last executing test programs: 15.156237686s ago: executing program 0 (id=282): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x18, 0x3a0, 0xe8, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4b8, 0x1}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x3, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x80a0000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xb, 0x6, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.582972883s ago: executing program 0 (id=287): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) close(0x3) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r3, 0xffffe000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r6, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000"], 0x30}, 0x4004000) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$sock_SIOCADDDLCI(r2, 0x8980, 0x0) ptrace$setopts(0x4206, r7, 0x200000, 0x1e) socket$inet6(0xa, 0x1, 0x0) syz_open_procfs(0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x3ff, @any, 0x7, 0x2}, 0xe) 12.3510377s ago: executing program 0 (id=288): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) unshare(0x24020400) syz_open_dev$MSR(0x0, 0x0, 0x0) getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000100)={0x7, 0x400, 0x8}) 11.409639569s ago: executing program 0 (id=291): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000000)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x103c41, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) 11.18983829s ago: executing program 0 (id=292): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1000, 0x16d3, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0x25000, 0x4000}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x24008080) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201510100000010da092b020000000000010902"], 0x0) 9.26036662s ago: executing program 1 (id=297): r0 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./config/file0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) write(0xffffffffffffffff, &(0x7f0000000680)='dummy_udc', 0x9) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000440)=""/223, 0xdf}], 0x3, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2800844, &(0x7f0000000800)={[{@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@dots}, {@fat=@flush}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@fat=@quiet}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7fffffff}}, {@nodots}, {@fat=@usefree}, {@fat=@check_normal}], [{@smackfshat={'smackfshat', 0x3d, 'flush'}}, {@uid_gt}, {@fowner_lt}]}, 0x1, 0x244, &(0x7f0000000580)="$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") r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000024c0)="e0", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000000000008400000006000000080700000000000018000000000000008400"], 0x30}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 9.221691089s ago: executing program 0 (id=298): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x9) sched_setaffinity(0x0, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x3, @remote}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000040)=0x114f60df193b2d99) 8.272760421s ago: executing program 32 (id=298): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x9) sched_setaffinity(0x0, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x3, @remote}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000040)=0x114f60df193b2d99) 7.832782683s ago: executing program 1 (id=303): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, 0x0) poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007) 6.30506423s ago: executing program 4 (id=308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000a80)={{r0}, "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"}) open$dir(&(0x7f0000000000)='./file0\x00', 0x224500, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 6.118833633s ago: executing program 3 (id=310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000006125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000022c0)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005) 5.900442394s ago: executing program 4 (id=312): r0 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./config/file0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) write(0xffffffffffffffff, &(0x7f0000000680)='dummy_udc', 0x9) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000440)=""/223, 0xdf}], 0x3, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2800844, &(0x7f0000000800)={[{@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@dots}, {@fat=@flush}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@fat=@quiet}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7fffffff}}, {@nodots}, {@fat=@usefree}, {@fat=@check_normal}], [{@smackfshat={'smackfshat', 0x3d, 'flush'}}, {@uid_gt}, {@fowner_lt}]}, 0x1, 0x244, &(0x7f0000000580)="$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") r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000024c0)="e0", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000000000008400000006000000080700000000000018000000000000008400"], 0x30}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 4.343877997s ago: executing program 4 (id=314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x6, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4894}, 0x2) 4.131940186s ago: executing program 2 (id=315): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000b8c9043d000000000000000000000000000000000000000008"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xfffffffffffffe3f}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x5000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.131171276s ago: executing program 3 (id=316): r0 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./config/file0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000440)=""/223, 0xdf}], 0x3, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2800844, &(0x7f0000000800)={[{@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@dots}, {@fat=@flush}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@fat=@quiet}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7fffffff}}, {@nodots}, {@fat=@usefree}, {@fat=@check_normal}], [{@smackfshat={'smackfshat', 0x3d, 'flush'}}, {@uid_gt}, {@fowner_lt}]}, 0x1, 0x244, &(0x7f0000000580)="$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") r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000024c0)="e0", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000000000008400000006000000080700000000000018000000000000008400"], 0x30}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 2.795474248s ago: executing program 4 (id=317): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000240)=ANY=[@ANYRES16=0x0], 0x1, 0x247, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) truncate(0x0, 0xc00) syz_open_dev$char_usb(0xc, 0xb4, 0x7) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x7, 0x7, 0x8, 0xffffffff, 0x2, 0x3, 0x0, 0x373, 0x40, 0x9d, 0xfffffff8, 0xf, 0x38, 0x1, 0x6, 0x80, 0xa9}, [{0x3, 0xffffffa3, 0x7fffffff, 0x7fffffffffffffff, 0x3, 0x81, 0x8, 0x1ff}], "", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x578) 2.794851668s ago: executing program 1 (id=318): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000080000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0xfc, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x4}, @fda={0x66646185, 0x9, 0x0, 0x1}, @fda={0x66646185, 0x4800000000000000, 0x1, 0x3b}}, &(0x7f0000000300)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2.766959174s ago: executing program 2 (id=319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2.666762828s ago: executing program 3 (id=320): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ef, 0x0, 0x0, 0xfffffdd0, 0x0, 0x0, 0x0}, 0x440}], 0x0, 0x0, 0x0}) 2.621055059s ago: executing program 1 (id=321): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000001c0)=0x2001) r2 = fcntl$dupfd(r1, 0x0, r1) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) read(r2, &(0x7f0000000380)=""/66, 0x42) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$snddsp(r2, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) 2.470972914s ago: executing program 3 (id=322): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x4b, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='devtmpfs\x00', 0x9, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.126815084s ago: executing program 2 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) stat(&(0x7f0000006c00)='./file0\x00', 0x0) 2.009786461s ago: executing program 3 (id=324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@generic={0x1, 0x6, "11b712", 0x0, 0x11, 0xff, @loopback, @mcast2}}}, 0xfdef) 1.908075325s ago: executing program 2 (id=325): writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0xea0ca325a9233329}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000010a00000204d2162e0008"], 0x1c) 1.603106726s ago: executing program 4 (id=326): r0 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./config/file0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000680)='dummy_udc', 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000440)=""/223, 0xdf}], 0x3, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2800844, &(0x7f0000000800)={[{@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@dots}, {@fat=@flush}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@fat=@quiet}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7fffffff}}, {@nodots}, {@fat=@usefree}, {@fat=@check_normal}], [{@smackfshat={'smackfshat', 0x3d, 'flush'}}, {@uid_gt}, {@fowner_lt}]}, 0x1, 0x244, &(0x7f0000000580)="$eJzs3bFqFEEYB/AvySW5pPFqsViwsQrqGxxygrggnGyhlQvRJhHh0qxW9xg+g4/kY6RKt2J2ycWNWsgmc+f+fnDMx/0Z+Ka5uWJm992DjyfHn84+1N+/xnicxShiGRcRk9iOnWhsteP2Zb0X1y0DANg083k5Td0DPdq68c1BRJS7EbF/Iyq+3VFXAAAAAAAAAAAA9Mz5fwAYHuf//3+LxbQ8bP+//cr5fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACCdi7q+V//lk7o/AKB/9n8AGB77PwAMj/0fAIbn9Zu3L6d5Pptn2TjifFkVVdGMTf78RT57nF2arGadV1Wx29b57EmTZ938sJ3/9Lf5Xjx62OQ/s2ev8k6+H8e3vXgAAAAAAAAAAAAAAAAAAABYE0fZlc79/p0mP/pT3lTXng/Qub8/ivujO1sGAAAAAAAAAAAAAAAAAAAAbLSzz19OytPT9wuF4qo4iH+YNY71aL7XIiYRa9BGgiL1LxMAAAAAAAAAAAAAAAAAAAzP6tJv6k4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIJ3V+/9vr0i9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAYfgQAAP//EzSOwA==") r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000024c0)="e0", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000000000008400000006000000080700000000000018000000000000008400"], 0x30}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 1.391802455s ago: executing program 3 (id=327): recvmsg(0xffffffffffffffff, 0x0, 0x40010100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r0, &(0x7f0000000100)=""/9, 0xfffffd87) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000340)={0x0, 0x7, 0x6, "62e47d56e2db"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x6}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0xffe) 306.049538ms ago: executing program 2 (id=328): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1242c4a, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1005418, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000340)='./file0\x00', 0x2) 217.674789ms ago: executing program 1 (id=329): sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x7, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x6, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 125.006181ms ago: executing program 4 (id=330): r0 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./config/file0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000680)='dummy_udc', 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000440)=""/223, 0xdf}], 0x3, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2800844, &(0x7f0000000800)={[{@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@dots}, {@fat=@flush}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@fat=@quiet}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7fffffff}}, {@nodots}, {@fat=@usefree}, {@fat=@check_normal}], [{@smackfshat={'smackfshat', 0x3d, 'flush'}}, {@uid_gt}, {@fowner_lt}]}, 0x1, 0x244, &(0x7f0000000580)="$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") r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000024c0)="e0", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000000000008400000006000000080700000000000018000000000000008400"], 0x30}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 65.097275ms ago: executing program 2 (id=331): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x81b30080a22e88ce) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002100)=""/171, 0xab, 0x9a) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r1, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r2, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)="d1c2", 0xfedc}, {&(0x7f0000000040)='`', 0x1}], 0x3) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) 0s ago: executing program 1 (id=332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 41.267240][ T3852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.277015][ T3852] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts. syzkaller login: [ 58.628542][ T4173] cgroup: Unknown subsys name 'net' [ 58.728243][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.241443][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.750066][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 61.799602][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 61.846018][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 61.856112][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 61.873639][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 61.931453][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.939365][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.947494][ T4186] device bridge_slave_0 entered promiscuous mode [ 61.979412][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.986667][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.995208][ T4186] device bridge_slave_1 entered promiscuous mode [ 62.062565][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.069669][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.078189][ T4194] device bridge_slave_0 entered promiscuous mode [ 62.087473][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.095249][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.103828][ T4194] device bridge_slave_1 entered promiscuous mode [ 62.118697][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.151259][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.186687][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.194092][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.201926][ T4188] device bridge_slave_0 entered promiscuous mode [ 62.216602][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.225869][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.233873][ T4193] device bridge_slave_0 entered promiscuous mode [ 62.243573][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.252806][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.260101][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.268699][ T4187] device bridge_slave_0 entered promiscuous mode [ 62.276561][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.284170][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.292117][ T4188] device bridge_slave_1 entered promiscuous mode [ 62.304769][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.312247][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.323462][ T4193] device bridge_slave_1 entered promiscuous mode [ 62.331943][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.341635][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.348802][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.356750][ T4187] device