last executing test programs: 7.815365293s ago: executing program 0 (id=762): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000540)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r4, &(0x7f0000000580), 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000880)) 7.404696895s ago: executing program 0 (id=764): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001400)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001600)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}}) 6.130880044s ago: executing program 0 (id=768): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='PHONEOUT\nMONITOR \'Synth\' 00000000000000000002\nSYNTH \'Master'], 0xc1) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r5, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) capset(&(0x7f0000000400)={0x19980330}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000b1917b", @ANYRES16=0x0, @ANYBLOB="010027bd7000fedbdf25280000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_rssi={{0x4f}, {0x6, 0xc9, 0x2}}}}, 0xa) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) open(&(0x7f0000000540)='.\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 4.789529641s ago: executing program 4 (id=776): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x3, 0x40000140, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x1484a8, &(0x7f0000000500)=ANY=[], 0x21, 0x0, 0x0) symlinkat(&(0x7f0000000540)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000640)='./bus\x00', 0x0, 0x0, &(0x7f00000006c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000700)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7/file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) 4.733613267s ago: executing program 3 (id=777): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x3, 0x40000140, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x1484a8, &(0x7f0000000500)=ANY=[], 0x21, 0x0, 0x0) symlinkat(&(0x7f0000000540)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000700)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7/file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) 4.713069549s ago: executing program 0 (id=788): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000280)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='PHONEOUT\nMONITOR \'Synth\' 00000000000000000002\nSYNTH \'Master'], 0xc1) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r5, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) capset(&(0x7f0000000400)={0x19980330}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000b1917b", @ANYRES16=0x0, @ANYBLOB="010027bd7000fedbdf25280000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_rssi={{0x4f}, {0x6, 0xc9, 0x2}}}}, 0xa) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) open(&(0x7f0000000540)='.\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 3.912736661s ago: executing program 4 (id=780): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x4, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x349ca}]}, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x24, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000500), 0x0) close(r1) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000940)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000bc0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00', 0x0) 3.550615497s ago: executing program 4 (id=783): syz_open_dev$usbfs(&(0x7f00000018c0), 0xb, 0x2) 3.52098113s ago: executing program 4 (id=784): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x121602, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r2, &(0x7f0000000340)=ANY=[@ANYBLOB='PHONEOUT\nMONITOR \'Synth\' 00000000000000000002\nSYNTH \'Master'], 0xc1) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) capset(&(0x7f0000000400)={0x19980330}, 0x0) 3.495783343s ago: executing program 1 (id=785): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x123000, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0) ioctl$PPPIOCSMRU1(r1, 0x80047458, &(0x7f00000002c0)=0xd7) 3.295318544s ago: executing program 1 (id=786): sched_setscheduler(0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xbc}}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x104c55, 0x100}, &(0x7f0000000480)=0x0, 0x0, &(0x7f0000000500)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a0000000500010006000000110003006861"], 0x60}}, 0x24000800) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000003060300000000000000000001000007090002fc73797a31000000000500010007"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x28880) syz_io_uring_submit(r4, 0x0, r5, &(0x7f0000000540)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2001, 0x1, {0x1}}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newnexthop={0x34, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP={0x14, 0x2, [{0x2, 0x1}, {0x1, 0x1}]}]}, 0x34}}, 0x0) 3.215533402s ago: executing program 0 (id=787): close(0xffffffffffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000480)={0x1f, 0x1001}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./security\x00', &(0x7f00000002c0)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/ima/policy\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='appraise func=FIRMWARE_CH', 0x19) listen(r0, 0x1) 2.637682221s ago: executing program 2 (id=790): bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) io_setup(0x5, &(0x7f0000000640)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x20008001) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./trace\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./trace/trace\x00', 0x0, 0x0) read(r3, &(0x7f0000000940), 0x1000) 2.136218462s ago: executing program 3 (id=791): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x104c55, 0x100}, &(0x7f0000000480)=0x0, 0x0, &(0x7f0000000500)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x60}}, 0x24000800) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000003060300000000000000000001000007090002fc73797a31000000000500010007"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x28880) syz_io_uring_submit(r4, 0x0, r5, &(0x7f0000000540)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2001, 0x1, {0x1}}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x70bd25, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newnexthop={0x34, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP={0x14, 0x2, [{0x2, 0x1}, {0x1, 0x1}]}]}, 0x34}}, 0x0) 2.115844554s ago: executing program 1 (id=792): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000380), 0x3, 0x40000140, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x1484a8, &(0x7f0000000500)=ANY=[], 0x21, 0x0, 0x0) symlinkat(&(0x7f0000000540)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000700)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7/file0\x00', 0x0) 1.967557059s ago: executing program 4 (id=793): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15) syz_emit_ethernet(0x5e, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@dev={0xac, 0x14, 0x14, 0x2b}}]}, @ssrr={0x89, 0xf, 0xce, [@broadcast, @dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x18}]}, @generic={0x7, 0x2}]}}, {{0x0, 0x100, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x80002c1, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='smaps\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x2000801c, &(0x7f0000001240)=ANY=[], 0x8, 0x1545, &(0x7f0000001280)="$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") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000002880)=ANY=[@ANYBLOB="38010000100001000000000000000000fc010000000000000000000000000001fc0100000000000000000000000000014e2000004e2000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000001000004d26c000000fc0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000a0001000200007f00000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r3, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000002b00)=ANY=[@ANYBLOB="30000000120004002abd7000ffdbdf25e0000001000000000000000000000000000004d60200ff0008001d0009000000093f5f8ca770e127b78df60f047c143786d8639f4f4171d995b239f6d4"], 0x30}, 0x1, 0x0, 0x0, 0x8801}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002bc0)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.911077315s ago: executing program 1 (id=794): mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000bc0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00', 0x0) 1.497629667s ago: executing program 2 (id=795): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x70bd25, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newnexthop={0x34, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP={0x14, 0x2, [{0x2, 0x1}, {0x1, 0x1}]}]}, 0x34}}, 0x0) 942.081184ms ago: executing program 1 (id=796): syz_open_dev$usbfs(&(0x7f00000018c0), 0xb, 0x2) 890.224009ms ago: executing program 2 (id=797): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x123000, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0) ioctl$PPPIOCSMRU1(r1, 0x80047458, &(0x7f00000002c0)=0xd7) 663.620812ms ago: executing program 2 (id=798): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 663.189072ms ago: executing program 4 (id=799): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000280)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='PHONEOUT\nMONITOR \'Synth\' 00000000000000000002\nSYNTH \'Master'], 0xc1) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r5, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) capset(&(0x7f0000000400)={0x19980330}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000b1917b", @ANYRES16=0x0, @ANYBLOB="010027bd7000fedbdf25280000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_rssi={{0x4f}, {0x6, 0xc9, 0x2}}}}, 0xa) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) open(&(0x7f0000000540)='.\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 657.917752ms ago: executing program 1 (id=808): sched_setscheduler(0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xbc}}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x104c55, 0x100}, &(0x7f0000000480)=0x0, 0x0, &(0x7f0000000500)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a0000000500010006000000110003006861"], 0x60}}, 0x24000800) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000003060300000000000000000001000007090002fc73797a31000000000500010007"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x28880) syz_io_uring_submit(r4, 0x0, r5, &(0x7f0000000540)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2001, 0x1, {0x1}}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x70bd25, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newnexthop={0x34, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP={0x14, 0x2, [{0x2, 0x1}, {0x1, 0x1}]}]}, 0x34}}, 0x0) 569.467051ms ago: executing program 0 (id=800): sched_setscheduler(0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xbc}}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x104c55, 0x100}, &(0x7f0000000480)=0x0, 0x0, &(0x7f0000000500)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a0000000500010006000000110003006861"], 0x60}}, 0x24000800) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000003060300000000000000000001000007090002fc73797a31000000000500010007"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x28880) syz_io_uring_submit(r4, 0x0, r5, &(0x7f0000000540)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2001, 0x1, {0x1}}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newnexthop={0x34, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP={0x14, 0x2, [{0x2, 0x1}, {0x1, 0x1}]}]}, 0x34}}, 0x0) 494.585899ms ago: executing program 3 (id=801): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x4, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x349ca}]}, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x24, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000500), 0x0) close(r0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1\x00', 0x1ff) symlinkat(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r2, &(0x7f0000000b80)='dummy_udc.0', 0xb) 491.03935ms ago: executing program 2 (id=802): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000140)=@filename='mtd0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000200)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x101c42, 0x0) 118.835157ms ago: executing program 3 (id=803): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000140)=@filename='mtd0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000200)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x101c42, 0x0) 61.537463ms ago: executing program 2 (id=804): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x1) syz_usb_connect$uac2(0x5, 0x9d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201500200000040fa04014240000102030109028b00030107000b080b010101ff20050904000000010120000924010180041500070c24030503045d02ec8b00030904010000010220"], 0x0) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97) 61.237343ms ago: executing program 3 (id=805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) 0s ago: executing program 3 (id=806): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x1) syz_usb_connect$uac2(0x5, 0x9d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201500200000040fa04014240000102030109028b00030107000b080b010101ff20050904000000010120000924010180041500070c24030503045d02ec8b00030904010000010220"], 0x0) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97) kernel console output (not intermixed with test programs): slave_1 [ 32.090324][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.096149][ T4336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.118220][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.119825][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.121562][ T4330] device bridge_slave_1 entered promiscuous mode [ 32.126678][ T4341] team0: Port device team_slave_0 added [ 32.130149][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.131573][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.133817][ T4333] device bridge_slave_0 entered promiscuous mode [ 32.146847][ T4341] team0: Port device team_slave_1 added [ 32.148164][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.149712][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.151559][ T4335] device bridge_slave_0 entered promiscuous mode [ 32.158528][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.160089][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.162047][ T4333] device bridge_slave_1 entered promiscuous mode [ 32.170048][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.172069][ T115] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.176702][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.178266][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.180084][ T4335] device bridge_slave_1 entered promiscuous mode [ 32.188050][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.192851][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.194930][ T3995] infiniband rxe0: set active [ 32.200801][ T4333] team0: Port device team_slave_0 added [ 32.202998][ T4333] team0: Port device team_slave_1 added [ 32.214004][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.217488][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.221433][ T115] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.227580][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.229070][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.234171][ T4341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.239737][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.265708][ T4336] device hsr_slave_0 entered promiscuous mode [ 32.304831][ T4336] device hsr_slave_1 