last executing test programs: 40.655395915s ago: executing program 4 (id=80): r0 = socket(0x10, 0x3, 0x0) (async) unshare(0x600) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendfile(r2, r2, &(0x7f0000000180)=0x1, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2}, {0xfff1, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f00000002c0), 0x140, 0x100) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) rt_sigqueueinfo(r4, 0x1b, &(0x7f0000000240)={0x2a, 0x8000, 0x3}) 40.528434838s ago: executing program 4 (id=82): sendmsg$rds(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000e00)=[{0x0, 0x30}, {&(0x7f0000000e40)=""/111, 0x6f}], 0x2, &(0x7f0000000ec0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000c80)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (fail_nth: 9) 40.466768089s ago: executing program 4 (id=84): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r0, &(0x7f00000004c0)='\n', 0x1) 40.388710191s ago: executing program 4 (id=86): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file6\x00', 0x98, &(0x7f0000000140), 0x2, 0x10ef, &(0x7f0000000540)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat(0xffffffffffffff9c, &(0x7f0000002c00)='./file0\x00', 0x103a42, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./bus\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x1, 0x0, 0x6}, 0x4c) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) move_pages(0x0, 0x2, &(0x7f0000000100)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f0000000200), 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000480)={0x0, r1, 0x40, 0x4, 0x8000000000000000, 0x6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000380), 0x492492492492627, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) mount(0x0, 0x0, 0x0, 0x840, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/kernel/printk_devkmsg\x00', 0x88802, 0x8) pwrite64(r2, &(0x7f0000000440)='x', 0x1, 0x9) truncate(&(0x7f0000002c40)='./file0\x00', 0x3a6800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.current\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./security\x00', 0x1ff) mount(0x0, &(0x7f00000017c0)='./security\x00', &(0x7f0000001800)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001840)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r5, &(0x7f0000001880)="04080076657273696f6e00020500000004080070726f66696c6500070504002f2f6f00040600666c6167730007020000000002", 0x33) write$binfmt_script(r4, &(0x7f0000001640)={'#! ', './file6', [{0x20, 'reiserfs\x00'}, {0x20, 'memory.swap.current\x00'}, {0x20, '&\xe7)\x8dZ\xe6\x0f\x1b\x82\x11`R\xd1\xd9\xfd\xec~J9{\xfb\x83\x88\x012M\x1f\x94\x86\xd2:\x9d\x02\xeab\x18\xf5\xda(df\xb9\xa1\x9d\x8bn\"\xed\x151\xe0|yk\x9dp\xec\xcb\xe0\xa9\xf5i\x97H\x1f\b\xd0\xe8(\"\xa7\x14\xae'}, {0x20, '@\xe4\xdb\xb5^F\b/\x0f0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000ec0)=[{{0x0, 0x8c, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) (fail_nth: 9) 39.836865675s ago: executing program 4 (id=95): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000800)={0x11, 0x3, 0x1, 0x1, 0x0, 0x6, @random="ee52e7e07522"}, 0x14) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x5, 0x50, 0x0, &(0x7f0000000480)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (fail_nth: 10) 39.819691005s ago: executing program 3 (id=97): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$vim2m(0x0, 0x400007, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) setrlimit(0xb, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="01000000000000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48485}, 0x8890) sendmsg$can_bcm(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) 38.893552758s ago: executing program 3 (id=104): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x0, 0x65, 0x0, 0x0, 0xfff}, 0x28) r0 = socket$l2tp(0x2, 0x2, 0x73) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000280), 0x0, 0x10040, &(0x7f0000000300)={r1, r2+10000000}) setns(0xc9, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa343, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x10f) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000100)=0x2) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000200), 0x12) listen(r5, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000008050000010b", @ANYRESHEX=r4, @ANYRESHEX=r3], 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./gadget\x00', 0x930aa59063c1a109) mount(0x0, &(0x7f0000000380)='./gadget\x00', &(0x7f00000003c0)='gadgetfs\x00', 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./gadget/dummy_udc\x00', 0x2, 0x0) ppoll(&(0x7f0000000440)=[{r7, 0x200}], 0x1, &(0x7f0000000480)={0x0, 0x989680}, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000080)={0x0, 0x4, 0x4, 0xffffffffffffffff}) 38.80076012s ago: executing program 4 (id=105): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f00000003c0)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'geneve0\x00', 0x0}) sendmsg(r1, &(0x7f00000004c0)={&(0x7f0000000580)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)="020195ff002d3922ff65b4355e953d23d254f00000800800", 0x18}, {&(0x7f0000000680)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) (fail_nth: 10) 38.78352081s ago: executing program 32 (id=105): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f00000003c0)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'geneve0\x00', 0x0}) sendmsg(r1, &(0x7f00000004c0)={&(0x7f0000000580)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)="020195ff002d3922ff65b4355e953d23d254f00000800800", 0x18}, {&(0x7f0000000680)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) (fail_nth: 10) 38.430985889s ago: executing program 3 (id=108): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000007, 0x2000002, 0x401c031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000b00)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$802154_dgram(r1, &(0x7f0000001b40)={0x2, @none={0x0, 0x2}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 38.302946262s ago: executing program 3 (id=109): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0x4, 0x0, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x24}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_RAW={0x8}]}}]}, 0x5c}}, 0x4004) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06006e00bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 37.896532412s ago: executing program 3 (id=111): unshare(0x20060400) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x16bfc9754559bcb9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080001400000001708000340000000570800024000000000080007400000000108000640000000010900010073797a30000000000900020073797a32"], 0x9c}}, 0x4) (async) write$P9_RVERSION(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065fffffc7f00e307003950323030302e"], 0xfe78) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000000c0)=0x9, 0x12) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000001dc0)=0x100000001, 0x76dc) (async) connect$inet6(r5, &(0x7f0000001e00), 0x1c) (async) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) r7 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) (async) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000000c40)={0xf, {"a2e3ad21e08eeb661b5de00987f70e06d038e7ff7fc6e5539b0d650e8b089b3f353b6c090890e0878f0e1ac6e7049b3b43959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e80418a7005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) (async) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x880cc2, 0x20) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200002, &(0x7f0000000380)={[{@discard}, {}, {@test_dummy_encryption}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") fsmount(0xffffffffffffffff, 0x1, 0x4) (async) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r10, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xfffffffa}, 0x0) 22.613802156s ago: executing program 33 (id=111): unshare(0x20060400) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x16bfc9754559bcb9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080001400000001708000340000000570800024000000000080007400000000108000640000000010900010073797a30000000000900020073797a32"], 0x9c}}, 0x4) (async) write$P9_RVERSION(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065fffffc7f00e307003950323030302e"], 0xfe78) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000000c0)=0x9, 0x12) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000001dc0)=0x100000001, 0x76dc) (async) connect$inet6(r5, &(0x7f0000001e00), 0x1c) (async) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) r7 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) (async) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000000c40)={0xf, {"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", 0x1000}}, 0x1006) (async) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x880cc2, 0x20) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200002, &(0x7f0000000380)={[{@discard}, {}, {@test_dummy_encryption}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x572, &(0x7f00000006c0)="$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") fsmount(0xffffffffffffffff, 0x1, 0x4) (async) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r10, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xfffffffa}, 0x0) 13.490750639s ago: executing program 6 (id=220): syz_80211_inject_frame(&(0x7f0000000500)=@broadcast, &(0x7f0000000140)=ANY=[], 0x2e) 12.960748553s ago: executing program 6 (id=223): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="71050108020080670118080b0f0201c824989563d2774450bf3f2a5c7adf2c323f6d541946d4fb5ca54c9c54"], 0x10) 10.876802344s ago: executing program 1 (id=274): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='cgroup\x00') read$FUSE(r0, &(0x7f0000000c00)={0x2020}, 0x2020) 10.876750564s ago: executing program 1 (id=275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d00)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e40)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000e80)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302c"], 0x280) 9.884692907s ago: executing program 6 (id=284): r0 = syz_create_resource$futex(&(0x7f0000000040)=0x1) futex$unlock_wake_list64(r0, 0x281, 0x100, 0x0, &(0x7f0000000180)=0x4, 0x2) 9.884594358s ago: executing program 5 (id=285): r0 = gettid() timer_create(0x0, &(0x7f00000012c0)={0x0, 0x21, 0x4, @tid=r0}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 9.864567438s ago: executing program 6 (id=286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x1001}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x2c0800, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000500)={'syzkaller0\x00'}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', 0x1}) 9.861889919s ago: executing program 5 (id=287): syz_emit_vhci(&(0x7f0000005f00)=ANY=[@ANYBLOB="04040a"], 0xd) 9.320844202s ago: executing program 2 (id=295): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/4089, 0xff9}], 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001300)=""/188, 0xbc}, {&(0x7f00000013c0)=""/175, 0xaf}, {&(0x7f0000001480)=""/220, 0xdc}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x4}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x40, 0x0) 9.320726102s ago: executing program 5 (id=296): sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x20040811) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 9.320628142s ago: executing program 2 (id=297): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f00000001c0)=[{0x40, 0x0, 0x3, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 9.310912802s ago: executing program 5 (id=298): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='\x00', 0x9801) unshare(0x22020600) move_mount(r0, &(0x7f0000000700)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000780)='\x00', 0x89901) move_mount(r1, &(0x7f00000007c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x0) umount2(&(0x7f0000000840)='./file0\x00', 0xa) 9.292180172s ago: executing program 2 (id=299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000400)={'syzkaller0\x00'}) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/197, 0xc5}], 0x1) 9.243043734s ago: executing program 5 (id=300): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000300)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 7.728844641s ago: executing program 0 (id=303): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000006c0)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.761627268s ago: executing program 0 (id=304): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffdd2d}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, 0x2, 0x9800, 0x0, 0x4}}, 0x2e) 3.705761059s ago: executing program 0 (id=305): openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000340)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.636922531s ago: executing program 0 (id=306): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f00000003c0)={0x27}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f00000000c0)="76657468303a30000000000000000000020000000a") 211.360584ms ago: executing program 5 (id=307): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04d64020"], 0x7) 198.116205ms ago: executing program 0 (id=308): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x101000000000007, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @multicast1}, @ib={0x1b, 0x7fff, 0x0, {}, 0xfffffffffffffffc, 0x100000000000001, 0x2}}}, 0x118) 124.857867ms ago: executing program 1 (id=309): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001a40)=ANY=[@ANYBLOB="00020201"], 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x20040880) sendmmsg$inet6(r1, &(0x7f0000001c80)=[{{&(0x7f0000001cc0)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000001d00)=[{&(0x7f0000001d40)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, 0x0) 124.759407ms ago: executing program 2 (id=310): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000080)={0xa, &(0x7f0000000140)=[{0x1, '\x00', @st={0x4, [{0x3, @svalue=0x5}, {0x2, @uvalue=0x9}, {0x1}, {0x3, @uvalue=0x40}]}, 0xf066}]}) 124.661337ms ago: executing program 0 (id=311): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) memfd_create(0x0, 0x6) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000d00)={0x1, &(0x7f0000000d40)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0xcd79, 0x141000) 124.605057ms ago: executing program 1 (id=312): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000080)='1', 0x1) 93.607017ms ago: executing program 6 (id=313): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003b00010324bd702202c1557c09"], 0x14}, 0x1, 0x0, 0x0, 0x4818}, 0x48010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) 92.745527ms ago: executing program 1 (id=314): r0 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x7666, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x1, 0x1, 0x5, 0x63, 'syz1\x00', 0x6}, 0x3, 0x3, 0x5, 0x0, 0x1, 0x3, 'syz0\x00', &(0x7f0000000880)=['%\'!