last executing test programs: 22.736733601s ago: executing program 0 (id=36): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2000c16, &(0x7f0000000140)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000400)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x108000) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) mq_open(0x0, 0x80, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000680)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r4 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f00000006c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000740)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000007c0), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000800), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) 21.826053558s ago: executing program 0 (id=44): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0xb}}, @TCA_CT_MARK={0x8, 0x10, 0xb5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc04c145}, 0x10000000) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x400, &(0x7f0000000140), 0x2, 0x786, &(0x7f0000000440)="$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") r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r5, @ANYBLOB="fe9d3440", @ANYRES32=r5, @ANYBLOB='\x00'/24], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./file1\x00', 0x80342, 0x168) pwrite64(r6, &(0x7f0000000c40)='2', 0xfdef, 0xfecc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000cc0)) r8 = syz_create_resource$binfmt(&(0x7f0000000d00)='./file1\x00') r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) close(r9) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 21.651803506s ago: executing program 0 (id=47): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000f80)={&(0x7f0000000700)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000780)="97452a307eb495fe22360000001c00"/28, 0x1c}], 0x1, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010101}}}], 0x20}, 0x400c804) 21.550882471s ago: executing program 0 (id=48): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0xe, &(0x7f0000000200)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000700)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x8, &(0x7f00000007c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000008000000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140020000050900010073797a310000000030000000050a010200000000000000bc5d39b44200010020000c00024000000000000000010900010073797a31000000000400048014000000020a0103000000000000000000000006140000001100010000000000000000000000000a"], 0xcc}}, 0x0) 21.478886405s ago: executing program 0 (id=50): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) (async) syz_open_procfs(0x0, 0x0) (async) r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r0, &(0x7f00000001c0)=""/116, 0x74, 0x0, 0x0) (async) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x3, 0x3, 0x0, 0x4}, 0x30, 0x0) landlock_restrict_self(r1, 0x8) (async) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 21.042943061s ago: executing program 0 (id=57): r0 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)={0x28, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1, 0x0, 0x0, 0x40440d4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfcf, 0x75}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x48095}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r3, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000d}, 0x81) write$smackfs_ipv6host(r0, &(0x7f0000001300)=ANY=[@ANYBLOB='0x0000000000000080:0x0000000000007c03:0x0000000000008001:0x0000000000000009:0x0000000100000001:0x0000000000000002:0x0000000000000006:0x000000000000068a/000000000000000000>'], 0xc2) 20.954339258s ago: executing program 32 (id=57): r0 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)={0x28, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1, 0x0, 0x0, 0x40440d4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfcf, 0x75}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x48095}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r3, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000d}, 0x81) write$smackfs_ipv6host(r0, &(0x7f0000001300)=ANY=[@ANYBLOB='0x0000000000000080:0x0000000000007c03:0x0000000000008001:0x0000000000000009:0x0000000100000001:0x0000000000000002:0x0000000000000006:0x000000000000068a/000000000000000000>'], 0xc2) 1.861153617s ago: executing program 3 (id=876): sigaltstack(&(0x7f0000000000)={&(0x7f00000030c0)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000004100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000004140)) timer_settime(0x0, 0x0, &(0x7f0000004180)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.467074768s ago: executing program 5 (id=878): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f0000000100)='1', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r0, &(0x7f0000000180)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./trace\x00', &(0x7f0000000300)='binder\x00', 0x200000, 0x0) 1.425536557s ago: executing program 5 (id=882): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r1, &(0x7f00000006c0)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) 1.360256271s ago: executing program 5 (id=885): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000540)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000580)="450000280000400040063ccd7f0000027f00000130390015000000010000000a5010100071780000", 0x28, 0x0, &(0x7f00000005c0)={0x2, 0x15, @loopback}, 0x10) 1.323263205s ago: executing program 5 (id=886): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) mount(0x0, &(0x7f0000000380)='./trace\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./trace/instances/inst1\x00', 0x1ff) 1.272385428s ago: executing program 5 (id=889): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000026c0)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') 1.225642383s ago: executing program 5 (id=892): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.011212727s ago: executing program 3 (id=901): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x10, 0x1, 0xc}], 0x10}, 0x20004800) 995.757963ms ago: executing program 3 (id=902): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000026c0)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') 974.67126ms ago: executing program 3 (id=904): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 516.40217ms ago: executing program 4 (id=919): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r1, &(0x7f00000006c0)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) 452.6663ms ago: executing program 1 (id=922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000c80)={0x0, 'syz_tun\x00', {0x4}, 0xa}) syz_emit_ethernet(0xf, &(0x7f0000000cc0)={@local, @broadcast, @void, {@generic={0x88f5, '\x00'}}}, 0x0) 409.709154ms ago: executing program 4 (id=923): prlimit64(0x0, 0xe, &(0x7f00000081c0)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000008200)=0x7) unshare(0x42000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, 0x0, 0x0) 383.615927ms ago: executing program 1 (id=924): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./dev_mnt\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ubi0\x00', 0x2, 0x0) ioctl(r0, 0x51106f03, 0x0) 382.490444ms ago: executing program 2 (id=925): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/sys/net/ipv4/tcp_ecn\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'lo\x00'}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000007c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000800)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) 358.493102ms ago: executing program 1 (id=926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 357.592483ms ago: executing program 2 (id=927): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5}]}}}]}, 0x3c}}, 0x0) 284.854624ms ago: executing program 4 (id=928): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r0, 0x400452c8, &(0x7f00000003c0)="000000000000000000000000000000000000000001") mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000067c0)='./dev\x00', &(0x7f0000006800)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 275.015375ms ago: executing program 1 (id=929): mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/layout\x00', 0x2, 0x10) write(r0, &(0x7f0000000b40)="ee", 0x1) 251.623471ms ago: executing program 4 (id=930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="6c000000020603000000000000000000070000001c00078008000840000000e2050015000200000008001240000000040500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x6c}, 0x1, 0x0, 0x0, 0x4000811}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x20004000) 196.191507ms ago: executing program 1 (id=931): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0000000206010100000000000000000000800005000100070000000900020073797a31000000000500050002000000050004000000000011000300686173683a69702c706f7274"], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000025c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000027c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) 195.936209ms ago: executing program 2 (id=932): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x430, 0xffffffff, 0xffffffff, 0x430, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x2, 0xc5, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x560) 195.787391ms ago: executing program 4 (id=933): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r1, &(0x7f00000006c0)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) 115.033787ms ago: executing program 1 (id=934): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) accept4$bt_l2cap(r0, 0x0, 0x0, 0x80800) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e130100c900", @ANYRES32=r0], 0x16) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 114.896941ms ago: executing program 2 (id=935): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000000c0)={0x60, 0x6, &(0x7f00005fe000/0x1000)=nil, &(0x7f0000ca5000/0x4000)=nil, 0xb1f2, 0x0, 0x0, 0x7dc, 0x58, 0x0, 0x0, 0x40}) 106.076615ms ago: executing program 4 (id=936): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000026c0)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x8140) r3 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x8922, &(0x7f0000000080)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) write(r1, &(0x7f00000006c0)='dummy_udc.0', 0xb) 103.163166ms ago: executing program 3 (id=937): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x3000) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000500)=0x1, 0x4) 27.025877ms ago: executing program 2 (id=938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e6574000000050001"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) 26.862509ms ago: executing program 3 (id=939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 0s ago: executing program 2 (id=940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a"], 0x60}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. [ 21.142762][ T4663] cgroup: Unknown subsys name 'net' [ 21.282668][ T4663] cgroup: Unknown subsys name 'cpuset' [ 21.283972][ T4663] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 21.494613][ T4663] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 22.253977][ T4708] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 22.254742][ T4708] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 22.256704][ T4712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 22.256939][ T4712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 22.257181][ T4712] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 22.258427][ T4715] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 22.259059][ T4712] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 22.259112][ T4715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 22.259293][ T4712] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 22.259561][ T4715] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 22.259975][ T4715] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 22.260240][ T4715] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 22.261134][ T4709] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 22.273041][ T4708] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 22.274139][ T4708] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 22.276241][ T4712] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 22.288781][ T4712] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 22.289440][ T4712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 22.289668][ T4708] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 22.291789][ T4712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 22.319895][ T4709] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 22.320272][ T4709] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 22.320431][ T4709] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 22.320750][ T4709] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 22.320953][ T4709] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 22.459960][ T4714] rdma_rxe: Failed to create IPv4 UDP tunnel [ 22.486622][ T4720] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.486911][ T4720] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.487277][ T4720] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.490792][ T4719] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 22.506423][ T4706] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 22.516102][ T4707] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 22.547173][ T4720] infiniband rxe0: set active [ 22.548231][ T4720] infiniband rxe0: added rxe_eth0 [ 22.552520][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.567719][ T4720] RDS/IB: rxe0: added [ 22.567779][ T4720] smc: adding ib device rxe0 with port count 1 [ 22.567800][ T4720] smc: ib device rxe0 port 1 has no pnetid [ 22.582524][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.584273][ T4720] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.645766][ T4720] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.725508][ T4720] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.779827][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.780062][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.780163][ T4707] bridge_slave_0: entered allmulticast mode [ 22.780658][ T4707] bridge_slave_0: entered promiscuous mode [ 22.783162][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.783183][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.783231][ T4707] bridge_slave_1: entered allmulticast mode [ 22.783677][ T4707] bridge_slave_1: entered promiscuous mode [ 22.784423][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.784453][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.784522][ T4714] bridge_slave_0: entered allmulticast mode [ 22.785103][ T4714] bridge_slave_0: entered promiscuous mode [ 22.788735][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.788763][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.788810][ T4714] bridge_slave_1: entered allmulticast mode [ 22.789227][ T4714] bridge_slave_1: entered promiscuous mode [ 22.792914][ T4720] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.832410][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.839951][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.844998][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.847958][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.848017][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.848108][ T4719] bridge_slave_0: entered allmulticast mode [ 22.848492][ T4719] bridge_slave_0: entered promiscuous mode [ 22.849160][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.849177][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.849219][ T4719] bridge_slave_1: entered allmulticast mode [ 22.849606][ T4719] bridge_slave_1: entered promiscuous mode [ 22.853973][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.859928][ T4707] team0: Port device team_slave_0 added [ 22.861011][ T4707] team0: Port device team_slave_1 added [ 22.879782][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.883320][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.883378][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.883435][ T4706] bridge_slave_0: entered allmulticast mode [ 22.883822][ T4706] bridge_slave_0: entered promiscuous mode [ 22.890402][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.890425][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.890510][ T4706] bridge_slave_1: entered allmulticast mode [ 22.890908][ T4706] bridge_slave_1: entered promiscuous mode [ 22.893216][ T4720] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.894035][ T4714] team0: Port device team_slave_0 added [ 22.895066][ T4714] team0: Port device team_slave_1 added [ 22.901046][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.906342][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.906350][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.906361][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.907080][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.907087][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.907100][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.922839][ T4719] team0: Port device team_slave_0 added [ 22.923917][ T4719] team0: Port device team_slave_1 added [ 22.933702][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.933711][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.933726][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.934314][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.934321][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.934336][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.959738][ T4707] hsr_slave_0: entered promiscuous mode [ 22.960239][ T4707] hsr_slave_1: entered promiscuous mode [ 22.972546][ T4714] hsr_slave_0: entered promiscuous mode [ 22.972834][ T4714] hsr_slave_1: entered promiscuous mode [ 22.973061][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 22.973095][ T4714] Cannot create hsr debugfs directory [ 22.973917][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.973927][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.973938][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.977957][ T4706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.980632][ T4706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.981098][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.981107][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.981120][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.024717][ T4706] team0: Port device team_slave_0 added [ 23.028697][ T4719] hsr_slave_0: entered promiscuous mode [ 23.028987][ T4719] hsr_slave_1: entered promiscuous mode [ 23.029180][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 23.029190][ T4719] Cannot create hsr debugfs directory [ 23.036003][ T4706] team0: Port device team_slave_1 added [ 23.053468][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.053479][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.053492][ T4706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.054096][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.054103][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.054118][ T4706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.066936][ T4706] hsr_slave_0: entered promiscuous mode [ 23.067250][ T4706] hsr_slave_1: entered promiscuous mode [ 23.067448][ T4706] debugfs: 'hsr0' already exists in 'hsr' [ 23.067457][ T4706] Cannot create hsr debugfs directory [ 23.154661][ T4707] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 23.156555][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.166560][ T4707] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 23.167757][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.170732][ T4707] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 23.172355][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.180565][ T4707] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 23.182665][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.208562][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.209281][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.209413][ T4720] bridge_slave_0: entered allmulticast mode [ 23.209843][ T4720] bridge_slave_0: entered promiscuous mode [ 23.215043][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.215072][ T4707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.215264][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.215292][ T4707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.229406][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.231769][ T4706] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 23.233014][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.233300][ T4706] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 23.235782][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.236204][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.236295][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.236388][ T4720] bridge_slave_1: entered allmulticast mode [ 23.236777][ T4720] bridge_slave_1: entered promiscuous mode [ 23.247607][ T2545] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.248225][ T2545] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.257135][ T4706] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 23.258077][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.262979][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.263841][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.270265][ T4720] team0: Port device team_slave_0 added [ 23.270948][ T4720] team0: Port device team_slave_1 added [ 23.274375][ T4706] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 23.275490][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.276266][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.294437][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.294471][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.298123][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.298133][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.298149][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.299215][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.299222][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.299236][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.313492][ T4720] hsr_slave_0: entered promiscuous mode [ 23.313782][ T4720] hsr_slave_1: entered promiscuous mode [ 23.313986][ T4720] debugfs: 'hsr0' already exists in 'hsr' [ 23.313996][ T4720] Cannot create hsr debugfs directory [ 23.328528][ T4714] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 23.329835][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.335457][ T2545] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.335479][ T2545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.347550][ T4714] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 23.348471][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.357037][ T4714] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 23.358261][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.358536][ T4714] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 23.359412][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.380391][ T4707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 23.380405][ T4707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.402767][ T4719] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 23.403773][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.404064][ T4719] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 23.405454][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.418038][ T4719] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 23.419307][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.419645][ T4719] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 23.420915][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.425393][ T4706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.428474][ T4706] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.436225][ T2545] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.436248][ T2545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.436679][ T2545] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.436700][ T2545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.459751][ T4720] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 23.460891][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.461193][ T4720] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 23.463084][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.463846][ T4720] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 23.465945][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.479315][ T4720] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 23.480371][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.496539][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.509325][ T4706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.523157][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.534414][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.534466][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.534804][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.534823][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.547634][ T4714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 23.547647][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.555950][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.559253][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.580980][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.581009][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.581317][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.581336][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.609597][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.609741][ T4719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 23.609755][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.634129][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.636876][ T4720] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.645497][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.645524][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.646041][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.646064][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.661194][ T4720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 23.661208][ T4720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.707853][ T4707] veth0_vlan: entered promiscuous mode [ 23.709604][ T4707] veth1_vlan: entered promiscuous mode [ 23.719474][ T4707] veth0_macvtap: entered promiscuous mode [ 23.720806][ T4707] veth1_macvtap: entered promiscuous mode [ 23.727242][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.728238][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.755019][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.755119][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.755171][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.770846][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.780023][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.783437][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.783828][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.783838][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.808147][ T4706] veth0_vlan: entered promiscuous mode [ 23.810164][ T4706] veth1_vlan: entered promiscuous mode [ 23.813161][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.813172][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.828660][ T4706] veth0_macvtap: entered promiscuous mode [ 23.841709][ T4706] veth1_macvtap: entered promiscuous mode [ 23.845932][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.846871][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.864591][ T2545] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.865114][ T2545] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.870591][ T4714] veth0_vlan: entered promiscuous mode [ 23.883283][ T4714] veth1_vlan: entered promiscuous mode [ 23.889108][ T4714] veth0_macvtap: entered promiscuous mode [ 23.891022][ T4714] veth1_macvtap: entered promiscuous mode [ 23.893626][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.902989][ T4707] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.905581][ T2545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.905592][ T2545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.910442][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.924252][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.942860][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.947524][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.947533][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.971769][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.971897][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.971964][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.972072][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.972090][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.973672][ T4719] veth0_vlan: entered promiscuous mode [ 23.976954][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.979020][ T4719] veth1_vlan: entered promiscuous mode [ 24.025889][ T2545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.025899][ T2545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.026700][ T4719] veth0_macvtap: entered promiscuous mode [ 24.038603][ T4719] veth1_macvtap: entered promiscuous mode [ 24.040928][ T2545] IPVS: starting estimator thread 0... [ 24.048105][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.048118][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.049480][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.050848][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.065935][ T4889] Zero length message leads to an empty skb [ 24.084121][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.084611][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.084783][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.084902][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.117030][ T2545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.117044][ T2545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.132293][ T4890] IPVS: using max 60 ests per chain, 144000 per kthread [ 24.154264][ T4720] veth0_vlan: entered promiscuous mode [ 24.168163][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.168176][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.169761][ T4720] veth1_vlan: entered promiscuous mode [ 24.208215][ T4720] veth0_macvtap: entered promiscuous mode [ 24.209307][ T4720] veth1_macvtap: entered promiscuous mode [ 24.227496][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.234084][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.235541][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.235619][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.261953][ T2545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.261970][ T2545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.270663][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.270676][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.282731][ T2545] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.282905][ T2545] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.295623][ T40] tipc: Subscription rejected, illegal request [ 24.299127][ T4894] macsec1: entered promiscuous mode [ 24.299142][ T4894] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 24.299260][ T4894] macsec1: entered allmulticast mode [ 24.299269][ T4894] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 24.299926][ T4894] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 24.302433][ T4894] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 24.309924][ T1157] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 24.332071][ T4709] Bluetooth: hci0: command tx timeout [ 24.332186][ T4709] Bluetooth: hci2: command tx timeout [ 24.332251][ T4709] Bluetooth: hci1: command tx timeout [ 24.333345][ T51] Bluetooth: hci3: command tx timeout [ 24.367555][ T4908] loop1: detected capacity change from 0 to 4096 [ 24.368449][ T4908] EXT4-fs: Ignoring removed orlov option [ 24.374826][ T4908] EXT4-fs (loop1): Test dummy encryption mode enabled [ 24.386048][ T4908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 24.399360][ T4913] ip_tables: iptables: counters copy to user failed while replacing table [ 24.465561][ T4712] Bluetooth: hci4: command tx timeout [ 24.582019][ T4914] 9p: Bad value for 'rfdno' [ 24.665494][ T4913] loop4: detected capacity change from 0 to 128 [ 24.676990][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 24.776849][ T4924] loop3: detected capacity change from 0 to 512 [ 24.788308][ T4924] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 24.823687][ T4924] loop3: detected capacity change from 0 to 1024 [ 24.837751][ T4928] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13'. [ 24.837766][ T4928] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 25.000322][ T4949] syzkaller0: entered promiscuous mode [ 25.000339][ T4949] syzkaller0: entered allmulticast mode [ 25.408297][ T4959] FAULT_INJECTION: forcing a failure. [ 25.408297][ T4959] name failslab, interval 1, probability 0, space 0, times 0 [ 25.408318][ T4959] CPU: 0 UID: 0 PID: 4959 Comm: syz.2.22 Not tainted syzkaller #0 PREEMPT [ 25.408331][ T4959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 25.408337][ T4959] Call trace: [ 25.408340][ T4959] show_stack+0x2c/0x3c (C) [ 25.408362][ T4959] __dump_stack+0x30/0x40 [ 25.408375][ T4959] dump_stack_lvl+0xd8/0x12c [ 25.408386][ T4959] dump_stack+0x1c/0x28 [ 25.408398][ T4959] should_fail_ex+0x418/0x58c [ 25.408411][ T4959] should_failslab+0xc4/0x120 [ 25.408420][ T4959] kmem_cache_alloc_noprof+0x94/0x5d4 [ 25.408430][ T4959] __kernfs_new_node+0xf0/0x7d8 [ 25.408441][ T4959] kernfs_new_node+0xe8/0x130 [ 25.408452][ T4959] __kernfs_create_file+0x60/0x2e0 [ 25.408463][ T4959] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 25.408476][ T4959] sysfs_create_file_ns+0x110/0x198 [ 25.408488][ T4959] device_create_file+0xf4/0x1a4 [ 25.408499][ T4959] device_add+0x3d0/0x9e0 [ 25.408509][ T4959] rfkill_register+0x144/0x7bc [ 25.408522][ T4959] nfc_register_device+0x140/0x350 [ 25.408533][ T4959] nci_register_device+0x6b8/0x7e4 [ 25.408541][ T4959] virtual_ncidev_open+0x120/0x1a0 [ 25.408551][ T4959] misc_open+0x2dc/0x338 [ 25.408559][ T4959] chrdev_open+0x398/0x3e8 [ 25.408571][ T4959] do_dentry_open+0x5c4/0xfbc [ 25.408582][ T4959] vfs_open+0x44/0x2dc [ 25.408594][ T4959] path_openat+0x1084/0x18f0 [ 25.408604][ T4959] do_file_open+0x1c8/0x2e8 [ 25.408615][ T4959] do_sys_openat2+0x114/0x1e8 [ 25.408626][ T4959] do_sys_open+0xb0/0xe0 [ 25.408638][ T4959] __arm64_sys_openat+0xa8/0xc4 [ 25.408650][ T4959] invoke_syscall+0x98/0x244 [ 25.408662][ T4959] el0_svc_common+0xec/0x23c [ 25.408674][ T4959] do_el0_svc+0x4c/0x5c [ 25.408686][ T4959] el0_svc+0x60/0x1d8 [ 25.408694][ T4959] el0t_64_sync_handler+0x44/0x104 [ 25.408703][ T4959] el0t_64_sync+0x198/0x19c [ 25.772256][ T4975] loop0: detected capacity change from 0 to 1024 [ 25.773846][ T4975] EXT4-fs: Ignoring removed nomblk_io_submit option [ 25.786644][ T4975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 25.792519][ T4975] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.28: bg 0: block 112: padding at end of block bitmap is not set [ 25.793837][ T4975] EXT4-fs (loop0): Remounting filesystem read-only [ 26.266774][ T4982] FAULT_INJECTION: forcing a failure. [ 26.266774][ T4982] name failslab, interval 1, probability 0, space 0, times 0 [ 26.266795][ T4982] CPU: 1 UID: 0 PID: 4982 Comm: syz.3.29 Not tainted syzkaller #0 PREEMPT [ 26.266806][ T4982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 26.266811][ T4982] Call trace: [ 26.266814][ T4982] show_stack+0x2c/0x3c (C) [ 26.266834][ T4982] __dump_stack+0x30/0x40 [ 26.266846][ T4982] dump_stack_lvl+0xd8/0x12c [ 26.266857][ T4982] dump_stack+0x1c/0x28 [ 26.266868][ T4982] should_fail_ex+0x418/0x58c [ 26.266877][ T4982] should_failslab+0xc4/0x120 [ 26.266886][ T4982] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 26.266896][ T4982] kstrdup+0x50/0x104 [ 26.266905][ T4982] kstrdup_const+0x54/0x6c [ 26.266913][ T4982] __kernfs_new_node+0xb0/0x7d8 [ 26.266924][ T4982] kernfs_new_node+0xe8/0x130 [ 26.266935][ T4982] kernfs_create_link+0x98/0x1e4 [ 26.266946][ T4982] sysfs_do_create_link_sd+0x8c/0x120 [ 26.266954][ T4982] sysfs_create_link+0x74/0x94 [ 26.266962][ T4982] device_add_class_symlinks+0x1e0/0x254 [ 26.266973][ T4982] device_add+0x3fc/0x9e0 [ 26.266990][ T4982] rfkill_register+0x144/0x7bc [ 26.267003][ T4982] nfc_register_device+0x140/0x350 [ 26.267013][ T4982] nci_register_device+0x6b8/0x7e4 [ 26.267022][ T4982] virtual_ncidev_open+0x120/0x1a0 [ 26.267032][ T4982] misc_open+0x2dc/0x338 [ 26.267040][ T4982] chrdev_open+0x398/0x3e8 [ 26.267051][ T4982] do_dentry_open+0x5c4/0xfbc [ 26.267063][ T4982] vfs_open+0x44/0x2dc [ 26.267074][ T4982] path_openat+0x1084/0x18f0 [ 26.267084][ T4982] do_file_open+0x1c8/0x2e8 [ 26.267094][ T4982] do_sys_openat2+0x114/0x1e8 [ 26.267106][ T4982] do_sys_open+0xb0/0xe0 [ 26.267117][ T4982] __arm64_sys_openat+0xa8/0xc4 [ 26.267129][ T4982] invoke_syscall+0x98/0x244 [ 26.267141][ T4982] el0_svc_common+0xec/0x23c [ 26.267153][ T4982] do_el0_svc+0x4c/0x5c [ 26.267164][ T4982] el0_svc+0x60/0x1d8 [ 26.267172][ T4982] el0t_64_sync_handler+0x44/0x104 [ 26.267180][ T4982] el0t_64_sync+0x198/0x19c [ 26.342266][ T4989] FAULT_INJECTION: forcing a failure. [ 26.342266][ T4989] name failslab, interval 1, probability 0, space 0, times 0 [ 26.342286][ T4989] CPU: 1 UID: 0 PID: 4989 Comm: syz.3.31 Not tainted syzkaller #0 PREEMPT [ 26.342298][ T4989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 26.342305][ T4989] Call trace: [ 26.342308][ T4989] show_stack+0x2c/0x3c (C) [ 26.342330][ T4989] __dump_stack+0x30/0x40 [ 26.342342][ T4989] dump_stack_lvl+0xd8/0x12c [ 26.342355][ T4989] dump_stack+0x1c/0x28 [ 26.342367][ T4989] should_fail_ex+0x418/0x58c [ 26.342376][ T4989] should_failslab+0xc4/0x120 [ 26.342385][ T4989] kmem_cache_alloc_noprof+0x94/0x5d4 [ 26.342394][ T4989] __kernfs_new_node+0xf0/0x7d8 [ 26.342406][ T4989] kernfs_new_node+0xe8/0x130 [ 26.342416][ T4989] __kernfs_create_file+0x60/0x2e0 [ 26.342428][ T4989] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 26.342441][ T4989] sysfs_create_file_ns+0x110/0x198 [ 26.342453][ T4989] device_create_file+0xf4/0x1a4 [ 26.342464][ T4989] device_add+0x3d0/0x9e0 [ 26.342473][ T4989] rfkill_register+0x144/0x7bc [ 26.342487][ T4989] nfc_register_device+0x140/0x350 [ 26.342497][ T4989] nci_register_device+0x6b8/0x7e4 [ 26.342505][ T4989] virtual_ncidev_open+0x120/0x1a0 [ 26.342516][ T4989] misc_open+0x2dc/0x338 [ 26.342524][ T4989] chrdev_open+0x398/0x3e8 [ 26.342535][ T4989] do_dentry_open+0x5c4/0xfbc [ 26.342547][ T4989] vfs_open+0x44/0x2dc [ 26.342558][ T4989] path_openat+0x1084/0x18f0 [ 26.342569][ T4989] do_file_open+0x1c8/0x2e8 [ 26.342579][ T4989] do_sys_openat2+0x114/0x1e8 [ 26.342591][ T4989] do_sys_open+0xb0/0xe0 [ 26.342603][ T4989] __arm64_sys_openat+0xa8/0xc4 [ 26.342615][ T4989] invoke_syscall+0x98/0x244 [ 26.342627][ T4989] el0_svc_common+0xec/0x23c [ 26.342639][ T4989] do_el0_svc+0x4c/0x5c [ 26.342650][ T4989] el0_svc+0x60/0x1d8 [ 26.342659][ T4989] el0t_64_sync_handler+0x44/0x104 [ 26.342667][ T4989] el0t_64_sync+0x198/0x19c [ 26.378275][ T4994] loop3: detected capacity change from 0 to 128 [ 26.383862][ T4994] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 26.412404][ T4712] Bluetooth: hci3: command tx timeout [ 26.412428][ T4712] Bluetooth: hci1: command tx timeout [ 26.412442][ T4712] Bluetooth: hci2: command tx timeout [ 26.412454][ T4712] Bluetooth: hci0: command tx timeout [ 26.491448][ T51] Bluetooth: hci4: command tx timeout [ 26.982334][ T4707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 27.007394][ T5013] loop0: detected capacity change from 0 to 128 [ 27.014708][ T5013] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 27.047619][ T5016] Illegal XDP return value 2760619999 on prog (id 4) dev N/A, expect packet loss! [ 27.441637][ T4706] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 27.455052][ T5024] loop1: detected capacity change from 0 to 512 [ 27.684859][ T5024] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 27.713459][ T5024] loop1: detected capacity change from 0 to 1024 [ 27.723288][ T40] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.893461][ T4707] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 27.949326][ T5039] loop0: detected capacity change from 0 to 2048 [ 27.983935][ T5039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.005787][ T5039] netlink: 32 bytes leftover after parsing attributes in process `syz.0.44'. [ 28.013158][ T5044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.023802][ T5044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.45'. [ 28.023821][ T5044] block nbd0: Unsupported socket: should be TCP or UNIX. [ 28.042633][ T5039] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 28.044533][ T5039] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 28.044555][ T5039] EXT4-fs (loop0): This should not happen!! Data will be lost [ 28.044555][ T5039] [ 28.044565][ T5039] EXT4-fs (loop0): Total free blocks count 0 [ 28.044574][ T5039] EXT4-fs (loop0): Free/Dirty block details [ 28.044587][ T5039] EXT4-fs (loop0): free_blocks=4096 [ 28.044600][ T5039] EXT4-fs (loop0): dirty_blocks=64 [ 28.044606][ T5039] EXT4-fs (loop0): Block reservation details [ 28.044612][ T5039] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 28.049613][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.049891][ T5039] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 28.082921][ T4707] EXT4-fs warning (device loop0): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 28.148622][ T5054] EXT4-fs: Ignoring removed oldalloc option [ 28.150873][ T5054] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 28.150887][ T5054] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.150893][ T5054] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 28.180966][ T5054] EXT4-fs (loop0): 1 truncate cleaned up [ 28.183373][ T5054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.208841][ T5054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.48'. [ 28.210916][ T5057] ip_tables: iptables: counters copy to user failed while replacing table [ 28.231717][ T5057] syz.4.49 uses obsolete (PF_INET,SOCK_PACKET) [ 28.243606][ T4707] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 28.265770][ T4707] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 28.275479][ T4707] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 28.296738][ T5060] mmap: syz.3.51 (5060) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 28.328509][ T5062] ======================================================= [ 28.328509][ T5062] WARNING: The mand mount option has been deprecated and [ 28.328509][ T5062] and is ignored by this kernel. Remove the mand [ 28.328509][ T5062] option from the mount to silence this warning. [ 28.328509][ T5062] ======================================================= [ 28.329569][ T5062] EXT4-fs (loop3): Test dummy encryption mode enabled [ 28.329588][ T5062] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 28.329595][ T5062] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 28.331053][ T5062] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.52: bad orphan inode 131083 [ 28.331116][ T5062] loop3: lost filesystem error report for type 5 error -117 [ 28.331650][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 28.331662][ C1] EXT4-fs (loop3): initial error at time 28: ext4_orphan_get:1429 [ 28.331676][ C1] EXT4-fs (loop3): last error at time 28: ext4_orphan_get:1429 [ 28.368089][ T5062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.491778][ T51] Bluetooth: hci0: command tx timeout [ 28.491805][ T51] Bluetooth: hci2: command tx timeout [ 28.491821][ T51] Bluetooth: hci3: command tx timeout [ 28.507062][ T5073] rxe_eth0 speed is unknown, defaulting to 1000 [ 28.571875][ T51] Bluetooth: hci4: command tx timeout [ 28.614277][ T4707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.619879][ T5076] bridge0: port 3(syz_tun) entered blocking state [ 28.620019][ T5076] bridge0: port 3(syz_tun) entered disabled state [ 28.620186][ T5076] syz_tun: entered allmulticast mode [ 28.622333][ T5076] syz_tun: entered promiscuous mode [ 28.624444][ T5076] bridge0: port 3(syz_tun) entered blocking state [ 28.624481][ T5076] bridge0: port 3(syz_tun) entered forwarding state [ 28.721115][ T5077] EXT4-fs: Ignoring removed mblk_io_submit option [ 28.721153][ T5077] ext4: Unknown parameter 'pcr' [ 28.759747][ T5077] 9p: Bad value for 'rfdno' [ 28.860093][ T4712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 28.861167][ T4712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 28.862603][ T4712] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 28.863507][ T4712] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 28.864358][ T4712] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 28.876342][ T2545] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.985102][ T5089] 9p: Bad value for 'rfdno' [ 29.188719][ T2545] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.199181][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.253707][ T5081] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.305858][ T2545] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.434663][ T5098] 9p: Bad value for 'rfdno' [ 29.606754][ T2545] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.664082][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.664986][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.665047][ T5081] bridge_slave_0: entered allmulticast mode [ 29.665516][ T5081] bridge_slave_0: entered promiscuous mode [ 29.667895][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.668031][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.668082][ T5081] bridge_slave_1: entered allmulticast mode [ 29.668563][ T5081] bridge_slave_1: entered promiscuous mode [ 29.686876][ T5081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.706095][ T2545] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.717130][ T5081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.719163][ T5114] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 29.757152][ T5081] team0: Port device team_slave_0 added [ 29.758031][ T5081] team0: Port device team_slave_1 added [ 29.764122][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.764131][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.764143][ T5081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.764633][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.764639][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.764651][ T5081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.776507][ T5081] hsr_slave_0: entered promiscuous mode [ 29.776779][ T5081] hsr_slave_1: entered promiscuous mode [ 29.776953][ T5081] debugfs: 'hsr0' already exists in 'hsr' [ 29.776963][ T5081] Cannot create hsr debugfs directory [ 29.881749][ T5117] 9p: Bad value for 'rfdno' [ 30.048431][ T5081] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 30.050809][ T5081] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.051911][ T5081] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 30.061252][ T5081] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.062546][ T5081] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 30.070805][ T5081] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.071132][ T5081] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 30.073985][ T5124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 30.073994][ T5124] IPv6: NLM_F_CREATE should be set when creating new route [ 30.074034][ T5124] IPv6: NLM_F_CREATE should be set when creating new route [ 30.083560][ T5081] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.126675][ T5134] FAULT_INJECTION: forcing a failure. [ 30.126675][ T5134] name failslab, interval 1, probability 0, space 0, times 0 [ 30.126693][ T5134] CPU: 0 UID: 0 PID: 5134 Comm: syz.2.69 Not tainted syzkaller #0 PREEMPT [ 30.126704][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 30.126710][ T5134] Call trace: [ 30.126713][ T5134] show_stack+0x2c/0x3c (C) [ 30.126734][ T5134] __dump_stack+0x30/0x40 [ 30.126746][ T5134] dump_stack_lvl+0xd8/0x12c [ 30.126758][ T5134] dump_stack+0x1c/0x28 [ 30.126769][ T5134] should_fail_ex+0x418/0x58c [ 30.126778][ T5134] should_failslab+0xc4/0x120 [ 30.126787][ T5134] kmem_cache_alloc_noprof+0x94/0x5d4 [ 30.126796][ T5134] __kernfs_new_node+0xf0/0x7d8 [ 30.126808][ T5134] kernfs_new_node+0xe8/0x130 [ 30.126819][ T5134] __kernfs_create_file+0x60/0x2e0 [ 30.126830][ T5134] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 30.126843][ T5134] sysfs_merge_group+0x164/0x2ac [ 30.126851][ T5134] dpm_sysfs_add+0xc8/0x258 [ 30.126864][ T5134] device_add+0x468/0x9e0 [ 30.126874][ T5134] nfc_register_device+0x64/0x350 [ 30.126886][ T5134] nci_register_device+0x6b8/0x7e4 [ 30.126894][ T5134] virtual_ncidev_open+0x120/0x1a0 [ 30.126904][ T5134] misc_open+0x2dc/0x338 [ 30.126912][ T5134] chrdev_open+0x398/0x3e8 [ 30.126923][ T5134] do_dentry_open+0x5c4/0xfbc [ 30.126935][ T5134] vfs_open+0x44/0x2dc [ 30.126951][ T5134] path_openat+0x1084/0x18f0 [ 30.126962][ T5134] do_file_open+0x1c8/0x2e8 [ 30.126979][ T5134] do_sys_openat2+0x114/0x1e8 [ 30.126991][ T5134] do_sys_open+0xb0/0xe0 [ 30.127002][ T5134] __arm64_sys_openat+0xa8/0xc4 [ 30.127015][ T5134] invoke_syscall+0x98/0x244 [ 30.127027][ T5134] el0_svc_common+0xec/0x23c [ 30.127039][ T5134] do_el0_svc+0x4c/0x5c [ 30.127051][ T5134] el0_svc+0x60/0x1d8 [ 30.127059][ T5134] el0t_64_sync_handler+0x44/0x104 [ 30.127067][ T5134] el0t_64_sync+0x198/0x19c [ 30.199529][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.199557][ T5081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.199624][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.199651][ T5081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.247376][ T2545] bridge_slave_1: left allmulticast mode [ 30.247400][ T2545] bridge_slave_1: left promiscuous mode [ 30.247735][ T2545] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.249758][ T2545] bridge_slave_0: left allmulticast mode [ 30.249771][ T2545] bridge_slave_0: left promiscuous mode [ 30.249835][ T2545] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.328109][ T2545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 30.342588][ T2545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 30.372675][ T2545] bond0 (unregistering): Released all slaves [ 30.377042][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.377806][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.415571][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.444786][ T5156] set_capacity_and_notify: 5 callbacks suppressed [ 30.444796][ T5156] loop3: detected capacity change from 0 to 512 [ 30.446901][ T5156] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 30.490106][ T5081] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.496760][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.496787][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.501118][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.501142][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.626450][ T4712] Bluetooth: hci2: command tx timeout [ 30.626885][ T4712] Bluetooth: hci0: command tx timeout [ 30.627305][ T51] Bluetooth: hci3: command tx timeout [ 30.654259][ T4709] Bluetooth: hci4: command tx timeout [ 30.892911][ T4709] Bluetooth: hci1: command tx timeout [ 31.426116][ T4398] 8021q: adding VLAN 0 to HW filter on device eth0 [ 31.430586][ T5081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.430598][ T5081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.481177][ T5183] loop2: detected capacity change from 0 to 128 [ 31.527302][ T5183] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.610647][ T4719] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.738709][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.787603][ T2545] hsr_slave_0: left promiscuous mode [ 31.796625][ T2545] hsr_slave_1: left promiscuous mode [ 31.797053][ T2545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.797072][ T2545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 31.801326][ T2545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.801338][ T2545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 31.823026][ T2545] veth1_macvtap: left promiscuous mode [ 31.823074][ T2545] veth0_macvtap: left promiscuous mode [ 31.823123][ T2545] veth1_vlan: left promiscuous mode [ 31.823164][ T2545] veth0_vlan: left promiscuous mode [ 31.862197][ T5235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.862484][ T5235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.904841][ T4709] Bluetooth: hci2: connection err: -111 [ 32.120568][ T2545] team0 (unregistering): Port device team_slave_1 removed [ 32.135195][ T2545] team0 (unregistering): Port device team_slave_0 removed [ 32.210340][ T4398] 8021q: adding VLAN 0 to HW filter on device eth1 [ 32.329443][ T5270] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.94'. [ 32.340758][ T5255] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.94'. [ 32.348274][ T5262] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.94'. [ 32.367657][ T5081] veth0_vlan: entered promiscuous mode [ 32.377281][ T5081] veth1_vlan: entered promiscuous mode [ 32.441163][ T5081] veth0_macvtap: entered promiscuous mode [ 32.453205][ T5081] veth1_macvtap: entered promiscuous mode [ 32.479463][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.500395][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.537734][ T4398] 8021q: adding VLAN 0 to HW filter on device eth2 [ 32.561337][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.561375][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.594330][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.594338][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.602316][ T2545] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.602774][ T2545] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.602795][ T2545] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.602810][ T2545] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.664672][ T5286] process 'syz.1.99' launched '/dev/fd/3' with NULL argv: empty string added [ 32.745010][ T5295] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.759027][ T5313] capability: warning: `syz.2.108' uses 32-bit capabilities (legacy support in use) [ 32.850737][ T5324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.112'. [ 32.866936][ T5330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.113'. [ 32.974207][ T4709] Bluetooth: hci1: command tx timeout [ 32.990410][ T4398] 8021q: adding VLAN 0 to HW filter on device eth3 [ 33.118516][ T5354] Bluetooth: MGMT ver 1.23 [ 33.609267][ T5383] FAULT_INJECTION: forcing a failure. [ 33.609267][ T5383] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.609294][ T5383] CPU: 0 UID: 0 PID: 5383 Comm: syz.4.133 Not tainted syzkaller #0 PREEMPT [ 33.609304][ T5383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 33.609318][ T5383] Call trace: [ 33.609322][ T5383] show_stack+0x2c/0x3c (C) [ 33.609342][ T5383] __dump_stack+0x30/0x40 [ 33.609355][ T5383] dump_stack_lvl+0xd8/0x12c [ 33.609367][ T5383] dump_stack+0x1c/0x28 [ 33.609378][ T5383] should_fail_ex+0x418/0x58c [ 33.609387][ T5383] should_fail+0x14/0x24 [ 33.609395][ T5383] should_fail_usercopy+0x20/0x30 [ 33.609404][ T5383] set_fd_set+0x48/0xb8 [ 33.609413][ T5383] core_sys_select+0x7ec/0x9e4 [ 33.609422][ T5383] __arm64_sys_pselect6+0x2f0/0x39c [ 33.609430][ T5383] invoke_syscall+0x98/0x244 [ 33.609443][ T5383] el0_svc_common+0xec/0x23c [ 33.609455][ T5383] do_el0_svc+0x4c/0x5c [ 33.609466][ T5383] el0_svc+0x60/0x1d8 [ 33.609475][ T5383] el0t_64_sync_handler+0x44/0x104 [ 33.609483][ T5383] el0t_64_sync+0x198/0x19c [ 34.060659][ T5421] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 34.060672][ T5421] device-mapper: ioctl: error adding target to table [ 34.229672][ T5430] bond0: no command found in slaves file - use +ifname or -ifname [ 34.284718][ T5453] netlink: 'syz.2.165': attribute type 29 has an invalid length. [ 34.314209][ T5459] bridge_slave_0: left allmulticast mode [ 34.314219][ T5459] bridge_slave_0: left promiscuous mode [ 34.314291][ T5459] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.322916][ T5459] bridge_slave_1: left allmulticast mode [ 34.322928][ T5459] bridge_slave_1: left promiscuous mode [ 34.322985][ T5459] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.342843][ T5459] bond0: (slave bond_slave_0): Releasing backup interface [ 34.380733][ T5459] bond0: (slave bond_slave_1): Releasing backup interface [ 34.399773][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 34.399781][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT [ 34.399791][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 34.399797][ T51] Workqueue: hci3 hci_rx_work [ 34.399817][ T51] Call trace: [ 34.399820][ T51] show_stack+0x2c/0x3c (C) [ 34.399837][ T51] __dump_stack+0x30/0x40 [ 34.399849][ T51] dump_stack_lvl+0xd8/0x12c [ 34.399861][ T51] dump_stack+0x1c/0x28 [ 34.399873][ T51] sysfs_warn_dup+0x9c/0xb8 [ 34.399882][ T51] sysfs_create_dir_ns+0x190/0x1f4 [ 34.399890][ T51] kobject_add_internal+0x290/0x6f0 [ 34.399901][ T51] kobject_add_varg+0x9c/0xe8 [ 34.399910][ T51] kobject_add+0x110/0x1c8 [ 34.399919][ T51] device_add+0x394/0x9e0 [ 34.399930][ T51] hci_conn_add_sysfs+0xbc/0x1e8 [ 34.399942][ T51] le_conn_complete_evt+0xc84/0x122c [ 34.399952][ T51] hci_le_conn_complete_evt+0x114/0x3d8 [ 34.399961][ T51] hci_le_meta_evt+0x2b0/0x46c [ 34.399972][ T51] hci_event_packet+0x4c0/0x9c8 [ 34.399990][ T51] hci_rx_work+0x2f4/0xd78 [ 34.399998][ T51] process_scheduled_works+0x91c/0x1250 [ 34.400010][ T51] worker_thread+0x798/0xbd0 [ 34.400021][ T51] kthread+0x304/0x3d4 [ 34.400030][ T51] ret_from_fork+0x10/0x20 [ 34.400046][ T51] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 34.400062][ T51] Bluetooth: hci3: failed to register connection device [ 34.430804][ T5459] team0: Port device team_slave_0 removed [ 34.446042][ T5459] team0: Port device team_slave_1 removed [ 34.446411][ T5459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.446422][ T5459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.446745][ T5478] evm: overlay not supported [ 34.450231][ T5459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.450241][ T5459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.480543][ T5483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.480801][ T5483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.518514][ T5491] xt_hashlimit: size too large, truncated to 1048576 [ 34.518542][ T5491] xt_hashlimit: invalid rate [ 34.605076][ T5500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 34.661617][ T5500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 34.666245][ T5500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 34.696475][ T5525] syzkaller0: entered promiscuous mode [ 34.696487][ T5525] syzkaller0: entered allmulticast mode [ 34.697335][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.697378][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.697404][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.697420][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.778297][ T5533] net_ratelimit: 242 callbacks suppressed [ 34.838950][ T5540] syzkaller0: left promiscuous mode [ 34.838961][ T5540] syzkaller0: left allmulticast mode [ 34.992008][ T4710] rxe_eth0 speed is unknown, defaulting to 1000 [ 35.029110][ T5561] ubi0: attaching mtd0 [ 35.033046][ T5561] ubi0: scanning is finished [ 35.033051][ T5561] ubi0: empty MTD device detected [ 35.039716][ T5564] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 35.058807][ T51] Bluetooth: hci1: command tx timeout [ 35.243829][ T5561] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 35.243844][ T5561] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 35.243853][ T5561] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 35.243861][ T5561] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 35.243868][ T5561] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 35.243874][ T5561] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 35.243881][ T5561] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4273906246 [ 35.243889][ T5561] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 35.246661][ T5578] ubi0: background thread "ubi_bgt0d" started, PID 5578 [ 35.419463][ T5593] FAULT_INJECTION: forcing a failure. [ 35.419463][ T5593] name fail_futex, interval 1, probability 0, space 0, times 1 [ 35.419484][ T5593] CPU: 1 UID: 0 PID: 5593 Comm: syz.2.221 Not tainted syzkaller #0 PREEMPT [ 35.419495][ T5593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 35.419509][ T5593] Call trace: [ 35.419515][ T5593] show_stack+0x2c/0x3c (C) [ 35.419541][ T5593] __dump_stack+0x30/0x40 [ 35.419557][ T5593] dump_stack_lvl+0xd8/0x12c [ 35.419570][ T5593] dump_stack+0x1c/0x28 [ 35.419581][ T5593] should_fail_ex+0x418/0x58c [ 35.419590][ T5593] should_fail+0x14/0x24 [ 35.419597][ T5593] get_futex_key+0x1ec/0x12b0 [ 35.419612][ T5593] futex_wake+0x10c/0x594 [ 35.419623][ T5593] do_futex+0x2c4/0x378 [ 35.419634][ T5593] __arm64_sys_futex+0x2e4/0x418 [ 35.419645][ T5593] invoke_syscall+0x98/0x244 [ 35.419658][ T5593] el0_svc_common+0xec/0x23c [ 35.419669][ T5593] do_el0_svc+0x4c/0x5c [ 35.419681][ T5593] el0_svc+0x60/0x1d8 [ 35.419690][ T5593] el0t_64_sync_handler+0x44/0x104 [ 35.419698][ T5593] el0t_64_sync+0x198/0x19c [ 35.434356][ T5598] netlink: 24 bytes leftover after parsing attributes in process `syz.5.225'. [ 35.639676][ T5630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.238'. [ 35.663893][ T5633] bridge_slave_0: left allmulticast mode [ 35.663905][ T5633] bridge_slave_0: left promiscuous mode [ 35.663975][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.667125][ T5633] bridge_slave_1: left allmulticast mode [ 35.667133][ T5633] bridge_slave_1: left promiscuous mode [ 35.667186][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.677114][ T5633] bond0: (slave bond_slave_0): Releasing backup interface [ 35.686495][ T5633] bond0: (slave bond_slave_1): Releasing backup interface [ 35.734728][ T5633] team0: Port device team_slave_0 removed [ 35.744102][ T5633] team0: Port device team_slave_1 removed [ 35.744472][ T5633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.744482][ T5633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.747738][ T5633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.747746][ T5633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.775868][ T5649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'. [ 35.775880][ T5649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'. [ 35.905717][ T5675] syz_tun: left allmulticast mode [ 35.905731][ T5675] syz_tun: left promiscuous mode [ 35.905800][ T5675] bridge0: port 3(syz_tun) entered disabled state [ 35.928159][ T5675] bridge_slave_0: left allmulticast mode [ 35.928177][ T5675] bridge_slave_0: left promiscuous mode [ 35.928261][ T5675] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.930448][ T5675] bridge_slave_1: left allmulticast mode [ 35.930457][ T5675] bridge_slave_1: left promiscuous mode [ 35.930501][ T5675] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.960136][ T5675] bond0: (slave bond_slave_0): Releasing backup interface [ 35.986756][ T5675] bond0: (slave bond_slave_1): Releasing backup interface [ 36.026039][ T5675] team0: Port device team_slave_0 removed [ 36.032044][ T5675] team0: Port device team_slave_1 removed [ 36.032391][ T5675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.032402][ T5675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.041049][ T5675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.041056][ T5675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.063084][ T5704] netlink: 'syz.2.274': attribute type 4 has an invalid length. [ 36.082955][ T5706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 36.190125][ T5731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.190384][ T5731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.434557][ T5773] bridge_slave_0: left allmulticast mode [ 36.434568][ T5773] bridge_slave_0: left promiscuous mode [ 36.434636][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.436343][ T5773] bridge_slave_1: left allmulticast mode [ 36.436353][ T5773] bridge_slave_1: left promiscuous mode [ 36.436402][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.447048][ T5773] bond0: (slave bond_slave_0): Releasing backup interface [ 36.486647][ T5773] bond0: (slave bond_slave_1): Releasing backup interface [ 36.523145][ T5773] team0: Port device team_slave_0 removed [ 36.527990][ T5773] team0: Port device team_slave_1 removed [ 36.528352][ T5773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.528363][ T5773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.532285][ T5773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.532293][ T5773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.716439][ T5819] FAULT_INJECTION: forcing a failure. [ 36.716439][ T5819] name failslab, interval 1, probability 0, space 0, times 0 [ 36.716453][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: syz.5.328 Not tainted syzkaller #0 PREEMPT [ 36.716463][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 36.716476][ T5819] Call trace: [ 36.716479][ T5819] show_stack+0x2c/0x3c (C) [ 36.716501][ T5819] __dump_stack+0x30/0x40 [ 36.716515][ T5819] dump_stack_lvl+0xd8/0x12c [ 36.716527][ T5819] dump_stack+0x1c/0x28 [ 36.716538][ T5819] should_fail_ex+0x418/0x58c [ 36.716547][ T5819] should_failslab+0xc4/0x120 [ 36.716556][ T5819] kmem_cache_alloc_noprof+0x94/0x5d4 [ 36.716566][ T5819] __kernfs_new_node+0xf0/0x7d8 [ 36.716578][ T5819] kernfs_new_node+0xe8/0x130 [ 36.716589][ T5819] __kernfs_create_file+0x60/0x2e0 [ 36.716601][ T5819] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 36.716614][ T5819] sysfs_create_file_ns+0x110/0x198 [ 36.716627][ T5819] driver_create_file+0x54/0x70 [ 36.716636][ T5819] bus_add_driver+0x278/0x500 [ 36.716649][ T5819] driver_register+0x220/0x310 [ 36.716658][ T5819] usb_gadget_register_driver_owner+0xf0/0x25c [ 36.716671][ T5819] raw_ioctl+0x10f8/0x356c [ 36.716679][ T5819] __arm64_sys_ioctl+0x154/0x1cc [ 36.716688][ T5819] invoke_syscall+0x98/0x244 [ 36.716700][ T5819] el0_svc_common+0xec/0x23c [ 36.716712][ T5819] do_el0_svc+0x4c/0x5c [ 36.716724][ T5819] el0_svc+0x60/0x1d8 [ 36.716733][ T5819] el0t_64_sync_handler+0x44/0x104 [ 36.716741][ T5819] el0t_64_sync+0x198/0x19c [ 36.716751][ T5819] bus_add_driver: uevent attr (raw-gadget.0) failed [ 36.716858][ T5819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.717131][ T5819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.805247][ T5835] overlayfs: failed to resolve './bus': -2 [ 36.952916][ T5863] overlayfs: failed to resolve './bus': -2 [ 37.131421][ T51] Bluetooth: hci1: command tx timeout [ 37.229396][ T5888] overlayfs: failed to resolve './bus': -2 [ 37.247461][ T5890] IPVS: Error joining to the multicast group [ 37.250494][ T59] IPVS: starting estimator thread 0... [ 37.260557][ T5893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.260823][ T5893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.331492][ T5891] IPVS: using max 60 ests per chain, 144000 per kthread [ 37.347107][ T5897] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.414314][ T5897] netlink: 'syz.4.365': attribute type 7 has an invalid length. [ 37.414329][ T5897] netlink: 'syz.4.365': attribute type 5 has an invalid length. [ 37.414338][ T5897] __nla_validate_parse: 9 callbacks suppressed [ 37.414346][ T5897] netlink: 17 bytes leftover after parsing attributes in process `syz.4.365'. [ 37.803137][ T5944] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 37.821131][ T2545] Bluetooth: hci5: Frame reassembly failed (-84) [ 38.165484][ T5973] 9p: Bad value for 'rfdno' [ 38.300227][ T5975] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 38.403189][ T5991] syz.3.406: vmalloc error: size 4096, failed to allocate pages, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 38.403247][ T5991] CPU: 0 UID: 0 PID: 5991 Comm: syz.3.406 Not tainted syzkaller #0 PREEMPT [ 38.403257][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.403269][ T5991] Call trace: [ 38.403272][ T5991] show_stack+0x2c/0x3c (C) [ 38.403295][ T5991] __dump_stack+0x30/0x40 [ 38.403308][ T5991] dump_stack_lvl+0xd8/0x12c [ 38.403320][ T5991] dump_stack+0x1c/0x28 [ 38.403332][ T5991] warn_alloc+0x1c4/0x1d8 [ 38.403342][ T5991] __vmalloc_node_range_noprof+0xc28/0xe9c [ 38.403355][ T5991] __vmalloc_node_noprof+0xec/0x14c [ 38.403365][ T5991] __vmalloc_noprof+0x64/0x8c [ 38.403375][ T5991] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 38.403387][ T5991] bpf_prog_alloc+0x48/0x110 [ 38.403397][ T5991] bpf_prog_load+0x5e0/0x1554 [ 38.403407][ T5991] __sys_bpf+0x7d4/0x82c [ 38.403417][ T5991] __arm64_sys_bpf+0xd0/0xec [ 38.403426][ T5991] invoke_syscall+0x98/0x244 [ 38.403439][ T5991] el0_svc_common+0xec/0x23c [ 38.403450][ T5991] do_el0_svc+0x4c/0x5c [ 38.403462][ T5991] el0_svc+0x60/0x1d8 [ 38.403471][ T5991] el0t_64_sync_handler+0x44/0x104 [ 38.403480][ T5991] el0t_64_sync+0x198/0x19c [ 38.403490][ T5991] Mem-Info: [ 38.403495][ T5991] active_anon:21 inactive_anon:8585 isolated_anon:0 [ 38.403495][ T5991] active_file:2456 inactive_file:6575 isolated_file:0 [ 38.403495][ T5991] unevictable:768 dirty:2064 writeback:0 [ 38.403495][ T5991] slab_reclaimable:9470 slab_unreclaimable:91332 [ 38.403495][ T5991] mapped:33226 shmem:3812 pagetables:1172 [ 38.403495][ T5991] sec_pagetables:0 bounce:0 [ 38.403495][ T5991] kernel_misc_reclaimable:0 [ 38.403495][ T5991] free:1475663 free_pcp:12421 free_cma:7616 [ 38.403517][ T5991] Node 0 active_anon:84kB inactive_anon:34340kB active_file:9824kB inactive_file:26300kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:132904kB dirty:8256kB writeback:0kB shmem:15248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9300kB pagetables:4688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 38.403539][ T5991] Node 0 DMA free:3077888kB boost:0kB min:20400kB low:25500kB high:30600kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 38.403563][ T5991] lowmem_reserve[]: [ 38.403656][ T5991] 0 0 3637 3637 3637 [ 38.403674][ T5991] Node 0 Normal free:2824764kB boost:0kB min:24652kB low:30812kB high:36972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:84kB inactive_anon:34340kB active_file:9824kB inactive_file:26300kB unevictable:3072kB writepending:8256kB zspages:0kB present:5242880kB managed:3724676kB mlocked:0kB bounce:0kB free_pcp:49796kB local_pcp:15008kB free_cma:0kB [ 38.403699][ T5991] lowmem_reserve[]: 0 0 0 0 0 [ 38.403717][ T5991] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 38.404057][ T5991] Node 0 Normal: 763*4kB (UME) 318*8kB (UM) 52*16kB (UM) 77*32kB (UME) 25*64kB (UM) 16*128kB (UM) 9*256kB (UM) 4*512kB (UM) 6*1024kB (UM) 12*2048kB (UME) 678*4096kB (M) = 2824700kB [ 38.404139][ T5991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 38.404147][ T5991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 38.404154][ T5991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 38.404161][ T5991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 38.404168][ T5991] 12849 total pagecache pages [ 38.404172][ T5991] 0 pages in swap cache [ 38.404175][ T5991] Free swap = 124996kB [ 38.404179][ T5991] Total swap = 124996kB [ 38.404183][ T5991] 2097152 pages RAM [ 38.404186][ T5991] 0 pages HighMem/MovableOnly [ 38.404190][ T5991] 395935 pages reserved [ 38.404193][ T5991] 8192 pages cma reserved [ 38.404197][ T5991] 0 pages hwpoisoned [ 38.549563][ T6002] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 39.016135][ T6061] netlink: 'syz.5.439': attribute type 33 has an invalid length. [ 39.016145][ T6061] netlink: 'syz.5.439': attribute type 13 has an invalid length. [ 39.016153][ T6061] netlink: 152 bytes leftover after parsing attributes in process `syz.5.439'. [ 39.053277][ T6062] ubi: mtd0 is already attached to ubi0 [ 39.141731][ T6077] loop5: detected capacity change from 0 to 256 [ 39.266719][ T6100] netlink: 'syz.3.457': attribute type 4 has an invalid length. [ 39.279330][ T6104] netlink: 'syz.4.460': attribute