entered promiscuous mode [ 32.347258][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.348750][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.353969][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.357084][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.358446][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.363429][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.366472][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.367746][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.372516][ T4341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.387857][ T4330] team0: Port device team_slave_0 added [ 32.402697][ T4330] team0: Port device team_slave_1 added [ 32.405215][ T4335] team0: Port device team_slave_0 added [ 32.407262][ T4335] team0: Port device team_slave_1 added [ 32.412407][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.413808][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.419672][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.465795][ T4333] device hsr_slave_0 entered promiscuous mode [ 32.507330][ T4333] device hsr_slave_1 entered promiscuous mode [ 32.544600][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.546036][ T4333] Cannot create hsr debugfs directory [ 32.551590][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.552958][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.558995][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.605729][ T4341] device hsr_slave_0 entered promiscuous mode [ 32.647049][ T4341] device hsr_slave_1 entered promiscuous mode [ 32.694570][ T4341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.696232][ T4341] Cannot create hsr debugfs directory [ 32.709539][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.711010][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.718595][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.721390][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.722558][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.727569][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.798980][ T4335] device hsr_slave_0 entered promiscuous mode [ 32.834716][ T4335] device hsr_slave_1 entered promiscuous mode [ 32.874565][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.876082][ T4335] Cannot create hsr debugfs directory [ 32.945635][ T4330] device hsr_slave_0 entered promiscuous mode [ 32.984895][ T4330] device hsr_slave_1 entered promiscuous mode [ 33.024553][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.026017][ T4330] Cannot create hsr debugfs directory [ 33.118725][ T4341] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.176288][ T4341] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.227388][ T4341] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.266462][ T4341] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.321239][ T4336] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.359027][ T4336] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.398851][ T4336] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.441099][ T4336] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.471301][ T4333] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.505908][ T4333] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.552913][ T4333] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.595013][ T4331] Bluetooth: hci0: command 0x0409 tx timeout [ 33.602317][ T4333] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.604619][ T4345] Bluetooth: hci2: command 0x0409 tx timeout [ 33.605791][ T4345] Bluetooth: hci3: command 0x0409 tx timeout [ 33.660584][ T4335] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.674982][ T4331] Bluetooth: hci4: command 0x0409 tx timeout [ 33.675000][ T4345] Bluetooth: hci1: command 0x0409 tx timeout [ 33.688273][ T4335] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.747294][ T4335] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.776429][ T4335] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.836685][ T4330] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.857079][ T4330] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.897337][ T4330] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.947630][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.951680][ T4330] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.021246][ T1623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.023789][ T1623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.026562][ T4341] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.042011][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.044230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.046783][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.048191][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.049909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.052991][ T4336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.065628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.067700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.069594][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.071009][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.078959][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.086457][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.088060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.090120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.091794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.098580][ T4336] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.103096][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.111884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.113990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.118537][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.119981][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.121938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.123949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.126660][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.128427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.130445][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.132429][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.134290][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.139031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.140758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.142602][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.147135][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.149168][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.153416][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.162180][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.163852][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.165764][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.168119][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.170026][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.171541][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.173992][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.176496][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.181579][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.184102][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.196671][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.199031][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.200875][ T234] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.202225][ T234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.203933][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.207715][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.209333][ T234] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.210726][ T234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.212509][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.214395][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.217070][ T234] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.218305][ T234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.219920][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.221863][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.229865][ T4336] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.231929][ T4336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.239800][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.241788][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.243975][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.246505][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.248428][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.250286][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.252249][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.257272][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.259115][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.261467][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.263512][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.266669][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.268533][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.270320][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.272224][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.273978][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.277209][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.278887][ T234] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.280177][ T234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.281777][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.283782][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.292577][ T4333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.295218][ T4333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.299291][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.301091][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.302654][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.305030][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.306948][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.308893][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.310647][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.312376][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.314268][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.316313][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.318073][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.319882][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.321829][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.324058][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.333396][ T4341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.339331][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.340907][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.342441][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.344448][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.355872][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.363046][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.376923][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.378983][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.383829][ T1623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.385864][ T1623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.390567][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.402767][ T4341] device veth0_vlan entered promiscuous mode [ 34.405501][ T1623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.407300][ T1623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.409451][ T1623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.411147][ T1623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.415427][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.417516][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.420205][ T4421] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.421666][ T4421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.424102][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.438310][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.445055][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.450008][ T4421] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.451492][ T4421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.456492][ T4341] device veth1_vlan entered promiscuous mode [ 34.463627][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.465968][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.467564][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.478960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.480533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.488999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.491082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.492761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.509083][ T4336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.514792][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.516677][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.523019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.528632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.533132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.536222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.538332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.540197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.543466][ T4341] device veth0_macvtap entered promiscuous mode [ 34.550177][ T4341] device veth1_macvtap entered promiscuous mode [ 34.556560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.558379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.560273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.562128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.563961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.566690][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.580585][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.585210][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.586821][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.588283][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.589792][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.607496][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.611773][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.617332][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.619300][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.621229][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.623025][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.631820][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.634456][ T4341] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.640614][ T4341] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.642285][ T4341] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.643863][ T4341] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.647477][ T4336] device veth0_vlan entered promiscuous mode [ 34.650210][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.652088][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.653776][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.658490][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.676267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.678267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.681346][ T4336] device veth1_vlan entered promiscuous mode [ 