bridge_slave_1 entered promiscuous mode [ 62.379494][ T4186] team0: Port device team_slave_0 added [ 62.389063][ T4186] team0: Port device team_slave_1 added [ 62.434448][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.457329][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.469127][ T4194] team0: Port device team_slave_0 added [ 62.477333][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.488917][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.505836][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.513219][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.540256][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.553645][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.571259][ T4194] team0: Port device team_slave_1 added [ 62.579384][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.597141][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.604306][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.630640][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.667409][ T4188] team0: Port device team_slave_0 added [ 62.679513][ T4187] team0: Port device team_slave_0 added [ 62.686445][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.694011][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.720495][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.748139][ T4188] team0: Port device team_slave_1 added [ 62.761785][ T4187] team0: Port device team_slave_1 added [ 62.768528][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.776007][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.802362][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.815961][ T4193] team0: Port device team_slave_0 added [ 62.848788][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.856161][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.882424][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.895574][ T4193] team0: Port device team_slave_1 added [ 62.935804][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.943016][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.969434][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.981674][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.989036][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.015268][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.037151][ T4186] device hsr_slave_0 entered promiscuous mode [ 63.045082][ T4186] device hsr_slave_1 entered promiscuous mode [ 63.052221][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.059378][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.087820][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.103481][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.110473][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.137026][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.151296][ T4194] device hsr_slave_0 entered promiscuous mode [ 63.158742][ T4194] device hsr_slave_1 entered promiscuous mode [ 63.165929][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.173729][ T4194] Cannot create hsr debugfs directory [ 63.181257][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.188647][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.215711][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.279161][ T4188] device hsr_slave_0 entered promiscuous mode [ 63.286168][ T4188] device hsr_slave_1 entered promiscuous mode [ 63.293924][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.301849][ T4188] Cannot create hsr debugfs directory [ 63.369545][ T4193] device hsr_slave_0 entered promiscuous mode [ 63.376545][ T4193] device hsr_slave_1 entered promiscuous mode [ 63.383663][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.391782][ T4193] Cannot create hsr debugfs directory [ 63.417512][ T4187] device hsr_slave_0 entered promiscuous mode [ 63.424990][ T4187] device hsr_slave_1 entered promiscuous mode [ 63.432106][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.440123][ T4187] Cannot create hsr debugfs directory [ 63.453743][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 63.474398][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 63.481085][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 63.492988][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 63.499214][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 63.719768][ T4194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.732222][ T4194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.741512][ T4194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.751156][ T4194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.804799][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.830179][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.839753][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.857863][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.907375][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.918014][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.940834][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.975235][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.006382][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.017696][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.027758][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.041071][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.060216][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.092362][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.106083][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.119740][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.158426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.168256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.178494][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.185777][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.215569][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.225894][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.244184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.254689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.264803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.274107][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.281679][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.289774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.299059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.311250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.320885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.330324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.346907][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.358851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.368806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.388562][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.401389][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.436901][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.447952][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.457908][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.467483][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.487435][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.508673][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.531770][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.541285][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.579432][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.595738][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.607925][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.620243][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.635283][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.655171][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.669024][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.681733][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.710993][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.721730][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.738865][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.746109][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.758132][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.767524][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.776727][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.784134][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.792755][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.801421][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.810012][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.817130][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.825536][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.833954][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.843606][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.852415][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.861689][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.868831][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.890783][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.900720][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.913404][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.922365][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.929886][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.940185][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.949263][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.958891][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.967558][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.975237][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.992405][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.005071][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.015904][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.026763][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.038056][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.066332][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.075697][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.085221][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.094113][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.101727][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.113443][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.122350][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.136781][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.168565][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.179364][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.195687][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.206437][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.216708][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.226661][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.235778][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.245004][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.253804][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.262373][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.271159][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.280178][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.290353][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.299601][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.308553][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.318282][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.326639][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.335282][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.351181][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.362181][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.394026][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.403283][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.418436][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.431856][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.443838][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.459546][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.474405][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.486161][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.499396][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.514022][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.522045][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.534378][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.538812][ T4191] Bluetooth: hci2: command 0x041b tx timeout [ 65.544767][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.549370][ T4191] Bluetooth: hci0: command 0x041b tx timeout [ 65.557313][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.571515][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.580884][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.581847][ T4191] Bluetooth: hci3: command 0x041b tx timeout [ 65.596302][ T4191] Bluetooth: hci1: command 0x041b tx timeout [ 65.611974][ T4191] Bluetooth: hci4: command 0x041b tx timeout [ 65.643886][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.664413][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.674577][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.681679][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.707367][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.719954][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.731513][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.738685][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.746818][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.756095][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.766143][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.798273][ T4194] device veth0_vlan entered promiscuous mode [ 65.807464][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.818117][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.833866][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.841825][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.858428][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.870181][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.879271][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.888947][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.898678][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.908027][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.917604][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.930563][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.957756][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.966149][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.974944][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.984898][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.992495][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.009840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.020143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.040121][ T4194] device veth1_vlan entered promiscuous mode [ 66.069033][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.094955][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.111206][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.129082][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.180433][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.190542][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.244597][ T4194] device veth0_macvtap entered promiscuous mode [ 66.256327][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.270155][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.279291][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.288604][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.298853][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.319945][ T4188] device veth0_vlan entered promiscuous mode [ 66.331800][ T4194] device veth1_macvtap entered promiscuous mode [ 