last executing test programs: 4.989889925s ago: executing program 0 (id=853): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0', 0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(0xffffffffffffffff, &(0x7f00000002c0)='1', 0x1) 4.919194556s ago: executing program 0 (id=857): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x34, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) 3.576651137s ago: executing program 3 (id=874): syz_create_resource$binfmt(0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x40) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r2, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) 3.569650757s ago: executing program 0 (id=875): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_ublk_setup_io_uring(0x714c, &(0x7f0000000040)={0x0, 0x1a77, 0x1000, 0x0, 0x325}, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.129160258s ago: executing program 4 (id=878): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 1.629053082s ago: executing program 4 (id=886): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8bef4a1370e5fc0c803", 0xb4}, {&(0x7f0000000700)="44900000000056ee66c372f3105eb186dd", 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd747641", 0x9b}, {&(0x7f0000001e00)="03deba91c25995772ba981874cf3617e5a5f26d296be0bcb1ab619b901e1588b23e68431025b444671a918fd8ca862eb4494e52e10561f1dcac08771bcb099", 0x3f}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.581454443s ago: executing program 0 (id=887): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x34, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) 1.581148563s ago: executing program 3 (id=888): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000020000200000000002000000850000002000000085000000a0"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.567195274s ago: executing program 3 (id=890): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, 0x0}, 0x43) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=[{0x20, 0x84, 0x2, "fe8041000000000092"}], 0x20}, 0x1000000) 1.353209798s ago: executing program 2 (id=898): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_ublk_setup_io_uring(0x714c, &(0x7f0000000040)={0x0, 0x1a77, 0x1000, 0x0, 0x325}, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.27731143s ago: executing program 2 (id=900): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000020000200000000002000000850000002000000085000000a0"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.27692655s ago: executing program 2 (id=901): syz_emit_ethernet(0x3a3, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x36d, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x2, "d5170000dce9674a36da018dff16e70b8b14c4b7"}]}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 1.255890251s ago: executing program 2 (id=902): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00012cbd7000fbdbdf25200000001400ff80050004000000000005000100"], 0x28}, 0x1, 0x0, 0x0, 0x4004010}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000040)={0x0, 0x6, 0x4000, 0x8b, 0x2, 0xfffffffc}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="f0", 0x1}, {&(0x7f0000000e00)="cf6a053a5a8404e5088199f63449b212c5a3da37e53f258286f3f5861132c2a1b9b0587040a73ad1d009c35e3b0a78bade24e5c039ad7e8b7e88c6c90427bf95c78dcd1586cc64bc9414361037dd8aac0feebe9a941ca1c578672467ca5729e240723cf9afe68875dab5a241bf57a99d2a6c24078f09ddfd6b7b6693545a23874f0f4649780d730f47475168e59a0c85f59331abd1d0d5a86f5cf993faf9558593705b83ba9786bd7d83c5e0d6ee", 0xae}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000900)="8a", 0x1}, {&(0x7f00000005c0)="f5", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x3, 0x4000000) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) sendto$inet(r4, 0x0, 0x0, 0xc0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x4000, 0x0) syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00, 0xffffffff}, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000300)={0x1, 0x1}) 1.205775272s ago: executing program 1 (id=903): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x14}}, 0xc04c055) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1.175459513s ago: executing program 1 (id=904): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1) ioctl$TCFLSH(r0, 0x540b, 0x1) 312.091772ms ago: executing program 1 (id=905): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x776) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x142, 0x80) write(r0, &(0x7f0000000180)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x10001, 0x7fff, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001780), 0x8, r2}, 0x38) 311.683482ms ago: executing program 0 (id=906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x4070bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0xffffffff}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 311.472012ms ago: executing program 3 (id=907): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/block/md0/md/resync_start\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r0, &(0x7f00000002c0)='1', 0x1) 294.236083ms ago: executing program 4 (id=908): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) pipe2$9p(&(0x7f0000000080), 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @random="246fd483a581", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote={0xfe, 0x50}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 211.590855ms ago: executing program 3 (id=909): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe6, 0x2}, {0xffe0, 0x10}, {0xd, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8c1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0xc182, 0x8001, 0x8, 0x5, 0xfffffffffffffffe, 0xfffffff8, 0x2}) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400109"], 0x87) 144.395016ms ago: executing program 3 (id=910): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(0xffffffffffffffff, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 142.882756ms ago: executing program 2 (id=911): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_ublk_setup_io_uring(0x714c, &(0x7f0000000040)={0x0, 0x1a77, 0x1000, 0x0, 0x325}, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 118.938837ms ago: executing program 1 (id=912): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000020000200000000002000000850000002000000085000000a00000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 115.962897ms ago: executing program 4 (id=913): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffbb4, 0x5, 0x5, 0x6e0, 0x5}, 0x64}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r5, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000002125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 88.841757ms ago: executing program 1 (id=914): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x203, 0xa0402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000440)={0x20, 0x71cfd3e5a23c00e6, 0x2, 0xd, 0x8, 0x4, &(0x7f0000000340)="06edca52f8df3e25"}) 52.028918ms ago: executing program 4 (id=915): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x14}}, 0xc04c055) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 5.529559ms ago: executing program 2 (id=916): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x30, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 5.26233ms ago: executing program 1 (id=917): r0 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x1, 0x0) write$make_it_fail(r0, &(0x7f0000000240)='1\x00', 0x2) 5.032079ms ago: executing program 0 (id=918): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r3, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) 0s ago: executing program 4 (id=919): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8bef4a1370e5fc0c803", 0xb4}, {&(0x7f0000000700)="44900000000056ee66c372f3105eb186dd", 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd747641", 0x9b}, {&(0x7f0000001e00)="03deba91c25995772ba981874cf3617e5a5f26d296be0bcb1ab619b901e1588b23e68431025b444671a918fd8ca862eb4494e52e10561f1dcac08771bcb099", 0x3f}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.237' (ED25519) to the list of known hosts. [ 28.292098][ T4316] cgroup: Unknown subsys name 'net' [ 28.534729][ T4316] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.795469][ T4316] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.907762][ T4332] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.911815][ T4338] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.913761][ T4338] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.915736][ T4338] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.917846][ T4338] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.919639][ T4340] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.921253][ T4340] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.922842][ T4340] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.924258][ T4340] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.924865][ T4343] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.925993][ T4340] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.927076][ T4343] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.928268][ T4340] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.929327][ T4343] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.930439][ T4340] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.931559][ T4343] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.934999][ T4343] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.935479][ T4344] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.938140][ T4344] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.941552][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.942377][ T4345] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.943712][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 29.944355][ T4346] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.945516][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.946974][ T4345] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 29.957115][ T4345] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.960169][ T4345] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.968390][ T4345] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.969796][ T4345] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.971446][ T4345] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.086180][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 30.100746][ T4341] chnl_net:caif_netlink_parms(): no params data found [ 30.112455][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 30.126493][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 30.155385][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.156759][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.158401][ T4341] device bridge_slave_0 entered promiscuous mode [ 30.161589][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.163835][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.165416][ T4341] device bridge_slave_1 entered promiscuous mode [ 30.174920][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.176246][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.177788][ T4328] device bridge_slave_0 entered promiscuous mode [ 30.188646][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.189921][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.191559][ T4334] device bridge_slave_0 entered promiscuous mode [ 30.194686][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.195967][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.197558][ T4328] device bridge_slave_1 entered promiscuous mode [ 30.206515][ T4341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.210171][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.211670][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.215575][ T4334] device bridge_slave_1 entered promiscuous mode [ 30.223846][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.226120][ T4341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.227875][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.229105][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.230654][ T4337] device bridge_slave_0 entered promiscuous mode [ 30.233831][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 30.235993][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.237279][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.238955][ T4337] device bridge_slave_1 entered promiscuous mode [ 30.244013][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.251102][ T4341] team0: Port device team_slave_0 added [ 30.256500][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.264494][ T4341] team0: Port device team_slave_1 added [ 30.268311][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.272662][ T4328] team0: Port device team_slave_0 added [ 30.276549][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.282521][ T4328] team0: Port device team_slave_1 added [ 30.286782][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.294438][ T4334] team0: Port device team_slave_0 added [ 30.295837][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.296962][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.301069][ T4341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.309464][ T4334] team0: Port device team_slave_1 added [ 30.310831][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.312112][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.316652][ T4341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.322613][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.323802][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.328146][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.330980][ T4337] team0: Port device team_slave_0 added [ 30.338868][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.340010][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.344630][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.348946][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.350239][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.355034][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.358204][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.359427][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.364418][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.367172][ T4337] team0: Port device team_slave_1 added [ 30.368356][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.369690][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.371343][ T4329] device bridge_slave_0 entered promiscuous mode [ 30.423263][ T4341] device hsr_slave_0 entered promiscuous mode [ 30.462159][ T4341] device hsr_slave_1 entered promiscuous mode [ 30.517818][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.519178][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.520774][ T4329] device bridge_slave_1 entered promiscuous mode [ 30.529425][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.530685][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.535323][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.545091][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.546326][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.550884][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.560325][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.565468][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.592975][ T4334] device hsr_slave_0 entered promiscuous mode [ 30.642202][ T4334] device hsr_slave_1 entered promiscuous mode [ 30.682006][ T4334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.683357][ T4334] Cannot create hsr debugfs directory [ 30.713072][ T4328] device hsr_slave_0 entered promiscuous mode [ 30.752124][ T4328] device hsr_slave_1 entered promiscuous mode [ 30.801988][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.803337][ T4328] Cannot create hsr debugfs directory [ 30.833798][ T4329] team0: Port device team_slave_0 added [ 30.844964][ T4329] team0: Port device team_slave_1 added [ 30.863171][ T4337] device hsr_slave_0 entered promiscuous mode [ 30.902147][ T4337] device hsr_slave_1 entered promiscuous mode [ 30.941941][ T4337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.943298][ T4337] Cannot create hsr debugfs directory [ 30.956626][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.957898][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.962590][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.968671][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.969952][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.974596][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.063429][ T4329] device hsr_slave_0 entered promiscuous mode [ 31.104413][ T4329] device hsr_slave_1 entered promiscuous mode [ 31.142363][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.143736][ T4329] Cannot create hsr debugfs directory [ 31.147985][ T4341] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.198970][ T4341] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.263080][ T4341] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.309459][ T4341] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.365658][ T4328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.414746][ T4328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.474910][ T4328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.528685][ T4328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.601786][ T4334] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.624729][ T4334] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.673825][ T4334] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.723624][ T4334] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.764268][ T4337] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.803071][ T4337] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.842941][ T4337] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.893263][ T4337] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.938801][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.962770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.964981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.967860][ T4341] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.969156][ T4329] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.003125][ T4329] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.012160][ T4335] Bluetooth: hci2: command 0x0409 tx timeout [ 32.022127][ T4335] Bluetooth: hci3: command 0x0409 tx timeout [ 32.022144][ T4345] Bluetooth: hci1: command 0x0409 tx timeout [ 32.023305][ T4335] Bluetooth: hci4: command 0x0409 tx timeout [ 32.024273][ T4345] Bluetooth: hci0: command 0x0409 tx timeout [ 32.054554][ T4329] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.093449][ T4329] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.144231][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.146017][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.147850][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.149122][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.150913][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.163351][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.168066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.169794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.171535][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.172847][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.187370][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.191720][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.193886][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.200484][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.205666][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.211778][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.213873][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.216065][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.223895][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.225254][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.226879][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.228441][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.229686][ T4377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.231209][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.239459][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.241249][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.243543][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.245170][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.247097][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.248282][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.257613][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.259302][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.261213][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.264325][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.266066][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.267590][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.269224][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.278552][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.282303][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.285733][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.287733][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.289586][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.291260][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.298349][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.304747][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.306480][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.308045][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.309777][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.311288][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.312622][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.315072][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.325056][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.327215][ T4328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.329072][ T4328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.334616][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.336325][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.338194][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.339761][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.341427][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.344139][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.346142][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.347402][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.348822][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.350461][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.354646][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.356458][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.367083][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.369403][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.371338][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.373476][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.375231][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.376935][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.378274][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.387873][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.391057][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.393770][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.395321][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.399830][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.401725][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.403206][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.405742][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.407719][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.409430][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.415885][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.419811][ T4334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.421625][ T4334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.431436][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.433415][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.435152][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.436838][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.438315][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.439906][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.441556][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.447249][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.448866][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.450570][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.463484][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.465295][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.466553][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.468100][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.470113][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.471709][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.474553][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.476312][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.477499][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.478918][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.480660][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.482692][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.484383][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.485870][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.488064][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.493306][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.495091][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.498546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.501801][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.520042][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.524027][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.525741][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.527199][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.528629][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.529938][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.534234][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.535881][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.537635][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.545239][ T4341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.551803][ T4329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.554421][ T4329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.557796][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.559408][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.560979][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.565874][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.567615][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.570501][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.576061][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.577553][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.583041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.584760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.592679][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.597290][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.599131][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.610890][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.622163][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.624336][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.625972][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.636950][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.638871][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.643937][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.645339][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.650208][ T4341] device veth0_vlan entered promiscuous mode [ 32.656770][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.658526][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.660284][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.661705][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.667484][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.669541][ T4328] device veth0_vlan entered promiscuous mode [ 32.673518][ T4341] device veth1_vlan entered promiscuous mode [ 32.681368][ T4328] device veth1_vlan entered promiscuous mode [ 32.683274][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.685100][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.686725][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.688329][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.689866][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.691813][ T4334] device veth0_vlan entered promiscuous mode [ 32.696543][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.698176][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.708343][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.710207][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.715142][ T4334] device veth1_vlan entered promiscuous mode [ 32.718831][ T4341] device veth0_macvtap entered promiscuous mode [ 