34.694299][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.696744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.698445][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.702711][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.705727][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.714029][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.720766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.722455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.732158][ T4335] device veth0_vlan entered promiscuous mode [ 34.760343][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.762261][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.764179][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.780253][ T4335] device veth1_vlan entered promiscuous mode [ 34.782839][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.784902][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.786731][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.793891][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.796962][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.798930][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.800871][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.806626][ T4333] device veth0_vlan entered promiscuous mode [ 34.810039][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.811698][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.816591][ T4336] device veth0_macvtap entered promiscuous mode [ 34.819966][ T4336] device veth1_macvtap entered promiscuous mode [ 34.822168][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.823889][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.828947][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.830618][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.832291][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.834146][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.842517][ T4333] device veth1_vlan entered promiscuous mode [ 34.849412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.851387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.854041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.856188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.859680][ T4330] device veth0_vlan entered promiscuous mode [ 34.870996][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.872169][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.872542][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.875062][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.879550][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.883554][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.885630][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.887475][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.892669][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.895283][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.898352][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.900465][ T4330] device veth1_vlan entered promiscuous mode [ 34.903820][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.906123][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.907883][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.909954][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.911809][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.919761][ T4335] device veth0_macvtap entered promiscuous mode [ 34.925117][ T4335] device veth1_macvtap entered promiscuous mode [ 34.927602][ T4336] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.929247][ T4336] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.930933][ T4336] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.932719][ T4336] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.941917][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.943783][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.946982][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.949068][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.952117][ T4333] device veth0_macvtap entered promiscuous mode [ 34.958123][ T4333] device veth1_macvtap entered promiscuous mode [ 34.992123][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.994320][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.005061][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.007294][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.010334][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.013159][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.016628][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.018524][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.020759][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.022467][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.024441][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.026710][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.030436][ T4330] device veth0_macvtap entered promiscuous mode [ 35.067435][ T4421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.069104][ T4421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.071037][ T4421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.072528][ T4421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.076265][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.079270][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.083859][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.099038][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.101225][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.103489][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.106494][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.108483][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.110529][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.113294][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.119466][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.121510][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.126618][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.130135][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.132066][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.134086][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.139941][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.142228][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.145745][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.148314][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.150518][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.152351][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.154230][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.284806][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.374885][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.450277][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.453313][ T4330] device veth1_macvtap entered promiscuous mode [ 35.461268][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.463137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.465278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.471235][ T4335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.472818][ T4335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.474439][ T4335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.479016][ T4335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.498467][ T4333] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.500243][ T4333] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.501908][ T4333] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.504038][ T4333] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.526645][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.528673][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.530829][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.533001][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.536024][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.538416][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.540397][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.542585][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.548025][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.552320][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.555467][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.560631][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.562660][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.565115][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.567074][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.568881][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.570805][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.572719][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.575467][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.578312][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.587170][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.589479][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.597483][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.598995][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.600746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.604141][ T4330] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.609258][ T4330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.611649][ T4330] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.613506][ T4330] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.675828][ T4331] Bluetooth: hci2: command 0x041b tx timeout [ 35.675876][ T4345] Bluetooth: hci0: command 0x041b tx timeout [ 35.678879][ T4346] Bluetooth: hci3: command 0x041b tx timeout [ 35.755951][ T4331] Bluetooth: hci1: command 0x041b tx timeout [ 35.757705][ T4345] Bluetooth: hci4: command 0x041b tx timeout [ 36.197459][ T4462] FAULT_INJECTION: forcing a failure. [ 36.197459][ T4462] name failslab, interval 1, probability 0, space 0, times 1 [ 36.200639][ T4462] CPU: 1 PID: 4462 Comm: syz.3.7 Not tainted syzkaller #0 [ 36.202165][ T4462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 36.204189][ T4462] Call trace: [ 36.204832][ T4462] dump_backtrace+0x1c4/0x1f0 [ 36.205768][ T4462] show_stack+0x2c/0x3c [ 36.206581][ T4462] __dump_stack+0x30/0x40 [ 36.207415][ T4462] dump_stack_lvl+0xf4/0x15c [ 36.208294][ T4462] dump_stack+0x1c/0x5c [ 36.209107][ T4462] should_fail_ex+0x3cc/0x524 [ 36.210035][ T4462] __should_failslab+0xc0/0x11c [ 36.210883][ T4462] should_failslab+0x10/0x28 [ 36.211680][ T4462] kmem_cache_alloc+0x88/0x310 [ 36.212572][ T4462] vm_area_dup+0x30/0x1c4 [ 36.213429][ T4462] copy_mm+0x824/0x11e4 [ 36.214191][ T4462] copy_process+0x16d8/0x38b4 [ 36.215153][ T4462] kernel_clone+0x1ec/0x938 [ 36.216081][ T4462] __arm64_sys_clone+0x15c/0x1c8 [ 36.217113][ T4462] invoke_syscall+0x98/0x290 [ 36.218113][ T4462] el0_svc_common+0x13c/0x258 [ 36.219163][ T4462] do_el0_svc+0x5c/0x134 [ 36.220011][ T4462] el0_svc+0x58/0x12c [ 36.220856][ T4462] el0t_64_sync_handler+0x84/0xf0 [ 36.221890][ T4462] el0t_64_sync+0x18c/0x190 [ 36.246150][ T234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.251136][ T234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.262591][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.530476][ T4421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.532046][ T4421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.533732][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.585169][ T4430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.586794][ T4430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.588433][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.648307][ T4430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.649895][ T4430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.651692][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.744014][ T4430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.761822][ T4430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.763562][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.479089][ T4482] capability: warning: `syz.1.10' uses 32-bit capabilities (legacy support in use) [ 37.714792][ T4480] slcan: can't register candev [ 37.742227][ T4483] Zero length message leads to an empty skb [ 37.754580][ T4345] Bluetooth: hci0: command 0x040f tx timeout [ 37.764565][ T4346] Bluetooth: hci2: command 0x040f tx timeout [ 37.765915][ T4346] Bluetooth: hci3: command 0x040f tx timeout [ 37.835233][ T4345] Bluetooth: hci4: command 0x040f tx timeout [ 37.844560][ T4346] Bluetooth: hci1: command 0x040f tx timeout [ 39.506715][ T4518] can0: slcan on ttyS3. [ 39.587926][ T4520] xt_l2tp: invalid flags combination: 8 [ 39.695778][ T4518] can0 (unregistered): slcan off ttyS3. [ 39.835348][ T4345] Bluetooth: hci2: command 0x0419 tx timeout [ 39.836660][ T4345] Bluetooth: hci0: command 0x0419 tx timeout [ 40.209646][ T4346] Bluetooth: hci1: command 0x0419 tx timeout [ 40.214179][ T4346] Bluetooth: hci4: command 0x0419 tx timeout [ 40.691715][ T27] audit: type=1326 audit(40.680:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.3.29" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff97979728 code=0xffff0000 [ 40.950525][ T4569] FAULT_INJECTION: forcing a failure. [ 40.950525][ T4569] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 40.956158][ T4569] CPU: 0 PID: 4569 Comm: syz.4.33 Not tainted syzkaller #0 [ 40.957715][ T4569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 40.960124][ T4569] Call trace: [ 40.960845][ T4569] dump_backtrace+0x1c4/0x1f0 [ 40.961931][ T4569] show_stack+0x2c/0x3c [ 40.962886][ T4569] __dump_stack+0x30/0x40 [ 40.963826][ T4569] dump_stack_lvl+0xf4/0x15c [ 40.964840][ T4569] dump_stack+0x1c/0x5c [ 40.965789][ T4569] should_fail_ex+0x3cc/0x524 [ 40.966717][ T4569] should_fail_alloc_page+0x74/0xb8 [ 40.967843][ T4569] prepare_alloc_pages+0x1b8/0x4f0 [ 40.968892][ T4569] __alloc_pages+0x134/0x544 [ 40.969793][ T4569] alloc_pages+0x434/0x6fc [ 40.970752][ T4569] pte_alloc_one+0x2c/0x254 [ 40.971692][ T4569] copy_page_range+0x223c/0x29b4 [ 40.972764][ T4569] copy_mm+0xb48/0x11e4 [ 40.973629][ T4569] copy_process+0x16d8/0x38b4 [ 40.974584][ T4569] kernel_clone+0x1ec/0x938 [ 40.975559][ T4569] __arm64_sys_clone+0x15c/0x1c8 [ 40.976647][ T4569] invoke_syscall+0x98/0x290 [ 40.977661][ T4569] el0_svc_common+0x13c/0x258 [ 40.978579][ T4569] do_el0_svc+0x5c/0x134 [ 40.979501][ T4569] el0_svc+0x58/0x12c [ 40.980348][ T4569] el0t_64_sync_handler+0x84/0xf0 [ 40.981441][ T4569] el0t_64_sync+0x18c/0x190 [ 42.635826][ T4589] can0: slcan on ttyS3. [ 42.718731][ T4590] xt_l2tp: invalid flags combination: 8 [ 42.774777][ T4589] can0 (unregistered): slcan off ttyS3. [ 43.132477][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 44.265698][ T4646] netlink: 24 bytes leftover after parsing attributes in process `syz.3.50'. [ 45.301656][ T4670] can0: slcan on ttyS3. [ 45.369358][ T4672] xt_l2tp: invalid flags combination: 8 [ 45.544606][ T4670] can0 (unregistered): slcan off ttyS3. [ 46.336806][ T4720] batman_adv: batadv0: Adding interface: syz_tun [ 46.338322][ T4720] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.343707][ T4720] batman_adv: batadv0: Interface activated: syz_tun [ 46.698376][ T4737] can0: slcan on ttyS3. [ 46.965413][ T4737] can0 (unregistered): slcan off ttyS3. [ 47.008002][ T4745] ip_tables: iptables: counters copy to user failed while replacing table [ 47.365499][ T4758] can0: slcan on ttyS3. [ 47.631247][ T4759] xt_l2tp: invalid flags combination: 8 [ 48.035372][ T4758] can0 (unregistered): slcan off ttyS3. [ 48.180823][ T4770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.82'. [ 48.997951][ T4809] can0: slcan on ttyS3. [ 49.324655][ T4809] can0 (unregistered): slcan off ttyS3. [ 49.595560][ T4825] xt_l2tp: invalid flags combination: 8 [ 49.770518][ T4824] can0: slcan on ttyS3. [ 50.157299][ T4839] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 