type 7 has an invalid length. [ 39.279342][ T6104] netlink: 'syz.4.460': attribute type 5 has an invalid length. [ 39.279352][ T6104] netlink: 17 bytes leftover after parsing attributes in process `syz.4.460'. [ 39.358995][ T6121] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.455727][ T6136] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 39.492665][ T6144] FAULT_INJECTION: forcing a failure. [ 39.492665][ T6144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.492687][ T6144] CPU: 0 UID: 0 PID: 6144 Comm: syz.2.479 Not tainted syzkaller #0 PREEMPT [ 39.492700][ T6144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 39.492714][ T6144] Call trace: [ 39.492718][ T6144] show_stack+0x2c/0x3c (C) [ 39.492739][ T6144] __dump_stack+0x30/0x40 [ 39.492752][ T6144] dump_stack_lvl+0xd8/0x12c [ 39.492764][ T6144] dump_stack+0x1c/0x28 [ 39.492775][ T6144] should_fail_ex+0x418/0x58c [ 39.492785][ T6144] should_fail+0x14/0x24 [ 39.492792][ T6144] should_fail_usercopy+0x20/0x30 [ 39.492800][ T6144] set_fd_set+0x48/0xb8 [ 39.492810][ T6144] core_sys_select+0x7ec/0x9e4 [ 39.492818][ T6144] __arm64_sys_pselect6+0x2f0/0x39c [ 39.492827][ T6144] invoke_syscall+0x98/0x244 [ 39.492839][ T6144] el0_svc_common+0xec/0x23c [ 39.492851][ T6144] do_el0_svc+0x4c/0x5c [ 39.492863][ T6144] el0_svc+0x60/0x1d8 [ 39.492872][ T6144] el0t_64_sync_handler+0x44/0x104 [ 39.492880][ T6144] el0t_64_sync+0x198/0x19c [ 39.619934][ T6160] batman_adv: batadv0: Adding interface: syz_tun [ 39.619941][ T6160] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.620228][ T6160] batman_adv: batadv0: Interface activated: syz_tun [ 39.713580][ T6181] netlink: 40 bytes leftover after parsing attributes in process `syz.3.496'. [ 39.817162][ T6201] net_ratelimit: 738 callbacks suppressed [ 39.817171][ T6201] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 39.851720][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 40.128914][ T6258] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.531'. [ 40.129181][ T6253] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.531'. [ 40.393400][ T6310] netlink: 'syz.4.559': attribute type 33 has an invalid length. [ 40.393413][ T6310] netlink: 'syz.4.559': attribute type 13 has an invalid length. [ 40.393424][ T6310] netlink: 152 bytes leftover after parsing attributes in process `syz.4.559'. [ 40.394795][ T6304] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 40.523302][ T6335] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.571519][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 40.656632][ T6343] netlink: 'syz.2.574': attribute type 33 has an invalid length. [ 40.656646][ T6343] netlink: 'syz.2.574': attribute type 13 has an invalid length. [ 40.656657][ T6343] netlink: 152 bytes leftover after parsing attributes in process `syz.2.574'. [ 40.945810][ T6368] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.003239][ T6369] ubi: mtd0 is already attached to ubi0 [ 41.043155][ T6371] IPVS: Error joining to the multicast group [ 41.055156][ T6373] netlink: 'syz.2.587': attribute type 33 has an invalid length. [ 41.055173][ T6373] netlink: 'syz.2.587': attribute type 13 has an invalid length. [ 41.055186][ T6373] netlink: 152 bytes leftover after parsing attributes in process `syz.2.587'. [ 41.229616][ T6382] FAULT_INJECTION: forcing a failure. [ 41.229616][ T6382] name failslab, interval 1, probability 0, space 0, times 0 [ 41.229632][ T6382] CPU: 0 UID: 0 PID: 6382 Comm: syz.4.591 Not tainted syzkaller #0 PREEMPT [ 41.229645][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 41.229661][ T6382] Call trace: [ 41.229665][ T6382] show_stack+0x2c/0x3c (C) [ 41.229687][ T6382] __dump_stack+0x30/0x40 [ 41.229701][ T6382] dump_stack_lvl+0xd8/0x12c [ 41.229713][ T6382] dump_stack+0x1c/0x28 [ 41.229725][ T6382] should_fail_ex+0x418/0x58c [ 41.229735][ T6382] should_failslab+0xc4/0x120 [ 41.229744][ T6382] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 41.229754][ T6382] shmem_alloc_inode+0x2c/0x48 [ 41.229762][ T6382] alloc_inode+0x68/0x198 [ 41.229774][ T6382] new_inode+0x20/0x50 [ 41.229786][ T6382] shmem_get_inode+0xac/0x788 [ 41.229794][ T6382] shmem_mknod+0x140/0x2f8 [ 41.229802][ T6382] shmem_mkdir+0x40/0x84 [ 41.229810][ T6382] vfs_mkdir+0x2e4/0x46c [ 41.229821][ T6382] filename_mkdirat+0x228/0x3f4 [ 41.229832][ T6382] __arm64_sys_mkdirat+0x9c/0xc0 [ 41.229844][ T6382] invoke_syscall+0x98/0x244 [ 41.229856][ T6382] el0_svc_common+0xec/0x23c [ 41.229868][ T6382] do_el0_svc+0x4c/0x5c [ 41.229880][ T6382] el0_svc+0x60/0x1d8 [ 41.229889][ T6382] el0t_64_sync_handler+0x44/0x104 [ 41.229898][ T6382] el0t_64_sync+0x198/0x19c [ 41.294756][ T6382] FAULT_INJECTION: forcing a failure. [ 41.294756][ T6382] name failslab, interval 1, probability 0, space 0, times 0 [ 41.294769][ T6382] CPU: 0 UID: 0 PID: 6382 Comm: syz.4.591 Not tainted syzkaller #0 PREEMPT [ 41.294779][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 41.294790][ T6382] Call trace: [ 41.294793][ T6382] show_stack+0x2c/0x3c (C) [ 41.294807][ T6382] __dump_stack+0x30/0x40 [ 41.294818][ T6382] dump_stack_lvl+0xd8/0x12c [ 41.294828][ T6382] dump_stack+0x1c/0x28 [ 41.294838][ T6382] should_fail_ex+0x418/0x58c [ 41.294847][ T6382] should_failslab+0xc4/0x120 [ 41.294855][ T6382] kmem_cache_alloc_noprof+0x94/0x5d4 [ 41.294864][ T6382] __proc_create+0x348/0x788 [ 41.294875][ T6382] proc_create_reg+0x88/0x110 [ 41.294884][ T6382] proc_create_single_data+0x58/0xf8 [ 41.294894][ T6382] snmp6_register_dev+0xb4/0x120 [ 41.294906][ T6382] ipv6_add_dev+0x57c/0x100c [ 41.294914][ T6382] addrconf_notify+0x400/0xbbc [ 41.294923][ T6382] notifier_call_chain+0x1a4/0x4cc [ 41.294934][ T6382] raw_notifier_call_chain+0x3c/0x50 [ 41.294944][ T6382] call_netdevice_notifiers_info+0xb8/0x120 [ 41.294954][ T6382] register_netdevice+0x1018/0x14c0 [ 41.294962][ T6382] register_netdev+0x4c/0x68 [ 41.294976][ T6382] loopback_net_init+0x64/0x150 [ 41.294987][ T6382] ops_init+0x2cc/0x528 [ 41.294997][ T6382] setup_net+0x118/0x2fc [ 41.295006][ T6382] copy_net_ns+0x454/0x698 [ 41.295016][ T6382] create_new_namespaces+0x304/0x50c [ 41.295026][ T6382] unshare_nsproxy_namespaces+0x120/0x170 [ 41.295035][ T6382] ksys_unshare+0x438/0x6e0 [ 41.295044][ T6382] __arm64_sys_unshare+0x40/0x54 [ 41.295053][ T6382] invoke_syscall+0x98/0x244 [ 41.295064][ T6382] el0_svc_common+0xec/0x23c [ 41.295074][ T6382] do_el0_svc+0x4c/0x5c [ 41.295084][ T6382] el0_svc+0x60/0x1d8 [ 41.295092][ T6382] el0t_64_sync_handler+0x44/0x104 [ 41.295100][ T6382] el0t_64_sync+0x198/0x19c [ 41.424930][ T6386] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.471923][ T6389] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.492225][ T6382] FAULT_INJECTION: forcing a failure. [ 41.492225][ T6382] name fail_futex, interval 1, probability 0, space 0, times 0 [ 41.492249][ T6382] CPU: 0 UID: 0 PID: 6382 Comm: syz.4.591 Not tainted syzkaller #0 PREEMPT [ 41.492262][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 41.492277][ T6382] Call trace: [ 41.492281][ T6382] show_stack+0x2c/0x3c (C) [ 41.492300][ T6382] __dump_stack+0x30/0x40 [ 41.492313][ T6382] dump_stack_lvl+0xd8/0x12c [ 41.492325][ T6382] dump_stack+0x1c/0x28 [ 41.492337][ T6382] should_fail_ex+0x418/0x58c [ 41.492347][ T6382] should_fail+0x14/0x24 [ 41.492355][ T6382] get_futex_key+0x1ec/0x12b0 [ 41.492367][ T6382] futex_wake+0x10c/0x594 [ 41.492379][ T6382] do_futex+0x2c4/0x378 [ 41.492389][ T6382] __arm64_sys_futex+0x2e4/0x418 [ 41.492401][ T6382] invoke_syscall+0x98/0x244 [ 41.492415][ T6382] el0_svc_common+0xec/0x23c [ 41.492427][ T6382] do_el0_svc+0x4c/0x5c [ 41.492439][ T6382] el0_svc+0x60/0x1d8 [ 41.492447][ T6382] el0t_64_sync_handler+0x44/0x104 [ 41.492456][ T6382] el0t_64_sync+0x198/0x19c [ 41.654125][ T6394] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.739139][ T6412] ubi: mtd0 is already attached to ubi0 [ 41.930944][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'. [ 42.049919][ T6447] overlayfs: missing 'lowerdir' [ 42.056900][ T6442] rxe_eth0 speed is unknown, defaulting to 1000 [ 42.075623][ T6448] netlink: 'syz.2.617': attribute type 7 has an invalid length. [ 42.075636][ T6448] netlink: 'syz.2.617': attribute type 5 has an invalid length. [ 42.297980][ T6460] FAULT_INJECTION: forcing a failure. [ 42.297980][ T6460] name failslab, interval 1, probability 0, space 0, times 0 [ 42.297995][ T6460] CPU: 0 UID: 0 PID: 6460 Comm: syz.5.626 Not tainted syzkaller #0 PREEMPT [ 42.298006][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 42.298021][ T6460] Call trace: [ 42.298025][ T6460] show_stack+0x2c/0x3c (C) [ 42.298045][ T6460] __dump_stack+0x30/0x40 [ 42.298059][ T6460] dump_stack_lvl+0xd8/0x12c [ 42.298071][ T6460] dump_stack+0x1c/0x28 [ 42.298083][ T6460] should_fail_ex+0x418/0x58c [ 42.298092][ T6460] should_failslab+0xc4/0x120 [ 42.298102][ T6460] __kmalloc_cache_noprof+0x94/0x5fc [ 42.298112][ T6460] alloc_workqueue_attrs_noprof+0x54/0x154 [ 42.298123][ T6460] __alloc_workqueue+0x16c/0x11a0 [ 42.298132][ T6460] alloc_workqueue_va+0x5c/0x138 [ 42.298142][ T6460] alloc_workqueue_noprof+0xe0/0x130 [ 42.298150][ T6460] hci_register_dev+0x268/0x8ac [ 42.298160][ T6460] vhci_create_device+0x328/0x624 [ 42.298171][ T6460] vhci_write+0x314/0x3d8 [ 42.298180][ T6460] vfs_write+0x51c/0xa0c [ 42.298189][ T6460] ksys_write+0x12c/0x228 [ 42.298197][ T6460] __arm64_sys_write+0x84/0x98 [ 42.298205][ T6460] invoke_syscall+0x98/0x244 [ 42.298218][ T6460] el0_svc_common+0xec/0x23c [ 42.298231][ T6460] do_el0_svc+0x4c/0x5c [ 42.298242][ T6460] el0_svc+0x60/0x1d8 [ 42.298251][ T6460] el0t_64_sync_handler+0x44/0x104 [ 42.298260][ T6460] el0t_64_sync+0x198/0x19c [ 42.305564][ T6460] Bluetooth: Can't register HCI device [ 42.352318][ T6464] ubi: mtd0 is already attached to ubi0 [ 42.506662][ T6475] : error -22: which=0x9d0000, count=1, error_idx=0, request_fd=-1 [ 42.506684][ T6475] , name=RxSense Present, id/size=0xa00902/3 [ 42.574163][ T12] IPVS: starting estimator thread 0... [ 42.662224][ T6484] IPVS: using max 54 ests per chain, 129600 per kthread [ 42.823321][ T6498] ubi: mtd0 is already attached to ubi0 [ 42.996441][ T6527] __nla_validate_parse: 5 callbacks suppressed [ 42.996450][ T6527] netlink: 52 bytes leftover after parsing attributes in process `syz.3.657'. [ 43.288070][ T6561] netlink: 52 bytes leftover after parsing attributes in process `syz.2.668'. [ 43.582363][ T6606] netlink: 52 bytes leftover after parsing attributes in process `syz.2.679'. [ 43.617406][ T6614] overlayfs: missing 'lowerdir' [ 43.679755][ T6623] loop2: detected capacity change from 0 to 512 [ 43.685835][ T6623] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.718710][ T6623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.783106][ T6639] netlink: 24 bytes leftover after parsing attributes in process `syz.4.694'. [ 43.830290][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.862334][ T6647] overlayfs: missing 'lowerdir' [ 43.876391][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.700'. [ 43.927479][ T6658] rxe_eth0 speed is unknown, defaulting to 1000 [ 43.970811][ T6662] netlink: 'syz.3.703': attribute type 7 has an invalid length. [ 43.971096][ T6662] netlink: 'syz.3.703': attribute type 5 has an invalid length. [ 43.971110][ T6662] netlink: 17 bytes leftover after parsing attributes in process `syz.3.703'. [ 44.070241][ T6668] FAULT_INJECTION: forcing a failure. [ 44.070241][ T6668] name failslab, interval 1, probability 0, space 0, times 0 [ 44.070260][ T6668] CPU: 0 UID: 0 PID: 6668 Comm: syz.3.708 Not tainted syzkaller #0 PREEMPT [ 44.070273][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 44.070289][ T6668] Call trace: [ 44.070293][ T6668] show_stack+0x2c/0x3c (C) [ 44.070316][ T6668] __dump_stack+0x30/0x40 [ 44.070329][ T6668] dump_stack_lvl+0xd8/0x12c [ 44.070341][ T6668] dump_stack+0x1c/0x28 [ 44.070353][ T6668] should_fail_ex+0x418/0x58c [ 44.070363][ T6668] should_failslab+0xc4/0x120 [ 44.070372][ T6668] __kmalloc_noprof+0x108/0x6c8 [ 44.070382][ T6668] handler_new_ref+0x1dc/0x804 [ 44.070392][ T6668] v4l2_ctrl_new+0xe6c/0x1238 [ 44.070401][ T6668] v4l2_ctrl_new_std+0x1fc/0x2a0 [ 44.070410][ T6668] vicodec_open+0x228/0x9a0 [ 44.070423][ T6668] v4l2_open+0x198/0x338 [ 44.070432][ T6668] chrdev_open+0x398/0x3e8 [ 44.070444][ T6668] do_dentry_open+0x5c4/0xfbc [ 44.070456][ T6668] vfs_open+0x44/0x2dc [ 44.070467][ T6668] path_openat+0x1084/0x18f0 [ 44.070478][ T6668] do_file_open+0x1c8/0x2e8 [ 44.070488][ T6668] do_sys_openat2+0x114/0x1e8 [ 44.070500][ T6668] do_sys_open+0xb0/0xe0 [ 44.070512][ T6668] __arm64_sys_openat+0xa8/0xc4 [ 44.070524][ T6668] invoke_syscall+0x98/0x244 [ 44.070537][ T6668] el0_svc_common+0xec/0x23c [ 44.070549][ T6668] do_el0_svc+0x4c/0x5c [ 44.070561][ T6668] el0_svc+0x60/0x1d8 [ 44.070570][ T6668] el0t_64_sync_handler+0x44/0x104 [ 44.070578][ T6668] el0t_64_sync+0x198/0x19c [ 44.114617][ T6670] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 44.201850][ T6678] FAULT_INJECTION: forcing a failure. [ 44.201850][ T6678] name fail_futex, interval 1, probability 0, space 0, times 0 [ 44.203224][ T6678] CPU: 1 UID: 0 PID: 6678 Comm: syz.4.713 Not tainted syzkaller #0 PREEMPT [ 44.203245][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 44.203259][ T6678] Call trace: [ 44.203262][ T6678] show_stack+0x2c/0x3c (C) [ 44.203281][ T6678] __dump_stack+0x30/0x40 [ 44.203293][ T6678] dump_stack_lvl+0xd8/0x12c [ 44.203305][ T6678] dump_stack+0x1c/0x28 [ 44.203316][ T6678] should_fail_ex+0x418/0x58c [ 44.203325][ T6678] should_fail+0x14/0x24 [ 44.203333][ T6678] get_futex_key+0x1ec/0x12b0 [ 44.203344][ T6678] futex_wait_setup+0x58/0x674 [ 44.203356][ T6678] __futex_wait+0x108/0x25c [ 44.203368][ T6678] futex_wait+0x108/0x2c0 [ 44.203379][ T6678] do_futex+0x320/0x378 [ 44.203389][ T6678] __arm64_sys_futex+0x2e4/0x418 [ 44.203400][ T6678] invoke_syscall+0x98/0x244 [ 44.203413][ T6678] el0_svc_common+0xec/0x23c [ 44.203424][ T6678] do_el0_svc+0x4c/0x5c [ 44.203436][ T6678] el0_svc+0x60/0x1d8 [ 44.203445][ T6678] el0t_64_sync_handler+0x44/0x104 [ 44.203453][ T6678] el0t_64_sync+0x198/0x19c [ 44.478271][ T6715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.478988][ T6715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.510136][ T6718] loop5: detected capacity change from 0 to 128 [ 44.515563][ T6718] EXT4-fs: Ignoring removed nobh option [ 44.527316][ T6718] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.561213][ T5081] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.630794][ T6738] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 