32.725988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.727695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.729336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.730975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.733479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.735975][ T4341] device veth1_macvtap entered promiscuous mode [ 32.738047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.739483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.741217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.754958][ T4334] device veth0_macvtap entered promiscuous mode [ 32.759414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.761091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.763513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.765209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.766921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.768533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.773464][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.776339][ T4328] device veth0_macvtap entered promiscuous mode [ 32.783766][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.786672][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.789026][ T4341] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.790572][ T4341] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.793224][ T4341] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.794742][ T4341] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.798761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.800346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.803400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.805176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.806840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.810276][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.812267][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.814343][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.815909][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.817712][ T4328] device veth1_macvtap entered promiscuous mode [ 32.824837][ T4334] device veth1_macvtap entered promiscuous mode [ 32.827604][ T4337] device veth0_vlan entered promiscuous mode [ 32.840293][ T4337] device veth1_vlan entered promiscuous mode [ 32.849606][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.851508][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.855315][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.865559][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.867249][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.868784][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.870320][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.871783][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.875360][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.880076][ T4337] device veth0_macvtap entered promiscuous mode [ 32.884358][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.886280][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.888516][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.895084][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.896880][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.898559][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.900274][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.905766][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.911056][ T4337] device veth1_macvtap entered promiscuous mode [ 32.915298][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.917117][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.918744][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.920549][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.923427][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.930306][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.932308][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.934331][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.936044][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.937740][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.941352][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.943423][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.944941][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.946451][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.958058][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.959929][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.961604][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.964151][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.966582][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.969390][ T4377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.971632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.973652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.975219][ T4377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.980440][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.983327][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.985003][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.986874][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.988598][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.990447][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.993482][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.995589][ T4334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.997159][ T4334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.998765][ T4334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.000455][ T4334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.005399][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.007064][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.008842][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.027371][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.029272][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.031051][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.036580][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.038346][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.040160][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.042926][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.049099][ T4329] device veth0_vlan entered promiscuous mode [ 33.055536][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.057281][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.058930][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.060640][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.065901][ T4337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.067419][ T4337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.068868][ T4337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.070326][ T4337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.079092][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.080672][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.085421][ T4329] device veth1_vlan entered promiscuous mode [ 33.087530][ T4377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.088166][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.088862][ T4377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.090303][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.091837][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.096590][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.098291][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.116004][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.117417][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.118976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.153438][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.154892][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.157703][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.159423][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.168204][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.170010][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.176251][ T4377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.177583][ T4377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.179403][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.186578][ T4329] device veth0_macvtap entered promiscuous mode [ 33.191744][ T4329] device veth1_macvtap entered promiscuous mode [ 33.210041][ T4377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.211450][ T4377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.219701][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.230703][ T4413] jffs2: notice: (4413) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 33.244237][ T4377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.244401][ T4413] overlayfs: failed to resolve './bus': -2 [ 33.245644][ T4377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.246006][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.285927][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.296813][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.298546][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.300292][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.304746][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.309125][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.310973][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.313264][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.317297][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.323904][ T4416] lo speed is unknown, defaulting to 1000 [ 33.325095][ T4416] lo speed is unknown, defaulting to 1000 [ 33.326795][ T4416] lo speed is unknown, defaulting to 1000 [ 33.328700][ T4416] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 33.331371][ T4416] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 33.332456][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.334567][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.338405][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.340247][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.348856][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.350679][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.354116][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.356348][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.358288][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.360413][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.364379][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.366168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.368024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.375312][ T4416] lo speed is unknown, defaulting to 1000 [ 33.376869][ T4416] lo speed is unknown, defaulting to 1000 [ 33.378797][ T4416] lo speed is unknown, defaulting to 1000 [ 33.380284][ T4416] lo speed is unknown, defaulting to 1000 [ 33.381538][ T4416] lo speed is unknown, defaulting to 1000 [ 33.391825][ T4329] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.401607][ T4329] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.405777][ T4329] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.407399][ T4329] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.475939][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.477259][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.489973][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.503846][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.513751][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.515250][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.554197][ T4429] loop3: detected capacity change from 0 to 512 [ 33.573524][ T4429] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 33.575765][ T4429] EXT4-fs (loop3): orphan cleanup on readonly fs [ 33.578194][ T4429] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 33.579876][ T4429] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 33.581364][ T4429] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.11: Failed to acquire dquot type 1 [ 33.588039][ T4429] EXT4-fs (loop3): Remounting filesystem read-only [ 33.590300][ T4429] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.11: bg 0: block 40: padding at end of block bitmap is not set [ 33.594463][ T4429] EXT4-fs (loop3): Remounting filesystem read-only [ 33.595624][ T4429] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 33.597285][ T4429] EXT4-fs (loop3): Remounting filesystem read-only [ 33.598747][ T4429] EXT4-fs (loop3): 1 truncate cleaned up [ 33.633276][ T4429] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 33.672092][ T4376] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.720453][ T4436] FAULT_INJECTION: forcing a failure. [ 33.720453][ T4436] name failslab, interval 1, probability 0, space 0, times 1 [ 33.723561][ T4436] CPU: 0 PID: 4436 Comm: syz.1.12 Not tainted syzkaller #0 [ 33.724921][ T4436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.726756][ T4436] Call trace: [ 33.727382][ T4436] dump_backtrace+0x1c4/0x1f0 [ 33.728259][ T4436] show_stack+0x2c/0x3c [ 33.729037][ T4436] __dump_stack+0x30/0x40 [ 33.729865][ T4436] dump_stack_lvl+0xf4/0x15c [ 33.730740][ T4436] dump_stack+0x1c/0x5c [ 33.731534][ T4436] should_fail_ex+0x3cc/0x524 [ 33.732409][ T4436] __should_failslab+0xc0/0x11c [ 33.733334][ T4436] should_failslab+0x10/0x28 [ 33.734214][ T4436] kmem_cache_alloc+0x88/0x310 [ 33.735087][ T4436] __build_skb+0x34/0x334 [ 33.735899][ T4436] build_skb+0x30/0x198 [ 33.736648][ T4436] __tun_build_skb+0x44/0x23c [ 33.737487][ T4436] tun_get_user+0x16a0/0x32a8 [ 33.738351][ T4436] tun_chr_write_iter+0xfc/0x200 [ 33.739281][ T4436] vfs_write+0x3c8/0x7c8 [ 33.740056][ T4436] ksys_write+0x12c/0x228 [ 33.740860][ T4436] __arm64_sys_write+0x7c/0x90 [ 33.741740][ T4436] invoke_syscall+0x98/0x290 [ 33.742578][ T4436] el0_svc_common+0x13c/0x258 [ 33.743487][ T4436] do_el0_svc+0x5c/0x134 [ 33.744244][ T4436] el0_svc+0x58/0x128 [ 33.744953][ T4436] el0t_64_sync_handler+0x84/0xf0 [ 33.745845][ T4436] el0t_64_sync+0x18c/0x190 [ 33.862021][ T4376] usb 1-1: Using ep0 maxpacket: 8 [ 33.865868][ T4376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 33.867940][ T4376] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 33.869741][ T4376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.876798][ T4442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'. [ 33.881829][ T4376] usb 1-1: config 0 descriptor?? [ 33.953226][ T4451] loop4: detected capacity change from 0 to 128 [ 33.956347][ T4451] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.960235][ T4451] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 33.972375][ T4444] FAULT_INJECTION: forcing a failure. [ 33.972375][ T4444] name failslab, interval 1, probability 0, space 0, times 0 [ 33.979463][ T4444] CPU: 1 PID: 4444 Comm: syz.1.15 