last executing test programs: 5.307001549s ago: executing program 0 (id=166): syz_emit_ethernet(0x17a, &(0x7f0000000280)={@local, @local, @val={@void}, {@ipv6={0x86dd, @udp={0x8, 0x6, "8de996", 0x140, 0x11, 0x1, @remote, @local, {[@srh={0x6, 0x6, 0x4, 0x3, 0x1, 0x40, 0x5, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}]}, @hopopts={0x2f, 0x19, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}, @generic={0xfb, 0x53, "0c19316bfd6e54c8bfd79a5f09878d22ce4853ebab140c7f462cb050c1a116f4c41caf27a3e91708a6123d9866cbe9ae66ee555bd931c58c121150b58c5e54a1b64b55ef544506821994670178f3d55deb5cb2"}, @generic={0x7, 0x4d, "42f81707c9ea0341d3aec7a85c6d81eb14975caef61a4f9a6f41ceef2513c739233ccc286f6297199a38505cfa7b6309e662077fcec05b2afb2c0a42d7c1fadfbcb2906c812afe3c736692d3e3"}]}, @srh={0x87, 0x0, 0x4, 0x0, 0xe1, 0x28, 0x175}], {0x4e24, 0x4e20, 0x28, 0x0, @gue={{0x1, 0x1, 0x2, 0x3, 0x0, @void}, "8e525b941fb0fc2489eb7eb236d0beef2fbd69f136124ce49e7c8daf"}}}}}}}, 0x0) 5.306896899s ago: executing program 0 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000100)='7', 0x1) unshare(0x2a020400) 5.289333889s ago: executing program 0 (id=168): r0 = syz_open_dev$evdev(&(0x7f0000000740), 0x1, 0x2002) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) 5.159427813s ago: executing program 0 (id=174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_RENAME(r0, 0x0, 0x80) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 5.147816653s ago: executing program 0 (id=175): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x104, 0xaa180) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000040)=0x3) 2.108203157s ago: executing program 0 (id=266): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000780), 0x1, 0x0) 951.988416ms ago: executing program 1 (id=293): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) write$midi(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x131, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, 0x0) sendmsg$kcm(r1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000d00)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000d80)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000dc0)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000fc0), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) socket$pppl2tp(0x18, 0x1, 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) sendto$inet(0xffffffffffffffff, &(0x7f0000000ac0)="450000280001000001", 0x9, 0x0, &(0x7f0000000b00)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) shutdown(r0, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_open_dev$vim2m(0x0, 0x3, 0x2) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 547.955736ms ago: executing program 3 (id=297): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x135) 547.599896ms ago: executing program 3 (id=299): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000200)={{0x80}, 'port0\x00', 0x7e, 0x11cfa, 0x7, 0x8000008, 0x3, 0x7, 0x1, 0x0, 0x7cce8c743ee810df, 0xfc}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000340)={0x800000, 0x80, 0x9, 0x4, 0x3ffd, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x21, 0x0) 496.225048ms ago: executing program 3 (id=301): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x28011, r1, 0xffffe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000004c0)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.u'}, 0xfe78) 411.948919ms ago: executing program 1 (id=306): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x84, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ffde2a", 0x4e, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0xffc}, {"e29f47d298a2f3141ef067002628c47ce2f4d2360af8426424d257eced376d67f61a4555a9bc32231bb9bd005e389c9a10b5b963bfc4fd94fbf3"}}}}}}}, 0x0) 405.99117ms ago: executing program 1 (id=308): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85512, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}) 346.606691ms ago: executing program 3 (id=310): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8c0) 346.425541ms ago: executing program 3 (id=312): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000900)='hello', 0x5, 0x0, &(0x7f0000000940)={0xa, 0x1f90, 0x0, @local}, 0x1c) 346.275231ms ago: executing program 1 (id=314): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="1800000040000183020000000000000003"], 0x18}}, 0x0) 343.721801ms ago: executing program 3 (id=315): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) 276.297203ms ago: executing program 4 (id=317): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000540), 0x0, 0x40002) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000680)) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f00000006c0)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) 276.123003ms ago: executing program 1 (id=319): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000150) 273.660203ms ago: executing program 2 (id=320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000019800)={0x0, 0x0, &(0x7f0000019840)={&(0x7f0000019880)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2400c080) 259.943243ms ago: executing program 1 (id=321): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f0000000ac0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000b40)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x40840) recvmsg(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x10020) 236.489264ms ago: executing program 2 (id=322): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001340)='./dev\x00', &(0x7f0000001380)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000013c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000001400)=@filename='./dev/sda1\x00', &(0x7f0000001600)='./mnt\x00', &(0x7f0000001640)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001680)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x3ff, 0x7fff, 0x0, 0x4, 0x1, 0x0, [{0x8, 0x7, 0x9, '\x00', 0x1}]}) 160.196876ms ago: executing program 4 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x1808000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a00100003801320001") 160.084125ms ago: executing program 2 (id=324): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000340)={'wlan1\x00', @random="0300"}) 158.520576ms ago: executing program 4 (id=325): r0 = socket(0x400000000010, 0x3, 0x0) setns(0xc9, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000015c0)={'ip6_vti0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000001600), 0x56) sendmsg$kcm(r2, &(0x7f0000001640)={&(0x7f0000001680)=@xdp={0x2c, 0xb, r1, 0x42}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001740)="27030200dc0f14000e0007000024c1020000ff3207c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 119.969186ms ago: executing program 4 (id=326): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ee) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory10/state\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='n', 0x1) 113.592827ms ago: executing program 2 (id=327): syz_emit_ethernet(0x2a, &(0x7f00000008c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x91, 0x0, @empty}}}}}, 0x0) 74.546927ms ago: executing program 2 (id=328): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sec\x00', &(0x7f0000000180)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x2, 0x0) 73.687187ms ago: executing program 4 (id=329): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0xc, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 146.06µs ago: executing program 2 (id=330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) close(r0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x1, 0x8, 0x7ff, 0x9}, 0x2, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x95}, 0x8080) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000780), 0x56) sendmsg$kcm(r7, &(0x7f00000007c0)={&(0x7f0000000800)=@xdp={0x2c, 0x0, r6, 0x42, 0x4000}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 0s ago: executing program 4 (id=331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001d80)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0x5}}]}}]}, 0x40}}, 0x4c800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000580)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)='\r', 0x1}], 0x1}, 0x8004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts. [ 28.778195][ T4316] cgroup: Unknown subsys name 'net' [ 29.004850][ T4316] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.282005][ T4316] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.061840][ T4330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.065793][ T4332] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.067507][ T4332] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.069133][ T4332] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.070660][ T4332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.072627][ T4332] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.079375][ T4334] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.080871][ T4334] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.086695][ T4334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.086806][ T4339] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.088049][ T4334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.089303][ T4339] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.091835][ T4334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.092131][ T4339] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.095312][ T4339] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.096705][ T4339] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.098721][ T4339] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.099143][ T4342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.099985][ T4339] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.100964][ T4342] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.104932][ T4342] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.106248][ T4342] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.110914][ T4345] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.118158][ T4332] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.118358][ T4345] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.126747][ T4344] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.128497][ T4344] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.129642][ T4339] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.145284][ T4333] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.146829][ T4333] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.148182][ T4333] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.160747][ T4329] rdma_rxe: rxe_register_device failed with error -23 [ 30.162083][ T4329] rdma_rxe: failed to add rxe_eth0 [ 30.166492][ T4339] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.166754][ T4328] rdma_rxe: rxe_register_device failed with error -23 [ 30.169565][ T4337] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.180500][ T4338] rdma_rxe: rxe_register_device failed with error -23 [ 30.183367][ T4338] rdma_rxe: failed to add rxe_eth0 [ 30.192631][ T4328] rdma_rxe: failed to add rxe_eth0 [ 30.225968][ T4333] infiniband rxe0: set active [ 30.226917][ T4333] infiniband rxe0: added rxe_eth0 [ 30.228390][ T4338] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.232809][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.238140][ T4333] RDS/IB: rxe0: added [ 30.238942][ T4333] smc: adding ib device rxe0 with port count 1 [ 30.240010][ T4333] smc: ib device rxe0 port 1 has pnetid [ 30.243843][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.309039][ T4333] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.325192][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 30.369572][ T4340] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.387962][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 30.400994][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.403395][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.405317][ T4328] device bridge_slave_0 entered