50.158861][ T4839] overlayfs: failed to set xattr on upper [ 50.160109][ T4839] overlayfs: ...falling back to index=off,metacopy=off. [ 50.216177][ T4810] can0 (unregistered): slcan off ttyS3. [ 50.243995][ T27] audit: type=1807 audit(50.230:3): action=appraise func=FIRMWARE_CHECK res=1 [ 50.518555][ T4868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.109'. [ 50.725412][ T4870] batman_adv: batadv0: Adding interface: syz_tun [ 50.726776][ T4870] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.731159][ T4870] batman_adv: batadv0: Interface activated: syz_tun [ 50.735610][ T4835] ima: policy update completed [ 50.743455][ T27] audit: type=1802 audit(50.730:4): pid=4835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.4.106" res=1 errno=0 [ 51.024621][ T4896] can0: slcan on ttyS3. [ 51.234947][ T4896] can0 (unregistered): slcan off ttyS3. [ 51.306084][ T4877] overlayfs: failed to resolve './file0': -2 [ 52.212806][ T4914] can0: slcan on ttyS3. [ 52.281400][ T4916] xt_l2tp: invalid flags combination: 8 [ 52.386558][ T4914] can0 (unregistered): slcan off ttyS3. [ 52.419159][ T4919] rnbd_client L600: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 52.428976][ T4915] rtrs_client L1789: : Resolving route failed, err: -19 [ 52.511117][ T4919] rtrs_client L2627: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 52.524666][ T4319] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 52.741015][ T4929] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 52.742423][ T4929] overlayfs: failed to set xattr on upper [ 52.743408][ T4929] overlayfs: ...falling back to index=off,metacopy=off. [ 52.774688][ T4923] syz.2.126 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 52.777072][ T4923] CPU: 1 PID: 4923 Comm: syz.2.126 Not tainted syzkaller #0 [ 52.778405][ T4923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 52.780533][ T4923] Call trace: [ 52.781241][ T4923] dump_backtrace+0x1c4/0x1f0 [ 52.782238][ T4923] show_stack+0x2c/0x3c [ 52.783107][ T4923] __dump_stack+0x30/0x40 [ 52.784033][ T4923] dump_stack_lvl+0xf4/0x15c [ 52.785034][ T4923] dump_stack+0x1c/0x5c [ 52.785879][ T4923] dump_header+0xc0/0x724 [ 52.786851][ T4923] oom_kill_process+0x35c/0x660 [ 52.787898][ T4923] out_of_memory+0xbf0/0xf70 [ 52.788873][ T4923] mem_cgroup_out_of_memory+0x228/0x2d0 [ 52.790026][ T4923] try_charge_memcg+0xa4c/0x1390 [ 52.791015][ T4923] obj_cgroup_charge+0x178/0x2e4 [ 52.792065][ T4923] __kmem_cache_alloc_node+0xf0/0x318 [ 52.793201][ T4923] kmalloc_trace+0x48/0x94 [ 52.794086][ T4923] mr_table_alloc+0x74/0x21c [ 52.795028][ T4923] ip6mr_net_init+0x238/0x390 [ 52.795954][ T4923] ops_init+0x2b0/0x53c [ 52.796824][ T4923] setup_net+0x494/0xb6c [ 52.797677][ T4923] copy_net_ns+0x2b8/0x578 [ 52.798644][ T4923] create_new_namespaces+0x30c/0x604 [ 52.799674][ T4923] unshare_nsproxy_namespaces+0x108/0x160 [ 52.800854][ T4923] ksys_unshare+0x3f0/0x70c [ 52.801876][ T4923] __arm64_sys_unshare+0x3c/0x50 [ 52.802989][ T4923] invoke_syscall+0x98/0x290 [ 52.803935][ T4923] el0_svc_common+0x13c/0x258 [ 52.804814][ T4923] do_el0_svc+0x5c/0x134 [ 52.805625][ T4923] el0_svc+0x58/0x12c [ 52.806461][ T4923] el0t_64_sync_handler+0x84/0xf0 [ 52.807441][ T4923] el0t_64_sync+0x18c/0x190 [ 52.812161][ T4923] memory: usage 92kB, limit 96kB, failcnt 31 [ 52.813285][ T4923] memory+swap: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 52.817965][ T4923] kmem: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 52.820490][ T4923] Memory cgroup stats for /syz2/test: [ 52.820692][ T4923] anon 0 [ 52.820692][ T4923] file 0 [ 52.820692][ T4923] kernel 94208 [ 52.820692][ T4923] kernel_stack 0 [ 52.820692][ T4923] pagetables 4096 [ 52.820692][ T4923] sec_pagetables 0 [ 52.820692][ T4923] percpu 0 [ 52.820692][ T4923] sock 0 [ 52.820692][ T4923] vmalloc 0 [ 52.820692][ T4923] shmem 0 [ 52.820692][ T4923] zswap 0 [ 52.820692][ T4923] zswapped 0 [ 52.820692][ T4923] file_mapped 0 [ 52.820692][ T4923] file_dirty 0 [ 52.820692][ T4923] file_writeback 0 [ 52.820692][ T4923] swapcached 0 [ 52.820692][ T4923] anon_thp 0 [ 52.820692][ T4923] file_thp 0 [ 52.820692][ T4923] shmem_thp 0 [ 52.820692][ T4923] inactive_anon 0 [ 52.820692][ T4923] active_anon 0 [ 52.820692][ T4923] inactive_file 0 [ 52.820692][ T4923] active_file 0 [ 52.820692][ T4923] unevictable 0 [ 52.820692][ T4923] slab_reclaimable 15440 [ 52.820692][ T4923] slab_unreclaimable 73240 [ 52.820692][ T4923] slab 88680 [ 52.820692][ T4923] workingset_refault_anon 0 [ 52.850407][ T4319] usb 1-1: unable to get BOS descriptor or descriptor too short [ 52.853693][ T4923] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.126,pid=4921,uid=0 [ 52.859443][ T4319] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 52.862146][ T4923] Memory cgroup out of memory: Killed process 4921 (syz.2.126) total-vm:104440kB, anon-rss:1392kB, file-rss:21640kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 52.862659][ T4319] usb 1-1: can't read configurations, error -71 [ 52.996620][ T27] audit: type=1807 audit(52.990:5): action=appraise func=FIRMWARE_CHECK res=1 [ 53.267181][ T4975] can0: slcan on ttyS3. [ 53.345517][ T4976] xt_l2tp: invalid flags combination: 8 [ 53.594888][ T4975] can0 (unregistered): slcan off ttyS3. [ 53.669770][ T4988] batman_adv: batadv0: Adding interface: syz_tun [ 53.671405][ T4988] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.676982][ T4988] batman_adv: batadv0: Interface activated: syz_tun [ 53.706646][ T4940] ima: policy update completed [ 53.707952][ T27] audit: type=1802 audit(53.700:6): pid=4940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.3.128" res=1 errno=0 [ 53.862336][ T4997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.130'. [ 54.488875][ T5012] loop0: detected capacity change from 0 to 256 [ 54.553621][ T5012] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 55.745699][ T5022] can0: slcan on ttyS3. [ 55.984484][ C0] sched: RT throttling activated [ 56.154808][ T5013] can0 (unregistered): slcan off ttyS3. [ 56.256216][ T5037] loop1: detected capacity change from 0 to 256 [ 56.290908][ T5037] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 56.388510][ T5039] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 56.390163][ T5039] overlayfs: failed to set xattr on upper [ 56.391289][ T5039] overlayfs: ...falling back to index=off,metacopy=off. [ 57.639722][ T5051] loop2: detected capacity change from 0 to 256 [ 57.689299][ T5051] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 58.003900][ T5047] syz.4.143 uses obsolete (PF_INET,SOCK_PACKET) [ 58.218750][ T5055] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 58.220276][ T5055] overlayfs: failed to set xattr on upper [ 58.221501][ T5055] overlayfs: ...falling back to index=off,metacopy=off. [ 58.224312][ T5055] overlayfs: failed to resolve './file0': -2 [ 59.198070][ T5063] loop1: detected capacity change from 0 to 256 [ 59.372762][ T5063] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 60.669102][ T5082] loop0: detected capacity change from 0 to 128 [ 60.678758][ T5082] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 61.812731][ T5108] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 61.814210][ T5108] overlayfs: failed to set xattr on upper [ 61.815488][ T5108] overlayfs: ...falling back to index=off,metacopy=off. [ 62.311739][ T5111] loop4: detected capacity change from 0 to 128 [ 62.343283][ T5111] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 64.497205][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.499005][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.315177][ T5151] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 65.316677][ T5151] overlayfs: failed to set xattr on upper [ 65.317875][ T5151] overlayfs: ...falling back to index=off,metacopy=off. [ 65.334892][ T5150] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 65.336396][ T5150] overlayfs: failed to set xattr on upper [ 65.337585][ T5150] overlayfs: ...falling back to index=off,metacopy=off. [ 65.351049][ T5149] device syzkaller1 entered promiscuous mode [ 65.469512][ T5161] loop3: detected capacity change from 0 to 256 [ 65.510431][ T5161] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 65.590651][ T5162] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 65.592532][ T5162] overlayfs: failed to set xattr on upper [ 65.593867][ T5162] overlayfs: ...falling back to index=off,metacopy=off. [ 67.390622][ T5174] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 67.391971][ T5174] overlayfs: failed to set xattr on upper [ 67.392943][ T5174] overlayfs: ...falling back to index=off,metacopy=off. [ 67.411950][ T5170] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 67.413357][ T5170] overlayfs: failed to set xattr on upper [ 67.414328][ T5170] overlayfs: ...falling back to index=off,metacopy=off. [ 67.422552][ T5166] device syzkaller1 entered promiscuous mode [ 67.426866][ T5166] TC_ACT_REPEAT abuse ? [ 67.520630][ T5180] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 67.522541][ T5180] overlayfs: failed to set xattr on upper [ 67.523960][ T5180] overlayfs: ...falling back to index=off,metacopy=off. [ 67.906697][ T5183] loop4: detected capacity change from 0 to 32768 [ 67.908364][ T5183] ======================================================= [ 67.908364][ T5183] WARNING: The mand mount option has been deprecated and [ 67.908364][ T5183] and is ignored by this kernel. Remove the mand [ 67.908364][ T5183] option from the mount to silence this warning. [ 67.908364][ T5183] ======================================================= [ 67.917212][ T5183] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.170 (5183) [ 67.949974][ T5185] device syzkaller1 entered promiscuous mode [ 67.957965][ T5183] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 67.960169][ T5183] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 67.961816][ T5183] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 67.963837][ T5183] BTRFS info (device loop4): use zstd compression, level 3 [ 67.965285][ T5183] BTRFS info (device loop4): force clearing of disk cache [ 67.966696][ T5183] BTRFS info (device loop4): enabling disk space caching [ 67.968044][ T5183] BTRFS info (device loop4): disk space caching is enabled [ 67.981888][ T5185] TC_ACT_REPEAT abuse ? [ 68.067775][ T5197] device syzkaller1 entered promiscuous mode [ 68.110199][ T5191] TC_ACT_REPEAT abuse ? [ 68.220526][ T5209] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 68.222109][ T5209] overlayfs: failed to set xattr on upper [ 68.223371][ T5209] overlayfs: ...falling back to index=off,metacopy=off. [ 68.446088][ T5183] BTRFS info (device loop4): enabling ssd optimizations [ 68.449022][ T5183] BTRFS info (device loop4): rebuilding free space tree [ 68.460677][ T5183] BTRFS info (device loop4): disabling free space tree [ 68.461976][ T5183] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 68.463837][ T5183] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 68.480165][ T5198] loop2: detected capacity change from 0 to 32768 [ 68.487405][ T5198] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.173 (5198) [ 68.607896][ T4348] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4348) [ 68.711439][ T5216] loop0: detected capacity change from 0 to 32768 [ 68.718137][ T5216] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.174 (5216) [ 68.807562][ T4333] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 68.827407][ T4320] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.961130][ T5219] device syzkaller1 entered promiscuous mode [ 69.279918][ T5219] TC_ACT_REPEAT abuse ? [ 69.569334][ T5227] netlink: 'syz.2.178': attribute type 4 has an invalid length. [ 69.571052][ T5227] netlink: 17 bytes leftover after parsing attributes in process `syz.2.178'. [ 69.572987][ T5227] FAULT_INJECTION: forcing a failure. [ 69.572987][ T5227] name failslab, interval 1, probability 0, space 0, times 0 [ 69.575781][ T5227] CPU: 1 PID: 5227 Comm: syz.2.178 Not tainted syzkaller #0 [ 69.577407][ T5227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 69.579570][ T5227] Call trace: [ 69.580245][ T5227] dump_backtrace+0x1c4/0x1f0 [ 69.581240][ T5227] show_stack+0x2c/0x3c [ 69.582053][ T5227] __dump_stack+0x30/0x40 [ 69.582911][ T5227] dump_stack_lvl+0xf4/0x15c [ 69.583814][ T5227] dump_stack+0x1c/0x5c [ 69.584628][ T5227] should_fail_ex+0x3cc/0x524 [ 69.585586][ T5227] __should_failslab+0xc0/0x11c [ 69.586493][ T5227] should_failslab+0x10/0x28 [ 69.587794][ T5227] kmem_cache_alloc+0x88/0x310 [ 69.588757][ T5227] fib_insert_alias+0x268/0xf14 [ 69.589584][ T5227] fib_trie_unmerge+0x288/0xb38 [ 69.590382][ T5227] fib_unmerge+0xdc/0x2fc [ 69.591217][ T5227] fib4_rule_configure+0xe0/0x980 [ 69.592181][ T5227] fib_nl_newrule+0xe30/0x1618 [ 69.593112][ T5227] rtnetlink_rcv_msg+0x694/0xcc4 [ 69.594142][ T5227] netlink_rcv_skb+0x220/0x3ec [ 69.595115][ T5227] rtnetlink_rcv+0x28/0x38 [ 69.595928][ T14] cfg80211: failed to load regulatory.db [ 69.596070][ T5227] netlink_unicast+0x5fc/0x80c [ 69.598380][ T5227] netlink_sendmsg+0x6f0/0x9d8 [ 69.599311][ T5227] ____sys_sendmsg+0x588/0x90c [ 69.600337][ T5227] __sys_sendmsg+0x288/0x374 [ 69.601385][ T5227] __arm64_sys_sendmsg+0x80/0x94 [ 69.602440][ T5227] invoke_syscall+0x98/0x290 [ 69.603516][ T5227] el0_svc_common+0x13c/0x258 [ 69.604424][ T5227] do_el0_svc+0x5c/0x134 [ 69.605262][ T5227] el0_svc+0x58/0x12c [ 69.606074][ T5227] el0t_64_sync_handler+0x84/0xf0 [ 69.607155][ T5227] el0t_64_sync+0x18c/0x190 [ 69.780074][ T5233] device syzkaller1 entered promiscuous mode [ 70.191695][ T5244] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.200876][ T5242] loop2: detected capacity change from 0 to 32768 [ 70.213371][ T5242] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.181 (5242) [ 70.233050][ T5242] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 70.238104][ T5242] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 70.243374][ T5242] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 70.248913][ T5242] BTRFS info (device loop2): use zstd compression, level 3 [ 70.254045][ T5242] BTRFS info (device loop2): force clearing of disk cache [ 70.263190][ T5242] BTRFS info (device loop2): enabling disk space caching [ 70.269827][ T5242] BTRFS info (device loop2): disk space caching is enabled [ 70.345128][ T5252] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.375960][ T5242] BTRFS info (device loop2): enabling ssd optimizations [ 70.381113][ T5242] BTRFS info (device loop2): rebuilding free space tree [ 70.390761][ T5242] BTRFS info (device loop2): disabling free space tree [ 70.392440][ T5242] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 70.420050][ T5242] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 70.474022][ T5270] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.978959][ T5280] device syzkaller1 entered promiscuous mode [ 71.175261][ T4335] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 71.230536][ T5274] loop4: detected capacity change from 0 to 32768 [ 71.233526][ T5274] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.186 (5274) [ 71.295590][ T4320] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 71.413262][ T5283] device syzkaller1 entered promiscuous mode [ 71.442177][ T5293] rnbd_client L600: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 71.450133][ T5038] rtrs_client L1789: : Resolving route failed, err: -19 [ 71.516748][ T5295] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 71.518235][ T5295] overlayfs: failed to set xattr on upper [ 71.519379][ T5295] overlayfs: ...falling back to index=off,metacopy=off. [ 71.766900][ T5293] rtrs_client