last executing test programs: 5.775961441s ago: executing program 4 (id=77): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x31cf, &(0x7f0000000040)={0x0, 0x5000, 0x400, 0x0, 0x1005}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) close(0x3) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000041c0)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x11}}}, &(0x7f0000000300)) 5.677477767s ago: executing program 4 (id=82): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 5.6367918s ago: executing program 4 (id=85): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 5.608129493s ago: executing program 4 (id=87): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x1, 0x4fb, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040)) 5.453265924s ago: executing program 4 (id=92): openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r0 = io_uring_setup(0x640e, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 4.159195776s ago: executing program 4 (id=154): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x1, 0x0, &(0x7f0000000100)=[{0x18, 0xf}]}) 4.102319509s ago: executing program 32 (id=154): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x1, 0x0, &(0x7f0000000100)=[{0x18, 0xf}]}) 1.390933535s ago: executing program 2 (id=229): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/kernel/ns_last_pid\x00', 0x202, 0x0) write(r0, 0x0, 0x0) 1.311077104s ago: executing program 3 (id=232): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 1.289913924s ago: executing program 2 (id=233): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) shutdown(r0, 0x1) 1.193904057s ago: executing program 3 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, 0x0) 1.161288888s ago: executing program 3 (id=238): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r0, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 1.13099656s ago: executing program 2 (id=239): setns(0xc9, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='tz']) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9", 0x2f}, 0x1, 0x0, 0x0, 0x810}, 0x24004014) 1.000852012s ago: executing program 3 (id=241): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x401, @local, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x20040041, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x20}, 0xfffffffe}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0), &(0x7f00000003c0)=0x8) 971.308939ms ago: executing program 2 (id=243): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xbc}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_POISON(r0, 0xc020aa08, 0x0) 903.492643ms ago: executing program 3 (id=246): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x84000, 0x0) 853.509902ms ago: executing program 3 (id=247): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, 0x2004}, 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000080)=0x3, 0x4) recvfrom$l2tp(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 711.726514ms ago: executing program 0 (id=254): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) 693.677471ms ago: executing program 0 (id=256): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) mbind(&(0x7f0000543000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f000094f000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0) 482.883132ms ago: executing program 1 (id=265): r0 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x10000, 0x2, 0xf5}, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r0, 0x8000000) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) getsockopt$nfc_llcp(r1, 0x118, 0x2, &(0x7f00000000c0)=""/247, 0xf7) 454.35033ms ago: executing program 5 (id=266): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x201, 0x4) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 450.961031ms ago: executing program 0 (id=267): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) socket$kcm(0x2, 0x1, 0x84) 432.345305ms ago: executing program 1 (id=268): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x5, 0x74, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x18, 0x4, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xf, 0x93b}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "79e6f44d530dc1a2bbb526931e89c384"}, @mss={0x2, 0x4, 0x3}, @fastopen={0x22, 0x12, "00045900e16c156eca2887ae44c1e862"}, @window={0x3, 0x3, 0x80}, @md5sig={0x13, 0x12, 'G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}]}}}}}}}, 0x0) 411.042288ms ago: executing program 0 (id=269): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private2, @in=@local, 0x4e28, 0x0, 0x4, 0xf000, 0x2}, {0xffffffffffffffff, 0x802, 0x913e, 0x0, 0xfffffffffffffffc, 0xfffffffffffff207, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x3, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@empty, 0x4d2, 0x33}, 0x0, @in=@multicast1, 0x3507, 0x0, 0x2, 0x4, 0x4, 0xfffffffe, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 398.013422ms ago: executing program 5 (id=270): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 383.621902ms ago: executing program 1 (id=271): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x2e9, &(0x7f0000000840)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x7, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0xea9}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001d80)=@newsa={0x138, 0x10, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x1, 0x714, 0x4e23, 0x405, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xfffffffffffffffb, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 351.776673ms ago: executing program 0 (id=272): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3}, {0x8}, {0x2, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x5, 0x401, 0x0, 0x9, 0x18, 0x1, 0x80, 0x7000000, 0x5, 0x8, 0x9, 0x8, 0xd8c, 0x10f8000, 0x1, 0x4, 0x6, 0xf, 0x7ff, 0x1, 0x88d, 0x8, 0xfffffff9, 0x7, 0x6, 0x7f, 0x8, 0xc824, 0x4, 0xe3, 0x6, 0x0, 0x7, 0x7, 0xe, 0x101, 0xf, 0x0, 0x7, 0x8, 0x6, 0x4, 0x3, 0x6, 0xe55, 0x5, 0x4b19, 0x8, 0x8, 0xc5c, 0x9, 0x3, 0x5, 0x8001, 0xfffffff8, 0x9, 0x5, 0x9, 0xc, 0x8, 0xfffffffa, 0xfffffff7, 0x3, 0x6a41, 0xffffffff, 0xf, 0x4, 0x3ff, 0x7f, 0x3, 0x81, 0x10, 0x3, 0x400, 0x9, 0x7ff, 0x5, 0x40, 0x2, 0x2e, 0x0, 0x1, 0x5, 0xcf9, 0x2, 0x0, 0x4, 0x4, 0x4, 0x4, 0x3, 0x7ff, 0x5, 0x0, 0x3, 0x2, 0x6, 0x5, 0xfffff000, 0x2, 0x6, 0x1, 0x8, 0x80000000, 0x800, 0x9, 0x6, 0x2, 0x0, 0x80, 0x3, 0xfffffffd, 0xfff, 0x7f, 0x7, 0x2, 0x7, 0x1, 0x89c, 0x9fae562, 0x6, 0x5, 0xff, 0x7, 0x401, 0x800, 0x6, 0x9, 0x7, 0x3ff, 0x800, 0x2, 0x3, 0x6, 0xc71, 0x81, 0x80000000, 0x3ff, 0x8, 0x7, 0x0, 0x7, 0x200, 0x2, 0x7, 0x8000, 0xe265, 0x7fffffff, 0x0, 0x0, 0x2e, 0xc, 0x6, 0x20, 0xc88f, 0x2, 0xffffffff, 0x6, 0x5, 0x8000, 0xe, 0x1, 0x6, 0x8, 0x990, 0x800, 0x5, 0x7, 0x1, 0xfffffffa, 0xb, 0x9, 0x2, 0x7ff, 0x8000, 0x5, 0x6, 0x10000, 0xd41b, 0x7, 0xf, 0x40004, 0xf918, 0x7f, 0x3, 0x8, 0x2, 0x140, 0x0, 0xff, 0xb, 0x4, 0x96a3, 0x1, 0x8001, 0x7, 0x4, 0x4000001, 0xfffffffe, 0x6, 0x9, 0x3, 0x5, 0x631, 0x8001, 0x3, 0x10001, 0x44c, 0x5827, 0xa99, 0x3, 0x400, 0x5, 0x8, 0x7, 0x10000000, 0x3, 0x3, 0x0, 0x1d99, 0x3, 0x4, 0x0, 0x4ebe3ccc, 0x1, 0x3, 0x10000000, 0x7, 0x8, 0x4, 0x9, 0x7, 0x4, 0x5, 0x7, 0x0, 0xfffffff9, 0xffff, 0x81, 0x9, 0x6, 0x3, 0x19f2, 0x3, 0xe, 0x4259, 0x7, 0x4, 0x81, 0x58783dd6, 0xed2, 0x5, 0x5, 0x9]}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x800, 0x2, 0xa, 0xbc2, 0x1ff, 0x10, 0x4, 0x8, 0x4, 0x4, 0x6, 0xff, 0x2b45, 0x1, 0x0, 0x6, 0x1, 0x5, 0x552a, 0x9, 0x1, 0x8, 0x3ff, 0x9, 0x9, 0x1000, 0x4, 0x5fdb, 0x1ff, 0x2, 0x10000, 0x7, 0x4, 0x9, 0xfff, 0x10000, 0x10000, 0xd6, 0xfffffff8, 0x8, 0x8001, 0x80000000, 0x32, 0xe, 0x3, 0x0, 0x0, 0x1, 0x10001, 0x481, 0x9, 0xffffff46, 0x8, 0x9, 0x90d3, 0xffff177f, 0x7, 0x0, 0xb099, 0x3, 0x1, 0xff, 0xfffffff2, 0x10, 0xc, 0xfd, 0x101, 0x7, 0x0, 0x0, 0x2, 0x0, 0x3, 0x81, 0xd, 0x3, 0x3, 0x6, 0x6e, 0x90, 0x3, 0x8000, 0xe, 0x9, 0x401, 0xb879, 0x8, 0x8, 0x1, 0x2, 0x80000001, 0xbb4f, 0x2, 0x1, 0x5, 0x1b2, 0xbc, 0x2, 0x2, 0x44bd, 0x2, 0x5, 0x3, 0x8, 0x57e, 0x3, 0x5c5, 0x7, 0x10000, 0x8000009, 0x1, 0x5, 0x1, 0xc9f, 0x8, 0xd, 0x7, 0x6, 0x34, 0x400, 0x2, 0x0, 0x3, 0x4, 0x9, 0x9, 0xb7, 0xfffffffb, 0x7fffffff, 0x401, 0x6, 0x0, 0xb, 0x5, 0xfffffffa, 0x6, 0xf8d, 0xfffff907, 0x5d54156, 0x6, 0x2, 0x40, 0x101, 0x3, 0x1, 0x10001, 0xd141, 0x9, 0x2, 0x2, 0x8, 0x5, 0x9, 0x7, 0xb2, 0x50a6c46e, 0x3, 0x10001, 0x5, 0x1, 0x816, 0x6, 0xbdf2, 0x5, 0x2, 0x5, 0x8, 0x9, 0x8, 0xffffffff, 0x6, 0x484, 0xa24, 0xffffffa1, 0x4a, 0x3, 0x5, 0x7fffffff, 0x1, 0x7, 0x6, 0x1, 0x80000000, 0x3, 0x3, 0x9, 0x854, 0x3ff, 0x56, 0x3, 0x1, 0xf, 0xfd0, 0x7, 0x40, 0x4fb, 0x8, 0x5, 0x80, 0xb36, 0x1, 0x3, 0x5, 0x2, 0x4, 0x8, 0xffffffff, 0x2, 0x4, 0x9, 0xb, 0xccf1, 0x4902, 0x6, 0x7, 0x4, 0x7a, 0x7, 0xfffffffa, 0x8e1, 0x0, 0x0, 0x2aeb00d5, 0xfff, 0x60000000, 0x9, 0x9ec, 0x8, 0x2, 0x1, 0x0, 0x1, 0x7, 0x1, 0x8, 0x101, 0xfffffffd, 0x1, 0x1, 0x4, 0x1000000, 0x10000, 0xffff, 0x5, 