last executing test programs: 3.576723333s ago: executing program 2 (id=384): r0 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, 0x0}) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000000)) 3.427283537s ago: executing program 2 (id=386): r0 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./tracing\x00', &(0x7f0000000380)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r2, r1, 0x0, 0x7ffff000) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 3.29729525s ago: executing program 4 (id=388): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000080), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)) openat$ptp0(0xffffffffffffff9c, &(0x7f00000007c0), 0xe8481, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000880)={0x97f, 0x2, 0x7fff, 0x1, 0x9, 0x7, 0x651, 0x510000, 0x80, 0x8000000000000, 0x10d, 0x3, 0x0, 0xc, 0x10000144, 0xcc3, 0x8000001, 0x1, 0x94d6, 0x9, 0xfffffffb, 0x8, 0xb, 0x83, 0x2, 0x40000000009}) 3.148579123s ago: executing program 4 (id=392): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001740)) mount_setattr(0xffffffffffffffff, 0x0, 0x1900, &(0x7f00000017c0)={0x100000, 0x71, 0x100000, {r0}}, 0x20) 2.944718699s ago: executing program 4 (id=395): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x5, 0x47, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ttyUSB0\x00', 0x2, 0x0) 2.88679831s ago: executing program 0 (id=398): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000800)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0xe) 2.46483918s ago: executing program 2 (id=405): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="240000001500050001000003000000000e010000080002000900000008000600e8030000", 0x24) 2.446613611s ago: executing program 2 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000004c0)='27', 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@generic={&(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x0, 0x8}, 0x18) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000000314010000000000000000002500020073797a5f6465766963655f6e616d655f33325f63686172735f31323334353637000000000800410073697700070033006c6f"], 0x48}}, 0x0) 2.296741344s ago: executing program 2 (id=409): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) 1.993549882s ago: executing program 2 (id=411): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 1.832697395s ago: executing program 0 (id=412): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000140)={0xa, 0xfc00, @multicast2}, 0x3c, &(0x7f0000000180)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001200)=[@ip_tos_int={{0x14, 0x29, 0xb, 0xfc00}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) 1.742802857s ago: executing program 0 (id=416): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 1.65769822s ago: executing program 3 (id=417): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) recvmmsg(r0, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x4000a}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001800)=""/174, 0xae}, {&(0x7f00000018c0)=""/83, 0x53}, {&(0x7f0000001940)=""/4091, 0xffb}, {&(0x7f0000002940)=""/163, 0xa3}, {&(0x7f0000002a00)=""/256, 0x100}, {&(0x7f0000002b00)=""/175, 0xaf}], 0x6}, 0x1}], 0x4, 0x0, 0x0) 1.600449411s ago: executing program 0 (id=419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f0000001800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8}, 0x94) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f00000004c0)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r5, &(0x7f0000000500)="0802110095010802110000000800", 0xe) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 1.256541699s ago: executing program 1 (id=420): modify_ldt$write2(0x11, &(0x7f0000020380)={0xcb, 0x0, 0x2000, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000203c0)={0x22800000, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.148746752s ago: executing program 1 (id=421): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) 936.824347ms ago: executing program 0 (id=422): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000640)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000680)='X', 0x34000, 0x0, &(0x7f00000006c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) close(0x3) 936.685517ms ago: executing program 1 (id=423): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='l', 0x34000, 0x20000010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x9, "a302830aa071624261"}, &(0x7f0000000200)=0x11) 708.563553ms ago: executing program 1 (id=424): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d00)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000d40)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000d80)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x10, 0x7, 0x0, 0x800, 0x3, 0x6, 0x5, 0x5}}]}}]}, 0x44}}, 0x404c0d4) write$tun(r0, &(0x7f0000000f80)=ANY=[], 0xfdef) socket$inet_udp(0x2, 0x2, 0x0) 708.389053ms ago: executing program 3 (id=425): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000440)={0x7f, 0x200004d, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000004c0)={0x200, 0x4f, 0x4}) r4 = syz_open_dev$dri(&(0x7f00000005c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000640)={0x5, 0x2, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000680)={r2}) close_range(r0, 0xffffffffffffffff, 0x0) 708.297763ms ago: executing program 0 (id=426): socket$inet6(0xa, 0x2, 0x3a) syz_usb_connect(0x2, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) futex(0x0, 0x18b, 0x1, 0x0, 0x0, 0x2) r3 = memfd_create(0x0, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r3, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000001c0)='\'-\x00', 0x0) 601.971085ms ago: executing program 3 (id=427): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c56287423", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000006c0)="77a47ab22899566ca67fb9d1f81c0b25994cd4b0d7dac876f176ff6fb1472dc59b97e3c149ad99095f707ca3609152345db33ee23d2fd6f1e3339595341e8be2128b48fe40b23d7560c27681ef97418965f868f17058b5d3a034decff66f3658fdd93f3fbe38bfe22c21a6e1ceb9b7676ab0fc3b865cfaad428816467b918a5363c59bdec1f6b9289c20983a50fcffe8", 0x90}, {&(0x7f0000000780)="7460629f0a7b9dbaab3552107e043287fabf1d4dc41dcfb0d43cb7d61d1e26f0f7a77fbc850de54ed7f1c3ca323e0a0f1f002003f4971d9532e8085a81389b4ccb9e38f9bb73e0df0f7ccd", 0x4b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="707951f902b9b75992a223694f8f696e0e226227dd7e6144cbaa29adc89e40244c5fac831954461fa40e17ba7aed291ae95be7d5de418df274be408d1c545a27c885036f71d620248640a6835d7dbd81b3863b25bd0c3c9266b1d298aa8ab5f62cb2ddf46527af2a22c167a2811c60e1054a0f129d16d9669507df592342023d847f12ca487c3f08e1d13cf35c275224afa5499c75666436de55ee7205df7196295fe2", 0xa3}, {&(0x7f0000000c40)="1c7a34f0ffb7d96ee0386dc77757a4b76c67fcc2fde9481e0faaac324da5fbc44a0c1249201f0ff9c80d4e74526d09fc08952953ee2103af9acfa2f52447c167", 0x40}, {&(0x7f0000000c80)="1a71b445af10c15ccf203f6f9a315f50e8463c710dc579c9215abc23ce33b0a4769e7226d2bfd2091b53b2c086607efa6fd790fd5b9b282c0005bac90d972380103b91b9e14e7e844ee9a9ec85406a1acb6baf7ee3f4bd9f9f9fec7f3fd4d34b0085ee1fb44936be165369164c648fc0f5d0189f066e0f33052602b0e4b9bfcc1cd2f01c49c83054d8", 0x89}, {&(0x7f0000000d40)="528eb332bd3b33c7a76f9e34a94048450d52fc", 0x13}], 0x4, &(0x7f0000000ec0)}}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000000f80)="a84d952383bd620520da8bca3550", 0xe}, {&(0x7f0000000fc0)="90d3b7cb22a31b96", 0x8}, {&(0x7f00000010c0)="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", 0x10d}, {&(0x7f0000001080)="7e1e89d3ffc6ba9ae5a34f16b65e2d6555e5f2549e15a0a2e5", 0x19}, {&(0x7f0000001700)="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", 0x3fd}], 0x5}}], 0x5, 0x40028d0) 507.796988ms ago: executing program 4 (id=428): r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x1, 0x48042) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="c2fb306f35f8651471c739fdfea6991b487bfc69dc4f", 0x16}], 0x1) 432.74694ms ago: executing program 3 (id=429): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bfde, 0xe1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x88b1}, 0x0) 367.460291ms ago: executing program 3 (id=430): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0) mount$bind(&(0x7f0000000680)='.\x00', &(0x7f00000006c0)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000740)='./file0/../file0\x00', &(0x7f0000000780)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000800)='./file0/../file0\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0xb65c97, 0x0) umount2(&(0x7f0000000880)='./file0\x00', 0x2) 354.472362ms ago: executing program 4 (id=431): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="281effe935fdca24ffffff556ea6e5000020000000797a81621071b300000000", 0x20}], 0x1, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @multicast1}}}], 0x20}}, {{&(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x18}}], 0x18}}], 0x2, 0x4800) 241.529114ms ago: executing program 1 (id=432): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) 241.388814ms ago: executing program 3 (id=433): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x2, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0xffff8001, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x4, 0xfffffffe, 0x0, 0x0, 0x1], [0x7fff, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0x43d5, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x8, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0x200, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 241.272284ms ago: executing program 4 (id=434): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000240)={0x127, 0xc9a, 0x8, 0x8, 0x1ff, 0xf}) r1 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 1 (id=435): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') read$FUSE(r0, &(0x7f00000027c0)={0x2020}, 0x2038) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. [ 63.255099][ T4172] cgroup: Unknown subsys name 'net' [ 63.404957][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.893540][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.181200][ T4195] rdma_rxe: rxe_register_device failed with error -23 [ 66.191075][ T4189] rdma_rxe: rxe_register_device failed with error -23 [ 66.199401][ T4195] rdma_rxe: failed to add rxe_eth0 [ 66.201095][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.212785][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.219534][ T4186] rdma_rxe: rxe_register_device failed with error -23 [ 66.222990][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.232190][ T4191] rdma_rxe: rxe_register_device failed with error -23 [ 66.247324][ T4189] rdma_rxe: failed to add rxe_eth0 [ 66.269122][ T4186] rdma_rxe: failed to add rxe_eth0 [ 66.276001][ T4191] rdma_rxe: failed to add rxe_eth0 [ 66.338244][ T4185] infiniband rxe0: set active [ 66.352229][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.361987][ T4185] infiniband rxe0: added rxe_eth0 [ 66.380176][ T4186] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.420782][ T4185] RDS/IB: rxe0: added [ 66.425853][ T4185] smc: adding ib device rxe0 with port count 1 [ 66.432512][ T4185] smc: ib device rxe0 port 1 has pnetid [ 66.445615][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.541097][ T4191] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.549078][ T1107] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.661856][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 66.689468][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 66.753602][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.957564][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.964709][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.975870][ T4189] device bridge_slave_0 entered promiscuous mode [ 66.989111][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.996220][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.007020][ T4189] device bridge_slave_1 entered promiscuous mode [ 67.015024][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.021750][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.031307][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.050355][ T4195] device bridge_slave_0 entered promiscuous mode [ 67.080630][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 67.116592][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.130167][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.138759][ T4195] device bridge_slave_1 entered promiscuous mode [ 67.162375][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.195562][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.288666][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.309855][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.317054][ T4189] team0: Port device team_slave_0 added [ 67.339293][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.372392][ T4189] team0: Port device team_slave_1 added [ 67.436104][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 67.467293][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.474300][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.523211][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.540623][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.549057][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.557739][ T4186] device bridge_slave_0 entered promiscuous mode [ 67.568430][ T4195] team0: Port device team_slave_0 added [ 67.577551][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.584642][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.597693][ T4186] device bridge_slave_1 entered promiscuous mode [ 67.611197][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.618594][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.649616][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.665982][ T4195] team0: Port device team_slave_1 added [ 67.770357][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.782289][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.813460][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.827379][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.862227][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.874695][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.914478][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.928343][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.956758][ T4189] device hsr_slave_0 entered promiscuous mode [ 67.963754][ T4189] device hsr_slave_1 entered promiscuous mode [ 67.972939][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.999533][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.006656][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.022789][ T4191] device bridge_slave_0 entered promiscuous mode [ 68.063618][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.076416][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.085362][ T4191] device bridge_slave_1 entered promiscuous mode [ 68.110807][ T4186] team0: Port device team_slave_0 added [ 68.117834][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 68.117834][ T4174] Bluetooth: hci4: command 0x0409 tx timeout [ 68.119022][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 68.182660][ T4186] team0: Port device team_slave_1 added [ 68.193998][ T4195] device hsr_slave_0 entered promiscuous mode [ 68.197228][ T4174] Bluetooth: hci3: command 0x0409 tx timeout [ 68.210353][ T4195] device hsr_slave_1 entered promiscuous mode [ 68.217147][ T4174] Bluetooth: hci1: command 0x0409 tx timeout [ 68.224122][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.234735][ T4195] Cannot create hsr debugfs directory [ 68.304917][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.345361][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.371433][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.380349][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.407777][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.445841][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.456376][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.482687][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.513289][ T3850] infiniband rxe0: set active [ 68.522376][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 68.549778][ T4191] team0: Port device team_slave_0 added [ 68.560109][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.583661][ T4191] team0: Port device team_slave_1 added [ 68.633909][ T4186] device hsr_slave_0 entered promiscuous mode [ 68.641094][ T4186] device hsr_slave_1 entered promiscuous mode [ 68.648752][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.656442][ T4186] Cannot create hsr debugfs directory [ 68.715223][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.722357][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.753471][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.801984][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.809181][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.835308][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.850835][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.858277][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.866267][ T4185] device bridge_slave_0 entered promiscuous mode [ 68.900561][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.908187][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.917384][ T4185] device bridge_slave_1 entered promiscuous mode [ 69.011895][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.027753][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.039928][ T4191] device hsr_slave_0 entered promiscuous mode [ 69.046785][ T4191] device hsr_slave_1 entered promiscuous mode [ 69.053647][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.061800][ T4191] Cannot create hsr debugfs directory [ 69.115966][ T4185] team0: Port device team_slave_0 added [ 69.127792][ T4185] team0: Port device team_slave_1 added [ 69.134753][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.148597][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.182100][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.195308][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.205437][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.213146][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.239868][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.274959][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.282225][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.308385][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.367407][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.384283][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.422735][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.435135][ T4185] device hsr_slave_0 entered promiscuous mode [ 69.445984][ T4185] device hsr_slave_1 entered promiscuous mode [ 69.452883][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.460739][ T4185] Cannot create hsr debugfs directory [ 69.467809][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.519734][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.559472][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.569265][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.580100][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.695228][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.706198][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.724610][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.742386][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.758177][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.815443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.825243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.842323][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.855813][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.891314][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.902115][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.925660][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.936281][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.945507][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.956459][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.963830][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.973439][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.985502][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.994620][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.001774][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.043384][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.055724][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.065557][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.074847][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.083985][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.093585][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.100719][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.111330][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.122694][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.131271][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.138544][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.146689][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.159727][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.168368][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.177942][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.187638][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.197050][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 70.205822][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 70.211165][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.218141][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 