last executing test programs: 5.69645366s ago: executing program 3 (id=188): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x345) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x6000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000001c0)={0x1, 0x0, 0x7, &(0x7f0000000200)={0x0, "f4e1a230b44f44eaa65e405b747aa95df8c02c12eb4eaf00"}}) fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200a7a) sched_setscheduler(r3, 0x2, &(0x7f0000000300)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019380)=0x410000002) syz_open_procfs(0x0, &(0x7f00000193c0)='net/tcp6\x00') bind$bt_hci(0xffffffffffffffff, 0x0, 0x19a8b62a0f9f6146) mount(0x0, 0x0, 0x0, 0x100054, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000019400), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000019440)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2'}, 0x5b) mount(&(0x7f00000194c0)=@filename='mtd0\x00', &(0x7f0000019500)='./file0\x00', 0x0, 0x800040, 0x0) chdir(&(0x7f0000019580)='./file0\x00') creat(&(0x7f00000195c0)='./file0\x00', 0x40) mkdirat(r0, &(0x7f0000019600)='./proc\x00', 0x1ff) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 5.059289973s ago: executing program 3 (id=192): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001500)={'wlan1\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000016c0)="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", 0x219}], 0x1}}], 0x1, 0x8010) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000015c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 4.960001183s ago: executing program 3 (id=194): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x20004bb, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000d00)=""/4112) 4.867734703s ago: executing program 4 (id=196): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) 4.771728902s ago: executing program 4 (id=197): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000140)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x15000000}}}}}, 0x0) 4.639134306s ago: executing program 4 (id=198): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da20"], 0x0) syz_open_dev$evdev(&(0x7f0000000640), 0x40, 0xa40c0) 2.89828676s ago: executing program 1 (id=205): r0 = add_key$keyring(&(0x7f0000000580), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=@filename='mtd0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') symlinkat(&(0x7f0000000500)='.\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000001d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001d80), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001dc0)={r3, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000001e40)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000001ec0), &(0x7f0000001f00)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) renameat2(r2, &(0x7f00000006c0)='./file7/file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x2) syz_open_dev$dri(&(0x7f0000000080), 0xabd7, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000380)={0x28, 0x0, 0x2711}, 0x10) r5 = semget$private(0x0, 0x5, 0x0) semctl$GETVAL(r5, 0x0, 0xc, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) 2.69562637s ago: executing program 2 (id=207): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x1c, &(0x7f0000006d00)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.664110724s ago: executing program 1 (id=208): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x2b, 0x80801, 0x1) pselect6(0x40, &(0x7f0000000380)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000440)={0x0, 0x3938700}, 0x0) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000c00)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20040804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 2.609433039s ago: executing program 2 (id=209): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000140)=@filename='mtd0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xfffffee2) ioctl$TCSBRK(r1, 0x5409, 0x5) ftruncate(r1, 0xb) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r4, &(0x7f00000008c0)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000198c0)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000380)={0x1, 0x0, 0x1, 0x8, 0x7, 0xb41, 0x10000}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r5, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000680)={0xa, 0x4e20, 0x100060, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) pipe2$9p(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r6, 0x0, r7, 0x0, 0x7ffff000, 0x8) lseek(r7, 0xc1, 0x0) 2.569122833s ago: executing program 3 (id=210): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000200)="662e0f1f84", 0x5) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x7, 0x12, r1, 0x0) mprotect(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000008c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 2.491067781s ago: executing program 3 (id=211): socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@grpquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@discard}, {@dioread_nolock}, {@nodiscard}]}, 0x3, 0x49e, &(0x7f0000001040)="$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") ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000001500)={0x8, 0xffffe1aa, 0x7ff, 0x1, 0x9}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000640), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000006c0)) setpgid(r1, r1) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000700)=@usbdevfs_driver={0xffffffff, 0x9, 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSLCKTRMIOS(r6, 0x80047437, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000f40)='./mnt\x00', &(0x7f0000000f80)='nfs\x00', 0x0, &(0x7f0000000fc0)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000800)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b49cb0b1a4bbff03a8b3db280000000000000079103000000000003b0a00ff000000009500740000000000"], &(0x7f0000000940)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 2.393890151s ago: executing program 1 (id=212): syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) arch_prctl$ARCH_GET_CPUID(0x1011) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1, 0x1000f4) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='offline', 0x7) 2.136420826s ago: executing program 4 (id=214): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000200)={0xfc, {"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", 0x1000}}, 0x1006) 1.449640745s ago: executing program 3 (id=215): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x3, 0x101000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_disconnect(r1) syz_usb_connect$uac3(0x3, 0x121, &(0x7f0000000080)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.259899504s ago: executing program 1 (id=218): r0 = add_key$keyring(&(0x7f0000000580), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=@filename='mtd0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') symlinkat(&(0x7f0000000500)='.\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000001d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001d80), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001dc0)={r3, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000001e40)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000001ec0), &(0x7f0000001f00)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) renameat2(r2, &(0x7f00000006c0)='./file7/file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x2) syz_open_dev$dri(&(0x7f0000000080), 0xabd7, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000380)={0x28, 0x0, 0x2711}, 0x10) r5 = semget$private(0x0, 0x5, 0x0) semctl$GETVAL(r5, 0x0, 0xc, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) 1.19879579s ago: executing program 1 (id=219): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000fc0), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.159445434s ago: executing program 0 (id=220): r0 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @private1, 0x2}, 0x1c) 1.10427625s ago: executing program 4 (id=221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x10000) 1.10407567s ago: executing program 2 (id=222): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x18, 0x3f, 0x107, 0x70bd27, 0x259fdbfe, {0x4, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 1.093685881s ago: executing program 0 (id=223): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x20000084) 1.030053467s ago: executing program 4 (id=224): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, r1, 0x32, 0xf2, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x1000000, 0x0, 0x24000808}, 0x4008000) socket$packet(0x11, 0x2, 0x300) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000200)={0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys_mnt\x00', 0x1df) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3, {0xfffffff1}}, './sys_mnt/bus/i2c/devices/i2c-2/new_device\x00'}) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7}, 0x1c) sendto$inet6(r5, &(0x7f0000000400)='O', 0x1, 0x80, &(0x7f0000000440)={0xa, 0x0, 0x0, @private2}, 0x1c) syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x40, &(0x7f00000005c0)="900100"/64) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40106150, &(0x7f0000000600)=0x1a9d81eaa3301f14) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000480)={0x0, 0x1, 0x7, 0x2de}, 0x0) mount(0x0, &(0x7f00000002c0)='./sys_mnt\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x502}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 980.296192ms ago: executing program 0 (id=225): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) 978.814802ms ago: executing program 1 (id=226): socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@grpquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@discard}, {@dioread_nolock}, {@nodiscard}]}, 0x3, 0x49e, &(0x7f0000001040)="$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") ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000001500)={0x8, 0xffffe1aa, 0x7ff, 0x1, 0x9}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000640), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000006c0)) setpgid(r1, r1) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000700)=@usbdevfs_driver={0xffffffff, 0x9, 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSLCKTRMIOS(r6, 0x80047437, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000f40)='./mnt\x00', &(0x7f0000000f80)='nfs\x00', 0x0, &(0x7f0000000fc0)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000800)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b49cb0b1a4bbff03a8b3db280000000000000079103000000000003b0a00ff000000009500740000000000"], &(0x7f0000000940)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 930.350097ms ago: executing program 0 (id=227): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/power/resume', 0xa82, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x401, 0xfffffffc}, 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000006c0), 0x2, 0x143102) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000740)="94", 0x1}], 0x1) mkdir(&(0x7f00000017c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000001800)='./file0\x00', &(0x7f0000001840), 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000001b00)='./file1\x00', 0x103042, 0x0) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) r3 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000001b40)) bind$inet(r3, 0x0, 0x0) 929.996397ms ago: executing program 2 (id=228): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000040)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="ba57", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="e869", 0x2}], 0x1}}], 0x2, 0x2401c444) 657.789114ms ago: executing program 2 (id=229): r0 = add_key$keyring(&(0x7f0000000580), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=@filename='mtd0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') symlinkat(&(0x7f0000000500)='.\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00') landlock_create_ruleset(&(0x7f0000000640)={0x7f6e, 0x1, 0x0, 0x2c00}, 0x30, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349f7"], &(0x7f0000001d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001d80), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001dc0)={r2, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000001e40)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000001ec0), &(0x7f0000001f00)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) renameat2(0xffffffffffffffff, &(0x7f00000006c0)='./file7/file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x2) syz_open_dev$dri(&(0x7f0000000080), 0xabd7, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000380)={0x28, 0x0, 0x2711}, 0x10) r4 = semget$private(0x0, 0x5, 0x0) semctl$GETVAL(r4, 0x0, 0xc, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) 126.013458ms ago: executing program 0 (id=230): socket$can_j1939(0x1d, 0x2, 0x7) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x10c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x199) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x5, 0x0, 0x4, 0x10004003, 0x2000007, 0x0, 0x7}}) io_setup(0xd9f6, &(0x7f00000000c0)) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000440)={0x18, 0x2, {0x0, @local}}, 0x1e) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) read(r3, 0x0, 0x0) shutdown(r3, 0x1) ptrace$getsig(0x4202, r2, 0x19, 0x0) socket(0x10, 0x803, 0x0) connect$pptp(r1, &(0x7f0000000480)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000500)=0x1) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) 94.658371ms ago: executing program 2 (id=231): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) write$nci(r0, &(0x7f0000000440)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="500404"], 0x7) write$nci(r0, &(0x7f00000004c0)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x24, r3, 0x1, 0x70bd28, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x2a}]}, 0x24}, 0x1, 0x0, 0x0, 0x5855}, 0x0) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="40020f"], 0x12) 0s ago: executing program 0 (id=232): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) flock(r4, 0x5) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000028c0)={{r2}, "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"}) fcntl$lock(r4, 0x6, &(0x7f0000000240)={0x0, 0x0, 0x8}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000700), 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xdc) io_submit(0x0, 0x0, &(0x7f0000003900)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000880)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts. [ 62.915978][ T4177] cgroup: Unknown subsys name 'net' [ 63.042429][ T4177] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.632794][ T4177] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.306383][ T4191] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.314662][ T4191] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.321528][ T4190] rdma_rxe: rxe_register_device failed with error -23 [ 66.333578][ T4190] rdma_rxe: failed to add rxe_eth0 [ 66.341030][ T4191] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.346850][ T4200] rdma_rxe: rxe_register_device failed with error -23 [ 66.354334][ T4200] rdma_rxe: failed to add rxe_eth0 [ 66.360537][ T4202] rdma_rxe: rxe_register_device failed with error -23 [ 66.368273][ T4202] rdma_rxe: failed to add rxe_eth0 [ 66.374185][ T4196] rdma_rxe: rxe_register_device failed with error -23 [ 66.410021][ T4196] rdma_rxe: failed to add rxe_eth0 [ 66.607223][ T4191] infiniband rxe0: set active [ 66.612898][ T4191] infiniband rxe0: added rxe_eth0 [ 66.633649][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.670348][ T4191] RDS/IB: rxe0: added [ 66.675195][ T4191] smc: adding ib device rxe0 with port count 1 [ 66.682149][ T4191] smc: ib device rxe0 port 1 has pnetid [ 66.710465][ T1111] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.743482][ T4191] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.824516][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 66.853614][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 66.882610][ T4202] chnl_net:caif_netlink_parms(): no params data found [ 66.944313][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 66.991433][ T4191] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.170295][ T4191] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.190320][ T4202] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.203074][ T4202] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.211975][ T4202] device bridge_slave_0 entered promiscuous mode [ 67.241134][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.248325][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.257031][ T4190] device bridge_slave_0 entered promiscuous mode [ 67.283234][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.300152][ T4202] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.321598][ T4202] device bridge_slave_1 entered promiscuous mode [ 67.343018][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.351055][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.366498][ T4190] device bridge_slave_1 entered promiscuous mode [ 67.386073][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.393274][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.420137][ T4196] device bridge_slave_0 entered promiscuous mode [ 67.448324][ T4191] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.455722][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.462969][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.472138][ T4196] device bridge_slave_1 entered promiscuous mode [ 67.483358][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.491159][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.504535][ T4200] device bridge_slave_0 entered promiscuous mode [ 67.551911][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.565619][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.574038][ T4200] device bridge_slave_1 entered promiscuous mode [ 67.591673][ T4202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.607955][ T4202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.620693][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.681948][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.696323][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.742255][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.758647][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.770915][ T4202] team0: Port device team_slave_0 added [ 67.803537][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.825741][ T4202] team0: Port device team_slave_1 added [ 67.834030][ T4190] team0: Port device team_slave_0 added [ 67.854367][ T4191] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.861447][ T4196] team0: Port device team_slave_0 added [ 67.890768][ T4190] team0: Port device team_slave_1 added [ 67.902916][ T4196] team0: Port device team_slave_1 added [ 67.912163][ T4200] team0: Port device team_slave_0 added [ 67.953830][ T4200] team0: Port device team_slave_1 added [ 67.984513][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.995573][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.032886][ T4202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.058419][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.067116][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.113491][ T4202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.138216][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.145210][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.171534][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.186340][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.193310][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.219581][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.242005][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.249822][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.276972][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.277293][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 68.288329][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 68.297322][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 68.307447][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.314420][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.340689][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.341816][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 68.357471][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 68.385644][ T4179] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.394812][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.402180][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.428375][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.443820][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.451089][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.477319][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.505783][ T4190] device hsr_slave_0 entered promiscuous mode [ 68.512639][ T4190] device hsr_slave_1 entered promiscuous mode [ 68.578654][ T4200] device hsr_slave_0 entered promiscuous mode [ 68.586402][ T4200] device hsr_slave_1 entered promiscuous mode [ 68.593505][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.601677][ T4200] Cannot create hsr debugfs directory [ 68.627727][ T4202] device hsr_slave_0 entered promiscuous mode [ 68.634833][ T4202] device hsr_slave_1 entered promiscuous mode [ 68.641852][ T4202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.649790][ T4202] Cannot create hsr debugfs directory [ 68.659846][ T4196] device hsr_slave_0 entered promiscuous mode [ 68.666896][ T4196] device hsr_slave_1 entered promiscuous mode [ 68.673904][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.682428][ T4196] Cannot create hsr debugfs directory [ 68.891878][ T3855] infiniband rxe0: set active [ 68.901197][ T1111] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.003295][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 69.119063][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.126422][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.134505][ T4191] device bridge_slave_0 entered promiscuous mode [ 69.145497][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.152601][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.161732][ T4191] device bridge_slave_1 entered promiscuous mode [ 69.175126][ T4202] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.191000][ T4202] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.211717][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.229417][ T4202] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.241061][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.251646][ T4202] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.284374][ T4191] team0: Port device team_slave_0 added [ 69.293737][ T4191] team0: Port device team_slave_1 added [ 69.329136][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.341098][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.348485][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.374964][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.391732][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.412357][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.419810][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.447984][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.465791][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.475009][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.522050][ T4191] device hsr_slave_0 entered promiscuous mode [ 69.529281][ T4191] device hsr_slave_1 entered promiscuous mode [ 69.536951][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.544539][ T4191] Cannot create hsr debugfs directory [ 69.598748][ T4200] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.615163][ T4200] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.649872][ T4200] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.677253][ T4200] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.747917][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.768876][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.782005][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.807188][ T4202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.822702][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.864196][ T4202] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.882033][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.891688][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.925108][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.934660][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.946426][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.953795][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.963124][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.972854][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.982535][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.989684][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.998981][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.019266][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.030698][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.070806][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.088472][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.096488][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.128189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.139075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.148807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.157976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.167324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.175127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.183898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.192428][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.214133][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.233044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.242410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.251998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.262344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.271232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.281416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.290310][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.301563][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.311871][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.324565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.333751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.345226][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.346750][ T4263] Bluetooth: hci1: command 0x041b tx timeout [ 70.352695][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.368728][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.376448][ T4263] Bluetooth: hci0: command 0x041b tx timeout [ 70.382590][ T4263] Bluetooth: hci2: command 0x041b tx timeout [ 70.405262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.414096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.423891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.426282][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 70.439339][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.446521][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.447289][ T4265] Bluetooth: hci3: command 0x041b tx timeout [ 70.461458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.470852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.479536][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.487017][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.501829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.517835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.527031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.536496][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.543588][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.552151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.561440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.605757][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.616205][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.625225][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.637555][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.646906][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.662086][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.671599][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.682509][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.693014][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.710500][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.724126][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.739465][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.775395][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.788599][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.799002][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.809114][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.818689][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.829086][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.856311][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.876051][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.887237][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.903996][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.931046][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.948975][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.974387][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.983853][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.014155][ T4202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.068050][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.076825][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.086950][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.104521][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.122583][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.144773][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.171204][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.186014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.200727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.254510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.264071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.275443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.284277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.293074][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.300221][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.310478][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.315268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.317275][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.330198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.340351][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.347532][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.355771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.364594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.373833][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.380983][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.391660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.399303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.410208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.418594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.426657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.434798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.443111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.459045][ T4202] device veth0_vlan entered promiscuous mode [ 71.483738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.492706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.501847][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.509127][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.521699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.530882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.544403][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.558563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.575058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.584985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.595002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.613401][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.624167][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.636739][ T4202] device veth1_vlan entered promiscuous mode [ 71.667913][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.677764][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.687345][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.694836][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.703240][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.712403][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.721707][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.731298][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.740394][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.749305][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.758335][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.767448][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.790435][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.817554][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.828334][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.843358][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.855075][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.871038][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.880464][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.894400][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.902775][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.926194][ T4196] device veth0_vlan entered promiscuous mode [ 71.938329][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.957083][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.981801][ T4202] device veth0_macvtap entered promiscuous mode [ 72.004175][ T4196] device veth1_vlan entered promiscuous mode [ 72.026020][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.034856][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.050687][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.062257][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.071482][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.081910][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.093950][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.109245][ T4202] device veth1_macvtap entered promiscuous mode [ 72.200833][ T4196] device veth0_macvtap entered promiscuous mode [ 72.228868][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.243744][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.267397][ T4196] device veth1_macvtap entered promiscuous mode [ 72.280366][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.289873][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.299799][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.309871][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.324278][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.348539][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.362336][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.376866][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.395128][ T4202] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.405827][ T4202] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.414571][ T4202] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.430342][ T4179] Bluetooth: hci2: command 0x040f tx timeout [ 72.437906][ T4179] Bluetooth: hci0: command 0x040f tx timeout [ 72.444155][ T4179] Bluetooth: hci1: command 0x040f tx timeout [ 72.454830][ T4202] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.474751][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.489449][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.500251][ T4179] Bluetooth: hci3: command 0x040f tx timeout [ 72.507742][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.515129][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.524293][ T4179] Bluetooth: hci4: command 0x040f tx timeout [ 72.525294][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.539737][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.547642][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.555140][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.565424][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.580225][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.612168][ T4200] device veth0_vlan entered promiscuous mode [ 72.631833][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.641181][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.650878][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.660858][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.670318][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.681180][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.693792][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.724534][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.733312][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.743486][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.751536][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.769401][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.778608][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.787786][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.797152][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.808685][ T4200] device veth1_vlan entered promiscuous mode [ 72.820215][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.848658][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.859638][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.870021][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.965019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.973563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.984541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.023374][ T4200] device veth0_macvtap entered promiscuous mode [ 73.046585][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.056483][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.065178][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.077756][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.087880][ T4190] device veth0_vlan entered promiscuous mode [ 73.106034][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.117461][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.125847][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.134270][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.143953][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.153926][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.162771][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.181332][ T3028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.189695][ T4191] device veth0_vlan entered promiscuous mode [ 73.196524][ T3028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.207994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.230487][ T4200] device veth1_macvtap entered promiscuous mode [ 73.253084][ T4191] device veth1_vlan entered promiscuous mode [ 73.292030][ T3028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.297490][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.313597][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.323784][ T3028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.345977][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.354809][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.363541][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.372490][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.397233][ T4190] device veth1_vlan entered promiscuous mode [ 73.412730][ T3028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.421508][ T3028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.426518][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.448934][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.461536][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.472569][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.485275][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.503531][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.515146][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.530133][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.542195][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.554546][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.577730][ T4191] device veth0_macvtap entered promiscuous mode [ 73.588945][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.601011][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.611290][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.623175][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.634933][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.664810][ T4190] device veth0_macvtap entered promiscuous mode [ 73.684971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.695090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.704738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.714414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.723694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.737804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.754760][ T4200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.769544][ T4200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.780264][ T4200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.792420][ T4200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.822026][ T4191] device veth1_macvtap entered promiscuous mode [ 73.836881][ T4190] device veth1_macvtap entered promiscuous mode [ 73.925487][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.943412][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.955198][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.972534][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.983214][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.002185][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.018008][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.039163][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.064996][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.080390][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.102820][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.144803][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.174095][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.205403][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.219349][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.231318][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.243043][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.253420][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.275653][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.294330][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.308543][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.337314][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.358399][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.372420][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.389947][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.398440][ T4323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 74.401116][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.422046][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.447933][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.465047][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.482166][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.491688][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.503870][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.516127][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 74.522822][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 74.529555][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 