promiscuous mode [ 30.412911][ T4333] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.435706][ T4333] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.438896][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.440466][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.442109][ T4328] device bridge_slave_1 entered promiscuous mode [ 30.449978][ T4338] chnl_net:caif_netlink_parms(): no params data found [ 30.475638][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.476950][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.478532][ T4329] device bridge_slave_0 entered promiscuous mode [ 30.481150][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.490393][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.491659][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.493514][ T4329] device bridge_slave_1 entered promiscuous mode [ 30.495606][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.516396][ T4328] team0: Port device team_slave_0 added [ 30.519452][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.520735][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.523713][ T4338] device bridge_slave_0 entered promiscuous mode [ 30.526250][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.527520][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.529115][ T4338] device bridge_slave_1 entered promiscuous mode [ 30.531928][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.534642][ T4328] team0: Port device team_slave_1 added [ 30.540819][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.541977][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.548402][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.553638][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.560123][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.561417][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.566554][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.575705][ T4329] team0: Port device team_slave_0 added [ 30.582960][ T4338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.586421][ T4329] team0: Port device team_slave_1 added [ 30.595112][ T4338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.602570][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.603805][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.608301][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.618590][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.619769][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.624389][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.673376][ T4328] device hsr_slave_0 entered promiscuous mode [ 30.712424][ T4328] device hsr_slave_1 entered promiscuous mode [ 30.753442][ T4338] team0: Port device team_slave_0 added [ 30.755673][ T4338] team0: Port device team_slave_1 added [ 30.761476][ T4338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.763165][ T4338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.767452][ T4338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.813475][ T4329] device hsr_slave_0 entered promiscuous mode [ 30.862384][ T4329] device hsr_slave_1 entered promiscuous mode [ 30.912244][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.913623][ T4329] Cannot create hsr debugfs directory [ 30.917800][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 30.921159][ T4338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.923821][ T4338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.928134][ T4338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.935500][ T4340] chnl_net:caif_netlink_parms(): no params data found [ 31.023278][ T4338] device hsr_slave_0 entered promiscuous mode [ 31.062344][ T4338] device hsr_slave_1 entered promiscuous mode [ 31.112225][ T4338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.113579][ T4338] Cannot create hsr debugfs directory [ 31.127368][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.128596][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.130140][ T4333] device bridge_slave_0 entered promiscuous mode [ 31.140445][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.141671][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.143818][ T4340] device bridge_slave_0 entered promiscuous mode [ 31.147791][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.149137][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.150813][ T4333] device bridge_slave_1 entered promiscuous mode [ 31.158802][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.160086][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.161613][ T4340] device bridge_slave_1 entered promiscuous mode [ 31.173050][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.189653][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.198842][ T4340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.208339][ T4340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.214670][ T4333] team0: Port device team_slave_0 added [ 31.223390][ T4340] team0: Port device team_slave_0 added [ 31.225506][ T4340] team0: Port device team_slave_1 added [ 31.229041][ T4333] team0: Port device team_slave_1 added [ 31.232677][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.233928][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.237982][ T4340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.240294][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.241551][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.246713][ T4340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.258109][ T4328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.313428][ T4328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.364854][ T4328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.404623][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.405825][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.409916][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.411821][ T4328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.476905][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.478233][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.483658][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.495809][ T4329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.584055][ T4340] device hsr_slave_0 entered promiscuous mode [ 31.622420][ T4340] device hsr_slave_1 entered promiscuous mode [ 31.662229][ T4340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.663514][ T4340] Cannot create hsr debugfs directory [ 31.671641][ T4329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.703995][ T4329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.783569][ T4333] device hsr_slave_0 entered promiscuous mode [ 31.822408][ T4333] device hsr_slave_1 entered promiscuous mode [ 31.862248][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.863619][ T4333] Cannot create hsr debugfs directory [ 31.864642][ T4329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.950543][ T4338] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.970021][ T4338] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.020832][ T4338] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.083295][ T4338] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.156496][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.159578][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.170940][ T4340] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.175073][ T4334] Bluetooth: hci3: command 0x0409 tx timeout [ 32.175083][ T4344] Bluetooth: hci1: command 0x0409 tx timeout [ 32.176171][ T4334] Bluetooth: hci2: command 0x0409 tx timeout [ 32.177225][ T4344] Bluetooth: hci0: command 0x0409 tx timeout [ 32.215998][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.218162][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.220769][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.222345][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.225803][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.229223][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.230863][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.234991][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.236407][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.240134][ T4340] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.252291][ T4337] Bluetooth: hci4: command 0x0409 tx timeout [ 32.264217][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.265341][ T4340] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.296230][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.297852][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.299458][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.301079][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.302338][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.305398][ T4333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.355525][ T4333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.405318][ T4340] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.468237][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.470377][ T4333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.519581][ T4333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.553379][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.555058][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.556549][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.557981][ T1576] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.559136][ T1576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.560572][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.562813][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.564748][ T1576] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.566029][ T1576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.567548][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.569365][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.571077][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.572905][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.576303][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.585341][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.587205][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.588898][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.598442][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.600062][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.601856][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.604300][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.618629][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.620435][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.621903][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.627364][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.629218][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.633542][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.646175][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.647857][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.651864][ T4329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.655091][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.657062][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.658668][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.661229][ T4338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.678130][ T4338] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.681450][ T4340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.684588][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.686073][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.691940][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.693939][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.695545][ T1576] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.696832][ T1576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.699219][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.704347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.705969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.707605][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.708902][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.726651][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.728244][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.734378][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.744503][ T4340] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.746967][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.751053][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.755157][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.756768][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.759586][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.761228][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.763095][ T1576] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.764347][ T1576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.783992][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.785570][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.787195][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.789153][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.790887][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.800877][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.806071][ T1576] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.807234][ T1576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.808608][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.810333][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.812049][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.818422][ T4338] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.820225][ T4338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.828319][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.830084][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.831724][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.833800][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.835842][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.837337][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.838837][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.840259][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.841654][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.844352][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.846119][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.847827][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.849485][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.851158][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.854519][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.855752][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.857203][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.858629][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.860123][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.868783][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.872104][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.874064][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.875374][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.877096][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.881102][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.882960][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.884371][ T1576] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.885584][ T1576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.890648][ T4340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.894985][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.897825][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.905259][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.906891][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.908400][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.921776][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.923969][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.925690][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.931116][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.933931][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.938612][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.940698][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.944275][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.946415][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.957157][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.958836][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.960509][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.966234][ T4333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.968289][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.973273][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.974985][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.976995][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.978456][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.980086][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.981595][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.988177][ T4329] device veth0_vlan entered promiscuous mode [ 32.993296][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.994548][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.995819][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.997898][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.003549][ T4338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.007213][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.008686][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.010346][ T4328] device veth0_vlan entered promiscuous mode [ 33.016647][ T4329] device veth1_vlan entered promiscuous mode [ 33.027582][ T4328] device veth1_vlan entered promiscuous mode [ 33.038486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.040067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.041727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.045196][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.046730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.048333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.059669][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.061004][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.063039][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.066404][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.068337][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.069843][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.073589][ T4340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.077034][ T4338] device veth0_vlan entered promiscuous mode [ 33.078656][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.080264][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.083358][ T4329] device veth0_macvtap entered promiscuous mode [ 33.089865][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.091383][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.093283][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.097646][ T4338] device veth1_vlan entered promiscuous mode [ 33.100395][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.101987][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.106631][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.108035][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.110579][ T4329] device veth1_macvtap entered promiscuous mode [ 33.120656][ T4328] device veth0_macvtap entered promiscuous mode [ 33.123703][ T4328] device veth1_macvtap entered promiscuous mode [ 33.130723][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.137314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.138861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.140282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.141887][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.145357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.150797][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.153115][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.154853][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.156982][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.161602][ T4338] device veth0_macvtap entered promiscuous mode [ 33.165286][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.166619][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.168277][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.169915][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.171562][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.177210][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.178855][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.180376][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.182803][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.184541][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.186735][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.191276][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.195521][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.197850][ T4329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.199344][ T4329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.200715][ T4329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.202117][ T4329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.207187][ T4338] device veth1_macvtap entered promiscuous mode [ 33.209177][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.210747][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.219457][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.220983][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.226692][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.228383][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.230058][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.234962][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.236680][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.238327][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.239986][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.243550][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.246382][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.248097][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.260794][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.262819][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.289285][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.291141][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.293432][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.295145][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.297393][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.298686][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.300272][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.301965][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.304064][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.307235][ T4340] device veth0_vlan entered promiscuous mode [ 33.310656][ T4340] device veth1_vlan entered promiscuous mode [ 33.314576][ T4333] device veth0_vlan entered promiscuous mode [ 33.317399][ T4422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.318742][ T4422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.323772][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.325281][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.326789][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.328334][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.329893][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.331437][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.334369][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.335976][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.344197][ T4338] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.345726][ T4338] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.347172][ T4338] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.348658][ T4338] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.354966][ T4333] device veth1_vlan entered promiscuous mode [ 33.369266][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.370691][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.374376][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.378045][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.379820][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.385098][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.386405][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.387763][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.414851][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.416680][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.420440][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.423527][ T4340] device veth0_macvtap entered promiscuous mode [ 33.426499][ T4340] device veth1_macvtap entered promiscuous mode [ 33.435098][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.436625][ T4408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.436769][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.438025][ T4408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.439613][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.445498][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.447171][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.469935][ T4333] device veth0_macvtap entered promiscuous mode [ 33.474761][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.486635][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.488466][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.491841][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.494828][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.496610][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.499503][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.502142][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.512109][ T4333] device veth1_macvtap entered promiscuous mode [ 33.517449][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.517731][ T4408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.519445][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.520182][ T4408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.527522][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.544613][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.546547][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.548440][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.550197][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.551837][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.562670][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.565532][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.574890][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.576559][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.578136][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.579769][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.584361][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.586182][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.587919][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.589715][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.593257][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.596326][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.598636][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.603157][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.605099][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.615732][ T4340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.617297][ T4340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.626518][ T4340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.627984][ T4340] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.632916][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.634400][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.641702][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.647273][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.649243][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.650984][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.655282][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.656926][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.658728][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.660790][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.662868][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.665853][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.668858][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.670620][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.678227][ T4437] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4'. [ 33.680970][ T4333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.683628][ T4333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.685079][ T4333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.686428][ T4333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.726262][ T4452] binder: 4451:4452 tried to acquire reference to desc 0, got 1 instead [ 33.732468][ T4452] binder: 4451:4452 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 33.739092][ T4452] binder: 4452 RLIMIT_NICE not set [ 33.748258][ T4452] binder: undelivered transaction 5, copy_to_user failed [ 33.749701][ T4452] binder: 4451:4452 ioctl c0306201 20000440 returned -14 [ 33.755266][ T4403] binder: undelivered TRANSACTION_COMPLETE [ 33.778481][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.779812][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.781869][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.786079][ T4422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.787369][ T4422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.797475][ T4459] FAULT_INJECTION: forcing a failure. [ 33.797475][ T4459] name failslab, interval 1, probability 0, space 0, times 1 [ 33.799545][ T4459] CPU: 0 PID: 4459 Comm: syz.3.10 Not tainted syzkaller #0 [ 33.800683][ T4459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 33.802326][ T4459] Call trace: [ 33.802922][ T4459] dump_backtrace+0x1c4/0x1f0 [ 33.803790][ T4459] show_stack+0x2c/0x3c [ 33.804575][ T4459] __dump_stack+0x30/0x40 [ 33.805358][ T4459] dump_stack_lvl+0xf4/0x15c [ 33.806191][ T4459] dump_stack+0x1c/0x5c [ 33.806960][ T4459] should_fail_ex+0x3cc/0x524 [ 33.807794][ T4459] __should_failslab+0xc0/0x11c [ 33.808673][ T4459] should_failslab+0x10/0x28 [ 33.809510][ T4459] __kmem_cache_alloc_node+0x7c/0x318 [ 33.810439][ T4459] kmalloc_trace+0x48/0x94 [ 33.811224][ T4459] raw_open+0x8c/0x458 [ 33.811990][ T4459] misc_open+0x310/0x388 [ 33.812727][ T4459] chrdev_open+0x3d0/0x51c [ 33.813503][ T4459] do_dentry_open+0x738/0xf8c [ 33.814343][ T4459] vfs_open+0x7c/0x90 [ 33.815042][ T4459] path_openat+0x1fc0/0x27a0 [ 33.815890][ T4459] do_filp_open+0x198/0x38c [ 33.816712][ T4459] do_sys_openat2+0x134/0x3fc [ 33.817527][ T4459] __arm64_sys_openat+0x11c/0x150 [ 33.818385][ T4459] invoke_syscall+0x98/0x290 [ 33.818853][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.819177][ T4459] el0_svc_common+0x13c/0x258 [ 33.820569][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.821334][ T4459] do_el0_svc+0x5c/0x134 [ 33.823357][ T4459] el0_svc+0x58/0x12c [ 33.824056][ T4459] el0t_64_sync_handler+0x84/0xf0 [ 33.824954][ T4459] el0t_64_sync+0x18c/0x190 [ 33.832572][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.834321][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.842128][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.843726][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.845525][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.912105][ T4467] device syzkaller0 entered promiscuous mode [ 33.927832][ T4465] Boot memory [50000000 58000000] offlining attempted [ 33.994363][ T4470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13'. [ 33.996188][ T4470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13'. [ 33.997971][ T4470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 34.252380][ T4344] Bluetooth: hci0: command 0x041b tx timeout [ 34.253541][ T4344] Bluetooth: hci2: command 0x041b tx timeout [ 34.254546][ T4344] Bluetooth: hci1: command 0x041b tx timeout [ 34.255548][ T4344] Bluetooth: hci3: command 0x041b tx timeout [ 34.281792][ T4481] loop1: detected capacity change from 0 to 128 [ 34.289915][ T4481] FAULT_INJECTION: forcing a failure. [ 34.289915][ T4481] name failslab, interval 1, probability 5, space 0, times 10000 [ 34.292852][ T4481] CPU: 0 PID: 4481 Comm: syz.1.18 Not tainted syzkaller #0 [ 34.294158][ T4481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.296032][ T4481] Call trace: [ 34.296626][ T4481] dump_backtrace+0x1c4/0x1f0 [ 34.297488][ T4481] show_stack+0x2c/0x3c [ 34.298252][ T4481] __dump_stack+0x30/0x40 [ 34.299032][ T4481] dump_stack_lvl+0xf4/0x15c [ 34.299846][ T4481] dump_stack+0x1c/0x5c [ 34.300591][ T4481] should_fail_ex+0x3cc/0x524 [ 34.301413][ T4481] __should_failslab+0xc0/0x11c [ 34.302264][ T4481] should_failslab+0x10/0x28 [ 34.303084][ T4481] __kmem_cache_alloc_node+0x7c/0x318 [ 34.304029][ T4481] __kmalloc+0xc4/0x180 [ 34.304746][ T4481] tomoyo_realpath_from_path+0xc4/0x508 [ 34.305717][ T4481] tomoyo_mount_permission+0x748/0x798 [ 34.306668][ T4481] tomoyo_sb_mount+0x48/0x60 [ 34.307466][ T4481] security_sb_mount+0x94/0xd4 [ 34.308313][ T4481] path_mount+0xb8/0xe6c [ 34.309073][ T4481] __arm64_sys_mount+0x4a0/0x5a0 [ 34.309985][ T4481] invoke_syscall+0x98/0x290 [ 34.310818][ T4481] el0_svc_common+0x13c/0x258 [ 34.311644][ T4481] do_el0_svc+0x5c/0x134 [ 34.312399][ T4481] el0_svc+0x58/0x12c [ 34.313103][ T4481] el0t_64_sync_handler+0x84/0xf0 [ 34.313997][ T4481] el0t_64_sync+0x18c/0x190 [ 34.316648][ T4481] ERROR: Out of memory at tomoyo_realpath_from_path. [ 34.319467][ T4481] ======================================================= [ 34.319467][ T4481] WARNING: The mand mount option has been deprecated and [ 34.319467][ T4481] and is ignored by this kernel. Remove the mand [ 34.319467][ T4481] option from the mount to silence this warning. [ 34.319467][ T4481] ======================================================= [ 34.329529][ T4483] loop0: detected capacity change from 0 to 128 [ 34.331843][ T4481] FAULT_INJECTION: forcing a failure. [ 34.331843][ T4481] name failslab, interval 1, probability 5, space 0, times 9999 [ 34.336933][ T4337] Bluetooth: hci4: command 0x041b tx timeout [ 34.338281][ T4481] CPU: 0 PID: 4481 Comm: syz.1.18 Not tainted syzkaller #0 [ 34.339592][ T4481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.341492][ T4481] Call trace: [ 34.342082][ T4481] dump_backtrace+0x1c4/0x1f0 [ 34.342955][ T4481] show_stack+0x2c/0x3c [ 34.343735][ T4481] __dump_stack+0x30/0x40 [ 34.344513][ T4481] dump_stack_lvl+0xf4/0x15c [ 34.345344][ T4481] dump_stack+0x1c/0x5c [ 34.346215][ T4481] should_fail_ex+0x3cc/0x524 [ 34.347171][ T4481] __should_failslab+0xc0/0x11c [ 34.348200][ T4481] should_failslab+0x10/0x28 [ 34.349147][ T4481] kmem_cache_alloc+0x88/0x310 [ 34.350038][ T4481] security_inode_alloc+0x38/0x11c [ 34.351068][ T4481] inode_init_always+0x6c8/0xb28 [ 34.352071][ T4481] new_inode_pseudo+0x7c/0x1cc [ 34.353070][ T4481] new_inode+0x38/0x174 [ 34.353932][ T4481] shmem_get_inode+0x2cc/0xa8c [ 34.354837][ T4481] shmem_tmpfile+0x60/0x148 [ 34.355652][ T4481] vfs_tmpfile+0x274/0x3a8 [ 34.356558][ T4481] vfs_tmpfile_open+0x64/0xac [ 34.357513][ T4481] ovl_get_workdir+0x4fc/0x1084 [ 34.358462][ T4481] ovl_fill_super+0x17d0/0x3938 [ 34.359418][ T4481] mount_nodev+0x68/0x108 [ 34.360195][ T4481] ovl_mount+0x3c/0x50 [ 34.360940][ T4481] legacy_get_tree+0xd8/0x174 [ 34.361778][ T4481] vfs_get_tree+0x90/0x278 [ 34.362593][ T4481] do_new_mount+0x228/0x804 [ 34.363389][ T4481] path_mount+0x5ac/0xe6c [ 34.364165][ T4481] __arm64_sys_mount+0x4a0/0x5a0 [ 34.365044][ T4481] invoke_syscall+0x98/0x290 [ 34.365832][ T4481] el0_svc_common+0x13c/0x258 [ 34.366660][ T4481] do_el0_svc+0x5c/0x134 [ 34.367426][ T4481] el0_svc+0x58/0x12c [ 34.368131][ T4481] el0t_64_sync_handler+0x84/0xf0 [ 34.369011][ T4481] el0t_64_sync+0x18c/0x190 [ 34.385281][ T4481] overlayfs: upper fs does not support tmpfile. [ 34.390413][ T4481] FAULT_INJECTION: forcing a failure. [ 34.390413][ T4481] name failslab, interval 1, probability 5, space 0, times 9998 [ 34.393078][ T4481] CPU: 0 PID: 4481 Comm: syz.1.18 Not tainted syzkaller #0 [ 34.394356][ T4481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.396161][ T4481] Call trace: [ 34.396765][ T4481] dump_backtrace+0x1c4/0x1f0 [ 34.397611][ T4481] show_stack+0x2c/0x3c [ 34.398365][ T4481] __dump_stack+0x30/0x40 [ 34.399161][ T4481] dump_stack_lvl+0xf4/0x15c [ 34.400018][ T4481] dump_stack+0x1c/0x5c [ 34.400781][ T4481] should_fail_ex+0x3cc/0x524 [ 34.401622][ T4481] __should_failslab+0xc0/0x11c [ 34.402492][ T4481] should_failslab+0x10/0x28 [ 34.403329][ T4481] slab_pre_alloc_hook+0x6c/0x31c [ 34.404247][ T4481] kmem_cache_alloc_lru+0x60/0x284 [ 34.405157][ T4481] shmem_alloc_inode+0x2c/0x48 [ 34.406024][ T4481] new_inode_pseudo+0x68/0x1cc [ 34.406904][ T4481] new_inode+0x38/0x174 [ 34.407652][ T4481] shmem_get_inode+0x2cc/0xa8c [ 34.408475][ T4481] shmem_mknod+0x64/0x1c4 [ 34.409226][ T4481] shmem_rename2+0x1b4/0x33c [ 34.410048][ T4481] vfs_rename+0xb08/0xe3c [ 34.410792][ T4481] ovl_get_workdir+0x710/0x1084 [ 34.411627][ T4481] ovl_fill_super+0x17d0/0x3938 [ 34.412483][ T4481] mount_nodev+0x68/0x108 [ 34.413241][ T4481] ovl_mount+0x3c/0x50 [ 34.413968][ T4481] legacy_get_tree+0xd8/0x174 [ 34.414772][ T4481] vfs_get_tree+0x90/0x278 [ 34.415538][ T4481] do_new_mount+0x228/0x804 [ 34.416321][ T4481] path_mount+0x5ac/0xe6c [ 34.417068][ T4481] __arm64_sys_mount+0x4a0/0x5a0 [ 34.417935][ T4481] invoke_syscall+0x98/0x290 [ 34.418761][ T4481] el0_svc_common+0x13c/0x258 [ 34.419647][ T4481] do_el0_svc+0x5c/0x134 [ 34.420441][ T4481] el0_svc+0x58/0x12c [ 34.421164][ T4481] el0t_64_sync_handler+0x84/0xf0 [ 34.422082][ T4481] el0t_64_sync+0x18c/0x190 [ 34.463329][ T4346] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 34.468496][ T4483] FAULT_INJECTION: forcing a failure. [ 34.468496][ T4483] name failslab, interval 1, probability 5, space 0, times 10000 [ 34.477514][ T4483] CPU: 0 PID: 4483 Comm: syz.0.19 Not tainted syzkaller #0 [ 34.478801][ T4483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.480749][ T4483] Call trace: [ 34.481326][ T4483] dump_backtrace+0x1c4/0x1f0 [ 34.482143][ T4483] show_stack+0x2c/0x3c [ 34.482867][ T4483] __dump_stack+0x30/0x40 [ 34.483645][ T4483] dump_stack_lvl+0xf4/0x15c [ 34.484455][ T4483] dump_stack+0x1c/0x5c [ 34.485191][ T4483] should_fail_ex+0x3cc/0x524 [ 34.486054][ T4483] __should_failslab+0xc0/0x11c [ 34.486904][ T4483] should_failslab+0x10/0x28 [ 34.487715][ T4483] slab_pre_alloc_hook+0x6c/0x31c [ 34.488588][ T4483] kmem_cache_alloc_lru+0x60/0x284 [ 34.489472][ T4483] shmem_alloc_inode+0x2c/0x48 [ 34.490279][ T4483] new_inode_pseudo+0x68/0x1cc [ 34.491117][ T4483] new_inode+0x38/0x174 [ 34.491857][ T4483] shmem_get_inode+0x2cc/0xa8c [ 34.492707][ T4483] __shmem_file_setup+0xf8/0x26c [ 34.493534][ T4483] shmem_file_setup+0x40/0x54 [ 34.494335][ T4483] __arm64_sys_memfd_create+0x2d8/0x458 [ 34.495308][ T4483] invoke_syscall+0x98/0x290 [ 34.496113][ T4483] el0_svc_common+0x13c/0x258 [ 34.496924][ T4483] do_el0_svc+0x5c/0x134 [ 34.497637][ T4483] el0_svc+0x58/0x12c [ 34.498319][ T4483] el0t_64_sync_handler+0x84/0xf0 [ 34.499235][ T4483] el0t_64_sync+0x18c/0x190 [ 34.818685][ T4483] FAULT_INJECTION: forcing a failure. [ 34.818685][ T4483] name failslab, interval 1, probability 5, space 0, times 9999 [ 34.821285][ T4483] CPU: 1 PID: 4483 Comm: syz.0.19 Not tainted syzkaller #0 [ 34.822423][ T4483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.824233][ T4483] Call trace: [ 34.824790][ T4483] dump_backtrace+0x1c4/0x1f0 [ 34.825610][ T4483] show_stack+0x2c/0x3c [ 34.826313][ T4483] __dump_stack+0x30/0x40 [ 34.827066][ T4483] dump_stack_lvl+0xf4/0x15c [ 34.827877][ T4483] dump_stack+0x1c/0x5c [ 34.828603][ T4483] should_fail_ex+0x3cc/0x524 [ 34.829437][ T4483] __should_failslab+0xc0/0x11c [ 34.830257][ T4483] should_failslab+0x10/0x28 [ 34.831041][ T4483] __kmem_cache_alloc_node+0x7c/0x318 [ 34.831936][ T4483] __kmalloc_node_track_caller+0xb8/0x174 [ 34.832914][ T4483] kvasprintf+0x12c/0x204 [ 34.833666][ T4483] kasprintf+0xe8/0x13c [ 34.834392][ T4483] alloc_workqueue+0x488/0xeec [ 34.835187][ T4483] nci_register_device+0x1f8/0x7e4 [ 34.836049][ T4483] virtual_ncidev_open+0x6c/0xd8 [ 34.836896][ T4483] misc_open+0x310/0x388 [ 34.837629][ T4483] chrdev_open+0x3d0/0x51c [ 34.838375][ T4483] do_dentry_open+0x738/0xf8c [ 34.839152][ T4483] vfs_open+0x7c/0x90 [ 34.839821][ T4483] path_openat+0x1fc0/0x27a0 [ 34.840606][ T4483] do_filp_open+0x198/0x38c [ 34.841361][ T4483] do_sys_openat2+0x134/0x3fc [ 34.842140][ T4483] __arm64_sys_openat+0x11c/0x150 [ 34.842993][ T4483] invoke_syscall+0x98/0x290 [ 34.843796][ T4483] el0_svc_common+0x13c/0x258 [ 34.844597][ T4483] do_el0_svc+0x5c/0x134 [ 34.845321][ T4483] el0_svc+0x58/0x12c [ 34.846003][ T4483] el0t_64_sync_handler+0x84/0xf0 [ 34.846843][ T4483] el0t_64_sync+0x18c/0x190 [ 34.877279][ T4483] FAULT_INJECTION: forcing a failure. [ 34.877279][ T4483] name failslab, interval 1, probability 5, space 0, times 9998 [ 34.879811][ T4483] CPU: 0 PID: 4483 Comm: syz.0.19 Not tainted syzkaller #0 [ 34.881044][ T4483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.882909][ T4483] Call trace: [ 34.883600][ T4483] dump_backtrace+0x1c4/0x1f0 [ 34.884579][ T4483] show_stack+0x2c/0x3c [ 34.885433][ T4483] __dump_stack+0x30/0x40 [ 34.886264][ T4483] dump_stack_lvl+0xf4/0x15c [ 34.887110][ T4483] dump_stack+0x1c/0x5c [ 34.887857][ T4483] should_fail_ex+0x3cc/0x524 [ 34.888707][ T4483] __should_failslab+0xc0/0x11c [ 34.889564][ T4483] should_failslab+0x10/0x28 [ 34.890375][ T4483] __kmem_cache_alloc_node+0x7c/0x318 [ 34.891305][ T4483] kmalloc_trace+0x48/0x94 [ 34.892090][ T4483] apply_wqattrs_prepare+0x180/0xb38 [ 34.893013][ T4483] apply_workqueue_attrs_locked+0xcc/0x270 [ 34.894012][ T4483] alloc_workqueue+0xa74/0xeec [ 34.894832][ T4483] nci_register_device+0x350/0x7e4 [ 34.895717][ T4483] virtual_ncidev_open+0x6c/0xd8 [ 34.896591][ T4483] misc_open+0x310/0x388 [ 34.897348][ T4483] chrdev_open+0x3d0/0x51c [ 34.898108][ T4483] do_dentry_open+0x738/0xf8c [ 34.898930][ T4483] vfs_open+0x7c/0x90 [ 34.899630][ T4483] path_openat+0x1fc0/0x27a0 [ 34.900424][ T4483] do_filp_open+0x198/0x38c [ 34.901205][ T4483] do_sys_openat2+0x134/0x3fc [ 34.901999][ T4483] __arm64_sys_openat+0x11c/0x150 [ 34.902892][ T4483] invoke_syscall+0x98/0x290 [ 34.903684][ T4483] el0_svc_common+0x13c/0x258 [ 34.904492][ T4483] do_el0_svc+0x5c/0x134 [ 34.905228][ T4483] el0_svc+0x58/0x12c [ 34.905944][ T4483] el0t_64_sync_handler+0x84/0xf0 [ 34.906805][ T4483] el0t_64_sync+0x18c/0x190 [ 34.928098][ T4488] loop1: detected capacity change from 0 to 32768 [ 34.938936][ T4488] (syz.1.18,4488,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "commit=p0000000613114240" or missing value [ 34.941613][ T4488] (syz.1.18,4488,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 34.953256][ T4481] FAULT_INJECTION: forcing a failure. [ 34.953256][ T4481] name failslab, interval 1, probability 5, space 0, times 9997 [ 34.955804][ T4481] CPU: 0 PID: 4481 Comm: syz.1.18 Not tainted syzkaller #0 [ 34.957072][ T4481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.958989][ T4481] Call trace: [ 34.959618][ T4481] dump_backtrace+0x1c4/0x1f0 [ 34.960484][ T4481] show_stack+0x2c/0x3c [ 34.961254][ T4481] __dump_stack+0x30/0x40 [ 34.962050][ T4481] dump_stack_lvl+0xf4/0x15c [ 34.962877][ T4481] dump_stack+0x1c/0x5c [ 34.963607][ T4481] should_fail_ex+0x3cc/0x524 [ 34.964430][ T4481] __should_failslab+0xc0/0x11c [ 34.965440][ T4481] should_failslab+0x10/0x28 [ 34.966355][ T4481] kmem_cache_alloc+0x88/0x310 [ 34.967293][ T4481] __alloc_file+0x30/0x234 [ 34.968150][ T4481] alloc_empty_file+0xa0/0x184 [ 34.969067][ T4481] path_openat+0xe0/0x27a0 [ 34.969926][ T4481] do_filp_open+0x198/0x38c [ 34.970777][ T4481] do_sys_openat2+0x134/0x3fc [ 34.971651][ T4481] __arm64_sys_openat+0x11c/0x150 [ 34.972567][ T4481] invoke_syscall+0x98/0x290 [ 34.973381][ T4481] el0_svc_common+0x13c/0x258 [ 34.974213][ T4481] do_el0_svc+0x5c/0x134 [ 34.974985][ T4481] el0_svc+0x58/0x12c [ 34.975717][ T4481] el0t_64_sync_handler+0x84/0xf0 [ 34.976644][ T4481] el0t_64_sync+0x18c/0x190 [ 35.513444][ T4508] loop0: detected capacity change from 0 to 1024 [ 35.554093][ T4320] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 35.575533][ T4508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 35.651268][ T4504] loop3: detected capacity change from 0 to 40427 [ 35.660359][ T4504] F2FS-fs (loop3): Invalid log_blocksize (64), supports only 12 [ 35.664280][ T4504] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 36.207115][ T4516] loop3: detected capacity change from 0 to 32768 [ 36.231854][ T4516] JBD2: Ignoring recovery information on journal [ 36.255666][ T4516] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 36.342495][ T4344] Bluetooth: hci3: command 0x040f tx timeout [ 36.344560][ T4337] Bluetooth: hci1: command 0x040f tx timeout [ 36.344574][ T4334] Bluetooth: hci2: command 0x040f tx timeout [ 36.345804][ T4337] Bluetooth: hci0: command 0x040f tx timeout [ 36.453087][ T4337] Bluetooth: hci4: command 0x040f tx timeout [ 36.481656][ T4527] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 36.483827][ C1] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 36.488109][ T4529] loop4: detected capacity change from 0 to 128 [ 36.820701][ T4529] FAULT_INJECTION: forcing a failure. [ 36.820701][ T4529] name failslab, interval 1, probability 5, space 0, times 10000 [ 36.823709][ T4529] CPU: 0 PID: 4529 Comm: syz.4.32 Not tainted syzkaller #0 [ 36.825013][ T4529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.826913][ T4529] Call trace: [ 36.827489][ T4529] dump_backtrace+0x1c4/0x1f0 [ 36.828328][ T4529] show_stack+0x2c/0x3c [ 36.829054][ T4529] __dump_stack+0x30/0x40 [ 36.829876][ T4529] dump_stack_lvl+0xf4/0x15c [ 36.830661][ T4529] dump_stack+0x1c/0x5c [ 36.831385][ T4529] should_fail_ex+0x3cc/0x524 [ 36.832187][ T4529] __should_failslab+0xc0/0x11c [ 36.833095][ T4529] should_failslab+0x10/0x28 [ 36.833896][ T4529] slab_pre_alloc_hook+0x6c/0x31c [ 36.834797][ T4529] kmem_cache_alloc_lru+0x60/0x284 [ 36.835752][ T4529] __d_alloc+0x40/0x68c [ 36.836518][ T4529] d_alloc+0x54/0x208 [ 36.837219][ T4529] lookup_one_qstr_excl+0xbc/0x230 [ 36.838123][ T4529] filename_create+0x1d0/0x3a8 [ 36.838947][ T4529] do_mkdirat+0xac/0x3ec [ 36.839684][ T4529] __arm64_sys_mkdirat+0x90/0xa8 [ 36.840564][ T4529] invoke_syscall+0x98/0x290 [ 36.841360][ T4529] el0_svc_common+0x13c/0x258 [ 36.842172][ T4529] do_el0_svc+0x5c/0x134 [ 36.842918][ T4529] el0_svc+0x58/0x12c [ 36.843607][ T4529] el0t_64_sync_handler+0x84/0xf0 [ 36.844469][ T4529] el0t_64_sync+0x18c/0x190 [ 36.849279][ T4529] FAULT_INJECTION: forcing a failure. [ 36.849279][ T4529] name failslab, interval 1, probability 5, space 0, times 9999 [ 36.851601][ T4529] CPU: 0 PID: 4529 Comm: syz.4.32 Not tainted syzkaller #0 [ 36.853032][ T4529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.855055][ T4529] Call trace: [ 36.855637][ T4529] dump_backtrace+0x1c4/0x1f0 [ 36.856472][ T4529] show_stack+0x2c/0x3c [ 36.857236][ T4529] __dump_stack+0x30/0x40 [ 36.857997][ T4529] dump_stack_lvl+0xf4/0x15c [ 36.858826][ T4529] dump_stack+0x1c/0x5c [ 36.859590][ T4529] should_fail_ex+0x3cc/0x524 [ 36.860380][ T4529] __should_failslab+0xc0/0x11c [ 36.861218][ T4529] should_failslab+0x10/0x28 [ 36.862011][ T4529] __kmem_cache_alloc_node+0x7c/0x318 [ 36.862957][ T4529] __kmalloc+0xc4/0x180 [ 36.863697][ T4529] tomoyo_realpath_from_path+0xc4/0x508 [ 36.864639][ T4529] tomoyo_mount_permission+0x38c/0x798 [ 36.865587][ T4529] tomoyo_sb_mount+0x48/0x60 [ 36.866417][ T4529] security_sb_mount+0x94/0xd4 [ 