L2627: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 71.798698][ T27] audit: type=1807 audit(71.790:7): action=appraise func=FIRMWARE_CHECK res=1 [ 71.843310][ T5305] loop0: detected capacity change from 0 to 512 [ 72.269117][ T5291] ima: policy update completed [ 72.282810][ T27] audit: type=1802 audit(72.270:8): pid=5291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.3.193" res=1 errno=0 [ 72.292387][ T5311] process 'syz.0.196' launched './file1' with NULL argv: empty string added [ 72.674241][ T5325] loop3: detected capacity change from 0 to 256 [ 72.865246][ T5325] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 73.585662][ T5327] syz.1.200 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 73.588132][ T5327] CPU: 1 PID: 5327 Comm: syz.1.200 Not tainted syzkaller #0 [ 73.589658][ T5327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 73.591758][ T5327] Call trace: [ 73.592427][ T5327] dump_backtrace+0x1c4/0x1f0 [ 73.593378][ T5327] show_stack+0x2c/0x3c [ 73.594162][ T5327] __dump_stack+0x30/0x40 [ 73.594985][ T5327] dump_stack_lvl+0xf4/0x15c [ 73.595863][ T5327] dump_stack+0x1c/0x5c [ 73.596837][ T5327] dump_header+0xc0/0x724 [ 73.597753][ T5327] oom_kill_process+0x35c/0x660 [ 73.598794][ T5327] out_of_memory+0xbf0/0xf70 [ 73.599732][ T5327] mem_cgroup_out_of_memory+0x228/0x2d0 [ 73.600955][ T5327] try_charge_memcg+0xa4c/0x1390 [ 73.601914][ T5327] obj_cgroup_charge+0x178/0x2e4 [ 73.602858][ T5327] __kmem_cache_alloc_node+0xf0/0x318 [ 73.603958][ T5327] kmalloc_trace+0x48/0x94 [ 73.604860][ T5327] mr_table_alloc+0x74/0x21c [ 73.605816][ T5327] ipmr_net_init+0x238/0x390 [ 73.606831][ T5327] ops_init+0x2b0/0x53c [ 73.607702][ T5327] setup_net+0x494/0xb6c [ 73.608571][ T5327] copy_net_ns+0x2b8/0x578 [ 73.609644][ T5327] create_new_namespaces+0x30c/0x604 [ 73.610813][ T5327] unshare_nsproxy_namespaces+0x108/0x160 [ 73.611986][ T5327] ksys_unshare+0x3f0/0x70c [ 73.612897][ T5327] __arm64_sys_unshare+0x3c/0x50 [ 73.613942][ T5327] invoke_syscall+0x98/0x290 [ 73.614927][ T5327] el0_svc_common+0x13c/0x258 [ 73.615957][ T5327] do_el0_svc+0x5c/0x134 [ 73.616944][ T5327] el0_svc+0x58/0x12c [ 73.617876][ T5327] el0t_64_sync_handler+0x84/0xf0 [ 73.618942][ T5327] el0t_64_sync+0x18c/0x190 [ 73.796888][ T5327] memory: usage 92kB, limit 96kB, failcnt 40 [ 73.803710][ T5327] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 73.805563][ T5327] kmem: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 73.807090][ T5327] Memory cgroup stats for /syz1/test: [ 73.807209][ T5327] anon 0 [ 73.807209][ T5327] file 0 [ 73.807209][ T5327] kernel 94208 [ 73.807209][ T5327] kernel_stack 32768 [ 73.807209][ T5327] pagetables 0 [ 73.807209][ T5327] sec_pagetables 0 [ 73.807209][ T5327] percpu 0 [ 73.807209][ T5327] sock 0 [ 73.807209][ T5327] vmalloc 0 [ 73.807209][ T5327] shmem 0 [ 73.807209][ T5327] zswap 0 [ 73.807209][ T5327] zswapped 0 [ 73.807209][ T5327] file_mapped 0 [ 73.807209][ T5327] file_dirty 0 [ 73.807209][ T5327] file_writeback 0 [ 73.807209][ T5327] swapcached 8192 [ 73.807209][ T5327] anon_thp 0 [ 73.807209][ T5327] file_thp 0 [ 73.807209][ T5327] shmem_thp 0 [ 73.807209][ T5327] inactive_anon 0 [ 73.807209][ T5327] active_anon 0 [ 73.807209][ T5327] inactive_file 0 [ 73.807209][ T5327] active_file 0 [ 73.807209][ T5327] unevictable 0 [ 73.807209][ T5327] slab_reclaimable 9264 [ 73.807209][ T5327] slab_unreclaimable 48216 [ 73.807209][ T5327] slab 57480 [ 73.827718][ T5327] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.200,pid=5320,uid=0 [ 73.830890][ T5327] Memory cgroup out of memory: Killed process 5320 (syz.1.200) total-vm:104440kB, anon-rss:1400kB, file-rss:21620kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 73.922627][ T5335] device syzkaller1 entered promiscuous mode [ 73.954338][ T5330] loop2: detected capacity change from 0 to 32768 [ 73.980407][ T5330] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.202 (5330) [ 73.992088][ T5330] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 73.994131][ T5330] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 74.012781][ T5330] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 74.016746][ T5330] BTRFS info (device loop2): use zstd compression, level 3 [ 74.018151][ T5330] BTRFS info (device loop2): force clearing of disk cache [ 74.019563][ T5330] BTRFS info (device loop2): enabling disk space caching [ 74.021022][ T5330] BTRFS info (device loop2): disk space caching is enabled [ 74.131540][ T5348] rnbd_client L600: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 74.158198][ T4915] rtrs_client L1789: : Resolving route failed, err: -19 [ 74.168848][ T5348] rtrs_client L2627: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 74.253015][ T5360] device syzkaller1 entered promiscuous mode [ 74.363198][ T5366] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 74.364632][ T5366] overlayfs: failed to set xattr on upper [ 74.365649][ T5366] overlayfs: ...falling back to index=off,metacopy=off. [ 74.573043][ T5330] BTRFS info (device loop2): enabling ssd optimizations [ 74.577695][ T5330] BTRFS info (device loop2): rebuilding free space tree [ 74.581099][ T5330] BTRFS info (device loop2): disabling free space tree [ 74.582524][ T5330] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 74.584802][ T5330] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 74.620457][ T27] audit: type=1807 audit(74.610:9): action=appraise func=FIRMWARE_CHECK res=1 [ 75.110688][ T5362] ima: policy update completed [ 75.140242][ T27] audit: type=1802 audit(75.110:10): pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.0.209" res=1 errno=0 [ 75.265131][ T5383] syz.4.215 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 75.267364][ T5383] CPU: 1 PID: 5383 Comm: syz.4.215 Not tainted syzkaller #0 [ 75.268826][ T5383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 75.270744][ T5383] Call trace: [ 75.271424][ T5383] dump_backtrace+0x1c4/0x1f0 [ 75.272346][ T5383] show_stack+0x2c/0x3c [ 75.273240][ T5383] __dump_stack+0x30/0x40 [ 75.274157][ T5383] dump_stack_lvl+0xf4/0x15c [ 75.275154][ T5383] dump_stack+0x1c/0x5c [ 75.276030][ T5383] dump_header+0xc0/0x724 [ 75.276916][ T5383] oom_kill_process+0x35c/0x660 [ 75.277665][ T5383] out_of_memory+0xbf0/0xf70 [ 75.278339][ T5383] mem_cgroup_out_of_memory+0x228/0x2d0 [ 75.279367][ T5383] try_charge_memcg+0xa4c/0x1390 [ 75.280345][ T5383] obj_cgroup_charge+0x178/0x2e4 [ 75.281293][ T5383] __kmem_cache_alloc_node+0xf0/0x318 [ 75.282456][ T5383] kmalloc_trace+0x48/0x94 [ 75.283385][ T5383] mr_table_alloc+0x74/0x21c [ 75.284339][ T5383] ip6mr_net_init+0x238/0x390 [ 75.285357][ T5383] ops_init+0x2b0/0x53c [ 75.286219][ T5383] setup_net+0x494/0xb6c [ 75.287118][ T5383] copy_net_ns+0x2b8/0x578 [ 75.288075][ T5383] create_new_namespaces+0x30c/0x604 [ 75.289214][ T5383] unshare_nsproxy_namespaces+0x108/0x160 [ 75.290408][ T5383] ksys_unshare+0x3f0/0x70c [ 75.291344][ T5383] __arm64_sys_unshare+0x3c/0x50 [ 75.292307][ T5383] invoke_syscall+0x98/0x290 [ 75.293233][ T5383] el0_svc_common+0x13c/0x258 [ 75.294255][ T5383] do_el0_svc+0x5c/0x134 [ 75.295139][ T5383] el0_svc+0x58/0x12c [ 75.295944][ T5383] el0t_64_sync_handler+0x84/0xf0 [ 75.297054][ T5383] el0t_64_sync+0x18c/0x190 [ 75.301095][ T5383] memory: usage 88kB, limit 96kB, failcnt 30 [ 75.302294][ T5383] memory+swap: usage 88kB, limit 9007199254740988kB, failcnt 0 [ 75.303673][ T5383] kmem: usage 88kB, limit 9007199254740988kB, failcnt 0 [ 75.305399][ T5383] Memory cgroup stats for /syz4/test: [ 75.305523][ T5383] anon 0 [ 75.305523][ T5383] file 0 [ 75.305523][ T5383] kernel 90112 [ 75.305523][ T5383] kernel_stack 0 [ 75.305523][ T5383] pagetables 0 [ 75.305523][ T5383] sec_pagetables 0 [ 75.305523][ T5383] percpu 0 [ 75.305523][ T5383] sock 0 [ 75.305523][ T5383] vmalloc 0 [ 75.305523][ T5383] shmem 0 [ 75.305523][ T5383] zswap 0 [ 75.305523][ T5383] zswapped 0 [ 75.305523][ T5383] file_mapped 0 [ 75.305523][ T5383] file_dirty 0 [ 75.305523][ T5383] file_writeback 0 [ 75.305523][ T5383] swapcached 0 [ 75.305523][ T5383] anon_thp 0 [ 75.305523][ T5383] file_thp 0 [ 75.305523][ T5383] shmem_thp 0 [ 75.305523][ T5383] inactive_anon 0 [ 75.305523][ T5383] active_anon 0 [ 75.305523][ T5383] inactive_file 0 [ 75.305523][ T5383] active_file 0 [ 75.305523][ T5383] unevictable 0 [ 75.305523][ T5383] slab_reclaimable 15440 [ 75.305523][ T5383] slab_unreclaimable 73240 [ 75.305523][ T5383] slab 88680 [ 75.305523][ T5383] workingset_refault_anon 0 [ 75.324885][ T5383] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.215,pid=5382,uid=0 [ 75.327768][ T5383] Memory cgroup out of memory: Killed process 5382 (syz.4.215) total-vm:104248kB, anon-rss:1408kB, file-rss:21640kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 75.562340][ T4335] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 75.801190][ T5398] loop1: detected capacity change from 0 to 256 [ 76.017059][ T5398] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 76.604875][ T5394] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.797233][ T5405] loop2: detected capacity change from 0 to 512 [ 76.837592][ T5408] device syzkaller1 entered promiscuous mode [ 77.008849][ T4348] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 77.084084][ T5414] device syzkaller1 entered promiscuous mode [ 77.500517][ T27] audit: type=1807 audit(77.490:11): action=appraise func=FIRMWARE_CHECK res=1 [ 78.001211][ T5416] ima: policy update completed [ 78.010760][ T27] audit: type=1802 audit(78.000:12): pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.1.227" res=1 errno=0 [ 78.217560][ T5432] loop3: detected capacity change from 0 to 32768 [ 78.245780][ T5432] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.230 (5432) [ 78.268133][ T5432] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 78.470127][ T5438] can0: slcan on ttyS3. [ 78.551686][ T5439] xt_l2tp: invalid flags combination: 8 [ 78.607058][ T5432] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 78.609004][ T5432] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 78.617157][ T5432] BTRFS info (device loop3): use zstd compression, level 3 [ 78.618570][ T5432] BTRFS info (device loop3): force clearing of disk cache [ 78.619923][ T5432] BTRFS info (device loop3): enabling disk space caching [ 78.621308][ T5432] BTRFS info (device loop3): disk space caching is enabled [ 78.655927][ T5438] can0 (unregistered): slcan off ttyS3. [ 78.727161][ T5432] BTRFS info (device loop3): enabling ssd optimizations [ 78.730231][ T5432] BTRFS info (device loop3): rebuilding free space tree [ 78.733590][ T5432] BTRFS info (device loop3): disabling free space tree [ 78.735076][ T5432] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 78.736845][ T5432] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 78.824764][ T5461] can0: slcan on ttyS3. [ 78.859683][ T5461] xt_l2tp: invalid flags combination: 8 [ 79.564714][ T5441] can0 (unregistered): slcan off ttyS3. [ 80.784581][ T5524] loop4: detected capacity change from 0 to 512 [ 80.816609][ T5510] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 80.818059][ T5510] overlayfs: failed to set xattr on upper [ 80.819065][ T5510] overlayfs: ...falling back to index=off,metacopy=off. [ 81.334725][ T5531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.243'. [ 81.434584][ T5536] can0: slcan on ttyS3. [ 81.523387][ T5537] xt_l2tp: invalid flags combination: 8 [ 81.704646][ T5536] can0 (unregistered): slcan off ttyS3. [ 81.712061][ T27] audit: type=1807 audit(81.700:13): action=appraise func=FIRMWARE_CHECK res=1 [ 81.733648][ T4341] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 81.957926][ T5544] can0: slcan on ttyS3. [ 82.197633][ T5533] ima: policy update completed [ 82.198653][ T27] audit: type=1802 audit(82.190:14): pid=5533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.1.246" res=1 errno=0 [ 82.744764][ T5540] can0 (unregistered): slcan off ttyS3. [ 82.951992][ T5568] xt_l2tp: invalid flags combination: 8 [ 83.789617][ T5581] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 83.791210][ T5581] overlayfs: failed to set xattr on upper [ 83.792333][ T5581] overlayfs: ...falling back to index=off,metacopy=off. [ 84.519086][ T5603] loop2: detected capacity change from 0 to 512 [ 85.281150][ T5614] can0: slcan on ttyS3. [ 85.369709][ T5615] xt_l2tp: invalid flags combination: 8 [ 85.511214][ T5614] can0 (unregistered): slcan off ttyS3. [ 86.257127][ T5641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.262'. [ 86.331117][ T5647] syz.2.269 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 86.333406][ T5647] CPU: 0 PID: 5647 Comm: syz.2.269 Not tainted syzkaller #0 [ 86.334857][ T5647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 86.337061][ T5647] Call trace: [ 86.337781][ T5647] dump_backtrace+0x1c4/0x1f0 [ 86.338796][ T5647] show_stack+0x2c/0x3c [ 86.339562][ T5647] __dump_stack+0x30/0x40 [ 86.340444][ T5647] dump_stack_lvl+0xf4/0x15c [ 86.341339][ T5647] dump_stack+0x1c/0x5c [ 86.342194][ T5647] dump_header+0xc0/0x724 [ 86.343058][ T5647] oom_kill_process+0x35c/0x660 [ 86.344029][ T5647] out_of_memory+0xbf0/0xf70 [ 86.344951][ T5647] mem_cgroup_out_of_memory+0x228/0x2d0 [ 86.346064][ T5647] try_charge_memcg+0xa4c/0x1390 [ 86.347021][ T5647] obj_cgroup_charge+0x178/0x2e4 [ 86.347925][ T5647] __kmem_cache_alloc_node+0xf0/0x318 [ 86.348949][ T5647] kmalloc_trace+0x48/0x94 [ 86.349796][ T5647] mr_table_alloc+0x74/0x21c [ 86.350719][ T5647] ip6mr_net_init+0x238/0x390 [ 86.351569][ T5647] ops_init+0x2b0/0x53c [ 86.352350][ T5647] setup_net+0x494/0xb6c [ 86.353150][ T5647] copy_net_ns+0x2b8/0x578 [ 86.353997][ T5647] create_new_namespaces+0x30c/0x604 [ 86.355028][ T5647] unshare_nsproxy_namespaces+0x108/0x160 [ 86.356125][ T5647] ksys_unshare+0x3f0/0x70c [ 86.357006][ T5647] __arm64_sys_unshare+0x3c/0x50 [ 86.357970][ T5647] invoke_syscall+0x98/0x290 [ 86.358856][ T5647] el0_svc_common+0x13c/0x258 [ 86.359844][ T5647] do_el0_svc+0x5c/0x134 [ 86.360672][ T5647] el0_svc+0x58/0x12c [ 86.361380][ T5647] el0t_64_sync_handler+0x84/0xf0 [ 86.362354][ T5647] el0t_64_sync+0x18c/0x190 [ 86.382624][ T27] audit: type=1807 audit(86.370:15): action=appraise func=FIRMWARE_CHECK res=1 [ 86.415825][ T5647] memory: usage 88kB, limit 96kB, failcnt 78 [ 86.418057][ T5647] memory+swap: usage 88kB, limit 9007199254740988kB, failcnt 0 [ 86.424184][ T5647] kmem: usage 88kB, limit 9007199254740988kB, failcnt 0 [ 86.431231][ T5647] Memory cgroup stats for /syz2/test: [ 86.432010][ T5647] anon 0 [ 86.432010][ T5647] file 0 [ 86.432010][ T5647] kernel 90112 [ 86.432010][ T5647] kernel_stack 0 [ 86.432010][ T5647] pagetables 0 [ 86.432010][ T5647] sec_pagetables 0 [ 86.432010][ T5647] percpu 0 [ 86.432010][ T5647] sock 0 [ 86.432010][ T5647] vmalloc 0 [ 86.432010][ T5647] shmem 0 [ 86.432010][ T5647] zswap 0 [ 86.432010][ T5647] zswapped 0 [ 86.432010][ T5647] file_mapped 0 [ 86.432010][ T5647] file_dirty 0 [ 86.432010][ T5647] file_writeback 0 [ 86.432010][ T5647] swapcached 0 [ 86.432010][ T5647] anon_thp 0 [ 86.432010][ T5647] file_thp 0 [ 86.432010][ T5647] shmem_thp 0 [ 86.432010][ T5647] inactive_anon 0 [ 86.432010][ T5647] active_anon 0 [ 86.432010][ T5647] inactive_file 0 [ 86.432010][ T5647] active_file 0 [ 86.432010][ T5647] unevictable 0 [ 86.432010][ T5647] slab_reclaimable 15440 [ 86.432010][ T5647] slab_unreclaimable 73240 [ 86.432010][ T5647] slab 88680 [ 86.432010][ T5647] workingset_refault_anon 0 [ 86.623623][ T5647] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.269,pid=5644,uid=0 [ 86.822360][ T5647] Memory cgroup out of memory: Killed process 5644 (syz.2.269) total-vm:104248kB, anon-rss:1408kB, file-rss:21640kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 87.069685][ T5657] xt_l2tp: invalid flags combination: 8 [ 87.314277][ T5645] ima: policy update completed [ 87.321903][ T27] audit: type=1802 audit(87.310:16): pid=5645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.0.268" res=1 errno=0 [ 88.098202][ T5669] loop3: detected capacity change from 0 to 512 [ 88.136383][ T4320] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 89.199156][ T5687] can0: slcan on ttyS3. [ 89.261551][ T5687] can0 (unregistered): slcan off ttyS3. [ 89.271359][ T5687] xt_l2tp: invalid flags combination: 8 [ 89.705158][ T5695] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 89.759456][ T5698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.283'. [ 90.166446][ T5224] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.225369][ T5709] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 90.322076][ T5726] loop3: detected capacity change from 0 to 32768 [ 90.331641][ T5726] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.287 (5726) [ 90.342877][ T5726] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 90.345135][ T5726] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 90.347705][ T5726] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 90.350096][ T5726] BTRFS info (device loop3): use zstd compression, level 3 [ 90.351540][ T5726] BTRFS info (device loop3): force clearing of disk cache [ 90.352894][ T5726] BTRFS info (device loop3): enabling disk space caching [ 90.354125][ T5726] BTRFS info (device loop3): disk space caching is enabled [ 90.359216][ T5224] usb 1-1: unable to get BOS descriptor or descriptor too short [ 90.361426][ T5224] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 90.363030][ T5224] usb 1-1: can't read configurations, error -71 [ 90.448621][ T5726] BTRFS info (device loop3): enabling ssd optimizations [ 90.450254][ T5726] BTRFS info (device loop3): rebuilding free space tree [ 90.454418][ T5726] BTRFS info (device loop3): disabling free space tree [ 90.456319][ T5726] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 90.458200][ T5726] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 90.521090][ T5761] netlink: 'syz.1.288': attribute type 4 has an invalid length. [ 90.522834][ T5761] netlink: 17 bytes leftover after parsing attributes in process `syz.1.288'. [ 90.532443][ T5761] FAULT_INJECTION: forcing a failure. [ 90.532443][ T5761] name failslab, interval 1, probability 0, space 0, times 0 [ 90.550292][ T5761] CPU: 0 PID: 5761 Comm: syz.1.288 Not tainted syzkaller #0 [ 90.551780][ T5761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 90.553921][ T5761] Call trace: [ 90.554623][ T5761] dump_backtrace+0x1c4/0x1f0 [ 90.555743][ T5761] show_stack+0x2c/0x3c [ 90.556490][ T5761] __dump_stack+0x30/0x40 [ 90.557784][ T5761] dump_stack_lvl+0xf4/0x15c [ 90.558796][ T5761] dump_stack+0x1c/0x5c [ 90.559702][ T5761] should_fail_ex+0x3cc/0x524 [ 90.560738][ T5761] __should_failslab+0xc0/0x11c [ 90.561755][ T5761] should_failslab+0x10/0x28 [ 90.562743][ T5761] kmem_cache_alloc+0x88/0x310 [ 90.563778][ T5761] fib_insert_alias+0x268/0xf14 [ 90.564827][ T5761] fib_trie_unmerge+0x288/0xb38 [ 90.565813][ T5761] fib_unmerge+0xdc/0x2fc [ 90.566727][ T5761] fib4_rule_configure+0xe0/0x980 [ 90.567828][ T5761] fib_nl_newrule+0xe30/0x1618 [ 90.568894][ T5761] rtnetlink_rcv_msg+0x694/0xcc4 [ 90.569997][ T5761] netlink_rcv_skb+0x220/0x3ec [ 90.571018][ T5761] rtnetlink_rcv+0x28/0x38 [ 90.571952][ T5761] netlink_unicast+0x5fc/0x80c [ 90.573015][ T5761] netlink_sendmsg+0x6f0/0x9d8 [ 90.574077][ T5761] ____sys_sendmsg+0x588/0x90c [ 90.575096][ T5761] __sys_sendmsg+0x288/0x374 [ 90.576080][ T5761] __arm64_sys_sendmsg+0x80/0x94 [ 90.577189][ T5761] invoke_syscall+0x98/0x290 [ 90.578173][ T5761] el0_svc_common+0x13c/0x258 [ 90.579165][ T5761] do_el0_svc+0x5c/0x134 [ 90.580019][ T5761] el0_svc+0x58/0x12c [ 90.580867][ T5761] el0t_64_sync_handler+0x84/0xf0 [ 90.581944][ T5761] el0t_64_sync+0x18c/0x190 [ 90.721916][ T5765] xt_l2tp: invalid flags combination: 8 [ 91.711834][ T4341] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 91.812557][ T5792] loop0: detected capacity change from 0 to 512 [ 92.561158][ T5822] can0: slcan on ttyS3. [ 92.571724][ T5822] xt_l2tp: invalid flags combination: 8 [ 93.021540][ T5833] device syzkaller1 entered promiscuous mode [ 93.027195][ T5819] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 93.050965][ T5829] TC_ACT_REPEAT abuse ? [ 93.074563][ T5834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.083533][ T5834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.091365][ T5837] rnbd_client L600: Mapping device /d on session s+, (access_mode: rw, nr_poll_queues: 0) [ 93.093592][ T5837] rnbd_client L1255: Session s+ not found, and path parameter not given [ 93.807386][ T5858] xt_l2tp: invalid flags combination: 8 [ 94.234729][ T5807] can0 (unregistered): slcan off ttyS3. [ 94.621125][ T5887] device syzkaller1 entered promiscuous mode [ 94.627971][ T5887] TC_ACT_REPEAT abuse ? [ 94.845771][ T5902] rnbd_client L600: Mapping device /d on session s+, (access_mode: rw, nr_poll_queues: 0) [ 94.847872][ T5902] rnbd_client L1255: Session s+ not found, and path parameter not given [ 95.384694][ T5913] device syzkaller1 entered promiscuous mode [ 95.389163][ T5913] TC_ACT_REPEAT abuse ? [ 95.417099][ T5905] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 95.720224][ T5932] xt_l2tp: invalid flags combination: 8 [ 96.065106][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 96.303304][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 96.339180][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 96.340914][ T24] usb 1-1: can't read configurations, error -71 [ 96.459100][ T5948] xt_l2tp: invalid flags combination: 8 [ 96.633724][ T5950] rnbd_client L201: map_device: Unknown parameter or missing value 'path=' [ 96.652888][ T5947] can0: slcan on ttyS3. [ 96.839568][ T5970] rnbd_client L201: map_device: Unknown parameter or missing value 'path=' [ 97.245419][ T5936] can0 (unregistered): slcan off ttyS3. [ 97.716404][ T6009] device syzkaller1 entered promiscuous mode [ 97.728724][ T6009] TC_ACT_REPEAT abuse ? [ 97.812090][ T6019] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 97.937132][ T6026] loop1: detected capacity change from 0 to 32768 [ 97.939749][ T6026] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.336 (6026) [ 97.948458][ T6026] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 97.950249][ T6026] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 97.951984][ T6026] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 97.953988][ T6026] BTRFS info (device loop1): use zstd compression, level 3 [ 97.955600][ T6026] BTRFS info (device loop1): force clearing of disk cache [ 97.957006][ T6026] BTRFS info (device loop1): enabling disk space caching [ 97.958326][ T6026] BTRFS info (device loop1): disk space caching is enabled [ 98.280058][ T6051] xt_l2tp: invalid flags combination: 8 [ 98.522475][ T6052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.337'. [ 98.536016][ T6026] BTRFS info (device loop1): enabling ssd optimizations [ 98.537991][ T6026] BTRFS info (device loop1): rebuilding free space tree [ 98.541322][ T6026] BTRFS info (device loop1): disabling free space tree [ 98.542802][ T6026] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 98.544741][ T6026] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 98.823290][ T6066] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 98.825003][ T6066] overlayfs: failed to set xattr on upper [ 98.826287][ T6066] overlayfs: ...falling back to index=off,metacopy=off. [ 99.052283][ T4336] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 99.250005][ T6070] loop1: detected capacity change from 0 to 512 [ 99.443109][ T6078] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 99.444844][ T6078] overlayfs: failed to set xattr on upper [ 99.446032][ T6078] overlayfs: ...falling back to index=off,metacopy=off. [ 99.913699][ T6089] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 99.915373][ T6089] overlayfs: failed to set xattr on upper [ 99.916685][ T6089] overlayfs: ...falling back to index=off,metacopy=off. [ 100.117317][ T6091] can0: slcan on ttyS3. [ 100.119996][ T6091] xt_l2tp: invalid flags combination: 8 [ 100.546383][ T6099] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 100.684613][ T6085] can0 (unregistered): slcan off ttyS3. [ 100.780955][ T6113] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 100.782524][ T6113] overlayfs: failed to set xattr on upper [ 100.783795][ T6113] overlayfs: ...falling back to index=off,metacopy=off. [ 101.719655][ T6137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.355'. [ 101.833673][ T6150] device syzkaller1 entered promiscuous mode [ 101.850987][ T6150] TC_ACT_REPEAT abuse ? [ 101.971852][ T6152] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 101.973678][ T6152] overlayfs: failed to set xattr on upper [ 101.974991][ T6152] overlayfs: ...falling back to index=off,metacopy=off. [ 102.554328][ T6166] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 102.556034][ T6166] overlayfs: failed to set xattr on upper [ 102.557115][ T6166] overlayfs: ...falling back to index=off,metacopy=off. [ 102.788188][ T6172] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 102.789805][ T6172] overlayfs: failed to set xattr on upper [ 102.791060][ T6172] overlayfs: ...falling back to index=off,metacopy=off. [ 103.176147][ T6179] xt_l2tp: invalid flags combination: 8 [ 103.589485][ T6187] rnbd_client L125: Can't parse path ip:127: -22 [ 103.792941][ T6188] overlayfs: missing 'workdir' [ 103.798960][ T6191] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 103.853194][ T6193] loop2: detected capacity change from 0 to 256 [ 103.870356][ T6193] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 105.047772][ T6213] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 105.049246][ T6213] overlayfs: failed to set xattr on upper [ 105.050385][ T6213] overlayfs: ...falling back to index=off,metacopy=off. [ 105.350256][ T6216] device syzkaller1 entered promiscuous mode [ 105.353001][ T6216] TC_ACT_REPEAT abuse ? [ 105.661093][ T6222] rnbd_client L125: Can't parse path ip:127.0.: -22 [ 105.935185][ T6233] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 105.936654][ T6233] overlayfs: failed to set xattr on upper [ 105.937803][ T6233] overlayfs: ...falling back to index=off,metacopy=off. [ 106.083221][ T6235] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 106.234578][ T6237] xt_l2tp: invalid flags combination: 8 [ 107.171998][ T6256] loop0: detected capacity change from 0 to 256 [ 107.395888][ T6256] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 108.173291][ T6258] rnbd_client L125: Can't parse path ip:127.0.: -22 [ 108.410158][ T6263] device syzkaller1 entered promiscuous mode [ 108.423024][ T6263] TC_ACT_REPEAT abuse ? [ 108.693427][ T6280] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 109.891807][ T6301] xt_l2tp: invalid flags combination: 8 [ 110.479830][ T6289] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 110.481339][ T6289] overlayfs: failed to set xattr on upper [ 110.482503][ T6289] overlayfs: ...falling back to index=off,metacopy=off. [ 110.483902][ T6289] overlayfs: failed to resolve './file0': -2 [ 111.661589][ T6333] loop1: detected capacity change from 0 to 256 [ 111.840651][ T6333] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 112.615643][ T6337] loop0: detected capacity change from 0 to 128 [ 112.633120][ T6337] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 112.825994][ T6342] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 114.645135][ T6368] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 114.646701][ T6368] overlayfs: failed to set xattr on upper [ 114.647752][ T6368] overlayfs: ...falling back to index=off,metacopy=off. [ 114.649199][ T6368] overlayfs: failed to resolve './file0': -2 [ 115.108056][ T6381] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 115.109869][ T6381] overlayfs: failed to set xattr on upper [ 115.111180][ T6381] overlayfs: ...falling back to index=off,metacopy=off. [ 115.328891][ T6390] overlayfs: missing 'lowerdir' [ 116.307452][ T6407] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 116.416699][ T6406] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 116.418920][ T6406] overlayfs: failed to set xattr on upper [ 116.420055][ T6406] overlayfs: ...falling back to index=off,metacopy=off. [ 116.422092][ T6406] overlayfs: failed to resolve './file0': -2 [ 117.052886][ T6433] xt_l2tp: invalid flags combination: 8 [ 117.122498][ T6434] overlayfs: missing 'lowerdir' [ 118.242928][ T6451] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 118.244965][ T6451] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 119.027231][ T6469] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 119.028572][ T6469] overlayfs: failed to set xattr on upper [ 119.029697][ T6469] overlayfs: ...falling back to index=off,metacopy=off. [ 119.031322][ T6469] overlayfs: failed to resolve './file0': -2 [ 119.098110][ T6471] loop3: detected capacity change from 0 to 256 [ 119.131263][ T6471] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 120.337726][ T6481] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 120.339235][ T6481] overlayfs: failed to set xattr on upper [ 120.340416][ T6481] overlayfs: ...falling back to index=off,metacopy=off. [ 120.342180][ T6481] overlayfs: failed to resolve './file0': -2 [ 121.444787][ T6501] loop0: detected capacity change from 0 to 256 [ 122.025847][ T6497] loop4: detected capacity change from 0 to 128 [ 122.028731][ T6497] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 122.767841][ T6501] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 122.891506][ T6506] xt_l2tp: invalid flags combination: 8 [ 123.649106][ T6519] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 123.650929][ T6519] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 123.949266][ T6526] loop0: detected capacity change from 0 to 256 [ 125.285708][ T6526] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 125.696359][ T6541] can0: slcan on ttyS3. [ 125.723110][ T6542] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 125.724628][ T6542] overlayfs: failed to set xattr on upper [ 125.725816][ T6542] overlayfs: ...falling back to index=off,metacopy=off. [ 125.727638][ T6542] overlayfs: failed to resolve './file0': -2 [ 126.243121][ T6535] xt_l2tp: invalid flags combination: 8 [ 126.246834][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.250688][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.324071][ T6547] xt_l2tp: invalid flags combination: 8 [ 126.575692][ T6541] can0 (unregistered): slcan off ttyS3. [ 126.761237][ T6556] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 127.002611][ T6549] netlink: 24 bytes leftover after parsing attributes in process `syz.4.475'. [ 127.186497][ T6568] loop1: detected capacity change from 0 to 256 [ 128.625277][ T6568] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 129.047573][ T6580] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 129.049349][ T6580] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 129.053672][ T6581] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 129.111114][ T6585] loop3: detected capacity change from 0 to 256 [ 129.167211][ T6585] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 130.050602][ T6590] loop1: detected capacity change from 0 to 512 [ 130.284414][ T6594] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 130.285945][ T6594] overlayfs: failed