Not tainted syzkaller #0 [ 33.980780][ T4444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.982532][ T4444] Call trace: [ 33.983140][ T4444] dump_backtrace+0x1c4/0x1f0 [ 33.984033][ T4444] show_stack+0x2c/0x3c [ 33.984762][ T4444] __dump_stack+0x30/0x40 [ 33.985586][ T4444] dump_stack_lvl+0xf4/0x15c [ 33.986469][ T4444] dump_stack+0x1c/0x5c [ 33.987231][ T4444] should_fail_ex+0x3cc/0x524 [ 33.988101][ T4444] __should_failslab+0xc0/0x11c [ 33.988994][ T4444] should_failslab+0x10/0x28 [ 33.989822][ T4444] __kmem_cache_alloc_node+0x7c/0x318 [ 33.990825][ T4444] __kmalloc+0xc4/0x180 [ 33.991602][ T4444] pfkey_add+0xb8c/0x22f8 [ 33.992393][ T4444] pfkey_sendmsg+0xb20/0xe10 [ 33.993223][ T4444] ____sys_sendmsg+0x588/0x90c [ 33.994076][ T4444] __sys_sendmsg+0x288/0x374 [ 33.994932][ T4444] __arm64_sys_sendmsg+0x80/0x94 [ 33.995825][ T4444] invoke_syscall+0x98/0x290 [ 33.996676][ T4444] el0_svc_common+0x13c/0x258 [ 33.997029][ T4451] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 33.997519][ T4444] do_el0_svc+0x5c/0x134 [ 33.999693][ T4451] FAT-fs (loop4): Filesystem has been set read-only [ 33.999851][ T4444] el0_svc+0x58/0x128 [ 34.001696][ T4444] el0t_64_sync_handler+0x84/0xf0 [ 34.002607][ T4444] el0t_64_sync+0x18c/0x190 [ 34.003500][ C1] vkms_vblank_simulate: vblank timer overrun [ 34.021458][ T4455] syz.1.15 uses obsolete (PF_INET,SOCK_PACKET) [ 34.092418][ T4330] Bluetooth: hci4: command 0x041b tx timeout [ 34.093592][ T4330] Bluetooth: hci1: command 0x041b tx timeout [ 34.094676][ T4330] Bluetooth: hci3: command 0x041b tx timeout [ 34.095768][ T4330] Bluetooth: hci2: command 0x041b tx timeout [ 34.096929][ T4330] Bluetooth: hci0: command 0x041b tx timeout [ 34.102171][ T4376] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 34.378246][ T4341] EXT4-fs (loop3): unmounting filesystem. [ 34.578465][ T4382] usb 1-1: USB disconnect, device number 2 [ 35.274801][ T4511] FAULT_INJECTION: forcing a failure. [ 35.274801][ T4511] name fail_futex, interval 1, probability 0, space 0, times 1 [ 35.279805][ T4511] CPU: 1 PID: 4511 Comm: syz.1.37 Not tainted syzkaller #0 [ 35.281058][ T4511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 35.282794][ T4511] Call trace: [ 35.283399][ T4511] dump_backtrace+0x1c4/0x1f0 [ 35.284221][ T4511] show_stack+0x2c/0x3c [ 35.284967][ T4511] __dump_stack+0x30/0x40 [ 35.285757][ T4511] dump_stack_lvl+0xf4/0x15c [ 35.286554][ T4511] dump_stack+0x1c/0x5c [ 35.287293][ T4511] should_fail_ex+0x3cc/0x524 [ 35.288162][ T4511] should_fail+0x14/0x24 [ 35.288967][ T4511] get_futex_key+0x18c/0xfb0 [ 35.289810][ T4511] futex_wake+0x10c/0x458 [ 35.290601][ T4511] do_futex+0x2c4/0x340 [ 35.291367][ T4511] mm_release+0x190/0x274 [ 35.292151][ T4511] exit_mm_release+0x30/0x40 [ 35.292984][ T4511] exit_mm+0x50/0x290 [ 35.293716][ T4511] do_exit+0x4d0/0x19ac [ 35.294493][ T4511] do_group_exit+0x198/0x238 [ 35.295339][ T4511] get_signal+0x11f4/0x133c [ 35.296162][ T4511] do_notify_resume+0x364/0x2c84 [ 35.297031][ T4511] el0_svc+0x98/0x128 [ 35.297758][ T4511] el0t_64_sync_handler+0x84/0xf0 [ 35.298647][ T4511] el0t_64_sync+0x18c/0x190 [ 35.299477][ C1] vkms_vblank_simulate: vblank timer overrun [ 35.433982][ T4531] 0: reclassify loop, rule prio 0, protocol 03 [ 35.763690][ T4567] device syzkaller0 entered promiscuous mode [ 35.851198][ T4582] 0: reclassify loop, rule prio 0, protocol 03 [ 35.974552][ T4597] Zero length message leads to an empty skb [ 36.172655][ T4345] Bluetooth: hci2: command 0x040f tx timeout [ 36.173887][ T4345] Bluetooth: hci3: command 0x040f tx timeout [ 36.174998][ T4345] Bluetooth: hci1: command 0x040f tx timeout [ 37.115899][ T4753] FAULT_INJECTION: forcing a failure. [ 37.115899][ T4753] name failslab, interval 1, probability 0, space 0, times 0 [ 37.118726][ T4753] CPU: 1 PID: 4753 Comm: syz.4.107 Not tainted syzkaller #0 [ 37.119915][ T4753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 37.121578][ T4753] Call trace: [ 37.122164][ T4753] dump_backtrace+0x1c4/0x1f0 [ 37.123025][ T4753] show_stack+0x2c/0x3c [ 37.123734][ T4753] __dump_stack+0x30/0x40 [ 37.124513][ T4753] dump_stack_lvl+0xf4/0x15c [ 37.125358][ T4753] dump_stack+0x1c/0x5c [ 37.126107][ T4753] should_fail_ex+0x3cc/0x524 [ 37.126947][ T4753] __should_failslab+0xc0/0x11c [ 37.127761][ T4753] should_failslab+0x10/0x28 [ 37.128555][ T4753] __kmem_cache_alloc_node+0x7c/0x318 [ 37.129528][ T4753] __kmalloc+0xc4/0x180 [ 37.130297][ T4753] memcg_list_lru_alloc+0x280/0x8bc [ 37.131214][ T4753] slab_pre_alloc_hook+0x2cc/0x31c [ 37.132156][ T4753] kmem_cache_alloc_lru+0x60/0x284 [ 37.133088][ T4753] new_inode_pseudo+0xdc/0x1cc [ 37.133963][ T4753] alloc_anon_inode+0x28/0x2c4 [ 37.134851][ T4753] aio_setup_ring+0xe0/0xbec [ 37.135656][ T4753] ioctx_alloc+0x2f8/0x734 [ 37.136431][ T4753] __arm64_sys_io_setup+0x134/0x30c [ 37.137365][ T4753] invoke_syscall+0x98/0x290 [ 37.138193][ T4753] el0_svc_common+0x13c/0x258 [ 37.139058][ T4753] do_el0_svc+0x5c/0x134 [ 37.139871][ T4753] el0_svc+0x58/0x128 [ 37.140613][ T4753] el0t_64_sync_handler+0x84/0xf0 [ 37.141551][ T4753] el0t_64_sync+0x18c/0x190 [ 37.257361][ T4764] md: could not open device unknown-block(1,0). [ 37.600189][ T4808] md: could not open device unknown-block(1,0). [ 37.648134][ T4813] FAULT_INJECTION: forcing a failure. [ 37.648134][ T4813] name failslab, interval 1, probability 0, space 0, times 0 [ 37.668481][ T4813] CPU: 1 PID: 4813 Comm: syz.1.131 Not tainted syzkaller #0 [ 37.669841][ T4813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 37.671443][ T4813] Call trace: [ 37.672006][ T4813] dump_backtrace+0x1c4/0x1f0 [ 37.672817][ T4813] show_stack+0x2c/0x3c [ 37.673566][ T4813] __dump_stack+0x30/0x40 [ 37.674320][ T4813] dump_stack_lvl+0xf4/0x15c [ 37.675109][ T4813] dump_stack+0x1c/0x5c [ 37.675976][ T4813] should_fail_ex+0x3cc/0x524 [ 37.676943][ T4813] __should_failslab+0xc0/0x11c [ 37.677860][ T4813] should_failslab+0x10/0x28 [ 37.678648][ T4813] __kmem_cache_alloc_node+0x7c/0x318 [ 37.679565][ T4813] __kmalloc+0xc4/0x180 [ 37.680268][ T4813] memcg_list_lru_alloc+0x280/0x8bc [ 37.681166][ T4813] slab_pre_alloc_hook+0x2cc/0x31c [ 37.682059][ T4813] kmem_cache_alloc_lru+0x60/0x284 [ 37.682994][ T4813] new_inode_pseudo+0xdc/0x1cc [ 37.683860][ T4813] alloc_anon_inode+0x28/0x2c4 [ 37.684676][ T4813] aio_setup_ring+0xe0/0xbec [ 37.685443][ T4813] ioctx_alloc+0x2f8/0x734 [ 37.686225][ T4813] __arm64_sys_io_setup+0x134/0x30c [ 37.687128][ T4813] invoke_syscall+0x98/0x290 [ 37.687972][ T4813] el0_svc_common+0x13c/0x258 [ 37.688817][ T4813] do_el0_svc+0x5c/0x134 [ 37.689593][ T4813] el0_svc+0x58/0x128 [ 37.690309][ T4813] el0t_64_sync_handler+0x84/0xf0 [ 37.691211][ T4813] el0t_64_sync+0x18c/0x190 [ 37.773356][ T4330] Bluetooth: hci0: command 0x0419 tx timeout [ 37.841061][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 37.985377][ T4863] md: could not open device unknown-block(1,0). [ 38.065076][ T4874] FAULT_INJECTION: forcing a failure. [ 38.065076][ T4874] name failslab, interval 1, probability 0, space 0, times 0 [ 38.074041][ T4874] CPU: 1 PID: 4874 Comm: syz.3.148 Not tainted syzkaller #0 [ 38.075391][ T4874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 38.077235][ T4874] Call trace: [ 38.077779][ T4874] dump_backtrace+0x1c4/0x1f0 [ 38.078626][ T4874] show_stack+0x2c/0x3c [ 38.079389][ T4874] __dump_stack+0x30/0x40 [ 38.080195][ T4874] dump_stack_lvl+0xf4/0x15c [ 38.081014][ T4874] dump_stack+0x1c/0x5c [ 38.081748][ T4874] should_fail_ex+0x3cc/0x524 [ 38.082593][ T4874] __should_failslab+0xc0/0x11c [ 38.083499][ T4874] should_failslab+0x10/0x28 [ 38.084332][ T4874] kmem_cache_alloc+0x88/0x310 [ 38.085200][ T4874] security_inode_alloc+0x38/0x11c [ 38.086171][ T4874] inode_init_always+0x6c8/0xb28 [ 38.087073][ T4874] new_inode_pseudo+0x7c/0x1cc [ 38.087977][ T4874] alloc_anon_inode+0x28/0x2c4 [ 38.088862][ T4874] aio_setup_ring+0xe0/0xbec [ 38.089654][ T4874] ioctx_alloc+0x2f8/0x734 [ 38.090456][ T4874] __arm64_sys_io_setup+0x134/0x30c [ 38.091404][ T4874] invoke_syscall+0x98/0x290 [ 38.092237][ T4874] el0_svc_common+0x13c/0x258 [ 38.093042][ T4874] do_el0_svc+0x5c/0x134 [ 38.093802][ T4874] el0_svc+0x58/0x128 [ 38.094544][ T4874] el0t_64_sync_handler+0x84/0xf0 [ 38.095480][ T4874] el0t_64_sync+0x18c/0x190 [ 38.252993][ T4345] Bluetooth: hci1: command 0x0419 tx timeout [ 38.254216][ T4345] Bluetooth: hci3: command 0x0419 tx timeout [ 38.255385][ T4345] Bluetooth: hci2: command 0x0419 tx timeout [ 38.316230][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 39.040077][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 39.055412][ T5002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.060380][ T5002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.470879][ T5043] FAULT_INJECTION: forcing a failure. [ 39.470879][ T5043] name fail_futex, interval 1, probability 0, space 0, times 0 [ 39.481604][ T5043] CPU: 1 PID: 5043 Comm: syz.1.197 Not tainted syzkaller #0 [ 39.483073][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 39.485090][ T5043] Call trace: [ 39.485743][ T5043] dump_backtrace+0x1c4/0x1f0 [ 39.486636][ T5043] show_stack+0x2c/0x3c [ 39.487402][ T5043] __dump_stack+0x30/0x40 [ 39.488225][ T5043] dump_stack_lvl+0xf4/0x15c [ 39.489072][ T5043] dump_stack+0x1c/0x5c [ 39.489878][ T5043] should_fail_ex+0x3cc/0x524 [ 39.490752][ T5043] should_fail+0x14/0x24 [ 39.491549][ T5043] get_futex_key+0x18c/0xfb0 [ 39.492399][ T5043] futex_wake+0x10c/0x458 [ 39.493229][ T5043] do_futex+0x2c4/0x340 [ 39.494020][ T5043] mm_release+0x190/0x274 [ 39.494845][ T5043] exit_mm_release+0x30/0x40 [ 39.495727][ T5043] exit_mm+0x50/0x290 [ 39.496526][ T5043] do_exit+0x4d0/0x19ac [ 39.497325][ T5043] do_group_exit+0x198/0x238 [ 39.498210][ T5043] get_signal+0x11f4/0x133c [ 39.499070][ T5043] do_notify_resume+0x364/0x2c84 [ 39.500003][ T5043] el0_svc+0x98/0x128 [ 39.500767][ T5043] el0t_64_sync_handler+0x84/0xf0 [ 39.501674][ T5043] el0t_64_sync+0x18c/0x190 [ 39.508243][ T5039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.196'. [ 40.695025][ T5111] FAULT_INJECTION: forcing a failure. [ 40.695025][ T5111] name fail_futex, interval 1, probability 0, space 0, times 0 [ 40.697594][ T5111] CPU: 1 PID: 5111 Comm: syz.4.222 Not tainted syzkaller #0 [ 40.698837][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 40.700829][ T5111] Call trace: [ 40.701433][ T5111] dump_backtrace+0x1c4/0x1f0 [ 40.702343][ T5111] show_stack+0x2c/0x3c [ 40.703222][ T5111] __dump_stack+0x30/0x40 [ 40.704138][ T5111] dump_stack_lvl+0xf4/0x15c [ 40.704940][ T5111] dump_stack+0x1c/0x5c [ 40.705718][ T5111] should_fail_ex+0x3cc/0x524 [ 40.706615][ T5111] should_fail+0x14/0x24 [ 40.707394][ T5111] get_futex_key+0x18c/0xfb0 [ 40.708273][ T5111] futex_wake+0x10c/0x458 [ 40.709093][ T5111] do_futex+0x2c4/0x340 [ 40.709885][ T5111] mm_release+0x190/0x274 [ 40.710710][ T5111] exit_mm_release+0x30/0x40 [ 40.711577][ T5111] exit_mm+0x50/0x290 [ 40.712343][ T5111] do_exit+0x4d0/0x19ac [ 40.713118][ T5111] do_group_exit+0x198/0x238 [ 40.713945][ T5111] get_signal+0x11f4/0x133c [ 40.714775][ T5111] do_notify_resume+0x364/0x2c84 [ 40.715661][ T5111] el0_svc+0x98/0x128 [ 40.716389][ T5111] el0t_64_sync_handler+0x84/0xf0 [ 40.717318][ T5111] el0t_64_sync+0x18c/0x190 [ 40.778124][ T5117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.225'. [ 40.785686][ T5117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.021374][ T5130] FAULT_INJECTION: forcing a failure. [ 41.021374][ T5130] name failslab, interval 1, probability 0, space 0, times 0 [ 41.031152][ T5130] CPU: 0 PID: 5130 Comm: syz.4.231 Not tainted syzkaller #0 [ 41.032615][ T5130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 41.034535][ T5130] Call trace: [ 41.035242][ T5130] dump_backtrace+0x1c4/0x1f0 [ 41.036251][ T5130] show_stack+0x2c/0x3c [ 41.037128][ T5130] __dump_stack+0x30/0x40 [ 41.038014][ T5130] dump_stack_lvl+0xf4/0x15c [ 41.038934][ T5130] dump_stack+0x1c/0x5c [ 41.039742][ T5130] should_fail_ex+0x3cc/0x524 [ 41.040764][ T5130] __should_failslab+0xc0/0x11c [ 41.041750][ T5130] should_failslab+0x10/0x28 [ 41.042671][ T5130] kmem_cache_alloc+0x88/0x310 [ 41.043604][ T5130] getname_flags+0xb8/0x458 [ 41.044478][ T5130] __arm64_sys_mkdirat+0x80/0xa8 [ 41.045411][ T5130] invoke_syscall+0x98/0x290 [ 41.046283][ T5130] el0_svc_common+0x13c/0x258 [ 41.047163][ T5130] do_el0_svc+0x5c/0x134 [ 41.047961][ T5130] el0_svc+0x58/0x128 [ 41.048710][ T5130] el0t_64_sync_handler+0x84/0xf0 [ 41.049596][ T5130] el0t_64_sync+0x18c/0x190 [ 41.083638][ T5131] capability: warning: `syz.3.229' uses 32-bit capabilities (legacy support in use) [ 42.122005][ T5141] FAULT_INJECTION: forcing a failure. [ 42.122005][ T5141] name fail_futex, interval 1, probability 0, space 0, times 0 [ 42.124475][ T5141] CPU: 0 PID: 5141 Comm: syz.4.234 Not tainted syzkaller #0 [ 42.125844][ T5141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 42.127877][ T5141] Call trace: [ 42.128515][ T5141] dump_backtrace+0x1c4/0x1f0 [ 42.129349][ T5141] show_stack+0x2c/0x3c [ 42.130092][ T5141] __dump_stack+0x30/0x40 [ 42.130775][ T5141] dump_stack_lvl+0xf4/0x15c [ 42.131511][ T5141] dump_stack+0x1c/0x5c [ 42.132280][ T5141] should_fail_ex+0x3cc/0x524 [ 42.133148][ T5141] should_fail+0x14/0x24 [ 42.133944][ T5141] get_futex_key+0x18c/0xfb0 [ 42.134781][ T5141] futex_wake+0x10c/0x458 [ 42.135564][ T5141] do_futex+0x2c4/0x340 [ 42.136322][ T5141] mm_release+0x190/0x274 [ 42.137121][ T5141] exit_mm_release+0x30/0x40 [ 42.137938][ T5141] exit_mm+0x50/0x290 [ 42.138666][ T5141] do_exit+0x4d0/0x19ac [ 42.139413][ T5141] do_group_exit+0x198/0x238 [ 42.140248][ T5141] get_signal+0x11f4/0x133c [ 42.141111][ T5141] do_notify_resume+0x364/0x2c84 [ 42.142055][ T5141] el0_svc+0x98/0x128 [ 42.142749][ T5141] el0t_64_sync_handler+0x84/0xf0 [ 42.143663][ T5141] el0t_64_sync+0x18c/0x190 [ 42.198424][ T5147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.237'. [ 42.672146][ T5064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 42.827971][ T5162] FAULT_INJECTION: forcing a failure. [ 42.827971][ T5162] name failslab, interval 1, probability 0, space 0, times 0 [ 42.830381][ T5162] CPU: 1 PID: 5162 Comm: syz.3.243 Not tainted syzkaller #0 [ 42.831638][ T5162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 42.833550][ T5162] Call trace: [ 42.834197][ T5162] dump_backtrace+0x1c4/0x1f0 [ 42.835084][ T5162] show_stack+0x2c/0x3c [ 42.835874][ T5162] __dump_stack+0x30/0x40 [ 42.836648][ T5162] dump_stack_lvl+0xf4/0x15c [ 42.837469][ T5162] dump_stack+0x1c/0x5c [ 42.838223][ T5162] should_fail_ex+0x3cc/0x524 [ 42.839028][ T5162] __should_failslab+0xc0/0x11c [ 42.839892][ T5162] should_failslab+0x10/0x28 [ 42.840695][ T5162] kmem_cache_alloc+0x88/0x310 [ 