35.074642][ T4916] ======================================================= [ 35.180433][ T4912] Kernel panic - not syncing: Oops: Fatal exception [ 35.181690][ T4912] SMP: stopping secondary CPUs [ 35.182551][ T4912] Kernel Offset: disabled [ 35.183317][ T4912] CPU features: 0x14000000,003c0008,27020501,5427fea7 [ 35.184517][ T4912] Memory Limit: none [ 35.554560][ T4912] Rebooting in 86400 seconds..