66.358943][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.370916][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.388333][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.398315][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.407022][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.416456][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.425781][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.433987][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.442479][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.456532][ T4188] device veth1_vlan entered promiscuous mode [ 66.478347][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.490253][ T4193] device veth0_vlan entered promiscuous mode [ 66.500520][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.510377][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.524371][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.532329][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.543362][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.555261][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.574723][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.588604][ T4193] device veth1_vlan entered promiscuous mode [ 66.605025][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.614246][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.622305][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.632114][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.644516][ T4194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.654138][ T4194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.663162][ T4194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.672284][ T4194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.719776][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.731994][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.741644][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.765916][ T4193] device veth0_macvtap entered promiscuous mode [ 66.790237][ T4188] device veth0_macvtap entered promiscuous mode [ 66.803682][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.817495][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.826742][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.835805][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.845833][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.854618][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.864090][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.872963][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.881850][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.890759][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.901659][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.910789][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.934112][ T4193] device veth1_macvtap entered promiscuous mode [ 66.945813][ T4188] device veth1_macvtap entered promiscuous mode [ 66.957167][ T4187] device veth0_vlan entered promiscuous mode [ 67.005199][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.017741][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.029404][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.044039][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.055326][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.069522][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.080939][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.090064][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.099857][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.109495][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.124990][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.134304][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.144251][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.154058][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.169128][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.180572][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.190720][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.201626][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.215036][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.226111][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.236797][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.246796][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.258528][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.269998][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.281514][ T4187] device veth1_vlan entered promiscuous mode [ 67.289728][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.299151][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.309939][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.318863][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.336918][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.346289][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.353252][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.358874][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.363876][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.384728][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.426702][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.436938][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.445835][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.454793][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.462986][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.477279][ T4186] device veth0_vlan entered promiscuous mode [ 67.513062][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.521038][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.537171][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.547621][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.557022][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.567414][ T4186] device veth1_vlan entered promiscuous mode [ 67.596663][ T4187] device veth0_macvtap entered promiscuous mode [ 67.640899][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 67.656346][ T4187] device veth1_macvtap entered promiscuous mode [ 67.663096][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 67.669791][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 67.676608][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 67.715936][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 67.716743][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.740939][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.779730][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.792282][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.803425][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.814369][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.824529][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.835570][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.847143][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.857717][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.867469][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.876726][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.885651][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.894585][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.902431][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.911477][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.921117][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.930816][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.941130][ T4215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.982735][ T4186] device veth0_macvtap entered promiscuous mode [ 67.992044][ T4215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.004786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.027378][ T4186] device veth1_macvtap entered promiscuous mode [ 68.048259][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.060622][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.071156][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.083408][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.094909][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.106306][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.117596][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.134270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.134446][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.144650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.152497][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.166920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.177371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.195730][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.211054][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.220510][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.247690][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.284567][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.296929][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.308852][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.321252][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.333255][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.344530][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.354860][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.366320][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.376409][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.387463][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.400754][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.413144][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.426324][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.436725][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.447516][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.457715][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.469034][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.486622][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.498735][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.510586][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.531142][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.561704][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.571555][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.582833][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.591571][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.623448][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.632203][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.649083][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.660229][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.814952][ T4281] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.887100][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.933321][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.992820][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.008393][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.070598][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.110892][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.139823][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.152849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.189157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.221272][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.248918][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.256622][ T4290] device syzkaller1 entered promiscuous mode [ 69.280096][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.389901][ T4293] loop1: detected capacity change from 0 to 512 [ 69.448428][ T4293] ======================================================= [ 69.448428][ T4293] WARNING: The mand mount option has been deprecated and [ 69.448428][ T4293] and is ignored by this kernel. Remove the mand [ 69.448428][ T4293] option from the mount to silence this warning. [ 69.448428][ T4293] ======================================================= [ 69.453938][ T4294] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 69.550361][ T4293] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 69.766972][ T4294] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 69.796230][ T4240] Bluetooth: hci2: command 0x0419 tx timeout [ 69.804234][ T4240] Bluetooth: hci0: command 0x0419 tx timeout [ 69.810989][ T4240] Bluetooth: hci3: command 0x0419 tx timeout [ 69.818885][ T4240] Bluetooth: hci1: command 0x0419 tx timeout [ 69.825552][ T2285] Bluetooth: hci4: command 0x0419 tx timeout [ 69.960076][ T4305] syz.2.13 sent an empty control message without MSG_MORE. [ 70.690135][ T4312] loop2: detected capacity change from 0 to 256 [ 70.742323][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 70.773768][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 70.808889][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 70.819068][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 70.828548][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 70.838163][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 70.849126][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 70.873253][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 70.882791][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 70.892442][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 71.001898][ T1275] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 71.074611][ T4320] loop4: detected capacity change from 0 to 8 [ 71.131379][ T4322] loop3: detected capacity change from 0 to 512 [ 71.148081][ T4326] process 'syz.2.22' launched './file0' with NULL argv: empty string added [ 71.266990][ T4331] FAULT_INJECTION: forcing a failure. [ 71.266990][ T4331] name failslab, interval 1, probability 0, space 0, times 1 [ 71.289144][ T4331] CPU: 1 PID: 4331 Comm: syz.2.25 Not tainted syzkaller #0 [ 71.289655][ T4322] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 71.296863][ T4331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.296911][ T4331] Call Trace: [ 71.296922][ T4331] [ 71.296932][ T4331] dump_stack_lvl+0x188/0x250 [ 71.296972][ T4331] ? show_regs_print_info+0x20/0x20 [ 71.296991][ T4331] ? load_image+0x410/0x410 [ 71.297011][ T4331] ? __might_sleep+0xf0/0xf0 [ 71.297030][ T4331] ? __lock_acquire+0x7b50/0x7b50 [ 71.297060][ T4331] should_fail+0x383/0x4b0 [ 71.297086][ T4331] should_failslab+0x5/0x20 [ 71.297104][ T4331] slab_pre_alloc_hook+0x51/0xc0 [ 71.297126][ T4331] kmem_cache_alloc_trace+0x47/0x290 [ 71.297142][ T4331] ? slip_open+0x6da/0xe40 [ 71.297166][ T4331] slip_open+0x6da/0xe40 [ 71.297199][ T4331] ? pptp_ppp_ioctl+0x170/0x170 [ 71.297220][ T4331] ? up_write+0x1b6/0x410 [ 71.297246][ T4331] tty_set_ldisc+0x358/0x660 [ 71.297270][ T4331] tty_ioctl+0xa8b/0xc30 [ 71.297293][ T4331] ? tty_get_icount+0xa0/0xa0 [ 71.297315][ T4331] __se_sys_ioctl+0xfa/0x170 [ 71.297336][ T4331] do_syscall_64+0x4c/0xa0 [ 71.386060][ T4322] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.388423][ T4331] ? clear_bhb_loop+0x30/0x80 [ 71.426855][ T4331] ? clear_bhb_loop+0x30/0x80 [ 71.431585][ T4331] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.437518][ T4331] RIP: 0033:0x7fa022c62159 [ 71.441972][ T4331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.461785][ T4331] RSP: 002b:00007fa020eba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.463848][ T4334] FAULT_INJECTION: forcing a failure. [ 71.463848][ T4334] name failslab, interval 1, probability 0, space 0, times 1 [ 71.470228][ T4331] RAX: ffffffffffffffda RBX: 00007fa022ee9fa0 RCX: 00007fa022c62159 [ 71.470255][ T4331] RDX: 0000200000000480 RSI: 0000000000005423 RDI: 0000000000000004 [ 71.470267][ T4331] RBP: 00007fa022cf906b R08: 0000000000000000 R09: 0000000000000000 [ 71.470279][ T4331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.470290][ T4331] R13: 00007fa022eea038 R14: 00007fa022ee9fa0 R15: 00007fff4f9ec7a8 [ 71.470321][ T4331] [ 71.514842][ T4322] Zero length message leads to an empty skb [ 71.537097][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.544387][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.582036][ T4334] CPU: 1 PID: 4334 Comm: syz.1.26 Not tainted syzkaller #0 [ 71.589471][ T4334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.599653][ T4334] Call Trace: [ 71.603301][ T4334] [ 71.606432][ T4334] dump_stack_lvl+0x188/0x250 [ 71.611505][ T4334] ? show_regs_print_info+0x20/0x20 [ 71.617284][ T4334] ? load_image+0x410/0x410 [ 71.621851][ T4334] ? __might_sleep+0xf0/0xf0 [ 71.626642][ T4334] ? __lock_acquire+0x7b50/0x7b50 [ 71.631959][ T4334] should_fail+0x383/0x4b0 [ 71.636430][ T4334] should_failslab+0x5/0x20 [ 71.641930][ T4334] slab_pre_alloc_hook+0x51/0xc0 [ 71.647008][ T4334] kmem_cache_alloc_trace+0x47/0x290 [ 71.652340][ T4334] ? call_usermodehelper_setup+0x8a/0x260 [ 71.658330][ T4334] call_usermodehelper_setup+0x8a/0x260 [ 71.664246][ T4334] ? __request_module+0x980/0x980 [ 71.669282][ T4334] __request_module+0x3ea/0x980 [ 71.674369][ T4334] ? umd_cleanup+0x110/0x110 [ 71.678973][ T4334] ? __lock_acquire+0x7b50/0x7b50 [ 71.684089][ T4334] ? do_raw_spin_lock+0x128/0x2f0 [ 71.689119][ T4334] ? __rwlock_init+0x140/0x140 [ 71.693970][ T4334] ? __mutex_lock_common+0x435/0x2400 [ 71.699431][ T4334] ? do_raw_spin_unlock+0x11d/0x230 [ 71.705433][ T4334] elevator_get+0x1d0/0x3d0 [ 71.710199][ T4334] elv_iosched_store+0x1f5/0x3f0 [ 71.715306][ T4334] ? elevator_switch+0x930/0x930 [ 71.720293][ T4334] queue_attr_store+0x8a/0xc0 [ 71.725000][ T4334] ? sysfs_kf_read+0x350/0x350 [ 71.730062][ T4334] kernfs_fop_write_iter+0x3a8/0x500 [ 71.735462][ T4334] vfs_write+0x748/0xd70 [ 71.739747][ T4334] ? file_end_write+0x250/0x250 [ 71.744633][ T4334] ? mutex_lock_nested+0x17/0x20 [ 71.749664][ T4334] ? __fdget_pos+0x2bf/0x370 [ 71.754255][ T4334] ? ksys_write+0x70/0x260 [ 71.758684][ T4334] ksys_write+0x153/0x260 [ 71.763212][ T4334] ? __ia32_sys_read+0x80/0x80 [ 71.768122][ T4334] ? lockdep_hardirqs_on+0x94/0x140 [ 71.773420][ T4334] do_syscall_64+0x4c/0xa0 [ 71.777845][ T4334] ? clear_bhb_loop+0x30/0x80 [ 71.782559][ T4334] ? clear_bhb_loop+0x30/0x80 [ 71.787252][ T4334] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.793149][ T4334] RIP: 0033:0x7fec801cd159 [ 71.797692][ T4334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.818447][ T4334] RSP: 002b:00007fec7e425028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 71.826967][ T4334] RAX: ffffffffffffffda RBX: 00007fec80454fa0 RCX: 00007fec801cd159 [ 71.834945][ T4334] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 71.843257][ T4334] RBP: 00007fec8026406b R08: 0000000000000000 R09: 0000000000000000 [ 71.851264][ T4334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.859351][ T4334] R13: 00007fec80455038 R14: 00007fec80454fa0 R15: 00007fff36f36438 [ 71.867710][ T4334] [ 72.084608][ T4341] FAULT_INJECTION: forcing a failure. [ 72.084608][ T4341] name failslab, interval 1, probability 0, space 0, times 0 [ 72.145105][ T4343] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.168430][ T4341] CPU: 1 PID: 4341 Comm: syz.1.29 Not tainted syzkaller #0 [ 72.175789][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.185981][ T4341] Call Trace: [ 72.189368][ T4341] [ 72.192432][ T4341] dump_stack_lvl+0x188/0x250 [ 72.197253][ T4341] ? show_regs_print_info+0x20/0x20 [ 72.202587][ T4341] ? load_image+0x410/0x410 [ 72.207940][ T4341] should_fail+0x383/0x4b0 [ 72.212387][ T4341] should_failslab+0x5/0x20 [ 72.217081][ T4341] slab_pre_alloc_hook+0x51/0xc0 [ 72.222136][ T4341] __kmalloc_node_track_caller+0x68/0x3a0 [ 72.227893][ T4341] ? pfkey_send_acquire+0x603/0x2e30 [ 72.233204][ T4341] ? __alloc_skb+0xf4/0x750 [ 72.237737][ T4341] ? pfkey_send_acquire+0x603/0x2e30 [ 72.243631][ T4341] __alloc_skb+0x22c/0x750 [ 72.248083][ T4341] pfkey_send_acquire+0x603/0x2e30 [ 72.253236][ T4341] km_query+0xe3/0x1d0 [ 72.257731][ T4341] xfrm_add_acquire+0x831/0xcb0 [ 72.262637][ T4341] xfrm_user_rcv_msg+0x694/0x980 [ 72.267865][ T4341] ? xfrm_netlink_rcv+0x90/0x90 [ 72.273198][ T4341] ? __mutex_lock_common+0x435/0x2400 [ 72.278885][ T4341] netlink_rcv_skb+0x1e9/0x430 [ 72.283766][ T4341] ? xfrm_netlink_rcv+0x66/0x90 [ 72.288725][ T4341] ? xfrm_netlink_rcv+0x90/0x90 [ 72.293934][ T4341] ? netlink_ack+0xb10/0xb10 [ 72.298532][ T4341] ? __lock_acquire+0x7b50/0x7b50 [ 72.303582][ T4341] xfrm_netlink_rcv+0x75/0x90 [ 72.308716][ T4341] netlink_unicast+0x78f/0x940 [ 72.313802][ T4341] netlink_sendmsg+0x8ba/0xbe0 [ 72.318890][ T4341] ? netlink_getsockopt+0x570/0x570 [ 72.324279][ T4341] ? aa_sock_msg_perm+0x94/0x150 [ 72.329343][ T4341] ? apparmor_socket_sendmsg+0x88/0x230 [ 72.334926][ T4341] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 72.340238][ T4341] ? security_socket_sendmsg+0x7c/0xa0 [ 72.345738][ T4341] ? netlink_getsockopt+0x570/0x570 [ 72.351031][ T4341] ____sys_sendmsg+0x5be/0x8f0 [ 72.356352][ T4341] ? __sys_sendmsg_sock+0x30/0x30 [ 72.361424][ T4341] ? import_iovec+0x6f/0xa0 [ 72.365967][ T4341] ___sys_sendmsg+0x236/0x2e0 [ 72.370687][ T4341] ? __sys_sendmsg+0x290/0x290 [ 72.375515][ T4341] __se_sys_sendmsg+0x1b7/0x2a0 [ 72.380376][ T4341] ? __x64_sys_sendmsg+0x80/0x80 [ 72.385321][ T4341] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 72.392158][ T4341] ? lockdep_hardirqs_on+0x94/0x140 [ 72.398057][ T4341] do_syscall_64+0x4c/0xa0 [ 72.402504][ T4341] ? clear_bhb_loop+0x30/0x80 [ 72.407658][ T4341] ? clear_bhb_loop+0x30/0x80 [ 72.412369][ T4341] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.418379][ T4341] RIP: 0033:0x7fec801cd159 [ 72.422857][ T4341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.443263][ T4341] RSP: 002b:00007fec7e425028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.451807][ T4341] RAX: ffffffffffffffda RBX: 00007fec80454fa0 RCX: 00007fec801cd159 [ 72.459890][ T4341] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 72.467879][ T4341] RBP: 00007fec8026406b R08: 0000000000000000 R09: 0000000000000000 [ 72.475963][ T4341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.484339][ T4341] R13: 00007fec80455038 R14: 00007fec80454fa0 R15: 00007fff36f36438 [ 72.492548][ T4341] [ 72.665730][ T13] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 72.936175][ T4369] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.033470][ T13] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 73.051379][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.080577][ T13] usb 4-1: config 0 descriptor?? [ 73.147848][ T13] pwc: Samsung MPC-C10 USB webcam detected. [ 73.352895][ T13] pwc: send_video_command error -71 [ 73.358270][ T13] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 73.383421][ T4389] netlink: 'syz.1.43': attribute type 4 has an invalid length. [ 73.393452][ T13] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 73.424534][ T13] usb 4-1: USB disconnect, device number 2 [ 73.461626][ T4394] loop4: detected capacity change from 0 to 512 [ 73.571194][ T4394] EXT4-fs (loop4): Ignoring removed orlov option [ 73.623624][ T4401] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.670495][ T4394] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #2: comm syz.4.45: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 1281, max 0(0), depth 0(0) [ 73.687967][ T4405] loop1: detected capacity change from 0 to 128 [ 73.697706][ T4394] EXT4-fs (loop4): Remounting filesystem read-only [ 73.710206][ T4394] EXT4-fs (loop4): get root inode failed [ 73.747828][ T4394] EXT4-fs (loop4): mount failed [ 73.895799][ T4407] loop2: detected capacity change from 0 to 8192 [ 73.962842][ T4407] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 73.970616][ T4407] loop2: partition table partially beyond EOD, truncated [ 73.982719][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 74.064091][ T4407] loop2: p1 start 100663296 is beyond EOD, truncated [ 74.070949][ T4407] loop2: p2 size 3141337092 extends beyond EOD, truncated [ 74.097046][ T4414] loop0: detected capacity change from 0 to 16 [ 74.100741][ T4407] loop2: p4 start 65535 is beyond EOD, truncated [ 74.111159][ T4407] loop2: p5 size 3141337092 extends beyond EOD, truncated [ 74.119345][ T4407] loop2: p6 start 65535 is beyond EOD, truncated [ 74.180149][ T4414] erofs: (device loop0): mounted with root inode @ nid 36. [ 74.226863][ T4204] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -10 in[4096, 0] out[9000] [ 74.265198][ T4414] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -10 in[4096, 0] out[4096] [ 74.288416][ T26] audit: type=1800 audit(1790321879.386:2): pid=4414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.52" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 74.352594][ T23] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 74.366828][ T13] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 74.387203][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.402706][ T4231] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.463800][ T13] usb 4-1: config 0 descriptor?? [ 74.509644][ T13] pwc: Samsung MPC-C10 USB webcam detected. [ 74.556042][ T4414] syz.0.52 (4414) used greatest stack depth: 21008 bytes left [ 74.662777][ T4231] usb 5-1: Using ep0 maxpacket: 32 [ 74.782871][ T4231] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 74.794255][ T4231] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.801036][ T4231] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 74.802780][ T23] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 74.810499][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.824730][ T23] usb 3-1: config 0 has no interface number 0 [ 74.829341][ T4231] usb 5-1: config 0 descriptor?? [ 74.840438][ T23] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 74.902673][ T4299] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.942854][ T13] pwc: recv_control_msg error -32 req 02 val 2b00 [ 74.983467][ T13] pwc: recv_control_msg error -32 req 02 val 2700 [ 74.983587][ T23] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 74.999501][ T23] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 75.007581][ T23] usb 3-1: Manufacturer: syz [ 75.012633][ T23] usb 3-1: SerialNumber: syz [ 75.019226][ T23] usb 3-1: config 0 descriptor?? [ 75.242791][ T13] pwc: recv_control_msg error -71 req 02 val 2c00 [ 75.262979][ T13] pwc: recv_control_msg error -71 req 04 val 1000 [ 75.282709][ T13] pwc: recv_control_msg error -71 req 04 val 1300 [ 75.293661][ T4299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.302728][ T13] pwc: recv_control_msg error -71 req 04 val 1400 [ 75.307456][ T4299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.323478][ T13] pwc: recv_control_msg error -71 req 02 val 2000 [ 75.333665][ T4299] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.333795][ T4299] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.333838][ T4299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.342800][ T13] pwc: recv_control_msg error -71 req 02 val 2100 [ 75.355428][ T4299] usb 2-1: config 0 descriptor?? [ 75.383627][ T13] pwc: recv_control_msg error -71 req 02 val 2200 [ 75.404888][ T13] pwc: recv_control_msg error -71 req 06 val 0600 [ 75.425802][ T23] usbtouchscreen 3-1:0.214: Failed to read FW rev: -32 [ 75.426200][ T23] usbtouchscreen: probe of 3-1:0.214 failed with error -32 [ 75.442762][ T13] pwc: recv_control_msg error -71 req 04 val 1500 [ 75.464753][ T13] pwc: recv_control_msg error -71 req 02 val 2500 [ 75.482757][ T13] pwc: recv_control_msg error -71 req 02 val 2400 [ 75.502694][ T13] pwc: recv_control_msg error -71 req 02 val 2600 [ 75.522798][ T13] pwc: recv_control_msg error -71 req 02 val 2900 [ 75.542719][ T13] pwc: recv_control_msg error -71 req 02 val 2800 [ 75.562852][ T13] pwc: recv_control_msg error -71 req 04 val 1100 [ 75.582753][ T13] pwc: recv_control_msg error -71 req 04 val 1200 [ 75.586193][ T13] pwc: Registered as video103. [ 75.587976][ T13] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 75.601511][ T13] usb 4-1: USB disconnect, device number 3 [ 75.684546][ T4231] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 75.684609][ T4231] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 75.684632][ T4231] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 75.684654][ T4231] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 75.684675][ T4231] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 75.709351][ T4231] corsair-psu 0003:1B1C:1C09.0001: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 75.875421][ T4299] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 75.926459][ T4299] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 76.042647][ T4231] corsair-psu 0003:1B1C:1C09.0001: unable to initialize device (-110) [ 76.057795][ T4231] corsair-psu: probe of 0003:1B1C:1C09.0001 failed with error -110 [ 76.078054][ T4231] usb 5-1: USB disconnect, device number 2 [ 76.245300][ T4441] fido_id[4441]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 76.360555][ T4444] FAULT_INJECTION: forcing a failure. [ 76.360555][ T4444] name failslab, interval 1, probability 0, space 0, times 0 [ 76.360643][ T4444] CPU: 1 PID: 4444 Comm: syz.3.61 Not tainted syzkaller #0 [ 76.360668][ T4444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.360680][ T4444] Call Trace: [ 76.360687][ T4444] [ 76.360696][ T4444] dump_stack_lvl+0x188/0x250 [ 76.360728][ T4444] ? show_regs_print_info+0x20/0x20 [ 76.360758][ T4444] ? load_image+0x410/0x410 [ 76.360784][ T4444] ? __might_sleep+0xf0/0xf0 [ 76.360804][ T4444] ? __lock_acquire+0x7b50/0x7b50 [ 76.360834][ T4444] should_fail+0x383/0x4b0 [ 76.360863][ T4444] should_failslab+0x5/0x20 [ 76.360882][ T4444] slab_pre_alloc_hook+0x51/0xc0 [ 76.360905][ T4444] ? __d_alloc+0x27/0x6d0 [ 76.360924][ T4444] kmem_cache_alloc+0x3d/0x280 [ 76.360949][ T4444] __d_alloc+0x27/0x6d0 [ 76.360974][ T4444] d_alloc_parallel+0x7b/0x1320 [ 76.360994][ T4444] ? __d_lookup+0x6a4/0x760 [ 76.361014][ T4444] ? d_lookup+0x60/0x60 [ 76.361043][ T4444] ? __init_waitqueue_head+0xa4/0x140 [ 76.361072][ T4444] proc_fill_cache+0x158/0x460 [ 76.361097][ T4444] ? proc_pident_readdir+0x490/0x490 [ 76.361117][ T4444] ? pid_revalidate+0x1a0/0x1a0 [ 76.361140][ T4444] ? proc_pident_readdir+0x278/0x490 [ 76.361182][ T4444] proc_pident_readdir+0x399/0x490 [ 76.361215][ T4444] iterate_dir+0x213/0x550 [ 76.361233][ T4444] ? rcu_lock_release+0x20/0x20 [ 76.361260][ T4444] __se_sys_getdents+0xf2/0x260 [ 76.361281][ T4444] ? __x64_sys_getdents+0x80/0x80 [ 76.361298][ T4444] ? fillonedir+0x4c0/0x4c0 [ 76.361332][ T4444] ? lockdep_hardirqs_on+0x94/0x140 [ 76.361357][ T4444] do_syscall_64+0x4c/0xa0 [ 76.361378][ T4444] ? clear_bhb_loop+0x30/0x80 [ 76.361398][ T4444] ? clear_bhb_loop+0x30/0x80 [ 76.361420][ T4444] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.361442][ T4444] RIP: 0033:0x7fd73d247159 [ 76.361460][ T4444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.361476][ T4444] RSP: 002b:00007fd73b49f028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 76.361503][ T4444] RAX: ffffffffffffffda RBX: 00007fd73d4cefa0 RCX: 00007fd73d247159 [ 76.361518][ T4444] RDX: 0000000000001000 RSI: 0000200000002000 RDI: 0000000000000004 [ 76.361532][ T4444] RBP: 00007fd73d2de06b R08: 0000000000000000 R09: 0000000000000000 [ 76.361547][ T4444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.361559][ T4444] R13: 00007fd73d4cf038 R14: 00007fd73d4cefa0 R15: 00007fffd0e8b2a8 [ 76.361590][ T4444] [ 76.634030][ T4447] block nbd3: shutting down sockets [ 76.823529][ T4240] usb 3-1: USB disconnect, device number 2 [ 77.041984][ T4454] loop4: detected capacity change from 0 to 1024 [ 77.064312][ T4457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 77.166061][ T4454] EXT4-fs (loop4): Ignoring removed bh option [ 77.182760][ T4454] EXT4-fs (loop4): inline encryption not supported [ 77.217977][ T4454] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 77.243892][ C1] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 77.285510][ T4454] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 2: comm syz.4.66: lblock 2 mapped to illegal pblock 2 (length 1) [ 77.375487][ T4475] loop0: detected capacity change from 0 to 128 [ 77.382407][ T4454] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 77.396592][ T4454] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 48: comm syz.4.66: lblock 0 mapped to illegal pblock 48 (length 1) [ 77.412263][ T4454] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 77.424020][ T4454] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.66: Failed to acquire dquot type 0 [ 77.438421][ T4454] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 77.462478][ T4475] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 77.490224][ T4454] EXT4-fs error (device loop4): ext4_evict_inode:284: inode #11: comm syz.4.66: mark_inode_dirty error [ 77.526303][ T4454] EXT4-fs warning (device loop4): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 77.589911][ T4454] EXT4-fs (loop4): 1 orphan inode deleted [ 77.597078][ T4454] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 77.625669][ T155] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 77.649968][ T155] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 77.664072][ T155] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 77.730711][ T4454] bridge0: port 3(syz_tun) entered blocking state [ 77.748596][ T4454] bridge0: port 3(syz_tun) entered disabled state [ 77.776024][ T4454] device syz_tun entered promiscuous mode [ 77.791647][ T4454] bridge0: port 3(syz_tun) entered blocking state [ 77.798568][ T4454] bridge0: port 3(syz_tun) entered forwarding state [ 77.957863][ T4186] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 77.987054][ T4186] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 78.031880][ T4186] EXT4-fs error (device loop4): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 78.061455][ T4493] netlink: 'syz.1.79': attribute type 1 has an invalid length. [ 78.080089][ T4493] netlink: 'syz.1.79': attribute type 1 has an invalid length. [ 78.088296][ T4493] iwpm_send_hello: Unable to send a nlmsg [ 78.114950][ T4496] FAULT_INJECTION: forcing a failure. [ 78.114950][ T4496] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 78.120581][ T13] usb 2-1: USB disconnect, device number 2 [ 78.128922][ T4496] CPU: 1 PID: 4496 Comm: syz.3.83 Not tainted syzkaller #0 [ 78.141998][ T4496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.152187][ T4496] Call Trace: [ 78.155485][ T4496] [ 78.158595][ T4496] dump_stack_lvl+0x188/0x250 [ 78.163294][ T4496] ? show_regs_print_info+0x20/0x20 [ 78.168947][ T4496] ? load_image+0x410/0x410 [ 78.173522][ T4496] ? __lock_acquire+0x7b50/0x7b50 [ 78.178786][ T4496] should_fail+0x383/0x4b0 [ 78.183234][ T4496] _copy_from_user+0x2e/0x170 [ 78.187934][ T4496] iovec_from_user+0x142/0x370 [ 78.192726][ T4496] __import_iovec+0x70/0x490 [ 78.197333][ T4496] ? mark_lock+0x94/0x320 [ 78.201773][ T4496] import_iovec+0x6f/0xa0 [ 78.206131][ T4496] process_vm_rw+0x1e8/0xbe0 [ 78.210753][ T4496] ? futex_wait+0x680/0x680 [ 78.215396][ T4496] ? __ia32_sys_process_vm_writev+0xf0/0xf0 [ 78.222150][ T4496] ? verify_lock_unused+0x140/0x140 [ 78.227387][ T4496] ? do_futex+0xd83/0x12b0 [ 78.231829][ T4496] ? vfs_write+0xaa6/0xd70 [ 78.236271][ T4496] ? __lock_acquire+0x7b50/0x7b50 [ 78.241305][ T4496] ? lock_chain_count+0x20/0x20 [ 78.246178][ T4496] __x64_sys_process_vm_writev+0xdc/0xf0 [ 78.251816][ T4496] do_syscall_64+0x4c/0xa0 [ 78.256231][ T4496] ? clear_bhb_loop+0x30/0x80 [ 78.260909][ T4496] ? clear_bhb_loop+0x30/0x80 [ 78.265593][ T4496] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.271484][ T4496] RIP: 0033:0x7fd73d247159 [ 78.275913][ T4496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.295823][ T4496] RSP: 002b:00007fd73b49f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 78.304526][ T4496] RAX: ffffffffffffffda RBX: 00007fd73d4cefa0 RCX: 00007fd73d247159 [ 78.312518][ T4496] RDX: 0000000000000310 RSI: 0000200000c22000 RDI: 0000000000000000 [ 78.320497][ T4496] RBP: 00007fd73d2de06b R08: 0000000000000001 R09: 0000000000000000 [ 78.328468][ T4496] R10: 0000200000c22fa0 R11: 0000000000000246 R12: 0000000000000000 [ 78.336437][ T4496] R13: 00007fd73d4cf038 R14: 00007fd73d4cefa0 R15: 00007fffd0e8b2a8 [ 78.345056][ T4496] [ 78.613904][ T4503] FAULT_INJECTION: forcing a failure. [ 78.613904][ T4503] name failslab, interval 1, probability 0, space 0, times 0 [ 78.634017][ T4503] CPU: 1 PID: 4503 Comm: syz.0.85 Not tainted syzkaller #0 [ 78.641400][ T4503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.651475][ T4503] Call Trace: [ 78.654773][ T4503] [ 78.657728][ T4503] dump_stack_lvl+0x188/0x250 [ 78.662524][ T4503] ? show_regs_print_info+0x20/0x20 [ 78.667764][ T4503] ? load_image+0x410/0x410 [ 78.672303][ T4503] ? __might_sleep+0xf0/0xf0 [ 78.676910][ T4503] ? __lock_acquire+0x7b50/0x7b50 [ 78.681984][ T4503] should_fail+0x383/0x4b0 [ 78.686429][ T4503] should_failslab+0x5/0x20 [ 78.690959][ T4503] slab_pre_alloc_hook+0x51/0xc0 [ 78.696185][ T4503] ? vm_area_dup+0x1e/0xb0 [ 78.700625][ T4503] kmem_cache_alloc+0x3d/0x280 [ 78.705490][ T4503] vm_area_dup+0x1e/0xb0 [ 78.709744][ T4503] __split_vma+0xb1/0x410 [ 78.714080][ T4503] ? find_vma+0x1df/0x230 [ 78.718432][ T4503] __do_munmap+0x40b/0xe10 [ 78.722863][ T4503] __vm_munmap+0x13f/0x240 [ 78.727298][ T4503] ? vm_munmap+0x20/0x20 [ 78.731566][ T4503] ? blocking_notifier_call_chain+0x16a/0x1b0 [ 78.737709][ T4503] __x64_sys_munmap+0x67/0x70 [ 78.742520][ T4503] do_syscall_64+0x4c/0xa0 [ 78.747128][ T4503] ? clear_bhb_loop+0x30/0x80 [ 78.752687][ T4503] ? clear_bhb_loop+0x30/0x80 [ 78.757547][ T4503] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.763480][ T4503] RIP: 0033:0x7f0ae8e00f87 [ 78.768107][ T4503] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.788535][ T4503] RSP: 002b:00007f0ae7057d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 78.797324][ T4503] RAX: ffffffffffffffda RBX: 00007f0ae0000000 RCX: 00007f0ae8e00f87 [ 78.805404][ T4503] RDX: 0000000000000000 RSI: 0000000003039000 RDI: 00007f0ae4000000 [ 78.813473][ T4503] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 78.821469][ T4503] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 78.829578][ T4503] R13: 0000000000001000 R14: 00007f0ae4000000 R15: 0000000000fc7000 [ 78.838100][ T4503] [ 79.040633][ T4508] loop4: detected capacity change from 0 to 512 [ 79.137453][ T4514] FAULT_INJECTION: forcing a failure. [ 79.137453][ T4514] name fail_futex, interval 1, probability 0, space 0, times 1 [ 79.196240][ T4514] CPU: 1 PID: 4514 Comm: syz.1.89 Not tainted syzkaller #0 [ 79.203583][ T4514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.213677][ T4514] Call Trace: [ 79.216977][ T4514] [ 79.220018][ T4514] dump_stack_lvl+0x188/0x250 [ 79.224825][ T4514] ? show_regs_print_info+0x20/0x20 [ 79.230144][ T4514] ? load_image+0x410/0x410 [ 79.234677][ T4514] ? __schedule+0x11cb/0x4350 [ 79.239395][ T4514] should_fail+0x383/0x4b0 [ 79.243933][ T4514] get_futex_key+0x1a1/0x12d0 [ 79.248818][ T4514] ? futex_wait_restart+0x250/0x250 [ 79.254138][ T4514] ? __lock_acquire+0x7b50/0x7b50 [ 79.259221][ T4514] futex_wait_setup+0x4b/0x520 [ 79.264066][ T4514] ? futex_wait_queue_me+0x2d6/0x440 [ 79.269399][ T4514] futex_wait+0x22f/0x680 [ 79.273958][ T4514] ? do_futex+0x12b0/0x12b0 [ 79.278623][ T4514] ? verify_lock_unused+0x140/0x140 [ 79.283875][ T4514] ? verify_lock_unused+0x140/0x140 [ 79.289125][ T4514] do_futex+0xdc2/0x12b0 [ 79.293439][ T4514] ? vfs_write+0xaa6/0xd70 [ 79.297918][ T4514] ? futex_exit_release+0x1c0/0x1c0 [ 79.303160][ T4514] ? __context_tracking_exit+0x4c/0x80 [ 79.308891][ T4514] __se_sys_futex+0x389/0x420 [ 79.313709][ T4514] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 79.319728][ T4514] ? __x64_sys_futex+0xf0/0xf0 [ 79.324666][ T4514] ? __x64_sys_futex+0x1d/0xf0 [ 79.329474][ T4514] do_syscall_64+0x4c/0xa0 [ 79.333918][ T4514] ? clear_bhb_loop+0x30/0x80 [ 79.338628][ T4514] ? clear_bhb_loop+0x30/0x80 [ 79.343354][ T4514] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.349395][ T4514] RIP: 0033:0x7fec801cd159 [ 79.353852][ T4514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.373774][ T4514] RSP: 002b:00007fec7e425028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 79.382651][ T4514] RAX: ffffffffffffffda RBX: 00007fec80454fa0 RCX: 00007fec801cd159 [ 79.390754][ T4514] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000000 [ 79.398944][ T4514] RBP: 00007fec8026406b R08: 0000000000000000 R09: 0000000000000002 [ 79.407345][ T4514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.415445][ T4514] R13: 00007fec80455038 R14: 00007fec80454fa0 R15: 00007fff36f36438 [ 79.423831][ T4514] [ 79.460803][ T4233] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 79.540520][ T4508] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.596078][ T4508] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.646739][ T4515] loop2: detected capacity change from 0 to 32768 [ 79.951298][ T4515] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 79.981111][ T4233] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.008034][ T4233] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 80.213936][ T4233] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.223148][ T13] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 80.231247][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.263656][ T4233] usb 4-1: Product: syz [ 80.267957][ T4233] usb 4-1: Manufacturer: syz [ 80.278045][ T4233] usb 4-1: SerialNumber: syz [ 80.355337][ T4188] ocfs2: Unmounting device (7,2) on (node local) [ 80.361253][ T4233] cdc_mbim 4-1:1.0: skipping garbage [ 80.561020][ T4513] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 80.672914][ T4299] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 80.708727][ T13] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 80.723511][ T13] usb 2-1: config 0 has no interface number 0 [ 80.747950][ T13] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 80.769114][ T13] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 80.820081][ T13] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 80.852140][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.904494][ T13] usb 2-1: config 0 descriptor?? [ 80.936234][ T4524] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 80.938186][ T4544] device syzkaller1 entered promiscuous mode [ 80.967821][ T13] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 81.108433][ T4299] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 81.129324][ T4299] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 81.150487][ T4299] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 81.197477][ T4299] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 81.259818][ T4513] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 81.265795][ T13] usb 2-1: USB disconnect, device number 3 [ 81.319568][ T4233] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 81.340325][ T4233] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 81.369463][ T4546] device syzkaller1 entered promiscuous mode [ 81.405161][ T4299] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.433176][ T4299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.444561][ T4233] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 3a:df:df:4f:f8:8e [ 81.469404][ T4299] usb 5-1: Product: syz [ 81.484388][ T4299] usb 5-1: Manufacturer: syz [ 81.489338][ T4299] usb 5-1: SerialNumber: syz [ 81.525530][ T4534] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 81.593903][ T4299] cdc_mbim 5-1:1.0: skipping garbage [ 81.639027][ T4240] usb 4-1: USB disconnect, device number 4 [ 81.649603][ T4240] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 81.710565][ T4555] FAULT_INJECTION: forcing a failure. [ 81.710565][ T4555] name failslab, interval 1, probability 0, space 0, times 0 [ 81.758543][ T4555] CPU: 1 PID: 4555 Comm: syz.2.102 Not tainted syzkaller #0 [ 81.766426][ T4555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.776604][ T4555] Call Trace: [ 81.779921][ T4555] [ 81.782989][ T4555] dump_stack_lvl+0x188/0x250 [ 81.787823][ T4555] ? show_regs_print_info+0x20/0x20 [ 81.793056][ T4555] ? load_image+0x410/0x410 [ 81.797694][ T4555] ? __lock_acquire+0x7b50/0x7b50 [ 81.802762][ T4555] should_fail+0x383/0x4b0 [ 81.807226][ T4555] should_failslab+0x5/0x20 [ 81.811847][ T4555] slab_pre_alloc_hook+0x51/0xc0 [ 81.816818][ T4555] ? getname_flags+0xb7/0x4f0 [ 81.821528][ T4555] kmem_cache_alloc+0x3d/0x280 [ 81.826322][ T4555] getname_flags+0xb7/0x4f0 [ 81.830860][ T4555] __se_sys_quotactl+0x1dd/0x6f0 [ 81.835829][ T4555] ? __x64_sys_quotactl+0xa0/0xa0 [ 81.840878][ T4555] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 81.846980][ T4555] ? lock_chain_count+0x20/0x20 [ 81.851873][ T4555] ? lockdep_hardirqs_on+0x94/0x140 [ 81.857258][ T4555] do_syscall_64+0x4c/0xa0 [ 81.861730][ T4555] ? clear_bhb_loop+0x30/0x80 [ 81.866678][ T4555] ? clear_bhb_loop+0x30/0x80 [ 81.871408][ T4555] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.877345][ T4555] RIP: 0033:0x7fa022c62159 [ 81.881796][ T4555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.901434][ T4555] RSP: 002b:00007fa020eba028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 81.910056][ T4555] RAX: ffffffffffffffda RBX: 00007fa022ee9fa0 RCX: 00007fa022c62159 [ 81.918072][ T4555] RDX: 000000000000ee00 RSI: 0000200000000040 RDI: ffffffff80000501 [ 81.926324][ T4555] RBP: 00007fa022cf906b R08: 0000000000000000 R09: 0000000000000000 [ 81.934640][ T4555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.943320][ T4555] R13: 00007fa022eea038 R14: 00007fa022ee9fa0 R15: 00007fff4f9ec7a8 [ 81.951528][ T4555] [ 81.989113][ T4534] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 82.009676][ T4560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.104'. [ 82.045495][ T4534] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 82.061267][ T4560] device vlan2 entered promiscuous mode [ 82.067178][ T4560] device batadv0 entered promiscuous mode [ 82.310367][ T4231] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.631292][ T4231] usb 1-1: Using ep0 maxpacket: 16 [ 82.682907][ T4240] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 82.722411][ T4534] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 82.754748][ T4534] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 82.779169][ T4231] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.792741][ T4299] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 82.806715][ T4231] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.814630][ T4299] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 82.847898][ T4231] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 82.898486][ T4299] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 66:92:7e:7b:ec:8b [ 82.900954][ T4231] usb 1-1: config 0 interface 0 has no altsetting 0 [ 82.936616][ T4231] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 82.979486][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.015730][ T4231] usb 1-1: config 0 descriptor?? [ 83.079783][ T13] usb 5-1: USB disconnect, device number 3 [ 83.086417][ T13] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 83.095605][ T4240] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.132592][ T4240] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.213140][ T4240] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.271593][ T4240] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.297785][ T4240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.311141][ T4240] usb 2-1: config 0 descriptor?? [ 83.555339][ T4611] FAULT_INJECTION: forcing a failure. [ 83.555339][ T4611] name fail_futex, interval 1, probability 0, space 0, times 0 [ 83.629564][ T4611] CPU: 0 PID: 4611 Comm: syz.2.117 Not tainted syzkaller #0 [ 83.637208][ T4611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.647308][ T4611] Call Trace: [ 83.650631][ T4611] [ 83.653714][ T4611] dump_stack_lvl+0x188/0x250 [ 83.658626][ T4611] ? show_regs_print_info+0x20/0x20 [ 83.663907][ T4611] ? load_image+0x410/0x410 [ 83.668454][ T4611] ? __schedule+0x11cb/0x4350 [ 83.673189][ T4611] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 83.679217][ T4611] should_fail+0x383/0x4b0 [ 83.683735][ T4611] get_futex_key+0x1a1/0x12d0 [ 83.688459][ T4611] ? futex_wait_restart+0x250/0x250 [ 83.693699][ T4611] ? __lock_acquire+0x7b50/0x7b50 [ 83.698779][ T4611] futex_wait_setup+0x4b/0x520 [ 83.703594][ T4611] ? futex_wait_queue_me+0x2d6/0x440 [ 83.709019][ T4611] futex_wait+0x22f/0x680 [ 83.713403][ T4611] ? do_futex+0x12b0/0x12b0 [ 83.717974][ T4611] ? verify_lock_unused+0x140/0x140 [ 83.723394][ T4611] ? verify_lock_unused+0x140/0x140 [ 83.728821][ T4611] do_futex+0xdc2/0x12b0 [ 83.733213][ T4611] ? vfs_write+0xaa6/0xd70 [ 83.737767][ T4611] ? futex_exit_release+0x1c0/0x1c0 [ 83.743090][ T4611] ? __context_tracking_exit+0x4c/0x80 [ 83.748763][ T4611] __se_sys_futex+0x389/0x420 [ 83.753579][ T4611] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 83.759609][ T4611] ? __x64_sys_futex+0xf0/0xf0 [ 83.764602][ T4611] ? __x64_sys_futex+0x1d/0xf0 [ 83.769423][ T4611] do_syscall_64+0x4c/0xa0 [ 83.773880][ T4611] ? clear_bhb_loop+0x30/0x80 [ 83.778596][ T4611] ? clear_bhb_loop+0x30/0x80 [ 83.783382][ T4611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.789328][ T4611] RIP: 0033:0x7fa022c62159 [ 83.793867][ T4611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.813591][ T4611] RSP: 002b:00007fa020eba028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 83.822507][ T4611] RAX: ffffffffffffffda RBX: 00007fa022ee9fa0 RCX: 00007fa022c62159 [ 83.830624][ T4611] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000000 [ 83.838629][ T4611] RBP: 00007fa022cf906b R08: 0000000000000000 R09: 0000000000000002 [ 83.840152][ T4240] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 83.846637][ T4611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.846658][ T4611] R13: 00007fa022eea038 R14: 00007fa022ee9fa0 R15: 00007fff4f9ec7a8 [ 83.846688][ T4611] [ 83.897289][ T4231] usb 1-1: USB disconnect, device number 2 [ 83.946886][ T4619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.118'. [ 83.987503][ T4240] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 84.006383][ T4618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.118'. [ 84.051475][ T4618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.118'. [ 84.093372][ T4618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.118'. [ 84.137065][ T4618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.118'. [ 84.213679][ T4630] loop4: detected capacity change from 0 to 64 [ 84.519620][ C1] vcan0: j1939_tp_rxtimer: 0xffff888063851400: rx timeout, send abort [ 84.559142][ T4643] loop0: detected capacity change from 0 to 128 [ 84.603613][ T4639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.122'. [ 84.753609][ T4650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.124'. [ 85.208795][ T4240] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 85.834647][ T4672] FAULT_INJECTION: forcing a failure. [ 85.834647][ T4672] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 85.848825][ T4672] CPU: 1 PID: 4672 Comm: syz.2.130 Not tainted syzkaller #0 [ 85.856151][ T4672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.866449][ T4672] Call Trace: [ 85.870111][ T4672] [ 85.873073][ T4672] dump_stack_lvl+0x188/0x250 [ 85.877793][ T4672] ? show_regs_print_info+0x20/0x20 [ 85.883107][ T4672] ? load_image+0x410/0x410 [ 85.887735][ T4672] ? mark_lock+0x94/0x320 [ 85.892087][ T4672] should_fail+0x383/0x4b0 [ 85.896545][ T4672] prepare_alloc_pages+0x1e3/0x5b0 [ 85.901696][ T4672] __alloc_pages+0x11b/0x480 [ 85.906347][ T4672] ? zone_statistics+0x170/0x170 [ 85.911336][ T4672] ? rcu_lock_acquire+0x30/0x30 [ 85.916313][ T4672] ? alloc_pages+0x452/0x560 [ 85.920947][ T4672] __get_free_pages+0x8/0x30 [ 85.925566][ T4672] __tlb_remove_page_size+0x1f2/0x3f0 [ 85.930976][ T4672] unmap_page_range+0xfcf/0x2410 [ 85.935985][ T4672] unmap_vmas+0x131/0x250 [ 85.940494][ T4672] ? unmap_page_range+0x2410/0x2410 [ 85.949801][ T4672] ? __mutex_lock_common+0x435/0x2400 [ 85.955216][ T4672] ? exit_mm_release+0x16/0x30 [ 85.960079][ T4672] exit_mmap+0x3b9/0x640 [ 85.964376][ T4672] ? vm_brk+0x20/0x20 [ 85.968421][ T4672] ? uprobe_clear_state+0x2f6/0x460 [ 85.973667][ T4672] __mmput+0x115/0x390 [ 85.977783][ T4672] exit_mm+0x632/0x7b0 [ 85.981982][ T4672] ? perf_pmu_migrate_context+0xb70/0xb70 [ 85.987756][ T4672] ? do_exit+0x2110/0x2110 [ 85.992500][ T4672] ? __ia32_sys_timer_delete+0x40/0x40 [ 85.997987][ T4672] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 86.003489][ T4672] ? tty_audit_exit+0x149/0x1f0 [ 86.008383][ T4672] do_exit+0x5b8/0x2110 [ 86.012674][ T4672] ? put_task_struct+0x80/0x80 [ 86.017575][ T4672] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 86.023830][ T4672] ? _raw_spin_lock_irq+0xb7/0xf0 [ 86.028901][ T4672] do_group_exit+0x12c/0x2f0 [ 86.033526][ T4672] ? lockdep_hardirqs_on+0x94/0x140 [ 86.038764][ T4672] get_signal+0x7eb/0x12e0 [ 86.043231][ T4672] arch_do_signal_or_restart+0xe6/0x12a0 [ 86.049012][ T4672] ? futex_exit_release+0x1c0/0x1c0 [ 86.054247][ T4672] ? get_sigframe_size+0x10/0x10 [ 86.059216][ T4672] ? __context_tracking_exit+0x4c/0x80 [ 86.064723][ T4672] ? exit_to_user_mode_loop+0x3b/0x130 [ 86.070215][ T4672] exit_to_user_mode_loop+0x9e/0x130 [ 86.075528][ T4672] exit_to_user_mode_prepare+0xee/0x180 [ 86.081100][ T4672] syscall_exit_to_user_mode+0x16/0x40 [ 86.086705][ T4672] do_syscall_64+0x58/0xa0 [ 86.091276][ T4672] ? clear_bhb_loop+0x30/0x80 [ 86.096002][ T4672] ? clear_bhb_loop+0x30/0x80 [ 86.100726][ T4672] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.106664][ T4672] RIP: 0033:0x7fa022c62159 [ 86.111116][ T4672] Code: Unable to access opcode bytes at RIP 0x7fa022c6212f. [ 86.118689][ T4672] RSP: 002b:00007fa020eba0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 86.127145][ T4672] RAX: 0000000000000001 RBX: 00007fa022ee9fa8 RCX: 00007fa022c62159 [ 86.135150][ T4672] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa022ee9fac [ 86.143383][ T4672] RBP: 00007fa022ee9fa0 R08: 002f10ecee82fdbe R09: 0000000000000000 [ 86.151600][ T4672] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 86.159612][ T4672] R13: 00007fa022eea038 R14: 00007fff4f9ec6c0 R15: 00007fff4f9ec7a8 [ 86.167638][ T4672] [ 86.411060][ T4299] usb 2-1: USB disconnect, device number 4 [ 86.599148][ T4690] loop4: detected capacity change from 0 to 512 [ 86.916202][ T1111] cfg80211: failed to load regulatory.db [ 87.385415][ T4690] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 89.613617][ T4707] loop4: detected capacity change from 0 to 512 [ 89.636674][ T4713] loop3: detected capacity change from 0 to 128 [ 89.710035][ T4707] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 89.909315][ T4718] ODEBUG: Out of memory. ODEBUG disabled [ 90.033686][ T4713] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 91.126333][ T4730] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.511054][ T4741] loop3: detected capacity change from 0 to 512 [ 92.620746][ T4741] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.680701][ T4741] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.905580][ T4769] loop0: detected capacity change from 0 to 512 [ 93.727913][ T4746] loop2: detected capacity change from 0 to 32768 [ 93.805356][ T4769] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 93.920062][ T4773] loop4: detected capacity change from 0 to 512 [ 94.412764][ T26] audit: type=1800 audit(1790321899.256:3): pid=4746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.152" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 94.691039][ T4773] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 95.099324][ T4780] loop1: detected capacity change from 0 to 512 [ 95.343639][ T26] audit: type=1800 audit(1790321900.446:4): pid=4774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.152" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 95.803514][ T4780] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 96.064507][ T4786] loop0: detected capacity change from 0 to 512 [ 96.940054][ T4786] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 97.855297][ T4784] loop4: detected capacity change from 0 to 128 [ 97.895347][ T4784] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 98.919330][ T4806] loop3: detected capacity change from 0 to 1024 [ 100.340249][ T4817] sched: RT throttling activated [ 100.449023][ T4818] loop1: detected capacity change from 0 to 512 [ 100.788136][ T4819] loop0: detected capacity change from 0 to 512 [ 100.854989][ T4818] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 100.916540][ T4806] EXT4-fs (loop3): inline encryption not supported [ 101.037481][ T4830] loop4: detected capacity change from 0 to 512 [ 101.418953][ T4830] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 101.867566][ T4833] netlink: 'syz.2.175': attribute type 1 has an invalid length. [ 101.878862][ T4819] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 101.943835][ T4806] EXT4-fs: failed to create workqueue [ 101.949265][ T4806] EXT4-fs (loop3): mount failed [ 102.011579][ T4833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.120361][ T4838] bond1: (slave geneve2): making interface the new active one [ 102.201959][ T4838] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 102.206413][ T4844] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.287060][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 102.472853][ T4838] syz.2.175 (4838) used greatest stack depth: 20048 bytes left [ 102.652342][ T4853] autofs4:pid:4853:autofs_fill_super: called with bogus options [ 105.153832][ T4874] loop0: detected capacity change from 0 to 512 [ 105.532001][ T4875] loop2: detected capacity change from 0 to 512 [ 105.578529][ T4874] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 105.643720][ T4875] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 105.697070][ T4839] bridge0: port 3(syz_tun) entered disabled state [ 105.909153][ T4883] loop1: detected capacity change from 0 to 512 [ 106.693147][ T4883] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 106.741260][ T4839] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.749342][ T4839] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.028731][ T4891] loop0: detected capacity change from 0 to 512 [ 107.862724][ T4891] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 108.129986][ T4895] loop1: detected capacity change from 0 to 512 [ 108.157534][ T4895] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 109.795716][ T4839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.863789][ T4839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.900796][ T4914] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1688227217 (3376454434 ns) > initial count (1786943000 ns). Using initial count to start timer. [ 110.495772][ T4839] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.515601][ T4839] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.528866][ T4839] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.540668][ T4839] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.799818][ T4920] loop1: detected capacity change from 0 to 128 [ 110.910041][ T4920] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 110.968960][ T4920] hpfs: filesystem error: improperly stopped [ 111.054928][ T4924] loop4: detected capacity change from 0 to 512 [ 111.097905][ T4920] hpfs: You really don't want any checks? You are crazy... [ 111.145806][ T4920] hpfs: hpfs_map_sector(): read error [ 111.168688][ T4920] hpfs: code page support is disabled [ 111.178120][ T4920] hpfs: hpfs_map_4sectors(): unaligned read [ 111.217340][ T4920] hpfs: hpfs_map_4sectors(): unaligned read [ 111.249827][ T4920] hpfs: filesystem error: unable to find root dir [ 111.388292][ T4920] hpfs: hpfs_map_4sectors(): unaligned read [ 111.425364][ T4920] hpfs: hpfs_map_sector(): read error [ 111.490352][ T4920] hpfs: hpfs_map_4sectors(): unaligned read [ 111.524617][ T4920] hpfs: hpfs_map_sector(): read error [ 111.654144][ T4920] hpfs: hpfs_map_4sectors(): unaligned read [ 111.713543][ T4920] hpfs: hpfs_map_sector(): read error [ 111.752058][ T4926] hpfs: hpfs_map_4sectors(): unaligned read [ 111.758537][ T4926] hpfs: hpfs_map_sector(): read error [ 111.889066][ T4929] loop0: detected capacity change from 0 to 512 [ 111.909063][ T4924] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 111.950180][ T4929] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 112.005844][ T4933] FAULT_INJECTION: forcing a failure. [ 112.005844][ T4933] name failslab, interval 1, probability 0, space 0, times 0 [ 112.043222][ T4933] CPU: 1 PID: 4933 Comm: syz.3.201 Not tainted syzkaller #0 [ 112.050577][ T4933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.060771][ T4933] Call Trace: [ 112.064090][ T4933] [ 112.067054][ T4933] dump_stack_lvl+0x188/0x250 [ 112.071772][ T4933] ? show_regs_print_info+0x20/0x20 [ 112.077094][ T4933] ? load_image+0x410/0x410 [ 112.081628][ T4933] ? __lock_acquire+0x7b50/0x7b50 [ 112.086702][ T4933] ? do_futex+0xdc2/0x12b0 [ 112.091154][ T4933] should_fail+0x383/0x4b0 [ 112.095617][ T4933] should_failslab+0x5/0x20 [ 112.100162][ T4933] slab_pre_alloc_hook+0x51/0xc0 [ 112.105347][ T4933] ? getname_flags+0xb7/0x4f0 [ 112.110180][ T4933] kmem_cache_alloc+0x3d/0x280 [ 112.115092][ T4933] getname_flags+0xb7/0x4f0 [ 112.119640][ T4933] do_sys_openat2+0xdd/0x500 [ 112.124352][ T4933] ? __lock_acquire+0x7b50/0x7b50 [ 112.129441][ T4933] ? do_sys_open+0xe0/0xe0 [ 112.133983][ T4933] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 112.140020][ T4933] ? lock_chain_count+0x20/0x20 [ 112.144931][ T4933] __x64_sys_openat+0x135/0x160 [ 112.149827][ T4933] do_syscall_64+0x4c/0xa0 [ 112.154278][ T4933] ? clear_bhb_loop+0x30/0x80 [ 112.158987][ T4933] ? clear_bhb_loop+0x30/0x80 [ 112.163786][ T4933] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.169711][ T4933] RIP: 0033:0x7fd73d20798e [ 112.174259][ T4933] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 112.193895][ T4933] RSP: 002b:00007fd73b49eb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 112.202355][ T4933] RAX: ffffffffffffffda RBX: 00007fd73b49f6c0 RCX: 00007fd73d20798e [ 112.210479][ T4933] RDX: 0000000000000002 RSI: 00007fd73b49ec00 RDI: ffffffffffffff9c [ 112.218597][ T4933] RBP: 00007fd73d2de06b R08: 0000000000000000 R09: 0000000000000000 [ 112.226602][ T4933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.234638][ T4933] R13: 00007fd73d4cf038 R14: 00007fd73d4cefa0 R15: 00007fffd0e8b2a8 [ 112.242761][ T4933] [ 112.541149][ T4942] netlink: 'syz.1.204': attribute type 10 has an invalid length. [ 112.853103][ T4942] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.959804][ T4942] device bridge_slave_1 left promiscuous mode [ 112.996074][ T4942] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.151772][ T4942] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 113.236569][ C1] Illegal XDP return value 16128, expect packet loss! [ 113.619285][ T4952] loop3: detected capacity change from 0 to 512 [ 114.473675][ T4959] loop2: detected capacity change from 0 to 512 [ 114.945897][ T4952] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 115.287371][ T4959] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 115.556809][ T4972] loop1: detected capacity change from 0 to 512 [ 115.680447][ T4978] netlink: 'syz.3.214': attribute type 4 has an invalid length. [ 115.765868][ T4972] EXT4-fs (loop1): Ignoring removed nobh option [ 115.780362][ T4981] netlink: 'syz.3.214': attribute type 4 has an invalid length. [ 116.005269][ T4972] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,bsdgroups,nobh,,errors=continue. Quota mode: writeback. [ 116.024066][ T4972] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.074383][ T4990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.215'. [ 116.446699][ T5003] loop1: detected capacity change from 0 to 512 [ 117.310596][ T5003] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 117.331132][ T5009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.220'. [ 117.376570][ T5009] netlink: 15 bytes leftover after parsing attributes in process `syz.3.220'. [ 117.411015][ T5010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.220'. [ 117.431965][ T5010] netlink: 15 bytes leftover after parsing attributes in process `syz.3.220'. [ 117.567618][ T5016] loop0: detected capacity change from 0 to 512 [ 118.469099][ T5016] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 118.616722][ T5020] FAULT_INJECTION: forcing a failure. [ 118.616722][ T5020] name failslab, interval 1, probability 0, space 0, times 0 [ 118.674393][ T5020] CPU: 0 PID: 5020 Comm: syz.4.222 Not tainted syzkaller #0 [ 118.681760][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.691848][ T5020] Call Trace: [ 118.695155][ T5020] [ 118.698117][ T5020] dump_stack_lvl+0x188/0x250 [ 118.702864][ T5020] ? show_regs_print_info+0x20/0x20 [ 118.708210][ T5020] ? load_image+0x410/0x410 [ 118.712761][ T5020] ? __lock_acquire+0x7b50/0x7b50 [ 118.717941][ T5020] should_fail+0x383/0x4b0 [ 118.722411][ T5020] should_failslab+0x5/0x20 [ 118.726953][ T5020] slab_pre_alloc_hook+0x51/0xc0 [ 118.731934][ T5020] kmem_cache_alloc_trace+0x47/0x290 [ 118.737368][ T5020] ? get_mountpoint+0x205/0x440 [ 118.742282][ T5020] get_mountpoint+0x205/0x440 [ 118.744046][ T5025] loop1: detected capacity change from 0 to 512 [ 118.747229][ T5020] lock_mount+0xb4/0x2a0 [ 118.757864][ T5020] ? mnt_warn_timestamp_expiry+0x12f/0x2c0 [ 118.763779][ T5020] do_new_mount+0x380/0xa40 [ 118.768440][ T5020] __se_sys_mount+0x2e3/0x3d0 [ 118.773171][ T5020] ? __x64_sys_mount+0xc0/0xc0 [ 118.777972][ T5020] ? lockdep_hardirqs_on+0x94/0x140 [ 118.783203][ T5020] ? __x64_sys_mount+0x1c/0xc0 [ 118.788115][ T5020] do_syscall_64+0x4c/0xa0 [ 118.792561][ T5020] ? clear_bhb_loop+0x30/0x80 [ 118.797270][ T5020] ? clear_bhb_loop+0x30/0x80 [ 118.801974][ T5020] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.807884][ T5020] RIP: 0033:0x7ff3e81c5159 [ 118.812314][ T5020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.832023][ T5020] RSP: 002b:00007ff3e641d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 118.840462][ T5020] RAX: ffffffffffffffda RBX: 00007ff3e844cfa0 RCX: 00007ff3e81c5159 [ 118.848450][ T5020] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 0000000000000000 [ 118.856440][ T5020] RBP: 00007ff3e825c06b R08: 0000000000000000 R09: 0000000000000000 [ 118.864441][ T5020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.872942][ T5020] R13: 00007ff3e844d038 R14: 00007ff3e844cfa0 R15: 00007ffd4f685468 [ 118.880947][ T5020] [ 118.973038][ T5025] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 120.002446][ T5036] loop4: detected capacity change from 0 to 512 [ 120.447919][ T5034] loop2: detected capacity change from 0 to 512 [ 120.761032][ T5034] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 120.790451][ T5036] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 120.979327][ T5042] loop3: detected capacity change from 0 to 512 [ 121.805917][ T5042] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 121.946866][ T5048] loop0: detected capacity change from 0 to 512 [ 122.948746][ T5048] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 123.230883][ T5061] loop3: detected capacity change from 0 to 512 [ 124.093866][ T5061] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 124.270348][ T26] audit: type=1800 audit(1790321929.366:5): pid=5068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.246" name=02 dev="sda1" ino=2048 res=0 errno=0 [ 124.474835][ T5078] loop2: detected capacity change from 0 to 164 [ 124.674711][ T5081] loop4: detected capacity change from 0 to 512 [ 125.579490][ T5081] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 125.856166][ T5085] loop1: detected capacity change from 0 to 512 [ 126.760335][ T5087] loop0: detected capacity change from 0 to 2048 [ 126.792713][ T5085] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 126.901877][ T5087] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 126.967242][ T5087] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.001881][ T5093] loop4: detected capacity change from 0 to 512 [ 127.119857][ T5093] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 127.250176][ T5096] loop3: detected capacity change from 0 to 512 [ 128.115060][ T5096] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 129.895030][ T5112] loop2: detected capacity change from 0 to 512 [ 130.726785][ T5112] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 131.042704][ T5105] loop3: detected capacity change from 0 to 512 [ 131.115030][ T5105] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 131.294439][ T5118] loop4: detected capacity change from 0 to 512 [ 132.040269][ T5118] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 132.218867][ T4234] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 133.714263][ T5126] loop2: detected capacity change from 0 to 512 [ 133.845923][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.852466][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.078471][ T5126] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 134.083387][ T5128] loop4: detected capacity change from 0 to 512 [ 134.164319][ T5136] FAULT_INJECTION: forcing a failure. [ 134.164319][ T5136] name failslab, interval 1, probability 0, space 0, times 0 [ 134.172960][ T4234] usb 1-1: device descriptor read/all, error -71 [ 134.184755][ T5136] CPU: 1 PID: 5136 Comm: syz.0.255 Not tainted syzkaller #0 [ 134.192618][ T5136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.202715][ T5136] Call Trace: [ 134.206024][ T5136] [ 134.208981][ T5136] dump_stack_lvl+0x188/0x250 [ 134.213812][ T5136] ? show_regs_print_info+0x20/0x20 [ 134.219067][ T5136] ? load_image+0x410/0x410 [ 134.223627][ T5136] ? __lock_acquire+0x7b50/0x7b50 [ 134.228699][ T5136] ? memset+0x1e/0x40 [ 134.232717][ T5136] ? lockdep_init_map_type+0x98/0x900 [ 134.238140][ T5136] should_fail+0x383/0x4b0 [ 134.242594][ T5136] should_failslab+0x5/0x20 [ 134.247136][ T5136] slab_pre_alloc_hook+0x51/0xc0 [ 134.252115][ T5136] kmem_cache_alloc_trace+0x47/0x290 [ 134.257438][ T5136] ? snd_seq_oss_timer_new+0x4d/0x220 [ 134.262859][ T5136] ? __raw_spin_lock_init+0x41/0x100 [ 134.268274][ T5136] snd_seq_oss_timer_new+0x4d/0x220 [ 134.273596][ T5136] snd_seq_oss_open+0x8ab/0xf00 [ 134.278691][ T5136] ? snd_seq_oss_delete_client+0x50/0x50 [ 134.284403][ T5136] ? __mutex_lock_common+0x435/0x2400 [ 134.289826][ T5136] ? mutex_lock_io_nested+0x60/0x60 [ 134.295129][ T5136] ? snd_seq_oss_process_event+0x2910/0x2910 [ 134.301125][ T5136] ? async_call_lookup_ports+0x10/0x10 [ 134.306601][ T5136] ? do_raw_spin_unlock+0x11d/0x230 [ 134.312294][ T5136] odev_open+0x63/0x90 [ 134.316487][ T5136] chrdev_open+0x585/0x5f0 [ 134.321004][ T5136] ? cd_forget+0x160/0x160 [ 134.325512][ T5136] ? fsnotify_perm+0x3a7/0x560 [ 134.330277][ T5136] ? cd_forget+0x160/0x160 [ 134.334893][ T5136] do_dentry_open+0x7f7/0xf90 [ 134.339578][ T5136] ? vfs_open+0x2b/0x80 [ 134.343752][ T5136] path_openat+0x2718/0x2fb0 [ 134.348365][ T5136] ? __kasan_slab_alloc+0xa9/0xc0 [ 134.353536][ T5136] ? do_filp_open+0x400/0x400 [ 134.358243][ T5136] do_filp_open+0x1df/0x400 [ 134.362860][ T5136] ? vfs_tmpfile+0x300/0x300 [ 134.367490][ T5136] ? _raw_spin_unlock+0x24/0x40 [ 134.372342][ T5136] ? alloc_fd+0x59e/0x650 [ 134.376678][ T5136] do_sys_openat2+0x14b/0x500 [ 134.381359][ T5136] ? __lock_acquire+0x7b50/0x7b50 [ 134.386569][ T5136] ? do_sys_open+0xe0/0xe0 [ 134.391015][ T5136] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 134.397021][ T5136] ? lock_chain_count+0x20/0x20 [ 134.401908][ T5136] __x64_sys_openat+0x135/0x160 [ 134.406788][ T5136] do_syscall_64+0x4c/0xa0 [ 134.411251][ T5136] ? clear_bhb_loop+0x30/0x80 [ 134.415952][ T5136] ? clear_bhb_loop+0x30/0x80 [ 134.420646][ T5136] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.426551][ T5136] RIP: 0033:0x7f0ae8e01159 [ 134.430976][ T5136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.450755][ T5136] RSP: 002b:00007f0ae7059028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 134.459363][ T5136] RAX: ffffffffffffffda RBX: 00007f0ae9088fa0 RCX: 00007f0ae8e01159 [ 134.467629][ T5136] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 134.475690][ T5136] RBP: 00007f0ae8e9806b R08: 0000000000000000 R09: 0000000000000000 [ 134.483768][ T5136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.491948][ T5136] R13: 00007f0ae9089038 R14: 00007f0ae9088fa0 R15: 00007ffe86ab5ad8 [ 134.500158][ T5136] [ 134.570102][ T5128] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 134.831275][ T5141] loop1: detected capacity change from 0 to 512 [ 135.478892][ T5136] ALSA: seq_oss: can't alloc timer [ 135.562886][ T5141] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 135.743440][ T5146] loop4: detected capacity change from 0 to 512 [ 136.571082][ T5146] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 136.829183][ T5156] loop1: detected capacity change from 0 to 512 [ 137.018156][ T5156] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 137.641223][ T5152] loop0: detected capacity change from 0 to 4096 [ 137.745534][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 137.904364][ T5166] loop1: detected capacity change from 0 to 512 [ 137.931114][ T5166] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 138.843135][ T5152] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 139.140362][ T5179] loop4: detected capacity change from 0 to 512 [ 139.168541][ T5179] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 139.969210][ T7] usb 4-1: device not accepting address 5, error -71 [ 140.343608][ T5191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.271'. [ 140.434082][ T5191] device syz_tun left promiscuous mode [ 140.439925][ T5191] bridge0: port 3(syz_tun) entered disabled state [ 140.637185][ T5201] device syzkaller0 entered promiscuous mode [ 141.373911][ T5214] loop1: detected capacity change from 0 to 512 [ 141.877748][ T5214] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 142.229664][ T5218] loop2: detected capacity change from 0 to 512 [ 142.911732][ T5218] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 143.239247][ T5222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.289'. [ 143.361088][ T5225] FAULT_INJECTION: forcing a failure. [ 143.361088][ T5225] name failslab, interval 1, probability 0, space 0, times 0 [ 143.412684][ T5225] CPU: 0 PID: 5225 Comm: syz.2.279 Not tainted syzkaller #0 [ 143.420050][ T5225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.430243][ T5225] Call Trace: [ 143.433549][ T5225] [ 143.436522][ T5225] dump_stack_lvl+0x188/0x250 [ 143.441243][ T5225] ? show_regs_print_info+0x20/0x20 [ 143.446490][ T5225] ? load_image+0x410/0x410 [ 143.451053][ T5225] should_fail+0x383/0x4b0 [ 143.455513][ T5225] should_failslab+0x5/0x20 [ 143.460052][ T5225] slab_pre_alloc_hook+0x51/0xc0 [ 143.465025][ T5225] __kmalloc_node_track_caller+0x68/0x3a0 [ 143.470982][ T5225] ? xfrm_alloc_compat+0x1a6/0x1340 [ 143.476219][ T5225] ? __alloc_skb+0xf4/0x750 [ 143.480884][ T5225] ? xfrm_alloc_compat+0x1a6/0x1340 [ 143.486126][ T5225] __alloc_skb+0x22c/0x750 [ 143.490716][ T5225] xfrm_alloc_compat+0x1a6/0x1340 [ 143.495800][ T5225] ? dump_one_policy+0xf10/0xf10 [ 143.500883][ T5225] xfrm_nlmsg_multicast+0xd0/0x1d0 [ 143.506171][ T5225] xfrm_send_acquire+0x95c/0xf70 [ 143.511308][ T5225] ? xfrm_send_state_notify+0x1bf0/0x1bf0 [ 143.517089][ T5225] km_query+0xe3/0x1d0 [ 143.521191][ T5225] xfrm_add_acquire+0x831/0xcb0 [ 143.526086][ T5225] xfrm_user_rcv_msg+0x694/0x980 [ 143.531185][ T5225] ? xfrm_netlink_rcv+0x90/0x90 [ 143.536075][ T5225] ? __mutex_lock_common+0x435/0x2400 [ 143.541480][ T5225] netlink_rcv_skb+0x1e9/0x430 [ 143.546620][ T5225] ? xfrm_netlink_rcv+0x66/0x90 [ 143.551485][ T5225] ? xfrm_netlink_rcv+0x90/0x90 [ 143.556342][ T5225] ? netlink_ack+0xb10/0xb10 [ 143.560965][ T5225] ? __lock_acquire+0x7b50/0x7b50 [ 143.566001][ T5225] xfrm_netlink_rcv+0x75/0x90 [ 143.570684][ T5225] netlink_unicast+0x78f/0x940 [ 143.575488][ T5225] netlink_sendmsg+0x8ba/0xbe0 [ 143.580461][ T5225] ? netlink_getsockopt+0x570/0x570 [ 143.585866][ T5225] ? aa_sock_msg_perm+0x94/0x150 [ 143.590840][ T5225] ? apparmor_socket_sendmsg+0x88/0x230 [ 143.596511][ T5225] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 143.601978][ T5225] ? security_socket_sendmsg+0x7c/0xa0 [ 143.607449][ T5225] ? netlink_getsockopt+0x570/0x570 [ 143.612683][ T5225] ____sys_sendmsg+0x5be/0x8f0 [ 143.617485][ T5225] ? __sys_sendmsg_sock+0x30/0x30 [ 143.622527][ T5225] ? import_iovec+0x6f/0xa0 [ 143.627040][ T5225] ___sys_sendmsg+0x236/0x2e0 [ 143.631984][ T5225] ? __sys_sendmsg+0x290/0x290 [ 143.636972][ T5225] __se_sys_sendmsg+0x1b7/0x2a0 [ 143.642037][ T5225] ? __x64_sys_sendmsg+0x80/0x80 [ 143.647000][ T5225] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 143.653019][ T5225] ? lockdep_hardirqs_on+0x94/0x140 [ 143.660399][ T5225] do_syscall_64+0x4c/0xa0 [ 143.665166][ T5225] ? clear_bhb_loop+0x30/0x80 [ 143.670029][ T5225] ? clear_bhb_loop+0x30/0x80 [ 143.676324][ T5225] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.682262][ T5225] RIP: 0033:0x7fa022c62159 [ 143.686775][ T5225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.706477][ T5225] RSP: 002b:00007fa020eba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.715015][ T5225] RAX: ffffffffffffffda RBX: 00007fa022ee9fa0 RCX: 00007fa022c62159 [ 143.723221][ T5225] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 143.731301][ T5225] RBP: 00007fa022cf906b R08: 0000000000000000 R09: 0000000000000000 [ 143.739290][ T5225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.747406][ T5225] R13: 00007fa022eea038 R14: 00007fa022ee9fa0 R15: 00007fff4f9ec7a8 [ 143.755628][ T5225] [ 145.383737][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.391378][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.457820][ T5233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.522964][ T5233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.568743][ T5233] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.599335][ T5233] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.642655][ T5233] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.651590][ T5233] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.157693][ T5286] binder: BINDER_SET_CONTEXT_MGR already set [ 149.186656][ T5286] binder: 5285:5286 ioctl 4018620d 200000000040 returned -16 [ 149.626284][ T5294] loop1: detected capacity change from 0 to 512 [ 150.486832][ T4215] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.519115][ T5294] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 150.706748][ T5300] loop4: detected capacity change from 0 to 128 [ 150.722180][ T4215] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.946460][ T4215] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.111576][ T5311] loop2: detected capacity change from 0 to 512 [ 152.010437][ T5311] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 152.138590][ T4215] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.921409][ T5332] device syzkaller0 entered promiscuous mode [ 153.052243][ T5346] loop4: detected capacity change from 0 to 512 [ 153.958884][ T5346] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 154.013048][ T4896] Bluetooth: hci1: command 0x0409 tx timeout [ 154.180370][ T5349] netlink: 'syz.2.313': attribute type 1 has an invalid length. [ 154.235961][ T5352] batman_adv: Cannot find parent device [ 154.287737][ T5307] chnl_net:caif_netlink_parms(): no params data found [ 154.808812][ T5377] loop3: detected capacity change from 0 to 512 [ 155.130708][ T5307] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.216107][ T5307] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.325626][ T5307] device bridge_slave_0 entered promiscuous mode [ 155.429801][ T5307] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.501420][ T5307] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.572119][ T5307] device bridge_slave_1 entered promiscuous mode [ 155.688317][ T5377] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 155.756996][ T5307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.799794][ T5307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.964724][ T5386] loop4: detected capacity change from 0 to 128 [ 156.075441][ T5307] team0: Port device team_slave_0 added [ 156.101254][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 156.159879][ T5307] team0: Port device team_slave_1 added [ 156.264795][ T5307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.271902][ T5307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.411681][ T5307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.487162][ T5307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.534843][ T5307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.683364][ T5307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.723315][ T5412] syz.3.324 uses obsolete (PF_INET,SOCK_PACKET) [ 156.850022][ T5307] device hsr_slave_0 entered promiscuous mode [ 156.883611][ T5307] device hsr_slave_1 entered promiscuous mode [ 156.891208][ T5307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.932956][ T5307] Cannot create hsr debugfs directory [ 157.377719][ T5428] loop4: detected capacity change from 0 to 512 [ 158.191562][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 158.215796][ T5428] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 158.633436][ T5307] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 158.704871][ T5307] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 158.736245][ T5307] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 158.779383][ T5307] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 158.796931][ C0] ================================================================== [ 158.805782][ C0] BUG: KASAN: use-after-free in __nft_trace_packet+0x135/0x150 [ 158.813548][ C0] Read of size 2 at addr ffff88807e9fe580 by task ksoftirqd/0/14 [ 158.821408][ C0] [ 158.823766][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 158.831197][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.841289][ C0] Call Trace: [ 158.844597][ C0] [ 158.847816][ C0] dump_stack_lvl+0x188/0x250 [ 158.852544][ C0] ? show_regs_print_info+0x20/0x20 [ 158.862045][ C0] ? _printk+0xda/0x130 [ 158.866248][ C0] ? __nft_trace_packet+0x135/0x150 [ 158.871583][ C0] ? load_image+0x410/0x410 [ 158.876135][ C0] print_address_description+0x60/0x2d0 [ 158.881810][ C0] ? __nft_trace_packet+0x135/0x150 [ 158.887057][ C0] kasan_report+0xdf/0x130 [ 158.891512][ C0] ? __nft_trace_packet+0x135/0x150 [ 158.896736][ C0] ? deref_stack_reg+0xd0/0x120 [ 158.901795][ C0] __nft_trace_packet+0x135/0x150 [ 158.906859][ C0] nft_do_chain+0x1299/0x14d0 [ 158.911581][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 158.917776][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 158.923737][ C0] ? __local_bh_enable_ip+0xd7/0x1c0 [ 158.929086][ C0] ? ipv6_find_tlv+0x270/0x270 [ 158.933909][ C0] nft_do_chain_inet+0x25c/0x340 [ 158.939261][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 158.945042][ C0] ? nf_nat_ipv6_fn+0x223/0x2e0 [ 158.950123][ C0] ? nf_nat_ipv6_local_fn+0x3a0/0x3a0 [ 158.955929][ C0] ? nf_nat_ipv6_fn+0x223/0x2e0 [ 158.960948][ C0] ? lock_downgrade+0x7e0/0x830 [ 158.966196][ C0] ? nf_nat_ipv6_local_fn+0x3a0/0x3a0 [ 158.971930][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 158.976828][ C0] nf_hook_slow+0xb9/0x200 [ 158.981294][ C0] ? ip6_input+0xa0/0xa0 [ 158.985557][ C0] NF_HOOK+0x1f2/0x390 [ 158.989833][ C0] ? ip6_input+0xa0/0xa0 [ 158.994114][ C0] ? ip6_rcv_core+0x1600/0x1600 [ 158.998988][ C0] ? ip6_input+0xa0/0xa0 [ 159.003338][ C0] ? ip6_rcv_finish_core+0x20d/0x420 [ 159.008648][ C0] ? ip6_rcv_finish+0x16b/0x240 [ 159.013518][ C0] ? refcount_add+0x80/0x80 [ 159.018142][ C0] NF_HOOK+0x303/0x390 [ 159.022234][ C0] ? refcount_add+0x80/0x80 [ 159.026856][ C0] ? ip6_rcv_core+0x1600/0x1600 [ 159.031749][ C0] ? refcount_add+0x80/0x80 [ 159.036289][ C0] ? ip6_rcv_finish_core+0x420/0x420 [ 159.041600][ C0] __netif_receive_skb+0xcc/0x290 [ 159.046669][ C0] process_backlog+0x366/0x770 [ 159.051485][ C0] ? rps_trigger_softirq+0x210/0x210 [ 159.056800][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 159.062897][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 159.068585][ C0] ? lock_chain_count+0x20/0x20 [ 159.073571][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 159.078815][ C0] __napi_poll+0xbb/0x430 [ 159.083279][ C0] net_rx_action+0x522/0xa80 [ 159.087927][ C0] ? net_tx_action+0x880/0x880 [ 159.092763][ C0] ? detach_timer+0x2b0/0x2b0 [ 159.097492][ C0] handle_softirqs+0x336/0x830 [ 159.102291][ C0] ? run_ksoftirqd+0xa4/0x100 [ 159.107040][ C0] ? do_softirq+0x210/0x210 [ 159.111604][ C0] ? run_ksoftirqd+0x81/0x100 [ 159.116328][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 159.121573][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 159.126917][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 159.132381][ C0] run_ksoftirqd+0xa4/0x100 [ 159.137090][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 159.142323][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 159.147725][ C0] ? smpboot_thread_fn+0x5d9/0x990 [ 159.152872][ C0] smpboot_thread_fn+0x520/0x990 [ 159.157952][ C0] kthread+0x42e/0x520 [ 159.162158][ C0] ? cpu_report_death+0x180/0x180 [ 159.167229][ C0] ? kthread_blkcg+0xd0/0xd0 [ 159.171965][ C0] ret_from_fork+0x1f/0x30 [ 159.176452][ C0] [ 159.179525][ C0] [ 159.181873][ C0] Allocated by task 14: [ 159.186042][ C0] __kasan_slab_alloc+0x92/0xc0 [ 159.190922][ C0] slab_post_alloc_hook+0x4c/0x380 [ 159.196180][ C0] kmem_cache_alloc_node+0x184/0x2c0 [ 159.201597][ C0] __alloc_skb+0xf4/0x750 [ 159.206046][ C0] synproxy_send_client_synack_ipv6+0x169/0xc20 [ 159.212325][ C0] nft_synproxy_eval_v6+0x35f/0x4e0 [ 159.217562][ C0] nft_synproxy_do_eval+0x3ca/0x550 [ 159.222777][ C0] nft_do_chain+0x491/0x14d0 [ 159.227390][ C0] nft_do_chain_inet+0x25c/0x340 [ 159.232347][ C0] nf_hook_slow+0xb9/0x200 [ 159.236910][ C0] NF_HOOK+0x1f2/0x390 [ 159.241027][ C0] NF_HOOK+0x303/0x390 [ 159.245134][ C0] __netif_receive_skb+0xcc/0x290 [ 159.250595][ C0] process_backlog+0x366/0x770 [ 159.255417][ C0] __napi_poll+0xbb/0x430 [ 159.259798][ C0] net_rx_action+0x522/0xa80 [ 159.264572][ C0] handle_softirqs+0x336/0x830 [ 159.269397][ C0] run_ksoftirqd+0xa4/0x100 [ 159.273940][ C0] smpboot_thread_fn+0x520/0x990 [ 159.278923][ C0] kthread+0x42e/0x520 [ 159.283026][ C0] ret_from_fork+0x1f/0x30 [ 159.287475][ C0] [ 159.289822][ C0] Freed by task 14: [ 159.293650][ C0] kasan_set_track+0x4b/0x70 [ 159.298420][ C0] kasan_set_free_info+0x1f/0x40 [ 159.303412][ C0] ____kasan_slab_free+0xd5/0x110 [ 159.308681][ C0] slab_free_freelist_hook+0xec/0x170 [ 159.314100][ C0] kmem_cache_free+0x8f/0x210 [ 159.318811][ C0] nft_synproxy_eval_v6+0x367/0x4e0 [ 159.324041][ C0] nft_synproxy_do_eval+0x3ca/0x550 [ 159.329278][ C0] nft_do_chain+0x491/0x14d0 [ 159.333904][ C0] nft_do_chain_inet+0x25c/0x340 [ 159.338872][ C0] nf_hook_slow+0xb9/0x200 [ 159.343322][ C0] NF_HOOK+0x1f2/0x390 [ 159.347518][ C0] NF_HOOK+0x303/0x390 [ 159.351603][ C0] __netif_receive_skb+0xcc/0x290 [ 159.356650][ C0] process_backlog+0x366/0x770 [ 159.361444][ C0] __napi_poll+0xbb/0x430 [ 159.365820][ C0] net_rx_action+0x522/0xa80 [ 159.370716][ C0] handle_softirqs+0x336/0x830 [ 159.375527][ C0] run_ksoftirqd+0xa4/0x100 [ 159.380056][ C0] smpboot_thread_fn+0x520/0x990 [ 159.385029][ C0] kthread+0x42e/0x520 [ 159.389135][ C0] ret_from_fork+0x1f/0x30 [ 159.393831][ C0] [ 159.396174][ C0] The buggy address belongs to the object at ffff88807e9fe500 [ 159.396174][ C0] which belongs to the cache skbuff_head_cache of size 232 [ 159.410954][ C0] The buggy address is located 128 bytes inside of [ 159.410954][ C0] 232-byte region [ffff88807e9fe500, ffff88807e9fe5e8) [ 159.424341][ C0] The buggy address belongs to the page: [ 159.429992][ C0] page:ffffea0001fa7f80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e9fe [ 159.440159][ C0] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 159.447744][ C0] raw: 00fff00000000200 0000000000000000 0000000b00000001 ffff888144bf0140 [ 159.456352][ C0] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 159.464949][ C0] page dumped because: kasan: bad access detected [ 159.471374][ C0] page_owner tracks the page as allocated [ 159.477103][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 4841, ts 103752352138, free_ts 103664589043 [ 159.494874][ C0] get_page_from_freelist+0x24f6/0x2670 [ 159.500470][ C0] __alloc_pages+0x1ee/0x480 [ 159.505086][ C0] new_slab+0xc0/0x4b0 [ 159.509191][ C0] ___slab_alloc+0x807/0xdd0 [ 159.513823][ C0] kmem_cache_alloc+0xf0/0x280 [ 159.518624][ C0] skb_clone+0x1bd/0x350 [ 159.522910][ C0] ip_mc_output+0x228/0x5d0 [ 159.527449][ C0] ip_send_skb+0x12b/0x1d0 [ 159.532074][ C0] udp_send_skb+0x93f/0x1330 [ 159.536865][ C0] udp_sendmsg+0x1ac7/0x2350 [ 159.541507][ C0] ____sys_sendmsg+0x5be/0x8f0 [ 159.546404][ C0] ___sys_sendmsg+0x236/0x2e0 [ 159.551205][ C0] __sys_sendmmsg+0x2ba/0x500 [ 159.556104][ C0] __x64_sys_sendmmsg+0x9c/0xb0 [ 159.560980][ C0] do_syscall_64+0x4c/0xa0 [ 159.565418][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.571342][ C0] page last free stack trace: [ 159.576046][ C0] free_unref_page_prepare+0x637/0x6c0 [ 159.581554][ C0] free_unref_page_list+0x119/0x830 [ 159.586882][ C0] release_pages+0x185f/0x1bd0 [ 159.592136][ C0] tlb_finish_mmu+0x1b4/0x370 [ 159.597046][ C0] exit_mmap+0x3d0/0x640 [ 159.601909][ C0] __mmput+0x115/0x390 [ 159.606022][ C0] exit_mm+0x632/0x7b0 [ 159.610379][ C0] do_exit+0x5b8/0x2110 [ 159.614582][ C0] do_group_exit+0x12c/0x2f0 [ 159.619214][ C0] get_signal+0x7eb/0x12e0 [ 159.623674][ C0] arch_do_signal_or_restart+0xe6/0x12a0 [ 159.629583][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 159.635016][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 159.640664][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 159.646252][ C0] do_syscall_64+0x58/0xa0 [ 159.650709][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.656635][ C0] [ 159.658988][ C0] Memory state around the buggy address: [ 159.664836][ C0] ffff88807e9fe480: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 159.673176][ C0] ffff88807e9fe500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 159.681278][ C0] >ffff88807e9fe580: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 159.689407][ C0] ^ [ 159.693608][ C0] ffff88807e9fe600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 159.701700][ C0] ffff88807e9fe680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 159.709782][ C0] ================================================================== [ 159.717866][ C0] Disabling lock debugging due to kernel taint [ 159.724169][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 159.731474][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G B syzkaller #0 [ 159.740313][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.750420][ C0] Call Trace: [ 159.753822][ C0] [ 159.756785][ C0] dump_stack_lvl+0x188/0x250 [ 159.761486][ C0] ? show_regs_print_info+0x20/0x20 [ 159.766878][ C0] ? load_image+0x410/0x410 [ 159.771410][ C0] panic+0x2f8/0x850 [ 159.775340][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 159.779900][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 159.786333][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 159.792361][ C0] ? _raw_spin_unlock+0x40/0x40 [ 159.797379][ C0] ? print_memory_metadata+0x314/0x400 [ 159.802888][ C0] ? __nft_trace_packet+0x135/0x150 [ 159.808128][ C0] check_panic_on_warn+0x80/0xa0 [ 159.813106][ C0] ? __nft_trace_packet+0x135/0x150 [ 159.818522][ C0] end_report+0x6d/0xf0 [ 159.822713][ C0] kasan_report+0x102/0x130 [ 159.827422][ C0] ? __nft_trace_packet+0x135/0x150 [ 159.832649][ C0] ? deref_stack_reg+0xd0/0x120 [ 159.837535][ C0] __nft_trace_packet+0x135/0x150 [ 159.842592][ C0] nft_do_chain+0x1299/0x14d0 [ 159.847274][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 159.853381][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 159.859289][ C0] ? __local_bh_enable_ip+0xd7/0x1c0 [ 159.864606][ C0] ? ipv6_find_tlv+0x270/0x270 [ 159.869402][ C0] nft_do_chain_inet+0x25c/0x340 [ 159.874376][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 159.879220][ C0] ? nf_nat_ipv6_fn+0x223/0x2e0 [ 159.884254][ C0] ? nf_nat_ipv6_local_fn+0x3a0/0x3a0 [ 159.889820][ C0] ? nf_nat_ipv6_fn+0x223/0x2e0 [ 159.894689][ C0] ? lock_downgrade+0x7e0/0x830 [ 159.899566][ C0] ? nf_nat_ipv6_local_fn+0x3a0/0x3a0 [ 159.904953][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 159.909830][ C0] nf_hook_slow+0xb9/0x200 [ 159.914251][ C0] ? ip6_input+0xa0/0xa0 [ 159.918495][ C0] NF_HOOK+0x1f2/0x390 [ 159.922572][ C0] ? ip6_input+0xa0/0xa0 [ 159.926818][ C0] ? ip6_rcv_core+0x1600/0x1600 [ 159.931684][ C0] ? ip6_input+0xa0/0xa0 [ 159.935924][ C0] ? ip6_rcv_finish_core+0x20d/0x420 [ 159.941213][ C0] ? ip6_rcv_finish+0x16b/0x240 [ 159.946105][ C0] ? refcount_add+0x80/0x80 [ 159.950623][ C0] NF_HOOK+0x303/0x390 [ 159.954702][ C0] ? refcount_add+0x80/0x80 [ 159.959205][ C0] ? ip6_rcv_core+0x1600/0x1600 [ 159.964583][ C0] ? refcount_add+0x80/0x80 [ 159.969201][ C0] ? ip6_rcv_finish_core+0x420/0x420 [ 159.974494][ C0] __netif_receive_skb+0xcc/0x290 [ 159.979525][ C0] process_backlog+0x366/0x770 [ 159.984489][ C0] ? rps_trigger_softirq+0x210/0x210 [ 159.989977][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 159.996004][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 160.001559][ C0] ? lock_chain_count+0x20/0x20 [ 160.006432][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 160.011717][ C0] __napi_poll+0xbb/0x430 [ 160.016310][ C0] net_rx_action+0x522/0xa80 [ 160.020900][ C0] ? net_tx_action+0x880/0x880 [ 160.025739][ C0] ? detach_timer+0x2b0/0x2b0 [ 160.030599][ C0] handle_softirqs+0x336/0x830 [ 160.035360][ C0] ? run_ksoftirqd+0xa4/0x100 [ 160.040033][ C0] ? do_softirq+0x210/0x210 [ 160.044527][ C0] ? run_ksoftirqd+0x81/0x100 [ 160.049196][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 160.054388][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 160.059967][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 160.065156][ C0] run_ksoftirqd+0xa4/0x100 [ 160.069735][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 160.074922][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 160.080282][ C0] ? smpboot_thread_fn+0x5d9/0x990 [ 160.085411][ C0] smpboot_thread_fn+0x520/0x990 [ 160.090435][ C0] kthread+0x42e/0x520 [ 160.094676][ C0] ? cpu_report_death+0x180/0x180 [ 160.099689][ C0] ? kthread_blkcg+0xd0/0xd0 [ 160.104263][ C0] ret_from_fork+0x1f/0x30 [ 160.108848][ C0] [ 160.112076][ C0] Kernel Offset: disabled [ 160.116417][ C0] Rebooting in 86400 seconds..