42.841528][ T5162] getname_flags+0xb8/0x458 [ 42.842295][ T5162] __arm64_sys_mkdirat+0x80/0xa8 [ 42.843168][ T5162] invoke_syscall+0x98/0x290 [ 42.844021][ T5162] el0_svc_common+0x13c/0x258 [ 42.844808][ T5162] do_el0_svc+0x5c/0x134 [ 42.845589][ T5162] el0_svc+0x58/0x128 [ 42.846306][ T5162] el0t_64_sync_handler+0x84/0xf0 [ 42.847234][ T5162] el0t_64_sync+0x18c/0x190 [ 43.013757][ T5178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.249'. [ 44.011273][ T5207] FAULT_INJECTION: forcing a failure. [ 44.011273][ T5207] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 44.018345][ T5207] CPU: 1 PID: 5207 Comm: syz.3.261 Not tainted syzkaller #0 [ 44.019732][ T5207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 44.021692][ T5207] Call trace: [ 44.022345][ T5207] dump_backtrace+0x1c4/0x1f0 [ 44.023219][ T5207] show_stack+0x2c/0x3c [ 44.023976][ T5207] __dump_stack+0x30/0x40 [ 44.024792][ T5207] dump_stack_lvl+0xf4/0x15c [ 44.025572][ T5207] dump_stack+0x1c/0x5c [ 44.026301][ T5207] should_fail_ex+0x3cc/0x524 [ 44.027122][ T5207] should_fail+0x14/0x24 [ 44.027912][ T5207] should_fail_usercopy+0x20/0x30 [ 44.028818][ T5207] strncpy_from_user+0x48/0x59c [ 44.029717][ T5207] getname_flags+0xec/0x458 [ 44.030585][ T5207] __arm64_sys_mkdirat+0x80/0xa8 [ 44.031505][ T5207] invoke_syscall+0x98/0x290 [ 44.032336][ T5207] el0_svc_common+0x13c/0x258 [ 44.033173][ T5207] do_el0_svc+0x5c/0x134 [ 44.033951][ T5207] el0_svc+0x58/0x128 [ 44.034680][ T5207] el0t_64_sync_handler+0x84/0xf0 [ 44.035623][ T5207] el0t_64_sync+0x18c/0x190 [ 44.232935][ T5215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.265'. [ 45.330129][ T5236] FAULT_INJECTION: forcing a failure. [ 45.330129][ T5236] name failslab, interval 1, probability 0, space 0, times 0 [ 45.332796][ T5236] CPU: 1 PID: 5236 Comm: syz.0.273 Not tainted syzkaller #0 [ 45.334105][ T5236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 45.335927][ T5236] Call trace: [ 45.336530][ T5236] dump_backtrace+0x1c4/0x1f0 [ 45.337422][ T5236] show_stack+0x2c/0x3c [ 45.338162][ T5236] __dump_stack+0x30/0x40 [ 45.338957][ T5236] dump_stack_lvl+0xf4/0x15c [ 45.339769][ T5236] dump_stack+0x1c/0x5c [ 45.340530][ T5236] should_fail_ex+0x3cc/0x524 [ 45.341359][ T5236] __should_failslab+0xc0/0x11c [ 45.342206][ T5236] should_failslab+0x10/0x28 [ 45.343003][ T5236] kmem_cache_alloc+0x88/0x310 [ 45.343862][ T5236] getname_flags+0xb8/0x458 [ 45.344649][ T5236] __arm64_sys_mkdirat+0x80/0xa8 [ 45.345526][ T5236] invoke_syscall+0x98/0x290 [ 45.346365][ T5236] el0_svc_common+0x13c/0x258 [ 45.347230][ T5236] do_el0_svc+0x5c/0x134 [ 45.347973][ T5236] el0_svc+0x58/0x128 [ 45.348661][ T5236] el0t_64_sync_handler+0x84/0xf0 [ 45.349557][ T5236] el0t_64_sync+0x18c/0x190 [ 45.450062][ T5238] FAULT_INJECTION: forcing a failure. [ 45.450062][ T5238] name fail_futex, interval 1, probability 0, space 0, times 0 [ 45.452546][ T5238] CPU: 0 PID: 5238 Comm: syz.0.274 Not tainted syzkaller #0 [ 45.453738][ T5238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 45.455389][ T5238] Call trace: [ 45.455937][ T5238] dump_backtrace+0x1c4/0x1f0 [ 45.456829][ T5238] show_stack+0x2c/0x3c [ 45.457648][ T5238] __dump_stack+0x30/0x40 [ 45.458477][ T5238] dump_stack_lvl+0xf4/0x15c [ 45.459349][ T5238] dump_stack+0x1c/0x5c [ 45.460193][ T5238] should_fail_ex+0x3cc/0x524 [ 45.461081][ T5238] should_fail+0x14/0x24 [ 45.461875][ T5238] get_futex_key+0x18c/0xfb0 [ 45.462695][ T5238] futex_wake+0x10c/0x458 [ 45.463475][ T5238] do_futex+0x2c4/0x340 [ 45.464250][ T5238] mm_release+0x190/0x274 [ 45.465064][ T5238] exit_mm_release+0x30/0x40 [ 45.465992][ T5238] exit_mm+0x50/0x290 [ 45.466743][ T5238] do_exit+0x4d0/0x19ac [ 45.467542][ T5238] do_group_exit+0x198/0x238 [ 45.468385][ T5238] get_signal+0x11f4/0x133c [ 45.469247][ T5238] do_notify_resume+0x364/0x2c84 [ 45.470182][ T5238] el0_svc+0x98/0x128 [ 45.470958][ T5238] el0t_64_sync_handler+0x84/0xf0 [ 45.471846][ T5238] el0t_64_sync+0x18c/0x190 [ 45.586006][ T5244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.277'. [ 45.591470][ T5244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.021429][ T5181] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 46.224663][ T5264] device syzkaller0 entered promiscuous mode [ 46.274399][ T5270] FAULT_INJECTION: forcing a failure. [ 46.274399][ T5270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.277129][ T5270] CPU: 1 PID: 5270 Comm: syz.1.285 Not tainted syzkaller #0 [ 46.278472][ T5270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 46.280585][ T5270] Call trace: [ 46.281186][ T5270] dump_backtrace+0x1c4/0x1f0 [ 46.282079][ T5270] show_stack+0x2c/0x3c [ 46.282945][ T5270] __dump_stack+0x30/0x40 [ 46.283762][ T5270] dump_stack_lvl+0xf4/0x15c [ 46.284546][ T5270] dump_stack+0x1c/0x5c [ 46.285300][ T5270] should_fail_ex+0x3cc/0x524 [ 46.286134][ T5270] should_fail+0x14/0x24 [ 46.286872][ T5270] should_fail_usercopy+0x20/0x30 [ 46.287752][ T5270] strncpy_from_user+0x48/0x59c [ 46.288625][ T5270] getname_flags+0xec/0x458 [ 46.289402][ T5270] __arm64_sys_mkdirat+0x80/0xa8 [ 46.290287][ T5270] invoke_syscall+0x98/0x290 [ 46.291118][ T5270] el0_svc_common+0x13c/0x258 [ 46.291956][ T5270] do_el0_svc+0x5c/0x134 [ 46.292722][ T5270] el0_svc+0x58/0x128 [ 46.293445][ T5270] el0t_64_sync_handler+0x84/0xf0 [ 46.294338][ T5270] el0t_64_sync+0x18c/0x190 [ 57.167522][ T5278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.289'. [ 57.306230][ T5310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.308179][ T5310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.165221][ T5318] FAULT_INJECTION: forcing a failure. [ 58.165221][ T5318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.167912][ T5318] CPU: 1 PID: 5318 Comm: syz.1.299 Not tainted syzkaller #0 [ 58.169159][ T5318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 58.171012][ T5318] Call trace: [ 58.171621][ T5318] dump_backtrace+0x1c4/0x1f0 [ 58.172504][ T5318] show_stack+0x2c/0x3c [ 58.173308][ T5318] __dump_stack+0x30/0x40 [ 58.174119][ T5318] dump_stack_lvl+0xf4/0x15c [ 58.174979][ T5318] dump_stack+0x1c/0x5c [ 58.175763][ T5318] should_fail_ex+0x3cc/0x524 [ 58.176654][ T5318] should_fail+0x14/0x24 [ 58.177478][ T5318] should_fail_usercopy+0x20/0x30 [ 58.178458][ T5318] strncpy_from_user+0x48/0x59c [ 58.179379][ T5318] getname_flags+0xec/0x458 [ 58.180264][ T5318] __arm64_sys_mkdirat+0x80/0xa8 [ 58.181135][ T5318] invoke_syscall+0x98/0x290 [ 58.182016][ T5318] el0_svc_common+0x13c/0x258 [ 58.182904][ T5318] do_el0_svc+0x5c/0x134 [ 58.183750][ T5318] el0_svc+0x58/0x128 [ 58.184493][ T5318] el0t_64_sync_handler+0x84/0xf0 [ 58.185428][ T5318] el0t_64_sync+0x18c/0x190 [ 58.463997][ T5330] device syzkaller0 entered promiscuous mode [ 60.206898][ T5298] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 60.401369][ T5348] FAULT_INJECTION: forcing a failure. [ 60.401369][ T5348] name failslab, interval 1, probability 0, space 0, times 0 [ 60.406335][ T5348] CPU: 0 PID: 5348 Comm: syz.2.311 Not tainted syzkaller #0 [ 60.407636][ T5348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 60.409467][ T5348] Call trace: [ 60.410056][ T5348] dump_backtrace+0x1c4/0x1f0 [ 60.410936][ T5348] show_stack+0x2c/0x3c [ 60.411746][ T5348] __dump_stack+0x30/0x40 [ 60.412494][ T5348] dump_stack_lvl+0xf4/0x15c [ 60.413293][ T5348] dump_stack+0x1c/0x5c [ 60.414010][ T5348] should_fail_ex+0x3cc/0x524 [ 60.414853][ T5348] __should_failslab+0xc0/0x11c [ 60.415733][ T5348] should_failslab+0x10/0x28 [ 60.416580][ T5348] kmem_cache_alloc+0x88/0x310 [ 60.417420][ T5348] getname_flags+0xb8/0x458 [ 60.418237][ T5348] __arm64_sys_mkdirat+0x80/0xa8 [ 60.419116][ T5348] invoke_syscall+0x98/0x290 [ 60.419954][ T5348] el0_svc_common+0x13c/0x258 [ 60.420809][ T5348] do_el0_svc+0x5c/0x134 [ 60.421578][ T5348] el0_svc+0x58/0x128 [ 60.422280][ T5348] el0t_64_sync_handler+0x84/0xf0 [ 60.423164][ T5348] el0t_64_sync+0x18c/0x190 [ 60.507495][ T5352] FAULT_INJECTION: forcing a failure. [ 60.507495][ T5352] name fail_futex, interval 1, probability 0, space 0, times 0 [ 60.510240][ T5352] CPU: 0 PID: 5352 Comm: syz.2.312 Not tainted syzkaller #0 [ 60.511530][ T5352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 60.513436][ T5352] Call trace: [ 60.514044][ T5352] dump_backtrace+0x1c4/0x1f0 [ 60.514903][ T5352] show_stack+0x2c/0x3c [ 60.515629][ T5352] __dump_stack+0x30/0x40 [ 60.516398][ T5352] dump_stack_lvl+0xf4/0x15c [ 60.517206][ T5352] dump_stack+0x1c/0x5c [ 60.517941][ T5352] should_fail_ex+0x3cc/0x524 [ 60.518790][ T5352] should_fail+0x14/0x24 [ 60.519552][ T5352] get_futex_key+0x18c/0xfb0 [ 60.520407][ T5352] futex_wake+0x10c/0x458 [ 60.521209][ T5352] do_futex+0x2c4/0x340 [ 60.522103][ T5352] mm_release+0x190/0x274 [ 60.522979][ T5352] exit_mm_release+0x30/0x40 [ 60.523937][ T5352] exit_mm+0x50/0x290 [ 60.524682][ T5352] do_exit+0x4d0/0x19ac [ 60.525449][ T5352] do_group_exit+0x198/0x238 [ 60.526328][ T5352] get_signal+0x11f4/0x133c [ 60.527154][ T5352] do_notify_resume+0x364/0x2c84 [ 60.528084][ T5352] el0_svc+0x98/0x128 [ 60.528786][ T5352] el0t_64_sync_handler+0x84/0xf0 [ 60.529705][ T5352] el0t_64_sync+0x18c/0x190 [ 64.494371][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495646][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.624269][ T116] cfg80211: failed to load regulatory.db [ 70.775446][ T5333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.305'. [ 70.959435][ T5390] FAULT_INJECTION: forcing a failure. [ 70.959435][ T5390] name fail_futex, interval 1, probability 0, space 0, times 0 [ 70.975388][ T5390] CPU: 1 PID: 5390 Comm: syz.3.324 Not tainted syzkaller #0 [ 70.976807][ T5390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 70.978706][ T5390] Call trace: [ 70.979276][ T5390] dump_backtrace+0x1c4/0x1f0 [ 70.980096][ T5390] show_stack+0x2c/0x3c [ 70.980945][ T5390] __dump_stack+0x30/0x40 [ 70.981692][ T5390] dump_stack_lvl+0xf4/0x15c [ 70.982517][ T5390] dump_stack+0x1c/0x5c [ 70.983261][ T5390] should_fail_ex+0x3cc/0x524 [ 70.984121][ T5390] should_fail+0x14/0x24 [ 70.984881][ T5390] get_futex_key+0x96c/0xfb0 [ 70.985730][ T5390] futex_wake+0x10c/0x458 [ 70.986644][ T5390] do_futex+0x2c4/0x340 [ 70.987500][ T5390] mm_release+0x190/0x274 [ 70.988285][ T5390] exit_mm_release+0x30/0x40 [ 70.989150][ T5390] exit_mm+0x50/0x290 [ 70.989890][ T5390] do_exit+0x4d0/0x19ac [ 70.990653][ T5390] do_group_exit+0x198/0x238 [ 70.991504][ T5390] get_signal+0x11f4/0x133c [ 70.992318][ T5390] do_notify_resume+0x364/0x2c84 [ 70.993182][ T5390] el0_svc+0x98/0x128 [ 70.993918][ T5390] el0t_64_sync_handler+0x84/0xf0 [ 70.994852][ T5390] el0t_64_sync+0x18c/0x190 [ 72.031806][ T5416] device syzkaller0 entered promiscuous mode [ 73.846330][ T5381] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 83.266432][ T5423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.334'. [ 83.307149][ T5448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.342'. [ 83.335523][ T5450] bond0 speed is unknown, defaulting to 1000 [ 83.336808][ T5450] bond0 speed is unknown, defaulting to 1000 [ 83.338025][ T5450] bond0 speed is unknown, defaulting to 1000 [ 83.343215][ T5456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.345517][ T5450] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 83.346604][ T5456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.379496][ T5455] device syzkaller0 entered promiscuous mode [ 83.396492][ T5450] bond0 speed is unknown, defaulting to 1000 [ 83.398053][ T5450] bond0 speed is unknown, defaulting to 1000 [ 83.399439][ T5450] bond0 speed is unknown, defaulting to 1000 [ 83.400828][ T5450] bond0 speed is unknown, defaulting to 1000 [ 83.403900][ T5450] bond0 speed is unknown, defaulting to 1000 [ 83.443304][ T5467] Driver unsupported XDP return value 0 on prog (id 38) dev N/A, expect packet loss! [ 86.369079][ T5459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 86.426507][ T5482] loop0: detected capacity change from 0 to 3904 [ 86.474408][ T5482] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 86.476423][ T5482] ldm_validate_privheads(): Disk read failed. [ 86.478239][ T5482] ldm_parse_tocblock(): TOCBLOCK's second bitmap is 'log', should be ''. [ 86.482212][ T5482] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 86.485013][ T5482] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 86.488581][ T5482] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 86.492857][ T5482] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 86.496592][ T5482] loop0: [ 86.497111][ T5482] loop0: partition table partially beyond EOD, truncated [ 95.197837][ T5474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.351'. [ 95.473831][ T5535] 9pnet_virtio: no channels available for device syz [ 96.350846][ T5544] jffs2: notice: (5544) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 96.466090][ T5544] loop0: detected capacity change from 0 to 4096 [ 96.490475][ T5544] ======================================================= [ 96.490475][ T5544] WARNING: The mand mount option has been deprecated and [ 96.490475][ T5544] and is ignored by this kernel. Remove the mand [ 96.490475][ T5544] option from the mount to silence this warning. [ 96.490475][ T5544] ======================================================= [ 96.545110][ T5544] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 96.598135][ T5552] loop2: detected capacity change from 0 to 4096 [ 96.631140][ T4334] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 96.633857][ T4334] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 96.636883][ T4334] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 96.722226][ T5549] loop4: detected capacity change from 0 to 32768 [ 96.729401][ T5549] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.372 (5549) [ 96.744729][ T5549] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.746662][ T5549] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 96.759181][ T5549] BTRFS info (device loop4): setting nodatasum [ 96.762025][ T5549] BTRFS info (device loop4): force zlib compression, level 3 [ 96.763445][ T5549] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 96.772383][ T5549] BTRFS info (device loop4): use lzo compression, level 0 [ 96.773737][ T5549] BTRFS info (device loop4): turning on flush-on-commit [ 96.775006][ T5549] BTRFS info (device loop4): enabling auto defrag [ 96.776187][ T5549] BTRFS info (device loop4): max_inline at 4096 [ 96.777328][ T5549] BTRFS info (device loop4): using free space tree [ 96.902012][ T5549] BTRFS info (device loop4): enabling ssd optimizations [ 97.036704][ T4329] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.036782][ T5592] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 97.130489][ T5595] device syzkaller0 entered promiscuous mode [ 97.141046][ T5510] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (5510) [ 97.391410][ T27] audit: type=1326 audit(97.370:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.393" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa5792a8 code=0x7ffc0000 [ 97.397879][ T27] audit: type=1326 audit(97.380:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.393" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=160 compat=0 ip=0xffffaa5792a8 code=0x7ffc0000 [ 97.404422][ T27] audit: type=1326 audit(97.380:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.393" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffaa572d4c code=0x7ffc0000 [ 97.408979][ T27] audit: type=1326 audit(97.380:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.393" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffab38e81c code=0x7ffc0000 [ 97.413782][ T27] audit: type=1326 audit(97.380:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.393" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa5792a8 code=0x7ffc0000 [ 97.420074][ T27] audit: type=1326 audit(97.380:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.393" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa5792a8 code=0x7ffc0000 [ 97.424948][ T27] audit: type=1326 audit(97.390:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.393" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffaa572d4c code=0x7ffc0000 [ 97.429546][ T27] audit: type=1326 audit(97.390:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.393" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffab38e81c code=0x7ffc0000 [ 97.439186][ T27] audit: type=1326 audit(97.390:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.393" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffaa572d4c code=0x7ffc0000 [ 97.449861][ T27] audit: type=1326 audit(97.390:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.4.393" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffab38e81c code=0x7ffc0000 [ 107.946087][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.948424][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.949755][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.953075][ T5629] device bridge_slave_0 left promiscuous mode [ 107.954792][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.003452][ T5629] device bridge_slave_1 left promiscuous mode [ 108.004682][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.006698][ T5637] fuse: Invalid rootmode [ 108.034443][ T5629] bond0: (slave bond_slave_0): Releasing backup interface [ 108.076701][ T5629] bond0: (slave bond_slave_1): Releasing backup interface [ 108.147946][ T5629] team0: Port device team_slave_0 removed [ 108.157781][ T5629] team0: Port device team_slave_1 removed [ 108.159159][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.160490][ T5629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.163340][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.164626][ T5629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.209737][ T5652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.405'. [ 108.240970][ T5650] binder: 5649:5650 tried to acquire reference to desc 0, got 1 instead [ 108.249135][ T5650] binder: 5649:5650 got transaction with invalid fd, 536871744 [ 108.253211][ T5650] binder: 5650:5649 translate fd failed [ 108.254375][ T5650] binder: 5649:5650 transaction async to 5649:0 failed 5/29201/-9, size 88-24 line 3432 [ 108.260955][ T5599] binder: undelivered TRANSACTION_ERROR: 29201 [ 108.382363][ T5662] device syzkaller0 entered promiscuous mode [ 108.570497][ T5672] loop2: detected capacity change from 0 to 32768 [ 108.587202][ T5672] JBD2: Ignoring recovery information on journal [ 108.598744][ T5672] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 108.838335][ T4337] ocfs2: Unmounting device (7,2) on (node local) [ 119.326959][ T5714] loop2: detected capacity change from 0 to 1024 [ 119.411305][ T5714] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 119.466810][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 119.523367][ T5739] FAULT_INJECTION: forcing a failure. [ 119.523367][ T5739] name failslab, interval 1, probability 0, space 0, times 0 [ 119.525751][ T5739] CPU: 0 PID: 5739 Comm: syz.2.434 Not tainted syzkaller #0 [ 119.526960][ T5739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 119.528787][ T5739] Call trace: [ 119.529405][ T5739] dump_backtrace+0x1c4/0x1f0 [ 119.530291][ T5739] show_stack+0x2c/0x3c [ 119.531054][ T5739] __dump_stack+0x30/0x40 [ 119.531896][ T5739] dump_stack_lvl+0xf4/0x15c [ 119.532061][ T5734] md: pers->run() failed ... [ 119.532875][ T5739] dump_stack+0x1c/0x5c [ 119.534691][ T5739] should_fail_ex+0x3cc/0x524 [ 119.535676][ T5739] __should_failslab+0xc0/0x11c [ 119.536630][ T5739] should_failslab+0x10/0x28 [ 119.537530][ T5739] __kmem_cache_alloc_node+0x7c/0x318 [ 119.538541][ T5739] kmalloc_trace+0x48/0x94 [ 119.539364][ T5739] tipc_topsrv_queue_evt+0xe8/0x258 [ 119.540343][ T5739] tipc_sub_send_event+0x2f0/0x668 [ 119.541339][ T5739] tipc_sub_report_overlap+0x1a0/0x284 [ 119.542430][ T5739] tipc_nametbl_insert_publ+0xadc/0xf10 [ 119.543486][ T5739] tipc_nametbl_publish+0xc0/0x1e4 [ 119.544409][ T5739] tipc_sk_publish+0x17c/0x384 [ 119.545301][ T5739] tipc_sk_join+0x2d4/0x508 [ 119.546175][ T5739] tipc_setsockopt+0x3b8/0x7a8 [ 119.547095][ T5739] __sys_setsockopt+0x2fc/0x50c [ 119.547980][ T5739] __arm64_sys_setsockopt+0xc0/0xdc [ 119.548924][ T5739] invoke_syscall+0x98/0x290 [ 119.549757][ T5739] el0_svc_common+0x13c/0x258 [ 119.550689][ T5739] do_el0_svc+0x5c/0x134 [ 119.551486][ T5739] el0_svc+0x58/0x128 [ 119.552223][ T5739] el0t_64_sync_handler+0x84/0xf0 [ 119.553134][ T5739] el0t_64_sync+0x18c/0x190 [ 119.617175][ T5745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.618803][ T5745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.627081][ T5744] loop2: detected capacity change from 0 to 2048 [ 119.634237][ T5744] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.661208][ C1] vcan0: j1939_tp_rxtimer: 0x00000000c4bc63a4: rx timeout, send abort [ 119.716403][ T5748] netlink: 'syz.2.436': attribute type 4 has an invalid length. [ 119.770438][ T5747] loop4: detected capacity change from 0 to 32768 [ 119.781580][ T5747] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.437 (5747) [ 119.796154][ T5747] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.799048][ T5747] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 119.801049][ T5747] BTRFS info (device loop4): using free space tree [ 119.869928][ T5747] BTRFS info (device loop4): enabling ssd optimizations [ 120.161252][ C1] vcan0: j1939_tp_rxtimer: 0x00000000d948de6d: rx timeout, send abort [ 120.163722][ C1] vcan0: j1939_tp_rxtimer: 0x00000000c4bc63a4: abort rx timeout. Force session deactivation [ 120.176957][ T5769] device syzkaller0 entered promiscuous mode [ 120.587545][ T4329] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.648016][ C1] vcan0: j1939_tp_rxtimer: 0x00000000c6c8265a: rx timeout, send abort [ 120.649793][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000c6c8265a: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 120.663052][ C1] vcan0: j1939_tp_rxtimer: 0x00000000d948de6d: abort rx timeout. Force session deactivation [ 121.628283][ T5800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.630064][ T5800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.806805][ C0] vcan0: j1939_tp_rxtimer: 0x00000000749db840: rx timeout, send abort [ 121.808579][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000003ce59018: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 122.308415][ C0] vcan0: j1939_tp_rxtimer: 0x00000000749db840: abort rx timeout. Force session deactivation [ 125.933131][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.934430][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.297067][ T5876] trusted_key: encrypted_key: hex blob is missing [ 131.321402][ C1] vcan0: j1939_tp_rxtimer: 0x0000000008a87320: rx timeout, send abort [ 131.404656][ T27] kauditd_printk_skb: 1859 callbacks suppressed [ 131.404666][ T27] audit: type=1326 audit(131.390:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.4.483" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa5792a8 code=0x7ffc0000 [ 131.415684][ T27] audit: type=1326 audit(131.400:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.4.483" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa5792a8 code=0x7ffc0000 [ 131.439686][ T27] audit: type=1326 audit(131.410:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.4.483" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffaa572d4c code=0x7ffc0000 [ 131.454530][ T27] audit: type=1326 audit(131.410:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.4.483" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffab38e81c code=0x7ffc0000 [ 131.460465][ T27] audit: type=1326 audit(131.410:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.4.483" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffaa572d4c code=0x7ffc0000 [ 131.480213][ T27] audit: type=1326 audit(131.410:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.4.483" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffab38e81c code=0x7ffc0000 [ 131.495022][ T27] audit: type=1326 audit(131.410:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.4.483" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffaa572d4c code=0x7ffc0000 [ 131.520261][ T27] audit: type=1326 audit(131.410:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.4.483" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffab38e81c code=0x7ffc0000 [ 131.532653][ T27] audit: type=1326 audit(131.410:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.4.483" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffaa572d4c code=0x7ffc0000 [ 131.535074][ T5891] loop0: detected capacity change from 0 to 4096 [ 131.542819][ T27] audit: type=1326 audit(131.420:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.4.483" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffab38e81c code=0x7ffc0000 [ 131.821438][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a103cd68: rx timeout, send abort [ 131.823087][ C1] vcan0: j1939_tp_rxtimer: 0x0000000008a87320: abort rx timeout. Force session deactivation [ 131.889227][ T5912] FAULT_INJECTION: forcing a failure. [ 131.889227][ T5912] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 131.891613][ T5912] CPU: 0 PID: 5912 Comm: syz.3.496 Not tainted syzkaller #0 [ 131.892829][ T5912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 131.894546][ T5912] Call trace: [ 131.895136][ T5912] dump_backtrace+0x1c4/0x1f0 [ 131.895968][ T5912] show_stack+0x2c/0x3c [ 131.896738][ T5912] __dump_stack+0x30/0x40 [ 131.897548][ T5912] dump_stack_lvl+0xf4/0x15c [ 131.898385][ T5912] dump_stack+0x1c/0x5c [ 131.899124][ T5912] should_fail_ex+0x3cc/0x524 [ 131.899931][ T5912] should_fail_alloc_page+0x74/0xb8 [ 131.900840][ T5912] prepare_alloc_pages+0x1b8/0x4f0 [ 131.901748][ T5912] __alloc_pages+0x134/0x544 [ 131.902594][ T5912] __folio_alloc+0x1c/0x44 [ 131.903357][ T5912] vma_alloc_folio+0x37c/0x8ac [ 131.904190][ T5912] shmem_alloc_and_acct_folio+0x3bc/0x948 [ 131.905220][ T5912] shmem_get_folio_gfp+0xedc/0x2038 [ 131.906131][ T5912] shmem_fault+0x170/0x564 [ 131.906895][ T5912] __do_fault+0x11c/0x3d8 [ 131.907701][ T5912] handle_mm_fault+0x1d04/0x3018 [ 131.908595][ T5912] do_page_fault+0x310/0x99c [ 131.909412][ T5912] do_translation_fault+0x94/0xc8 [ 131.910316][ T5912] do_mem_abort+0x70/0x198 [ 131.911115][ T5912] el1_abort+0x3c/0x5c [ 131.911875][ T5912] el1h_64_sync_handler+0x50/0xac [ 131.912793][ T5912] el1h_64_sync+0x64/0x68 [ 131.913574][ T5912] strncpy_from_user+0x264/0x59c [ 131.914466][ T5912] getname_flags+0xec/0x458 [ 131.915288][ T5912] __arm64_sys_mkdirat+0x80/0xa8 [ 131.916172][ T5912] invoke_syscall+0x98/0x290 [ 131.917014][ T5912] el0_svc_common+0x13c/0x258 [ 131.917870][ T5912] do_el0_svc+0x5c/0x134 [ 131.918657][ T5912] el0_svc+0x58/0x128 [ 131.919394][ T5912] el0t_64_sync_handler+0x84/0xf0 [ 131.920363][ T5912] el0t_64_sync+0x18c/0x190 [ 132.034996][ T5906] loop0: detected capacity change from 0 to 32768 [ 132.038490][ T5906] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.493 (5906) [ 132.046223][ T5906] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.049470][ T5906] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 132.051071][ T5906] BTRFS info (device loop0): disabling tree log [ 132.052600][ T5906] BTRFS info (device loop0): using free space tree [ 132.121560][ T5906] BTRFS info (device loop0): enabling ssd optimizations [ 132.178212][ T4729] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 132.214537][ T4334] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.320853][ T5957] loop0: detected capacity change from 0 to 16 [ 132.322996][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a103cd68: abort rx timeout. Force session deactivation [ 132.327829][ T5957] erofs: (device loop0): mounted with root inode @ nid 36. [ 132.691059][ T5957] syz.0.502 (5957): drop_caches: 2 [ 132.787981][ T5962] FAULT_INJECTION: forcing a failure. [ 132.787981][ T5962] name failslab, interval 1, probability 0, space 0, times 0 [ 132.791003][ T5962] CPU: 0 PID: 5962 Comm: syz.0.506 Not tainted syzkaller #0 [ 132.792259][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 132.794070][ T5962] Call trace: [ 132.794699][ T5962] dump_backtrace+0x1c4/0x1f0 [ 132.795580][ T5962] show_stack+0x2c/0x3c [ 132.796314][ T5962] __dump_stack+0x30/0x40 [ 132.797087][ T5962] dump_stack_lvl+0xf4/0x15c [ 132.797885][ T5962] dump_stack+0x1c/0x5c [ 132.798641][ T5962] should_fail_ex+0x3cc/0x524 [ 132.799483][ T5962] __should_failslab+0xc0/0x11c [ 132.800386][ T5962] should_failslab+0x10/0x28 [ 132.801261][ T5962] kmem_cache_alloc+0x88/0x310 [ 132.802150][ T5962] security_inode_alloc+0x38/0x11c [ 132.803110][ T5962] inode_init_always+0x6c8/0xb28 [ 132.804044][ T5962] new_inode_pseudo+0x7c/0x1cc [ 132.804885][ T5962] __sock_create+0x138/0x8a8 [ 132.805707][ T5962] sock_create_kern+0x4c/0x64 [ 132.806538][ T5962] start_sync_thread+0xa48/0x2150 [ 132.807435][ T5962] do_ip_vs_set_ctl+0x4a8/0xab0 [ 132.808275][ T5962] nf_setsockopt+0x260/0x280 [ 132.809117][ T5962] ip_setsockopt+0x124/0x134 [ 132.809985][ T5962] tcp_setsockopt+0xcc/0xe8 [ 132.810821][ T5962] sock_common_setsockopt+0xb0/0xcc [ 132.811804][ T5962] smc_setsockopt+0x1e0/0xb64 [ 132.812651][ T5962] __sys_setsockopt+0x2fc/0x50c [ 132.813691][ T5962] __arm64_sys_setsockopt+0xc0/0xdc [ 132.814800][ T5962] invoke_syscall+0x98/0x290 [ 132.815791][ T5962] el0_svc_common+0x13c/0x258 [ 132.816685][ T5962] do_el0_svc+0x5c/0x134 [ 