74.536554][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.548474][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.559396][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.572090][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.583384][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 74.589994][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 74.596585][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.607492][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.618908][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.630852][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.681671][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.699242][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.710696][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.722973][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.750447][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.764503][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.776323][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.785071][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.793915][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.804010][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.943786][ T3028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.010957][ T4292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.018971][ T3028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.029615][ T4292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.080061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.101004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.152703][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.175388][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.204080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.292014][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.312208][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.348021][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.356116][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.364003][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.400322][ T4332] bond0: (slave bond_slave_0): Releasing backup interface [ 75.482086][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.524626][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.555392][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.562993][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.706681][ T4344] tipc: Started in network mode [ 75.711919][ T4344] tipc: Node identity 5622013893fe, cluster identity 4711 [ 75.738063][ T4344] tipc: Enabled bearer , priority 0 [ 75.909809][ T4349] device syzkaller0 entered promiscuous mode [ 76.026934][ T4342] tipc: Resetting bearer [ 76.157153][ T4342] tipc: Disabling bearer [ 76.341563][ T4371] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 76.562126][ T4382] FAULT_INJECTION: forcing a failure. [ 76.562126][ T4382] name failslab, interval 1, probability 0, space 0, times 1 [ 76.588129][ T4382] CPU: 1 PID: 4382 Comm: syz.0.19 Not tainted syzkaller #0 [ 76.595396][ T4382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 76.605506][ T4382] Call Trace: [ 76.608824][ T4382] [ 76.611790][ T4382] dump_stack_lvl+0x188/0x250 [ 76.616623][ T4382] ? show_regs_print_info+0x20/0x20 [ 76.621974][ T4382] ? load_image+0x410/0x410 [ 76.626529][ T4382] ? __lock_acquire+0x7d40/0x7d40 [ 76.631606][ T4382] should_fail+0x383/0x4b0 [ 76.636075][ T4382] should_failslab+0x5/0x20 [ 76.640629][ T4382] slab_pre_alloc_hook+0x51/0xc0 [ 76.645646][ T4382] __kmalloc+0x6b/0x340 [ 76.649853][ T4382] ? ovl_fill_super+0x131a/0x42a0 [ 76.654922][ T4382] ? memcpy+0x3c/0x60 [ 76.658956][ T4382] ovl_fill_super+0x131a/0x42a0 [ 76.663877][ T4382] ? sget+0x435/0x450 [ 76.667901][ T4382] ? ovl_mount+0x30/0x30 [ 76.672188][ T4382] ? __lock_acquire+0x7d40/0x7d40 [ 76.677261][ T4382] ? rwsem_write_trylock+0x135/0x1c0 [ 76.682631][ T4382] ? clear_nonspinnable+0x60/0x60 [ 76.687704][ T4382] ? __lock_acquire+0x7d40/0x7d40 [ 76.692822][ T4382] ? __rwlock_init+0x140/0x140 [ 76.697627][ T4382] ? strlcpy+0x83/0xc0 [ 76.701760][ T4382] ? free_anon_bdev+0x20/0x20 [ 76.706480][ T4382] ? ovl_mount+0x30/0x30 [ 76.710767][ T4382] mount_nodev+0x52/0xe0 [ 76.715059][ T4382] legacy_get_tree+0xe6/0x180 [ 76.719794][ T4382] ? virtio_fs_zero_page_range+0x120/0x120 [ 76.725656][ T4382] vfs_get_tree+0x88/0x270 [ 76.730126][ T4382] do_new_mount+0x247/0xa50 [ 76.734688][ T4382] __se_sys_mount+0x2e3/0x3d0 [ 76.739422][ T4382] ? __x64_sys_mount+0xc0/0xc0 [ 76.744234][ T4382] ? lockdep_hardirqs_on+0x94/0x140 [ 76.749476][ T4382] ? __x64_sys_mount+0x1c/0xc0 [ 76.754287][ T4382] do_syscall_64+0x4c/0xa0 [ 76.758746][ T4382] ? clear_bhb_loop+0x30/0x80 [ 76.763472][ T4382] ? clear_bhb_loop+0x30/0x80 [ 76.768190][ T4382] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.774322][ T4382] RIP: 0033:0x7f4295078b19 [ 76.778809][ T4382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.798449][ T4382] RSP: 002b:00007f42932cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.806913][ T4382] RAX: ffffffffffffffda RBX: 00007f42952fefa0 RCX: 00007f4295078b19 [ 76.814927][ T4382] RDX: 00002000000024c0 RSI: 0000200000002480 RDI: 0000000000000000 [ 76.822948][ T4382] RBP: 00007f4295110b70 R08: 0000200000002500 R09: 0000000000000000 [ 76.830963][ T4382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.838985][ T4382] R13: 00007f42952ff038 R14: 00007f42952fefa0 R15: 00007ffdf389f208 [ 76.847022][ T4382] [ 76.850152][ C1] vkms_vblank_simulate: vblank timer overrun [ 77.043728][ T4400] jffs2: notice: (4400) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 77.515988][ T4415] FAULT_INJECTION: forcing a failure. [ 77.515988][ T4415] name failslab, interval 1, probability 0, space 0, times 0 [ 77.591686][ T4415] CPU: 1 PID: 4415 Comm: syz.0.24 Not tainted syzkaller #0 [ 77.598977][ T4415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 77.609173][ T4415] Call Trace: [ 77.612500][ T4415] [ 77.615476][ T4415] dump_stack_lvl+0x188/0x250 [ 77.620236][ T4415] ? show_regs_print_info+0x20/0x20 [ 77.625536][ T4415] ? load_image+0x410/0x410 [ 77.630095][ T4415] ? __might_sleep+0xf0/0xf0 [ 77.634737][ T4415] ? __lock_acquire+0x7d40/0x7d40 [ 77.639850][ T4415] should_fail+0x383/0x4b0 [ 77.644327][ T4415] should_failslab+0x5/0x20 [ 77.648888][ T4415] slab_pre_alloc_hook+0x51/0xc0 [ 77.653877][ T4415] kmem_cache_alloc_trace+0x47/0x290 [ 77.659313][ T4415] ? snd_seq_prioq_new+0x43/0x90 [ 77.664308][ T4415] snd_seq_prioq_new+0x43/0x90 [ 77.669210][ T4415] snd_seq_queue_alloc+0x114/0x740 [ 77.674370][ T4415] snd_seq_ioctl_create_queue+0x7b/0x320 [ 77.680068][ T4415] ? snd_seq_ioctl_unsubscribe_port+0x6d0/0x6d0 [ 77.686363][ T4415] snd_seq_oss_open+0x622/0xf00 [ 77.691280][ T4415] ? snd_seq_oss_delete_client+0x50/0x50 [ 77.697005][ T4415] ? __mutex_lock_common+0x435/0x2400 [ 77.702454][ T4415] ? mutex_lock_io_nested+0x60/0x60 [ 77.707752][ T4415] ? snd_seq_oss_process_event+0x2910/0x2910 [ 77.713788][ T4415] ? async_call_lookup_ports+0x10/0x10 [ 77.719307][ T4415] ? do_raw_spin_unlock+0x11d/0x230 [ 77.724559][ T4415] odev_open+0x63/0x90 [ 77.728698][ T4415] chrdev_open+0x585/0x5f0 [ 77.733165][ T4415] ? cd_forget+0x160/0x160 [ 77.737654][ T4415] ? fsnotify_perm+0x3a7/0x560 [ 77.742474][ T4415] ? cd_forget+0x160/0x160 [ 77.746935][ T4415] do_dentry_open+0x7f7/0xf90 [ 77.751665][ T4415] ? vfs_open+0x2b/0x80 [ 77.755874][ T4415] path_openat+0x2718/0x2fb0 [ 77.760557][ T4415] ? __kasan_slab_alloc+0xa9/0xc0 [ 77.765639][ T4415] ? do_filp_open+0x400/0x400 [ 77.770382][ T4415] do_filp_open+0x1df/0x400 [ 77.774940][ T4415] ? vfs_tmpfile+0x300/0x300 [ 77.779593][ T4415] ? _raw_spin_unlock+0x24/0x40 [ 77.784496][ T4415] ? alloc_fd+0x59e/0x650 [ 77.788923][ T4415] do_sys_openat2+0x14b/0x500 [ 77.793663][ T4415] ? __lock_acquire+0x7d40/0x7d40 [ 77.798769][ T4415] ? do_sys_open+0xe0/0xe0 [ 77.803236][ T4415] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 77.809270][ T4415] ? lock_chain_count+0x20/0x20 [ 77.814181][ T4415] __x64_sys_openat+0x135/0x160 [ 77.819084][ T4415] do_syscall_64+0x4c/0xa0 [ 77.823552][ T4415] ? clear_bhb_loop+0x30/0x80 [ 77.828274][ T4415] ? clear_bhb_loop+0x30/0x80 [ 77.833006][ T4415] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.838978][ T4415] RIP: 0033:0x7f4295078b19 [ 77.843447][ T4415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.863101][ T4415] RSP: 002b:00007f42932cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 77.871664][ T4415] RAX: ffffffffffffffda RBX: 00007f42952fefa0 RCX: 00007f4295078b19 [ 77.879684][ T4415] RDX: 0000000000080200 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 77.887695][ T4415] RBP: 00007f4295110b70 R08: 0000000000000000 R09: 0000000000000000 [ 77.895797][ T4415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.903848][ T4415] R13: 00007f42952ff038 R14: 00007f42952fefa0 R15: 00007ffdf389f208 [ 77.911880][ T4415] [ 77.915069][ C1] vkms_vblank_simulate: vblank timer overrun [ 77.963152][ T4421] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 78.002835][ T4421] device-mapper: raid: Choosing default region size of 4MiB [ 78.011024][ T4421] device-mapper: raid: Superblocks created for new raid set [ 78.021665][ T4424] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.246881][ T4421] md/raid1:mdX: active with 1 out of 1 mirrors [ 78.409299][ T4436] jffs2: notice: (4436) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 78.616965][ T4451] xt_NFQUEUE: number of queues (32769) out of range (got 98303) [ 79.404857][ T4474] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.559745][ T4485] cgroup2: Unknown parameter 'asde´Q�‚eaËuµÄŸ&³6`X„®7®rÖð¯);-ApÀºÐ™Á�òrΉg$’0Ï—ž5FS¾ü�kåFÈ\<×È ' [ 79.677298][ T4490] jffs2: notice: (4490) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 79.733588][ T26] audit: type=1800 audit(1793881406.196:2): pid=4493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.46" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 79.858208][ T9] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xa [ 80.310446][ T4516] device syzkaller0 entered promiscuous mode [ 80.612858][ T4527] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 80.619687][ T4527] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 80.724682][ T4533] ======================================================= [ 80.724682][ T4533] WARNING: The mand mount option has been deprecated and [ 80.724682][ T4533] and is ignored by this kernel. Remove the mand [ 80.724682][ T4533] option from the mount to silence this warning. [ 80.724682][ T4533] ======================================================= [ 80.759722][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.776210][ T4533] jffs2: notice: (4533) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 80.780202][ T4527] vhci_hcd vhci_hcd.0: Device attached [ 80.936459][ T4534] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 80.943036][ T4534] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 81.337999][ T4534] vhci_hcd vhci_hcd.0: Device attached [ 81.404815][ T4545] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 81.587799][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 81.687491][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 81.752200][ T4528] vhci_hcd: connection closed [ 81.801563][ T4524] vhci_hcd: stop threads [ 81.827043][ T4524] vhci_hcd: release socket [ 81.834780][ T4539] vhci_hcd: connection closed [ 81.852053][ T4524] vhci_hcd: disconnect device [ 81.868401][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 81.873446][ T4545] ceph: No mds server is up or the cluster is laggy [ 81.881577][ T13] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 81.885236][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 81.900161][ T4524] vhci_hcd: stop threads [ 81.904456][ T4524] vhci_hcd: release socket [ 81.909858][ T4524] vhci_hcd: disconnect device [ 82.075449][ T4329] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.335463][ T4329] usb 4-1: Using ep0 maxpacket: 32 [ 82.415138][ T4564] binder: 4563:4564 ioctl 5000940a 2000000028c0 returned -22 [ 82.466071][ T4329] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 82.676107][ T4329] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 82.875370][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 83.075361][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 83.105358][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 83.215358][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 83.318658][ T4329] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 83.343007][ T4329] usb 4-1: Product: syz [ 83.364605][ T4329] usb 4-1: Manufacturer: syz [ 83.373760][ T4329] usb 4-1: SerialNumber: syz [ 83.385860][ T4329] usb 4-1: config 0 descriptor?? [ 83.407082][ T4553] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 83.433155][ T4329] hub 4-1:0.0: bad descriptor, ignoring hub [ 83.446272][ T4329] hub: probe of 4-1:0.0 failed with error -5 [ 83.532214][ T4592] FAULT_INJECTION: forcing a failure. [ 83.532214][ T4592] name failslab, interval 1, probability 0, space 0, times 0 [ 83.588499][ T4594] device-mapper: dirty region log: invalid region size 64 [ 83.604279][ T4592] CPU: 0 PID: 4592 Comm: syz.4.67 Not tainted syzkaller #0 [ 83.611686][ T4592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 83.621471][ T4594] device-mapper: table: 248:4: mirror: Error creating mirror dirty log [ 83.621863][ T4592] Call Trace: [ 83.633434][ T4592] [ 83.636440][ T4592] dump_stack_lvl+0x188/0x250 [ 83.641167][ T4592] ? show_regs_print_info+0x20/0x20 [ 83.646420][ T4592] ? load_image+0x410/0x410 [ 83.650976][ T4592] ? __might_sleep+0xf0/0xf0 [ 83.655618][ T4592] ? __lock_acquire+0x7d40/0x7d40 [ 83.660696][ T4592] should_fail+0x383/0x4b0 [ 83.665170][ T4592] should_failslab+0x5/0x20 [ 83.669723][ T4592] slab_pre_alloc_hook+0x51/0xc0 [ 83.674700][ T4592] kmem_cache_alloc_node+0x47/0x2c0 [ 83.679939][ T4592] ? __alloc_skb+0xf4/0x750 [ 83.684487][ T4592] __alloc_skb+0xf4/0x750 [ 83.688867][ T4592] tc_ctl_action+0x72f/0xaf0 [ 83.693515][ T4592] ? tcf_free_cookie_rcu+0x40/0x40 [ 83.698758][ T4592] ? netlink_sendmsg+0x8ba/0xbe0 [ 83.703815][ T4592] ? tcf_free_cookie_rcu+0x40/0x40 [ 83.707233][ T4594] device-mapper: ioctl: error adding target to table [ 83.708964][ T4592] rtnetlink_rcv_msg+0x7f1/0xf10 [ 83.709002][ T4592] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 83.726836][ T4592] ? rtnetlink_bind+0x80/0x80 [ 83.731564][ T4592] ? __local_bh_enable_ip+0x136/0x1c0 [ 83.736980][ T4592] ? lockdep_hardirqs_on+0x94/0x140 [ 83.742259][ T4592] ? __local_bh_enable_ip+0x136/0x1c0 [ 83.747677][ T4592] ? _local_bh_enable+0xa0/0xa0 [ 83.752582][ T4592] ? __dev_queue_xmit+0x1b64/0x2e50 [ 83.757847][ T4592] ? dev_queue_xmit+0x20/0x20 [ 83.762589][ T4592] ? __copy_skb_header+0x3ba/0x4f0 [ 83.767746][ T4592] ? memcpy+0x3c/0x60 [ 83.771776][ T4592] ? __copy_skb_header+0x3ba/0x4f0 [ 83.776935][ T4592] ? __skb_clone+0x446/0x6c0 [ 83.781572][ T4592] netlink_rcv_skb+0x1e9/0x430 [ 83.786383][ T4592] ? rtnetlink_bind+0x80/0x80 [ 83.791105][ T4592] ? netlink_ack+0xb10/0xb10 [ 83.795785][ T4592] netlink_unicast+0x804/0x9e0 [ 83.800609][ T4592] netlink_sendmsg+0x8ba/0xbe0 [ 83.805430][ T4592] ? netlink_getsockopt+0x570/0x570 [ 83.810675][ T4592] ? aa_sock_msg_perm+0x94/0x150 [ 83.815674][ T4592] ? apparmor_socket_sendmsg+0x88/0x230 [ 83.821276][ T4592] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 83.826615][ T4592] ? security_socket_sendmsg+0x7c/0xa0 [ 83.832130][ T4592] ? netlink_getsockopt+0x570/0x570 [ 83.837379][ T4592] ____sys_sendmsg+0x5be/0x8f0 [ 83.842207][ T4592] ? __sys_sendmsg_sock+0x30/0x30 [ 83.847294][ T4592] ? import_iovec+0x6f/0xa0 [ 83.851849][ T4592] ___sys_sendmsg+0x236/0x2e0 [ 83.856588][ T4592] ? __sys_sendmsg+0x290/0x290 [ 83.861447][ T4592] __se_sys_sendmsg+0x1b7/0x2a0 [ 83.866349][ T4592] ? __x64_sys_sendmsg+0x80/0x80 [ 83.871329][ T4592] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 83.877372][ T4592] ? lockdep_hardirqs_on+0x94/0x140 [ 83.882619][ T4592] do_syscall_64+0x4c/0xa0 [ 83.887075][ T4592] ? clear_bhb_loop+0x30/0x80 [ 83.891793][ T4592] ? clear_bhb_loop+0x30/0x80 [ 83.896519][ T4592] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.902453][ T4592] RIP: 0033:0x7f26f1dc1b19 [ 83.906916][ T4592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.926568][ T4592] RSP: 002b:00007f26f0018028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.935031][ T4592] RAX: ffffffffffffffda RBX: 00007f26f2047fa0 RCX: 00007f26f1dc1b19 [ 83.943051][ T4592] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 83.951074][ T4592] RBP: 00007f26f1e59b70 R08: 0000000000000000 R09: 0000000000000000 [ 83.959094][ T4592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.967112][ T4592] R13: 00007f26f2048038 R14: 00007f26f2047fa0 R15: 00007fff965cfe88 [ 83.975181][ T4592] [ 84.036103][ T4267] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.361400][ T4264] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.605785][ T4264] usb 2-1: Using ep0 maxpacket: 32 [ 84.766473][ T4264] usb 2-1: unable to get BOS descriptor or descriptor too short [ 84.781704][ T4267] usb 4-1: USB disconnect, device number 2 [ 84.799915][ T4638] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 84.890432][ T4638] ceph: No mds server is up or the cluster is laggy [ 84.909581][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 84.945235][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 85.524147][ T4643] jffs2: notice: (4643) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 85.908548][ T4264] usb 2-1: string descriptor 0 read error: -22 [ 85.920706][ T4264] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 85.949256][ T4264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.485403][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 86.495390][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 86.505393][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 86.524312][ T4643] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.578678][ T4264] dw2102: su3000_identify_state [ 86.677728][ T4264] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 86.686747][ T4264] dw2102: su3000_power_ctrl: 1, initialized 0 [ 86.694465][ T4264] dvb-usb: bulk message failed: -22 (2/0) [ 86.705746][ T1108] cfg80211: failed to load regulatory.db [ 86.711510][ T4264] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 86.747597][ T4264] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 86.768313][ T4264] usb 2-1: media controller created [ 86.775276][ T4264] dvb-usb: bulk message failed: -22 (6/0) [ 86.788815][ T4264] dw2102: i2c transfer failed. [ 86.794913][ T4264] dvb-usb: bulk message failed: -22 (6/0) [ 86.804543][ T4264] dw2102: i2c transfer failed. [ 86.831391][ T4264] dvb-usb: bulk message failed: -22 (6/0) [ 86.845128][ T4264] dw2102: i2c transfer failed. [ 86.859118][ T4264] dvb-usb: bulk message failed: -22 (6/0) [ 86.864914][ T4264] dw2102: i2c transfer failed. [ 86.872120][ T4264] dvb-usb: bulk message failed: -22 (6/0) [ 86.881351][ T4264] dw2102: i2c transfer failed. [ 86.888592][ T4264] dvb-usb: bulk message failed: -22 (6/0) [ 86.894404][ T4264] dw2102: i2c transfer failed. [ 86.905184][ T4264] dvb-usb: MAC address: 02:02:02:02:02:02 [ 86.940366][ T4264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.970121][ T4264] dvb-usb: bulk message failed: -22 (3/0) [ 86.986754][ T4264] dw2102: command 0x0e transfer failed. [ 86.993409][ T4264] dvb-usb: bulk message failed: -22 (3/0) [ 86.999551][ T4264] dw2102: command 0x0e transfer failed. [ 87.030325][ T4608] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 87.060417][ T13] vhci_hcd: vhci_device speed not set [ 87.218093][ T4670] binder: 4669:4670 ioctl 5000940a 2000000028c0 returned -22 [ 87.315564][ T4264] dvb-usb: bulk message failed: -22 (3/0) [ 87.321410][ T4264] dw2102: command 0x0e transfer failed. [ 87.349489][ T4264] dvb-usb: bulk message failed: -22 (3/0) [ 87.355311][ T4264] dw2102: command 0x0e transfer failed. [ 87.371221][ T4264] dvb-usb: bulk message failed: -22 (1/0) [ 87.378173][ T4264] dw2102: command 0x51 transfer failed. [ 87.498563][ T4264] DVB: Unable to find symbol ds3000_attach() [ 87.504659][ T4264] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 87.516843][ T4679] netlink: 56 bytes leftover after parsing attributes in process `syz.3.81'. [ 87.693866][ T4687] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 87.846885][ T4267] libceph: connect (1)[c::]:6789 error -101 [ 87.912271][ T4267] libceph: mon0 (1)[c::]:6789 connect error [ 87.920962][ T4688] ceph: No mds server is up or the cluster is laggy [ 87.927729][ T4264] rc_core: IR keymap rc-su3000 not found [ 87.933389][ T4264] Registered IR keymap rc-empty [ 87.944367][ T4693] jffs2: notice: (4693) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 88.103596][ T4265] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.111173][ T4264] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 88.123669][ T4264] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input5 [ 88.140395][ T4264] dvb-usb: schedule remote query interval to 150 msecs. [ 88.165697][ T4264] dw2102: su3000_power_ctrl: 0, initialized 1 [ 88.174744][ T4264] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 88.420982][ T4693] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 88.495531][ T4265] usb 5-1: Using ep0 maxpacket: 32 [ 88.537956][ T4264] usb 2-1: USB disconnect, device number 2 [ 88.656321][ T4265] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 88.711285][ T4264] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 88.817228][ T4708] FAULT_INJECTION: forcing a failure. [ 88.817228][ T4708] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 88.831786][ T4708] CPU: 1 PID: 4708 Comm: syz.1.91 Not tainted syzkaller #0 [ 88.839024][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 88.849227][ T4708] Call Trace: [ 88.852519][ T4708] [ 88.855484][ T4708] dump_stack_lvl+0x188/0x250 [ 88.860196][ T4708] ? show_regs_print_info+0x20/0x20 [ 88.865400][ T4708] ? load_image+0x410/0x410 [ 88.869922][ T4708] ? __lock_acquire+0x7d40/0x7d40 [ 88.874981][ T4708] ? __alloc_pages+0x282/0x480 [ 88.879759][ T4708] should_fail+0x383/0x4b0 [ 88.884188][ T4708] copy_page_from_iter+0x33a/0x760 [ 88.889406][ T4708] tun_get_user+0x1985/0x3b10 [ 88.894109][ T4708] ? tun_ring_recv+0xc90/0xc90 [ 88.898901][ T4708] ? rcu_lock_release+0x5/0x20 [ 88.903698][ T4708] ? __lock_acquire+0x7d40/0x7d40 [ 88.908749][ T4708] tun_chr_write_iter+0x112/0x1e0 [ 88.913795][ T4708] vfs_write+0x748/0xd70 [ 88.918057][ T4708] ? file_end_write+0x250/0x250 [ 88.922942][ T4708] ? __fget_files+0x402/0x470 [ 88.927670][ T4708] ? __fdget_pos+0x1e2/0x370 [ 88.932302][ T4708] ? ksys_write+0x70/0x260 [ 88.936778][ T4708] ksys_write+0x153/0x260 [ 88.941136][ T4708] ? __ia32_sys_read+0x80/0x80 [ 88.945915][ T4708] ? lockdep_hardirqs_on+0x94/0x140 [ 88.951175][ T4708] do_syscall_64+0x4c/0xa0 [ 88.955609][ T4708] ? clear_bhb_loop+0x30/0x80 [ 88.960325][ T4708] ? clear_bhb_loop+0x30/0x80 [ 88.965025][ T4708] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.970942][ T4708] RIP: 0033:0x7f7d4d88034e [ 88.975377][ T4708] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.995045][ T4708] RSP: 002b:00007f7d4bb15fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 89.003506][ T4708] RAX: ffffffffffffffda RBX: 00007f7d4bb166c0 RCX: 00007f7d4d88034e [ 89.011516][ T4708] RDX: 000000000000004a RSI: 0000000000000000 RDI: 00000000000000c8 [ 89.019521][ T4708] RBP: 00007f7d4d957b70 R08: 0000000000000000 R09: 0000000000000000 [ 89.027524][ T4708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.035534][ T4708] R13: 00007f7d4db46038 R14: 00007f7d4db45fa0 R15: 00007fff74345328 [ 89.043527][ T4708] [ 89.065654][ T4265] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 89.074749][ T4265] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 89.093368][ T4265] usb 5-1: Product: syz [ 89.097925][ T4265] usb 5-1: Manufacturer: syz [ 89.102565][ T4265] usb 5-1: SerialNumber: syz [ 89.124925][ T4265] usb 5-1: config 0 descriptor?? [ 89.138143][ T4716] FAULT_INJECTION: forcing a failure. [ 89.138143][ T4716] name failslab, interval 1, probability 0, space 0, times 0 [ 89.155687][ T4682] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 89.196415][ T4265] hub 5-1:0.0: bad descriptor, ignoring hub [ 89.202472][ T4265] hub: probe of 5-1:0.0 failed with error -5 [ 89.222416][ T4716] CPU: 1 PID: 4716 Comm: syz.2.93 Not tainted syzkaller #0 [ 89.229680][ T4716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 89.239866][ T4716] Call Trace: [ 89.243201][ T4716] [ 89.246163][ T4716] dump_stack_lvl+0x188/0x250 [ 89.250975][ T4716] ? show_regs_print_info+0x20/0x20 [ 89.256254][ T4716] ? load_image+0x410/0x410 [ 89.260807][ T4716] ? __lock_acquire+0x7d40/0x7d40 [ 89.265880][ T4716] should_fail+0x383/0x4b0 [ 89.270348][ T4716] should_failslab+0x5/0x20 [ 89.274890][ T4716] slab_pre_alloc_hook+0x51/0xc0 [ 89.279870][ T4716] ? __alloc_file+0x25/0x240 [ 89.284527][ T4716] kmem_cache_alloc+0x3d/0x280 [ 89.289415][ T4716] __alloc_file+0x25/0x240 [ 89.293883][ T4716] alloc_empty_file+0x90/0x180 [ 89.298792][ T4716] alloc_file+0x5c/0x510 [ 89.303073][ T4716] ? do_raw_spin_unlock+0x11d/0x230 [ 89.308322][ T4716] alloc_file_pseudo+0x180/0x200 [ 89.313328][ T4716] ? alloc_empty_file_noaccount+0x80/0x80 [ 89.319097][ T4716] ? atime_needs_update+0x770/0x770 [ 89.324350][ T4716] ? debug_mutex_init+0x34/0x70 [ 89.329249][ T4716] ? create_pipe_files+0x2b9/0x6b0 [ 89.334420][ T4716] create_pipe_files+0x390/0x6b0 [ 89.339429][ T4716] __do_pipe_flags+0x46/0x1f0 [ 89.344153][ T4716] do_pipe2+0xa7/0x190 [ 89.348275][ T4716] ? pipe_fcntl+0x530/0x530 [ 89.352818][ T4716] ? lock_chain_count+0x20/0x20 [ 89.357727][ T4716] ? syscall_enter_from_user_mode+0x21/0x70 [ 89.363676][ T4716] __x64_sys_pipe+0x36/0x40 [ 89.368223][ T4716] do_syscall_64+0x4c/0xa0 [ 89.372677][ T4716] ? clear_bhb_loop+0x30/0x80 [ 89.377400][ T4716] ? clear_bhb_loop+0x30/0x80 [ 89.382124][ T4716] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.388062][ T4716] RIP: 0033:0x7fd5b9ccfb19 [ 89.392521][ T4716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.412270][ T4716] RSP: 002b:00007fd5b7f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 89.420734][ T4716] RAX: ffffffffffffffda RBX: 00007fd5b9f55fa0 RCX: 00007fd5b9ccfb19 [ 89.428867][ T4716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.436877][ T4716] RBP: 00007fd5b9d67b70 R08: 0000000000000000 R09: 0000000000000000 [ 89.444900][ T4716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.453039][ T4716] R13: 00007fd5b9f56038 R14: 00007fd5b9f55fa0 R15: 00007ffeeaf48b58 [ 89.461083][ T4716] [ 89.484759][ T4711] ceph: No mds server is up or the cluster is laggy [ 89.498947][ T4182] udevd[4182]: setting mode of /dev/chaoskey0 to 020600 failed: Read-only file system [ 89.509122][ T21] libceph: connect (1)[c::]:6789 error -101 [ 89.517097][ T4265] usb 5-1: USB disconnect, device number 2 [ 89.536137][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 89.563325][ T4182] udevd[4182]: setting owner of /dev/chaoskey0 to uid=0, gid=0 failed: Read-only file system [ 89.859783][ T4265] libceph: connect (1)[c::]:6789 error -101 [ 89.870233][ T4265] libceph: mon0 (1)[c::]:6789 connect error [ 90.295491][ T4265] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.518337][ T4746] FAULT_INJECTION: forcing a failure. [ 90.518337][ T4746] name failslab, interval 1, probability 0, space 0, times 0 [ 90.571480][ T4746] CPU: 1 PID: 4746 Comm: syz.4.104 Not tainted syzkaller #0 [ 90.578854][ T4746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 90.589238][ T4746] Call Trace: [ 90.592689][ T4746] [ 90.595643][ T4746] dump_stack_lvl+0x188/0x250 [ 90.600555][ T4746] ? show_regs_print_info+0x20/0x20 [ 90.605988][ T4746] ? load_image+0x410/0x410 [ 90.610648][ T4746] should_fail+0x383/0x4b0 [ 90.615103][ T4746] should_failslab+0x5/0x20 [ 90.619947][ T4746] slab_pre_alloc_hook+0x51/0xc0 [ 90.624938][ T4746] ? anon_vma_clone+0xbc/0x4d0 [ 90.629736][ T4746] kmem_cache_alloc+0x3d/0x280 [ 90.634524][ T4746] anon_vma_clone+0xbc/0x4d0 [ 90.639140][ T4746] __split_vma+0x1ab/0x410 [ 90.643581][ T4746] ? find_vma+0x1df/0x230 [ 90.647957][ T4746] __do_munmap+0x40b/0xe10 [ 90.652425][ T4746] mremap_to+0x363/0x6b0 [ 90.656706][ T4746] __se_sys_mremap+0x412/0x950 [ 90.661487][ T4746] ? __x64_sys_mremap+0xc0/0xc0 [ 90.666374][ T4746] ? lock_chain_count+0x20/0x20 [ 90.671393][ T4746] ? lockdep_hardirqs_on+0x94/0x140 [ 90.676629][ T4746] ? __x64_sys_mremap+0x1c/0xc0 [ 90.681507][ T4746] do_syscall_64+0x4c/0xa0 [ 90.685944][ T4746] ? clear_bhb_loop+0x30/0x80 [ 90.690651][ T4746] ? clear_bhb_loop+0x30/0x80 [ 90.695374][ T4746] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.701313][ T4746] RIP: 0033:0x7f26f1dc1b19 [ 90.705752][ T4746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.725388][ T4746] RSP: 002b:00007f26f0018028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 90.733849][ T4746] RAX: ffffffffffffffda RBX: 00007f26f2047fa0 RCX: 00007f26f1dc1b19 [ 90.741867][ T4746] RDX: 0000000000001000 RSI: 0000000000002000 RDI: 0000200000fa4000 [ 90.749971][ T4746] RBP: 00007f26f1e59b70 R08: 0000200000fa2000 R09: 0000000000000000 [ 90.757975][ T4746] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 90.765966][ T4746] R13: 00007f26f2048038 R14: 00007f26f2047fa0 R15: 00007fff965cfe88 [ 90.773976][ T4746] [ 90.825177][ T4750] binder: 4749:4750 ioctl 5000940a 2000000028c0 returned -22 [ 