36.867264][ T4529] path_mount+0xb8/0xe6c [ 36.868000][ T4529] __arm64_sys_mount+0x4a0/0x5a0 [ 36.868850][ T4529] invoke_syscall+0x98/0x290 [ 36.869680][ T4529] el0_svc_common+0x13c/0x258 [ 36.870491][ T4529] do_el0_svc+0x5c/0x134 [ 36.871229][ T4529] el0_svc+0x58/0x12c [ 36.871954][ T4529] el0t_64_sync_handler+0x84/0xf0 [ 36.872853][ T4529] el0t_64_sync+0x18c/0x190 [ 36.895497][ T4529] ERROR: Out of memory at tomoyo_realpath_from_path. [ 36.901591][ T4529] FAULT_INJECTION: forcing a failure. [ 36.901591][ T4529] name failslab, interval 1, probability 5, space 0, times 9998 [ 36.908287][ T4529] CPU: 1 PID: 4529 Comm: syz.4.32 Not tainted syzkaller #0 [ 36.909702][ T4529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.911509][ T4529] Call trace: [ 36.912105][ T4529] dump_backtrace+0x1c4/0x1f0 [ 36.912936][ T4529] show_stack+0x2c/0x3c [ 36.913670][ T4529] __dump_stack+0x30/0x40 [ 36.914413][ T4529] dump_stack_lvl+0xf4/0x15c [ 36.915190][ T4529] dump_stack+0x1c/0x5c [ 36.915894][ T4529] should_fail_ex+0x3cc/0x524 [ 36.916672][ T4529] __should_failslab+0xc0/0x11c [ 36.917506][ T4529] should_failslab+0x10/0x28 [ 36.918271][ T4529] kmem_cache_alloc+0x88/0x310 [ 36.919065][ T4529] getname_flags+0xb8/0x458 [ 36.919839][ T4529] user_path_at_empty+0x40/0x84 [ 36.920665][ T4529] __arm64_sys_chdir+0xb8/0x278 [ 36.921508][ T4529] invoke_syscall+0x98/0x290 [ 36.922272][ T4529] el0_svc_common+0x13c/0x258 [ 36.923040][ T4529] do_el0_svc+0x5c/0x134 [ 36.923742][ T4529] el0_svc+0x58/0x12c [ 36.924430][ T4529] el0t_64_sync_handler+0x84/0xf0 [ 36.925302][ T4529] el0t_64_sync+0x18c/0x190 [ 36.928949][ T4529] FAULT_INJECTION: forcing a failure. [ 36.928949][ T4529] name failslab, interval 1, probability 5, space 0, times 9997 [ 36.931557][ T4529] CPU: 0 PID: 4529 Comm: syz.4.32 Not tainted syzkaller #0 [ 36.932886][ T4529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.934769][ T4529] Call trace: [ 36.935397][ T4529] dump_backtrace+0x1c4/0x1f0 [ 36.936312][ T4529] show_stack+0x2c/0x3c [ 36.937121][ T4529] __dump_stack+0x30/0x40 [ 36.937938][ T4529] dump_stack_lvl+0xf4/0x15c [ 36.938771][ T4529] dump_stack+0x1c/0x5c [ 36.939564][ T4529] should_fail_ex+0x3cc/0x524 [ 36.940405][ T4529] __should_failslab+0xc0/0x11c [ 36.941289][ T4529] should_failslab+0x10/0x28 [ 36.942156][ T4529] kmem_cache_alloc+0x88/0x310 [ 36.943001][ T4529] __alloc_file+0x30/0x234 [ 36.943806][ T4529] alloc_empty_file+0xa0/0x184 [ 36.944662][ T4529] path_openat+0xe0/0x27a0 [ 36.945534][ T4529] do_filp_open+0x198/0x38c [ 36.946090][ T4524] OCFS2: ERROR (device loop3): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 9 used bits, but a count shows 8 [ 36.946356][ T4529] do_sys_openat2+0x134/0x3fc [ 36.950041][ T4524] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 36.950498][ T4529] __arm64_sys_openat+0x11c/0x150 [ 36.952308][ T4524] OCFS2: File system is now read-only. [ 36.952987][ T4529] invoke_syscall+0x98/0x290 [ 36.954072][ T4524] (syz.3.28,4524,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 36.954719][ T4529] el0_svc_common+0x13c/0x258 [ 36.956406][ T4524] (syz.3.28,4524,1):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 36.957074][ T4529] do_el0_svc+0x5c/0x134 [ 36.958961][ T4524] (syz.3.28,4524,1):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 36.959572][ T4529] el0_svc+0x58/0x12c [ 36.961321][ T4524] (syz.3.28,4524,1):ocfs2_lock_allocators:2704 ERROR: status = -30 [ 36.961763][ T4529] el0t_64_sync_handler+0x84/0xf0 [ 36.963571][ T4524] (syz.3.28,4524,1):ocfs2_write_begin_nolock:1746 ERROR: status = -30 [ 36.964080][ T4529] el0t_64_sync+0x18c/0x190 [ 36.965681][ T4524] (syz.3.28,4524,1):ocfs2_write_begin:1909 ERROR: status = -30 [ 36.974387][ T4529] FAULT_INJECTION: forcing a failure. [ 36.974387][ T4529] name failslab, interval 1, probability 5, space 0, times 9996 [ 36.976888][ T4529] CPU: 0 PID: 4529 Comm: syz.4.32 Not tainted syzkaller #0 [ 36.978184][ T4529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.980241][ T4529] Call trace: [ 36.980892][ T4529] dump_backtrace+0x1c4/0x1f0 [ 36.981816][ T4529] show_stack+0x2c/0x3c [ 36.982631][ T4529] __dump_stack+0x30/0x40 [ 36.983473][ T4529] dump_stack_lvl+0xf4/0x15c [ 36.984351][ T4529] dump_stack+0x1c/0x5c [ 36.985141][ T4529] should_fail_ex+0x3cc/0x524 [ 36.985972][ T4529] __should_failslab+0xc0/0x11c [ 36.986848][ T4529] should_failslab+0x10/0x28 [ 36.987664][ T4529] kmem_cache_alloc+0x88/0x310 [ 36.988616][ T4529] getname_flags+0xb8/0x458 [ 36.989418][ T4529] getname+0x28/0x38 [ 36.990118][ T4529] do_sys_openat2+0xdc/0x3fc [ 36.990944][ T4529] __arm64_sys_openat+0x11c/0x150 [ 36.991835][ T4529] invoke_syscall+0x98/0x290 [ 36.992627][ T4529] el0_svc_common+0x13c/0x258 [ 36.993470][ T4529] do_el0_svc+0x5c/0x134 [ 36.994249][ T4529] el0_svc+0x58/0x12c [ 36.994960][ T4529] el0t_64_sync_handler+0x84/0xf0 [ 36.995828][ T4529] el0t_64_sync+0x18c/0x190 [ 37.333965][ T4329] ocfs2: Unmounting device (7,3) on (node local) [ 37.410109][ T4536] loop4: detected capacity change from 0 to 32768 [ 37.417993][ T4536] (syz.4.32,4536,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "commit=p0000000613114240" or missing value [ 37.420397][ T4536] (syz.4.32,4536,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 37.436150][ T4529] FAULT_INJECTION: forcing a failure. [ 37.436150][ T4529] name failslab, interval 1, probability 5, space 0, times 9995 [ 37.438445][ T4529] CPU: 0 PID: 4529 Comm: syz.4.32 Not tainted syzkaller #0 [ 37.439647][ T4529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 37.441404][ T4529] Call trace: [ 37.442073][ T4529] dump_backtrace+0x1c4/0x1f0 [ 37.443015][ T4529] show_stack+0x2c/0x3c [ 37.443737][ T4529] __dump_stack+0x30/0x40 [ 37.444484][ T4529] dump_stack_lvl+0xf4/0x15c [ 37.445307][ T4529] dump_stack+0x1c/0x5c [ 37.446038][ T4529] should_fail_ex+0x3cc/0x524 [ 37.446866][ T4529] __should_failslab+0xc0/0x11c [ 37.447731][ T4529] should_failslab+0x10/0x28 [ 37.448547][ T4529] kmem_cache_alloc+0x88/0x310 [ 37.449386][ T4529] __kernfs_new_node+0xec/0x5fc [ 37.450237][ T4529] kernfs_new_node+0x120/0x230 [ 37.451091][ T4529] __kernfs_create_file+0x60/0x2e0 [ 37.452022][ T4529] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 37.452989][ T4529] sysfs_merge_group+0x164/0x2ac [ 37.453857][ T4529] dpm_sysfs_add+0xc8/0x26c [ 37.453981][ T4548] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 37.454621][ T4529] device_add+0x678/0xe4c [ 37.456122][ C1] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 37.456581][ T4529] nfc_register_device+0x64/0x300 [ 37.458753][ T4529] nci_register_device+0x6b8/0x7e4 [ 37.459657][ T4529] virtual_ncidev_open+0x6c/0xd8 [ 37.460621][ T4529] misc_open+0x310/0x388 [ 37.461461][ T4529] chrdev_open+0x3d0/0x51c [ 37.462336][ T4529] do_dentry_open+0x738/0xf8c [ 37.463314][ T4529] vfs_open+0x7c/0x90 [ 37.464108][ T4529] path_openat+0x1fc0/0x27a0 [ 37.465041][ T4529] do_filp_open+0x198/0x38c [ 37.465960][ T4529] do_sys_openat2+0x134/0x3fc [ 37.466903][ T4529] __arm64_sys_openat+0x11c/0x150 [ 37.467957][ T4529] invoke_syscall+0x98/0x290 [ 37.468861][ T4529] el0_svc_common+0x13c/0x258 [ 37.469857][ T4529] do_el0_svc+0x5c/0x134 [ 37.470715][ T4529] el0_svc+0x58/0x12c [ 37.471450][ T4529] el0t_64_sync_handler+0x84/0xf0 [ 37.472455][ T4529] el0t_64_sync+0x18c/0x190 [ 37.927140][ T4554] loop3: detected capacity change from 0 to 4096 [ 37.930695][ T4554] ntfs3: Unknown parameter 'ÿÿÿÿ' [ 38.428680][ T4344] Bluetooth: hci2: command 0x0419 tx timeout [ 38.430496][ T4344] Bluetooth: hci1: command 0x0419 tx timeout [ 38.434009][ T4344] Bluetooth: hci0: command 0x0419 tx timeout [ 38.436650][ T4344] Bluetooth: hci3: command 0x0419 tx timeout [ 38.493201][ T4337] Bluetooth: hci4: command 0x0419 tx timeout [ 38.695880][ T4564] loop4: detected capacity change from 0 to 32768 [ 38.778092][ T4564] JBD2: Ignoring recovery information on journal [ 39.102289][ T4565] loop0: p1 p2 < > p3 p4 < > [ 39.104413][ T4565] loop0: partition table partially beyond EOD, truncated [ 39.105991][ T4565] loop0: p1 size 1342439424 extends beyond EOD, truncated [ 39.109765][ T4565] loop0: p2 start 16384 is beyond EOD, truncated [ 39.111033][ T4565] loop0: p3 start 67108864 is beyond EOD, truncated [ 39.112415][ T4565] loop0: p4 start 150995968 is beyond EOD, truncated [ 39.118011][ T4564] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 39.166709][ T4564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.41'. [ 39.168933][ T4564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.41'. [ 39.170935][ T4564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.41'. [ 39.239713][ T4340] ocfs2: Unmounting device (7,4) on (node local) [ 39.247463][ T4586] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 39.249374][ C1] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 39.251226][ T4586] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 39.253524][ C1] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 39.739664][ T4593] set_capacity_and_notify: 1 callbacks suppressed [ 39.739673][ T4593] loop0: detected capacity change from 0 to 4096 [ 39.746207][ T4320] udevd[4320]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 39.756474][ T4593] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 39.758056][ T4593] ntfs3: loop0: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only [ 39.856996][ T4593] ntfs3: loop0: Inode r=0 is not in use! [ 39.861417][ T4593] ntfs3: loop0: Failed to load $MFT. [ 40.294215][ T4624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 40.431335][ T4406] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.664577][ T4638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.668808][ T4638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.787668][ T4644] nvmet: adding nsid 1 to subsystem testsubsys [ 40.821888][ T4611] loop4: detected capacity change from 0 to 131072 [ 40.827688][ T4611] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 40.829528][ T4611] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 40.847054][ T4611] F2FS-fs (loop4): invalid crc value [ 40.868556][ T4611] F2FS-fs (loop4): Found nat_bits in checkpoint [ 40.890330][ T4655] binder: 4652:4655 tried to acquire reference to desc 0, got 1 instead [ 40.894355][ T4654] tipc: Started in network mode [ 40.895165][ T4654] tipc: Node identity 4, cluster identity 4711 [ 40.895844][ T4655] binder: 4652:4655 got transaction with invalid offsets ptr [ 40.896170][ T4654] tipc: Node number set to 4 [ 40.897493][ T4655] binder: 4652:4655 transaction call to 4652:0 failed 10/29201/-22, size 120-24 line 3593 [ 40.898278][ T4611] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 40.901191][ T4611] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 40.910472][ T3901] binder: undelivered TRANSACTION_ERROR: 29201 [ 40.959112][ T4660] Bluetooth: MGMT ver 1.22 [ 41.089473][ T4340] F2FS-fs (loop4): inconsistent node block, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361] [ 41.161645][ T4675] netlink: 536 bytes leftover after parsing attributes in process `syz.1.73'. [ 41.163448][ T4675] netlink: 32 bytes leftover after parsing attributes in process `syz.1.73'. [ 41.227098][ T4681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.229320][ T4681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.408104][ T4700] FAULT_INJECTION: forcing a failure. [ 41.408104][ T4700] name failslab, interval 1, probability 5, space 0, times 9994 [ 41.416938][ T4700] CPU: 1 PID: 4700 Comm: syz.2.83 Not tainted syzkaller #0 [ 41.418081][ T4700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 41.419690][ T4700] Call trace: [ 41.420186][ T4700] dump_backtrace+0x1c4/0x1f0 [ 41.420958][ T4700] show_stack+0x2c/0x3c [ 41.421724][ T4700] __dump_stack+0x30/0x40 [ 41.422518][ T4700] dump_stack_lvl+0xf4/0x15c [ 41.423350][ T4700] dump_stack+0x1c/0x5c [ 41.424102][ T4700] should_fail_ex+0x3cc/0x524 [ 41.424944][ T4700] __should_failslab+0xc0/0x11c [ 41.425824][ T4700] should_failslab+0x10/0x28 [ 41.426628][ T4700] __kmem_cache_alloc_node+0x7c/0x318 [ 41.427587][ T4700] __kmalloc+0xc4/0x180 [ 41.428349][ T4700] genl_family_rcv_msg_attrs_parse+0xac/0x240 [ 41.429411][ T4700] genl_family_rcv_msg_doit+0xf8/0x308 [ 41.430361][ T4700] genl_rcv_msg+0x424/0x600 [ 41.431161][ T4700] netlink_rcv_skb+0x220/0x3ec [ 41.432005][ T4700] genl_rcv+0x38/0x50 [ 41.432684][ T4700] netlink_unicast+0x5fc/0x80c [ 41.433504][ T4700] netlink_sendmsg+0x6f0/0x9d8 [ 41.434335][ T4700] __sys_sendto+0x324/0x440 [ 41.435128][ T4700] __arm64_sys_sendto+0xe4/0x104 [ 41.435994][ T4700] invoke_syscall+0x98/0x290 [ 41.436791][ T4700] el0_svc_common+0x13c/0x258 [ 41.437637][ T4700] do_el0_svc+0x5c/0x134 [ 41.438415][ T4700] el0_svc+0x58/0x12c [ 41.439128][ T4700] el0t_64_sync_handler+0x84/0xf0 [ 41.440024][ T4700] el0t_64_sync+0x18c/0x190 [ 41.489435][ T3901] binder: undelivered death notification, 0000000000000000 [ 41.754668][ T4406] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 41.853517][ T4749] netlink: 'syz.3.105': attribute type 83 has an invalid length. [ 41.872860][ T4344] Bluetooth: hci3: Invalid handle: 0x84c1 > 0x0eff [ 41.901037][ T4756] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 41.902940][ C0] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 41.904160][ T4756] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 41.905276][ C0] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 41.932340][ T4406] usb 1-1: Using ep0 maxpacket: 16 [ 41.936061][ T4406] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.937914][ T4406] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.939598][ T4406] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.941175][ T4406] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 41.945745][ T4406] usb 1-1: config 0 interface 0 has no altsetting 0 [ 41.951268][ T4406] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 41.957257][ T4406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.964997][ T4406] usb 1-1: config 0 descriptor?? [ 42.032725][ T4760] device syzkaller0 entered promiscuous mode [ 42.222095][ T4767] binder: 4766:4767 tried to acquire reference to desc 0, got 1 instead [ 42.233160][ T4767] binder: 4766:4767 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 42.235387][ T4767] binder: 4767 RLIMIT_NICE not set [ 42.236242][ T4767] binder: 4767 RLIMIT_NICE not set [ 42.237265][ T4767] binder: 4767 RLIMIT_NICE not set [ 42.238126][ T4767] binder: 4766:4767 got reply with fd, 3, but target does not allow fds [ 42.239461][ T4767] binder: 4767:4766 translate fd failed [ 42.240401][ T4767] binder: 4766:4767 transaction reply to 4766:4767 failed 18/29201/-1, size 96-24 line 3432 [ 42.242079][ T4767] binder: send failed reply for transaction 17 to 4766:4767 [ 42.261334][ T4771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.112'. [ 42.274608][ T4403] binder: undelivered TRANSACTION_COMPLETE [ 42.275698][ T4403] binder: undelivered TRANSACTION_ERROR: 29201 [ 42.276831][ T4403] binder: undelivered TRANSACTION_ERROR: 29190 [ 42.298284][ T4774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'. [ 42.307569][ T4774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.114'. [ 42.311821][ T4774] device bridge1 entered promiscuous mode [ 42.334178][ T4725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.336289][ T4725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.354937][ T4775] tipc: Enabled bearer , priority 0 [ 42.356779][ T4775] device syzkaller0 entered promiscuous mode [ 42.361703][ T4775] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 42.379765][ T4406] logitech-djreceiver 0003:046D:C53A.0001: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.0-1/input0 [ 42.454892][ T4775] tipc: Resetting bearer [ 42.458954][ T4773] tipc: Resetting bearer [ 42.535622][ T4773] tipc: Disabling bearer [ 42.541092][ T4789] device syzkaller0 entered promiscuous mode [ 42.661880][ T4799] Zero length message leads to an empty skb [ 42.798141][ T4807] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 42.827550][ T4812] jffs2: notice: (4812) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 42.887075][ T4821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.888632][ T4821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.937403][ T4825] rxe_eth0 speed is unknown, defaulting to 1000 [ 43.006233][ T4836] jffs2: notice: (4836) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 43.055861][ T4842] netlink: 20 bytes leftover after parsing attributes in process `syz.1.143'. [ 43.057469][ T4842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'. [ 43.061506][ T4842] FAULT_INJECTION: forcing a failure. [ 43.061506][ T4842] name failslab, interval 1, probability 5, space 0, times 9993 [ 43.064442][ T4842] CPU: 1 PID: 4842 Comm: syz.1.143 Not tainted syzkaller #0 [ 43.065860][ T4842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 43.067769][ T4842] Call trace: [ 43.068466][ T4842] dump_backtrace+0x1c4/0x1f0 [ 43.069462][ T4842] show_stack+0x2c/0x3c [ 43.070338][ T4842] __dump_stack+0x30/0x40 [ 43.071188][ T4842] dump_stack_lvl+0xf4/0x15c [ 43.072154][ T4842] dump_stack+0x1c/0x5c [ 43.072957][ T4842] should_fail_ex+0x3cc/0x524 [ 43.073845][ T4842] __should_failslab+0xc0/0x11c [ 43.074744][ T4842] should_failslab+0x10/0x28 [ 43.075612][ T4842] __kmem_cache_alloc_node+0x7c/0x318 [ 43.076621][ T4842] __kmalloc+0xc4/0x180 [ 43.077368][ T4842] __register_sysctl_table+0x844/0xc88 [ 43.078342][ T4842] register_net_sysctl+0x31c/0x364 [ 43.079281][ T4842] neigh_sysctl_register+0x8e0/0x9bc [ 43.080243][ T4842] addrconf_sysctl_register+0xb4/0x194 [ 43.081260][ T4842] ipv6_add_dev+0xa08/0xeec [ 43.082113][ T4842] addrconf_notify+0x504/0xc98 [ 43.082967][ T4842] raw_notifier_call_chain+0xd8/0x168 [ 43.083923][ T4842] call_netdevice_notifiers+0x110/0x198 [ 43.084915][ T4842] register_netdevice+0x11c4/0x1650 [ 43.085832][ T4842] batadv_softif_newlink+0x90/0xa0 [ 43.086710][ T4842] rtnl_newlink+0x10b4/0x1af0 [ 43.087561][ T4842] rtnetlink_rcv_msg+0x694/0xcc4 [ 43.088448][ T4842] netlink_rcv_skb+0x220/0x3ec [ 43.089312][ T4842] rtnetlink_rcv+0x28/0x38 [ 43.090083][ T4842] netlink_unicast+0x5fc/0x80c [ 43.090904][ T4842] netlink_sendmsg+0x6f0/0x9d8 [ 43.091751][ T4842] ____sys_sendmsg+0x588/0x90c [ 43.092595][ T4842] __sys_sendmsg+0x288/0x374 [ 43.093427][ T4842] __arm64_sys_sendmsg+0x80/0x94 [ 43.094286][ T4842] invoke_syscall+0x98/0x290 [ 43.095101][ T4842] el0_svc_common+0x13c/0x258 [ 43.095944][ T4842] do_el0_svc+0x5c/0x134 [ 43.096699][ T4842] el0_svc+0x58/0x12c [ 43.097384][ T4842] el0t_64_sync_handler+0x84/0xf0 [ 43.098230][ T4842] el0t_64_sync+0x18c/0x190 [ 43.105966][ T4842] sysctl could not get directory: /net/ipv6/neigh/batadv1 -12 [ 43.108771][ T4842] CPU: 0 PID: 4842 Comm: syz.1.143 Not tainted syzkaller #0 [ 43.109880][ T4842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 43.111451][ T4842] Call trace: [ 43.111976][ T4842] dump_backtrace+0x1c4/0x1f0 [ 43.112759][ T4842] show_stack+0x2c/0x3c [ 43.113458][ T4842] __dump_stack+0x30/0x40 [ 43.114194][ T4842] dump_stack_lvl+0xf4/0x15c [ 43.114983][ T4842] dump_stack+0x1c/0x5c [ 43.115704][ T4842] __register_sysctl_table+0xc10/0xc88 [ 43.116632][ T4842] register_net_sysctl+0x31c/0x364 [ 43.117497][ T4842] neigh_sysctl_register+0x8e0/0x9bc [ 43.118393][ T4842] addrconf_sysctl_register+0xb4/0x194 [ 43.119318][ T4842] ipv6_add_dev+0xa08/0xeec [ 43.120093][ T4842] addrconf_notify+0x504/0xc98 [ 43.120890][ T4842] raw_notifier_call_chain+0xd8/0x168 [ 43.121801][ T4842] call_netdevice_notifiers+0x110/0x198 [ 43.122785][ T4842] register_netdevice+0x11c4/0x1650 [ 43.123708][ T4842] batadv_softif_newlink+0x90/0xa0 [ 43.124609][ T4842] rtnl_newlink+0x10b4/0x1af0 [ 43.125441][ T4842] rtnetlink_rcv_msg+0x694/0xcc4 [ 43.126305][ T4842] netlink_rcv_skb+0x220/0x3ec [ 43.127159][ T4842] rtnetlink_rcv+0x28/0x38 [ 43.127945][ T4842] netlink_unicast+0x5fc/0x80c [ 43.128770][ T4842] netlink_sendmsg+0x6f0/0x9d8 [ 43.129586][ T4842] ____sys_sendmsg+0x588/0x90c [ 43.130401][ T4842] __sys_sendmsg+0x288/0x374 [ 43.131205][ T4842] __arm64_sys_sendmsg+0x80/0x94 [ 43.132076][ T4842] invoke_syscall+0x98/0x290 [ 43.132885][ T4842] el0_svc_common+0x13c/0x258 [ 43.133694][ T4842] do_el0_svc+0x5c/0x134 [ 43.134434][ T4842] el0_svc+0x58/0x12c [ 43.135127][ T4842] el0t_64_sync_handler+0x84/0xf0 [ 43.135991][ T4842] el0t_64_sync+0x18c/0x190 [ 43.483445][ T4867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.486174][ T4867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.487891][ T4869] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 43.489355][ T4869] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 43.492113][ T4869] vhci_hcd vhci_hcd.0: Device attached [ 43.496290][ T4870] vhci_hcd: unknown pdu 2 [ 43.501014][ T4537] vhci_hcd: stop threads [ 43.502409][ T4537] vhci_hcd: release socket [ 43.503536][ T4537] vhci_hcd: disconnect device [ 43.503546][ T4455] usb 1-1: USB disconnect, device number 2 [ 43.712384][ T4867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.713877][ T4867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.037485][ T4877] batman_adv: batadv0: Adding interface: dummy0 [ 44.038591][ T4877] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.053623][ T4877] batman_adv: batadv0: Interface activated: dummy0 [ 44.057305][ T4886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.058916][ T4886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.159587][ T4896] FAULT_INJECTION: forcing a failure. [ 44.159587][ T4896] name failslab, interval 1, probability 5, space 0, times 9992 [ 44.162153][ T4896] CPU: 1 PID: 4896 Comm: syz.0.167 Not tainted syzkaller #0 [ 44.163610][ T4896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 44.165553][ T4896] Call trace: [ 44.166190][ T4896] dump_backtrace+0x1c4/0x1f0 [ 44.167103][ T4896] show_stack+0x2c/0x3c [ 44.167893][ T4896] __dump_stack+0x30/0x40 [ 44.168694][ T4896] dump_stack_lvl+0xf4/0x15c [ 44.169557][ T4896] dump_stack+0x1c/0x5c [ 44.170334][ T4896] should_fail_ex+0x3cc/0x524 [ 44.171338][ T4896] __should_failslab+0xc0/0x11c [ 44.172303][ T4896] should_failslab+0x10/0x28 [ 44.173219][ T4896] __kmem_cache_alloc_node+0x7c/0x318 [ 44.174274][ T4896] __kmalloc_node+0xc8/0x184 [ 44.175192][ T4896] kvmalloc_node+0x88/0x1d4 [ 44.176053][ T4896] alloc_fdtable+0x154/0x28c [ 44.176952][ T4896] dup_fd+0x6b8/0x96c [ 44.177720][ T4896] ksys_unshare+0x378/0x70c [ 44.178522][ T4896] __arm64_sys_unshare+0x3c/0x50 [ 44.179419][ T4896] invoke_syscall+0x98/0x290 [ 44.180257][ T4896] el0_svc_common+0x13c/0x258 [ 44.181124][ T4896] do_el0_svc+0x5c/0x134 [ 44.181915][ T4896] el0_svc+0x58/0x12c [ 44.182648][ T4896] el0t_64_sync_handler+0x84/0xf0 [ 44.183543][ T4896] el0t_64_sync+0x18c/0x190 [ 44.186696][ T4897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.188271][ T4897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.255996][ T4903] 0: reclassify loop, rule prio 0, protocol 03 [ 44.337456][ T4911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.174'. [ 44.480784][ T4923] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 44.624608][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 44.638289][ T4931] syz.3.182 uses obsolete (PF_INET,SOCK_PACKET) [ 44.803965][ T22] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 44.806015][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 44.808252][ T22] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.812654][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.820528][ T22] usb 1-1: config 0 descriptor?? [ 44.828146][ T22] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 44.892721][ T4949] jffs2: notice: (4949) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 44.962265][ T4956] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 44.987155][ T4963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.988829][ T4963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.006601][ T4965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.008192][ T4965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.229781][ T4969] qrtr: Invalid version 0 [ 45.247207][ T4971] netlink: 16 bytes leftover after parsing attributes in process `syz.4.199'. [ 45.312597][ T4927] FAULT_INJECTION: forcing a failure. [ 45.312597][ T4927] name failslab, interval 1, probability 5, space 0, times 9991 [ 45.314803][ T4927] CPU: 0 PID: 4927 Comm: syz.1.179 Not tainted syzkaller #0 [ 45.316014][ T4927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 45.317762][ T4927] Call trace: [ 45.318367][ T4927] dump_backtrace+0x1c4/0x1f0 [ 45.319229][ T4927] show_stack+0x2c/0x3c [ 45.319991][ T4927] __dump_stack+0x30/0x40 [ 45.320782][ T4927] dump_stack_lvl+0xf4/0x15c [ 45.321605][ T4927] dump_stack+0x1c/0x5c [ 45.322343][ T4927] should_fail_ex+0x3cc/0x524 [ 45.323178][ T4927] __should_failslab+0xc0/0x11c [ 45.324190][ T4927] should_failslab+0x10/0x28 [ 45.325059][ T4927] kmem_cache_alloc+0x88/0x310 [ 45.326048][ T4927] taskstats_exit+0x360/0xa30 [ 45.326945][ T4927] do_exit+0x4c4/0x19ac [ 45.327718][ T4927] do_group_exit+0x198/0x238 [ 45.328617][ T4927] get_signal+0x11f4/0x133c [ 45.329477][ T4927] do_notify_resume+0x364/0x2c84 [ 45.330410][ T4927] el0_svc+0x9c/0x12c [ 45.331197][ T4927] el0t_64_sync_handler+0x84/0xf0 [ 45.332133][ T4927] el0t_64_sync+0x18c/0x190 [ 45.332976][ C0] vkms_vblank_simulate: vblank timer overrun [ 45.355207][ T4977] FAULT_INJECTION: forcing a failure. [ 45.355207][ T4977] name failslab, interval 1, probability 5, space 0, times 9990 [ 45.356157][ T4979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.358288][ T4977] CPU: 1 PID: 4977 Comm: syz.4.202 Not tainted syzkaller #0 [ 45.359564][ T4979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.360180][ T4977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 45.363491][ T4977] Call trace: [ 45.364140][ T4977] dump_backtrace+0x1c4/0x1f0 [ 45.365060][ T4977] show_stack+0x2c/0x3c [ 45.365880][ T4977] __dump_stack+0x30/0x40 [ 45.366716][ T4977] dump_stack_lvl+0xf4/0x15c [ 45.367613][ T4977] dump_stack+0x1c/0x5c [ 45.368424][ T4977] should_fail_ex+0x3cc/0x524 [ 45.369337][ T4977] __should_failslab+0xc0/0x11c [ 45.370274][ T4977] should_failslab+0x10/0x28 [ 45.371158][ T4977] slab_pre_alloc_hook+0x6c/0x31c [ 45.372077][ T4977] kmem_cache_alloc_lru+0x60/0x284 [ 45.372990][ T4977] xas_split_alloc+0x180/0x3b8 [ 45.373828][ T4977] split_huge_page_to_list+0x80c/0x345c [ 45.374805][ T4977] shrink_folio_list+0x1534/0x4528 [ 45.375744][ T4977] reclaim_pages+0x580/0x7a4 [ 45.376548][ T4977] madvise_cold_or_pageout_pte_range+0x11c0/0x1890 [ 45.377670][ T4977] walk_pgd_range+0x800/0xfcc [ 45.378478][ T4977] __walk_page_range+0x120/0x54c [ 45.379331][ T4977] walk_page_range+0x314/0x4ac [ 45.380179][ T4977] do_madvise+0x1a6c/0x2b24 [ 45.381004][ T4977] __arm64_sys_madvise+0xa4/0xc0 [ 45.381992][ T4977] invoke_syscall+0x98/0x290 [ 45.382864][ T4977] el0_svc_common+0x200/0x258 [ 45.383741][ T4977] do_el0_svc+0x5c/0x134 [ 45.384636][ T4977] el0_svc+0x58/0x12c [ 45.385489][ T4977] el0t_64_sync_handler+0x84/0xf0 [ 45.386476][ T4977] el0t_64_sync+0x18c/0x190 [ 45.515666][ T4986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.518161][ T4986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.547259][ T4990] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 45.629983][ T5004] netlink: 80 bytes leftover after parsing attributes in process `syz.3.215'. [ 45.707605][ T5014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.716330][ T5014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.864792][ T5031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.866358][ T5031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.240066][ T5048] 9pnet_virtio: no channels available for device syz [ 46.331580][ T5059] dlm: Unknown command passed to DLM device : 74 [ 46.331580][ T5059] [ 46.456534][ T5074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.459114][ T5074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.693933][ T5078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 46.763902][ T5088] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 46.765544][ C1] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 46.925850][ T5097] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 47.030725][ T5105] FAULT_INJECTION: forcing a failure. [ 47.030725][ T5105] name fail_futex, interval 1, probability 0, space 0, times 1 [ 47.033128][ T5105] CPU: 1 PID: 5105 Comm: syz.1.258 Not tainted syzkaller #0 [ 47.034336][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 47.036217][ T5105] Call trace: [ 47.036830][ T5105] dump_backtrace+0x1c4/0x1f0 [ 47.037575][ T5105] show_stack+0x2c/0x3c [ 47.038281][ T5105] __dump_stack+0x30/0x40 [ 47.039197][ T5105] dump_stack_lvl+0xf4/0x15c [ 47.040182][ T5105] dump_stack+0x1c/0x5c [ 47.041041][ T5105] should_fail_ex+0x3cc/0x524 [ 47.041956][ T5105] should_fail+0x14/0x24 [ 47.042738][ T5105] get_futex_key+0x904/0xfb0 [ 47.043595][ T5105] futex_wake+0x10c/0x458 [ 47.044339][ T5105] do_futex+0x2c4/0x340 [ 47.045083][ T5105] __arm64_sys_futex+0x390/0x414 [ 47.045942][ T5105] invoke_syscall+0x98/0x290 [ 47.046761][ T5105] el0_svc_common+0x13c/0x258 [ 47.047596][ T5105] do_el0_svc+0x5c/0x134 [ 47.048354][ T5105] el0_svc+0x58/0x12c [ 47.049049][ T5105] el0t_64_sync_handler+0x84/0xf0 [ 47.049941][ T5105] el0t_64_sync+0x18c/0x190 [ 47.380557][ T4455] usb 1-1: USB disconnect, device number 3 [ 47.792250][ T4455] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 47.898343][ T5124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 47.975747][ T4455] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 47.977390][ T4455] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.978877][ T4455] usb 1-1: Product: syz [ 47.979634][ T4455] usb 1-1: Manufacturer: syz [ 47.980603][ T4455] usb 1-1: SerialNumber: syz [ 48.035334][ T4455] usb 1-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -2 [ 48.046101][ T4455] usb 1-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 48.051092][ T5130] device syzkaller0 entered promiscuous mode [ 48.091723][ T5138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.276'. [ 48.173150][ T5140] device syzkaller0 entered promiscuous mode [ 48.181668][ T5148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.281'. [ 48.212822][ T4337] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 48.270189][ T5156] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 48.357207][ T4344] Bluetooth: hci2: hardware error 0x01 [ 48.386222][ T5160] 9pnet_virtio: no channels available for device syz [ 48.443966][ T5164] usb usb5: usbfs: process 5164 (syz.2.288) did not claim interface 0 before use [ 48.483468][ T5170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.485335][ T5170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.538652][ T5174] ip_tables: iptables: counters copy to user failed while replacing table [ 48.778466][ T5179] device syzkaller0 entered promiscuous mode [ 48.781561][ T5179] simple: /dev/video#_0 [ 48.782509][ T5179] simple: /dev/video#_0 [ 48.783132][ T5179] simple: /dev/video#_0 [ 48.783939][ T5179] simple: /dev/video#_0 [ 48.784706][ T5179] simple: /dev/video#_0 [ 48.785421][ T5179] simple: /dev/video#_0 [ 48.786090][ T5179] simple: /dev/video#_0 [ 48.786762][ T5179] simple: /dev/video#_0 [ 48.787400][ T5179] simple: /dev/video#_0 [ 48.788053][ T5179] simple: /dev/video#_0 [ 48.788678][ T5179] simple: /dev/video#_0 [ 48.789417][ T5179] simple: /dev/video#_0 [ 48.790063][ T5179] simple: /dev/video#_0 [ 48.790687][ T5179] simple: /dev/video#_0 [ 48.791346][ T5179] simple: /dev/video#_0 [ 48.792008][ T5179] simple: /dev/video#_0 [ 48.792770][ T5179] simple: /dev/video#_0 [ 48.793414][ T5179] simple: /dev/video#_0 [ 48.794117][ T5179] simple: /dev/video#_0 [ 48.794799][ T5179] simple: /dev/video#_0 [ 48.795494][ T5179] simple: /dev/video#_0 [ 48.796173][ T5179] simple: /dev/video#_0 [ 48.796851][ T5179] simple: /dev/video#_0 [ 48.797517][ T5179] simple: /dev/video#_0 [ 48.798201][ T5179] simple: /dev/video#_0 [ 48.798894][ T5179] simple: /dev/video#_0 [ 48.799581][ T5179] simple: /dev/video#_0 [ 48.800273][ T5179] simple: /dev/video#_0 [ 48.800934][ T5179] simple: /dev/video#_0 [ 48.801591][ T5179] simple: /dev/video#_0 [ 48.802298][ T5179] simple: /dev/video#_0 [ 48.802935][ T5179] simple: /dev/video#_0 [ 48.803624][ T5179] TC_ACT_REPEAT abuse ? [ 48.902280][ T5181] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 49.265026][ T5227] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 49.317691][ T5239] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 49.487226][ T5254] device syzkaller0 entered promiscuous mode [ 49.495906][ T5223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.507180][ T5223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.545214][ T5254] [ 49.545642][ T5254] ============================================ [ 49.546698][ T5254] WARNING: possible recursive locking detected [ 49.547789][ T5254] syzkaller #0 Not tainted [ 49.548554][ T5254] -------------------------------------------- [ 49.549616][ T5254] syz.2.330/5254 is trying to acquire lock: [ 49.550642][ T5254] ffff0000ff110108 (&sch->root_lock_key#91){+...}-{2:2}, at: __dev_queue_xmit+0x998/0x3154 [ 49.552408][ T5254] [ 49.552408][ T5254] but task is already holding lock: [ 49.553703][ T5254] ffff0000ff110108 (&sch->root_lock_key#91){+...}-{2:2}, at: __dev_queue_xmit+0x998/0x3154 [ 49.555506][ T5254] [ 49.555506][ T5254] other info that might help us debug this: [ 49.556928][ T5254] Possible unsafe locking scenario: [ 49.556928][ T5254] [ 49.558243][ T5254] CPU0 [ 49.558855][ T5254] ---- [ 49.559469][ T5254] lock(&sch->root_lock_key#91); [ 49.560407][ T5254] lock(&sch->root_lock_key#91); [ 49.561323][ T5254] [ 49.561323][ T5254] *** DEADLOCK *** [ 49.561323][ T5254] [ 49.562730][ T5254] May be due to missing lock nesting notation [ 49.562730][ T5254] [ 49.564159][ T5254] 3 locks held by syz.2.330/5254: [ 49.565049][ T5254] #0: ffff8000165f7560 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 49.566768][ T5254] #1: ffff0000ff110108 (&sch->root_lock_key#91){+...}-{2:2}, at: __dev_queue_xmit+0x998/0x3154 [ 49.568659][ T5254] #2: ffff8000165f7560 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 49.570382][ T5254] [ 49.570382][ T5254] stack backtrace: [ 49.571419][ T5254] CPU: 0 PID: 5254 Comm: syz.2.330 Not tainted syzkaller #0 [ 49.572702][ T5254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 49.574506][ T5254] Call trace: [ 49.575090][ T5254] dump_backtrace+0x1c4/0x1f0 [ 49.575921][ T5254] show_stack+0x2c/0x3c [ 49.576657][ T5254] __dump_stack+0x30/0x40 [ 49.577436][ T5254] dump_stack_lvl+0xf4/0x15c [ 49.578261][ T5254] dump_stack+0x1c/0x5c [ 49.578997][ T5254] print_deadlock_bug+0x454/0x5c8 [ 49.579887][ T5254] __lock_acquire+0x6020/0x7280 [ 49.580779][ T5254] lock_acquire+0x210/0x63c [ 49.581619][ T5254] _raw_spin_lock+0x54/0x6c [ 49.582521][ T5254] __dev_queue_xmit+0x998/0x3154 [ 49.583437][ T5254] dev_queue_xmit+0x24/0x34 [ 49.584265][ T5254] sch_frag_xmit_hook+0x228/0xf34 [ 49.585140][ T5254] tcf_dev_queue_xmit+0x4c/0x50 [ 49.586013][ T5254] tcf_mirred_act+0xa90/0x1394 [ 49.587019][ T5254] tcf_action_exec+0x164/0x544 [ 49.587889][ T5254] basic_classify+0x1ec/0x314 [ 49.588729][ T5254] tcf_classify+0x1b4/0x9d4 [ 49.589549][ T5254] cake_enqueue+0x1d0/0x6a18 [ 49.590361][ T5254] dev_qdisc_enqueue+0x5c/0x388 [ 49.591241][ T5254] __dev_queue_xmit+0xaf0/0x3154 [ 49.592143][ T5254] dev_queue_xmit+0x24/0x34 [ 49.592966][ T5254] packet_sendmsg+0x2de8/0x3d64 [ 49.593829][ T5254] ____sys_sendmsg+0x588/0x90c [ 49.594701][ T5254] __sys_sendmsg+0x288/0x374 [ 49.595546][ T5254] __arm64_sys_sendmsg+0x80/0x94 [ 49.596433][ T5254] invoke_syscall+0x98/0x290 [ 49.597282][ T5254] el0_svc_common+0x13c/0x258 [ 49.598142][ T5254] do_el0_svc+0x5c/0x134 [ 49.598924][ T5254] el0_svc+0x58/0x12c [ 49.599648][ T5254] el0t_64_sync_handler+0x84/0xf0 [ 49.600583][ T5254] el0t_64_sync+0x18c/0x190 [ 50.411188][ T4406] usb 1-1: USB disconnect, device number 4 [ 50.573794][ T4344] Bluetooth: hci2: Opcode 0x0c03 failed: -110