132.817482][ T5962] el0_svc+0x58/0x128 [ 132.818247][ T5962] el0t_64_sync_handler+0x84/0xf0 [ 132.819168][ T5962] el0t_64_sync+0x18c/0x190 [ 132.821166][ T5962] socket: no more sockets [ 132.822055][ T5962] IPVS: Error during creation of socket; terminating [ 133.265951][ C0] vcan0: j1939_tp_rxtimer: 0x000000009c75c747: rx timeout, send abort [ 133.267523][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000a189b2db: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 133.366142][ T5980] FAULT_INJECTION: forcing a failure. [ 133.366142][ T5980] name failslab, interval 1, probability 0, space 0, times 0 [ 133.368440][ T5980] CPU: 1 PID: 5980 Comm: syz.4.513 Not tainted syzkaller #0 [ 133.369558][ T5980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 133.371336][ T5980] Call trace: [ 133.371940][ T5980] dump_backtrace+0x1c4/0x1f0 [ 133.372802][ T5980] show_stack+0x2c/0x3c [ 133.373554][ T5980] __dump_stack+0x30/0x40 [ 133.374314][ T5980] dump_stack_lvl+0xf4/0x15c [ 133.375143][ T5980] dump_stack+0x1c/0x5c [ 133.375872][ T5980] should_fail_ex+0x3cc/0x524 [ 133.376674][ T5980] __should_failslab+0xc0/0x11c [ 133.377564][ T5980] should_failslab+0x10/0x28 [ 133.378393][ T5980] kmem_cache_alloc_node+0x8c/0x344 [ 133.379325][ T5980] __alloc_skb+0x128/0x728 [ 133.380117][ T5980] tipc_buf_acquire+0x34/0xe8 [ 133.380962][ T5980] tipc_named_publish+0x1fc/0x638 [ 133.381868][ T5980] tipc_nametbl_publish+0xe8/0x1e4 [ 133.382793][ T5980] tipc_sk_publish+0x17c/0x384 [ 133.383614][ T5980] tipc_sk_join+0x2d4/0x508 [ 133.384391][ T5980] tipc_setsockopt+0x3b8/0x7a8 [ 133.385248][ T5980] __sys_setsockopt+0x2fc/0x50c [ 133.386115][ T5980] __arm64_sys_setsockopt+0xc0/0xdc [ 133.387094][ T5980] invoke_syscall+0x98/0x290 [ 133.387926][ T5980] el0_svc_common+0x13c/0x258 [ 133.388762][ T5980] do_el0_svc+0x5c/0x134 [ 133.389543][ T5980] el0_svc+0x58/0x128 [ 133.390253][ T5980] el0t_64_sync_handler+0x84/0xf0 [ 133.391167][ T5980] el0t_64_sync+0x18c/0x190 [ 133.392053][ T5980] tipc: Publication distribution failure [ 133.767451][ C0] vcan0: j1939_tp_rxtimer: 0x000000009c75c747: abort rx timeout. Force session deactivation [ 133.805558][ T5986] FAULT_INJECTION: forcing a failure. [ 133.805558][ T5986] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 133.807989][ T5986] CPU: 0 PID: 5986 Comm: syz.2.515 Not tainted syzkaller #0 [ 133.809234][ T5986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 133.811080][ T5986] Call trace: [ 133.811720][ T5986] dump_backtrace+0x1c4/0x1f0 [ 133.812650][ T5986] show_stack+0x2c/0x3c [ 133.813453][ T5986] __dump_stack+0x30/0x40 [ 133.814246][ T5986] dump_stack_lvl+0xf4/0x15c [ 133.815100][ T5986] dump_stack+0x1c/0x5c [ 133.815901][ T5986] should_fail_ex+0x3cc/0x524 [ 133.816685][ T5986] should_fail_alloc_page+0x74/0xb8 [ 133.817663][ T5986] prepare_alloc_pages+0x1b8/0x4f0 [ 133.818609][ T5986] __alloc_pages+0x134/0x544 [ 133.819470][ T5986] __folio_alloc+0x1c/0x44 [ 133.820294][ T5986] vma_alloc_folio+0x37c/0x8ac [ 133.821119][ T5986] alloc_zeroed_user_highpage_movable+0x78/0x8c [ 133.822265][ T5986] handle_mm_fault+0x1788/0x3018 [ 133.823161][ T5986] do_page_fault+0x310/0x99c [ 133.824013][ T5986] do_translation_fault+0x94/0xc8 [ 133.824910][ T5986] do_mem_abort+0x70/0x198 [ 133.825727][ T5986] el0_da+0x70/0x144 [ 133.826445][ T5986] el0t_64_sync_handler+0x90/0xf0 [ 133.827313][ T5986] el0t_64_sync+0x18c/0x190 [ 133.831400][ T5986] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 133.835571][ T5986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.838022][ T5986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.018986][ T5918] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.073726][ T5994] FAULT_INJECTION: forcing a failure. [ 135.073726][ T5994] name fail_futex, interval 1, probability 0, space 0, times 0 [ 135.076005][ T5994] CPU: 1 PID: 5994 Comm: syz.0.519 Not tainted syzkaller #0 [ 135.077314][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 135.079184][ T5994] Call trace: [ 135.079899][ T5994] dump_backtrace+0x1c4/0x1f0 [ 135.080837][ T5994] show_stack+0x2c/0x3c [ 135.081647][ T5994] __dump_stack+0x30/0x40 [ 135.082447][ T5994] dump_stack_lvl+0xf4/0x15c [ 135.083269][ T5994] dump_stack+0x1c/0x5c [ 135.084028][ T5994] should_fail_ex+0x3cc/0x524 [ 135.084939][ T5994] should_fail+0x14/0x24 [ 135.085691][ T5994] get_futex_key+0x904/0xfb0 [ 135.086511][ T5994] futex_wake_op+0x138/0xc28 [ 135.087333][ T5994] do_futex+0x1a0/0x340 [ 135.088032][ T5994] __arm64_sys_futex+0x390/0x414 [ 135.088947][ T5994] invoke_syscall+0x98/0x290 [ 135.089804][ T5994] el0_svc_common+0x13c/0x258 [ 135.090019][ T5998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.090686][ T5994] do_el0_svc+0x5c/0x134 [ 135.093016][ T5994] el0_svc+0x58/0x128 [ 135.093704][ T5994] el0t_64_sync_handler+0x84/0xf0 [ 135.094607][ T5994] el0t_64_sync+0x18c/0x190 [ 135.099996][ T5998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.210030][ T5999] loop4: detected capacity change from 0 to 32768 [ 135.240318][ T5999] XFS (loop4): Mounting V5 Filesystem [ 135.289694][ T5999] XFS (loop4): Ending clean mount [ 135.294829][ T5999] XFS (loop4): Quotacheck needed: Please wait. [ 135.326313][ T5999] XFS (loop4): Quotacheck: Done. [ 135.344555][ C0] vcan0: j1939_tp_rxtimer: 0x000000008a636201: rx timeout, send abort [ 135.424529][ T4329] XFS (loop4): Unmounting Filesystem [ 135.498372][ T6029] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 135.653083][ T6035] md: pers->run() failed ... [ 135.844597][ C0] vcan0: j1939_tp_rxtimer: 0x000000009734be55: rx timeout, send abort [ 135.845106][ T6056] device vlan2 entered promiscuous mode [ 135.846214][ C0] vcan0: j1939_tp_rxtimer: 0x000000008a636201: abort rx timeout. Force session deactivation [ 135.923245][ T6052] loop1: detected capacity change from 0 to 32768 [ 135.946039][ T6052] JBD2: Ignoring recovery information on journal [ 135.975125][ T6056] loop4: detected capacity change from 0 to 32768 [ 135.981618][ T6052] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 135.985017][ T6056] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 135.997572][ T6056] JBD2: Ignoring recovery information on journal [ 136.008062][ T6056] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 136.011703][ T6056] JBD2: bad block at offset 32 [ 136.025887][ T6056] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 136.033219][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.539'. [ 136.041615][ T6056] device hsr_slave_0 left promiscuous mode [ 136.064515][ T4328] ocfs2: Unmounting device (7,1) on (node local) [ 136.119220][ T6062] binder: 6061:6062 tried to acquire reference to desc 0, got 1 instead [ 136.121550][ T6062] binder: 6061:6062 got transaction with invalid parent offset or type [ 136.123702][ T6062] binder: 6062:6061 failed to fixup parent [ 136.125558][ T6062] binder: 6061:6062 transaction call to 6061:0 failed 10/29201/-22, size 104-24 line 3557 [ 136.127769][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.245295][ T6067] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 136.287702][ T6071] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 136.339068][ C0] vcan0: j1939_tp_rxtimer: 0x00000000667bc725: rx timeout, send abort [ 136.340665][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000667bc725: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 136.346191][ C0] vcan0: j1939_tp_rxtimer: 0x000000009734be55: abort rx timeout. Force session deactivation [ 136.368618][ T6075] md: pers->run() failed ... [ 136.438283][ T6083] netlink: 444 bytes leftover after parsing attributes in process `syz.1.549'. [ 136.495648][ T6087] loop1: detected capacity change from 0 to 4096 [ 136.633522][ T6101] siw: device registration error -23 [ 136.658079][ C1] vcan0: j1939_tp_rxtimer: 0x00000000aad0624d: rx timeout, send abort [ 136.659908][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000cd9c5108: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 136.665227][ T6103] md: pers->run() failed ... [ 136.834247][ T4329] ocfs2: Unmounting device (7,4) on (node local) [ 137.029588][ T6132] loop4: detected capacity change from 0 to 4096 [ 137.159830][ C1] vcan0: j1939_tp_rxtimer: 0x00000000aad0624d: abort rx timeout. Force session deactivation [ 137.281818][ T6115] loop3: detected capacity change from 0 to 131072 [ 137.289661][ T6115] F2FS-fs (loop3): Test dummy encryption mode enabled [ 137.296182][ T6115] F2FS-fs (loop3): invalid crc value [ 137.299605][ T6115] F2FS-fs (loop3): Found nat_bits in checkpoint [ 137.308336][ T6115] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 137.319296][ T6115] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 137.322390][ T6115] F2FS-fs (loop3): Start checkpoint disabled! [ 137.359349][ T6115] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 137.365470][ T6115] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 137.374853][ T6115] overlayfs: failed to resolve './bus': -2 [ 137.401111][ T5198] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 137.698857][ T6149] md: pers->run() failed ... [ 137.796492][ T6161] FAULT_INJECTION: forcing a failure. [ 137.796492][ T6161] name failslab, interval 1, probability 0, space 0, times 0 [ 137.801371][ T6161] CPU: 1 PID: 6161 Comm: syz.3.575 Not tainted syzkaller #0 [ 137.802614][ T6161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 137.804508][ T6161] Call trace: [ 137.805106][ T6161] dump_backtrace+0x1c4/0x1f0 [ 137.805950][ T6161] show_stack+0x2c/0x3c [ 137.806714][ T6161] __dump_stack+0x30/0x40 [ 137.807453][ T6161] dump_stack_lvl+0xf4/0x15c [ 137.808270][ T6161] dump_stack+0x1c/0x5c [ 137.808992][ T6161] should_fail_ex+0x3cc/0x524 [ 137.809830][ T6161] __should_failslab+0xc0/0x11c [ 137.810705][ T6161] should_failslab+0x10/0x28 [ 137.811542][ T6161] __kmem_cache_alloc_node+0x7c/0x318 [ 137.812536][ T6161] __kmalloc+0xc4/0x180 [ 137.813295][ T6161] memcg_list_lru_alloc+0x190/0x8bc [ 137.814209][ T6161] slab_pre_alloc_hook+0x2cc/0x31c [ 137.815085][ T6161] kmem_cache_alloc_lru+0x60/0x284 [ 137.815987][ T6161] proc_alloc_inode+0x2c/0xb8 [ 137.816794][ T6161] new_inode_pseudo+0x68/0x1cc [ 137.817624][ T6161] new_inode+0x38/0x174 [ 137.818380][ T6161] proc_get_inode+0x30/0x624 [ 137.819221][ T6161] proc_fill_super+0x40c/0x6ac [ 137.820113][ T6161] get_tree_nodev+0xb4/0x16c [ 137.820937][ T6161] proc_get_tree+0x28/0x38 [ 137.821716][ T6161] vfs_get_tree+0x90/0x278 [ 137.822520][ T6161] do_new_mount+0x228/0x804 [ 137.823344][ T6161] path_mount+0x5ac/0xe6c [ 137.824203][ T6161] __arm64_sys_mount+0x4a0/0x5a0 [ 137.825107][ T6161] invoke_syscall+0x98/0x290 [ 137.825972][ T6161] el0_svc_common+0x13c/0x258 [ 137.826827][ T6161] do_el0_svc+0x5c/0x134 [ 137.827639][ T6161] el0_svc+0x58/0x128 [ 137.828381][ T6161] el0t_64_sync_handler+0x84/0xf0 [ 137.829317][ T6161] el0t_64_sync+0x18c/0x190 [ 137.866840][ T6161] proc_fill_super: get root inode failed [ 137.873829][ C1] vcan0: j1939_tp_rxtimer: 0x00000000722ebb74: rx timeout, send abort [ 137.877433][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000722ebb74: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 138.067212][ T6182] md: pers->run() failed ... [ 138.114819][ T6186] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 138.117377][ T6186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.118691][ T6186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.120718][ T6186] device bridge_slave_0 left promiscuous mode [ 138.126682][ T6186] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.157026][ T6186] device bridge_slave_1 left promiscuous mode [ 138.158201][ T6186] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.204350][ T6186] bond0: (slave bond_slave_0): Releasing backup interface [ 138.227286][ T6186] bond0: (slave bond_slave_1): Releasing backup interface [ 138.265641][ T6183] loop1: detected capacity change from 0 to 65536 [ 138.293550][ T6186] team0: Port device team_slave_0 removed [ 138.315920][ T6186] team0: Port device team_slave_1 removed [ 138.318628][ T6186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.323655][ T4381] XFS (loop1): invalid stripe width (524288) and stripe unit of 0 [ 138.325578][ T4381] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x318/0x410, xfs_sb block 0x0 [ 138.327603][ T4381] XFS (loop1): Unmount and run xfs_repair [ 138.328689][ T4381] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 138.331258][ T6186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.333851][ T4381] 00000000: 58 46 53 42 00 00 08 00 00 00 00 00 00 00 40 00 XFSB..........@. [ 138.336697][ T4381] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 138.340532][ T4381] 00000020: ac fe bf cd 08 06 4e 27 97 77 0a c4 ff 5d df 54 ......N'.w...].T [ 138.343593][ T4381] 00000030: 00 00 00 00 00 00 20 04 00 00 00 00 00 00 00 10 ...... ......... [ 138.346335][ T4381] 00000040: 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 12 ................ [ 138.357221][ T4381] 00000050: 00 00 00 02 00 00 20 00 00 00 00 02 00 00 00 00 ...... ......... [ 138.359958][ T4381] 00000060: 00 00 02 f4 b4 b4 02 00 04 00 00 02 00 00 00 00 ................ [ 138.365130][ T4381] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 05 ................ [ 138.369153][ T6183] XFS (loop1): SB validate failed with error -117. [ 138.381252][ T6186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.384064][ T6186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.634269][ T6217] md: pers->run() failed ... [ 138.720942][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 138.724438][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 138.795372][ T6221] loop1: detected capacity change from 0 to 32768 [ 138.809840][ T6221] JBD2: Ignoring recovery information on journal [ 138.845459][ T6221] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 139.195451][ T6253] gadgetfs: bound to dummy_udc driver [ 139.225330][ C1] vcan0: j1939_tp_rxtimer: 0x00000000ad224391: rx timeout, send abort [ 139.227004][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000003aab5ba7: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 139.254891][ T6253] Could not create tracefs 'enable' entry [ 139.384852][ T6264] loop3: detected capacity change from 0 to 4096 [ 139.473169][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.620'. [ 139.555209][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.557182][ T6266] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.656249][ C0] vcan0: j1939_tp_rxtimer: 0x00000000626220ef: rx timeout, send abort [ 139.658712][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000626220ef: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 139.726936][ C1] vcan0: j1939_tp_rxtimer: 0x00000000ad224391: abort rx timeout. Force session deactivation [ 139.792222][ T4328] ocfs2: Unmounting device (7,1) on (node local) [ 140.012687][ T6266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.040031][ T6266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.348650][ T6266] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.350461][ T6266] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.355009][ T6266] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.356776][ T6266] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.476380][ T6297] loop1: detected capacity change from 0 to 131072 [ 140.485995][ T6297] F2FS-fs (loop1): Test dummy encryption mode enabled [ 140.491364][ T6297] F2FS-fs (loop1): invalid crc value [ 140.497021][ T6297] F2FS-fs (loop1): Found nat_bits in checkpoint [ 140.508544][ T6297] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 140.515752][ T6297] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 140.519606][ T6297] F2FS-fs (loop1): Start checkpoint disabled! [ 140.535916][ T6297] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 140.548282][ T6297] overlayfs: workdir and upperdir must be separate subtrees [ 140.569625][ T5199] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 140.671229][ T6271] device syzkaller0 entered promiscuous mode [ 141.007051][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.018357][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.039448][ T6343] loop0: detected capacity change from 0 to 4096 [ 141.053001][ T6344] device bridge_slave_0 left promiscuous mode [ 141.054277][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.074775][ T6350] loop2: detected capacity change from 0 to 4096 [ 141.124710][ T6357] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.135266][ T6344] device bridge_slave_1 left promiscuous mode [ 141.137471][ T6344] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.138058][ T6350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.183757][ T6344] bond0: (slave bond_slave_0): Releasing backup interface [ 141.232849][ T6344] bond0: (slave bond_slave_1): Releasing backup interface [ 141.289453][ T6344] team0: Port device team_slave_0 removed [ 141.307530][ T6344] team0: Port device team_slave_1 removed [ 141.311175][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.313834][ T6344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.316674][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.318290][ T6344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.717562][ T6403] loop1: detected capacity change from 0 to 512 [ 141.727295][ T6403] EXT4-fs (loop1): Invalid log block size: 4294967295 [ 141.769199][ T6349] loop3: detected capacity change from 0 to 131072 [ 141.778323][ T6349] F2FS-fs (loop3): Test dummy encryption mode enabled [ 141.780194][ T6349] F2FS-fs (loop3): invalid crc value [ 141.786835][ T6349] F2FS-fs (loop3): Found nat_bits in checkpoint [ 141.795302][ T6349] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 141.798283][ T6349] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 141.801172][ T6349] F2FS-fs (loop3): Start checkpoint disabled! [ 141.806189][ T6349] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 141.812816][ T6349] overlayfs: workdir and upperdir must be separate subtrees [ 141.850265][ T4377] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 142.203943][ T6442] socket: no more sockets [ 142.231260][ T6449] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 142.391837][ T6466] FAULT_INJECTION: forcing a failure. [ 142.391837][ T6466] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 142.399221][ T6466] CPU: 0 PID: 6466 Comm: syz.0.687 Not tainted syzkaller #0 [ 142.400569][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 142.402488][ T6466] Call trace: [ 142.403112][ T6466] dump_backtrace+0x1c4/0x1f0 [ 142.404015][ T6466] show_stack+0x2c/0x3c [ 142.404782][ T6466] __dump_stack+0x30/0x40 [ 142.405638][ T6466] dump_stack_lvl+0xf4/0x15c [ 142.406484][ T6466] dump_stack+0x1c/0x5c [ 142.407216][ T6466] should_fail_ex+0x3cc/0x524 [ 142.408056][ T6466] should_fail_alloc_page+0x74/0xb8 [ 142.409001][ T6466] prepare_alloc_pages+0x1b8/0x4f0 [ 142.409908][ T6466] __alloc_pages+0x134/0x544 [ 142.410729][ T6466] alloc_pages+0x434/0x6fc [ 142.411546][ T6466] kimage_alloc_pages+0xa8/0x334 [ 142.412441][ T6466] kimage_alloc_page+0xc4/0x71c [ 142.413322][ T6466] kimage_load_segment+0x730/0xd1c [ 142.414283][ T6466] do_kexec_load+0x48c/0x6c8 [ 142.415124][ T6466] __arm64_sys_kexec_load+0x1dc/0x224 [ 142.416104][ T6466] invoke_syscall+0x98/0x290 [ 142.416972][ T6466] el0_svc_common+0x13c/0x258 [ 142.417854][ T6466] do_el0_svc+0x5c/0x134 [ 142.418628][ T6466] el0_svc+0x58/0x128 [ 142.419333][ T6466] el0t_64_sync_handler+0x84/0xf0 [ 142.420271][ T6466] el0t_64_sync+0x18c/0x190 [ 142.473010][ T6471] loop4: detected capacity change from 0 to 2048 [ 142.519802][ T6479] device syzkaller0 entered promiscuous mode [ 142.520241][ T6471] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 142.567156][ T6453] loop2: detected capacity change from 0 to 32768 [ 142.581410][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 142.602556][ T6453] XFS (loop2): Mounting V5 Filesystem [ 142.655907][ T6453] XFS (loop2): Ending clean mount [ 142.690191][ T6453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.695319][ T6453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.697527][ T6496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.707076][ T6496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.716512][ T6500] binder: 6497:6500 tried to acquire reference to desc 0, got 1 instead [ 142.718765][ T6500] binder: 6497:6500 got transaction with invalid offset (72, min 24 max 88) or object. [ 142.720500][ T6500] binder: 6497:6500 transaction async to 6497:0 failed 15/29201/-22, size 88-24 line 3363 [ 142.723126][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 142.737900][ T6496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.285519][ T4337] XFS (loop2): Unmounting Filesystem [ 144.159993][ T6636] loop1: detected capacity change from 0 to 4096 [ 144.707528][ C1] vcan0: j1939_tp_rxtimer: 0x00000000b313a212: rx timeout, send abort [ 144.709403][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000b313a212: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 145.415343][ T6658] loop1: detected capacity change from 0 to 4096 [ 145.526432][ T6672] FAULT_INJECTION: forcing a failure. [ 145.526432][ T6672] name failslab, interval 1, probability 0, space 0, times 0 [ 145.528629][ T6672] CPU: 0 PID: 6672 Comm: syz.1.770 Not tainted syzkaller #0 [ 145.529871][ T6672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 145.531699][ T6672] Call trace: [ 145.532302][ T6672] dump_backtrace+0x1c4/0x1f0 [ 145.533169][ T6672] show_stack+0x2c/0x3c [ 145.533945][ T6672] __dump_stack+0x30/0x40 [ 145.534683][ T6672] dump_stack_lvl+0xf4/0x15c [ 145.535506][ T6672] dump_stack+0x1c/0x5c [ 145.536309][ T6672] should_fail_ex+0x3cc/0x524 [ 145.537165][ T6672] __should_failslab+0xc0/0x11c [ 145.538049][ T6672] should_failslab+0x10/0x28 [ 145.538930][ T6672] kmem_cache_alloc_node+0x8c/0x344 [ 145.539958][ T6672] __alloc_skb+0x128/0x728 [ 145.540855][ T6672] tipc_buf_acquire+0x34/0xe8 [ 145.541807][ T6672] tipc_named_publish+0x1fc/0x638 [ 145.542768][ T6672] tipc_nametbl_publish+0xe8/0x1e4 [ 145.543735][ T6672] tipc_sk_publish+0x17c/0x384 [ 145.544638][ T6672] tipc_sk_join+0x2d4/0x508 [ 145.545499][ T6672] tipc_setsockopt+0x3b8/0x7a8 [ 145.546343][ T6672] __sys_setsockopt+0x2fc/0x50c [ 145.547390][ T6672] __arm64_sys_setsockopt+0xc0/0xdc [ 145.548491][ T6672] invoke_syscall+0x98/0x290 [ 145.549347][ T6672] el0_svc_common+0x13c/0x258 [ 145.550209][ T6672] do_el0_svc+0x5c/0x134 [ 145.551023][ T6672] el0_svc+0x58/0x128 [ 145.551792][ T6672] el0t_64_sync_handler+0x84/0xf0 [ 145.552767][ T6672] el0t_64_sync+0x18c/0x190 [ 145.553806][ T6672] tipc: Publication distribution failure [ 146.616043][ T6697] loop4: detected capacity change from 0 to 4096 [ 146.697563][ C1] vcan0: j1939_tp_rxtimer: 0x0000000008c49dbf: rx timeout, send abort [ 146.699629][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000008c49dbf: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 147.900513][ T6747] loop0: detected capacity change from 0 to 4096 [ 147.970269][ T6751] netlink: 252 bytes leftover after parsing attributes in process `syz.4.800'. [ 148.275193][ C0] vcan0: j1939_tp_rxtimer: 0x000000000fc841a5: rx timeout, send abort [ 148.278839][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000000fc841a5: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 148.528690][ T6795] Bluetooth: MGMT ver 1.22 [ 149.312310][ T6793] loop0: detected capacity change from 0 to 32768 [ 149.635666][ T6793] XFS (loop0): Mounting V5 Filesystem [ 149.685578][ T6793] XFS (loop0): Ending clean mount [ 149.688325][ T6793] XFS (loop0): Quotacheck needed: Please wait. [ 149.740519][ T6793] XFS (loop0): Quotacheck: Done. [ 149.797505][ T4334] XFS (loop0): Unmounting Filesystem [ 150.999485][ C1] vcan0: j1939_tp_rxtimer: 0x00000000bdfce1e8: rx timeout, send abort [ 151.001141][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000bdfce1e8: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 151.060881][ T6868] loop1: detected capacity change from 0 to 32768 [ 151.063969][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. [ 151.080576][ T6875] loop2: detected capacity change from 0 to 256 [ 151.083655][ T6876] device syz_tun entered promiscuous mode [ 151.085213][ T6868] JBD2: Ignoring recovery information on journal [ 151.113717][ T6875] exfat: Deprecated parameter 'utf8' [ 151.122030][ T6875] exfat: Deprecated parameter 'namecase' [ 151.123143][ T6875] exfat: Unknown parameter 'zero_size_dir' [ 151.132890][ T6868] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 151.435727][ T4328] ocfs2: Unmounting device (7,1) on (node local) [ 152.559435][ T6932] netlink: 'syz.1.869': attribute type 10 has an invalid length. [ 152.574187][ T4345] Bluetooth: Wrong link type (-22) [ 152.640426][ T6932] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 152.681508][ C1] vcan0: j1939_tp_rxtimer: 0x0000000074501013: rx timeout, send abort [ 152.683351][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000074501013: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 153.115606][ T6953] capability: warning: `syz.4.877' uses deprecated v2 capabilities in a way that may be insecure [ 153.509457][ T6944] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.511558][ T6944] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.514087][ T6944] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.516050][ T6944] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.612147][ T4345] Bluetooth: hci2: command 0x0406 tx timeout [ 153.612924][ T4330] Bluetooth: hci4: command 0x0406 tx timeout [ 153.613474][ T4345] Bluetooth: hci1: command 0x0406 tx timeout [ 153.614491][ T4330] Bluetooth: hci3: command 0x0406 tx timeout [ 154.590354][ T6944] device syz_tun left promiscuous mode [ 154.628967][ T6977] device syzkaller0 entered promiscuous mode [ 154.766397][ T6994] loop2: detected capacity change from 0 to 2048 [ 154.814156][ T5863] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 154.818901][ T6994] loop2: detected capacity change from 0 to 64 [ 154.819155][ T5863] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 155.943046][ C1] vcan0: j1939_tp_rxtimer: 0x00000000302b9f32: rx timeout, send abort [ 155.944695][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000302b9f32: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 156.247174][ T7058] vhci_hcd: invalid port number 13 [ 156.248167][ T7058] vhci_hcd: default hub control req: 20e6 v0002 i000d l8 [ 156.282975][ T7062] ------------[ cut here ]------------ [ 156.284175][ T7062] WARNING: CPU: 0 PID: 7062 at security/landlock/fs.c:752 collect_domain_accesses+0x6c4/0x720 [ 156.286171][ T7062] Modules linked in: [ 156.286961][ T7062] CPU: 0 PID: 7062 Comm: syz.2.916 Not tainted syzkaller #0 [ 156.288399][ T7062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 156.290242][ T7062] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 156.291709][ T7062] pc : collect_domain_accesses+0x6c4/0x720 [ 156.292736][ T7062] lr : collect_domain_accesses+0x6c0/0x720 [ 156.293765][ T7062] sp : ffff800022e678d0 [ 156.294478][ T7062] x29: ffff800022e67920 x28: ffff0000cb583800 x27: 0000000000000001 [ 156.295903][ T7062] x26: ffff800022e67a1a x25: 0000000000000000 x24: ffff0000e1367be8 [ 156.297436][ T7062] x23: 0000000000002004 x22: 0000000000000001 x21: ffff0000e1367be8 [ 156.298897][ T7062] x20: 0000000000002004 x19: 0000000000000000 x18: 0000000000000000 [ 156.300382][ T7062] x17: 0000000000000000 x16: ffff800011ba0e90 x15: 0000000000000002 [ 156.301887][ T7062] x14: 0000000000000001 x13: 1ffff00002a74071 x12: 0000000000080000 [ 156.303364][ T7062] x11: 0000000000001354 x10: ffff800025c89000 x9 : ffff80000a61dca4 [ 156.304821][ T7062] x8 : 0000000000001355 x7 : ffff80000a619334 x6 : 0000000000000000 [ 156.306356][ T7062] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 156.307899][ T7062] x2 : 0000000000000008 x1 : ffff800011cfedc0 x0 : 0000000000000000 [ 156.309293][ T7062] Call trace: [ 156.309891][ T7062] collect_domain_accesses+0x6c4/0x720 [ 156.310852][ T7062] current_check_refer_path+0x408/0x804 [ 156.311869][ T7062] hook_path_rename+0x4c/0x60 [ 156.312727][ T7062] security_path_rename+0x154/0x1f0 [ 156.313621][ T7062] do_renameat2+0x5cc/0xaa4 [ 156.314440][ T7062] __arm64_sys_renameat2+0xe8/0x104 [ 156.315398][ T7062] invoke_syscall+0x98/0x290 [ 156.316246][ T7062] el0_svc_common+0x13c/0x258 [ 156.317135][ T7062] do_el0_svc+0x5c/0x134 [ 156.317946][ T7062] el0_svc+0x58/0x128 [ 156.318671][ T7062] el0t_64_sync_handler+0x84/0xf0 [ 156.319631][ T7062] el0t_64_sync+0x18c/0x190 [ 156.320473][ T7062] irq event stamp: 1198 [ 156.321217][ T7062] hardirqs last enabled at (1197): [] mod_objcg_state+0x32c/0x4f0 [ 156.322917][ T7062] hardirqs last disabled at (1198): [] el1_dbg+0x24/0x80 [ 156.324451][ T7062] softirqs last enabled at (1172): [] local_bh_enable+0x10/0x34 [ 156.326159][ T7062] softirqs last disabled at (1170): [] local_bh_disable+0x10/0x34 [ 156.327792][ T7062] ---[ end trace 0000000000000000 ]--- [ 156.543828][ C1] vcan0: j1939_tp_rxtimer: 0x00000000e3f5057c: rx timeout, send abort [ 157.043863][ C1] vcan0: j1939_tp_rxtimer: 0x00000000efd7202b: rx timeout, send abort [ 157.045531][ C1] vcan0: j1939_tp_rxtimer: 0x00000000e3f5057c: abort rx timeout. Force session deactivation [ 157.545497][ C1] vcan0: j1939_tp_rxtimer: 0x00000000efd7202b: abort rx timeout. Force session deactivation