90.858937][ T4753] FAULT_INJECTION: forcing a failure. [ 90.858937][ T4753] name failslab, interval 1, probability 0, space 0, times 0 [ 90.876611][ T4753] CPU: 0 PID: 4753 Comm: syz.1.106 Not tainted syzkaller #0 [ 90.883960][ T4753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 90.894064][ T4753] Call Trace: [ 90.897388][ T4753] [ 90.900356][ T4753] dump_stack_lvl+0x188/0x250 [ 90.905086][ T4753] ? show_regs_print_info+0x20/0x20 [ 90.910340][ T4753] ? load_image+0x410/0x410 [ 90.914906][ T4753] ? __might_sleep+0xf0/0xf0 [ 90.919541][ T4753] ? __lock_acquire+0x7d40/0x7d40 [ 90.924615][ T4753] should_fail+0x383/0x4b0 [ 90.929074][ T4753] should_failslab+0x5/0x20 [ 90.933623][ T4753] slab_pre_alloc_hook+0x51/0xc0 [ 90.938708][ T4753] __kmalloc_node_track_caller+0x68/0x3a0 [ 90.944483][ T4753] ? sctp_packet_transmit+0x2ec/0x28c0 [ 90.950020][ T4753] ? __alloc_skb+0xf4/0x750 [ 90.954572][ T4753] ? sctp_packet_transmit+0x2ec/0x28c0 [ 90.960085][ T4753] __alloc_skb+0x22c/0x750 [ 90.964660][ T4753] sctp_packet_transmit+0x2ec/0x28c0 [ 90.969991][ T4753] ? __sctp_packet_append_chunk+0x8e5/0xc90 [ 90.975965][ T4753] ? sctp_packet_append_chunk+0xaf6/0x1030 [ 90.981829][ T4753] sctp_packet_singleton+0x22c/0x330 [ 90.986973][ T4265] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.987160][ T4753] ? sctp_outq_select_transport+0x590/0x590 [ 91.003164][ T4753] ? sctp_outq_select_transport+0x480/0x590 [ 91.009118][ T4753] ? sctp_transport_burst_limited+0x193/0x280 [ 91.015245][ T4753] sctp_outq_flush+0x4b3/0x32b0 [ 91.018948][ T4265] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.020131][ T4753] ? lockdep_hardirqs_on+0x94/0x140 [ 91.038226][ T4753] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 91.044167][ T4753] ? rcu_is_watching+0x11/0xa0 [ 91.048977][ T4753] ? enqueue_timer+0x225/0x520 [ 91.053785][ T4753] ? sctp_outq_tail+0x8a0/0x8a0 [ 91.058692][ T4753] ? sctp_outq_uncork+0x49/0xa0 [ 91.063584][ T4753] sctp_do_sm+0x4f7f/0x5690 [ 91.068132][ T4753] ? verify_lock_unused+0x140/0x140 [ 91.071500][ T4754] bridge0: port 3(vlan2) entered blocking state [ 91.073387][ T4753] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 91.085531][ T4753] ? sctp_stream_init_ext+0x53/0x160 [ 91.090870][ T4753] ? ____sys_sendmsg+0x5be/0x8f0 [ 91.095853][ T4753] ? ___sys_sendmsg+0x236/0x2e0 [ 91.100774][ T4753] ? __sk_mem_raise_allocated+0x6e2/0x11b0 [ 91.106634][ T4753] sctp_primitive_ASSOCIATE+0x91/0xc0 [ 91.107068][ T4754] bridge0: port 3(vlan2) entered disabled state [ 91.112050][ T4753] sctp_sendmsg_to_asoc+0x14c6/0x1f00 [ 91.123718][ T4753] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 91.129658][ T4753] ? __sctp_connect+0xd80/0xd80 [ 91.133753][ T4754] device vlan2 entered promiscuous mode [ 91.134550][ T4753] ? __local_bh_enable_ip+0x136/0x1c0 [ 91.145502][ T4753] ? _local_bh_enable+0xa0/0xa0 [ 91.150406][ T4753] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 91.155993][ T4753] ? security_sctp_bind_connect+0x85/0xb0 [ 91.161755][ T4753] sctp_sendmsg+0x1b87/0x2940 [ 91.166512][ T4753] ? sctp_getsockopt+0x8a0/0x8a0 [ 91.171490][ T4753] ? aa_af_perm+0x340/0x340 [ 91.176035][ T4753] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 91.182497][ T4753] ? aa_sock_msg_perm+0x94/0x150 [ 91.187474][ T4753] ? sock_rps_record_flow+0x17/0x3b0 [ 91.192802][ T4753] ? inet_sendmsg+0x7a/0x2a0 [ 91.197430][ T4753] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 91.202755][ T4753] ? inet_send_prepare+0x250/0x250 [ 91.207913][ T4753] ____sys_sendmsg+0x5be/0x8f0 [ 91.212728][ T4753] ? __sys_sendmsg_sock+0x30/0x30 [ 91.217805][ T4753] ? import_iovec+0x6f/0xa0 [ 91.222352][ T4753] ___sys_sendmsg+0x236/0x2e0 [ 91.227079][ T4753] ? __sys_sendmsg+0x290/0x290 [ 91.231871][ T4753] ? verify_lock_unused+0x140/0x140 [ 91.237103][ T4753] __sys_sendmmsg+0x2ba/0x500 [ 91.241830][ T4753] ? __ia32_sys_sendmsg+0x80/0x80 [ 91.246929][ T4753] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 91.252960][ T4753] ? lock_chain_count+0x20/0x20 [ 91.257862][ T4753] __x64_sys_sendmmsg+0x9c/0xb0 [ 91.262780][ T4753] do_syscall_64+0x4c/0xa0 [ 91.267239][ T4753] ? clear_bhb_loop+0x30/0x80 [ 91.271958][ T4753] ? clear_bhb_loop+0x30/0x80 [ 91.276690][ T4753] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.282627][ T4753] RIP: 0033:0x7f7d4d8bfb19 [ 91.287088][ T4753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.306738][ T4753] RSP: 002b:00007f7d4bb16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 91.315216][ T4753] RAX: ffffffffffffffda RBX: 00007f7d4db45fa0 RCX: 00007f7d4d8bfb19 [ 91.323253][ T4753] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 91.331293][ T4753] RBP: 00007f7d4d957b70 R08: 0000000000000000 R09: 0000000000000000 [ 91.339343][ T4753] R10: 0000000020008050 R11: 0000000000000246 R12: 0000000000000000 [ 91.347367][ T4753] R13: 00007f7d4db46038 R14: 00007f7d4db45fa0 R15: 00007fff74345328 [ 91.355409][ T4753] [ 91.358496][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.427097][ T4265] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 91.480671][ T4265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.569510][ T4265] usb 3-1: Product: syz [ 91.597954][ T4265] usb 3-1: Manufacturer: syz [ 91.662390][ T4265] usb 3-1: SerialNumber: syz [ 92.152490][ T4781] ucma_write: process 66 (syz.3.116) changed security contexts after opening file descriptor, this is not allowed. [ 92.755577][ T4265] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 93.079102][ T4818] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 93.175970][ T4265] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 93.388166][ T1111] usb 3-1: USB disconnect, device number 2 [ 93.393228][ T4265] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 93.429471][ T4265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.447923][ T4265] usb 4-1: Product: syz [ 93.452158][ T4265] usb 4-1: Manufacturer: syz [ 93.488115][ T4265] usb 4-1: SerialNumber: syz [ 93.524340][ T4265] usb 4-1: config 0 descriptor?? [ 93.555171][ T4817] ODEBUG: Out of memory. ODEBUG disabled [ 93.563416][ T4803] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 93.593823][ T4265] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 93.721445][ T4837] loop4: detected capacity change from 0 to 512 [ 93.805763][ T4265] usb 4-1: USB disconnect, device number 3 [ 94.420416][ T4850] xt_hashlimit: size too large, truncated to 1048576 [ 94.488034][ T4845] jffs2: notice: (4845) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 94.506969][ T4837] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.529063][ T4817] syz.1.127 (4817): drop_caches: 2 [ 94.605845][ T4857] FAULT_INJECTION: forcing a failure. [ 94.605845][ T4857] name failslab, interval 1, probability 0, space 0, times 0 [ 94.618841][ T4857] CPU: 0 PID: 4857 Comm: syz.3.139 Not tainted syzkaller #0 [ 94.626175][ T4857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 94.636271][ T4857] Call Trace: [ 94.639595][ T4857] [ 94.642563][ T4857] dump_stack_lvl+0x188/0x250 [ 94.647290][ T4857] ? show_regs_print_info+0x20/0x20 [ 94.652533][ T4857] ? load_image+0x410/0x410 [ 94.657176][ T4857] ? __might_sleep+0xf0/0xf0 [ 94.661812][ T4857] ? __lock_acquire+0x7d40/0x7d40 [ 94.666878][ T4857] should_fail+0x383/0x4b0 [ 94.671346][ T4857] should_failslab+0x5/0x20 [ 94.675883][ T4857] slab_pre_alloc_hook+0x51/0xc0 [ 94.680871][ T4857] kmem_cache_alloc_trace+0x47/0x290 [ 94.686211][ T4857] ? legacy_init_fs_context+0x4d/0xb0 [ 94.691624][ T4857] ? __raw_spin_lock_init+0x41/0x100 [ 94.696952][ T4857] legacy_init_fs_context+0x4d/0xb0 [ 94.702208][ T4857] alloc_fs_context+0x628/0x7d0 [ 94.707107][ T4857] __se_sys_fsopen+0x111/0x320 [ 94.712132][ T4857] do_syscall_64+0x4c/0xa0 [ 94.716605][ T4857] ? clear_bhb_loop+0x30/0x80 [ 94.721340][ T4857] ? clear_bhb_loop+0x30/0x80 [ 94.726164][ T4857] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.732114][ T4857] RIP: 0033:0x7f3bcbe3eb19 [ 94.736589][ T4857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.756257][ T4857] RSP: 002b:00007f3bca074028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 94.764810][ T4857] RAX: ffffffffffffffda RBX: 00007f3bcc0c5090 RCX: 00007f3bcbe3eb19 [ 94.772833][ T4857] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 94.780854][ T4857] RBP: 00007f3bcbed6b70 R08: 0000000000000000 R09: 0000000000000000 [ 94.788871][ T4857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.796890][ T4857] R13: 00007f3bcc0c5128 R14: 00007f3bcc0c5090 R15: 00007ffe761718f8 [ 94.804915][ T4857] [ 94.833462][ T4845] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 94.897372][ T4858] ceph: No mds server is up or the cluster is laggy [ 95.153470][ T4329] libceph: connect (1)[c::]:6789 error -101 [ 95.218173][ T4329] libceph: mon0 (1)[c::]:6789 connect error [ 95.233791][ T4837] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.134: inode has both inline data and extents flags [ 95.248644][ T4837] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.134: couldn't read orphan inode 15 (err -117) [ 95.263026][ T4837] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 95.659944][ T4866] ip_tables: iptables: counters copy to user failed while replacing table [ 95.723083][ T4866] hub 5-0:1.0: USB hub found [ 95.730948][ T4866] hub 5-0:1.0: 1 port detected [ 96.166144][ T4264] libceph: connect (1)[c::]:6789 error -101 [ 96.174722][ T4264] libceph: mon0 (1)[c::]:6789 connect error [ 96.410002][ T4877] FAULT_INJECTION: forcing a failure. [ 96.410002][ T4877] name failslab, interval 1, probability 0, space 0, times 0 [ 96.429609][ T4877] CPU: 1 PID: 4877 Comm: syz.4.143 Not tainted syzkaller #0 [ 96.436965][ T4877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.447072][ T4877] Call Trace: [ 96.450390][ T4877] [ 96.453367][ T4877] dump_stack_lvl+0x188/0x250 [ 96.458096][ T4877] ? show_regs_print_info+0x20/0x20 [ 96.463353][ T4877] ? load_image+0x410/0x410 [ 96.467904][ T4877] ? __lock_acquire+0x7d40/0x7d40 [ 96.472986][ T4877] should_fail+0x383/0x4b0 [ 96.477445][ T4877] should_failslab+0x5/0x20 [ 96.481994][ T4877] slab_pre_alloc_hook+0x51/0xc0 [ 96.486985][ T4877] kmem_cache_alloc_trace+0x47/0x290 [ 96.492324][ T4877] ? __list_lru_init+0x535/0xac0 [ 96.497323][ T4877] __list_lru_init+0x535/0xac0 [ 96.502156][ T4877] alloc_super+0x787/0x970 [ 96.506617][ T4877] ? kill_mtd_super+0x60/0x60 [ 96.511423][ T4877] sget_fc+0x2d4/0x6f0 [ 96.515543][ T4877] ? mtd_test_super+0x1d0/0x1d0 [ 96.520435][ T4877] ? jffs2_reconfigure+0x310/0x310 [ 96.525589][ T4877] mtd_get_sb+0x5a/0x2b0 [ 96.529869][ T4877] ? mtd_get_sb_by_nr+0x7c/0xa0 [ 96.534782][ T4877] get_tree_mtd+0x5e2/0x760 [ 96.539344][ T4877] ? jffs2_reconfigure+0x310/0x310 [ 96.544490][ T4877] ? mtd_proc_show+0x270/0x270 [ 96.549822][ T4877] ? apparmor_capable+0x12c/0x190 [ 96.554881][ T4877] ? bpf_lsm_capable+0x5/0x10 [ 96.559587][ T4877] ? security_capable+0x85/0xb0 [ 96.564477][ T4877] vfs_get_tree+0x88/0x270 [ 96.568933][ T4877] do_new_mount+0x247/0xa50 [ 96.573488][ T4877] __se_sys_mount+0x2e3/0x3d0 [ 96.578301][ T4877] ? __x64_sys_mount+0xc0/0xc0 [ 96.583111][ T4877] ? lockdep_hardirqs_on+0x94/0x140 [ 96.588360][ T4877] ? __x64_sys_mount+0x1c/0xc0 [ 96.593168][ T4877] do_syscall_64+0x4c/0xa0 [ 96.597625][ T4877] ? clear_bhb_loop+0x30/0x80 [ 96.602339][ T4877] ? clear_bhb_loop+0x30/0x80 [ 96.607054][ T4877] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.612991][ T4877] RIP: 0033:0x7f26f1dc1b19 [ 96.617451][ T4877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.637146][ T4877] RSP: 002b:00007f26f0018028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 96.645619][ T4877] RAX: ffffffffffffffda RBX: 00007f26f2047fa0 RCX: 00007f26f1dc1b19 [ 96.653642][ T4877] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 00002000000001c0 [ 96.661768][ T4877] RBP: 00007f26f1e59b70 R08: 0000000000000000 R09: 0000000000000000 [ 96.669782][ T4877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.677808][ T4877] R13: 00007f26f2048038 R14: 00007f26f2047fa0 R15: 00007fff965cfe88 [ 96.685848][ T4877] [ 96.755622][ T4879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.146'. [ 96.799628][ T4881] tmpfs: Unknown parameter 'quota' [ 97.225357][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 97.245356][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 97.295378][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 97.368487][ T4264] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.685383][ T4897] jffs2: notice: (4897) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 97.781618][ T4264] usb 5-1: Using ep0 maxpacket: 32 [ 97.813459][ T4905] loop3: detected capacity change from 0 to 512 [ 97.842913][ T4908] jffs2: notice: (4908) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 97.879654][ T4905] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.903666][ T4905] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.154: inode has both inline data and extents flags [ 97.920398][ T4905] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.154: couldn't read orphan inode 15 (err -117) [ 97.932870][ T4905] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 98.092252][ T4264] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 98.186317][ T4264] usb 5-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 98.404983][ T4915] ip_tables: iptables: counters copy to user failed while replacing table [ 98.751234][ T4912] FAULT_INJECTION: forcing a failure. [ 98.751234][ T4912] name failslab, interval 1, probability 0, space 0, times 0 [ 98.764001][ T4912] CPU: 0 PID: 4912 Comm: syz.0.155 Not tainted syzkaller #0 [ 98.771349][ T4912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 98.781435][ T4912] Call Trace: [ 98.784750][ T4912] [ 98.787728][ T4912] dump_stack_lvl+0x188/0x250 [ 98.792475][ T4912] ? show_regs_print_info+0x20/0x20 [ 98.797727][ T4912] ? load_image+0x410/0x410 [ 98.802290][ T4912] ? __might_sleep+0xf0/0xf0 [ 98.807066][ T4912] ? __lock_acquire+0x7d40/0x7d40 [ 98.812162][ T4912] should_fail+0x383/0x4b0 [ 98.816651][ T4912] should_failslab+0x5/0x20 [ 98.821217][ T4912] slab_pre_alloc_hook+0x51/0xc0 [ 98.826224][ T4912] kmem_cache_alloc_trace+0x47/0x290 [ 98.831603][ T4912] ? __se_sys_fsopen+0x19c/0x320 [ 98.836600][ T4912] __se_sys_fsopen+0x19c/0x320 [ 98.841423][ T4912] do_syscall_64+0x4c/0xa0 [ 98.845888][ T4912] ? clear_bhb_loop+0x30/0x80 [ 98.850621][ T4912] ? clear_bhb_loop+0x30/0x80 [ 98.855370][ T4912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.861320][ T4912] RIP: 0033:0x7f4295078b19 [ 98.865780][ T4912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.885441][ T4912] RSP: 002b:00007f42932ae028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 98.894088][ T4912] RAX: ffffffffffffffda RBX: 00007f42952ff090 RCX: 00007f4295078b19 [ 