to set xattr on upper [ 130.287152][ T6594] overlayfs: ...falling back to index=off,metacopy=off. [ 131.460546][ T6602] can0: slcan on ttyS3. [ 131.529624][ T6607] xt_l2tp: invalid flags combination: 8 [ 131.567139][ T6609] xt_l2tp: invalid flags combination: 8 [ 131.795176][ T6602] can0 (unregistered): slcan off ttyS3. [ 131.948966][ T6615] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 132.103747][ T6617] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 132.105383][ T6617] overlayfs: failed to set xattr on upper [ 132.106725][ T6617] overlayfs: ...falling back to index=off,metacopy=off. [ 132.549116][ T6625] loop0: detected capacity change from 0 to 256 [ 133.018657][ T6625] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 134.135952][ T6640] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 134.137334][ T6640] overlayfs: failed to set xattr on upper [ 134.138634][ T6640] overlayfs: ...falling back to index=off,metacopy=off. [ 135.094271][ T6657] can0: slcan on ttyS3. [ 135.391001][ T6659] xt_l2tp: invalid flags combination: 8 [ 135.475265][ T6657] can0 (unregistered): slcan off ttyS3. [ 135.836078][ T6668] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 135.837543][ T6668] overlayfs: failed to set xattr on upper [ 135.838723][ T6668] overlayfs: ...falling back to index=off,metacopy=off. [ 135.981575][ T6670] xt_l2tp: invalid flags combination: 8 [ 136.348764][ T6667] netlink: 24 bytes leftover after parsing attributes in process `syz.0.505'. [ 136.478095][ T6681] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 136.479720][ T6681] overlayfs: failed to set xattr on upper [ 136.480935][ T6681] overlayfs: ...falling back to index=off,metacopy=off. [ 136.482673][ T6681] overlayfs: failed to resolve './file0': -2 [ 136.622413][ T6683] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 137.463032][ T6698] loop2: detected capacity change from 0 to 256 [ 139.029059][ T6698] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 139.768105][ T6717] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 139.769579][ T6717] overlayfs: failed to set xattr on upper [ 139.770705][ T6717] overlayfs: ...falling back to index=off,metacopy=off. [ 140.039069][ T6725] can0: slcan on ttyS3. [ 140.096693][ T6726] loop2: detected capacity change from 0 to 256 [ 140.187576][ T6715] xt_l2tp: invalid flags combination: 8 [ 140.195781][ T6726] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 140.224713][ T6725] can0 (unregistered): slcan off ttyS3. [ 140.227052][ T6721] can0: slcan on ttyS3. [ 140.250128][ T6721] can0 (unregistered): slcan off ttyS3. [ 140.253285][ T6721] xt_l2tp: invalid flags combination: 8 [ 140.440285][ T6733] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 140.441849][ T6733] overlayfs: failed to set xattr on upper [ 140.443093][ T6733] overlayfs: ...falling back to index=off,metacopy=off. [ 140.444958][ T6733] overlayfs: failed to resolve './file0': -2 [ 140.867051][ T6739] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 140.868874][ T6739] overlayfs: failed to set xattr on upper [ 140.870170][ T6739] overlayfs: ...falling back to index=off,metacopy=off. [ 141.255554][ T6748] loop0: detected capacity change from 0 to 256 [ 143.158941][ T6748] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 143.190947][ T6755] loop1: detected capacity change from 0 to 128 [ 143.206247][ T6755] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 143.409419][ T6760] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 143.411007][ T6760] overlayfs: failed to set xattr on upper [ 143.412166][ T6760] overlayfs: ...falling back to index=off,metacopy=off. [ 143.865987][ T6772] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 143.867670][ T6772] overlayfs: failed to set xattr on upper [ 143.869028][ T6772] overlayfs: ...falling back to index=off,metacopy=off. [ 144.374879][ T6781] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 144.376548][ T6781] overlayfs: failed to set xattr on upper [ 144.377834][ T6781] overlayfs: ...falling back to index=off,metacopy=off. [ 144.379894][ T6781] overlayfs: failed to resolve './file0': -2 [ 144.577257][ T6783] can0: slcan on ttyS3. [ 144.647653][ T6784] xt_l2tp: invalid flags combination: 8 [ 144.714727][ T6783] can0 (unregistered): slcan off ttyS3. [ 145.147953][ T6794] can0: slcan on ttyS3. [ 145.266059][ T6795] xt_l2tp: invalid flags combination: 8 [ 145.314757][ T6794] can0 (unregistered): slcan off ttyS3. [ 145.670373][ T6809] loop4: detected capacity change from 0 to 256 [ 145.919266][ T6809] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 147.022112][ T6820] loop0: detected capacity change from 0 to 256 [ 147.045948][ T6820] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 148.041551][ T6811] ima: policy update failed [ 148.043019][ T27] audit: type=1802 audit(148.030:17): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.554" res=0 errno=0 [ 148.128594][ T6827] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 148.130111][ T6827] overlayfs: failed to set xattr on upper [ 148.131269][ T6827] overlayfs: ...falling back to index=off,metacopy=off. [ 148.620642][ T6832] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 148.622386][ T6832] overlayfs: failed to set xattr on upper [ 148.623659][ T6832] overlayfs: ...falling back to index=off,metacopy=off. [ 148.625601][ T6832] overlayfs: failed to resolve './file0': -2 [ 149.093785][ T6838] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 149.511176][ T6853] FAULT_INJECTION: forcing a failure. [ 149.511176][ T6853] name failslab, interval 1, probability 0, space 0, times 0 [ 149.514180][ T6853] CPU: 0 PID: 6853 Comm: syz.2.564 Not tainted syzkaller #0 [ 149.515805][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 149.517966][ T6853] Call trace: [ 149.518676][ T6853] dump_backtrace+0x1c4/0x1f0 [ 149.519670][ T6853] show_stack+0x2c/0x3c [ 149.520597][ T6853] __dump_stack+0x30/0x40 [ 149.521538][ T6853] dump_stack_lvl+0xf4/0x15c [ 149.522492][ T6853] dump_stack+0x1c/0x5c [ 149.523491][ T6853] should_fail_ex+0x3cc/0x524 [ 149.524572][ T6853] __should_failslab+0xc0/0x11c [ 149.525703][ T6853] should_failslab+0x10/0x28 [ 149.526701][ T6853] kmem_cache_alloc+0x88/0x310 [ 149.527741][ T6853] vm_area_alloc+0x2c/0xe8 [ 149.528664][ T6853] mmap_region+0xb38/0x1860 [ 149.529605][ T6853] do_mmap+0xa64/0x1210 [ 149.530480][ T6853] vm_mmap_pgoff+0x194/0x298 [ 149.531413][ T6853] ksys_mmap_pgoff+0xd0/0x5a0 [ 149.532310][ T6853] __arm64_sys_mmap+0x108/0x120 [ 149.533456][ T6853] invoke_syscall+0x98/0x290 [ 149.534412][ T6853] el0_svc_common+0x13c/0x258 [ 149.535453][ T6853] do_el0_svc+0x5c/0x134 [ 149.536397][ T6853] el0_svc+0x58/0x12c [ 149.537276][ T6853] el0t_64_sync_handler+0x84/0xf0 [ 149.538351][ T6853] el0t_64_sync+0x18c/0x190 [ 149.579442][ T6857] loop2: detected capacity change from 0 to 512 [ 149.686432][ T6858] can0: slcan on ttyS3. [ 149.711878][ T6729] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 149.745278][ T6859] xt_l2tp: invalid flags combination: 8 [ 149.774602][ T6858] can0 (unregistered): slcan off ttyS3. [ 150.155135][ T6867] loop1: detected capacity change from 0 to 256 [ 151.537929][ T6867] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 151.706535][ T6874] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 151.708046][ T6874] overlayfs: failed to set xattr on upper [ 151.709247][ T6874] overlayfs: ...falling back to index=off,metacopy=off. [ 152.168243][ T6883] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 152.169984][ T6883] overlayfs: failed to set xattr on upper [ 152.171562][ T6883] overlayfs: ...falling back to index=off,metacopy=off. [ 152.173576][ T6883] overlayfs: failed to resolve './file0': -2 [ 152.578606][ T6892] loop0: detected capacity change from 0 to 256 [ 152.620744][ T6892] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 153.546815][ T6895] loop3: detected capacity change from 0 to 128 [ 153.564570][ T6895] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 154.246988][ T6908] xt_l2tp: invalid flags combination: 8 [ 154.752284][ T6914] loop1: detected capacity change from 0 to 512 [ 155.124200][ T6922] loop2: detected capacity change from 0 to 256 [ 155.153263][ T6922] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 155.594543][ T115] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 156.008773][ T115] usb 1-1: unable to get BOS descriptor or descriptor too short [ 156.010929][ T115] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 156.012396][ T115] usb 1-1: can't read configurations, error -71 [ 156.899916][ T6953] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 156.901466][ T6953] overlayfs: failed to set xattr on upper [ 156.902650][ T6953] overlayfs: ...falling back to index=off,metacopy=off. [ 156.904625][ T6953] overlayfs: failed to resolve './file0': -2 [ 157.197978][ T6930] can0: slcan on ttyS3. [ 157.295491][ T6930] can0 (unregistered): slcan off ttyS3. [ 157.313159][ T6930] xt_l2tp: invalid flags combination: 8 [ 157.417520][ T6966] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 157.419209][ T6966] overlayfs: failed to set xattr on upper [ 157.420395][ T6966] overlayfs: ...falling back to index=off,metacopy=off. [ 157.736880][ T6979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.592'. [ 158.386863][ T7006] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 158.388708][ T7006] overlayfs: failed to set xattr on upper [ 158.390027][ T7006] overlayfs: ...falling back to index=off,metacopy=off. [ 158.714795][ T4345] Bluetooth: hci2: command 0x0406 tx timeout [ 158.716669][ T4346] Bluetooth: hci1: command 0x0406 tx timeout [ 158.718016][ T4331] Bluetooth: hci4: command 0x0406 tx timeout [ 158.719227][ T4334] Bluetooth: hci0: command 0x0406 tx timeout [ 159.081079][ T7023] loop0: detected capacity change from 0 to 8 [ 159.216178][ T7025] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 159.217607][ T7025] overlayfs: failed to set xattr on upper [ 159.218825][ T7025] overlayfs: ...falling back to index=off,metacopy=off. [ 160.034200][ T7044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.117645][ T7048] loop1: detected capacity change from 0 to 256 [ 160.709412][ T7048] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 161.041758][ T7044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.327212][ T7059] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 161.328921][ T7059] overlayfs: failed to set xattr on upper [ 161.330158][ T7059] overlayfs: ...falling back to index=off,metacopy=off. [ 161.773881][ T7076] can0: slcan on ttyS3. [ 161.834157][ T7078] xt_l2tp: invalid flags combination: 8 [ 161.904892][ T7076] can0 (unregistered): slcan off ttyS3. [ 162.396971][ T7101] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 162.398674][ T7101] overlayfs: failed to set xattr on upper [ 162.399875][ T7101] overlayfs: ...falling back to index=off,metacopy=off. [ 163.201293][ T7112] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 163.202742][ T7112] overlayfs: failed to set xattr on upper [ 163.203916][ T7112] overlayfs: ...falling back to index=off,metacopy=off. [ 163.992865][ T7126] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 163.994441][ T7126] overlayfs: failed to set xattr on upper [ 163.995957][ T7126] overlayfs: ...falling back to index=off,metacopy=off. [ 164.485138][ T7133] overlayfs: failed to resolve './file1': -2 [ 164.845234][ T7138] loop0: detected capacity change from 0 to 256 [ 164.877742][ T7138] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 166.014728][ T7139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.631'. [ 166.251003][ T7154] loop0: detected capacity change from 0 to 256 [ 166.369725][ T7155] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 166.371243][ T7155] overlayfs: failed to set xattr on upper [ 166.372461][ T7155] overlayfs: ...falling back to index=off,metacopy=off. [ 166.633260][ T7154] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 167.547552][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.630'. [ 167.765660][ T7164] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 167.767135][ T7164] overlayfs: failed to set xattr on upper [ 167.768342][ T7164] overlayfs: ...falling back to index=off,metacopy=off. [ 168.549431][ T7178] loop4: detected capacity change from 0 to 8 [ 168.696988][ T7181] loop3: detected capacity change from 0 to 8 [ 168.841965][ T7182] loop1: detected capacity change from 0 to 256 [ 169.133505][ T7182] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 169.578249][ T7188] ip6tnl0 speed is unknown, defaulting to 1000 [ 169.587997][ T7188] ip6tnl0 speed is unknown, defaulting to 1000 [ 169.589460][ T7188] ip6tnl0 speed is unknown, defaulting to 1000 [ 170.013759][ T7190] loop0: detected capacity change from 0 to 512 [ 170.195125][ T7188] infiniband syz0: set active [ 170.196532][ T4766] ip6tnl0 speed is unknown, defaulting to 1000 [ 170.197801][ T7188] infiniband syz0: added ip6tnl0 [ 170.227006][ T7188] RDS/IB: syz0: added [ 170.227882][ T7188] smc: adding ib device syz0 with port count 1 [ 170.229137][ T7188] smc: ib device syz0 port 1 has pnetid [ 170.230377][ T4766] ip6tnl0 speed is unknown, defaulting to 1000 [ 170.236607][ T7188] ip6tnl0 speed is unknown, defaulting to 1000 [ 170.261643][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'. [ 170.284667][ T7188] ip6tnl0 speed is unknown, defaulting to 1000 [ 170.309482][ T7188] ip6tnl0 speed is unknown, defaulting to 1000 [ 170.463633][ T7188] ip6tnl0 speed is unknown, defaulting to 1000 [ 170.509043][ T7188] ip6tnl0 speed is unknown, defaulting to 1000 [ 171.066186][ T7218] xt_l2tp: invalid flags combination: 8 [ 171.428228][ T7225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.645'. [ 171.439083][ T27] audit: type=1807 audit(171.430:18): action=appraise UNKNOWN=func= res=0 [ 171.441273][ T27] audit: type=1802 audit(171.430:19): pid=7224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.647" res=0 errno=0 [ 171.571321][ T7227] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 171.572788][ T7227] overlayfs: failed to set xattr on upper [ 171.573972][ T7227] overlayfs: ...falling back to index=off,metacopy=off. [ 171.795659][ T7214] ima: policy update failed [ 171.798324][ T27] audit: type=1802 audit(171.790:20): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.647" res=0 errno=0 [ 172.074951][ T7233] loop0: detected capacity change from 0 to 256 [ 172.089223][ T7233] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 173.207044][ T7239] loop3: detected capacity change from 0 to 8 [ 173.600496][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'. [ 173.739383][ T7254] loop1: detected capacity change from 0 to 256 [ 175.171079][ T7254] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 175.188096][ T7260] overlayfs: missing 'lowerdir' [ 175.526071][ T7262] loop0: detected capacity change from 0 to 512 [ 175.727796][ T7273] loop4: detected capacity change from 0 to 256 [ 177.476269][ T7273] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 177.653050][ T7290] loop1: detected capacity change from 0 to 128 [ 177.690968][ T7290] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 177.706647][ T27] audit: type=1807 audit(177.700:21): action=appraise func=FIRMWAR res=0 [ 177.708742][ T27] audit: type=1802 audit(177.700:22): pid=7293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.664" res=0 errno=0 [ 177.900793][ T7296] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 177.902399][ T7296] overlayfs: failed to set xattr on upper [ 177.903628][ T7296] overlayfs: ...falling back to index=off,metacopy=off. [ 178.325303][ T7300] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 178.327083][ T7300] overlayfs: failed to set xattr on upper [ 178.328404][ T7300] overlayfs: ...falling back to index=off,metacopy=off. [ 178.527273][ T7279] ima: policy update failed [ 178.530581][ T27] audit: type=1802 audit(178.520:23): pid=7279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.664" res=0 errno=0 [ 178.919303][ T7305] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 178.920757][ T7305] overlayfs: failed to set xattr on upper [ 178.921947][ T7305] overlayfs: ...falling back to index=off,metacopy=off. [ 178.934260][ T7310] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 178.935915][ T7310] overlayfs: failed to set xattr on upper [ 178.937092][ T7310] overlayfs: ...falling back to index=off,metacopy=off. [ 179.353147][ T7315] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 179.354742][ T7315] overlayfs: failed to set xattr on upper [ 179.355760][ T7315] overlayfs: ...falling back to index=off,metacopy=off. [ 179.381215][ T7316] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 179.382596][ T7316] overlayfs: failed to set xattr on upper [ 179.383622][ T7316] overlayfs: ...falling back to index=off,metacopy=off. [ 179.582341][ T7330] loop1: detected capacity change from 0 to 256 [ 179.671202][ T7331] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 179.672910][ T7331] overlayfs: failed to set xattr on upper [ 179.674244][ T7331] overlayfs: ...falling back to index=off,metacopy=off. [ 179.995622][ T7330] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 181.471506][ T7345] loop2: detected capacity change from 0 to 512 [ 181.924225][ T7353] rdma_rxe: rxe_register_device failed with error -23 [ 181.925867][ T7353] rdma_rxe: failed to add ip6tnl0 [ 181.936815][ T7355] loop4: detected capacity change from 0 to 8 [ 182.025973][ T27] audit: type=1807 audit(182.020:24): action=appraise func=FIRMWAR res=0 [ 182.027814][ T27] audit: type=1802 audit(182.020:25): pid=7361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.688" res=0 errno=0 [ 182.041855][ T7362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.682'. [ 182.119537][ T7360] overlayfs: missing 'lowerdir' [ 182.498705][ T7374] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 182.500268][ T7374] overlayfs: failed to set xattr on upper [ 182.501468][ T7374] overlayfs: ...falling back to index=off,metacopy=off. [ 182.617660][ T7375] loop0: detected capacity change from 0 to 256 [ 182.786028][ T7375] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 183.458265][ T7351] ima: policy update failed [ 183.461299][ T27] audit: type=1802 audit(183.450:26): pid=7351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.688" res=0 errno=0 [ 183.760664][ T7380] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 183.762238][ T7380] overlayfs: failed to set xattr on upper [ 183.763440][ T7380] overlayfs: ...falling back to index=off,metacopy=off. [ 184.442439][ T7394] xt_l2tp: invalid flags combination: 8 [ 184.541486][ T7391] can0: slcan on ttyS3. [ 184.655286][ T7393] can0 (unregistered): slcan off ttyS3. [ 184.667387][ T7402] loop1: detected capacity change from 0 to 512 [ 184.747665][ T6729] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 184.858105][ T7405] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 184.859640][ T7405] overlayfs: failed to set xattr on upper [ 184.860890][ T7405] overlayfs: ...falling back to index=off,metacopy=off. [ 185.421722][ T7410] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 185.423322][ T7410] overlayfs: failed to set xattr on upper [ 185.424343][ T7410] overlayfs: ...falling back to index=off,metacopy=off. [ 185.427408][ T7411] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 185.428791][ T7411] overlayfs: failed to set xattr on upper [ 185.429977][ T7411] overlayfs: ...falling back to index=off,metacopy=off. [ 185.740355][ T7420] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 185.741961][ T7420] overlayfs: failed to set xattr on upper [ 185.743336][ T7420] overlayfs: ...falling back to index=off,metacopy=off. [ 186.456453][ T7429] loop4: detected capacity change from 0 to 256 [ 186.630933][ T7429] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 187.355118][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.356415][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.703444][ T7441] xt_l2tp: invalid flags combination: 8 [ 187.992399][ T27] audit: type=1807 audit(187.980:27): action=appraise func=FIRMWAR res=0 [ 187.994211][ T27] audit: type=1802 audit(187.980:28): pid=7443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.712" res=0 errno=0 [ 188.087820][ T7447] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 188.089253][ T7447] overlayfs: failed to set xattr on upper [ 188.090312][ T7447] overlayfs: ...falling back to index=off,metacopy=off. [ 188.565342][ T7430] ima: policy update failed [ 188.572346][ T27] audit: type=1802 audit(188.560:29): pid=7430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.712" res=0 errno=0 [ 189.572683][ T7466] can0: slcan on ttyS3. [ 189.657173][ T7467] xt_l2tp: invalid flags combination: 8 [ 189.794626][ T7466] can0 (unregistered): slcan off ttyS3. [ 190.004888][ T7475] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 190.006431][ T7475] overlayfs: failed to set xattr on upper [ 190.007556][ T7475] overlayfs: ...falling back to index=off,metacopy=off. [ 190.253693][ T7477] loop3: detected capacity change from 0 to 256 [ 190.292713][ T7477] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 191.063528][ T7480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.729'. [ 191.090163][ T7482] loop1: detected capacity change from 0 to 512 [ 191.406909][ T6503] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 191.411333][ T7487] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 191.412744][ T7487] overlayfs: failed to set xattr on upper [ 191.413890][ T7487] overlayfs: ...falling back to index=off,metacopy=off. [ 192.024384][ T7496] loop3: detected capacity change from 0 to 512 [ 192.128809][ T6729] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 192.180563][ T7499] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 192.181997][ T7499] overlayfs: failed to set xattr on upper [ 192.182987][ T7499] overlayfs: ...falling back to index=off,metacopy=off. [ 192.193420][ T7503] xt_l2tp: invalid flags combination: 8 [ 193.004598][ T27] audit: type=1807 audit(192.990:30): action=appraise func=FIRMWARE_CH res=0 [ 193.006482][ T27] audit: type=1802 audit(192.990:31): pid=7513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.733" res=0 errno=0 [ 193.402071][ T7507] ima: policy update failed [ 193.403287][ T27] audit: type=1802 audit(193.390:32): pid=7507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.733" res=0 errno=0 [ 193.553024][ T7528] loop1: detected capacity change from 0 to 256 [ 193.582948][ T7528] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 194.581865][ T7529] overlayfs: missing 'workdir' [ 194.671111][ T7531] loop4: detected capacity change from 0 to 512 [ 194.775330][ T7533] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 194.776846][ T7533] overlayfs: failed to set xattr on upper [ 194.777967][ T7533] overlayfs: ...falling back to index=off,metacopy=off. [ 195.311099][ T7546] loop1: detected capacity change from 0 to 8 [ 195.959645][ T7556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.742'. [ 196.486381][ T7562] xt_l2tp: invalid flags combination: 8 [ 196.932364][ T7573] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 196.933837][ T7573] overlayfs: failed to set xattr on upper [ 196.935072][ T7573] overlayfs: ...falling back to index=off,metacopy=off. [ 197.066033][ T7574] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 197.067471][ T7574] overlayfs: failed to set xattr on upper [ 197.068568][ T7574] overlayfs: ...falling back to index=off,metacopy=off. [ 197.151945][ T7576] loop0: detected capacity change from 0 to 512 [ 197.227928][ T6729] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 197.380293][ T7586] loop1: detected capacity change from 0 to 256 [ 199.395301][ T7586] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 199.596548][ T27] audit: type=1807 audit(199.590:33): action=appraise func=FIRMWARE_CH res=0 [ 199.598545][ T27] audit: type=1802 audit(199.590:34): pid=7599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.757" res=0 errno=0 [ 200.217643][ T7616] loop1: detected capacity change from 0 to 512 [ 200.642221][ T7589] ima: policy update failed [ 200.643989][ T27] audit: type=1802 audit(200.630:35): pid=7589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.757" res=0 errno=0 [ 200.673718][ T7624] loop2: detected capacity change from 0 to 512 [ 201.544292][ T7639] Config c/1 of g1 needs at least one function. [ 201.622678][ T7640] xt_l2tp: invalid flags combination: 8 [ 201.839162][ T7639] udc dummy_udc.0: failed to start g1: -22 [ 201.840481][ T7639] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 201.845698][ T7639] UDC core: g1: couldn't find an available UDC or it's busy [ 202.186269][ T7651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.770'. [ 202.371066][ T7648] Can't find ip_set type ha [ 203.249532][ T7671] xt_l2tp: invalid flags combination: 8 [ 204.022385][ T7686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.038661][ T7687] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 204.040126][ T7687] overlayfs: failed to set xattr on upper [ 204.041288][ T7687] overlayfs: ...falling back to index=off,metacopy=off. [ 204.607998][ T7702] netlink: 24 bytes leftover after parsing attributes in process `syz.1.786'. [ 204.881979][ T27] audit: type=1807 audit(204.870:36): action=appraise func=FIRMWARE_CH res=0 [ 204.884169][ T27] audit: type=1802 audit(204.870:37): pid=7706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.787" res=0 errno=0 [ 205.347779][ T7698] ima: policy update failed [ 205.366142][ T27] audit: type=1802 audit(205.360:38): pid=7698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.787" res=0 errno=0 [ 205.599289][ T7714] overlayfs: missing 'lowerdir' [ 205.707715][ T7721] loop4: detected capacity change from 0 to 256 [ 205.757020][ T7721] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 206.603611][ T7722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.791'. [ 207.010863][ T7736] xt_l2tp: invalid flags combination: 8 [ 207.013949][ T7741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.062058][ T7746] jffs2: notice: (7746) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 207.295234][ T7751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.808'. [ 207.395022][ T4766] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 207.524079][ T7759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.529057][ T7759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.597721][ T4766] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.832881][ T7763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.800'. [ 207.885965][ T4766] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 207.887997][ T4766] usb 1-1: Dual-Role OTG device on HNP port [ 207.889505][ T4766] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 207.891321][ T4766] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.915907][ C0] ------------[ cut here ]------------ [ 207.917099][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 207.918526][ C0] WARNING: CPU: 0 PID: 4766 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x2a8/0x528 [ 207.920352][ C0] Modules linked in: [ 207.921115][ C0] CPU: 0 PID: 4766 Comm: kworker/0:7 Not tainted syzkaller #0 [ 207.922644][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 207.924782][ C0] Workqueue: usb_hub_wq hub_event [ 207.925841][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 207.927499][ C0] pc : usb_ep_enable+0x2a8/0x528 [ 207.928579][ C0] lr : usb_ep_enable+0x2a8/0x528 [ 207.929512][ C0] sp : ffff800008007880 [ 207.930313][ C0] x29: ffff800008007880 x28: 1fffe0001ee78ec6 x27: 1fffe0001ee78edc [ 207.932078][ C0] x26: dfff800000000000 x25: ffff0000f73c7630 x24: 1fffe0001a22c821 [ 207.933617][ C0] x23: ffff0000d11640e8 x22: dfff800000000000 x21: 0000000000000081 [ 207.935294][ C0] x20: ffff0000df56b93a x19: ffff0000d11640e0 x18: 1fffe00033c2177e [ 207.936948][ C0] x17: 0000000000000000 x16: ffff800011ba16d0 x15: 0000000000000000 [ 207.938625][ C0] x14: 0000000000000001 x13: 1fffe00033c217a3 x12: 0000000000000000 [ 207.940328][ C0] x11: ff0080000819676c x10: 0000000000000000 x9 : 0df27ed679c6d000 [ 207.942129][ C0] x8 : 0df27ed679c6d000 x7 : 0000000000000001 x6 : 0000000000000001 [ 207.943888][ C0] x5 : ffff800008007318 x4 : ffff8000164c4fa0 x3 : ffff800008545104 [ 207.945584][ C0] x2 : 0000000000000001 x1 : 0000000100000103 x0 : 0000000000000000 [ 207.947346][ C0] Call trace: [ 207.948069][ C0] usb_ep_enable+0x2a8/0x528 [ 207.948994][ C0] hidg_set_alt+0x128/0x820 [ 207.949957][ C0] set_config+0x668/0xdf8 [ 207.950878][ C0] composite_setup+0x1590/0x27f4 [ 207.951916][ C0] configfs_composite_setup+0xc0/0x104 [ 207.953193][ C0] dummy_timer+0xdb0/0x2aa8 [ 207.954201][ C0] __hrtimer_run_queues+0x444/0xc58 [ 207.955370][ C0] hrtimer_run_softirq+0x164/0x408 [ 207.956520][ C0] handle_softirqs+0x318/0xc90 [ 207.957579][ C0] __do_softirq+0x14/0x20 [ 207.958352][ C0] ____do_softirq+0x10/0x1c [ 207.959209][ C0] call_on_irq_stack+0x30/0x48 [ 207.960150][ C0] do_softirq_own_stack+0x1c/0x28 [ 207.961111][ C0] __irq_exit_rcu+0x23c/0x430 [ 207.962032][ C0] irq_exit_rcu+0x14/0x84 [ 207.962833][ C0] el1_interrupt+0x38/0x54 [ 207.963694][ C0] el1h_64_irq_handler+0x18/0x24 [ 207.964602][ C0] el1h_64_irq+0x64/0x68 [ 207.965381][ C0] _raw_spin_unlock_irqrestore+0x58/0xac [ 207.966461][ C0] __mod_timer+0x6e0/0xb54 [ 207.967442][ C0] schedule_timeout+0x190/0x2f4 [ 207.968406][ C0] do_wait_for_common+0x2a4/0x438 [ 207.969447][ C0] wait_for_completion_timeout+0x48/0x68 [ 207.970551][ C0] usb_start_wait_urb+0x19c/0x454 [ 207.971668][ C0] usb_control_msg+0x1e8/0x378 [ 207.972700][ C0] usb_set_configuration+0xf0c/0x1bb0 [ 207.973664][ C0] usb_generic_driver_probe+0x8c/0x148 [ 207.974704][ C0] usb_probe_device+0x120/0x258 [ 207.975663][ C0] really_probe+0x3a0/0xac4 [ 207.976631][ C0] __driver_probe_device+0x1c8/0x368 [ 207.977744][ C0] driver_probe_device+0x78/0x324 [ 207.978858][ C0] __device_attach_driver+0x28c/0x4c0 [ 207.980108][ C0] bus_for_each_drv+0x154/0x1e4 [ 207.981088][ C0] __device_attach+0x2a4/0x3d8 [ 207.982088][ C0] device_initial_probe+0x24/0x34 [ 207.983175][ C0] bus_probe_device+0xbc/0x1c4 [ 207.984205][ C0] device_add+0x93c/0xe4c [ 207.985082][ C0] usb_new_device+0x7e4/0x11d0 [ 207.986058][ C0] hub_event+0x2254/0x3e74 [ 207.987043][ C0] process_one_work+0x7e4/0x13bc [ 207.988023][ C0] worker_thread+0x8cc/0xfe8 [ 207.988930][ C0] kthread+0x254/0x2e0 [ 207.989777][ C0] ret_from_fork+0x10/0x20 [ 207.990745][ C0] irq event stamp: 57989 [ 207.991663][ C0] hardirqs last enabled at (57988): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 207.993904][ C0] hardirqs last disabled at (57989): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 207.996065][ C0] softirqs last enabled at (57866): [] handle_softirqs+0xb1c/0xc90 [ 207.998176][ C0] softirqs last disabled at (57985): [] __do_softirq+0x14/0x20 [ 207.999949][ C0] ---[ end trace 0000000000000000 ]--- [ 208.001084][ C0] configfs-gadget.g1 gadget.0: Enable IN endpoint FAILED! [ 208.004330][ T4766] usb 1-1: can't set config #1, error -32 [ 208.058681][ T7766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.060601][ T7766] misc raw-gadget: fail, usb_gadget_register_driver returned -16