44.790445][ T6772] overlayfs: missing 'workdir' [ 44.822422][ T6776] binder: 6775:6776 tried to acquire reference to desc 0, got 1 instead [ 44.893805][ T6792] net_ratelimit: 485 callbacks suppressed [ 44.916240][ T6792] rxe_eth0 speed is unknown, defaulting to 1000 [ 44.936803][ T6796] netlink: 17 bytes leftover after parsing attributes in process `syz.2.754'. [ 45.064867][ T10] binder: release 6775:6776 transaction 5 out, still active [ 45.096437][ T10] binder: send failed reply for transaction 5, target dead [ 45.140339][ T6811] overlayfs: missing 'workdir' [ 45.362443][ T46] IPVS: starting estimator thread 0... [ 45.461763][ T6827] IPVS: using max 60 ests per chain, 144000 per kthread [ 45.596868][ T6852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.597221][ T6852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.635093][ T6856] rxe_eth0 speed is unknown, defaulting to 1000 [ 45.701189][ T6856] validate_nla: 2 callbacks suppressed [ 45.701201][ T6856] netlink: 'syz.2.782': attribute type 7 has an invalid length. [ 45.701213][ T6856] netlink: 'syz.2.782': attribute type 5 has an invalid length. [ 45.701222][ T6856] netlink: 17 bytes leftover after parsing attributes in process `syz.2.782'. [ 45.719670][ T6864] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 45.786128][ T4709] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 45.786140][ T4709] CPU: 0 UID: 0 PID: 4709 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT [ 45.786151][ T4709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 45.786157][ T4709] Workqueue: hci2 hci_rx_work [ 45.786180][ T4709] Call trace: [ 45.786183][ T4709] show_stack+0x2c/0x3c (C) [ 45.786200][ T4709] __dump_stack+0x30/0x40 [ 45.786214][ T4709] dump_stack_lvl+0xd8/0x12c [ 45.786226][ T4709] dump_stack+0x1c/0x28 [ 45.786237][ T4709] sysfs_warn_dup+0x9c/0xb8 [ 45.786247][ T4709] sysfs_create_dir_ns+0x190/0x1f4 [ 45.786255][ T4709] kobject_add_internal+0x290/0x6f0 [ 45.786266][ T4709] kobject_add_varg+0x9c/0xe8 [ 45.786275][ T4709] kobject_add+0x110/0x1c8 [ 45.786284][ T4709] device_add+0x394/0x9e0 [ 45.786295][ T4709] hci_conn_add_sysfs+0xbc/0x1e8 [ 45.786306][ T4709] le_conn_complete_evt+0xc84/0x122c [ 45.786316][ T4709] hci_le_conn_complete_evt+0x114/0x3d8 [ 45.786326][ T4709] hci_le_meta_evt+0x2b0/0x46c [ 45.786337][ T4709] hci_event_packet+0x4c0/0x9c8 [ 45.786347][ T4709] hci_rx_work+0x2f4/0xd78 [ 45.786355][ T4709] process_scheduled_works+0x91c/0x1250 [ 45.786367][ T4709] worker_thread+0x798/0xbd0 [ 45.786377][ T4709] kthread+0x304/0x3d4 [ 45.786386][ T4709] ret_from_fork+0x10/0x20 [ 45.786400][ T4709] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 45.786414][ T4709] Bluetooth: hci2: failed to register connection device [ 45.797623][ T6873] bridge1: entered promiscuous mode [ 46.136615][ T6889] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.153670][ T6896] netlink: 'syz.5.797': attribute type 7 has an invalid length. [ 46.153683][ T6896] netlink: 'syz.5.797': attribute type 5 has an invalid length. [ 46.153693][ T6896] netlink: 17 bytes leftover after parsing attributes in process `syz.5.797'. [ 46.174677][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 46.480991][ T6914] netlink: 40 bytes leftover after parsing attributes in process `syz.1.810'. [ 47.085697][ T6990] netlink: 'syz.4.846': attribute type 4 has an invalid length. [ 47.190176][ T7001] FAULT_INJECTION: forcing a failure. [ 47.190176][ T7001] name failslab, interval 1, probability 0, space 0, times 0 [ 47.190195][ T7001] CPU: 1 UID: 0 PID: 7001 Comm: syz.5.851 Not tainted syzkaller #0 PREEMPT [ 47.190206][ T7001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 47.190220][ T7001] Call trace: [ 47.190223][ T7001] show_stack+0x2c/0x3c (C) [ 47.190245][ T7001] __dump_stack+0x30/0x40 [ 47.190257][ T7001] dump_stack_lvl+0xd8/0x12c [ 47.190269][ T7001] dump_stack+0x1c/0x28 [ 47.190281][ T7001] should_fail_ex+0x418/0x58c [ 47.190290][ T7001] should_failslab+0xc4/0x120 [ 47.190299][ T7001] kmem_cache_alloc_noprof+0x94/0x5d4 [ 47.190309][ T7001] __kernfs_new_node+0xf0/0x7d8 [ 47.190321][ T7001] kernfs_new_node+0xe8/0x130 [ 47.190331][ T7001] __kernfs_create_file+0x60/0x2e0 [ 47.190343][ T7001] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 47.190355][ T7001] internal_create_group+0x550/0xb30 [ 47.190364][ T7001] internal_create_groups+0x64/0x138 [ 47.190372][ T7001] sysfs_create_groups+0x2c/0x3c [ 47.190381][ T7001] device_add_attrs+0xdc/0x4e4 [ 47.190392][ T7001] device_add+0x420/0x9e0 [ 47.190401][ T7001] netdev_register_kobject+0x184/0x328 [ 47.190415][ T7001] register_netdevice+0xd74/0x14c0 [ 47.190424][ T7001] register_netdev+0x4c/0x68 [ 47.190432][ T7001] gether_register_netdev+0x84/0x174 [ 47.190446][ T7001] ecm_bind+0x518/0x8d0 [ 47.190455][ T7001] usb_add_function+0x1d0/0x6bc [ 47.190467][ T7001] configfs_composite_bind+0xb4c/0x10b8 [ 47.190478][ T7001] gadget_bind_driver+0x274/0x834 [ 47.190489][ T7001] really_probe+0x29c/0x800 [ 47.190497][ T7001] __driver_probe_device+0x1e0/0x350 [ 47.190506][ T7001] driver_probe_device+0x6c/0x19c [ 47.190515][ T7001] __driver_attach+0x168/0x384 [ 47.190523][ T7001] bus_for_each_dev+0x128/0x1b4 [ 47.190535][ T7001] driver_attach+0x50/0x60 [ 47.190543][ T7001] bus_add_driver+0x208/0x500 [ 47.190555][ T7001] driver_register+0x220/0x310 [ 47.190564][ T7001] usb_gadget_register_driver_owner+0xf0/0x25c [ 47.190576][ T7001] gadget_dev_desc_UDC_store+0x164/0x22c [ 47.190585][ T7001] configfs_write_iter+0x27c/0x354 [ 47.190594][ T7001] vfs_write+0x51c/0xa0c [ 47.190602][ T7001] ksys_write+0x12c/0x228 [ 47.190610][ T7001] __arm64_sys_write+0x84/0x98 [ 47.190618][ T7001] invoke_syscall+0x98/0x244 [ 47.190631][ T7001] el0_svc_common+0xec/0x23c [ 47.190642][ T7001] do_el0_svc+0x4c/0x5c [ 47.190654][ T7001] el0_svc+0x60/0x1d8 [ 47.190663][ T7001] el0t_64_sync_handler+0x44/0x104 [ 47.190671][ T7001] el0t_64_sync+0x198/0x19c [ 47.194641][ T7001] udc dummy_udc.0: failed to start g1: -12 [ 47.194649][ T7001] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -12 [ 47.195595][ T7001] UDC core: g1: couldn't find an available UDC or it's busy [ 47.302555][ T7011] ubi: mtd0 is already attached to ubi0 [ 47.597043][ T7042] ubi: mtd0 is already attached to ubi0 [ 47.698407][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 47.698415][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT [ 47.698425][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 47.698430][ T51] Workqueue: hci1 hci_rx_work [ 47.698451][ T51] Call trace: [ 47.698454][ T51] show_stack+0x2c/0x3c (C) [ 47.698469][ T51] __dump_stack+0x30/0x40 [ 47.698482][ T51] dump_stack_lvl+0xd8/0x12c [ 47.698494][ T51] dump_stack+0x1c/0x28 [ 47.698505][ T51] sysfs_warn_dup+0x9c/0xb8 [ 47.698515][ T51] sysfs_create_dir_ns+0x190/0x1f4 [ 47.698523][ T51] kobject_add_internal+0x290/0x6f0 [ 47.698534][ T51] kobject_add_varg+0x9c/0xe8 [ 47.698544][ T51] kobject_add+0x110/0x1c8 [ 47.698553][ T51] device_add+0x394/0x9e0 [ 47.698564][ T51] hci_conn_add_sysfs+0xbc/0x1e8 [ 47.698575][ T51] le_conn_complete_evt+0xc84/0x122c [ 47.698585][ T51] hci_le_conn_complete_evt+0x114/0x3d8 [ 47.698594][ T51] hci_le_meta_evt+0x2b0/0x46c [ 47.698606][ T51] hci_event_packet+0x4c0/0x9c8 [ 47.698616][ T51] hci_rx_work+0x2f4/0xd78 [ 47.698624][ T51] process_scheduled_works+0x91c/0x1250 [ 47.698636][ T51] worker_thread+0x798/0xbd0 [ 47.698646][ T51] kthread+0x304/0x3d4 [ 47.698656][ T51] ret_from_fork+0x10/0x20 [ 47.698669][ T51] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 47.698682][ T51] Bluetooth: hci1: failed to register connection device [ 48.251466][ T4709] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 48.342989][ T7072] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 48.344430][ T7072] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 48.517866][ T2545] Bluetooth: hci5: Frame reassembly failed (-84) [ 48.541501][ T46] IPVS: starting estimator thread 0... [ 48.631441][ T7096] IPVS: using max 59 ests per chain, 141600 per kthread [ 48.714063][ T7109] __nla_validate_parse: 3 callbacks suppressed [ 48.714074][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.900'. [ 48.816871][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.904'. [ 48.816887][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.904'. [ 48.849956][ T7132] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 48.854102][ T1157] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 48.874995][ T7133] fido_id[7133]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 48.907579][ T7136] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.051017][ T7142] siw: device registration error -23 [ 49.353549][ T7161] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.624025][ T4709] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 49.715753][ T7194] kcov: kcov_start: t = ffff0000c7230000, size = 524288, area = ffff80009f2d4000 [ 49.717954][ T7188] gadget gadget.0: bus: 'gadget': __driver_probe_device: matched device with driver configfs-gadget.g1 [ 49.717986][ T7188] gadget gadget.0: bus: 'gadget': really_probe: probing driver configfs-gadget.g1 with device [ 49.718015][ T7188] configfs-gadget.g1 gadget.0: no default pinctrl state [ 49.718074][ T7188] udc dummy_udc.0: binding gadget driver [g1] [ 49.718106][ T7188] configfs-gadget.g1 gadget.0: adding 'cdc_ethernet'/000000000b8eae2a to config 'c'/0000000002cb25d2 [ 49.718312][ T7188] ------------[ cut here ]------------ [ 49.718317][ T7188] kernel BUG at net/core/dev.c:11443! [ 49.718411][ T7188] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP [ 49.732920][ T7188] Modules linked in: [ 49.733781][ T7188] CPU: 1 UID: 0 PID: 7188 Comm: syz.4.936 Not tainted syzkaller #0 PREEMPT [ 49.735678][ T7188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 49.737891][ T7188] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 49.739444][ T7188] pc : register_netdevice+0x145c/0x14c0 [ 49.740537][ T7188] lr : register_netdevice+0x145c/0x14c0 [ 49.741617][ T7188] sp : ffff80009ab273a0 [ 49.742439][ T7188] x29: ffff80009ab27480 x28: dfff800000000000 x27: dfff800000000000 [ 49.744063][ T7188] x26: ffff700013564e7c x25: ffff0000ca3e4c00 x24: ffff80008f7604c0 [ 49.745917][ T7188] x23: 1fffe0001eacb8f1 x22: 0000000000001049 x21: 0000000000000003 [ 49.747784][ T7188] x20: ffff0000f565c788 x19: ffff0000f565c000 x18: 1fffe000349fbc28 [ 49.749641][ T7188] x17: 0000000000000003 x16: ffff800089797000 x15: 0000000000000001 [ 49.751413][ T7188] x14: 00000000009aa876 x13: 0000000000000001 x12: 0000000000000000 [ 49.753110][ T7188] x11: 0000000000000000 x10: 0000000000080000 x9 : 000000000000390c [ 49.754816][ T7188] x8 : ffff80009eed3000 x7 : ffff800084c8f2b0 x6 : 0000000000000000 [ 49.756529][ T7188] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800084c5214c [ 49.758333][ T7188] x2 : 0000000000000003 x1 : ffff0000c6d78000 x0 : 0000000000000001 [ 49.760089][ T7188] dump_backtrace(regs = 0000000065d9115c tsk = 0000000000000000) [ 49.761802][ T7188] Call trace: [ 49.762537][ T7188] register_netdevice+0x145c/0x14c0 (P) [ 49.763749][ T7188] register_netdev+0x4c/0x68 [ 49.764749][ T7188] gether_register_netdev+0x84/0x174 [ 49.765873][ T7188] ecm_bind+0x518/0x8d0 [ 49.766791][ T7188] usb_add_function+0x1d0/0x6bc [ 49.767881][ T7188] configfs_composite_bind+0xb4c/0x10b8 [ 49.769056][ T7188] gadget_bind_driver+0x274/0x834 [ 49.770150][ T7188] really_probe+0x29c/0x800 [ 49.771123][ T7188] __driver_probe_device+0x1e0/0x350 [ 49.772281][ T7188] driver_probe_device+0x6c/0x19c [ 49.773261][ T7188] __driver_attach+0x168/0x384 [ 49.774237][ T7188] bus_for_each_dev+0x128/0x1b4 [ 49.775244][ T7188] driver_attach+0x50/0x60 [ 49.776129][ T7188] bus_add_driver+0x208/0x500 [ 49.777121][ T7188] driver_register+0x220/0x310 [ 49.778171][ T7188] usb_gadget_register_driver_owner+0xf0/0x25c [ 49.779530][ T7188] gadget_dev_desc_UDC_store+0x164/0x22c [ 49.780748][ T7188] configfs_write_iter+0x27c/0x354 [ 49.781873][ T7188] vfs_write+0x51c/0xa0c [ 49.782811][ T7188] ksys_write+0x12c/0x228 [ 49.783747][ T7188] __arm64_sys_write+0x84/0x98 [ 49.784710][ T7188] invoke_syscall+0x98/0x244 [ 49.785679][ T7188] el0_svc_common+0xec/0x23c [ 49.786677][ T7188] do_el0_svc+0x4c/0x5c [ 49.787529][ T7188] el0_svc+0x60/0x1d8 [ 49.788356][ T7188] el0t_64_sync_handler+0x44/0x104 [ 49.789399][ T7188] el0t_64_sync+0x198/0x19c [ 49.790316][ T7188] Code: 17ffff1b 96e7a2e9 d4210000 96e7a2e7 (d4210000) [ 49.791703][ T7188] ---[ end trace 0000000000000000 ]--- [ 49.794455][ T46] kernfs 1006: removing [ 49.794483][ T46] kernfs 1007: removing [ 49.794497][ T46] kernfs 1008: removing [ 49.794509][ T46] kernfs 1009: removing [ 49.794521][ T46] kernfs 1010: removing [ 49.794532][ T46] kernfs 1011: removing [ 49.794543][ T46] kernfs 1012: removing [ 49.794553][ T46] kernfs 1013: removing [ 49.794563][ T46] kernfs 1014: removing [ 49.794573][ T46] kernfs 1015: removing [ 49.794584][ T46] kernfs 1016: removing [ 49.794594][ T46] kernfs 1017: removing [ 49.794604][ T46] kernfs 1018: removing [ 49.794613][ T46] kernfs 1019: removing [ 49.794624][ T46] kernfs 1020: removing [ 49.794634][ T46] kernfs 1021: removing [ 49.794644][ T46] kernfs 1022: removing [ 49.794736][ T46] kernfs 1023: removing [ 49.794756][ T46] kernfs gids: removing [ 49.794772][ T46] kernfs 0: removing [ 49.794783][ T46] kernfs pkeys: removing [ 49.794800][ T46] kernfs state: removing [ 49.794811][ T46] kernfs lid: removing [ 49.794822][ T46] kernfs lid_mask_count: removing [ 49.794833][ T46] kernfs sm_lid: removing [ 49.794843][ T46] kernfs sm_sl: removing [ 49.794853][ T46] kernfs cap_mask: removing [ 49.794863][ T46] kernfs rate: removing [ 49.794873][ T46] kernfs phys_state: removing [ 49.794883][ T46] kernfs link_layer: removing [ 49.794893][ T46] kernfs 1: removing [ 49.794904][ T46] kobject: '1' (00000000b5d613bc): kobject_cleanup, parent 0000000000000000 [ 49.794913][ T46] kobject: '1' (00000000b5d613bc): calling ktype release [ 49.794965][ T46] kobject: '1': free name [ 49.794977][ T46] kobject: 'ports' (000000007a40333b): kobject_cleanup, parent 000000002318e0af [ 49.794985][ T46] kobject: 'ports' (000000007a40333b): auto cleanup kobject_del [ 49.794992][ T46] kernfs ports: removing [ 49.795003][ T46] kobject: 'ports' (000000007a40333b): calling ktype release [ 49.795009][ T46] kobject: (000000007a40333b): dynamic_kobj_release [ 49.795019][ T46] kobject: 'ports': free name [ 49.795032][ T46] kernfs runtime_status: removing [ 49.795044][ T46] kernfs control: removing [ 49.795054][ T46] kernfs