98.902198][ T4912] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 98.910223][ T4912] RBP: 00007f4295110b70 R08: 0000000000000000 R09: 0000000000000000 [ 98.918241][ T4912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.926346][ T4912] R13: 00007f42952ff128 R14: 00007f42952ff090 R15: 00007ffdf389f208 [ 98.934385][ T4912] [ 98.937495][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.299915][ T4264] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 99.656003][ T4264] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 99.695888][ T4264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.756070][ T4264] usb 5-1: Product: syz [ 99.760356][ T4264] usb 5-1: Manufacturer: syz [ 99.765048][ T4264] usb 5-1: SerialNumber: syz [ 99.916366][ T4264] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 99.924799][ T4264] imon 5-1:155.0: unable to initialize intf0, err -19 [ 99.978960][ T4264] imon:imon_probe: failed to initialize context! [ 100.006497][ T4264] imon 5-1:155.0: unable to register, err -19 [ 100.137686][ T4264] usb 5-1: USB disconnect, device number 3 [ 100.328559][ T4930] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 100.364577][ T4930] overlayfs: overlapping lowerdir path [ 100.381115][ T4927] FAULT_INJECTION: forcing a failure. [ 100.381115][ T4927] name failslab, interval 1, probability 0, space 0, times 0 [ 100.409844][ T4927] CPU: 1 PID: 4927 Comm: syz.0.157 Not tainted syzkaller #0 [ 100.417206][ T4927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 100.427299][ T4927] Call Trace: [ 100.430614][ T4927] [ 100.433577][ T4927] dump_stack_lvl+0x188/0x250 [ 100.438307][ T4927] ? show_regs_print_info+0x20/0x20 [ 100.443561][ T4927] ? load_image+0x410/0x410 [ 100.448124][ T4927] ? __might_sleep+0xf0/0xf0 [ 100.452754][ T4927] ? __lock_acquire+0x7d40/0x7d40 [ 100.457826][ T4927] should_fail+0x383/0x4b0 [ 100.462293][ T4927] should_failslab+0x5/0x20 [ 100.466840][ T4927] slab_pre_alloc_hook+0x51/0xc0 [ 100.471825][ T4927] ? sk_prot_alloc+0x57/0x210 [ 100.476546][ T4927] kmem_cache_alloc+0x3d/0x280 [ 100.481478][ T4927] sk_prot_alloc+0x57/0x210 [ 100.486023][ T4927] ? sk_alloc+0x1d/0x310 [ 100.490399][ T4927] sk_alloc+0x2f/0x310 [ 100.494507][ T4927] ? inet6_create+0x7a8/0x1130 [ 100.499314][ T4927] inet6_create+0x7c4/0x1130 [ 100.503967][ T4927] __sock_create+0x473/0x910 [ 100.508617][ T4927] inet_ctl_sock_create+0x9f/0x1f0 [ 100.513776][ T4927] ? inet_gro_complete+0x570/0x570 [ 100.519077][ T4927] icmpv6_sk_init+0x142/0x330 [ 100.523818][ T4927] ? rcu_lock_release+0x20/0x20 [ 100.528760][ T4927] ? fib_default_rule_add+0x1fa/0x390 [ 100.534279][ T4927] ? ip6mr_net_init+0x2fa/0x3a0 [ 100.539184][ T4927] ops_init+0x360/0x5f0 [ 100.543406][ T4927] setup_net+0x39e/0xa10 [ 100.547705][ T4927] ? copy_net_ns+0x5b0/0x5b0 [ 100.552414][ T4927] ? copy_net_ns+0x324/0x5b0 [ 100.557106][ T4927] ? down_read_killable+0x1ce/0x340 [ 100.562542][ T4927] copy_net_ns+0x33e/0x5b0 [ 100.567057][ T4927] create_new_namespaces+0x3ce/0x700 [ 100.572408][ T4927] unshare_nsproxy_namespaces+0x116/0x160 [ 100.578187][ T4927] ksys_unshare+0x4f6/0x8e0 [ 100.582744][ T4927] ? __lock_acquire+0x7d40/0x7d40 [ 100.587828][ T4927] ? sighand_ctor+0x40/0x40 [ 100.592383][ T4927] ? lock_chain_count+0x20/0x20 [ 100.597273][ T4927] ? syscall_enter_from_user_mode+0x21/0x70 [ 100.603222][ T4927] __x64_sys_unshare+0x34/0x40 [ 100.608047][ T4927] do_syscall_64+0x4c/0xa0 [ 100.612648][ T4927] ? clear_bhb_loop+0x30/0x80 [ 100.617392][ T4927] ? clear_bhb_loop+0x30/0x80 [ 100.622133][ T4927] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.628074][ T4927] RIP: 0033:0x7f4295078b19 [ 100.632667][ T4927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.652435][ T4927] RSP: 002b:00007f42932cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 100.660902][ T4927] RAX: ffffffffffffffda RBX: 00007f42952fefa0 RCX: 00007f4295078b19 [ 100.668922][ T4927] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 100.677132][ T4927] RBP: 00007f4295110b70 R08: 0000000000000000 R09: 0000000000000000 [ 100.685170][ T4927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.693192][ T4927] R13: 00007f42952ff038 R14: 00007f42952fefa0 R15: 00007ffdf389f208 [ 100.701259][ T4927] [ 100.745704][ T4927] IPv6: Failed to initialize the ICMP6 control socket (err -105) [ 100.806300][ T4941] tmpfs: Unknown parameter 'quota' [ 100.875447][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.933251][ T4947] jffs2: notice: (4947) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 101.136259][ T4953] syz.3.167: vmalloc error: size 35184372089152, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 101.155445][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 101.180461][ T4953] CPU: 0 PID: 4953 Comm: syz.3.167 Not tainted syzkaller #0 [ 101.187814][ T4953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 101.197903][ T4953] Call Trace: [ 101.201220][ T4953] [ 101.204187][ T4953] dump_stack_lvl+0x188/0x250 [ 101.208909][ T4953] ? rcu_lock_release+0x5/0x20 [ 101.213716][ T4953] ? show_regs_print_info+0x20/0x20 [ 101.218981][ T4953] ? load_image+0x410/0x410 [ 101.223557][ T4953] warn_alloc+0x245/0x320 [ 101.228025][ T4953] ? zone_watermark_ok_safe+0x250/0x250 [ 101.233620][ T4953] ? __mutex_lock_common+0x435/0x2400 [ 101.239048][ T4953] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 101.244907][ T4953] __vmalloc_node_range+0x2b1/0x8b0 [ 101.250169][ T4953] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 101.255255][ T4953] vmalloc+0x75/0x80 [ 101.259189][ T4953] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 101.264257][ T4953] dvb_dvr_do_ioctl+0x12a/0x220 [ 101.269158][ T4953] dvb_usercopy+0x191/0x2b0 [ 101.273712][ T4953] ? dvb_dvr_release+0x3d0/0x3d0 [ 101.278702][ T4953] ? dvb_generic_ioctl+0xb0/0xb0 [ 101.283715][ T4953] ? dvb_dvr_poll+0x230/0x230 [ 101.288452][ T4953] dvb_dvr_ioctl+0x25/0x30 [ 101.292915][ T4953] __se_sys_ioctl+0xfa/0x170 [ 101.297564][ T4953] do_syscall_64+0x4c/0xa0 [ 101.302017][ T4953] ? clear_bhb_loop+0x30/0x80 [ 101.306761][ T4953] ? clear_bhb_loop+0x30/0x80 [ 101.311483][ T4953] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.317443][ T4953] RIP: 0033:0x7f3bcbe3eb19 [ 101.321912][ T4953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.341565][ T4953] RSP: 002b:00007f3bca095028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.350030][ T4953] RAX: ffffffffffffffda RBX: 00007f3bcc0c4fa0 RCX: 00007f3bcbe3eb19 [ 101.358164][ T4953] RDX: 0000200000000140 RSI: 0000000000006f2d RDI: 0000000000000003 [ 101.366178][ T4953] RBP: 00007f3bcbed6b70 R08: 0000000000000000 R09: 0000000000000000 [ 101.374190][ T4953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.378995][ T4960] jffs2: notice: (4960) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 101.382211][ T4953] R13: 00007f3bcc0c5038 R14: 00007f3bcc0c4fa0 R15: 00007ffe761718f8 [ 101.406646][ T4953] [ 101.409743][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.422425][ T23] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on syz0 [ 101.433765][ T21] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.448097][ T4953] Mem-Info: [ 101.451452][ T4953] active_anon:276 inactive_anon:6137 isolated_anon:0 [ 101.451452][ T4953] active_file:5122 inactive_file:35795 isolated_file:0 [ 101.451452][ T4953] unevictable:768 dirty:124 writeback:0 [ 101.451452][ T4953] slab_reclaimable:20846 slab_unreclaimable:95655 [ 101.451452][ T4953] mapped:30047 shmem:1639 pagetables:666 bounce:0 [ 101.451452][ T4953] kernel_misc_reclaimable:0 [ 101.451452][ T4953] free:1376858 free_pcp:12367 free_cma:0 [ 101.466784][ T21] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.493273][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.514230][ T23] wiimote 0005:057E:0306.0001: New device registered [ 101.536173][ T4958] wiimote 0005:057E:0306.0001: Device removed [ 101.613673][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 101.629376][ T21] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 101.656564][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.661114][ T4953] Node 0 active_anon:1072kB inactive_anon:27436kB active_file:20288kB inactive_file:143280kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120488kB dirty:492kB writeback:0kB shmem:7276kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11048kB pagetables:2664kB all_unreclaimable? no [ 101.695726][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.704533][ T21] usb 2-1: config 0 descriptor?? [ 101.715248][ T4953] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 101.744509][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.754556][ T4961] fido_id[4961]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.808472][ T4953] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 101.862468][ T4953] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 101.869069][ T4953] Node 0 DMA32 free:1580144kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1076kB inactive_anon:28400kB active_file:20292kB inactive_file:143288kB unevictable:1536kB writepending:552kB present:3129332kB managed:2590800kB mlocked:0kB bounce:0kB free_pcp:35804kB local_pcp:19104kB free_cma:0kB [ 101.930522][ T4968] netlink: 36 bytes leftover after parsing attributes in process `syz.0.172'. [ 101.960388][ T4953] lowmem_reserve[]: 0 0 0 0 0 [ 101.965206][ T4953] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 101.991130][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.093778][ T4953] lowmem_reserve[]: 0 0 0 0 0 [ 102.113524][ T4953] Node 1 Normal free:3911812kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:11012kB local_pcp:5664kB free_cma:0kB [ 102.142423][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.179665][ T4970] binder: 4969:4970 ioctl 5000940a 2000000028c0 returned -22 [ 102.230811][ T4953] lowmem_reserve[]: 0 0 0 0 0 [ 102.232064][ T21] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 102.243641][ T4953] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 102.256774][ T21] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 102.264166][ T21] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 102.284420][ T21] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 102.303798][ T4953] Node 0 DMA32: 598*4kB (UM) 130*8kB (UME) 47*16kB (UME) 58*32kB (UME) 12*64kB (UME) 13*128kB (UM) 10*256kB (UM) 4*512kB (UM) 4*1024kB (UE) 3*2048kB (UME) 381*4096kB (UM) = 1583896kB [ 102.305959][ T21] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 102.339925][ T21] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 102.391257][ T4953] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 102.404505][ T4953] Node 1 Normal: 139*4kB (UME) 31*8kB (UME) 22*16kB (UME) 70*32kB (UME) 37*64kB (UME) 14*128kB (UE) 13*256kB (UM) 3*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 951*4096kB (M) = 3911812kB [ 102.446301][ T4953] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 102.480732][ T4953] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 102.511989][ T4953] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 102.525472][ T4953] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 102.581895][ T21] usb 2-1: USB disconnect, device number 3 [ 102.725804][ T4953] 45462 total pagecache pages [ 102.762120][ T4953] 0 pages in swap cache [ 102.798400][ T4953] Swap cache stats: add 223, delete 223, find 0/1 [ 102.893676][ T4953] Free swap = 124728kB [ 102.905502][ T4953] Total swap = 124996kB [ 102.917944][ T4953] 2097051 pages RAM [ 102.922003][ T4953] 0 pages HighMem/MovableOnly [ 102.978201][ T4953] 415364 pages reserved [ 102.982660][ T4953] 0 pages cma reserved [ 103.213807][ T4986] tmpfs: Unknown parameter 'quota' [ 103.484840][ T5004] binder: 5002:5004 ioctl 5000940a 2000000028c0 returned -22 [ 103.704108][ T5013] jffs2: notice: (5013) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 104.393097][ T5031] loop1: detected capacity change from 0 to 512 [ 104.425542][ T4264] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.434167][ T5031] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.465257][ T5031] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.195: inode has both inline data and extents flags [ 104.479018][ T5031] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.195: couldn't read orphan inode 15 (err -117) [ 104.493239][ T5031] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 104.665511][ T4264] usb 1-1: Using ep0 maxpacket: 8 [ 104.691572][ T1108] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.095586][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 105.241828][ T5045] tmpfs: Unknown parameter 'quota' [ 105.326726][ T4264] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.345939][ T4264] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.365416][ T4264] usb 1-1: config 0 interface 0 has no altsetting 0 [ 105.372135][ T4264] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 105.386172][ T4264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.403316][ T4264] usb 1-1: config 0 descriptor?? [ 105.435618][ T1108] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 105.445230][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 105.453795][ T1108] usb 4-1: Product: syz [ 105.459081][ T1108] usb 4-1: Manufacturer: syz [ 105.463730][ T1108] usb 4-1: SerialNumber: syz [ 105.471650][ T1108] usb 4-1: config 0 descriptor?? [ 105.540288][ T4329] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.796192][ T4329] usb 5-1: Using ep0 maxpacket: 32 [ 105.916419][ T4329] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 105.927804][ T4264] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 105.957389][ T4264] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 105.991235][ T4264] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 106.014478][ T4264] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 106.051218][ T4264] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 106.105630][ T4329] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 106.124030][ T4264] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 106.146135][ T4329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.154252][ T4329] usb 5-1: Product: syz [ 106.159301][ T4329] usb 5-1: Manufacturer: syz [ 106.163968][ T4329] usb 5-1: SerialNumber: syz [ 106.190815][ T4329] usb 5-1: config 0 descriptor?? [ 106.198058][ T5021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.213701][ T1111] usb 4-1: USB disconnect, device number 4 [ 106.217316][ T5037] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 106.255285][ T5063] Cannot find add_set index 0 as target [ 106.263389][ T4264] usb 1-1: USB disconnect, device number 2 [ 106.271692][ T4329] hub 5-1:0.0: bad descriptor, ignoring hub [ 106.308024][ T4329] hub: probe of 5-1:0.0 failed with