0xffffffff, 0x6, 0x4, 0x0, 0x3, 0x3, 0x4, 0x0, 0x9, 0x400, 0x9]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 350.145844ms ago: executing program 1 (id=273): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x40800) 331.098361ms ago: executing program 5 (id=274): unshare(0x60600) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x478, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3e0, 0x3c8, 0x3c8, 0x3e0, 0x3c8, 0x3, 0x0, {[{{@ip={@remote, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {0x5c00000000000000}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x5, 0x1, 0x6, 0x1, 0x7, 0x2], 0x6, 0x7}, {0xffffffffffffffff, [0x4, 0x4, 0x2, 0x5, 0x8], 0x6, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4d8) 255.227978ms ago: executing program 5 (id=275): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000002c0)=[{0x2, 0x5, 0x21, 0xfffff031}, {0x5, 0x2, 0xb5, 0x8e49}]}, 0x10) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x400261f3, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 235.960632ms ago: executing program 5 (id=276): syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 142.879506ms ago: executing program 5 (id=277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 113.89819ms ago: executing program 2 (id=278): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) wait4(r0, 0x0, 0x2000000a, 0x0) 75.997406ms ago: executing program 0 (id=279): syz_read_part_table(0x1054, &(0x7f0000001080)="$eJzsz7GNwkAUBNBZy/Zd6BLuSjEpZIiIZpCoxQE05ioQyAYHLgBB8F6w0syu9uuHjypJmqTUS1GtLtv162Y+p3J72/8kp7//9txXye+zTd9l2MwxxynvSi59m9I14+uLcbgvY+ocru/fEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+3yMAAP//ZWIKwg==") openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 53.316495ms ago: executing program 1 (id=280): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) 12.128765ms ago: executing program 1 (id=281): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbda468a675b38b2a8d000008000300", @ANYRES32=r3, @ANYBLOB="24002f80"], 0x40}, 0x1, 0x0, 0x0, 0xc0c5}, 0x4000014) 0s ago: executing program 2 (id=282): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. [ 29.908679][ T4695] cgroup: Unknown subsys name 'net' [ 30.039819][ T4695] cgroup: Unknown subsys name 'cpuset' [ 30.041120][ T4695] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.244457][ T4695] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 31.856753][ T4721] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.857191][ T4722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.857728][ T4722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.858289][ T4722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.858498][ T4722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.858728][ T4722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.859224][ T4721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.859332][ T4721] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.860507][ T4722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.860684][ T4722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.861032][ T4721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.861577][ T4721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.862289][ T4709] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.862563][ T4721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.862764][ T4721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.870308][ T4721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.870614][ T4721] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.880183][ T4721] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.881635][ T4721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.883481][ T4721] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.883732][ T4721] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.884129][ T4721] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.885538][ T4713] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.886974][ T4713] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.888404][ T4713] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 32.270977][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.271269][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.271402][ T4706] bridge_slave_0: entered allmulticast mode [ 32.271901][ T4706] bridge_slave_0: entered promiscuous mode [ 32.273184][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.273208][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.273258][ T4706] bridge_slave_1: entered allmulticast mode [ 32.273698][ T4706] bridge_slave_1: entered promiscuous mode [ 32.281815][ T4706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.282777][ T4706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.290693][ T4706] team0: Port device team_slave_0 added [ 32.294437][ T4706] team0: Port device team_slave_1 added [ 32.303489][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.303500][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.303511][ T4706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.304383][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.304390][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.304402][ T4706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.315981][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.316063][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.316124][ T4707] bridge_slave_0: entered allmulticast mode [ 32.316567][ T4707] bridge_slave_0: entered promiscuous mode [ 32.330824][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.330885][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.330944][ T4707] bridge_slave_1: entered allmulticast mode [ 32.331388][ T4707] bridge_slave_1: entered promiscuous mode [ 32.355473][ T4706] hsr_slave_0: entered promiscuous mode [ 32.355837][ T4706] hsr_slave_1: entered promiscuous mode [ 32.356938][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.368619][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.368679][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.368769][ T4710] bridge_slave_0: entered allmulticast mode [ 32.369208][ T4710] bridge_slave_0: entered promiscuous mode [ 32.375001][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.383633][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.383690][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.383748][ T4710] bridge_slave_1: entered allmulticast mode [ 32.384168][ T4710] bridge_slave_1: entered promiscuous mode [ 32.391612][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.391643][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.391706][ T4716] bridge_slave_0: entered allmulticast mode [ 32.392149][ T4716] bridge_slave_0: entered promiscuous mode [ 32.413267][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.413423][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.413513][ T4717] bridge_slave_0: entered allmulticast mode [ 32.413951][ T4717] bridge_slave_0: entered promiscuous mode [ 32.418244][ T4707] team0: Port device team_slave_0 added [ 32.419373][ T4707] team0: Port device team_slave_1 added [ 32.422201][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.422228][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.422334][ T4716] bridge_slave_1: entered allmulticast mode [ 32.422748][ T4716] bridge_slave_1: entered promiscuous mode [ 32.432557][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.432671][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.432700][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.432768][ T4717] bridge_slave_1: entered allmulticast mode [ 32.433179][ T4717] bridge_slave_1: entered promiscuous mode [ 32.440428][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.441523][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.448207][ T4716] team0: Port device team_slave_0 added [ 32.450642][ T4716] team0: Port device team_slave_1 added [ 32.451382][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.464516][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.464526][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.464540][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.473858][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.474704][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.478502][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.478512][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.478528][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.479114][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.479121][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.479135][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.488073][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.488083][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.488101][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.500392][ T4717] team0: Port