runtime_suspended_time: removing [ 49.795064][ T46] kernfs runtime_active_time: removing [ 49.795074][ T46] kernfs autosuspend_delay_ms: removing [ 49.795088][ T46] kernfs power: removing [ 49.795109][ T46] kernfs subsystem: removing [ 49.795122][ T46] kernfs rxe0: removing [ 49.795135][ T46] kernfs uevent: removing [ 49.795147][ T46] kernfs node_type: removing [ 49.795157][ T46] kernfs node_guid: removing [ 49.795167][ T46] kernfs sys_image_guid: removing [ 49.795177][ T46] kernfs fw_ver: removing [ 49.795187][ T46] kernfs node_desc: removing [ 49.795198][ T46] kernfs parent: removing [ 49.795211][ T46] PM: Removing info for No Bus:rxe0 [ 49.795224][ T46] kobject: 'rxe0' (000000002318e0af): kobject_uevent_env [ 49.795235][ T46] kobject: 'rxe0' (000000002318e0af): fill_kobj_path: path = '/devices/virtual/infiniband/rxe0' [ 49.795272][ T46] kernfs rxe0: removing [ 49.795286][ T46] kobject: 'rxe0' (000000002318e0af): kobject_cleanup, parent 0000000000000000 [ 49.795294][ T46] kobject: 'rxe0' (000000002318e0af): calling ktype release [ 49.795307][ T46] kobject: 'rxe0': free name [ 49.795322][ T46] kernfs 0: removing [ 49.795332][ T46] kernfs ndevs: removing [ 49.795343][ T46] kernfs 0: removing [ 49.795352][ T46] kernfs types: removing [ 49.795362][ T46] kernfs gid_attrs: removing [ 49.795372][ T46] kobject: 'gid_attrs' (000000005e24119f): kobject_cleanup, parent 0000000000000000 [ 49.795379][ T46] kobject: 'gid_attrs' (000000005e24119f): calling ktype release [ 49.795392][ T46] kobject: 'gid_attrs': free name [ 49.795397][ T46] kernfs 0: removing [ 49.795407][ T46] kernfs gids: removing [ 49.795416][ T46] kernfs state: removing [ 49.795426][ T46] kernfs lid: removing [ 49.795436][ T46] kernfs lid_mask_count: removing [ 49.795446][ T46] kernfs sm_lid: removing [ 49.795456][ T46] kernfs sm_sl: removing [ 49.795466][ T46] kernfs cap_mask: removing [ 49.795522][ T46] kernfs rate: removing [ 49.795539][ T46] kernfs phys_state: removing [ 49.795551][ T46] kernfs link_layer: removing [ 49.795562][ T46] kernfs 1: removing [ 49.795573][ T46] kobject: '1' (000000005f33eacd): kobject_cleanup, parent 0000000000000000 [ 49.795581][ T46] kobject: '1' (000000005f33eacd): calling ktype release [ 49.795593][ T46] kobject: '1': free name [ 49.795600][ T46] kobject: 'ports' (0000000018030c17): kobject_cleanup, parent 0000000059de50d3 [ 49.795607][ T46] kobject: 'ports' (0000000018030c17): auto cleanup kobject_del [ 49.795614][ T46] kernfs ports: removing [ 49.795623][ T46] kobject: 'ports' (0000000018030c17): calling ktype release [ 49.795629][ T46] kobject: (0000000018030c17): dynamic_kobj_release [ 49.795636][ T46] kobject: 'ports': free name [ 49.795646][ T46] kernfs runtime_status: removing [ 49.795657][ T46] kernfs control: removing [ 49.795667][ T46] kernfs runtime_suspended_time: removing [ 49.795677][ T46] kernfs runtime_active_time: removing [ 49.795687][ T46] kernfs autosuspend_delay_ms: removing [ 49.795700][ T46] kernfs power: removing [ 49.795712][ T46] kernfs subsystem: removing [ 49.795723][ T46] kernfs syz1: removing [ 49.795735][ T46] kernfs uevent: removing [ 49.795746][ T46] kernfs node_type: removing [ 49.795756][ T46] kernfs node_guid: removing [ 49.795766][ T46] kernfs sys_image_guid: removing [ 49.795775][ T46] kernfs fw_ver: removing [ 49.795785][ T46] kernfs node_desc: removing [ 49.795795][ T46] PM: Removing info for No Bus:syz1 [ 49.795804][ T46] kobject: 'syz1' (0000000059de50d3): kobject_uevent_env [ 49.795815][ T46] kobject: 'syz1' (0000000059de50d3): fill_kobj_path: path = '/devices/virtual/infiniband/syz1' [ 49.795843][ T46] kernfs syz1: removing [ 49.795859][ T46] kobject: 'syz1' (0000000059de50d3): kobject_cleanup, parent 0000000000000000 [ 49.795867][ T46] kobject: 'syz1' (0000000059de50d3): calling ktype release [ 49.795877][ T46] kobject: 'syz1': free name [ 49.797972][ T7196] kcov: kcov_start: t = ffff0000cac01d80, size = 524288, area = ffff80009cecb000 [ 49.798538][ T7196] setname: syz1, typename: hash:, family: inet, revision: 0 [ 49.798556][ T7196] try to load ip_set_hash: [ 49.798697][ T7197] async_waiting @ 7197 [ 49.798706][ T7197] async_continuing @ 7197 after 1 usec [ 49.809354][ T7196] kcov: kcov_task_exit: t = ffff0000cac01d80, kcov->t = ffff0000cac01d80 [ 49.819635][ T7199] kcov: kcov_start: t = ffff0000c8ed0000, size = 524288, area = ffff80009cecb000 [ 49.820325][ T7199] kcov: kcov_task_exit: t = ffff0000c8ed0000, kcov->t = ffff0000c8ed0000 [ 49.831183][ T7201] kcov: kcov_start: t = ffff0000f47f5880, size = 524288, area = ffff80009cecb000 [ 49.831717][ T7201] kcov: kcov_task_exit: t = ffff0000f47f5880, kcov->t = ffff0000f47f5880 [ 49.841835][ T7203] kcov: kcov_start: t = ffff0000c40cbb00, size = 524288, area = ffff80009cecb000 [ 49.841994][ T7203] sock 00000000ae50df2e [ 49.842007][ T7203] 00000000e017cf3e [ 49.842014][ T7203] 00000000e017cf3e [ 49.842032][ T7203] sk 00000000c35a3eb3 [ 49.842038][ T7203] sk 00000000c35a3eb3 [ 49.842720][ T7203] sk 00000000c35a3eb3 [ 49.842730][ T7203] dlc 00000000e017cf3e state 2 00:00:00:00:00:00 -> 12:aa:aa:aa:aa:aa channel 6 [ 49.842748][ T7203] 00:00:00:00:00:00 -> 12:aa:aa:aa:aa:aa [ 49.842755][ T7203] [ 49.842769][ T7203] sock 00000000c5a1d456 [ 49.842788][ T7203] chan 00000000a4e96899 [ 49.842810][ T7203] sk 00000000e61b82c1 [ 49.842818][ T7203] sk 00000000e61b82c1 [ 49.842829][ T7203] sk 00000000e61b82c1 [ 49.842837][ T7203] 00:00:00:00:00:00 -> 12:aa:aa:aa:aa:aa (type 0) psm 0x0003 mode 0x00 [ 49.842846][ T7203] 00:00:00:00:00:00 -> 12:aa:aa:aa:aa:aa [ 49.842853][ T7203] hci1 orig refcnt 16 [ 49.842912][ T7203] hci1: dst 12:aa:aa:aa:aa:aa [ 49.842931][ T7203] hci1: dst 12:aa:aa:aa:aa:aa handle 0x0f00 [ 49.842951][ T7203] hci1 orig refcnt 17 [ 49.842957][ T7203] hci1: conn 0000000092e15e7c [ 49.842972][ T7203] hcon 0000000092e15e7c orig refcnt 0 [ 49.842992][ T7203] hci1 hcon 0000000092e15e7c [ 49.843003][ T7203] hcon 0000000092e15e7c conn 00000000a642549e hchan 0000000074c00511 [ 49.843019][ T7203] conn 00000000a642549e, psm 0x03, dcid 0x0000 [ 49.843026][ T7203] chan 00000000a4e96899 orig refcnt 1 [ 49.843032][ T7203] hcon 0000000092e15e7c orig refcnt 1 [ 49.843039][ T7203] hcon 0000000092e15e7c orig refcnt 2 [ 49.843045][ T7203] chan 00000000a4e96899 BT_BOUND -> BT_CONNECT [ 49.843055][ T7203] chan 00000000a4e96899 state BT_CONNECT timeout 4000 [ 49.843063][ T7203] chan 00000000a4e96899 orig refcnt 2 [ 49.843071][ T7203] hci1 orig refcnt 19 [ 49.843078][ T7203] sk 00000000e61b82c1 [ 49.843089][ T7203] session 00000000ed4b1d3d sock 00000000c5a1d456 [ 49.843097][ T7203] dlc 00000000e017cf3e state 2 session 00000000ed4b1d3d channel 6 [ 49.843105][ T7203] 00000000e017cf3e [ 49.843110][ T7203] dlc 00000000e017cf3e session 00000000ed4b1d3d [ 49.843117][ T7203] session 00000000ed4b1d3d state 3 [ 49.843125][ T7203] dlc 00000000e017cf3e state 7 timeout 3000 [ 49.843144][ T2838] 00000000ed4b1d3d state 3 [ 49.843150][ T2838] session 00000000ed4b1d3d state 3 [ 49.843162][ T7203] sk 00000000c35a3eb3 [ 49.843199][ T4709] hci1: [ 49.843204][ T4709] hci1: entry 00000000546e1350 [ 49.843210][ T4709] cache 00000000b6ed8949, 12:aa:aa:aa:aa:aa [ 49.843217][ T4709] hci1: Opcode 0x0405 [ 49.843222][ T4709] hci1: opcode 0x0405 plen 13 [ 49.843234][ T4709] hci1: skb len 16 [ 49.843239][ T4709] hci1: length 1 [ 49.843260][ T4708] hci1 cmd_cnt 1 cmd queued 1 [ 49.843267][ T4708] hci1: skb 00000000934635c6 [ 49.843278][ T4708] hci1 type 1 len 16 [ 49.893761][ T7204] kcov: kcov_start: t = ffff0000c4cb9d80, size = 524288, area = ffff80009d6cd000 [ 49.893905][ T7204] sock 0000000009e405aa [ 49.893916][ T7204] 000000005acbf1b0 [ 49.893922][ T7204] 000000005acbf1b0 [ 49.893940][ T7204] sk 00000000f8b1d753 [ 49.893946][ T7204] sk 00000000f8b1d753 [ 49.894139][ T7204] sk 00000000f8b1d753 [ 49.894149][ T7204] dlc 000000005acbf1b0 state 2 00:00:00:00:00:00 -> 10:aa:aa:aa:aa:aa channel 2 [ 49.894163][ T7204] 00:00:00:00:00:00 -> 10:aa:aa:aa:aa:aa [ 49.894170][ T7204] [ 49.894179][ T7204] sock 000000000bdbf5a1 [ 49.894195][ T7204] chan 0000000094a147c2 [ 49.894210][ T7204] sk 00000000f1266090 [ 49.894217][ T7204] sk 00000000f1266090 [ 49.894228][ T7204] sk 00000000f1266090 [ 49.894235][ T7204] 00:00:00:00:00:00 -> 10:aa:aa:aa:aa:aa (type 0) psm 0x0003 mode 0x00 [ 49.894244][ T7204] 00:00:00:00:00:00 -> 10:aa:aa:aa:aa:aa [ 49.894251][ T7204] hci1 orig refcnt 18 [ 49.894259][ T7204] hcon 000000006bbf7fd1 orig refcnt 0 [ 49.894270][ T7204] conn 00000000769dfef1, psm 0x03, dcid 0x0000 [ 49.894277][ T7204] chan 0000000094a147c2 orig refcnt 1 [ 49.894283][ T7204] hcon 000000006bbf7fd1 orig refcnt 1 [ 49.894290][ T7204] hcon 000000006bbf7fd1 orig refcnt 2 [ 49.894296][ T7204] chan 0000000094a147c2 BT_BOUND -> BT_CONNECT [ 49.894305][ T7204] chan 0000000094a147c2 state BT_CONNECT timeout 4000 [ 49.894314][ T7204] chan 0000000094a147c2 orig refcnt 2 [ 49.894323][ T7204] hcon 000000006bbf7fd1 [ 49.894332][ T7204] conn 00000000769dfef1, code 0x02, ident 0x02, len 4 [ 49.894347][ T7204] code 0x02 [ 49.894353][ T7204] hci1 chan 00000000928786cb flags 0x0002 [ 49.894360][ T7204] hci1 nonfrag skb 00000000f424c9c7 len 16 [ 49.894368][ T7204] hci1: chan 00000000928786cb queued 1 [ 49.894390][ T4712] hci1 acl 2 sco 0 le 0 iso 0 [ 49.894410][ T7204] hci1 orig refcnt 19 [ 49.894417][ T7204] sk 00000000f1266090 [ 49.894427][ T7204] session 000000000f9a06c0 sock 000000000bdbf5a1 [ 49.894435][ T7204] dlc 000000005acbf1b0 state 2 session 000000000f9a06c0 channel 2 [ 49.894443][ T7204] 000000005acbf1b0 [ 49.894448][ T7204] dlc 000000005acbf1b0 session 000000000f9a06c0 [ 49.894454][ T7204] session 000000000f9a06c0 state 3 [ 49.894463][ T7204] dlc 000000005acbf1b0 state 7 timeout 3000 [ 49.894480][ T2838] 000000000f9a06c0 state 3 [ 49.894487][ T2838] session 000000000f9a06c0 state 3 [ 49.894492][ T2838] 00000000ed4b1d3d state 3 [ 49.894497][ T2838] session 00000000ed4b1d3d state 3 [ 49.894507][ T4712] hci1: type 0 [ 49.894512][ T4712] hci1: type 2 [ 49.894517][ T4712] hci1 [ 49.894520][ T4712] hci1 [ 49.894524][ T4712] hci1 [ 49.894528][ T4712] hci1 [ 49.894532][ T4712] hci1 [ 49.894536][ T4712] chan 00000000928786cb quote 2 [ 49.894542][ T4712] chan 00000000928786cb skb 00000000f424c9c7 len 16 priority 7 [ 49.894550][ T4712] hcon 000000006bbf7fd1 mode 0 [ 49.894556][ T4712] hci1 type 2 len 16 [ 49.894564][ T4712] hci1: type 0 [ 49.894569][ T4712] hci1: type 2 [ 49.894573][ T4712] hci1 [ 49.894577][ T4712] hci1 [ 49.894581][ T4712] hci1 [ 49.894585][ T4712] hci1 [ 49.894596][ T7204] sk 00000000f8b1d753 [ 49.944779][ T7205] kcov: kcov_start: t = ffff0000c4cbd880, size = 524288, area = ffff80009ead2000 [ 49.944798][ T7205] sock 00000000ae50df2e, sk 00000000c35a3eb3 [ 49.944809][ T7205] sk 00000000c35a3eb3 state 5 socket 00000000ae50df2e [ 49.944817][ T7205] dlc 00000000e017cf3e state 7 dlci 12 err 0 [ 49.944826][ T7205] dlc 00000000e017cf3e state 7 dlci 12 err 0 session 00000000ed4b1d3d [ 49.944835][ T7205] dlc 00000000e017cf3e state 7 [ 49.944845][ T7205] dlc 00000000e017cf3e state 9 err 0 [ 49.944891][ T7205] dlc 00000000e017cf3e refcnt 2 session 00000000ed4b1d3d [ 49.944899][ T7205] session 00000000ed4b1d3d state 3 timeout 200 [ 50.411632][ C0] net_ratelimit: 295 callbacks suppressed [ 50.411646][ C0] ipv6_addr_label(addr=fc00:0000:0000:0000:0000:0000:0000:0001, type=0, ifindex=0) => 00000005 [ 50.411666][ C0] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=1) => 00000000 [ 50.411678][ C0] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:0000:000a, type=0, ifindex=1) => 00000001 [ 50.411691][ C0] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:0000:000e, type=0, ifindex=2) => 00000001 [ 50.411703][ C0] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:ac14:140d, type=0, ifindex=3) => 00000001 [ 50.411713][ C0] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:ac14:140c, type=0, ifindex=3) => 00000001 [ 50.411723][ C0] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:ac14:14aa, type=0, ifindex=3) => 00000001 [ 50.411733][ C0] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:ac14:140b, type=0, ifindex=3) => 00000001 [ 50.411744][ C0] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:ac14:140f, type=0, ifindex=3) => 00000001 [ 50.411754][ C0] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:ac14:140e, type=0, ifindex=3) => 00000001 [ 50.411862][ C0] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 50.571391][ T4712] Bluetooth: hci5: command 0x1003 tx timeout [ 50.571404][ T4712] hci5: err 0x6e [ 50.571449][ T51] hci5: end: err -110 [ 50.571455][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 50.571476][ T51] hdev hci5 event 8 [ 50.571482][ T51] hdev 000000006b68c14b [ 50.571488][ T51] hdev 000000006b68c14b tty 00000000d4e9f0c4 [ 50.571562][ T7090] hci5: Updating devcoredump state from IDLE to IDLE. [ 50.571573][ T7090] hci5: err 0x13 [ 50.571589][ T7090] hci5 000000006b68c14b [ 50.571596][ T7090] hci5: [ 50.674939][ T7203] sock 00000000ae50df2e, sk 00000000c35a3eb3 [ 50.674953][ T7203] sock 00000000ae50df2e, sk 00000000c35a3eb3 [ 50.674971][ T7203] sk 00000000c35a3eb3 state 9 refcnt 2 [ 50.674984][ T7203] sk 00000000c35a3eb3 dlc 00000000e017cf3e [ 50.674995][ T7203] 00000000e017cf3e [ 50.675086][ T7203] kcov: kcov_task_exit: t = ffff0000c40cbb00, kcov->t = ffff0000c40cbb00 [ 50.675835][ T7204] sock 0000000009e405aa, sk 00000000f8b1d753 [ 50.675845][ T7204] sock 0000000009e405aa, sk 00000000f8b1d753 [ 50.675857][ T7204] sk 00000000f8b1d753 state 5 socket 0000000009e405aa [ 50.675866][ T7204] dlc 000000005acbf1b0 state 7 dlci 4 err 0 [ 50.675875][ T7204] dlc 000000005acbf1b0 state 7 dlci 4 err 0 session 000000000f9a06c0 [ 50.675884][ T7204] dlc 000000005acbf1b0 state 7 [ 50.675893][ T7204] dlc 000000005acbf1b0 state 9 err 0 [ 50.675902][ T7204] dlc 000000005acbf1b0 refcnt 2 session 000000000f9a06c0 [ 50.675909][ T7204] session 000000000f9a06c0 state 3 timeout 200 [ 50.675923][ T7204] sk 00000000f8b1d753 state 9 refcnt 2 [ 50.675929][ T7204] sk 00000000f8b1d753 dlc 000000005acbf1b0 [ 50.675936][ T7204] 000000005acbf1b0 [ 50.675992][ T7204] kcov: kcov_task_exit: t = ffff0000c4cb9d80, kcov->t = ffff0000c4cb9d80 [ 50.676081][ T7205] kcov: kcov_task_exit: t = ffff0000c4cbd880, kcov->t = ffff0000c4cbd880 [ 50.677387][ T7188] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 50.991150][ T7188] SMP: stopping secondary CPUs [ 50.992062][ T7188] Kernel Offset: disabled [ 50.993012][ T7188] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 50.994417][ T7188] Memory Limit: none [ 51.724148][ T7188] Rebooting in 86400 seconds..