\xed|\xf8\xd6N\xd8\xe0\xf6X\x9a(\x83\x97#\x00h\xd94\x19\xb7\xe3\x1cJ\xab\xc8\x8d\xb0\xf0\xa5\x12\xfe\xa4\xce\x03\x9d\x88\x7f\xbdz\x89[\xdcj\xfb\xb1\xd9\xb1um\xd5\x82\x03\b\xf0\x95\xe0&~\xb3\xfe\xc2\x05x+\xb9\x7fkS\xcc\xff\x10\x80\xe7>3\xdb\x1f\xb6\x9c\xc3\x84\x1c^\x96#\b\xa7\xbfI\xf0Md\x94\x18\x15\xf2\x96Ob\x01\xe0{\t\x1d\x95>\xfa\xf5\xadGQ\x8e\x9ce\xb7\xbffy$\xfc\x9c\xc2#\xc8#q\xde\x05gc\xa2\x1a\x95\xf9\x91Tq\"\x04\xfd,\t\x05AX\x81$\xf92\x9dV;1\xe4\x1c\xd7\xfc\xf9\xd0.\x8a\xad\xa7\x149\xa1\xfd\xa2l\x05j\xc0\xb0\xca\xb8.\xbf\xe8\xb5-2\x82\xdb\x1c\x1f\"m\x88\xe7\xc7t\x13\xf3\xf0\xf1\x18\xa6\xf0\xb4\x00\x00\x00\x00\x00'], 0xcf}) 69.275098ms ago: executing program 2 (id=315): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) close(0x3) 218.07µs ago: executing program 6 (id=316): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='/', 0x1) 99.85µs ago: executing program 1 (id=317): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r1}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) 0s ago: executing program 2 (id=318): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000640)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r0, &(0x7f00000008c0)='\x00', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.180' (ED25519) to the list of known hosts. [ 28.526390][ T4317] cgroup: Unknown subsys name 'net' [ 28.774210][ T4317] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.074592][ T4317] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.794593][ T4333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.800214][ T4336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.803015][ T4343] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.804458][ T4343] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.805696][ T4344] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.806022][ T4343] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.808581][ T4343] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.810277][ T4343] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.811959][ T4343] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.812304][ T4345] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.813334][ T4343] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.814993][ T4345] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.815982][ T4343] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.816902][ T4345] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.818060][ T4343] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.819207][ T4345] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.820108][ T4343] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.822417][ T4345] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.822785][ T4345] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.823944][ T4343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.825499][ T4345] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.826430][ T4343] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.830719][ T4331] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.834179][ T4343] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.834570][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.837213][ T4343] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.837514][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 29.840465][ T4343] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 29.843738][ T4345] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.853603][ T4346] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.988453][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 29.990629][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 29.994631][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 30.022968][ T4340] chnl_net:caif_netlink_parms(): no params data found [ 30.030716][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 30.040323][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.041878][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.043682][ T4329] device bridge_slave_0 entered promiscuous mode [ 30.056937][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.058284][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.059875][ T4329] device bridge_slave_1 entered promiscuous mode [ 30.077135][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.078614][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.080288][ T4337] device bridge_slave_0 entered promiscuous mode [ 30.085051][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.086272][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.087829][ T4334] device bridge_slave_0 entered promiscuous mode [ 30.091144][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.094240][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.097190][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.098502][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.100165][ T4337] device bridge_slave_1 entered promiscuous mode [ 30.104887][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.106262][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.107910][ T4334] device bridge_slave_1 entered promiscuous mode [ 30.120296][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.121647][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.124740][ T4340] device bridge_slave_0 entered promiscuous mode [ 30.132389][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.134851][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.142223][ T4337] team0: Port device team_slave_0 added [ 30.143425][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.144675][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.146354][ T4340] device bridge_slave_1 entered promiscuous mode [ 30.150800][ T4329] team0: Port device team_slave_0 added [ 30.152721][ T4329] team0: Port device team_slave_1 added [ 30.158490][ T4337] team0: Port device team_slave_1 added [ 30.160749][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.176317][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.178133][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.179438][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.184523][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.186970][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.188174][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.189744][ T4330] device bridge_slave_0 entered promiscuous mode [ 30.191672][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.193123][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.197555][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.199618][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.200779][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.203186][ T4330] device bridge_slave_1 entered promiscuous mode [ 30.209591][ T4340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.211599][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.213136][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.217675][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.220964][ T4340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.223556][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.224839][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.229420][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.234621][ T4334] team0: Port device team_slave_0 added [ 30.236437][ T4334] team0: Port device team_slave_1 added [ 30.255273][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.260199][ T4340] team0: Port device team_slave_0 added [ 30.264227][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.265444][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.269661][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.274246][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.277858][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.278966][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.283650][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.286029][ T4340] team0: Port device team_slave_1 added [ 30.333079][ T4329] device hsr_slave_0 entered promiscuous mode [ 30.372070][ T4329] device hsr_slave_1 entered promiscuous mode [ 30.415924][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.417127][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.421012][ T4340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.472853][ T4337] device hsr_slave_0 entered promiscuous mode [ 30.511977][ T4337] device hsr_slave_1 entered promiscuous mode [ 30.551798][ T4337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.553054][ T4337] Cannot create hsr debugfs directory [ 30.556881][ T4330] team0: Port device team_slave_0 added [ 30.560825][ T4330] team0: Port device team_slave_1 added [ 30.563202][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.564455][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.569044][ T4340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.583656][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.584832][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.588910][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.598545][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.599804][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.604763][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.672726][ T4334] device hsr_slave_0 entered promiscuous mode [ 30.721827][ T4334] device hsr_slave_1 entered promiscuous mode [ 30.761772][ T4334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.763084][ T4334] Cannot create hsr debugfs directory [ 30.822723][ T4340] device hsr_slave_0 entered promiscuous mode [ 30.864235][ T4340] device hsr_slave_1 entered promiscuous mode [ 30.901797][ T4340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.903196][ T4340] Cannot create hsr debugfs directory [ 30.972886][ T4330] device hsr_slave_0 entered promiscuous mode [ 31.021951][ T4330] device hsr_slave_1 entered promiscuous mode [ 31.061810][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.063131][ T4330] Cannot create hsr debugfs directory [ 31.158787][ T4329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.220125][ T4329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.257364][ T4329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.304475][ T4329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.365573][ T4337] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.407233][ T4337] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.455254][ T4337] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.494660][ T4337] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.537051][ T4334] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.602139][ T4334] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.650746][ T4334] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.703519][ T4334] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.748498][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.766416][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.768676][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.770344][ T4340] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.793937][ T4340] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.825308][ T4340] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.842118][ T4341] Bluetooth: hci3: command 0x0409 tx timeout [ 31.842251][ T4346] Bluetooth: hci1: command 0x0409 tx timeout [ 31.868313][ T4340] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.904309][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.916140][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.922696][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.924466][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.926212][ T464] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.927398][ T464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.929315][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.932198][ T4333] Bluetooth: hci4: command 0x0409 tx timeout [ 31.933269][ T4333] Bluetooth: hci2: command 0x0409 tx timeout [ 31.934280][ T4333] Bluetooth: hci0: command 0x0409 tx timeout [ 31.935595][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.937078][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.938832][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.944690][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.946455][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.948001][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.949153][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.951224][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.967729][ T4330] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.993164][ T4330] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.055633][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.057317][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.059081][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.060205][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.061569][ T4330] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.115158][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.117012][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.120544][ T4330] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.178209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.180082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.182181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.184298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.185937][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.187273][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.188792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.202700][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.205094][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.207001][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.208507][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.210233][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.213051][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.214765][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.216637][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.218226][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.219920][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.221548][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.225536][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.232511][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.234213][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.236185][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.237845][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.245034][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.247329][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.249034][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.251676][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.264230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.265892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.268706][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.287609][ T4340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.290545][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.292870][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.294292][ T1602] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.295376][ T1602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.296816][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.307879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.309588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.311275][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.312696][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.315907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.327564][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.332598][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.334361][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.337941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.340120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.345462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.348250][ T4340] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.361189][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.365691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.367450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.368956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.370360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.373776][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.375085][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.379717][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.381271][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.387323][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.389476][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.391309][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.395387][ T464] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.396744][ T464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.398876][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.406842][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.408502][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.410229][ T464] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.411376][ T464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.415897][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.417623][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.423836][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.425621][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.428934][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.437408][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.438900][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.440789][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.442835][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.444538][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.455241][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.456855][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.458609][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.460115][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.463055][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.471284][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.473606][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.486150][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.487784][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.489439][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.491536][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.494565][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.496203][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.498176][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.501260][ T4337] device veth0_vlan entered promiscuous mode [ 32.507733][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.511452][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.514464][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.518338][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.520017][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.521627][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.523142][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.536846][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.539040][ T4337] device veth1_vlan entered promiscuous mode [ 32.547140][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.548845][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.550591][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.553357][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.554591][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.556180][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.558495][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.563266][ T4329] device veth0_vlan entered promiscuous mode [ 32.565481][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.567486][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.568993][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.576589][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.578761][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.580992][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.586291][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.591450][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.594742][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.596514][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.598204][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.599720][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.601332][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.605672][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.611051][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.614543][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.620064][ T4329] device veth1_vlan entered promiscuous mode [ 32.627990][ T4337] device veth0_macvtap entered promiscuous mode [ 32.630912][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.636084][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.637822][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.639509][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.641141][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.644307][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.647489][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.653368][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.654728][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.660542][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.662322][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.669779][ T4337] device veth1_macvtap entered promiscuous mode [ 32.674672][ T4340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.679553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.681242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.683508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.685905][ T4329] device veth0_macvtap entered promiscuous mode [ 32.697184][ T4329] device veth1_macvtap entered promiscuous mode [ 32.706125][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.709899][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.711649][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.714454][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.716234][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.718240][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.719908][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.723132][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.724907][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.727827][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.729437][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.733328][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.735484][ T4334] device veth0_vlan entered promiscuous mode [ 32.737228][ T4337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.738756][ T4337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.740172][ T4337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.741615][ T4337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.751243][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.753377][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.764628][ T4340] device veth0_vlan entered promiscuous mode [ 32.768420][ T4340] device veth1_vlan entered promiscuous mode [ 32.770214][ T4334] device veth1_vlan entered promiscuous mode [ 32.773003][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.774630][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.776215][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.777943][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.780742][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.786829][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.789172][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.793350][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.794969][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.796631][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.798209][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.799562][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.800828][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.804965][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.809930][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.811866][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.814218][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.817411][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.819183][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.828831][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.842670][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.844312][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.845868][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.854009][ T4329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.855554][ T4329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.857076][ T4329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.858618][ T4329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.869492][ T4340] device veth0_macvtap entered promiscuous mode [ 32.876424][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.878274][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.880012][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.884474][ T4334] device veth0_macvtap entered promiscuous mode [ 32.890993][ T4340] device veth1_macvtap entered promiscuous mode [ 32.915961][ T464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.917378][ T464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.924919][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.926690][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.928317][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.930023][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.933594][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.944839][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.946684][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.948391][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.949992][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.951514][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.955898][ T4334] device veth1_macvtap entered promiscuous mode [ 32.961175][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.965999][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.967616][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.969387][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.970960][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.973760][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.976389][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.979234][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.980845][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.985002][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.986882][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.989685][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.998074][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.999769][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.001377][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.005275][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.007809][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.023832][ T4340] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.025309][ T4340] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.027012][ T4340] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.028702][ T4340] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.033519][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.035419][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.040438][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.043275][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.044919][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.046603][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.048141][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.049859][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.053791][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.056391][ T4334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.057963][ T4334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.059402][ T4334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.060881][ T4334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.067078][ T464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.067832][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.068404][ T464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.070022][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.076109][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.077492][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.084315][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.085606][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.089960][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.092399][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.093994][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.115866][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.117819][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.119508][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.121165][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.133823][ T4330] device veth0_vlan entered promiscuous mode [ 33.151527][ T4330] device veth1_vlan entered promiscuous mode [ 33.160111][ T4391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.168302][ T4391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.171273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.206325][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.209878][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.236961][ T4330] device veth0_macvtap entered promiscuous mode [ 33.239586][ T4330] device veth1_macvtap entered promiscuous mode [ 33.246391][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.247904][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.249666][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.251337][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.254875][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.262109][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.263547][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.273711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.276718][ T4391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.278106][ T4391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.279473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.287598][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.289392][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.291049][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.301855][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.303668][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.305574][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.307180][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.308888][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.311672][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.314436][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.316125][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.317694][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.319375][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.320861][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.323203][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.324858][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.326538][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.332756][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.335637][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.337534][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.339598][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.342341][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.354768][ T4330] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.357673][ T4330] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.360341][ T4330] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.364360][ T4330] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.384701][ T4415] loop1: detected capacity change from 0 to 32768 [ 33.401041][ T4415] ======================================================= [ 33.401041][ T4415] WARNING: The mand mount option has been deprecated and [ 33.401041][ T4415] and is ignored by this kernel. Remove the mand [ 33.401041][ T4415] option from the mount to silence this warning. [ 33.401041][ T4415] ======================================================= [ 33.417278][ T4419] loop3: detected capacity change from 0 to 65 [ 33.420310][ T4419] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 [ 33.445712][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.447240][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.451448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.466388][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.467842][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.469362][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.472881][ T4415] JBD2: Ignoring recovery information on journal [ 33.501172][ T4415] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 33.521283][ T4425] ip_tables: iptables: counters copy to user failed while replacing table [ 33.644988][ T4329] ocfs2: Unmounting device (7,1) on (node local) [ 33.699693][ T4428] binder: tried to use weak ref as strong ref [ 33.706165][ T4428] binder: 4426:4428 Acquire 1 refcount change on invalid ref 0 ret -22 [ 33.710621][ T4428] binder: 4426:4428 got transaction to invalid handle, 1 [ 33.716033][ T4428] binder: 4428:4426 cannot find target node [ 33.718220][ T4428] binder: 4426:4428 transaction call to 0:0 failed 3/29201/-22, size 96-24 line 3062 [ 33.744002][ T4411] binder: undelivered TRANSACTION_ERROR: 29201 [ 33.912686][ T4454] loop3: detected capacity change from 0 to 512 [ 33.921911][ T4346] Bluetooth: hci3: command 0x041b tx timeout [ 33.934952][ T4333] Bluetooth: hci1: command 0x041b tx timeout [ 34.011923][ T4346] Bluetooth: hci0: command 0x041b tx timeout [ 34.013102][ T4346] Bluetooth: hci2: command 0x041b tx timeout [ 34.014168][ T4346] Bluetooth: hci4: command 0x041b tx timeout [ 34.028453][ T4454] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 4227858435)! [ 34.030267][ T4454] EXT4-fs (loop3): group descriptors corrupted! [ 34.126235][ T4459] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 34.392911][ T4454] device syzkaller1 entered promiscuous mode [ 34.399704][ T4333] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 34.526647][ T4470] FAULT_INJECTION: forcing a failure. [ 34.526647][ T4470] name failslab, interval 1, probability 0, space 0, times 1 [ 34.534698][ T4470] CPU: 1 PID: 4470 Comm: syz.1.12 Not tainted syzkaller #0 [ 34.535988][ T4470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.537892][ T4470] Call trace: [ 34.538499][ T4470] dump_backtrace+0x1c4/0x1f0 [ 34.539391][ T4470] show_stack+0x2c/0x3c [ 34.540125][ T4470] __dump_stack+0x30/0x40 [ 34.540910][ T4470] dump_stack_lvl+0xf4/0x15c [ 34.541745][ T4470] dump_stack+0x1c/0x5c [ 34.542512][ T4470] should_fail_ex+0x3cc/0x524 [ 34.543396][ T4470] __should_failslab+0xc0/0x11c [ 34.544240][ T4470] should_failslab+0x10/0x28 [ 34.545057][ T4470] __kmem_cache_alloc_node+0x7c/0x318 [ 34.546040][ T4470] kmalloc_trace+0x48/0x94 [ 34.546837][ T4470] io_sqe_files_register+0x208/0x6d4 [ 34.547821][ T4470] __arm64_sys_io_uring_register+0x3fc/0xccc [ 34.548934][ T4470] invoke_syscall+0x98/0x290 [ 34.549771][ T4470] el0_svc_common+0x13c/0x258 [ 34.550615][ T4470] do_el0_svc+0x5c/0x134 [ 34.551419][ T4470] el0_svc+0x58/0x12c [ 34.552161][ T4470] el0t_64_sync_handler+0x84/0xf0 [ 34.553063][ T4470] el0t_64_sync+0x18c/0x190 [ 34.560000][ T4470] Bluetooth: MGMT ver 1.22 [ 34.621062][ T4484] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12'. [ 34.825894][ T4477] loop0: detected capacity change from 0 to 32768 [ 34.891668][ T4499] NILFS (nullb0): couldn't find nilfs on the device [ 35.158001][ T4477] XFS (loop0): Mounting V5 Filesystem [ 35.191069][ T4477] XFS (loop0): Ending clean mount [ 35.198251][ T4515] loop2: detected capacity change from 0 to 512 [ 35.237847][ T4477] usb usb8: usbfs: process 4477 (syz.0.13) did not claim interface 0 before use [ 35.257639][ T4515] EXT4-fs (loop2): 1 truncate cleaned up [ 35.258923][ T4515] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.301655][ T4477] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 35.333148][ T4527] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.16: bg 0: block 465: padding at end of block bitmap is not set [ 35.339335][ T4527] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 35.342716][ T4527] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.16: invalid indirect mapped block 234881024 (level 0) [ 35.365453][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 35.407546][ T4533] rdma_op 00000000197a7ebe conn xmit_rdma 0000000000000000 [ 35.470281][ T4334] XFS (loop0): Unmounting Filesystem [ 35.867349][ T4541] loop2: detected capacity change from 0 to 131072 [ 35.875959][ T4541] F2FS-fs (loop2): invalid crc value [ 35.911585][ T4541] F2FS-fs (loop2): Found nat_bits in checkpoint [ 35.920583][ T4541] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 35.948463][ T4541] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 35.959343][ T4541] F2FS-fs (loop2): access invalid blkaddr:36 [ 35.960519][ T4541] CPU: 0 PID: 4541 Comm: syz.2.21 Not tainted syzkaller #0 [ 35.961821][ T4541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 35.963693][ T4541] Call trace: [ 35.964290][ T4541] dump_backtrace+0x1c4/0x1f0 [ 35.965133][ T4541] show_stack+0x2c/0x3c [ 35.965904][ T4541] __dump_stack+0x30/0x40 [ 35.966708][ T4541] dump_stack_lvl+0xf4/0x15c [ 35.967528][ T4541] dump_stack+0x1c/0x5c [ 35.968255][ T4541] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 35.969154][ T4541] f2fs_get_read_data_page+0x24c/0x60c [ 35.970099][ T4541] f2fs_find_data_page+0x1c4/0x520 [ 35.970972][ T4541] f2fs_empty_dir+0x10c/0x3d4 [ 35.971858][ T4541] f2fs_rmdir+0x48/0x7c [ 35.972616][ T4541] vfs_rmdir+0x304/0x438 [ 35.973355][ T4541] do_rmdir+0x244/0x524 [ 35.974074][ T4541] __arm64_sys_unlinkat+0xcc/0xfc [ 35.974958][ T4541] invoke_syscall+0x98/0x290 [ 35.974984][ T4541] el0_svc_common+0x13c/0x258 [ 35.974997][ T4541] do_el0_svc+0x5c/0x134 [ 35.977330][ T4541] el0_svc+0x58/0x12c [ 35.978065][ T4541] el0t_64_sync_handler+0x84/0xf0 [ 35.978979][ T4541] el0t_64_sync+0x18c/0x190 [ 36.011793][ T4346] Bluetooth: hci1: command 0x040f tx timeout [ 36.012885][ T4346] Bluetooth: hci3: command 0x040f tx timeout [ 36.030798][ T4560] device syz_tun entered promiscuous mode [ 36.074712][ T4573] FAULT_INJECTION: forcing a failure. [ 36.074712][ T4573] name failslab, interval 1, probability 0, space 0, times 0 [ 36.077103][ T4573] CPU: 1 PID: 4573 Comm: syz.0.25 Not tainted syzkaller #0 [ 36.078284][ T4573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.079940][ T4573] Call trace: [ 36.080588][ T4573] dump_backtrace+0x1c4/0x1f0 [ 36.081507][ T4573] show_stack+0x2c/0x3c [ 36.082267][ T4573] __dump_stack+0x30/0x40 [ 36.083076][ T4573] dump_stack_lvl+0xf4/0x15c [ 36.083927][ T4573] dump_stack+0x1c/0x5c [ 36.084682][ T4573] should_fail_ex+0x3cc/0x524 [ 36.085504][ T4573] __should_failslab+0xc0/0x11c [ 36.086374][ T4573] should_failslab+0x10/0x28 [ 36.087224][ T4573] __kmem_cache_alloc_node+0x7c/0x318 [ 36.088172][ T4573] __kmalloc_node+0xc8/0x184 [ 36.088974][ T4573] kvmalloc_node+0x88/0x1d4 [ 36.089790][ T4573] rhashtable_init+0x3b0/0xa10 [ 36.090654][ T4573] rhltable_init+0x28/0x80 [ 36.090670][ T4573] nf_tables_newtable+0x55c/0x119c [ 36.092304][ T4573] nfnetlink_rcv+0xc7c/0x1c54 [ 36.093156][ T4573] netlink_unicast+0x5fc/0x80c [ 36.094020][ T4573] netlink_sendmsg+0x6f0/0x9d8 [ 36.094893][ T4573] ____sys_sendmsg+0x588/0x90c [ 36.095795][ T4573] __sys_sendmsg+0x288/0x374 [ 36.096649][ T4573] __arm64_sys_sendmsg+0x80/0x94 [ 36.097587][ T4573] invoke_syscall+0x98/0x290 [ 36.098450][ T4573] el0_svc_common+0x13c/0x258 [ 36.099293][ T4573] do_el0_svc+0x5c/0x134 [ 36.100087][ T4573] el0_svc+0x58/0x12c [ 36.100834][ T4573] el0t_64_sync_handler+0x84/0xf0 [ 36.101774][ T4573] el0t_64_sync+0x18c/0x190 [ 36.106368][ T4344] Bluetooth: hci4: command 0x040f tx timeout [ 36.106395][ T4346] Bluetooth: hci2: command 0x040f tx timeout [ 36.108604][ T4344] Bluetooth: hci0: command 0x040f tx timeout [ 36.110205][ T4333] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 36.115014][ T4575] Zero length message leads to an empty skb [ 36.193819][ T4579] loop4: detected capacity change from 0 to 4096 [ 36.219187][ T4584] loop0: detected capacity change from 0 to 256 [ 36.231667][ T4583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 36.269739][ T4584] FAT-fs (loop0): Directory bread(block 64) failed [ 36.270902][ T4584] FAT-fs (loop0): Directory bread(block 65) failed [ 36.274369][ T4584] FAT-fs (loop0): Directory bread(block 66) failed [ 36.276154][ T4584] FAT-fs (loop0): Directory bread(block 67) failed [ 36.277314][ T4584] FAT-fs (loop0): Directory bread(block 68) failed [ 36.278859][ T4584] FAT-fs (loop0): Directory bread(block 69) failed [ 36.280027][ T4584] FAT-fs (loop0): Directory bread(block 70) failed [ 36.281168][ T4584] FAT-fs (loop0): Directory