device team_slave_0 added [ 32.501095][ T4717] team0: Port device team_slave_1 added [ 32.510391][ T4716] hsr_slave_0: entered promiscuous mode [ 32.510671][ T4716] hsr_slave_1: entered promiscuous mode [ 32.510866][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 32.510905][ T4716] Cannot create hsr debugfs directory [ 32.515770][ T4710] team0: Port device team_slave_0 added [ 32.516031][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.516041][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.516059][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.516709][ T4710] team0: Port device team_slave_1 added [ 32.523237][ T4707] hsr_slave_0: entered promiscuous mode [ 32.523553][ T4707] hsr_slave_1: entered promiscuous mode [ 32.523752][ T4707] debugfs: 'hsr0' already exists in 'hsr' [ 32.523762][ T4707] Cannot create hsr debugfs directory [ 32.524619][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.524630][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.524644][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.560276][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.560289][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.560309][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.578557][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.578568][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.578585][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.580043][ T4717] hsr_slave_0: entered promiscuous mode [ 32.580320][ T4717] hsr_slave_1: entered promiscuous mode [ 32.580504][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 32.580514][ T4717] Cannot create hsr debugfs directory [ 32.625958][ T4710] hsr_slave_0: entered promiscuous mode [ 32.626243][ T4710] hsr_slave_1: entered promiscuous mode [ 32.626450][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 32.626460][ T4710] Cannot create hsr debugfs directory [ 32.697920][ T4706] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.699883][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.700288][ T4706] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.701635][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.702293][ T4706] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.703996][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.718402][ T4706] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.719584][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.738732][ T4716] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.740130][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.740451][ T4716] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.741413][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.742620][ T4716] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.743904][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.746800][ T4716] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.749692][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.768646][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.768681][ T4706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.768813][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.768841][ T4706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.770706][ T4707] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.771696][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.773455][ T4707] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.774410][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.774700][ T4707] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.775688][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.775980][ T4707] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.777110][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.795969][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.795997][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.796078][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.796111][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.805941][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.805967][ T4707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.806034][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.806072][ T4707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.813732][ T4717] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.814875][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.815472][ T4717] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.816615][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.816971][ T4717] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.819222][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.819499][ T4717] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.820972][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.854341][ T4706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.862486][ T4706] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.863636][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.864649][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.867098][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.872888][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.874076][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.874539][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.890344][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.894001][ T4710] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.895248][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.896494][ T4710] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.898195][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.904901][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.905760][ T867] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.905790][ T867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.906167][ T867] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.906202][ T867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.906489][ T4710] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.909365][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.909681][ T4710] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.911092][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.917080][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.928468][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.928494][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.928806][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.928823][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.933393][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.941151][ T867] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.941178][ T867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.941570][ T867] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.941588][ T867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.965346][ T4716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.965364][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.973960][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.982396][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.989170][ T4706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.989184][ T4706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.011426][ T867] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.011454][ T867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.011779][ T867] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.011804][ T867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.025609][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.042953][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.049773][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.049808][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.050121][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.050139][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.053657][ T4707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.073355][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.073371][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.092904][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.229260][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.262683][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.274246][ T4716] veth0_vlan: entered promiscuous mode [ 33.280841][ T4716] veth1_vlan: entered promiscuous mode [ 33.290519][ T4716] veth0_macvtap: entered promiscuous mode [ 33.291712][ T4716] veth1_macvtap: entered promiscuous mode [ 33.298720][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.301943][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.303322][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.324177][ T4707] veth0_vlan: entered promiscuous mode [ 33.329316][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.342577][ T4717] veth0_vlan: entered promiscuous mode [ 33.344657][ T4717] veth1_vlan: entered promiscuous mode [ 33.346066][ T4707] veth1_vlan: entered promiscuous mode [ 33.353078][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.353769][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.353868][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.374812][ T4707] veth0_macvtap: entered promiscuous mode [ 33.375827][ T4707] veth1_macvtap: entered promiscuous mode [ 33.381740][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.382870][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.384030][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.416937][ T4717] veth0_macvtap: entered promiscuous mode [ 33.430029][ T4717] veth1_macvtap: entered promiscuous mode [ 33.439898][ T4710] veth0_vlan: entered promiscuous mode [ 33.441603][ T4706] veth0_vlan: entered promiscuous mode [ 33.442207][ T4710] veth1_vlan: entered promiscuous mode [ 33.444103][ T4706] veth1_vlan: entered promiscuous mode [ 33.458944][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.458956][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.468857][ T4710] veth0_macvtap: entered promiscuous mode [ 33.472699][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.472712][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.474779][ T4710] veth1_macvtap: entered promiscuous mode [ 33.476214][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.481250][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.488009][ T4706] veth0_macvtap: entered promiscuous mode [ 33.489485][ T4706] veth1_macvtap: entered promiscuous mode [ 33.490208][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.491468][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.493907][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.495288][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.520790][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.520803][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.531270][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.531351][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.531401][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.541269][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.541296][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.548104][ T1152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.548134][ T1152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.548153][ T1152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.548170][ T1152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.548187][ T1152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.548202][ T1152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.548217][ T1152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.548233][ T1152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.548247][ T1152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.548262][ T1152] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.548278][ T1152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.548302][ T1152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.548318][ T1152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.548334][ T1152] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.573689][ T1329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.573698][ T1329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.580237][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.580247][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.611870][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.611884][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.623857][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.623873][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.636445][ T4716] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.654767][ T1329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.654782][ T1329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.696057][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.696072][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.699854][ T4890] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.700176][ T4890] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.710345][ T4890] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.710383][ T4890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.710484][ T4890] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.710518][ T4890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.712018][ T4890] team0: Port device bridge0 added [ 33.735990][ T4898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 33.754995][ T4893] Bluetooth: MGMT ver 1.23 [ 33.829958][ T4907] binder: 4906:4907 ioctl c0306201 20000080 returned -14 [ 33.844639][ T4911] loop0: detected capacity change from 0 to 512 [ 33.889577][ T4911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.927732][ T4720] Bluetooth: hci1: command tx timeout [ 33.927888][ T4720] Bluetooth: hci0: command tx timeout [ 33.937976][ T4724] Bluetooth: hci3: command tx timeout [ 33.938170][ T4724] Bluetooth: hci2: command tx timeout [ 33.938239][ T4724] Bluetooth: hci4: command tx timeout [ 33.943689][ T4911] EXT4-fs (loop0): shut down requested (0) [ 34.027072][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.038918][ T4935] netlink: 136 bytes leftover after parsing attributes in process `syz.2.20'. [ 34.038945][ T4935] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 34.175037][ T4952] loop1: detected capacity change from 0 to 512 [ 34.198474][ T4952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.242533][ T4952] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 34.243910][ T4952] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 128 (only 1 groups) [ 34.290054][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.444097][ T4975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36'. [ 34.471538][ T4980] ======================================================= [ 34.471538][ T4980] WARNING: The mand mount option has been deprecated and [ 34.471538][ T4980] and is ignored by this kernel. Remove the mand [ 34.471538][ T4980] option from the mount to silence this warning. [ 34.471538][ T4980] ======================================================= [ 34.510088][ T4982] warning: `syz.1.40' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 34.592398][ T4989] Illegal XDP return value 4989 on prog (id 1) dev syz_tun, expect packet loss! [ 34.621170][ T4997] loop4: detected capacity change from 0 to 256 [ 34.731405][ T5007] loop0: detected capacity change from 0 to 1024 [ 34.731757][ T5007] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.745860][ T5007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.792308][ T5013] syz.1.53 uses obsolete (PF_INET,SOCK_PACKET) [ 34.821783][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.889588][ T5021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'. [ 34.893725][ T5015] FAULT_INJECTION: forcing a failure. [ 34.893725][ T5015] name fail_futex, interval 1, probability 0, space 0, times 1 [ 34.893745][ T5015] CPU: 1 UID: 0 PID: 5015 Comm: syz.4.54 Not tainted syzkaller #0 PREEMPT [ 34.893757][ T5015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.893763][ T5015] Call trace: [ 34.893766][ T5015] show_stack+0x2c/0x3c (C) [ 34.893786][ T5015] __dump_stack+0x30/0x40 [ 34.893800][ T5015] dump_stack_lvl+0xd8/0x12c [ 34.893812][ T5015] dump_stack+0x1c/0x28 [ 34.893823][ T5015] should_fail_ex+0x41c/0x590 [ 34.893839][ T5015] should_fail+0x14/0x24 [ 34.893851][ T5015] get_futex_key+0x1ec/0x12b0 [ 34.893864][ T5015] futex_wake+0x10c/0x594 [ 34.893875][ T5015] do_futex+0x2c4/0x378 [ 34.893886][ T5015] __arm64_sys_futex+0x2e4/0x418 [ 34.893896][ T5015] invoke_syscall+0x98/0x244 [ 34.893910][ T5015] el0_svc_common+0xec/0x23c [ 34.893921][ T5015] do_el0_svc+0x4c/0x5c [ 34.893932][ T5015] el0_svc+0x64/0x260 [ 34.893945][ T5015] el0t_64_sync_handler+0x44/0x104 [ 34.893956][ T5015] el0t_64_sync+0x198/0x19c [ 35.152259][ T5042] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 35.419966][ T5061] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 35.482414][ T5065] No fuse device found [ 35.503164][ T5073] netlink: 224 bytes leftover after parsing attributes in process `syz.2.81'. [ 35.600440][ T5085] loop4: detected capacity change from 0 to 512 [ 35.601121][ T5083] loop3: detected capacity change from 0 to 512 [ 35.602510][ T5083] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.602525][ T5083] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.604845][ T5083] EXT4-fs (loop3): 1 truncate cleaned up [ 35.605305][ T5083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.616276][ T5085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.634219][ T5083] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #12: block 7: comm syz.3.86: bad entry in directory: directory entry overrun - offset=16, inode=2147483648, rec_len=1024, size=56 fake=0 [ 35.635292][ T5083] EXT4-fs (loop3): Remounting filesystem read-only [ 35.678257][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.747138][ T4706] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 35.748965][ T4706] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 35.749205][ T4706] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 35.749464][ T4706] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 35.749790][ T4706] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 35.750013][ T4706] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 35.750230][ T4706] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 35.750471][ T4706] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 35.750769][ T4706] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 35.750997][ T4706] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 35.787049][ T5102] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input2 [ 35.822958][ T5106] evm: overlay not supported [ 35.869195][ T24] kernel write not supported for file bpf-prog (pid: 24 comm: kworker/1:0) [ 35.881025][ T5114] loop3: detected capacity change from 0 to 128 [ 35.891239][ T5114] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.945641][ T4716] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.961265][ T5121] netlink: 156 bytes leftover after parsing attributes in process `syz.2.101'. [ 36.007474][ T4724] Bluetooth: hci2: command tx timeout [ 36.007501][ T4724] Bluetooth: hci3: command tx timeout [ 36.007518][ T4724] Bluetooth: hci1: command tx timeout [ 36.007791][ T4720] Bluetooth: hci4: command tx timeout [ 36.049436][ T5128] loop1: detected capacity change from 0 to 512 [ 36.064500][ T5128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.130642][ T5137] loop2: detected capacity change from 0 to 1024 [ 36.130970][ T5137] EXT4-fs: Ignoring removed nobh option [ 36.130983][ T5137] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.133596][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.156586][ T5139] FAULT_INJECTION: forcing a failure. [ 36.156586][ T5139] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.156609][ T5139] CPU: 0 UID: 0 PID: 5139 Comm: syz.3.109 Not tainted syzkaller #0 PREEMPT [ 36.156623][ T5139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.156629][ T5139] Call trace: [ 36.156633][ T5139] show_stack+0x2c/0x3c (C) [ 36.156653][ T5139] __dump_stack+0x30/0x40 [ 36.156668][ T5139] dump_stack_lvl+0xd8/0x12c [ 36.156679][ T5139] dump_stack+0x1c/0x28 [ 36.156691][ T5139] should_fail_ex+0x41c/0x590 [ 36.156704][ T5139] should_fail+0x14/0x24 [ 36.156716][ T5139] should_fail_usercopy+0x20/0x30 [ 36.156728][ T5139] bpf_verifier_vlog+0x2f0/0xbc0 [ 36.156742][ T5139] btf_verifier_log+0x120/0x1a0 [ 36.156751][ T5139] btf_parse_hdr+0x48c/0x71c [ 36.156760][ T5139] btf_new_fd+0x288/0xa24 [ 36.156772][ T5139] bpf_btf_load+0x144/0x190 [ 36.156783][ T5139] __sys_bpf+0x7f0/0x82c [ 36.156792][ T5139] __arm64_sys_bpf+0xd0/0xec [ 36.156801][ T5139] invoke_syscall+0x98/0x244 [ 36.156813][ T5139] el0_svc_common+0xec/0x23c [ 36.156825][ T5139] do_el0_svc+0x4c/0x5c [ 36.156836][ T5139] el0_svc+0x64/0x260 [ 36.156848][ T5139] el0t_64_sync_handler+0x44/0x104 [ 36.156859][ T5139] el0t_64_sync+0x198/0x19c [ 36.185739][ T5137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.225914][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.282008][ T5156] sctp: [Deprecated]: syz.2.115 (pid 5156) Use of int in max_burst socket option deprecated. [ 36.282008][ T5156] Use struct sctp_assoc_value instead [ 36.560718][ T5188] Injecting memory failure for pfn 0x11e410 at process virtual address 0x20000000 [ 36.564887][ T5188] FAULT_INJECTION: forcing a failure. [ 36.564887][ T5188] name failslab, interval 1, probability 0, space 0, times 1 [ 36.564906][ T5188] CPU: 1 UID: 0 PID: 5188 Comm: syz.2.129 Not tainted syzkaller #0 PREEMPT [ 36.564917][ T5188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.564923][ T5188] Call trace: [ 36.564926][ T5188] show_stack+0x2c/0x3c (C) [ 36.564947][ T5188] __dump_stack+0x30/0x40 [ 36.564961][ T5188] dump_stack_lvl+0xd8/0x12c [ 36.564973][ T5188] dump_stack+0x1c/0x28 [ 36.564984][ T5188] should_fail_ex+0x41c/0x590 [ 36.565001][ T5188] should_failslab+0xc4/0x120 [ 36.565015][ T5188] __kmalloc_cache_noprof+0x94/0x5fc [ 36.565024][ T5188] __add_to_kill+0x78/0x8b8 [ 36.565035][ T5188] collect_procs+0x5a8/0x72c [ 36.565046][ T5188] hwpoison_user_mappings+0x2f4/0x4e4 [ 36.565058][ T5188] memory_failure+0x21fc/0x2854 [ 36.565068][ T5188] madvise_do_behavior+0x2c8/0x7c0 [ 36.565080][ T5188] do_madvise+0x28c/0x2f0 [ 36.565092][ T5188] __arm64_sys_madvise+0xac/0xc8 [ 36.565103][ T5188] invoke_syscall+0x98/0x244 [ 36.565115][ T5188] el0_svc_common+0xec/0x23c [ 36.565127][ T5188] do_el0_svc+0x4c/0x5c [ 36.565138][ T5188] el0_svc+0x64/0x260 [ 36.565151][ T5188] el0t_64_sync_handler+0x44/0x104 [ 36.565162][ T5188] el0t_64_sync+0x198/0x19c [ 36.565173][ T5188] Memory failure: Out of memory while machine check handling [ 36.565248][ T5188] Memory failure: 0x11e410: recovery action for dirty LRU page: Recovered [ 36.565271][ T5188] Injecting memory failure for pfn 0x21910f at process virtual address 0x20001000 [ 36.565314][ T5188] Memory failure: 0x21910f: unhandlable page. [ 36.565322][ T5188] Memory failure: 0x21910f: recovery action for reserved kernel page: Ignored [ 36.623409][ T5194] netlink: 'syz.2.133': attribute type 4 has an invalid length. [ 36.715808][ T5205] FAULT_INJECTION: forcing a failure. [ 36.715808][ T5205] name failslab, interval 1, probability 0, space 0, times 0 [ 36.715831][ T5205] CPU: 0 UID: 0 PID: 5205 Comm: syz.0.138 Not tainted syzkaller #0 PREEMPT [ 36.715843][ T5205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.715849][ T5205] Call trace: [ 36.715852][ T5205] show_stack+0x2c/0x3c (C) [ 36.715873][ T5205] __dump_stack+0x30/0x40 [ 36.715888][ T5205] dump_stack_lvl+0xd8/0x12c [ 36.715903][ T5205] dump_stack+0x1c/0x28 [ 36.715914][ T5205] should_fail_ex+0x41c/0x590 [ 36.715931][ T5205] should_failslab+0xc4/0x120 [ 36.715945][ T5205] kmem_cache_alloc_noprof+0x94/0x5d4 [ 36.715954][ T5205] prepare_creds+0x34/0x7d0 [ 36.715967][ T5205] __sys_setresuid+0x414/0x848 [ 36.715979][ T5205] __arm64_sys_setresuid+0x84/0x98 [ 36.715989][ T5205] invoke_syscall+0x98/0x244 [ 36.716002][ T5205] el0_svc_common+0xec/0x23c [ 36.716013][ T5205] do_el0_svc+0x4c/0x5c [ 36.716025][ T5205] el0_svc+0x64/0x260 [ 36.716037][ T5205] el0t_64_sync_handler+0x44/0x104 [ 36.716048][ T5205] el0t_64_sync+0x198/0x19c [ 36.781500][ T5209] loop2: detected capacity change from 0 to 128 [ 36.926810][ T5093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.974333][ T5235] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.974353][ T5235] EXT4-fs: Ignoring removed oldalloc option [ 36.992194][ T5237] FAULT_INJECTION: forcing a failure. [ 36.992194][ T5237] name failslab, interval 1, probability 0, space 0, times 0 [ 36.992213][ T5237] CPU: 1 UID: 0 PID: 5237 Comm: syz.2.153 Not tainted syzkaller #0 PREEMPT [ 36.992224][ T5237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.992230][ T5237] Call trace: [ 36.992233][ T5237] show_stack+0x2c/0x3c (C) [ 36.992254][ T5237] __dump_stack+0x30/0x40 [ 36.992268][ T5237] dump_stack_lvl+0xd8/0x12c [ 36.992279][ T5237] dump_stack+0x1c/0x28 [ 36.992291][ T5237] should_fail_ex+0x41c/0x590 [ 36.992309][ T5237] should_failslab+0xc4/0x120 [ 36.992323][ T5237] __kmalloc_cache_noprof+0x94/0x5fc [ 36.992332][ T5237] watch_queue_init+0x58/0x138 [ 36.992342][ T5237] create_pipe_files+0x22c/0x650 [ 36.992351][ T5237] __do_pipe_flags+0x5c/0x204 [ 36.992359][ T5237] do_pipe2+0xa0/0x250 [ 36.992367][ T5237] __arm64_sys_pipe2+0x64/0x7c [ 36.992375][ T5237] invoke_syscall+0x98/0x244 [ 36.992387][ T5237] el0_svc_common+0xec/0x23c [ 36.992399][ T5237] do_el0_svc+0x4c/0x5c [ 36.992410][ T5237] el0_svc+0x64/0x260 [ 36.992422][ T5237] el0t_64_sync_handler+0x44/0x104 [ 36.992434][ T5237] el0t_64_sync+0x198/0x19c [ 36.999676][ T5235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.029423][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.043606][ T5235] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.152: bg 0: block 112: padding at end of block bitmap is not set [ 37.046704][ T5235] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.152: lblock 0 mapped to illegal pblock 0 (length 1) [ 37.049714][ T5235] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.152: lblock 0 mapped to illegal pblock 0 (length 1) [ 37.050201][ T5235] EXT4-fs error (device loop0) in ext4_setattr:6247: Corrupt filesystem [ 37.070952][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 37.106228][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 PÚÿÿÿ-D ýTñÒÄ‹œñü�rVaSÉ~Jópêk¶”»JnBÃûÑÒ —[‹ùÕù€Ø*Kyð5X9—·IÿÌ:c;ÿÿ% Z)>8VpäÜDþ¿}ÜsýJZ l(f_FÇNÈdevtmpfs´£«&j— †òÈÅÇôäVÁ–è£!