error -5 [ 106.355119][ T4329] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 106.365604][ T5066] jffs2: notice: (5066) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 106.452738][ T1108] usb 5-1: USB disconnect, device number 4 [ 106.465406][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 106.590420][ T5074] jffs2: notice: (5074) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 106.798970][ T5083] loop3: detected capacity change from 0 to 512 [ 106.888984][ T5083] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.946686][ T5087] tmpfs: Unknown parameter 'quota' [ 106.978249][ T5083] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.211: inode has both inline data and extents flags [ 106.992090][ T5083] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.211: couldn't read orphan inode 15 (err -117) [ 107.005450][ T5083] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 107.966388][ T5106] binder: 5105:5106 ioctl 5000940a 2000000028c0 returned -22 [ 108.155410][ T1111] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 108.260918][ T5125] loop1: detected capacity change from 0 to 512 [ 108.309458][ T5125] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.342146][ T5125] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.226: inode has both inline data and extents flags [ 108.362446][ T5125] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.226: couldn't read orphan inode 15 (err -117) [ 108.374597][ T5125] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,nodiscard,,errors=continue. Quota mode: writeback. [ 108.540096][ T5129] tmpfs: Unknown parameter 'quota' [ 108.578573][ T5137] jffs2: notice: (5137) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 108.645301][ T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 109.025507][ T1111] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 109.033768][ T1111] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 109.058436][ T1111] usb 4-1: config 0 interface 0 has no altsetting 0 [ 109.126824][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 109.226787][ T1111] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 109.239150][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 109.248158][ T13] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.259645][ T1111] usb 4-1: Product: syz [ 109.263855][ T1111] usb 4-1: Manufacturer: syz [ 109.269255][ T13] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.279872][ T1111] usb 4-1: SerialNumber: syz [ 109.287206][ T1111] usb 4-1: config 0 descriptor?? [ 109.292446][ T13] usb 5-1: config 0 interface 0 has no altsetting 0 [ 109.299489][ T13] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 109.303739][ T5153] [ 109.310572][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.310923][ T5153] ====================================================== [ 109.310932][ T5153] WARNING: possible circular locking dependency detected [ 109.332985][ T5153] syzkaller #0 Not tainted [ 109.337421][ T5153] ------------------------------------------------------ [ 109.337855][ T1111] hub 4-1:0.0: bad descriptor, ignoring hub [ 109.344464][ T5153] syz.2.231/5153 is trying to acquire lock: [ 109.352795][ T13] usb 5-1: config 0 descriptor?? [ 109.356323][ T5153] ffff88807a9dd350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x55c/0xd10 [ 109.356395][ T5153] [ 109.356395][ T5153] but task is already holding lock: [ 109.356402][ T5153] ffff8880621aa5d8 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 109.388830][ T5153] [ 109.388830][ T5153] which lock already depends on the new lock. [ 109.388830][ T5153] [ 109.399258][ T5153] [ 109.399258][ T5153] the existing dependency chain (in reverse order) is: [ 109.408420][ T5153] [ 109.408420][ T5153] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 109.417159][ T5153] __mutex_lock_common+0x1e5/0x2400 [ 109.423037][ T5153] mutex_lock_nested+0x17/0x20 [ 109.428358][ T5153] nfc_urelease_event_work+0x120/0x310 [ 109.434385][ T5153] process_one_work+0x867/0xff0 [ 109.439788][ T5153] worker_thread+0xad7/0x12a0 [ 109.445031][ T5153] kthread+0x42e/0x520 [ 109.449657][ T5153] ret_from_fork+0x1f/0x30 [ 109.454622][ T5153] [ 109.454622][ T5153] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 109.462467][ T5153] __mutex_lock_common+0x1e5/0x2400 [ 109.468216][ T5153] mutex_lock_nested+0x17/0x20 [ 109.473534][ T5153] nfc_register_device+0x38/0x300 [ 109.479235][ T5153] nci_register_device+0x89f/0x9f0 [ 109.484994][ T5153] virtual_ncidev_open+0x55/0xc0 [ 109.490528][ T5153] misc_open+0x31f/0x390 [ 109.495323][ T5153] chrdev_open+0x585/0x5f0 [ 109.500396][ T5153] do_dentry_open+0x7f7/0xf90 [ 109.505630][ T5153] path_openat+0x2718/0x2fb0 [ 109.510857][ T5153] do_filp_open+0x1df/0x400 [ 109.515900][ T5153] do_sys_openat2+0x14b/0x500 [ 109.521116][ T5153] __x64_sys_openat+0x135/0x160 [ 109.526506][ T5153] do_syscall_64+0x4c/0xa0 [ 109.531456][ T5153] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.537889][ T5153] [ 109.537889][ T5153] -> #1 (nci_mutex){+.+.}-{3:3}: [ 109.545040][ T5153] __mutex_lock_common+0x1e5/0x2400 [ 109.550783][ T5153] mutex_lock_nested+0x17/0x20 [ 109.556090][ T5153] virtual_nci_close+0x13/0x40 [ 109.561396][ T5153] nci_dev_up+0x976/0xd90 [ 109.566271][ T5153] nfc_dev_up+0x15d/0x310 [ 109.571146][ T5153] nfc_genl_dev_up+0x85/0xd0 [ 109.576396][ T5153] genl_rcv_msg+0xd0b/0xfa0 [ 109.581469][ T5153] netlink_rcv_skb+0x1e9/0x430 [ 109.586789][ T5153] genl_rcv+0x24/0x40 [ 109.591323][ T5153] netlink_unicast+0x804/0x9e0 [ 109.596626][ T5153] netlink_sendmsg+0x8ba/0xbe0 [ 109.602072][ T5153] ____sys_sendmsg+0x5be/0x8f0 [ 109.607402][ T5153] ___sys_sendmsg+0x236/0x2e0 [ 109.612632][ T5153] __se_sys_sendmsg+0x1b7/0x2a0 [ 109.618022][ T5153] do_syscall_64+0x4c/0xa0 [ 109.622979][ T5153] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.629418][ T5153] [ 109.629418][ T5153] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 109.637081][ T5153] __lock_acquire+0x38f7/0x7d40 [ 109.642467][ T5153] lock_acquire+0x19f/0x400 [ 109.647501][ T5153] __mutex_lock_common+0x1e5/0x2400 [ 109.653265][ T5153] mutex_lock_nested+0x17/0x20 [ 109.658569][ T5153] nci_start_poll+0x55c/0xd10 [ 109.663788][ T5153] nfc_start_poll+0x141/0x2c0 [ 109.669028][ T5153] nfc_genl_start_poll+0x1d7/0x340 [ 109.674672][ T5153] genl_rcv_msg+0xd0b/0xfa0 [ 109.679724][ T5153] netlink_rcv_skb+0x1e9/0x430 [ 109.685028][ T5153] genl_rcv+0x24/0x40 [ 109.689549][ T5153] netlink_unicast+0x804/0x9e0 [ 109.694847][ T5153] netlink_sendmsg+0x8ba/0xbe0 [ 109.700192][ T5153] ____sys_sendmsg+0x5be/0x8f0 [ 109.705493][ T5153] ___sys_sendmsg+0x236/0x2e0 [ 109.710710][ T5153] __se_sys_sendmsg+0x1b7/0x2a0 [ 109.716099][ T5153] do_syscall_64+0x4c/0xa0 [ 109.721060][ T5153] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.727521][ T5153] [ 109.727521][ T5153] other info that might help us debug this: [ 109.727521][ T5153] [ 109.737761][ T5153] Chain exists of: [ 109.737761][ T5153] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 109.737761][ T5153] [ 109.752233][ T5153] Possible unsafe locking scenario: [ 109.752233][ T5153] [ 109.759702][ T5153] CPU0 CPU1 [ 109.765079][ T5153] ---- ---- [ 109.770493][ T5153] lock(&genl_data->genl_data_mutex); [ 109.775970][ T5153] lock(nfc_devlist_mutex); [ 109.783101][ T5153] lock(&genl_data->genl_data_mutex); [ 109.791090][ T5153] lock(&ndev->req_lock); [ 109.795525][ T5153] [ 109.795525][ T5153] *** DEADLOCK *** [ 109.795525][ T5153] [ 109.803715][ T5153] 4 locks held by syz.2.231/5153: [ 109.808748][ T5153] #0: ffffffff8e2c9a10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 109.816953][ T5153] #1: ffffffff8e2c9868 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x161/0xfa0 [ 109.825947][ T5153] #2: ffff8880621aa5d8 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 109.837012][ T5153] #3: ffff8880621aa190 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x4f/0x2c0 [ 109.846176][ T5153] [ 109.846176][ T5153] stack backtrace: [ 109.852097][ T5153] CPU: 1 PID: 5153 Comm: syz.2.231 Not tainted syzkaller #0 [ 109.859404][ T5153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.869490][ T5153] Call Trace: [ 109.872808][ T5153] [ 109.875771][ T5153] dump_stack_lvl+0x188/0x250 [ 109.880483][ T5153] ? load_image+0x410/0x410 [ 109.885012][ T5153] ? show_regs_print_info+0x20/0x20 [ 109.890255][ T5153] ? print_circular_bug+0x12b/0x1a0 [ 109.895491][ T5153] check_noncircular+0x2f8/0x400 [ 109.900459][ T5153] ? print_deadlock_bug+0x5d0/0x5d0 [ 109.905700][ T5153] ? lockdep_lock+0xf1/0x1f0 [ 109.910327][ T5153] ? mark_lock+0x94/0x320 [ 109.914765][ T5153] ? _find_first_zero_bit+0xd1/0xf0 [ 109.919979][ T5153] __lock_acquire+0x38f7/0x7d40 [ 109.924949][ T5153] ? slab_free_freelist_hook+0xec/0x170 [ 109.930518][ T5153] ? kfree+0xef/0x2a0 [ 109.934520][ T5153] ? nfc_llcp_build_gb+0x36d/0x440 [ 109.939647][ T5153] ? nfc_llcp_general_bytes+0xd5/0x240 [ 109.945128][ T5153] ? nfc_start_poll+0x141/0x2c0 [ 109.950018][ T5153] ? nfc_genl_start_poll+0x1d7/0x340 [ 109.955341][ T5153] ? verify_lock_unused+0x140/0x140 [ 109.960585][ T5153] ? netlink_unicast+0x804/0x9e0 [ 109.965540][ T5153] ? netlink_sendmsg+0x8ba/0xbe0 [ 109.970500][ T5153] ? ____sys_sendmsg+0x5be/0x8f0 [ 109.975450][ T5153] ? ___sys_sendmsg+0x236/0x2e0 [ 109.980325][ T5153] ? __se_sys_sendmsg+0x1b7/0x2a0 [ 109.985380][ T5153] ? do_syscall_64+0x4c/0xa0 [ 109.989988][ T5153] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.996081][ T5153] lock_acquire+0x19f/0x400 [ 110.000632][ T5153] ? nci_start_poll+0x55c/0xd10 [ 110.005530][ T5153] ? __might_sleep+0xf0/0xf0 [ 110.010137][ T5153] ? read_lock_is_recursive+0x10/0x10 [ 110.015533][ T5153] ? slab_free_freelist_hook+0xec/0x170 [ 110.021100][ T5153] __mutex_lock_common+0x1e5/0x2400 [ 110.026317][ T5153] ? nci_start_poll+0x55c/0xd10 [ 110.031188][ T5153] ? nfc_llcp_build_gb+0x36d/0x440 [ 110.036311][ T5153] ? nci_start_poll+0x55c/0xd10 [ 110.041181][ T5153] ? nfc_llcp_general_bytes+0x240/0x240 [ 110.046746][ T5153] ? mutex_lock_io_nested+0x60/0x60 [ 110.051965][ T5153] ? nfc_llcp_local_get+0x15f/0x1e0 [ 110.057187][ T5153] ? nfc_llcp_general_bytes+0x141/0x240 [ 110.062749][ T5153] mutex_lock_nested+0x17/0x20 [ 110.067539][ T5153] nci_start_poll+0x55c/0xd10 [ 110.072241][ T5153] ? nci_dev_down+0x40/0x40 [ 110.076772][ T5153] ? __mutex_lock_common+0x435/0x2400 [ 110.082177][ T5153] ? klist_iter_exit+0xbc/0xf0 [ 110.086962][ T5153] ? class_find_device+0x232/0x290 [ 110.092088][ T5153] ? nfc_genl_start_poll+0x1c9/0x340 [ 110.097397][ T5153] ? nfc_get_device+0x82/0xd0 [ 110.102107][ T5153] ? nfc_release+0x2e0/0x2e0 [ 110.106746][ T5153] nfc_start_poll+0x141/0x2c0 [ 110.111473][ T5153] nfc_genl_start_poll+0x1d7/0x340 [ 110.116603][ T5153] genl_rcv_msg+0xd0b/0xfa0 [ 110.121145][ T5153] ? genl_bind+0x370/0x370 [ 110.125587][ T5153] ? verify_lock_unused+0x140/0x140 [ 110.130812][ T5153] ? verify_lock_unused+0x140/0x140 [ 110.136043][ T5153] ? nfc_genl_dev_down+0xd0/0xd0 [ 110.141009][ T5153] netlink_rcv_skb+0x1e9/0x430 [ 110.145796][ T5153] ? genl_bind+0x370/0x370 [ 110.150232][ T5153] ? netlink_ack+0xb10/0xb10 [ 110.154846][ T5153] ? __lock_acquire+0x7d40/0x7d40 [ 110.159890][ T5153] ? down_read+0x1aa/0x2e0 [ 110.164329][ T5153] genl_rcv+0x24/0x40 [ 110.168345][ T5153] netlink_unicast+0x804/0x9e0 [ 110.173148][ T5153] netlink_sendmsg+0x8ba/0xbe0 [ 110.177956][ T5153] ? netlink_getsockopt+0x570/0x570 [ 110.183189][ T5153] ? aa_sock_msg_perm+0x94/0x150 [ 110.188180][ T5153] ? apparmor_socket_sendmsg+0x88/0x230 [ 110.193877][ T5153] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 110.199195][ T5153] ? security_socket_sendmsg+0x7c/0xa0 [ 110.204682][ T5153] ? netlink_getsockopt+0x570/0x570 [ 110.209909][ T5153] ____sys_sendmsg+0x5be/0x8f0 [ 110.214694][ T5153] ? __sys_sendmsg_sock+0x30/0x30 [ 110.219745][ T5153] ? import_iovec+0x6f/0xa0 [ 110.224294][ T5153] ___sys_sendmsg+0x236/0x2e0 [ 110.228995][ T5153] ? __sys_sendmsg+0x290/0x290 [ 110.233794][ T5153] __se_sys_sendmsg+0x1b7/0x2a0 [ 110.238668][ T5153] ? __x64_sys_sendmsg+0x80/0x80 [ 110.243623][ T5153] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 110.249629][ T5153] ? lockdep_hardirqs_on+0x94/0x140 [ 110.254850][ T5153] do_syscall_64+0x4c/0xa0 [ 110.259288][ T5153] ? clear_bhb_loop+0x30/0x80 [ 110.263985][ T5153] ? clear_bhb_loop+0x30/0x80 [ 110.268690][ T5153] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.274603][ T5153] RIP: 0033:0x7fd5b9ccfb19 [ 110.279038][ T5153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.298666][ T5153] RSP: 002b:00007fd5b7f05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.307098][ T5153] RAX: ffffffffffffffda RBX: 00007fd5b9f56090 RCX: 00007fd5b9ccfb19 [ 110.315123][ T5153] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 110.323123][ T5153] RBP: 00007fd5b9d67b70 R08: 0000000000000000 R09: 0000000000000000 [ 110.331229][ T5153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.339218][ T5153] R13: 00007fd5b9f56128 R14: 00007fd5b9f56090 R15: 00007ffeeaf48b58 [ 110.347215][ T5153] [ 110.374902][ T1111] hub: probe of 4-1:0.0 failed with error -5 [ 110.386897][ T1111] usb 4-1: selecting invalid altsetting 0 [ 110.404429][ T5154] binder: 5152:5154 ioctl 5000940a 2000000028c0 returned -22 [ 110.448067][ T1111] usb 4-1: USB disconnect, device number 5 [ 110.847200][ T13] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 110.854708][ T13] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 110.863725][ T13] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 110.870901][ T13] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 110.878306][ T13] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 110.886212][ T13] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 110.955465][ T1111] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 111.061691][ T4261] usb 5-1: USB disconnect, device number 5 [ 111.345529][ T1111] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 111.353895][ T1111] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 111.363868][ T1111] usb 4-1: config 0 interface 0 has no altsetting 0 [ 111.525656][ T1111] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 111.535116][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 111.543580][ T1111] usb 4-1: Product: syz [ 111.548219][ T1111] usb 4-1: Manufacturer: syz [ 111.552998][ T1111] usb 4-1: SerialNumber: syz [ 111.559725][ T1111] usb 4-1: config 0 descriptor?? [ 111.575489][ T1111] usb 4-1: can't set config #0, error -71 [ 111.587174][ T1111] usb 4-1: USB disconnect, device number 6 [ 112.167587][ T5153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.176456][ T5153] nci: nci_start_poll: failed to set local general bytes [ 112.184432][ T5146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512