bread(block 71) failed [ 36.290336][ T4584] FAT-fs (loop0): Directory bread(block 72) failed [ 36.296098][ T4584] FAT-fs (loop0): Directory bread(block 73) failed [ 36.304104][ T4579] ntfs3: loop4: ino=9, attr_set_size [ 36.595583][ T4614] loop0: detected capacity change from 0 to 1024 [ 36.642925][ T4614] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 36.651576][ T4594] loop4: detected capacity change from 0 to 32768 [ 36.688861][ T4605] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.30 (4605) [ 36.701070][ T4614] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.36: lblock 0 mapped to illegal pblock 0 (length 4) [ 36.708977][ T4614] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 36.711218][ T4614] EXT4-fs (loop0): This should not happen!! Data will be lost [ 36.711218][ T4614] [ 36.714740][ T4614] EXT4-fs error (device loop0): ext4_ext_remove_space:2945: inode #15: comm syz.0.36: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 36.720429][ T4594] XFS (loop4): Mounting V5 Filesystem [ 36.723585][ T4605] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 36.725480][ T4605] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 36.733946][ T4605] BTRFS info (device loop2): setting nodatacow, compression disabled [ 36.736625][ T4605] BTRFS info (device loop2): turning on flush-on-commit [ 36.739243][ T4605] BTRFS info (device loop2): use zlib compression, level 3 [ 36.740786][ T4605] BTRFS info (device loop2): setting nodatasum [ 36.742552][ T4605] BTRFS info (device loop2): use no compression [ 36.743714][ T4605] BTRFS info (device loop2): trying to use backup root at mount time [ 36.745155][ T4605] BTRFS info (device loop2): max_inline at 0 [ 36.746214][ T4605] BTRFS info (device loop2): using free space tree [ 36.752169][ T4594] XFS (loop4): Ending clean mount [ 36.757491][ T11] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm kworker/u4:1: bg 0: block 112: padding at end of block bitmap is not set [ 36.768012][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 36.770218][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 36.770218][ T11] [ 36.780219][ T11] EXT4-fs (loop0): Total free blocks count 0 [ 36.781395][ T11] EXT4-fs (loop0): Free/Dirty block details [ 36.789192][ T11] EXT4-fs (loop0): free_blocks=0 [ 36.790124][ T11] EXT4-fs (loop0): dirty_blocks=48 [ 36.790960][ T11] EXT4-fs (loop0): Block reservation details [ 36.820785][ T4330] XFS (loop4): Unmounting Filesystem [ 36.855100][ T4648] fuse: Bad value for 'fd' [ 36.876740][ T4641] x_tables: duplicate underflow at hook 3 [ 36.878386][ T4643] sch_fq: defrate 4294967295 ignored. [ 36.941061][ T4651] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 36.949688][ T4651] FAULT_INJECTION: forcing a failure. [ 36.949688][ T4651] name failslab, interval 1, probability 0, space 0, times 0 [ 36.964495][ T4651] CPU: 1 PID: 4651 Comm: syz.0.37 Not tainted syzkaller #0 [ 36.965761][ T4651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.967573][ T4651] Call trace: [ 36.968199][ T4651] dump_backtrace+0x1c4/0x1f0 [ 36.969092][ T4651] show_stack+0x2c/0x3c [ 36.969876][ T4651] __dump_stack+0x30/0x40 [ 36.970711][ T4651] dump_stack_lvl+0xf4/0x15c [ 36.971568][ T4651] dump_stack+0x1c/0x5c [ 36.972340][ T4651] should_fail_ex+0x3cc/0x524 [ 36.973254][ T4651] __should_failslab+0xc0/0x11c [ 36.974144][ T4651] should_failslab+0x10/0x28 [ 36.974994][ T4651] kmem_cache_alloc+0x88/0x310 [ 36.975890][ T4651] ext4_init_io_end+0x30/0x128 [ 36.976771][ T4651] ext4_writepages+0x750/0x28fc [ 36.977694][ T4651] do_writepages+0x2c4/0x50c [ 36.978621][ T4651] filemap_fdatawrite_wbc+0x124/0x174 [ 36.979666][ T4651] filemap_write_and_wait_range+0xfc/0x1d0 [ 36.980829][ T4651] __iomap_dio_rw+0x750/0x18dc [ 36.981744][ T4651] iomap_dio_rw+0x5c/0xa8 [ 36.982580][ T4651] ext4_file_write_iter+0x1158/0x1500 [ 36.983634][ T4651] vfs_write+0x3c8/0x7c8 [ 36.984441][ T4651] ksys_write+0x12c/0x228 [ 36.985226][ T4651] __arm64_sys_write+0x7c/0x90 [ 36.986118][ T4651] invoke_syscall+0x98/0x290 [ 36.986972][ T4651] el0_svc_common+0x13c/0x258 [ 36.987835][ T4651] do_el0_svc+0x5c/0x134 [ 36.988604][ T4651] el0_svc+0x58/0x12c [ 36.989315][ T4651] el0t_64_sync_handler+0x84/0xf0 [ 36.990227][ T4651] el0t_64_sync+0x18c/0x190 [ 36.999215][ T60] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 37.003252][ T4605] BTRFS warning (device loop2): couldn't read tree root [ 37.004622][ T4605] BTRFS warning (device loop2): try to load backup roots slot 1 [ 37.006312][ T4460] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 37.008758][ T4605] BTRFS warning (device loop2): couldn't read tree root [ 37.010055][ T4605] BTRFS warning (device loop2): try to load backup roots slot 2 [ 37.024688][ T4605] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 37.030303][ T4605] BTRFS warning (device loop2): couldn't read tree root [ 37.037970][ T4605] BTRFS warning (device loop2): try to load backup roots slot 3 [ 37.073659][ T4639] XFS: noattr2 mount option is deprecated. [ 37.082319][ T4605] BTRFS info (device loop2): enabling ssd optimizations [ 37.118401][ T4337] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 37.143779][ T4651] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.37: lblock 0 mapped to illegal pblock 0 (length 4) [ 37.169130][ T4651] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 37.171473][ T4651] EXT4-fs (loop0): This should not happen!! Data will be lost [ 37.171473][ T4651] [ 37.180511][ T4651] EXT4-fs error (device loop0): ext4_ext_remove_space:2945: inode #15: comm syz.0.37: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 37.254832][ T4460] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm kworker/u4:7: bg 0: block 112: padding at end of block bitmap is not set [ 37.265335][ T4460] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 37.267535][ T4460] EXT4-fs (loop0): This should not happen!! Data will be lost [ 37.267535][ T4460] [ 37.269248][ T4460] EXT4-fs (loop0): Total free blocks count 0 [ 37.270253][ T4460] EXT4-fs (loop0): Free/Dirty block details [ 37.271186][ T4460] EXT4-fs (loop0): free_blocks=0 [ 37.295340][ T4460] EXT4-fs (loop0): dirty_blocks=48 [ 37.296332][ T4460] EXT4-fs (loop0): Block reservation details [ 37.339100][ T4692] overlayfs: failed to set xattr on upper [ 37.340173][ T4692] overlayfs: ...falling back to index=off,metacopy=off. [ 37.535815][ T4705] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 37.625813][ T4707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 37.842822][ T4726] FAULT_INJECTION: forcing a failure. [ 37.842822][ T4726] name failslab, interval 1, probability 0, space 0, times 0 [ 37.845369][ T4726] CPU: 0 PID: 4726 Comm: syz.1.51 Not tainted syzkaller #0 [ 37.846575][ T4726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 37.848227][ T4726] Call trace: [ 37.848744][ T4726] dump_backtrace+0x1c4/0x1f0 [ 37.849535][ T4726] show_stack+0x2c/0x3c [ 37.850199][ T4726] __dump_stack+0x30/0x40 [ 37.850922][ T4726] dump_stack_lvl+0xf4/0x15c [ 37.851674][ T4726] dump_stack+0x1c/0x5c [ 37.852427][ T4726] should_fail_ex+0x3cc/0x524 [ 37.853281][ T4726] __should_failslab+0xc0/0x11c [ 37.854157][ T4726] should_failslab+0x10/0x28 [ 37.855011][ T4726] kmem_cache_alloc+0x88/0x310 [ 37.855896][ T4726] mpol_new+0x154/0x2d0 [ 37.856638][ T4726] __arm64_sys_mbind+0x4c4/0x854 [ 37.856654][ T4726] invoke_syscall+0x98/0x290 [ 37.856664][ T4726] el0_svc_common+0x13c/0x258 [ 37.856672][ T4726] do_el0_svc+0x5c/0x134 [ 37.856678][ T4726] el0_svc+0x58/0x12c [ 37.856685][ T4726] el0t_64_sync_handler+0x84/0xf0 [ 37.857666][ T4726] el0t_64_sync+0x18c/0x190 [ 37.909017][ T4704] read_mapping_page failed! [ 37.911471][ T4704] ERROR: (device loop4): txAbort: [ 37.911471][ T4704] [ 37.918607][ T4704] ERROR: (device loop4): remounting filesystem as read-only [ 38.057401][ T4730] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.52 (4730) [ 38.064016][ T4730] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 38.075487][ T4730] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 38.091820][ T4341] Bluetooth: hci3: command 0x0419 tx timeout [ 38.093849][ T4341] Bluetooth: hci1: command 0x0419 tx timeout [ 38.163928][ T4341] Bluetooth: hci2: command 0x0419 tx timeout [ 38.165642][ T4341] Bluetooth: hci4: command 0x0419 tx timeout [ 38.354249][ T4344] Bluetooth: hci0: command 0x0419 tx timeout [ 38.363144][ T4730] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 38.364748][ T4730] BTRFS info (device loop0): use zstd compression, level 3 [ 38.364779][ T4730] BTRFS info (device loop0): using free space tree [ 38.428633][ T4762] FAULT_INJECTION: forcing a failure. [ 38.428633][ T4762] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.431247][ T4762] CPU: 0 PID: 4762 Comm: syz.2.56 Not tainted syzkaller #0 [ 38.432547][ T4762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.434459][ T4762] Call trace: [ 38.435101][ T4762] dump_backtrace+0x1c4/0x1f0 [ 38.435964][ T4762] show_stack+0x2c/0x3c [ 38.435983][ T4762] __dump_stack+0x30/0x40 [ 38.435998][ T4762] dump_stack_lvl+0xf4/0x15c [ 38.438463][ T4762] dump_stack+0x1c/0x5c [ 38.438485][ T4762] should_fail_ex+0x3cc/0x524 [ 38.440115][ T4762] should_fail+0x14/0x24 [ 38.440953][ T4762] should_fail_usercopy+0x20/0x30 [ 38.441917][ T4762] simple_read_from_buffer+0xcc/0x238 [ 38.442961][ T4762] proc_fail_nth_read+0x19c/0x23c [ 38.443922][ T4762] vfs_read+0x2a4/0x7b8 [ 38.444693][ T4762] ksys_read+0x12c/0x228 [ 38.445489][ T4762] __arm64_sys_read+0x7c/0x90 [ 38.446380][ T4762] invoke_syscall+0x98/0x290 [ 38.447175][ T4762] el0_svc_common+0x13c/0x258 [ 38.448085][ T4762] do_el0_svc+0x5c/0x134 [ 38.448918][ T4762] el0_svc+0x58/0x12c [ 38.449683][ T4762] el0t_64_sync_handler+0x84/0xf0 [ 38.450659][ T4762] el0t_64_sync+0x18c/0x190 [ 38.468951][ T4730] BTRFS info (device loop0): enabling ssd optimizations [ 38.651725][ C1] net_ratelimit: 75 callbacks suppressed [ 38.663176][ T4778] set_capacity_and_notify: 7 callbacks suppressed [ 38.663183][ T4778] loop4: detected capacity change from 0 to 8192 [ 38.689201][ T4778] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 38.700334][ T4778] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 38.708636][ T4778] REISERFS (device loop4): using ordered data mode [ 38.713347][ T4803] loop3: detected capacity change from 0 to 1024 [ 38.718262][ T4778] reiserfs: using flush barriers [ 38.728055][ T4778] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 38.738786][ T4803] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 38.739024][ T4778] REISERFS (device loop4): checking transaction log (loop4) [ 38.744538][ T4803] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.63: lblock 0 mapped to illegal pblock 0 (length 4) [ 38.748670][ T4803] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 38.751038][ T4803] EXT4-fs (loop3): This should not happen!! Data will be lost [ 38.751038][ T4803] [ 38.754338][ T4803] EXT4-fs error (device loop3): ext4_ext_remove_space:2945: inode #15: comm syz.3.63: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 38.787258][ T39] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:2: bg 0: block 112: padding at end of block bitmap is not set [ 38.790961][ T39] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 38.801398][ T39] EXT4-fs (loop3): This should not happen!! Data will be lost [ 38.801398][ T39] [ 38.808202][ T39] EXT4-fs (loop3): Total free blocks count 0 [ 38.811211][ T39] EXT4-fs (loop3): Free/Dirty block details [ 38.833867][ T39] EXT4-fs (loop3): free_blocks=0 [ 38.834790][ T39] EXT4-fs (loop3): dirty_blocks=48 [ 38.838479][ T39] EXT4-fs (loop3): Block reservation details [ 38.936335][ T4813] FAULT_INJECTION: forcing a failure. [ 38.936335][ T4813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.936906][ T4334] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 38.938667][ T4813] CPU: 1 PID: 4813 Comm: syz.3.64 Not tainted syzkaller #0 [ 38.941175][ T4778] REISERFS (device loop4): Using tea hash to sort names [ 38.941712][ T4813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.941735][ T4813] Call trace: [ 38.941739][ T4813] dump_backtrace+0x1c4/0x1f0 [ 38.941754][ T4813] show_stack+0x2c/0x3c [ 38.941759][ T4813] __dump_stack+0x30/0x40 [ 38.941769][ T4813] dump_stack_lvl+0xf4/0x15c [ 38.941775][ T4813] dump_stack+0x1c/0x5c [ 38.941780][ T4813] should_fail_ex+0x3cc/0x524 [ 38.941788][ T4813] should_fail+0x14/0x24 [ 38.941794][ T4813] should_fail_usercopy+0x20/0x30 [ 38.941800][ T4813] _copy_from_iter+0x190/0xf98 [ 38.941807][ T4813] kernfs_fop_write_iter+0x184/0x4b4 [ 38.941814][ T4813] vfs_write+0x3c8/0x7c8 [ 38.941819][ T4813] ksys_write+0x12c/0x228 [ 38.941823][ T4813] __arm64_sys_write+0x7c/0x90 [ 38.941828][ T4813] invoke_syscall+0x98/0x290 [ 38.941835][ T4813] el0_svc_common+0x13c/0x258 [ 38.941841][ T4813] do_el0_svc+0x5c/0x134 [ 38.941847][ T4813] el0_svc+0x58/0x12c [ 38.941852][ T4813] el0t_64_sync_handler+0x84/0xf0 [ 38.941858][ T4813] el0t_64_sync+0x18c/0x190 [ 38.953233][ T4778] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 39.030286][ T4814] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 39.136232][ T4816] loop3: detected capacity change from 0 to 256 [ 39.303626][ T4823] binder: tried to use weak ref as strong ref [ 39.304870][ T4823] binder: 4822:4823 Acquire 1 refcount change on invalid ref 0 ret -22 [ 39.306917][ T4823] binder: 4822:4823 got transaction to invalid handle, 1 [ 39.308330][ T4823] binder: 4823:4822 cannot find target node [ 39.309449][ T4823] binder: 4822:4823 transaction call to 0:0 failed 6/29201/-22, size 96-24 line 3062 [ 39.336828][ T4382] binder: undelivered TRANSACTION_ERROR: 29201 [ 39.414182][ T4828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.70'. [ 39.429888][ T4826] loop3: detected capacity change from 0 to 32768 [ 39.447535][ T4835] loop2: detected capacity change from 0 to 1024 [ 39.450644][ T4831] phram: not enough arguments [ 39.468217][ T4826] XFS (loop3): Mounting V5 Filesystem [ 39.482477][ T4835] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 39.485405][ T4835] EXT4-fs (loop2): shut down requested (2) [ 39.500487][ T4826] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 39.514602][ T4826] XFS (loop3): Starting recovery (logdev: internal) [ 39.520232][ T4826] XFS (loop3): Ending recovery (logdev: internal) [ 39.527118][ T4826] XFS (loop3): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 39.528783][ T4826] XFS (loop3): Failed to initialize disk quotas. [ 39.551074][ T4340] XFS (loop3): Unmounting Filesystem [ 39.578767][ T4849] loop0: detected capacity change from 0 to 64 [ 40.308838][ T4875] xt_bpf: check failed: parse error [ 40.316850][ T4861] loop3: detected capacity change from 0 to 32768 [ 40.336466][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 40.402217][ T4341] Bluetooth: hci0: command 0x0c1a tx timeout [ 40.428843][ T4861] JBD2: Ignoring recovery information on journal [ 40.443008][ T4891] fuse: Bad value for 'fd' [ 40.444269][ T4891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.79'. [ 40.546426][ T4861] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 40.651215][ T4912] loop4: detected capacity change from 0 to 8192 [ 40.660947][ T4912] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 40.663771][ T4912] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 40.665842][ T4912] REISERFS (device loop4): using ordered data mode [ 40.667025][ T4912] reiserfs: using flush barriers [ 40.705754][ T4912] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 40.724829][ T4912] REISERFS (device loop4): checking transaction log (loop4) [ 40.783134][ T4340] ocfs2: Unmounting device (7,3) on (node local) [ 40.938985][ T4934] loop2: detected capacity change from 0 to 128 [ 40.991611][ T4912] REISERFS (device loop4): Using tea hash to sort names [ 41.000907][ T4322] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 41.003245][ T4934] xt_TCPMSS: Only works on TCP SYN packets [ 41.008304][ T4912] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 41.093403][ T27] audit: type=1400 audit(41.080:2): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="//o" pid=4911 comm="syz.4.86" name="//o" offset=50 [ 41.103367][ T4950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.93'. [ 41.120293][ T4954] FAULT_INJECTION: forcing a failure. [ 41.120293][ T4954] name failslab, interval 1, probability 0, space 0, times 0 [ 41.133209][ T4954] CPU: 0 PID: 4954 Comm: syz.3.91 Not tainted syzkaller #0 [ 41.134585][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 41.136487][ T4954] Call trace: [ 41.137079][ T4954] dump_backtrace+0x1c4/0x1f0 [ 41.137934][ T4954] show_stack+0x2c/0x3c [ 41.138711][ T4954] __dump_stack+0x30/0x40 [ 41.139520][ T4954] dump_stack_lvl+0xf4/0x15c [ 41.140374][ T4954] dump_stack+0x1c/0x5c [ 41.141173][ T4954] should_fail_ex+0x3cc/0x524 [ 41.142054][ T4954] __should_failslab+0xc0/0x11c [ 41.142939][ T4954] should_failslab+0x10/0x28 [ 41.143804][ T4954] __kmem_cache_alloc_node+0x7c/0x318 [ 41.144766][ T4954] __kmalloc_node+0xc8/0x184 [ 41.145597][ T4954] memcg_alloc_slab_cgroups+0x90/0x164 [ 41.146574][ T4954] slab_post_alloc_hook+0xc0/0x430 [ 41.147509][ T4954] kmem_cache_alloc_node+0x258/0x344 [ 41.148447][ T4954] __alloc_skb+0x128/0x728 [ 41.149206][ T4954] alloc_skb_with_frags+0xa8/0x598 [ 41.150109][ T4954] sock_alloc_send_pskb+0x784/0x898 [ 41.151027][ T4954] unix_dgram_sendmsg+0x450/0x13e4 [ 41.151878][ T4954] ____sys_sendmsg+0x588/0x90c [ 41.152670][ T4954] __sys_sendmmsg+0x320/0x7ec [ 41.153463][ T4954] __arm64_sys_sendmmsg+0xa4/0xc0 [ 41.154357][ T4954] invoke_syscall+0x98/0x290 [ 41.155143][ T4954] el0_svc_common+0x13c/0x258 [ 41.155980][ T4954] do_el0_svc+0x5c/0x134 [ 41.156764][ T4954] el0_svc+0x58/0x12c [ 41.157494][ T4954] el0t_64_sync_handler+0x84/0xf0 [ 41.158403][ T4954] el0t_64_sync+0x18c/0x190 [ 41.181117][ T4960] loop0: detected capacity change from 0 to 512 [ 41.959047][ T4985] JBD2: Ignoring recovery information on journal [ 41.984592][ T4985] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 42.040283][ T4329] ocfs2: Unmounting device (7,1) on (node local) [ 42.124775][ T4976] XFS (loop0): Mounting V5 Filesystem [ 42.160876][ T4976] XFS (loop0): Ending clean mount [ 42.213195][ T4334] XFS (loop0): Unmounting Filesystem [ 42.294471][ T4999] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 42.296703][ T4999] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 42.298327][ T4999] REISERFS (device loop1): using ordered data mode [ 42.299492][ T4999] reiserfs: using flush barriers [ 42.318434][ T4999] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 42.321114][ T4999] REISERFS (device loop1): checking transaction log (loop1) [ 42.332186][ T4344] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 42.337119][ T4344] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 42.341402][ T4344] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 42.344354][ T4344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 42.346065][ T4344] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 42.347590][ T4344] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 42.414417][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.476492][ T4999] REISERFS (device loop1): Using tea hash to sort names [ 42.477939][ T4999] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 42.534552][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.673184][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.804350][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.845008][ T5040] syz.3.109 uses obsolete (PF_INET,SOCK_PACKET) [ 43.186806][ T5002] chnl_net:caif_netlink_parms(): no params data found [ 43.376844][ T5068] Dev loop8: unable to read RDB block 8 [ 43.399380][ T5068] loop8: unable to read partition table [ 43.400577][ T5068] loop8: partition table beyond EOD, truncated [ 43.401616][ T5068] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 43.539865][ T5076] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 43.691768][ C1] net_ratelimit: 66 callbacks suppressed [ 43.796302][ T5002] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.799212][ T5002] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.800952][ T5002] device bridge_slave_0 entered promiscuous mode [ 43.810791][ T5002] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.837363][ T5002] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.839797][ T5002] device bridge_slave_1 entered promiscuous mode [ 43.880657][ T5037] set_capacity_and_notify: 6 callbacks suppressed [ 43.880662][ T5037] loop0: detected capacity change from 0 to 131072 [ 43.929957][ T5037] F2FS-fs (loop0): Found nat_bits in checkpoint [ 43.986027][ T5037] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 44.010872][ T5037] F2FS-fs (loop0): lookup inode (7) has corrupted xattr [ 44.057966][ T5002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.087243][ T5002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.189338][ T5002] team0: Port device team_slave_0 added [ 44.225277][ T5074] loop2: detected capacity change from 0 to 131072 [ 44.245637][ T5002] team0: Port device team_slave_1 added [ 44.262318][ T5074] F2FS-fs (loop2): invalid crc value [ 44.303259][ T5074] F2FS-fs (loop2): Found nat_bits in checkpoint [ 44.316412][ T5074] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 44.325348][ T5002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.326635][ T5002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.331319][ T5074] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 44.333526][ T5002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.342425][ T5002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.343796][ T5002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.348288][ T5002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.401847][ T4344] Bluetooth: hci0: command 0x0409 tx timeout [ 44.485383][ T5002] device hsr_slave_0 entered promiscuous mode [ 44.523567][ T5002] device hsr_slave_1 entered promiscuous mode [ 44.551944][ T5002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.553313][ T5002] Cannot create hsr debugfs directory [ 44.589748][ T5147] 9pnet_fd: Insufficient options for proto=fd [ 45.104553][ T5164] loop1: detected capacity change from 0 to 512 [ 45.150468][ T5164] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.120: iget: bad i_size value: 38620345925642 [ 45.155880][ T5164] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.120: couldn't read orphan inode 15 (err -117) [ 45.163701][ T5164] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 45.176407][ T5164] EXT4-fs error (device loop1): ext4_lookup:1860: inode #15: comm syz.1.120: iget: bad i_size value: 38620345925642 [ 45.208413][ T5164] EXT4-fs error (device loop1): ext4_lookup:1860: inode #15: comm syz.1.120: iget: bad i_size value: 38620345925642 [ 45.212032][ T5164] EXT4-fs error (device loop1): ext4_lookup:1860: inode #15: comm syz.1.120: iget: bad i_size value: 38620345925642 [ 45.269458][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 45.478747][ T5193] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 45.620355][ T9] device hsr_slave_0 left promiscuous mode [ 45.672417][ T9] device hsr_slave_1 left promiscuous mode [ 45.751919][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.753496][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.756446][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.757746][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.759561][ T9] device bridge_slave_1 left promiscuous mode [ 45.761529][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.803288][ T9] device bridge_slave_0 left promiscuous mode [ 45.804310][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.925516][ T9] device veth1_macvtap left promiscuous mode [ 45.926793][ T9] device veth0_macvtap left promiscuous mode [ 45.927953][ T9] device veth1_vlan left promiscuous mode [ 45.928982][ T9] device veth0_vlan left promiscuous mode [ 45.941854][ T4382] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 46.134864][ T4382] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 46.136678][ T4382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.141576][ T4382] usb 1-1: config 0 descriptor?? [ 46.481820][ T4341] Bluetooth: hci0: command 0x041b tx timeout [ 48.015189][ T9] team0 (unregistering): Port device team_slave_1 removed [ 48.172998][ T9] team0 (unregistering): Port device team_slave_0 removed [ 48.342927][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.545940][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.561791][ T4344] Bluetooth: hci0: command 0x040f tx timeout [ 48.706091][ T4821] usb 1-1: USB disconnect, device number 2 [ 48.721711][ C1] net_ratelimit: 63 callbacks suppressed [ 49.122189][ T4821] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 49.314058][ T4821] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.317358][ T4821] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 49.318746][ T4821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.319977][ T4821] usb 1-1: Product: syz [ 49.320641][ T4821] usb 1-1: Manufacturer: syz [ 49.321447][ T4821] usb 1-1: SerialNumber: syz [ 49.327325][ T4821] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 49.931611][ T4821] gspca_mr97310a: reg write [19] error -71 [ 49.932914][ T4821] mr97310a: probe of 1-1:1.0 failed with error -71 [ 49.936008][ T4821] usb 1-1: USB disconnect, device number 3 [ 50.023741][ T9] bond0 (unregistering): Released all slaves [ 50.274404][ T5194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.275811][ T5194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.277726][ T5194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.278981][ T5194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.461883][ T5225] Bluetooth: MGMT ver 1.22 [ 50.462693][ T5225] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 50.599483][ T5237] netlink: 40 bytes leftover after parsing attributes in process `syz.1.139'. [ 50.642342][ T4341] Bluetooth: hci0: command 0x0419 tx timeout [ 50.696627][ T5002] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 50.734985][ T5002] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 50.784628][ T5002] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 50.827526][ T5002] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 50.941783][ T4821] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 50.946262][ T5264] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 50.949472][ T5264] device syzkaller0 entered promiscuous mode [ 51.121048][ T5273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.130535][ T4821] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 51.133190][ T5273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.134229][ T4821] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 51.136647][ T4821] usb 1-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 51.139194][ T4821] usb 1-1: config 1 interface 0 has no altsetting 0 [ 51.144661][ T5273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.146497][ T5273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.148117][ T4821] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.149732][ T4821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 51.151056][ T4821] usb 1-1: SerialNumber: syz [ 51.159650][ T5251] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 51.161683][ T5251] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 51.369697][ T5251] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 51.371164][ T5251] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 52.284744][ T5287] ieee802154 phy0 wpan0: encryption failed: -22 [ 52.306284][ T5289] loop0: detected capacity change from 0 to 4096 [ 52.346540][ T5289] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 52.348054][ T5289] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 52.349283][ T5289] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 52.350359][ T5289] loop0: [ 52.537415][ T27] audit: type=1326 audit(52.520:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5293 comm="syz.0.158" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb1788e8 code=0x0 [ 53.761740][ C0] net_ratelimit: 42 callbacks suppressed [ 58.438407][ T4341] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 58.440454][ T4341] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 58.445558][ T4341] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 58.447751][ T4341] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 58.449515][ T4341] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 58.451016][ T4341] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 59.131708][ C1] net_ratelimit: 63 callbacks suppressed [ 60.481748][ T4344] Bluetooth: hci5: command 0x0409 tx timeout [ 61.650580][ T5291] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.659584][ T4821] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 61.692231][ T4821] usb 1-1: USB disconnect, device number 4 [ 61.694243][ T4821] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 61.737145][ T5312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.740030][ T5312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.818439][ T5002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.846450][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.848193][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.851586][ T5002] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.863832][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.865589][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.867259][ T4856] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.868589][ T4856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.870209][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.883306][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.885135][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.886754][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.887997][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.896465][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.904309][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.910563][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.913021][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.915162][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.943868][ T5002] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.945591][ T5002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.977224][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.980121][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.982592][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.984383][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.986316][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.988030][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.031185][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.155502][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.156988][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.181676][ T5002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.408644][ T3995] device veth1_vlan left promiscuous mode [ 62.419830][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.498287][ T5299] chnl_net:caif_netlink_parms(): no params data found [ 62.539589][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.541563][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.563648][ T4344] Bluetooth: hci5: command 0x041b tx timeout [ 62.616120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.618063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.619814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.623319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.637137][ T5002] device veth0_vlan entered promiscuous mode [ 62.669479][ T4344] Bluetooth: hci2: Malformed LE Event: 0x0d [ 62.699538][ T5002] device veth1_vlan entered promiscuous mode [ 62.753333][ T5002] device veth0_macvtap entered promiscuous mode [ 62.756599][ T5002] device veth1_macvtap entered promiscuous mode [ 62.765375][ T5002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.767337][ T5002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.769041][ T5002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.770989][ T5002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.773104][ T5002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.775241][ T5002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.778086][ T5002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.781358][ T5002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.783913][ T5002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.785852][ T5002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.787836][ T5002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.789658][ T5002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.791616][ T5002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.794835][ T5002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.859147][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.861085][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.862955][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.864467][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.866169][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.867770][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.869536][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.873365][ T5299] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.874688][ T5299] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.883442][ T5299] device bridge_slave_0 entered promiscuous mode [ 62.891073][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.895804][ T5386] netlink: 20 bytes leftover after parsing attributes in process `syz.1.168'. [ 63.013689][ T5388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.015378][ T5388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.016701][ T4821] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 63.019132][ T4821] wiimote 0005:057E:0306.0001: New device registered [ 63.033726][ T4821] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1) [ 63.042618][ T5387] wiimote 0005:057E:0306.0001: Device removed [ 63.048970][ T4821] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input3 [ 63.065978][ T5389] fido_id[5389]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 63.071158][ T4821] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input4 [ 63.075140][ T4821] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input2 [ 63.584099][ T5002] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.585585][ T5002] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.587123][ T5002] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.588513][ T5002] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.591193][ T5299] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.597599][ T5299] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.599565][ T5299] device bridge_slave_1 entered promiscuous mode [ 63.654957][ T5299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.690922][ T5299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.740183][ T5299] team0: Port device team_slave_0 added [ 63.747474][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.748779][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.750396][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.757933][ T5299] team0: Port device team_slave_1 added [ 63.812523][ T1602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.813812][ T1602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.815425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.824917][ T5299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.826058][ T5299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.837682][ T5299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.850098][ T5299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.865053][ T5299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.869252][ T5299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.047641][ T5299] device hsr_slave_0 entered promiscuous mode [ 64.086355][ T5299] device hsr_slave_1 entered promiscuous mode [ 64.126077][ T5299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.127459][ T5299] Cannot create hsr debugfs directory [ 64.321719][ C0] net_ratelimit: 77 callbacks suppressed [ 64.370373][ T5299] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 64.427919][ T5299] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 64.467633][ T5299] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 64.485059][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.486257][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.509302][ T5299] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 64.581938][ T4819] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 64.587409][ T5299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.596953][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.598619][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.602373][ T5299] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.607511][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.609354][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.610840][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.611970][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.617105][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.620579][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.623317][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.625070][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.626299][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.629838][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.637110][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.640052][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.642024][ T4344] Bluetooth: hci5: command 0x040f tx timeout [ 64.647192][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.648943][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.654548][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.656678][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.660248][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.666590][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.670065][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.725959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.727617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.732255][ T5299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.763202][ T4819] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 64.764813][ T4819] usb 1-1: config 1 has no interface number 0 [ 64.765873][ T4819] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 64.767648][ T4819] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.772108][ T4819] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 64.773924][ T4819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.775294][ T4819] usb 1-1: Product: syz [ 64.781862][ T4819] usb 1-1: Manufacturer: syz [ 64.782684][ T4819] usb 1-1: SerialNumber: syz [ 64.790442][ T5419] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.794080][ T4819] usb 1-1: Expected 3 endpoints, found: 2 [ 64.837041][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.838888][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.839336][ T5434] process 'syz.1.177' launched './file1' with NULL argv: empty string added [ 64.868212][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.869976][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.873135][ T5299] device veth0_vlan entered promiscuous mode [ 64.874651][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.876347][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.893749][ T5299] device veth1_vlan entered promiscuous mode [ 64.906379][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.907949][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.909507][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.911344][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.915890][ T5299] device veth0_macvtap entered promiscuous mode [ 64.928536][ T5299] device veth1_macvtap entered promiscuous mode [ 64.949671][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.951443][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.954152][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.955982][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.957627][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.959386][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.961479][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.966919][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.969480][ T5299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.971396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.973134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.974700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.976392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.979281][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.981031][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.985047][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.986804][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.988437][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.990226][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.992673][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.994702][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.997349][ T5299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.998897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.000986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.010548][ T5299] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.013739][ T4819] usb 1-1: USB disconnect, device number 5 [ 65.014249][ T5299] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.018583][ T5299] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.020303][ T5299] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.038044][ T5446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.039821][ T5446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.057860][ T5448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.073883][ T5448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.090381][ T4460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.091675][ T4460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.095426][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.105903][ T1602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.107205][ T1602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.108947][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.626620][ T5469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.628257][ T5469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.928299][ T1519] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 66.106345][ T1519] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 66.108204][ T1519] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 66.111033][ T1519] usb 1-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 66.113222][ T1519] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 66.115080][ T1519] usb 1-1: Product: syz [ 66.115779][ T1519] usb 1-1: Manufacturer: syz [ 66.129808][ T1519] iuu_phoenix 1-1:1.0: iuu_phoenix converter detected [ 66.140572][ T1519] usb 1-1: iuu_phoenix converter now attached to ttyUSB0 [ 66.229149][ T5496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.238725][ T5496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.332830][ T1519] usb 1-1: USB disconnect, device number 6 [ 66.338140][ T1519] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 66.340189][ T1519] iuu_phoenix 1-1:1.0: device disconnected [ 66.762577][ T4341] Bluetooth: hci5: command 0x0419 tx timeout [ 67.228003][ T5545] Cannot find set identified by id 0 to match [ 67.248567][ T5547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.250420][ T5547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.257970][ T5547] FAULT_INJECTION: forcing a failure. [ 67.257970][ T5547] name failslab, interval 1, probability 0, space 0, times 0 [ 67.260010][ T5547] CPU: 1 PID: 5547 Comm: syz.5.209 Not tainted syzkaller #0 [ 67.261361][ T5547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.263260][ T5547] Call trace: [ 67.263264][ T5547] dump_backtrace+0x1c4/0x1f0 [ 67.263277][ T5547] show_stack+0x2c/0x3c [ 67.263282][ T5547] __dump_stack+0x30/0x40 [ 67.264791][ T5547] dump_stack_lvl+0xf4/0x15c [ 67.264807][ T5547] dump_stack+0x1c/0x5c [ 67.266256][ T5547] should_fail_ex+0x3cc/0x524 [ 67.267656][ T5547] __should_failslab+0xc0/0x11c [ 67.269303][ T5547] should_failslab+0x10/0x28 [ 67.269325][ T5547] kmem_cache_alloc+0x88/0x310 [ 67.270852][ T5547] security_file_alloc+0x38/0x11c [ 67.270877][ T5547] __alloc_file+0xac/0x234 [ 67.272436][ T5547] alloc_empty_file+0xa0/0x184 [ 67.273270][ T5547] path_openat+0xe0/0x27a0 [ 67.274080][ T5547] do_filp_open+0x198/0x38c [ 67.274925][ T5547] do_sys_openat2+0x134/0x3fc [ 67.275788][ T5547] __arm64_sys_openat+0x11c/0x150 [ 67.276715][ T5547] invoke_syscall+0x98/0x290 [ 67.277571][ T5547] el0_svc_common+0x13c/0x258 [ 67.278444][ T5547] do_el0_svc+0x5c/0x134 [ 67.279234][ T5547] el0_svc+0x58/0x12c [ 67.279979][ T5547] el0t_64_sync_handler+0x84/0xf0 [ 67.279994][ T5547] el0t_64_sync+0x18c/0x190 [ 67.440112][ T5553] futex_wake_op: syz.1.212 tries to shift op by -1; fix this program [ 67.502629][ T5567] netlink: 8 bytes leftover after parsing attributes in process `syz.6.219'. [ 67.530838][ T5570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.809349][ T5576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.811027][ T5576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.842036][ T4678] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 68.024063][ T4678] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 68.025452][ T4678] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 68.027188][ T4678] usb 1-1: config 4 has no interface number 0 [ 68.028203][ T4678] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 68.031893][ T4678] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 68.033925][ T4678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.035236][ T4678] usb 1-1: Product: syz [ 68.035965][ T4678] usb 1-1: Manufacturer: syz [ 68.036771][ T4678] usb 1-1: SerialNumber: syz [ 68.390673][ T5597] FAULT_INJECTION: forcing a failure. [ 68.390673][ T5597] name failslab, interval 1, probability 0, space 0, times 0 [ 68.396458][ T5597] CPU: 1 PID: 5597 Comm: syz.1.229 Not tainted syzkaller #0 [ 68.397910][ T5597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.399779][ T5597] Call trace: [ 68.400395][ T5597] dump_backtrace+0x1c4/0x1f0 [ 68.401224][ T5597] show_stack+0x2c/0x3c [ 68.401985][ T5597] __dump_stack+0x30/0x40 [ 68.402814][ T5597] dump_stack_lvl+0xf4/0x15c [ 68.403677][ T5597] dump_stack+0x1c/0x5c [ 68.404461][ T5597] should_fail_ex+0x3cc/0x524 [ 68.405352][ T5597] __should_failslab+0xc0/0x11c [ 68.406248][ T5597] should_failslab+0x10/0x28 [ 68.407119][ T5597] __kmem_cache_alloc_node+0x7c/0x318 [ 68.408158][ T5597] __kmalloc+0xc4/0x180 [ 68.408912][ T5597] sk_prot_alloc+0xc4/0x1e8 [ 68.409721][ T5597] sk_alloc+0x44/0x3a0 [ 68.410461][ T5597] __netlink_create+0x80/0x2a8 [ 68.411352][ T5597] __netlink_kernel_create+0x130/0x6a4 [ 68.412352][ T5597] diag_net_init+0xa8/0x12c [ 68.413186][ T5597] ops_init+0x2b0/0x53c [ 68.413965][ T5597] setup_net+0x494/0xb6c [ 68.414734][ T5597] copy_net_ns+0x2b8/0x578 [ 68.415553][ T5597] create_new_namespaces+0x30c/0x604 [ 68.416605][ T5597] unshare_nsproxy_namespaces+0x108/0x160 [ 68.417763][ T5597] ksys_unshare+0x3f0/0x70c [ 68.418630][ T5597] __arm64_sys_unshare+0x3c/0x50 [ 68.419582][ T5597] invoke_syscall+0x98/0x290 [ 68.420455][ T5597] el0_svc_common+0x13c/0x258 [ 68.421329][ T5597] do_el0_svc+0x5c/0x134 [ 68.422091][ T5597] el0_svc+0x58/0x12c [ 68.422836][ T5597] el0t_64_sync_handler+0x84/0xf0 [ 68.423808][ T5597] el0t_64_sync+0x18c/0x190 [ 68.456944][ T4678] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 68.461903][ T4678] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 68.467680][ T4678] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 68.469081][ T4678] usb 1-1: media controller created [ 68.472674][ T4678] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 68.493863][ T4678] DVB: Unable to find symbol dib7000p_attach() [ 68.494948][ T4678] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 68.496300][ T4678] Registered IR keymap rc-dib0700-rc5 [ 68.509501][ T5602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.512569][ T5602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.607239][ T5611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.608903][ T5611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.668906][ T4678] rc rc0: Gigabyte U7000 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 68.671036][ T4678] input: Gigabyte U7000 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5 [ 68.676184][ T4678] dvb-usb: schedule remote query interval to 50 msecs. [ 68.677323][ T4678] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 68.869273][ T3902] dib0700: RC Query Failed [ 68.870195][ T3902] dvb-usb: error -5 while querying for an remote control event. [ 68.878005][ T4678] usb 1-1: USB disconnect, device number 7 [ 68.962664][ T4678] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 69.035782][ T5626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.037615][ T5626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.362242][ C0] net_ratelimit: 102 callbacks suppressed [ 69.567372][ T5666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.570068][ T5666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.604216][ T113] cfg80211: failed to load regulatory.db [ 69.776544][ T5676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.264'. [ 69.960194][ T5685] jffs2: notice: (5685) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 70.150070][ T5705] netlink: 104 bytes leftover after parsing attributes in process `syz.5.276'. [ 70.251159][ T5712] Option ' *…C' to dns_resolver key: bad/missing value [ 71.061369][ T5578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 71.117713][ T5723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.119381][ T5723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.182585][ T5729] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 8 out of range (51000000..2150000000) [ 71.204999][ T5734] binder: 5733:5734 ioctl c0306201 0 returned -14 [ 71.206256][ T5734] FAULT_INJECTION: forcing a failure. [ 71.206256][ T5734] name fail_futex, interval 1, probability 0, space 0, times 1 [ 71.208430][ T5734] CPU: 0 PID: 5734 Comm: syz.0.289 Not tainted syzkaller #0 [ 71.209649][ T5734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 71.211461][ T5734] Call trace: [ 71.212011][ T5734] dump_backtrace+0x1c4/0x1f0 [ 71.212881][ T5734] show_stack+0x2c/0x3c [ 71.213644][ T5734] __dump_stack+0x30/0x40 [ 71.214378][ T5734] dump_stack_lvl+0xf4/0x15c [ 71.215149][ T5734] dump_stack+0x1c/0x5c [ 71.215865][ T5734] should_fail_ex+0x3cc/0x524 [ 71.216712][ T5734] should_fail+0x14/0x24 [ 71.217481][ T5734] get_futex_key+0x904/0xfb0 [ 71.218291][ T5734] futex_wake+0x10c/0x458 [ 71.219081][ T5734] do_futex+0x2c4/0x340 [ 71.219801][ T5734] __arm64_sys_futex+0x390/0x414 [ 71.220664][ T5734] invoke_syscall+0x98/0x290 [ 71.221495][ T5734] el0_svc_common+0x13c/0x258 [ 71.222301][ T5734] do_el0_svc+0x5c/0x134 [ 71.223063][ T5734] el0_svc+0x58/0x12c [ 71.223718][ T5734] el0t_64_sync_handler+0x84/0xf0 [ 71.224585][ T5734] el0t_64_sync+0x18c/0x190 [ 71.641935][ T4678] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 71.855930][ T4678] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 71.857548][ T4678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.861140][ T4678] usb 1-1: config 0 descriptor?? [ 72.274396][ T4678] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 72.275804][ T4678] [drm] Initialized udl on minor 2 [ 72.468961][ T4678] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 72.471187][ T4678] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 72.674311][ T4678] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 72.677567][ T113] usb 1-1: USB disconnect, device number 8 [ 72.679575][ T4678] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 72.681112][ T4678] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 73.202465][ T5769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.301'. [ 73.211913][ T4344] Bluetooth: hci0: command 0x0409 tx timeout [ 73.511781][ T4818] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 73.691731][ T4818] usb 1-1: Using ep0 maxpacket: 16 [ 73.694493][ T4818] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 73.695914][ T4818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.698301][ T4818] usb 1-1: config 0 descriptor?? [ 73.700877][ T4818] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 74.561710][ C1] net_ratelimit: 89 callbacks suppressed [ 76.733696][ T4818] gspca_sonixj: reg_w1 err -71 [ 76.734627][ T4818] sonixj: probe of 1-1:0.0 failed with error -71 [ 76.739850][ T4818] usb 1-1: USB disconnect, device number 9 [ 79.841849][ C0] net_ratelimit: 76 callbacks suppressed [ 80.761914][ T5740] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 80.889057][ T5798] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 8 out of range (51000000..2150000000) [ 80.937745][ T5810] snd_dummy snd_dummy.0: control 1:5:99:syz1:6 is already present [ 81.007032][ T5826] Unable to handle kernel paging request at virtual address dfff800000000000 [ 81.013543][ T5826] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 81.021934][ T5826] Mem abort info: [ 81.025006][ T5826] ESR = 0x0000000096000006 [ 81.025723][ T5826] EC = 0x25: DABT (current EL), IL = 32 bits [ 81.029025][ T5826] SET = 0, FnV = 0 [ 81.029667][ T5826] EA = 0, S1PTW = 0 [ 81.031617][ T5826] FSC = 0x06: level 2 translation fault [ 81.035939][ T5826] Data abort info: [ 81.037814][ T5826] ISV = 0, ISS = 0x00000006 [ 81.038651][ T5826] CM = 0, WnR = 0 [ 81.041637][ T5826] [dfff800000000000] address between user and kernel address ranges [ 81.049943][ T5826] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 81.051252][ T5826] Modules linked in: [ 81.051995][ T5826] CPU: 0 PID: 5826 Comm: syz.6.316 Not tainted syzkaller #0 [ 81.053333][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 81.055089][ T5826] pstate: 22400005 (nzCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 81.056452][ T5826] pc : vsscanf+0x170/0x1fe8 [ 81.057238][ T5826] lr : vsscanf+0x158/0x1fe8 [ 81.058031][ T5826] sp : ffff800022a07440 [ 81.058756][ T5826] x29: ffff800022a07520 x28: ffff700004540e94 x27: ffff800018dd4fd0 [ 81.060200][ T5826] x26: dfff800000000000 x25: ffff800022a076e0 x24: ffff800011dd6fa0 [ 81.061651][ T5826] x23: 0000000020000200 x22: 0000000000000030 x21: 0000000000000000 [ 81.063157][ T5826] x20: 0000000000000004 x19: ffff800013e8f880 x18: 0000000000000000 [ 81.064574][ T5826] x17: 0000000000000000 x16: ffff800011bcac18 x15: 0000000000000002 [ 81.066043][ T5826] x14: 0000000000000025 x13: 0000000000ff0100 x12: ffff800018dd4ff0 [ 81.067535][ T5826] x11: ffff0000f7875400 x10: ffff800011ac50d8 x9 : ffff800011dd6fa1 [ 81.068960][ T5826] x8 : 0000000000000000 x7 : ffff800022a075c0 x6 : ffff800022a076a0 [ 81.070336][ T5826] x5 : ffff800022a075e0 x4 : ffff800022a07620 x3 : ffff800011ac7140 [ 81.071736][ T5826] x2 : ffff800022a075c0 x1 : ffff800018dd4fd0 x0 : 0000000000000030 [ 81.073130][ T5826] dump_backtrace(regs = 00000000c54a953f tsk = 0000000000000000) [ 81.074464][ T5826] Call trace: [ 81.075053][ T5826] vsscanf+0x170/0x1fe8 [ 81.075788][ T5826] sscanf+0xd8/0x128 [ 81.076480][ T5826] split_huge_pages_write+0x384/0x163c [ 81.077403][ T5826] full_proxy_write+0x110/0x1f4 [ 81.078259][ T5826] vfs_write+0x2a8/0x7c8 [ 81.079054][ T5826] ksys_write+0x12c/0x228 [ 81.079814][ T5826] __arm64_sys_write+0x7c/0x90 [ 81.080686][ T5826] invoke_syscall+0x98/0x290 [ 81.081504][ T5826] el0_svc_common+0x13c/0x258 [ 81.082285][ T5826] do_el0_svc+0x5c/0x134 [ 81.083071][ T5826] el0_svc+0x58/0x12c [ 81.083762][ T5826] el0t_64_sync_handler+0x84/0xf0 [ 81.084664][ T5826] el0t_64_sync+0x18c/0x190 [ 81.085480][ T5826] Code: 3400ea36 d343fea8 91000709 f9002fe9 (38fa6908) [ 81.086688][ T5826] ---[ end trace 0000000000000000 ]--- [ 81.453557][ T5826] Kernel panic - not syncing: Oops: Fatal exception [ 81.454618][ T5826] SMP: stopping secondary CPUs [ 81.455443][ T5826] Kernel Offset: disabled [ 81.456155][ T5826] CPU features: 0x0a0000,000f0097,a65bfea7 [ 81.457141][ T5826] Memory Limit: none [ 81.817843][ T5826] Rebooting in 86400 seconds..