ý³i ú±•8‚šs*§³•/�Æ‹´Îê±c oˆ 8è|I�Ëù3,¼œMiã’½3#~ÎzÙDí¬¨ÚÊØß.ÂÖ´Láù ÖÂUÊ@Í´H_´ŠQÓ)ȳHŒ}.öœP,n./dev/console¹ŠÊ+…9å Dú;0&ˈÞ&•7Èòoü;Ëòyƒ+ü�½•“�C.ˆý*G„¥ÑE6û+¬6ÃìÓæûunøˆëîócjý˜Šô«™(D��5ì‹#<Î~JIs�–yÓ6¡[7¼Ónj|º“Q¹ÉºWyÕPé«!`:C¢_;H•ØÜO<àçÕéd舞§šHé3‹=4Ö.–?¿˜ƒODUA™ðÿÛv7:÷zíîw‰õn½«– Ô`÷‘ nlõ$;ò³¡bJ€ì~ñÈ^ô¸•¾t¿gî©4(µŠ‹b·—m=.YylF쑌ƒÍIÃô=½)gXifÁšÎ{ ï_”ë3;6&Iñ¿¡ø±ñ&é~ÆrÏ÷~!0‚?§¡ßgbƨ‘xéð¤ í2±3ß}ɯÎÿSÄ­ô,øÈwdÒ\âÛyýƒÍ 5H75Býa³kTÅfnI2Pã!G8ãÊÌ$¥]ýÕ‹L¦)Ã/4ËiÄ‹‹ˆŠåV»NlhéZq ƒ­�òcö§uÞÖOï í\µó3ˆø9Ð[ 37.174661][ T4720] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.176899][ T4720] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 ä Ó6ÄàXTTËv'‹ý\Buy*ûyƒÿÆ’SUÇ®ç pG}žÂ)#fã›�ÆozÜôI¡€Æ¹èqƒúðöyïÅÎò ÍÏ-ê„NÀÖ“%n(%²;Z·±ëçÔ°Ey?—nàf`HË ØlÚ™¤T?�™BN»xÝž×P*n¯§C aú?¥^Mê  ¶¹Ö3ñ ”Fµ¢ãöÖJ°•6lkðÃ/p:ë·˜Œ}M2&�EŽ…bcÇ7bˆ5áüÿñÚ0™À´¯C>¹¥–[ 37.181427][ T4720] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.184222][ T4720] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.186001][ T4720] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.186302][ T5252] overlayfs: failed to decode file handle (len=5, type=248, flags=0, err=-22) òÀÀš˜±ˆ€ÈF³MjÀ!7efa—náÙ(‰?˜5€êG F3¹ŽÃèiSJ¹…ë:sàºÈ’ÚÉIø]¹I(ZjkI uFr&¯#ß‚ØÝ ·($�û³­©íL®�vï¾Þk/LX¬&ÈõaÞ[íêý DcÏ 0E"£$µ�«'N{Úå™Ce{\ °"›s—)÷£]ChxÁ‚®Äð�ÑaÁå·“®x5è¿éŠDÈÔ»²àîàË]|“Q~–©ü�2æ>÷Ç5¾¡“K7ßE˜�’æxÈqæÚÖθš¤×$VX¦>eÎǸ0t&¦ 1Ì‘xD¡NšØ;ïŸsm6h|•uÊìàÔj¹ó°é]œõ`ë�4è4k5à¦öj‡¡LJë>ƒ�f R¦äKRLÞ+ù˜p÷�È&pr¼cé}?&Ò?Õ—™ÿ,„}jrLëÂ7zX+§=™¦ •Â�fÆ ¬d·ÑÚ�$‹�ž¶. ›,su²âv>gÈ!º)îÍ‹Œ‡˜O±ûºªNŠ wì˜Þbüz÷º^2—ý’A$²âUµÌOksóÓDÕ®osF(󌹸V²Û?»/¯·iƒê¼Q£HåW‰é—ú%ùd¦]¿—¢ ‹' "¬ä­öý­åÍ?t–&~#‚÷'ëåï”áNjŠ*ì"SÈþ!‚^2•wM°É±4¢Š–X› Ù÷𦒮¦÷ïqm„›Œwæ’.Šm�3I ¸[’X%¦Ó×Ì� ÆUª>Ú¿„ÇU`ß²yî>‹‚S#žÜXÃrÏšà.øP©"À«ë‹J½œï|è�Ö{ -ÝŒ¬¿7Ä‚kã„YHÕ˜˜cÁתމÐc}€¤Á£^°' Žù ÂüQI&‘NhåÞT¸a úLáËÁnNÏ4*v͵a÷Þ£ àý�&rÓNo3ÓdÏ1=;1aAËõððWš#[I»]'øX%¹O™ç„m’­‘-“EtùÕ]!RÛû9ÖbæàòIa‚Я‹Kë½úhã鈆ŸµÍ–Û—æÌWDDôµ^É‚{¯ÅSA¿jÓýO«.ä?4<¹¼ì 88KV™åÆÕ—;¥‘—‚uÅ@ 4 žÓhÆŸX2S�œ×Š4ënÕWÒGޤ½�9!�{Bø�°8;Q–hð¢èi;šǼùn콦%³2ô(ké"«,‡ª01 �FUPÕ¼&µûýíªà÷V8@#»š(Ó þ®ÝcÖ¯àvQ>Š×=`|ÔíácDæ‡5~‚±’XÅm…C^#Î ‚^GÖDÄ>‡Â•�N‰10î‹à Mñ »!ÚX²h[žœŒ�íaÙ¨�×y’‘–˜QÍL?"µøp¢u¦’�¯Ïn‰º‡°ëaà1ý¢_³4™Ô¢»Ûví¤Éúý�û#PJ±PÊ3ꆺ:ªyÐßO.NJúV^fÒŠ¡gø5Ѐ¿AÐå-¿�ÆqøêÊâ4¿OÃ(0&qú´f·=¯*΀¯òøj�„¸$€ŒÆª�­ü€«;º}'üj°O�¿ 4” Ó)ßNSØU±Àÿj%Ò R³§xáÊ/¾YÉîíùžh-Ú&•`ROú@Ks¹Fíù렚'¦ ûxç£RÁ‚Șè"î¯c#–[K?2-@Ô¡X¶óÏ]t‚-éRþü4êÖÁÈþØäŽ …µÌw–Óô[±õg¤uÚvÃVÉà1°–†}¡Û¸œ:�G]¼Û-ñ'�]ºUÂû[¦©wŒ*$A˜IqÛ.ð3/4zÿû ‹LYË (k²Ý@çìq?oþ ggŒt†ÚãÁà�ósš�5v¹—%€ÑŸÞôšPqùœ7¸úI‘ô0róʯ;×ÄÐÍ µ·ÙŽæg0 �ä¡\à¿ÈŒAþ7_&ãU~ë_ô¢Íö ý{g•„Vé@ûÒi óíQZÀ<þÌæp'Õyá"k×·8'E5P45fP�8yè8ÿ…ÆÉEç¤GRõsS:>‚ä.eÓF¯² 'W_y[ 37.231825][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.235030][ T5256] netlink: 52 bytes leftover after parsing attributes in process `syz.2.161'. [ 37.236107][ T5256] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.236442][ T5256] bridge0: port 1(bridge_slave_0) entered disabled state ïN¨Õ†� �7½®u’äí7¹ÔÃ�&ÓÞ½à-ÿ%õïH>*AÍU4{Ò=Ìåz–ÛbœSÁÒ*Ç+Î56�&KQu¾@³º„@l„G¾q(tŽ[âdUk¬dÐ` ~b›DåÁÄœj½ǘ+â-¢­»(ß'ó @`qט»@ÙÐâ,Åí‡p/IðÍØ�Ç«´¸,c›4IâOeoîXniæ‡N©]”m§�´œ €ÿ´£ÈwFÆaô>›å- ¢î6‹œ6‡È„jºÅ™�ìôiýÜ­ó_qYßßNí¿ÌXþŽf�Í{{ÌJš-é:ÝÚÏ<õ$y•a…£ÅÝÎ6Õ…Œ‡a¼§Dn=0óèô�^�†¦ ¾Fð8±�ý5Y ÚÏâ�B©#½Ãù£¹4*}Ú[ 37.265719][ T5256] netlink: 52 bytes leftover after parsing attributes in process `syz.2.161'. mA²EÂÄ$®ÝJK¹†1iEM ò_Ъ-§¿Éz׬¨†Ý™Ž3àx™­H÷ͦÞH¬9Q-ûæ3ŠÊâLý-Ò±FVŒ„diÝB ÐIî˜c¢ä€8�“‡o9ì³¥Ÿ¡l%²³cjT/’tD•á LãõÂ%n-aw]8Ž*†µ/v­ÒùVªP[­¹M¡%•²»ø‹ÜpÊ®gfý=ôò™ÐÿqÈxrI²UêI³Ó;?Œ”ËuÖBdF\5xSƒ‚²=rŠI@ Ê-žˆ}™IbJÆÖ3"¶P~'z Û›ú)(ÿµ“ç’³ÉÿOú'7Ó»ç%ç\%x4W &Åõ}Îg:@ùç^í’7öXîf|Ç‹ÄýN¿M"‰y« ÊûÍ‹�ª×o²«ÏÅ…7~¦áŸ¸˜¹P§°ôçTf¢º&çÖ o\T£þxg3bŰç‘¶ìäó·XÐZŽNN§ä†næwPÎ'i÷*ŸEx­úç;BÔÝLaLy|iNΊøŒÇ2í«ú&¬å}åH5ÇUTߣ¾ Óµ„ZÉ{-¨D¦Rç,Õc¬»+»Y7 모ðã­( DêæûøÕøR7%{µ¸åì>RÜø9Av³%¥w€Nž·�p-íù÷Õf‡õ9ˆ» |tûë+§%ŽƒSbˆb9ôØñÂÏmMÿ&ÒWž¤ _¹ž[mÍí PÓú§ŽÖtò‰›àƒ2l‹ðA } œP¢ÙIÔš!´;ÍûßCXuÏZ�ïFÛctetîŠ[¼ïATéÝž[±±½)DXƒûf ç—-óÚïć䌲�Ó¨7Õ+As‹WÈgÕ²î]rFVWY39PoÐÀ|ÖD^µLû\©Ó^ù>ìcƒ"N¿…~¶íuöÃ$ö 4Z%¾kµ.ÓGå|Ë›�?·ÛNŸFQ:AXÎ)ÁõÖUk¼G‰"\­�®ÓM®�îŽr7³²†â›Iסp S{(W}~*Uá’Ö÷w�Þú?ëÞ¥i0H7*E�<Z–ÆÏ¾ol+uE�ªÀ/Šp显n7ýAô·c´vƒö°øýîó©v|~\0<÷† :!Gt1þ E€#•7[ 37.445650][ T40] bridge_slave_1: left allmulticast mode [ 37.445682][ T40] bridge_slave_1: left promiscuous mode [ 37.446338][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.471209][ T40] bridge_slave_0: left allmulticast mode [ 37.471229][ T40] bridge_slave_0: left promiscuous mode [ 37.472970][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.906346][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.912839][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.962388][ T40] bond0 (unregistering): Released all slaves [ 37.991491][ T30] audit: type=1400 audit(37.970:2): lsm=SMACK fn=smack_task_setpgid action=denied subject="w" object="_" requested=w pid=5298 comm="syz.3.175" opid=5298 ocomm="syz.3.175" [ 37.995604][ T5295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'. [ 37.995631][ T5295] netlink: 224 bytes leftover after parsing attributes in process `syz.2.174'. [ 38.041015][ T5303] FAULT_INJECTION: forcing a failure. [ 38.041015][ T5303] name failslab, interval 1, probability 0, space 0, times 0 [ 38.041037][ T5303] CPU: 1 UID: 0 PID: 5303 Comm: syz.3.178 Not tainted syzkaller #0 PREEMPT [ 38.041048][ T5303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.041053][ T5303] Call trace: [ 38.041057][ T5303] show_stack+0x2c/0x3c (C) [ 38.041075][ T5303] __dump_stack+0x30/0x40 [ 38.041088][ T5303] dump_stack_lvl+0xd8/0x12c [ 38.041099][ T5303] dump_stack+0x1c/0x28 [ 38.041110][ T5303] should_fail_ex+0x41c/0x590 [ 38.041124][ T5303] should_failslab+0xc4/0x120 [ 38.041138][ T5303] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 38.041148][ T5303] kmemdup_noprof+0x44/0x8c [ 38.041156][ T5303] register_pidns_sysctls+0x50/0x1d0 [ 38.041169][ T5303] copy_pid_ns+0x53c/0x918 [ 38.041180][ T5303] create_new_namespaces+0x21c/0x50c [ 38.041190][ T5303] unshare_nsproxy_namespaces+0x120/0x170 [ 38.041201][ T5303] ksys_unshare+0x438/0x6cc [ 38.041210][ T5303] __arm64_sys_unshare+0x40/0x54 [ 38.041219][ T5303] invoke_syscall+0x98/0x244 [ 38.041232][ T5303] el0_svc_common+0xec/0x23c [ 38.041243][ T5303] do_el0_svc+0x4c/0x5c [ 38.041255][ T5303] el0_svc+0x64/0x260 [ 38.041267][ T5303] el0t_64_sync_handler+0x44/0x104 [ 38.041278][ T5303] el0t_64_sync+0x198/0x19c [ 38.088182][ T4720] Bluetooth: hci4: command tx timeout [ 38.088207][ T4720] Bluetooth: hci1: command tx timeout [ 38.088221][ T4720] Bluetooth: hci2: command tx timeout [ 38.327954][ T4714] Bluetooth: hci3: command tx timeout [ 38.431912][ T4398] 8021q: adding VLAN 0 to HW filter on device eth1 [ 38.491111][ T40] hsr_slave_0: left promiscuous mode [ 38.491479][ T40] hsr_slave_1: left promiscuous mode [ 38.491791][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.491806][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.493557][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.493570][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.505977][ T40] veth1_macvtap: left promiscuous mode [ 38.506012][ T40] veth0_macvtap: left promiscuous mode [ 38.506091][ T40] veth1_vlan: left promiscuous mode [ 38.506174][ T40] veth0_vlan: left promiscuous mode [ 38.690372][ T40] team0 (unregistering): Port device team_slave_1 removed [ 38.706646][ T40] team0 (unregistering): Port device team_slave_0 removed [ 38.736255][ T5376] EXT4-fs: Ignoring removed oldalloc option [ 38.736278][ T5376] EXT4-fs: Ignoring removed bh option [ 38.758833][ T5376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.786077][ T5376] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.200: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.786984][ T5376] EXT4-fs (loop0): Remounting filesystem read-only [ 38.836902][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.909591][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.909628][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.909725][ T5249] bridge_slave_0: entered allmulticast mode [ 38.910239][ T5249] bridge_slave_0: entered promiscuous mode [ 38.911222][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.911565][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.911630][ T5249] bridge_slave_1: entered allmulticast mode [ 38.912143][ T5249] bridge_slave_1: entered promiscuous mode [ 38.965541][ T5249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.970286][ T5249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.988131][ T5249] team0: Port device team_slave_0 added [ 39.000738][ T5249] team0: Port device team_slave_1 added [ 39.039994][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.040008][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.040022][ T5249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.060358][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.060372][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.060384][ T5249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.063954][ T5393] set_capacity_and_notify: 3 callbacks suppressed [ 39.063967][ T5393] loop5: detected capacity change from 0 to 7 [ 39.074004][ T5393] Dev loop5: unable to read RDB block 7 [ 39.074024][ T5393] loop5: unable to read partition table [ 39.074099][ T5393] loop5: partition table beyond EOD, truncated [ 39.074110][ T5393] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 39.106993][ T5249] hsr_slave_0: entered promiscuous mode [ 39.109301][ T5249] hsr_slave_1: entered promiscuous mode [ 39.141285][ T5393] Dev loop5: unable to read RDB block 7 [ 39.141315][ T5393] loop5: unable to read partition table [ 39.141380][ T5393] loop5: partition table beyond EOD, truncated [ 39.141390][ T5393] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 39.209323][ T4714] Bluetooth: hci0: command tx timeout [ 39.259275][ T5410] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.319698][ T4398] 8021q: adding VLAN 0 to HW filter on device eth0 [ 39.338256][ T5249] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 39.349594][ T5249] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.350093][ T5249] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 39.352242][ T5249] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.362618][ T5249] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 39.366502][ T5249] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.366860][ T5249] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 39.371554][ T5249] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.379632][ T5425] Bluetooth: MGMT ver 1.23 [ 39.424421][ T5249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.431809][ T5249] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.476576][ T5415] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.492706][ T867] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.492734][ T867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.493710][ T867] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.493731][ T867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.513594][ T5249] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.513613][ T5249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.530506][ T5448] ip6gretap1: entered allmulticast mode [ 39.531660][ T5448] batman_adv: batadv0: Adding interface: ip6gretap1 [ 39.531669][ T5448] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.531683][ T5448] batman_adv: batadv0: Interface activated: ip6gretap1 [ 39.594557][ T5415] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.686724][ T5415] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.709525][ T4398] 8021q: adding VLAN 0 to HW filter on device eth2 [ 39.786170][ T1152] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.786210][ T1152] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.827365][ T40] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.837172][ T5489] capability: warning: `syz.2.229' uses deprecated v2 capabilities in a way that may be insecure [ 39.848220][ T867] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.884039][ T5249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.971808][ T5509] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input3 [ 39.988196][ T5249] veth0_vlan: entered promiscuous mode [ 39.989836][ T5249] veth1_vlan: entered promiscuous mode [ 39.994377][ T5512] gadgetfs: bound to dummy_udc driver [ 40.008746][ T5249] veth0_macvtap: entered promiscuous mode [ 40.009869][ T5249] veth1_macvtap: entered promiscuous mode [ 40.018750][ T5518] FAULT_INJECTION: forcing a failure. [ 40.018750][ T5518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.018767][ T5518] CPU: 1 UID: 0 PID: 5518 Comm: syz.3.236 Not tainted syzkaller #0 PREEMPT [ 40.018778][ T5518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 40.018783][ T5518] Call trace: [ 40.018786][ T5518] show_stack+0x2c/0x3c (C) [ 40.018807][ T5518] __dump_stack+0x30/0x40 [ 40.018821][ T5518] dump_stack_lvl+0xd8/0x12c [ 40.018833][ T5518] dump_stack+0x1c/0x28 [ 40.018844][ T5518] should_fail_ex+0x41c/0x590 [ 40.018861][ T5518] should_fail+0x14/0x24 [ 40.018872][ T5518] should_fail_usercopy+0x20/0x30 [ 40.018885][ T5518] _inline_copy_from_user+0x3c/0x174 [ 40.018899][ T5518] __arm64_sys_epoll_ctl+0x128/0x1b8 [ 40.018911][ T5518] invoke_syscall+0x98/0x244 [ 40.018923][ T5518] el0_svc_common+0xec/0x23c [ 40.018935][ T5518] do_el0_svc+0x4c/0x5c [ 40.018946][ T5518] el0_svc+0x64/0x260 [ 40.018959][ T5518] el0t_64_sync_handler+0x44/0x104 [ 40.018970][ T5518] el0t_64_sync+0x198/0x19c [ 40.030767][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.031816][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.129844][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.129972][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.129988][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.130002][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.140251][ T5521] input: syz1 as /devices/virtual/input/input4 [ 40.145392][ T1329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.145404][ T1329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.155234][ T4398] 8021q: adding VLAN 0 to HW filter on device eth3 [ 40.161443][ T5527] ieee802154 phy0 wpan0: encryption failed: -22 [ 40.167577][ T4714] Bluetooth: hci2: command tx timeout [ 40.167604][ T4714] Bluetooth: hci1: command tx timeout [ 40.167619][ T4714] Bluetooth: hci4: command tx timeout [ 40.176130][ T1329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.176143][ T1329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.252099][ T5536] FAULT_INJECTION: forcing a failure. [ 40.252099][ T5536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.252121][ T5536] CPU: 1 UID: 0 PID: 5536 Comm: syz.1.242 Not tainted syzkaller #0 PREEMPT [ 40.252132][ T5536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 40.252138][ T5536] Call trace: [ 40.252141][ T5536] show_stack+0x2c/0x3c (C) [ 40.252160][ T5536] __dump_stack+0x30/0x40 [ 40.252172][ T5536] dump_stack_lvl+0xd8/0x12c [ 40.252184][ T5536] dump_stack+0x1c/0x28 [ 40.252195][ T5536] should_fail_ex+0x41c/0x590 [ 40.252209][ T5536] should_fail+0x14/0x24 [ 40.252221][ T5536] should_fail_usercopy+0x20/0x30 [ 40.252234][ T5536] __arm64_sys_listns+0x348/0x2310 [ 40.252246][ T5536] invoke_syscall+0x98/0x244 [ 40.252258][ T5536] el0_svc_common+0xec/0x23c [ 40.252270][ T5536] do_el0_svc+0x4c/0x5c [ 40.252281][ T5536] el0_svc+0x64/0x260 [ 40.252299][ T5536] el0t_64_sync_handler+0x44/0x104 [ 40.252311][ T5536] el0t_64_sync+0x198/0x19c [ 40.412448][ T5559] netlink: 'syz.5.250': attribute type 11 has an invalid length. [ 40.559909][ T5576] input: syz1 as /devices/virtual/input/input5 [ 40.751728][ T5597] FAULT_INJECTION: forcing a failure. [ 40.751728][ T5597] name failslab, interval 1, probability 0, space 0, times 0 [ 40.751751][ T5597] CPU: 1 UID: 0 PID: 5597 Comm: syz.0.267 Not tainted syzkaller #0 PREEMPT [ 40.751763][ T5597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 40.751769][ T5597] Call trace: [ 40.751772][ T5597] show_stack+0x2c/0x3c (C) [ 40.751790][ T5597] __dump_stack+0x30/0x40 [ 40.751803][ T5597] dump_stack_lvl+0xd8/0x12c [ 40.751814][ T5597] dump_stack+0x1c/0x28 [ 40.751825][ T5597] should_fail_ex+0x41c/0x590 [ 40.751839][ T5597] should_failslab+0xc4/0x120 [ 40.751852][ T5597] __kmalloc_cache_noprof+0x94/0x5fc [ 40.751861][ T5597] sctp_endpoint_new+0xe4/0x860 [ 40.751870][ T5597] sctp_init_sock+0x684/0x11ec [ 40.751878][ T5597] inet_create+0x9a4/0xd48 [ 40.751889][ T5597] __sock_create+0x31c/0x670 [ 40.751899][ T5597] __sys_socket_create+0xc0/0x11c [ 40.751909][ T5597] __sys_socket+0x44/0xec [ 40.751918][ T5597] __arm64_sys_socket+0x84/0x9c [ 40.751927][ T5597] invoke_syscall+0x98/0x244 [ 40.751940][ T5597] el0_svc_common+0xec/0x23c [ 40.751951][ T5597] do_el0_svc+0x4c/0x5c [ 40.751962][ T5597] el0_svc+0x64/0x260 [ 40.751974][ T5597] el0t_64_sync_handler+0x44/0x104 [ 40.751985][ T5597] el0t_64_sync+0x198/0x19c [ 40.814899][ T5605] ip_tables: iptables: counters copy to user failed while replacing table [ 40.816300][ T5606] loop1: detected capacity change from 0 to 256 [ 40.816919][ T5606] FAT-fs (loop1): bogus number of FAT sectors [ 40.816929][ T5606] FAT-fs (loop1): Can't find a valid FAT filesystem [ 40.830508][ T5605] tipc: Started in network mode [ 40.830529][ T5605] tipc: Node identity ac141441, cluster identity 4711 [ 40.831157][ T5605] tipc: Enabled bearer , priority 10 [ 40.891122][ T5612] Cannot find add_set index 4 as target [ 40.898757][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.898915][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.951889][ T5608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.953993][ T5608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.109295][ T5613] geneve2: entered promiscuous mode [ 41.109316][ T5613] geneve2: entered allmulticast mode [ 41.162345][ T5630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 41.168364][ T5628] loop0: detected capacity change from 0 to 8192 [ 41.195868][ C0] ------------[ cut here ]------------ [ 41.195879][ C0] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x10b4/0x1658, CPU#0: syz.2.282/5635 [ 41.198579][ C0] Modules linked in: [ 41.199287][ C0] CPU: 0 UID: 0 PID: 5635 Comm: syz.2.282 Not tainted syzkaller #0 PREEMPT [ 41.200833][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 41.202593][ C0] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 41.203979][ C0] pc : __cfg80211_bss_update+0x10b4/0x1658 [ 41.205060][ C0] lr : __cfg80211_bss_update+0x164c/0x1658 [ 41.206168][ C0] sp : ffff80008ebd7150 [ 41.206931][ C0] x29: ffff80008ebd71a0 x28: 1ffff00011173571 x27: 1fffe0001e3b2035 [ 41.208421][ C0] x26: dfff800000000000 x25: ffff0000f1d90190 x24: ffff800088b9a000 [ 41.209860][ C0] x23: ffff0000f081e090 x22: ffff0000f1d90190 x21: ffff80008ebd7260 [ 41.211317][ C0] x20: ffff0000f1d90000 x19: ffff0000f081e000 x18: 00000000ffffffff [ 41.212774][ C0] x17: ffff800125220000 x16: ffff80008ebd0000 x15: 0000000000000000 [ 41.214213][ C0] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 41.215690][ C0] x11: 0000000000000000 x10: 0000000000040000 x9 : 0000000000001471 [ 41.217174][ C0] x8 : ffff800092202000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 41.218546][ C0] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800086063f74 [ 41.219970][ C0] x2 : 0000000000000001 x1 : ffff0000c8c50000 x0 : 0000000000000001 [ 41.221439][ C0] Call trace: [ 41.222021][ C0] __cfg80211_bss_update+0x10b4/0x1658 (P) [ 41.223058][ C0] cfg80211_inform_single_bss_data+0x980/0x19dc [ 41.224176][ C0] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 41.225166][ C0] cfg80211_inform_bss_frame_data+0x348/0x838 [ 41.226199][ C0] ieee80211_bss_info_update+0x5d0/0x944 [ 41.227156][ C0] ieee80211_scan_rx+0x450/0x928 [ 41.228055][ C0] ieee80211_rx_list+0x229c/0x3000 [ 41.228980][ C0] ieee80211_rx_napi+0x18c/0x370 [ 41.229848][ C0] ieee80211_handle_queued_frames+0xc8/0x17c [ 41.230850][ C0] ieee80211_tasklet_handler+0x20/0x30 [ 41.231787][ C0] tasklet_action_common+0x1dc/0x278 [ 41.232703][ C0] tasklet_action+0x68/0x8c [ 41.233468][ C0] handle_softirqs+0x2ec/0xd98 [ 41.234255][ C0] __do_softirq+0x14/0x20 [ 41.234999][ C0] ____do_softirq+0x14/0x20 [ 41.235797][ C0] call_on_irq_stack+0x30/0x48 [ 41.236595][ C0] do_softirq_own_stack+0x20/0x2c [ 41.237455][ C0] do_softirq+0x90/0xf8 [ 41.238190][ C0] __local_bh_enable_ip+0x240/0x35c [ 41.239111][ C0] __ieee80211_tx_skb_tid_band+0x4bc/0x604 [ 41.240151][ C0] ieee80211_tx_skb_tid+0x268/0x44c [ 41.241078][ C0] ieee80211_mgmt_tx+0x190c/0x1ecc [ 41.241989][ C0] cfg80211_mlme_mgmt_tx+0x638/0x150c [ 41.242952][ C0] nl80211_tx_mgmt+0x81c/0xb04 [ 41.243816][ C0] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 41.244796][ C0] genl_rcv_msg+0x43c/0x620 [ 41.245584][ C0] netlink_rcv_skb+0x238/0x414 [ 41.246450][ C0] genl_rcv+0x38/0x50 [ 41.247172][ C0] netlink_unicast+0x600/0x7f8 [ 41.248022][ C0] netlink_sendmsg+0x648/0x948 [ 41.248894][ C0] __sock_sendmsg+0xc8/0x17c [ 41.249732][ C0] ____sys_sendmsg+0x3d0/0x6c8 [ 41.250553][ C0] ___sys_sendmsg+0x198/0x224 [ 41.251394][ C0] __sys_sendmsg+0x158/0x204 [ 41.252197][ C0] __arm64_sys_sendmsg+0x88/0x9c [ 41.253073][ C0] invoke_syscall+0x98/0x244 [ 41.253894][ C0] el0_svc_common+0xec/0x23c [ 41.254717][ C0] do_el0_svc+0x4c/0x5c [ 41.255459][ C0] el0_svc+0x64/0x260 [ 41.256162][ C0] el0t_64_sync_handler+0x44/0x104 [ 41.257039][ C0] el0t_64_sync+0x198/0x19c [ 41.257839][ C0] irq event stamp: 647 [ 41.258547][ C0] hardirqs last enabled at (646): [] kcov_remote_start+0x2d0/0x560 [ 41.260229][ C0] hardirqs last disabled at (647): [] el1_brk64+0x20/0x54 [ 41.261835][ C0] softirqs last enabled at (638): [] __ieee80211_tx_skb_tid_band+0x4b4/0x604 [ 41.263615][ C0] softirqs last disabled at (639): [] __do_softirq+0x14/0x20 [ 41.265172][ C0] ---[ end trace 0000000000000000 ]--- [ 41.266740][ T40] ------------[ cut here ]------------ [ 41.266748][ T40] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x10b4/0x1658, CPU#1: kworker/u8:2/40 [ 41.269772][ T40] Modules linked in: [ 41.270517][ T40] CPU: 1 UID: 0 PID: 40 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT [ 41.272486][ T40] Tainted: [W]=WARN [ 41.273214][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 41.275051][ T40] Workqueue: events_unbound cfg80211_wiphy_work [ 41.276229][ T40] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 41.277650][ T40] pc : __cfg80211_bss_update+0x10b4/0x1658 [ 41.278693][ T40] lr : __cfg80211_bss_update+0x164c/0x1658 [ 41.279692][ T40] sp : ffff80008efe6ed0 [ 41.280386][ T40] x29: ffff80008efe6f20 x28: 1ffff00011173571 x27: 1fffe0001e3b2035 [ 41.281763][ T40] x26: dfff800000000000 x25: ffff0000f1d90190 x24: ffff800088b9a000 [ 41.283177][ T40] x23: ffff0000f0609490 x22: ffff0000f1d90190 x21: ffff80008efe6fe0 [ 41.284548][ T40] x20: ffff0000f1d90000 x19: ffff0000f0609400 x18: 0000000000000000 [ 41.285902][ T40] x17: ffff80008606a314 x16: ffff800086065ad8 x15: 0000000000000000 [ 41.287267][ T40] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 41.288735][ T40] x11: 0000000000000000 x10: 0000000000100000 x9 : 00000000000027e8 [ 41.290217][ T40] x8 : ffff8000a7b94000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 41.291669][ T40] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800086063f74 [ 41.293089][ T40] x2 : 0000000000000001 x1 : ffff0000c24c3b00 x0 : 0000000000000001 [ 41.294570][ T40] Call trace: [ 41.295117][ T40] __cfg80211_bss_update+0x10b4/0x1658 (P) [ 41.296162][ T40] cfg80211_inform_single_bss_data+0x980/0x19dc [ 41.297284][ T40] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 41.298288][ T40] cfg80211_inform_bss_frame_data+0x348/0x838 [ 41.299360][ T40] ieee80211_bss_info_update+0x5d0/0x944 [ 41.300369][ T40] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 41.301467][ T40] ieee80211_iface_work+0x600/0xd3c [ 41.302400][ T40] cfg80211_wiphy_work+0x278/0x588 [ 41.303301][ T40] process_scheduled_works+0x91c/0x1250 [ 41.303336][ T5628] loop0: p1 p2 p4 [ 41.303351][ T5628] loop0: partition table partially beyond EOD, truncated [ 41.306071][ T40] worker_thread+0x798/0xbd0 [ 41.306230][ T5628] loop0: p4 start 131072 is beyond EOD, truncated [ 41.307995][ T40] kthread+0x304/0x3d4 [ 41.308739][ T40] ret_from_fork+0x10/0x20 [ 41.309548][ T40] irq event stamp: 960129 [ 41.310304][ T40] hardirqs last enabled at (960128): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 41.312030][ T40] hardirqs last disabled at (960129): [] el1_brk64+0x20/0x54 [ 41.313580][ T40] softirqs last enabled at (959960): [] ieee80211_configure_filter+0x4ec/0x1130 [ 41.315437][ T40] softirqs last disabled at (960126): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 41.317385][ T40] ---[ end trace 0000000000000000 ]--- [ 41.380695][ T4697] udevd[4697]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 41.383852][ T5274] udevd[5274]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 41.898384][ T26] tipc: Node number set to 2886997057 [ 44.121113][ T40] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.178974][ T40] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.228877][ T40] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.298972][ T40] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.408119][ T40] bridge_slave_1: left allmulticast mode [ 44.408141][ T40] bridge_slave_1: left promiscuous mode [ 44.408224][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.409742][ T40] bridge_slave_0: left allmulticast mode [ 44.409754][ T40] bridge_slave_0: left promiscuous mode [ 44.409815][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.471688][ T40] team0: Port device bridge0 removed [ 44.474849][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.499421][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.540048][ T40] bond0 (unregistering): Released all slaves [ 44.671546][ T4398] 8021q: adding VLAN 0 to HW filter on device eth4 [ 44.769767][ T40] hsr_slave_0: left promiscuous mode [ 44.770557][ T40] hsr_slave_1: left promiscuous mode [ 44.770862][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.770873][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.771205][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.771214][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.774327][ T40] veth1_macvtap: left promiscuous mode [ 44.774353][ T40] veth0_macvtap: left promiscuous mode [ 44.774452][ T40] veth1_vlan: left promiscuous mode [ 44.774483][ T40] veth0_vlan: left promiscuous mode [ 44.873497][ T40] team0 (unregistering): Port device team_slave_1 removed [ 44.877183][ T40] team0 (unregistering): Port device team_slave_0 removed [ 44.932667][ T4398] 8021q: adding VLAN 0 to HW filter on device eth6 [ 45.076246][ T4398] 8021q: adding VLAN 0 to HW filter on device eth5 [ 45.206105][ T4398] 8021q: adding VLAN 0 to HW filter on device eth7