70.238592][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.246602][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.256234][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.266790][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.275797][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.278717][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 70.291937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.301910][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.309294][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 70.317544][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.338206][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.351589][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.358914][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.367829][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.376288][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.388618][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.398471][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.433112][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.446226][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.454825][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.464517][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.474048][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.483286][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.492978][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.502013][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.510819][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.518223][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.526630][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.535629][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.545072][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.552235][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.560384][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.568783][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.578097][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.605434][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.624923][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.639586][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.655254][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.664611][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.673946][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.691379][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.709269][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.718912][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.728444][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.737490][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.746273][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.755682][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.785343][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.813016][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.831078][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.841767][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.851631][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.858816][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.908286][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.929634][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.939710][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.948780][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.958319][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.967508][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.974621][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.983160][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.992924][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.004352][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.014582][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.029652][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.076240][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.105153][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.114910][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.131549][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.163208][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.182876][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.203292][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.235344][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.244865][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.254148][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.264850][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.280617][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.291169][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.299551][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.308301][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.331614][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.338420][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.348439][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.356066][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.393408][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.475098][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.521074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.541479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.559969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.568604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.584759][ T4186] device veth0_vlan entered promiscuous mode [ 71.607811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.616407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.640704][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.655939][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.682536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.691848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.709175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.727585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.757425][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.766368][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.778653][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.785761][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.796014][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.806506][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.816606][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.824200][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.835937][ T4186] device veth1_vlan entered promiscuous mode [ 71.878812][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.888314][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.903851][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.912701][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.922225][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.931549][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.942016][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.952159][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.962630][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.971856][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.980041][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.013119][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.023269][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.032941][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.048070][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.058873][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.080756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.090143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.104626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.113038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.123959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.133534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.159523][ T4189] device veth0_vlan entered promiscuous mode [ 72.173357][ T4186] device veth0_macvtap entered promiscuous mode [ 72.185634][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.194705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.204418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.213480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.222605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.231536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.253762][ T4186] device veth1_macvtap entered promiscuous mode [ 72.262147][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.277280][ T4174] Bluetooth: hci0: command 0x040f tx timeout [ 72.282269][ T4189] device veth1_vlan entered promiscuous mode [ 72.295074][ T4174] Bluetooth: hci4: command 0x040f tx timeout [ 72.297627][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.303549][ T4174] Bluetooth: hci2: command 0x040f tx timeout [ 72.315558][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.325414][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.335225][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.347634][ T4195] device veth0_vlan entered promiscuous mode [ 72.357808][ T4174] Bluetooth: hci3: command 0x040f tx timeout [ 72.364439][ T4174] Bluetooth: hci1: command 0x040f tx timeout [ 72.381778][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.393407][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.406654][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.436294][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.450457][ T4195] device veth1_vlan entered promiscuous mode [ 72.479419][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.493729][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.504974][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.515617][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.524846][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.545152][ T4189] device veth0_macvtap entered promiscuous mode [ 72.561594][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.572765][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.585339][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.594919][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.605476][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.615565][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.636152][ T4191] device veth0_vlan entered promiscuous mode [ 72.645839][ T4189] device veth1_macvtap entered promiscuous mode [ 72.660811][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.671759][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.684021][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.693837][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.708672][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.718028][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.726489][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.739674][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.755617][ T4191] device veth1_vlan entered promiscuous mode [ 72.782386][ T4195] device veth0_macvtap entered promiscuous mode [ 72.794383][ T4195] device veth1_macvtap entered promiscuous mode [ 72.804431][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.813283][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.821677][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.830333][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.840798][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.849859][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.861522][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.910703][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.923965][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.936582][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.955289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.972222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.980989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.990659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.000465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.011766][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.023207][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.033430][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.044486][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.062223][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.074667][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.094159][ T4191] device veth0_macvtap entered promiscuous mode [ 73.105161][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.116242][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.129069][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.139431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.148489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.157786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.166732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.177726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.186573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.196501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.218653][ T4191] device veth1_macvtap entered promiscuous mode [ 73.229687][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.242826][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.252302][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.262530][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.277598][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.294409][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.304829][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.318280][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.334952][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.354939][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.364853][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.379249][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.389049][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.414554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.423468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.434342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.443195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.462161][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.473943][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.488080][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.499138][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.510115][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.520638][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.532669][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.570304][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.580607][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.593064][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.605003][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.615433][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.626378][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.636641][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.650773][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.668794][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.686033][ T4185] device veth0_vlan entered promiscuous mode [ 73.694247][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.703798][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.745368][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.759487][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.768534][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.776439][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.785907][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.795739][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.805609][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.817498][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.826292][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.835603][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.845480][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.886727][ T4185] device veth1_vlan entered promiscuous mode [ 73.995808][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.005273][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.013279][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.024500][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.033582][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.042007][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.057316][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.088129][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.096008][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.109745][ T4185] device veth0_macvtap entered promiscuous mode [ 74.133602][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.145097][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.158602][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.169534][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.188786][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.221341][ T4185] device veth1_macvtap entered promiscuous mode [ 74.248270][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.272804][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.319101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.332856][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.345880][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.358576][ T4228] Bluetooth: hci2: command 0x0419 tx timeout [ 74.370796][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.378134][ T4228] Bluetooth: hci4: command 0x0419 tx timeout [ 74.389625][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.397305][ T4228] Bluetooth: hci0: command 0x0419 tx timeout [ 74.407455][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.425170][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.435379][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.437225][ T4228] Bluetooth: hci1: command 0x0419 tx timeout [ 74.458563][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.463790][ T4228] Bluetooth: hci3: command 0x0419 tx timeout [ 74.477702][ T4324] EXT4-fs warning (device sda1): ext4_group_extend:1823: can't shrink FS - resize aborted [ 74.480656][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.501360][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.517302][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.526111][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.536413][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.546055][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.567975][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.580307][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.594449][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.605701][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.618150][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.630056][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.640395][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.651621][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.665391][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.685034][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.706547][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.721378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.737851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.766528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.783996][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.794802][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.810313][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.819199][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.839020][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.859044][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.899697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.039674][ T4332] FAULT_INJECTION: forcing a failure. [ 75.039674][ T4332] name failslab, interval 1, probability 0, space 0, times 1 [ 75.065719][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.085547][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.107196][ T4332] CPU: 1 PID: 4332 Comm: syz.4.5 Not tainted syzkaller #0 [ 75.114492][ T4332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 75.124611][ T4332] Call Trace: [ 75.127932][ T4332] [ 75.130898][ T4332] dump_stack_lvl+0x188/0x250 [ 75.133253][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.135640][ T4332] ? show_regs_print_info+0x20/0x20 [ 75.148111][ T4332] ? load_image+0x410/0x410 [ 75.152677][ T4332] should_fail+0x383/0x4b0 [ 75.157155][ T4332] should_failslab+0x5/0x20 [ 75.161697][ T4332] slab_pre_alloc_hook+0x51/0xc0 [ 75.166683][ T4332] kmem_cache_alloc_node+0x47/0x2c0 [ 75.171958][ T4332] ? __alloc_skb+0xf4/0x750 [ 75.176532][ T4332] __alloc_skb+0xf4/0x750 [ 75.180923][ T4332] _sctp_make_chunk+0x5b/0x430 [ 75.185733][ T4332] sctp_make_init+0x54f/0x2880 [ 75.190558][ T4332] ? default_post_xol_op+0x8a/0x480 [ 75.195822][ T4332] ? sctp_addto_chunk+0x220/0x220 [ 75.200895][ T4332] sctp_sf_do_prm_asoc+0xcb/0x3e0 [ 75.205966][ T4332] sctp_do_sm+0x245/0x5690 [ 75.210424][ T4332] ? stack_trace_snprint+0xe0/0xe0 [ 75.215596][ T4332] ? __lock_acquire+0x7d40/0x7d40 [ 75.220673][ T4332] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 75.226608][ T4332] ? sctp_stream_init_ext+0x53/0x160 [ 75.231938][ T4332] ? sctp_sendmsg_to_asoc+0x177c/0x1e10 [ 75.237585][ T4332] ? sctp_sendmsg+0x1b87/0x2940 [ 75.242477][ T4332] ? __sys_sendto+0x46d/0x620 [ 75.247196][ T4332] ? __x64_sys_sendto+0xda/0xf0 [ 75.252123][ T4332] ? __sk_mem_raise_allocated+0x6e2/0x11b0 [ 75.257987][ T4332] sctp_primitive_ASSOCIATE+0x91/0xc0 [ 75.263420][ T4332] sctp_sendmsg_to_asoc+0x14f4/0x1e10 [ 75.268857][ T4332] ? memcpy+0x3c/0x60 [ 75.272908][ T4332] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 75.278768][ T4332] ? __sctp_connect+0xd80/0xd80 [ 75.283676][ T4332] ? __local_bh_enable_ip+0x136/0x1c0 [ 75.289185][ T4332] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 75.294773][ T4332] ? security_sctp_bind_connect+0x85/0xb0 [ 75.300548][ T4332] sctp_sendmsg+0x1b87/0x2940 [ 75.305301][ T4332] ? sctp_getsockopt+0x8a0/0x8a0 [ 75.310322][ T4332] ? aa_af_perm+0x340/0x340 [ 75.314967][ T4332] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 75.321441][ T4332] ? aa_sock_msg_perm+0x94/0x150 [ 75.326589][ T4332] ? sock_rps_record_flow+0x17/0x3b0 [ 75.331939][ T4332] ? inet_sendmsg+0xca/0x2a0 [ 75.336593][ T4332] __sys_sendto+0x46d/0x620 [ 75.341151][ T4332] ? __ia32_sys_getpeername+0x80/0x80 [ 75.346617][ T4332] ? lock_chain_count+0x20/0x20 [ 75.351533][ T4332] __x64_sys_sendto+0xda/0xf0 [ 75.356268][ T4332] do_syscall_64+0x4c/0xa0 [ 75.360749][ T4332] ? clear_bhb_loop+0x30/0x80 [ 75.365480][ T4332] ? clear_bhb_loop+0x30/0x80 [ 75.370306][ T4332] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.376276][ T4332] RIP: 0033:0x7fa001a00559 [ 75.380890][ T4332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.400786][ T4332] RSP: 002b:00007f9fffc57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 75.409261][ T4332] RAX: ffffffffffffffda RBX: 00007fa001c86fa0 RCX: 00007fa001a00559 [ 75.417275][ T4332] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 75.425701][ T4332] RBP: 00007fa001a97b20 R08: 00002000000000c0 R09: 000000000000001c [ 75.434146][ T4332] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 75.442191][ T4332] R13: 00007fa001c87038 R14: 00007fa001c86fa0 R15: 00007ffdb5c46b78 [ 75.450234][ T4332] [ 75.473605][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.495127][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.534486][ T1128] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.116048][ T4353] syz.1.2 (4353) used greatest stack depth: 20400 bytes left [ 76.427191][ T4372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17'. [ 76.501529][ T4372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.570584][ T4375] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 76.618636][ T4375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.641238][ T4375] bond1: (slave lo): Enslaving as an active interface with an up link [ 76.669746][ T4375] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 76.716304][ T1140] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 76.811961][ T4381] EXT4-fs warning (device sda1): ext4_group_extend:1831: need to use ext2online to resize further [ 77.019587][ T4392] FAULT_INJECTION: forcing a failure. [ 77.019587][ T4392] name failslab, interval 1, probability 0, space 0, times 0 [ 77.052838][ T4392] CPU: 0 PID: 4392 Comm: syz.2.25 Not tainted syzkaller #0 [ 77.060303][ T4392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 77.070421][ T4392] Call Trace: [ 77.073741][ T4392] [ 77.076711][ T4392] dump_stack_lvl+0x188/0x250 [ 77.081444][ T4392] ? show_regs_print_info+0x20/0x20 [ 77.086703][ T4392] ? load_image+0x410/0x410 [ 77.091269][ T4392] should_fail+0x383/0x4b0 [ 77.095735][ T4392] should_failslab+0x5/0x20 [ 77.100281][ T4392] slab_pre_alloc_hook+0x51/0xc0 [ 77.105269][ T4392] __kmalloc_node_track_caller+0x68/0x3a0 [ 77.111037][ T4392] ? _sctp_make_chunk+0x5b/0x430 [ 77.116025][ T4392] ? __alloc_skb+0xf4/0x750 [ 77.120587][ T4392] ? _sctp_make_chunk+0x5b/0x430 [ 77.125578][ T4392] __alloc_skb+0x22c/0x750 [ 77.130221][ T4392] _sctp_make_chunk+0x5b/0x430 [ 77.135201][ T4392] sctp_make_init+0x54f/0x2880 [ 77.140019][ T4392] ? default_post_xol_op+0x8a/0x480 [ 77.145315][ T4392] ? sctp_addto_chunk+0x220/0x220 [ 77.150411][ T4392] sctp_sf_do_prm_asoc+0xcb/0x3e0 [ 77.155494][ T4392] sctp_do_sm+0x245/0x5690 [ 77.159967][ T4392] ? stack_trace_snprint+0xe0/0xe0 [ 77.165128][ T4392] ? __lock_acquire+0x7d40/0x7d40 [ 77.170231][ T4392] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 77.176178][ T4392] ? sctp_stream_init_ext+0x53/0x160 [ 77.181516][ T4392] ? sctp_sendmsg_to_asoc+0x177c/0x1e10 [ 77.187126][ T4392] ? sctp_sendmsg+0x1b87/0x2940 [ 77.192021][ T4392] ? __sys_sendto+0x46d/0x620 [ 77.196751][ T4392] ? __x64_sys_sendto+0xda/0xf0 [ 77.201685][ T4392] ? __sk_mem_raise_allocated+0x6e2/0x11b0 [ 77.207560][ T4392] sctp_primitive_ASSOCIATE+0x91/0xc0 [ 77.212987][ T4392] sctp_sendmsg_to_asoc+0x14f4/0x1e10 [ 77.218423][ T4392] ? memcpy+0x3c/0x60 [ 77.222474][ T4392] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 77.228362][ T4392] ? __sctp_connect+0xd80/0xd80 [ 77.233262][ T4392] ? __local_bh_enable_ip+0x136/0x1c0 [ 77.238685][ T4392] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 77.244279][ T4392] ? security_sctp_bind_connect+0x85/0xb0 [ 77.250049][ T4392] sctp_sendmsg+0x1b87/0x2940 [ 77.254785][ T4392] ? sctp_getsockopt+0x8a0/0x8a0 [ 77.259768][ T4392] ? aa_af_perm+0x340/0x340 [ 77.264326][ T4392] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 77.270792][ T4392] ? aa_sock_msg_perm+0x94/0x150 [ 77.275773][ T4392] ? sock_rps_record_flow+0x17/0x3b0 [ 77.281117][ T4392] ? inet_sendmsg+0xca/0x2a0 [ 77.285765][ T4392] __sys_sendto+0x46d/0x620 [ 77.290320][ T4392] ? __ia32_sys_getpeername+0x80/0x80 [ 77.295773][ T4392] ? lock_chain_count+0x20/0x20 [ 77.300686][ T4392] __x64_sys_sendto+0xda/0xf0 [ 77.305412][ T4392] do_syscall_64+0x4c/0xa0 [ 77.309892][ T4392] ? clear_bhb_loop+0x30/0x80 [ 77.314614][ T4392] ? clear_bhb_loop+0x30/0x80 [ 77.319482][ T4392] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.325434][ T4392] RIP: 0033:0x7f8fea7c4559 [ 77.329906][ T4392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.349778][ T4392] RSP: 002b:00007f8fe8a1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 77.358295][ T4392] RAX: ffffffffffffffda RBX: 00007f8feaa4afa0 RCX: 00007f8fea7c4559 [ 77.366328][ T4392] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 77.374359][ T4392] RBP: 00007f8fea85bb20 R08: 00002000000000c0 R09: 000000000000001c [ 77.382388][ T4392] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 77.390413][ T4392] R13: 00007f8feaa4b038 R14: 00007f8feaa4afa0 R15: 00007ffd26b362d8 [ 77.398463][ T4392] [ 78.341507][ T4422] FAULT_INJECTION: forcing a failure. [ 78.341507][ T4422] name failslab, interval 1, probability 0, space 0, times 0 [ 78.368074][ T4424] EXT4-fs warning (device sda1): ext4_group_extend:1831: need to use ext2online to resize further [ 78.394873][ T4422] CPU: 1 PID: 4422 Comm: syz.3.38 Not tainted syzkaller #0 [ 78.402151][ T4422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 78.412249][ T4422] Call Trace: [ 78.415568][ T4422] [ 78.418534][ T4422] dump_stack_lvl+0x188/0x250 [ 78.423256][ T4422] ? show_regs_print_info+0x20/0x20 [ 78.428532][ T4422] ? load_image+0x410/0x410 [ 78.433085][ T4422] ? __might_sleep+0xf0/0xf0 [ 78.437738][ T4422] ? __lock_acquire+0x7d40/0x7d40 [ 78.442841][ T4422] ? rcu_is_watching+0x11/0xa0 [ 78.447655][ T4422] should_fail+0x383/0x4b0 [ 78.452121][ T4422] should_failslab+0x5/0x20 [ 78.456688][ T4422] slab_pre_alloc_hook+0x51/0xc0 [ 78.461678][ T4422] kmem_cache_alloc_trace+0x47/0x290 [ 78.467020][ T4422] ? cuse_channel_open+0x1a8/0x610 [ 78.472193][ T4422] cuse_channel_open+0x1a8/0x610 [ 78.477182][ T4422] ? fuse_dax_writepages+0xe0/0xe0 [ 78.482365][ T4422] misc_open+0x31f/0x390 [ 78.486669][ T4422] chrdev_open+0x585/0x5f0 [ 78.491134][ T4422] ? cd_forget+0x160/0x160 [ 78.495597][ T4422] ? fsnotify_perm+0x3a7/0x560 [ 78.500406][ T4422] ? cd_forget+0x160/0x160 [ 78.504885][ T4422] do_dentry_open+0x7f7/0xf90 [ 78.509616][ T4422] ? vfs_open+0x2b/0x80 [ 78.513819][ T4422] path_openat+0x2718/0x2fb0 [ 78.518484][ T4422] ? __kasan_slab_alloc+0xa9/0xc0 [ 78.523556][ T4422] ? do_filp_open+0x400/0x400 [ 78.528296][ T4422] do_filp_open+0x1df/0x400 [ 78.532879][ T4422] ? vfs_tmpfile+0x300/0x300 [ 78.537532][ T4422] ? _raw_spin_unlock+0x24/0x40 [ 78.542459][ T4422] ? alloc_fd+0x59e/0x650 [ 78.546831][ T4422] do_sys_openat2+0x14b/0x500 [ 78.551579][ T4422] ? __lock_acquire+0x7d40/0x7d40 [ 78.556678][ T4422] ? do_sys_open+0xe0/0xe0 [ 78.561140][ T4422] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 78.567172][ T4422] ? lock_chain_count+0x20/0x20 [ 78.572285][ T4422] __x64_sys_openat+0x135/0x160 [ 78.577198][ T4422] do_syscall_64+0x4c/0xa0 [ 78.581675][ T4422] ? clear_bhb_loop+0x30/0x80 [ 78.586441][ T4422] ? clear_bhb_loop+0x30/0x80 [ 78.591175][ T4422] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.597123][ T4422] RIP: 0033:0x7f69b8b41559 [ 78.601577][ T4422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.621224][ T4422] RSP: 002b:00007f69b6d98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 78.629689][ T4422] RAX: ffffffffffffffda RBX: 00007f69b8dc7fa0 RCX: 00007f69b8b41559 [ 78.637752][ T4422] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: ffffffffffffff9c [ 78.645857][ T4422] RBP: 00007f69b8bd8b20 R08: 0000000000000000 R09: 0000000000000000 [ 78.653874][ T4422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.661898][ T4422] R13: 00007f69b8dc8038 R14: 00007f69b8dc7fa0 R15: 00007ffc8625ecf8 [ 78.669932][ T4422] [ 79.216317][ T4438] xt_hashlimit: size too large, truncated to 1048576 [ 79.235524][ T4440] netlink: 84 bytes leftover after parsing attributes in process `syz.3.43'. [ 79.469492][ T4449] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.505539][ T4228] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.971026][ T4467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.53'. [ 80.159776][ T4475] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.412913][ T4481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.56'. [ 80.441264][ T4484] Zero length message leads to an empty skb [ 81.133498][ T4496] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 81.854315][ T4501] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 82.016064][ T26] audit: type=1326 audit(1792555206.113:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4510 comm="syz.4.66" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa001a00559 code=0x7ffc0000 [ 82.062133][ T26] audit: type=1326 audit(1792555206.163:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4510 comm="syz.4.66" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fa001a00559 code=0x7ffc0000 [ 82.132456][ T26] audit: type=1326 audit(1792555206.183:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4510 comm="syz.4.66" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa001a00559 code=0x7ffc0000 [ 82.287775][ T4526] device batadv_slave_0 entered promiscuous mode [ 82.295009][ T4525] device batadv_slave_0 left promiscuous mode [ 82.455277][ T4529] FAULT_INJECTION: forcing a failure. [ 82.455277][ T4529] name failslab, interval 1, probability 0, space 0, times 0 [ 82.533617][ T4529] CPU: 1 PID: 4529 Comm: syz.1.70 Not tainted syzkaller #0 [ 82.540923][ T4529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 82.551058][ T4529] Call Trace: [ 82.554415][ T4529] [ 82.557383][ T4529] dump_stack_lvl+0x188/0x250 [ 82.562117][ T4529] ? show_regs_print_info+0x20/0x20 [ 82.567364][ T4529] ? load_image+0x410/0x410 [ 82.571912][ T4529] ? __might_sleep+0xf0/0xf0 [ 82.576542][ T4529] ? __lock_acquire+0x7d40/0x7d40 [ 82.581649][ T4529] should_fail+0x383/0x4b0 [ 82.586124][ T4529] should_failslab+0x5/0x20 [ 82.590662][ T4529] slab_pre_alloc_hook+0x51/0xc0 [ 82.595658][ T4529] kmem_cache_alloc_trace+0x47/0x290 [ 82.600976][ T4529] ? __ipv6_dev_mc_inc+0x47b/0xb20 [ 82.606213][ T4529] __ipv6_dev_mc_inc+0x47b/0xb20 [ 82.611212][ T4529] ? addrconf_sysctl_register+0x19d/0x1b0 [ 82.616978][ T4529] ipv6_add_dev+0xcd3/0x11a0 [ 82.621619][ T4529] addrconf_notify+0x66f/0xf20 [ 82.626424][ T4529] ? ip6mr_device_event+0x1da/0x200 [ 82.631664][ T4529] ? raw_notifier_call_chain+0xa3/0x160 [ 82.637263][ T4529] raw_notifier_call_chain+0xcb/0x160 [ 82.642682][ T4529] register_netdevice+0x12a8/0x1720 [ 82.647936][ T4529] ? netif_stacked_transfer_operstate+0x200/0x200 [ 82.654416][ T4529] register_netdev+0x37/0x50 [ 82.659053][ T4529] loopback_net_init+0x71/0x140 [ 82.663964][ T4529] ops_init+0x360/0x5f0 [ 82.668169][ T4529] setup_net+0x39e/0xa10 [ 82.672466][ T4529] ? copy_net_ns+0x5b0/0x5b0 [ 82.677127][ T4529] ? copy_net_ns+0x324/0x5b0 [ 82.681758][ T4529] ? down_read_killable+0x1ce/0x340 [ 82.686997][ T4529] copy_net_ns+0x33e/0x5b0 [ 82.691458][ T4529] create_new_namespaces+0x3ce/0x700 [ 82.696804][ T4529] unshare_nsproxy_namespaces+0x116/0x160 [ 82.702567][ T4529] ksys_unshare+0x4f6/0x8e0 [ 82.707127][ T4529] ? __lock_acquire+0x7d40/0x7d40 [ 82.712207][ T4529] ? sighand_ctor+0x40/0x40 [ 82.716751][ T4529] ? lock_chain_count+0x20/0x20 [ 82.721676][ T4529] ? syscall_enter_from_user_mode+0x21/0x70 [ 82.727625][ T4529] __x64_sys_unshare+0x34/0x40 [ 82.732536][ T4529] do_syscall_64+0x4c/0xa0 [ 82.736993][ T4529] ? clear_bhb_loop+0x30/0x80 [ 82.741713][ T4529] ? clear_bhb_loop+0x30/0x80 [ 82.746438][ T4529] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.752375][ T4529] RIP: 0033:0x7fb600eae559 [ 82.756833][ T4529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.776495][ T4529] RSP: 002b:00007fb5ff105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 82.784991][ T4529] RAX: ffffffffffffffda RBX: 00007fb601134fa0 RCX: 00007fb600eae559 [ 82.793006][ T4529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 82.801010][ T4529] RBP: 00007fb600f45b20 R08: 0000000000000000 R09: 0000000000000000 [ 82.809017][ T4529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.817026][ T4529] R13: 00007fb601135038 R14: 00007fb601134fa0 R15: 00007fffffc20078 [ 82.825055][ T4529] [ 82.907933][ T4529] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.195807][ T4551] device syzkaller0 entered promiscuous mode [ 83.224749][ T4535] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.274200][ T4594] device syzkaller0 entered promiscuous mode [ 85.364724][ T4683] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 85.775438][ T4694] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 85.817873][ T4694] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 85.829853][ T4704] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.850000][ T4698] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 85.863083][ T4698] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 85.898900][ T4706] input: syz0 as /devices/virtual/input/input5 [ 86.073812][ T4714] netlink: 'syz.3.156': attribute type 1 has an invalid length. [ 86.109607][ T4714] netlink: 'syz.3.156': attribute type 2 has an invalid length. [ 86.258017][ T4727] jffs2: notice: (4727) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 86.391428][ T4737] FAULT_INJECTION: forcing a failure. [ 86.391428][ T4737] name failslab, interval 1, probability 0, space 0, times 0 [ 86.442736][ T4737] CPU: 0 PID: 4737 Comm: syz.4.166 Not tainted syzkaller #0 [ 86.450113][ T4737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 86.461092][ T4737] Call Trace: [ 86.464454][ T4737] [ 86.467423][ T4737] dump_stack_lvl+0x188/0x250 [ 86.472144][ T4737] ? show_regs_print_info+0x20/0x20 [ 86.477477][ T4737] ? load_image+0x410/0x410 [ 86.482031][ T4737] ? __might_sleep+0xf0/0xf0 [ 86.486665][ T4737] ? __lock_acquire+0x7d40/0x7d40 [ 86.491754][ T4737] should_fail+0x383/0x4b0 [ 86.496258][ T4737] should_failslab+0x5/0x20 [ 86.500800][ T4737] slab_pre_alloc_hook+0x51/0xc0 [ 86.505972][ T4737] __kmalloc+0x6b/0x340 [ 86.510184][ T4737] ? tomoyo_encode+0x28a/0x550 [ 86.515008][ T4737] tomoyo_encode+0x28a/0x550 [ 86.519652][ T4737] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 86.525373][ T4737] tomoyo_check_open_permission+0x1eb/0x410 [ 86.531319][ T4737] ? tomoyo_check_path_number_acl+0x280/0x280 [ 86.537470][ T4737] ? __lock_acquire+0x7d40/0x7d40 [ 86.542537][ T4737] ? __rwlock_init+0x140/0x140 [ 86.547338][ T4737] ? preempt_count_add+0x8d/0x190 [ 86.552404][ T4737] ? hook_file_open+0xf1/0x230 [ 86.557204][ T4737] ? tomoyo_file_open+0xe9/0x170 [ 86.562187][ T4737] security_file_open+0x5e/0xa0 [ 86.567143][ T4737] do_dentry_open+0x321/0xf90 [ 86.571905][ T4737] ? vfs_open+0x2b/0x80 [ 86.576111][ T4737] path_openat+0x2718/0x2fb0 [ 86.580795][ T4737] ? do_filp_open+0x400/0x400 [ 86.585530][ T4737] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 86.591570][ T4737] do_filp_open+0x1df/0x400 [ 86.596221][ T4737] ? vfs_tmpfile+0x300/0x300 [ 86.600890][ T4737] ? _raw_spin_unlock+0x24/0x40 [ 86.605784][ T4737] ? alloc_fd+0x59e/0x650 [ 86.610164][ T4737] do_sys_openat2+0x14b/0x500 [ 86.614869][ T4737] ? __lock_acquire+0x7d40/0x7d40 [ 86.619937][ T4737] ? do_sys_open+0xe0/0xe0 [ 86.624388][ T4737] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 86.630422][ T4737] ? lock_chain_count+0x20/0x20 [ 86.635327][ T4737] __x64_sys_openat+0x135/0x160 [ 86.640230][ T4737] do_syscall_64+0x4c/0xa0 [ 86.644731][ T4737] ? clear_bhb_loop+0x30/0x80 [ 86.649454][ T4737] ? clear_bhb_loop+0x30/0x80 [ 86.654174][ T4737] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.660101][ T4737] RIP: 0033:0x7fa0019c0d8e [ 86.664555][ T4737] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 86.684194][ T4737] RSP: 002b:00007f9fffc569b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 86.692653][ T4737] RAX: ffffffffffffffda RBX: 00007f9fffc576c0 RCX: 00007fa0019c0d8e [ 86.693549][ T1324] cfg80211: failed to load regulatory.db [ 86.700684][ T4737] RDX: 0000000000080001 RSI: 00007fa001a6b0a0 RDI: ffffffffffffff9c [ 86.700719][ T4737] RBP: 00007fa001a6b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 86.700733][ T4737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 86.700746][ T4737] R13: 00007f9fffc56a90 R14: 00007fa001c86fa0 R15: 00007ffdb5c46b78 [ 86.700777][ T4737] [ 86.866927][ T4737] ERROR: Out of memory at tomoyo_realpath_from_path. [ 86.874624][ T4737] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 87.130615][ T4756] input: syz1 as /devices/virtual/input/input6 [ 87.447666][ T4764] mmap: syz.0.171 (4764) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 87.902070][ T4779] netlink: 25 bytes leftover after parsing attributes in process `syz.3.183'. [ 88.557028][ T21] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 88.916914][ T4804] page:ffffea0004600000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 88.925912][ T21] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 88.949324][ T4804] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 88.955577][ T21] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 88.971044][ T4804] raw: 017ff00000001000 ffffea0004600008 ffffea0004600008 0000000000000000 [ 88.985123][ T21] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.012889][ T4804] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 89.039933][ T4804] page dumped because: unmovable page [ 89.050304][ T4802] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.061216][ T4804] page_owner info is not present (never set?) [ 89.090815][ T4807] process 'syz.0.196' launched './file2' with NULL argv: empty string added [ 89.157402][ T21] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 89.197292][ T21] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 89.213564][ T4802] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.221016][ T21] usb 4-1: Product: syz [ 89.250887][ T21] usb 4-1: Manufacturer: syz [ 89.255581][ T21] usb 4-1: SerialNumber: syz [ 89.275351][ T4807] FAULT_INJECTION: forcing a failure. [ 89.275351][ T4807] name failslab, interval 1, probability 0, space 0, times 0 [ 89.289393][ T21] usb 4-1: config 0 descriptor?? [ 89.328572][ T4790] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 89.355244][ T21] usb 4-1: selecting invalid altsetting 0 [ 89.368644][ T4802] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.380453][ T4807] CPU: 1 PID: 4807 Comm: syz.0.196 Not tainted syzkaller #0 [ 89.387801][ T4807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 89.397989][ T4807] Call Trace: [ 89.401304][ T4807] [ 89.404265][ T4807] dump_stack_lvl+0x188/0x250 [ 89.409086][ T4807] ? show_regs_print_info+0x20/0x20 [ 89.414329][ T4807] ? load_image+0x410/0x410 [ 89.418880][ T4807] ? __lock_acquire+0x7d40/0x7d40 [ 89.423958][ T4807] should_fail+0x383/0x4b0 [ 89.428437][ T4807] should_failslab+0x5/0x20 [ 89.432987][ T4807] slab_pre_alloc_hook+0x51/0xc0 [ 89.437972][ T4807] __kmalloc+0x6b/0x340 [ 89.442179][ T4807] ? tomoyo_supervisor+0xc5f/0x1190 [ 89.447430][ T4807] tomoyo_supervisor+0xc5f/0x1190 [ 89.452525][ T4807] ? tomoyo_profile+0x50/0x50 [ 89.457248][ T4807] ? vsnprintf+0x1b22/0x1c20 [ 89.461906][ T4807] ? vscnprintf+0x80/0x80 [ 89.466291][ T4807] ? tomoyo_check_acl+0x3a4/0x420 [ 89.471385][ T4807] tomoyo_path_number_perm+0x4fb/0x6b0 [ 89.476983][ T4807] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 89.482498][ T4807] ? __lock_acquire+0x7d40/0x7d40 [ 89.487564][ T4807] ? do_raw_spin_lock+0x128/0x2f0 [ 89.492647][ T4807] ? do_raw_spin_unlock+0x11d/0x230 [ 89.497883][ T4807] ? d_set_d_op+0x25b/0x370 [ 89.502431][ T4807] ? simple_lookup+0xc1/0xf0 [ 89.507064][ T4807] ? lookup_one_qstr_excl+0x11c/0x240 [ 89.512482][ T4807] tomoyo_path_mkdir+0xad/0xf0 [ 89.517293][ T4807] ? tomoyo_path_unlink+0xf0/0xf0 [ 89.522370][ T4807] ? kern_path_create+0x190/0x190 [ 89.527438][ T4807] security_path_mkdir+0xe0/0x130 [ 89.532506][ T4807] do_mkdirat+0x15e/0x5c0 [ 89.536877][ T4807] ? vfs_mkdir+0x570/0x570 [ 89.541341][ T4807] __x64_sys_mkdirat+0x85/0x90 [ 89.546186][ T4807] do_syscall_64+0x4c/0xa0 [ 89.550639][ T4807] ? clear_bhb_loop+0x30/0x80 [ 89.555358][ T4807] ? clear_bhb_loop+0x30/0x80 [ 89.560077][ T4807] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.566011][ T4807] RIP: 0033:0x7f28415ab559 [ 89.570464][ T4807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.590211][ T4807] RSP: 002b:00007f283f802028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 89.598678][ T4807] RAX: ffffffffffffffda RBX: 00007f2841831fa0 RCX: 00007f28415ab559 [ 89.606696][ T4807] RDX: 00000000000001ff RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 89.614711][ T4807] RBP: 00007f2841642b20 R08: 0000000000000000 R09: 0000000000000000 [ 89.622729][ T4807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.630746][ T4807] R13: 00007f2841832038 R14: 00007f2841831fa0 R15: 00007ffddccb7be8 [ 89.638774][ T4807] [ 89.641932][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.797499][ T21] usb 4-1: USB disconnect, device number 2 [ 89.876616][ T4802] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.980417][ T4822] udevd[4822]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.117361][ T1324] Bluetooth: hci0: command 0x080f tx timeout [ 90.155163][ T4802] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.196285][ T4802] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.258444][ T4802] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.328598][ T4802] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.443178][ T4844] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.484735][ T4846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 90.662007][ T4857] input: syz0 as /devices/virtual/input/input7 [ 91.027169][ T1107] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.286968][ T1107] usb 2-1: Using ep0 maxpacket: 8 [ 91.424712][ T4896] binder: 4895:4896 ioctl c0306201 200000000680 returned -14 [ 91.437338][ T1107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.460563][ T1107] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 91.471156][ T4899] FAULT_INJECTION: forcing a failure. [ 91.471156][ T4899] name failslab, interval 1, probability 0, space 0, times 0 [ 91.509687][ T4899] CPU: 0 PID: 4899 Comm: syz.2.232 Not tainted syzkaller #0 [ 91.517054][ T4899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 91.527146][ T4899] Call Trace: [ 91.530462][ T4899] [ 91.533431][ T4899] dump_stack_lvl+0x188/0x250 [ 91.538160][ T4899] ? show_regs_print_info+0x20/0x20 [ 91.543399][ T4899] ? load_image+0x410/0x410 [ 91.547975][ T4899] ? __might_sleep+0xf0/0xf0 [ 91.552639][ T4899] ? __lock_acquire+0x7d40/0x7d40 [ 91.557707][ T4899] should_fail+0x383/0x4b0 [ 91.562461][ T4899] should_failslab+0x5/0x20 [ 91.567021][ T4899] slab_pre_alloc_hook+0x51/0xc0 [ 91.572013][ T4899] ? security_file_alloc+0x30/0x110 [ 91.577267][ T4899] kmem_cache_alloc+0x3d/0x280 [ 91.582119][ T4899] ? rcu_is_watching+0x11/0xa0 [ 91.586939][ T4899] security_file_alloc+0x30/0x110 [ 91.592027][ T4899] __alloc_file+0xc2/0x240 [ 91.596499][ T4899] alloc_empty_file+0x90/0x180 [ 91.601323][ T4899] alloc_file+0x5c/0x510 [ 91.605621][ T4899] ? do_raw_spin_unlock+0x11d/0x230 [ 91.610875][ T4899] alloc_file_pseudo+0x180/0x200 [ 91.615874][ T4899] ? alloc_empty_file_noaccount+0x80/0x80 [ 91.621646][ T4899] ? do_raw_spin_unlock+0x11d/0x230 [ 91.626907][ T4899] ? _raw_spin_unlock+0x24/0x40 [ 91.631817][ T4899] anon_inode_getfile+0xc1/0x1a0 [ 91.636808][ T4899] do_epoll_create+0x278/0x340 [ 91.641630][ T4899] __x64_sys_epoll_create+0x4a/0x60 [ 91.646879][ T4899] do_syscall_64+0x4c/0xa0 [ 91.651346][ T4899] ? clear_bhb_loop+0x30/0x80 [ 91.656124][ T4899] ? clear_bhb_loop+0x30/0x80 [ 91.660861][ T4899] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.666806][ T4899] RIP: 0033:0x7f8fea7c4559 [ 91.671318][ T4899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.679894][ T4896] binder: 4895:4896 ioctl c0306201 200000000780 returned -14 [ 91.691057][ T4899] RSP: 002b:00007f8fe8a1b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 91.691090][ T4899] RAX: ffffffffffffffda RBX: 00007f8feaa4afa0 RCX: 00007f8fea7c4559 [ 91.691108][ T4899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000409 [ 91.691123][ T4899] RBP: 00007f8fea85bb20 R08: 0000000000000000 R09: 0000000000000000 [ 91.691138][ T4899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.691151][ T4899] R13: 00007f8feaa4b038 R14: 00007f8feaa4afa0 R15: 00007ffd26b362d8 [ 91.691184][ T4899] [ 91.837199][ T1107] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 91.846385][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=17, SerialNumber=3 [ 91.868032][ T1107] usb 2-1: Product: syz [ 91.877343][ T1107] usb 2-1: Manufacturer: syz [ 91.882020][ T1107] usb 2-1: SerialNumber: syz [ 91.927479][ T1107] usb 2-1: config 0 descriptor?? [ 91.958253][ T4228] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 91.976679][ T4228] Bluetooth: hci3: Injecting HCI hardware error event [ 91.997738][ T4202] Bluetooth: hci3: hardware error 0x00 [ 92.181435][ T4228] usb 2-1: USB disconnect, device number 2 [ 92.350006][ T4927] syz.0.241 uses obsolete (PF_INET,SOCK_PACKET) [ 92.581093][ T4936] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.597180][ T4228] Bluetooth: hci0: command 0x1405 tx timeout [ 92.718065][ T4923] Set syz1 is full, maxelem 6117 reached [ 93.366415][ T4964] netlink: 48 bytes leftover after parsing attributes in process `syz.3.256'. [ 93.538880][ T4968] ip_tables: iptables: counters copy to user failed while replacing table [ 93.573969][ T4966] netlink: 156 bytes leftover after parsing attributes in process `syz.3.258'. [ 93.958525][ T4985] capability: warning: `syz.2.264' uses 32-bit capabilities (legacy support in use) [ 94.000135][ T4987] jffs2: notice: (4987) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 94.024766][ T4989] ip_tables: iptables: counters copy to user failed while replacing table [ 94.687031][ T4274] Bluetooth: hci0: command 0x0c2d tx timeout [ 94.693303][ T5015] syz.4.275 (5015) used greatest stack depth: 20272 bytes left [ 94.980688][ T1107] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 95.200227][ T4193] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 95.259997][ T4276] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 95.397355][ T4274] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.641980][ T5026] ceph: No mds server is up or the cluster is laggy [ 95.667411][ T4274] usb 4-1: Using ep0 maxpacket: 32 [ 95.797123][ T4274] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 95.805533][ T4274] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 95.878019][ T4274] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 95.906944][ T4274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 95.949434][ T4274] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 95.967102][ T4274] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 95.981908][ T4274] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 95.988223][ T5047] FAULT_INJECTION: forcing a failure. [ 95.988223][ T5047] name failslab, interval 1, probability 0, space 0, times 0 [ 95.993343][ T4274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.014413][ T4274] usb 4-1: config 0 descriptor?? [ 96.037060][ T5047] CPU: 0 PID: 5047 Comm: syz.4.287 Not tainted syzkaller #0 [ 96.044430][ T5047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.054530][ T5047] Call Trace: [ 96.057845][ T5047] [ 96.060818][ T5047] dump_stack_lvl+0x188/0x250 [ 96.065649][ T5047] ? show_regs_print_info+0x20/0x20 [ 96.070900][ T5047] ? load_image+0x410/0x410 [ 96.075456][ T5047] ? __lock_acquire+0x7d40/0x7d40 [ 96.080641][ T5047] should_fail+0x383/0x4b0 [ 96.085103][ T5047] should_failslab+0x5/0x20 [ 96.089638][ T5047] slab_pre_alloc_hook+0x51/0xc0 [ 96.094786][ T5047] kmem_cache_alloc_trace+0x47/0x290 [ 96.100287][ T5047] ? ceph_mdsc_init+0x53/0x920 [ 96.105096][ T5047] ? __rwlock_init+0x140/0x140 [ 96.109907][ T5047] ceph_mdsc_init+0x53/0x920 [ 96.114581][ T5047] ceph_get_tree+0x54b/0x1290 [ 96.119397][ T5047] ? bpf_lsm_capable+0x5/0x10 [ 96.124116][ T5047] ? security_capable+0x85/0xb0 [ 96.129011][ T5047] vfs_get_tree+0x88/0x270 [ 96.133473][ T5047] do_new_mount+0x247/0xa40 [ 96.138061][ T5047] __se_sys_mount+0x2e3/0x3d0 [ 96.142796][ T5047] ? __x64_sys_mount+0xc0/0xc0 [ 96.147623][ T5047] ? lockdep_hardirqs_on+0x94/0x140 [ 96.152856][ T5047] ? __x64_sys_mount+0x1c/0xc0 [ 96.157689][ T5047] do_syscall_64+0x4c/0xa0 [ 96.162147][ T5047] ? clear_bhb_loop+0x30/0x80 [ 96.166859][ T5047] ? clear_bhb_loop+0x30/0x80 [ 96.171584][ T5047] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.177521][ T5047] RIP: 0033:0x7fa001a00559 [ 96.181975][ T5047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.201616][ T5047] RSP: 002b:00007f9fffc57028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 96.210070][ T5047] RAX: ffffffffffffffda RBX: 00007fa001c86fa0 RCX: 00007fa001a00559 [ 96.218083][ T5047] RDX: 0000200000001bc0 RSI: 0000200000001b80 RDI: 0000200000001b40 [ 96.226094][ T5047] RBP: 00007fa001a97b20 R08: 0000000000000000 R09: 0000000000000000 [ 96.234107][ T5047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.242119][ T5047] R13: 00007fa001c87038 R14: 00007fa001c86fa0 R15: 00007ffdb5c46b78 [ 96.250150][ T5047] [ 96.526564][ T4274] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 96.567612][ T4274] usb 4-1: USB disconnect, device number 3 [ 96.600818][ T4274] usblp0: removed [ 96.755213][ T5067] FAULT_INJECTION: forcing a failure. [ 96.755213][ T5067] name failslab, interval 1, probability 0, space 0, times 0 [ 96.778301][ T5067] CPU: 0 PID: 5067 Comm: syz.1.295 Not tainted syzkaller #0 [ 96.785659][ T5067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.795750][ T5067] Call Trace: [ 96.799088][ T5067] [ 96.802056][ T5067] dump_stack_lvl+0x188/0x250 [ 96.806812][ T5067] ? show_regs_print_info+0x20/0x20 [ 96.812053][ T5067] ? load_image+0x410/0x410 [ 96.816601][ T5067] ? __might_sleep+0xf0/0xf0 [ 96.821231][ T5067] ? __lock_acquire+0x7d40/0x7d40 [ 96.826306][ T5067] should_fail+0x383/0x4b0 [ 96.830772][ T5067] should_failslab+0x5/0x20 [ 96.835317][ T5067] slab_pre_alloc_hook+0x51/0xc0 [ 96.840296][ T5067] __kmalloc+0x6b/0x340 [ 96.844488][ T5067] ? snd_seq_oss_readq_new+0x7e/0x240 [ 96.849906][ T5067] snd_seq_oss_readq_new+0x7e/0x240 [ 96.855176][ T5067] snd_seq_oss_open+0x7e6/0xf00 [ 96.860078][ T5067] ? snd_seq_oss_delete_client+0x50/0x50 [ 96.865792][ T5067] ? __mutex_lock_common+0x435/0x2400 [ 96.871233][ T5067] ? mutex_lock_io_nested+0x60/0x60 [ 96.876483][ T5067] ? snd_seq_oss_process_event+0x2910/0x2910 [ 96.882511][ T5067] ? async_call_lookup_ports+0x10/0x10 [ 96.888018][ T5067] ? do_raw_spin_unlock+0x11d/0x230 [ 96.893278][ T5067] odev_open+0x63/0x90 [ 96.897676][ T5067] chrdev_open+0x585/0x5f0 [ 96.902141][ T5067] ? cd_forget+0x160/0x160 [ 96.906731][ T5067] ? fsnotify_perm+0x3a7/0x560 [ 96.911640][ T5067] ? cd_forget+0x160/0x160 [ 96.916187][ T5067] do_dentry_open+0x7f7/0xf90 [ 96.920902][ T5067] ? vfs_open+0x2b/0x80 [ 96.925111][ T5067] path_openat+0x2718/0x2fb0 [ 96.929768][ T5067] ? __kasan_slab_alloc+0xa9/0xc0 [ 96.934881][ T5067] ? do_filp_open+0x400/0x400 [ 96.939723][ T5067] do_filp_open+0x1df/0x400 [ 96.944271][ T5067] ? vfs_tmpfile+0x300/0x300 [ 96.948924][ T5067] ? _raw_spin_unlock+0x24/0x40 [ 96.953813][ T5067] ? alloc_fd+0x59e/0x650 [ 96.958274][ T5067] do_sys_openat2+0x14b/0x500 [ 96.962994][ T5067] ? __lock_acquire+0x7d40/0x7d40 [ 96.968060][ T5067] ? do_sys_open+0xe0/0xe0 [ 96.972518][ T5067] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 96.978546][ T5067] ? lock_chain_count+0x20/0x20 [ 96.983448][ T5067] __x64_sys_openat+0x135/0x160 [ 96.988344][ T5067] do_syscall_64+0x4c/0xa0 [ 96.992796][ T5067] ? clear_bhb_loop+0x30/0x80 [ 96.997511][ T5067] ? clear_bhb_loop+0x30/0x80 [ 97.002236][ T5067] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.008164][ T5067] RIP: 0033:0x7fb600eae559 [ 97.012616][ T5067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.032257][ T5067] RSP: 002b:00007fb5ff105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 97.040739][ T5067] RAX: ffffffffffffffda RBX: 00007fb601134fa0 RCX: 00007fb600eae559 [ 97.048754][ T5067] RDX: 0000000000080200 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 97.056767][ T5067] RBP: 00007fb600f45b20 R08: 0000000000000000 R09: 0000000000000000 [ 97.064793][ T5067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.072808][ T5067] R13: 00007fb601135038 R14: 00007fb601134fa0 R15: 00007fffffc20078 [ 97.080837][ T5067] [ 97.273412][ T5083] ip_tables: iptables: counters copy to user failed while replacing table [ 97.427043][ T4274] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 97.707137][ T4274] usb 4-1: Using ep0 maxpacket: 32 [ 97.847872][ T4274] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 97.871395][ T4274] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 97.886996][ T4274] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 97.897189][ T4274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.907954][ T4274] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.918130][ T4274] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.941605][ T4274] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 97.964708][ T4274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.985223][ T4274] usb 4-1: config 0 descriptor?? [ 98.130666][ T4274] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 98.164392][ T4274] usb 4-1: USB disconnect, device number 4 [ 98.182906][ T4274] usblp0: removed [ 98.380874][ T5136] team0: No ports can be present during mode change [ 98.422424][ T5130] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 98.454666][ T5130] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 98.578704][ T5144] CIFS: Attempting to mount \\127.0.0.1\share [ 98.604804][ T5144] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.693870][ T5148] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.701525][ T5148] IPv6: NLM_F_CREATE should be set when creating new route [ 98.706360][ T5146] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 98.784493][ T5144] CIFS: VFS: cifs_mount failed w/return code = -112 [ 99.149980][ T5171] nvme_fabrics: missing parameter 'transport=%s' [ 99.164887][ T5171] nvme_fabrics: missing parameter 'nqn=%s' [ 99.311097][ T5181] netlink: 28 bytes leftover after parsing attributes in process `syz.3.330'. [ 99.985166][ T5201] device-mapper: ioctl: device has been removed from the dev hash table. [ 100.275393][ T5213] loop0: detected capacity change from 0 to 35 [ 100.363128][ T4821] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 100.377563][ T4821] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 100.384366][ T4821] loop0: [ 100.400399][ T5213] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 100.419939][ T5213] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 100.439906][ T5213] loop0: [ 100.741073][ T5235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.351'. [ 101.031300][ T5247] fuse: Bad value for 'fd' [ 101.105007][ T5250] FAULT_INJECTION: forcing a failure. [ 101.105007][ T5250] name failslab, interval 1, probability 0, space 0, times 0 [ 101.151700][ T5250] CPU: 0 PID: 5250 Comm: syz.3.357 Not tainted syzkaller #0 [ 101.159065][ T5250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 101.169165][ T5250] Call Trace: [ 101.172486][ T5250] [ 101.175455][ T5250] dump_stack_lvl+0x188/0x250 [ 101.180187][ T5250] ? show_regs_print_info+0x20/0x20 [ 101.185431][ T5250] ? load_image+0x410/0x410 [ 101.190142][ T5250] ? __might_sleep+0xf0/0xf0 [ 101.194776][ T5250] ? __lock_acquire+0x7d40/0x7d40 [ 101.199844][ T5250] should_fail+0x383/0x4b0 [ 101.204310][ T5250] should_failslab+0x5/0x20 [ 101.208854][ T5250] slab_pre_alloc_hook+0x51/0xc0 [ 101.213827][ T5250] ? snd_pcm_hw_rule_add+0x188/0x7f0 [ 101.219161][ T5250] __kmalloc_track_caller+0x69/0x330 [ 101.224499][ T5250] ? snd_pcm_hw_rule_add+0x188/0x7f0 [ 101.229836][ T5250] krealloc+0x5a/0xf0 [ 101.233871][ T5250] snd_pcm_hw_rule_add+0x188/0x7f0 [ 101.239025][ T5250] ? snd_pcm_post_pause+0x290/0x290 [ 101.244269][ T5250] ? __raw_spin_lock_init+0x41/0x100 [ 101.249603][ T5250] ? snd_interval_ranges+0x300/0x300 [ 101.254939][ T5250] ? snd_pcm_attach_substream+0x83a/0xac0 [ 101.260712][ T5250] snd_pcm_open_substream+0xb93/0x2570 [ 101.266248][ T5250] ? snd_pcm_drop+0x250/0x250 [ 101.270988][ T5250] snd_pcm_oss_open+0xcd0/0x1e60 [ 101.276001][ T5250] ? snd_pcm_oss_mmap+0x440/0x440 [ 101.281072][ T5250] ? soundcore_open+0x270/0x4b0 [ 101.286000][ T5250] ? __lock_acquire+0x7d40/0x7d40 [ 101.291109][ T5250] ? sched_dynamic_update+0x210/0x210 [ 101.296528][ T5250] ? do_raw_spin_unlock+0x11d/0x230 [ 101.301781][ T5250] chrdev_open+0x585/0x5f0 [ 101.306244][ T5250] ? cd_forget+0x160/0x160 [ 101.310703][ T5250] ? fsnotify_perm+0x3a7/0x560 [ 101.315518][ T5250] ? cd_forget+0x160/0x160 [ 101.319976][ T5250] do_dentry_open+0x7f7/0xf90 [ 101.324693][ T5250] ? vfs_open+0x2b/0x80 [ 101.328892][ T5250] path_openat+0x2718/0x2fb0 [ 101.333548][ T5250] ? __kasan_slab_alloc+0xa9/0xc0 [ 101.338618][ T5250] ? do_filp_open+0x400/0x400 [ 101.343358][ T5250] do_filp_open+0x1df/0x400 [ 101.347915][ T5250] ? vfs_tmpfile+0x300/0x300 [ 101.352564][ T5250] ? _raw_spin_unlock+0x24/0x40 [ 101.357447][ T5250] ? alloc_fd+0x59e/0x650 [ 101.361825][ T5250] do_sys_openat2+0x14b/0x500 [ 101.366537][ T5250] ? __lock_acquire+0x7d40/0x7d40 [ 101.371610][ T5250] ? do_sys_open+0xe0/0xe0 [ 101.376077][ T5250] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 101.382110][ T5250] ? lock_chain_count+0x20/0x20 [ 101.387023][ T5250] __x64_sys_openat+0x135/0x160 [ 101.391919][ T5250] do_syscall_64+0x4c/0xa0 [ 101.396368][ T5250] ? clear_bhb_loop+0x30/0x80 [ 101.401087][ T5250] ? clear_bhb_loop+0x30/0x80 [ 101.405807][ T5250] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.411740][ T5250] RIP: 0033:0x7f69b8b41559 [ 101.416194][ T5250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.435840][ T5250] RSP: 002b:00007f69b6d98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.444301][ T5250] RAX: ffffffffffffffda RBX: 00007f69b8dc7fa0 RCX: 00007f69b8b41559 [ 101.452310][ T5250] RDX: 0000000000040202 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 101.460320][ T5250] RBP: 00007f69b8bd8b20 R08: 0000000000000000 R09: 0000000000000000 [ 101.468331][ T5250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.476336][ T5250] R13: 00007f69b8dc8038 R14: 00007f69b8dc7fa0 R15: 00007ffc8625ecf8 [ 101.484386][ T5250] [ 101.545016][ T5256] FAULT_INJECTION: forcing a failure. [ 101.545016][ T5256] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 101.559708][ T5256] CPU: 0 PID: 5256 Comm: syz.2.360 Not tainted syzkaller #0 [ 101.567037][ T5256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 101.577135][ T5256] Call Trace: [ 101.580452][ T5256] [ 101.583417][ T5256] dump_stack_lvl+0x188/0x250 [ 101.588137][ T5256] ? show_regs_print_info+0x20/0x20 [ 101.593381][ T5256] ? load_image+0x410/0x410 [ 101.597938][ T5256] should_fail+0x383/0x4b0 [ 101.602433][ T5256] prepare_alloc_pages+0x1e3/0x5b0 [ 101.607591][ T5256] __alloc_pages+0x11b/0x480 [ 101.612220][ T5256] ? zone_statistics+0x170/0x170 [ 101.617193][ T5256] ? rcu_lock_acquire+0x30/0x30 [ 101.622098][ T5256] ? alloc_pages+0x452/0x560 [ 101.626735][ T5256] __get_free_pages+0x8/0x30 [ 101.631369][ T5256] __tlb_remove_page_size+0x1f2/0x3f0 [ 101.636970][ T5256] unmap_page_range+0xfcf/0x2410 [ 101.641986][ T5256] unmap_vmas+0x131/0x250 [ 101.646358][ T5256] ? unmap_page_range+0x2410/0x2410 [ 101.651594][ T5256] ? __mutex_lock_common+0x435/0x2400 [ 101.657000][ T5256] ? exit_mm_release+0x16/0x30 [ 101.661815][ T5256] exit_mmap+0x3b9/0x640 [ 101.666100][ T5256] ? vm_brk+0x20/0x20 [ 101.670258][ T5256] ? uprobe_clear_state+0x2f6/0x460 [ 101.675673][ T5256] __mmput+0x115/0x390 [ 101.679792][ T5256] exit_mm+0x632/0x7b0 [ 101.683912][ T5256] ? perf_pmu_migrate_context+0xb70/0xb70 [ 101.689718][ T5256] ? do_exit+0x2110/0x2110 [ 101.694283][ T5256] ? __ia32_sys_timer_delete+0x40/0x40 [ 101.699787][ T5256] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 101.705379][ T5256] ? tty_audit_exit+0x149/0x1f0 [ 101.710267][ T5256] do_exit+0x5b8/0x2110 [ 101.714478][ T5256] ? put_task_struct+0x80/0x80 [ 101.719291][ T5256] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 101.725322][ T5256] ? _raw_spin_lock_irq+0xb7/0xf0 [ 101.730394][ T5256] do_group_exit+0x12c/0x2f0 [ 101.735019][ T5256] ? lockdep_hardirqs_on+0x94/0x140 [ 101.740264][ T5256] get_signal+0x7eb/0x12e0 [ 101.744871][ T5256] arch_do_signal_or_restart+0xe6/0x12a0 [ 101.750561][ T5256] ? rcu_lock_release+0x9/0x20 [ 101.755413][ T5256] ? futex_exit_release+0x1c0/0x1c0 [ 101.760684][ T5256] ? get_sigframe_size+0x10/0x10 [ 101.765671][ T5256] ? __context_tracking_exit+0x4c/0x80 [ 101.771192][ T5256] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 101.777269][ T5256] ? exit_to_user_mode_loop+0x3b/0x130 [ 101.782820][ T5256] exit_to_user_mode_loop+0x9e/0x130 [ 101.788151][ T5256] exit_to_user_mode_prepare+0xee/0x180 [ 101.793744][ T5256] syscall_exit_to_user_mode+0x16/0x40 [ 101.799270][ T5256] do_syscall_64+0x58/0xa0 [ 101.803734][ T5256] ? clear_bhb_loop+0x30/0x80 [ 101.808463][ T5256] ? clear_bhb_loop+0x30/0x80 [ 101.813197][ T5256] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.819143][ T5256] RIP: 0033:0x7f8fea7c4559 [ 101.823598][ T5256] Code: Unable to access opcode bytes at RIP 0x7f8fea7c452f. [ 101.830998][ T5256] RSP: 002b:00007f8fe8a1b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.839466][ T5256] RAX: fffffffffffffe00 RBX: 00007f8feaa4afa8 RCX: 00007f8fea7c4559 [ 101.847584][ T5256] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8feaa4afa8 [ 101.855597][ T5256] RBP: 00007f8feaa4afa0 R08: 0000000000000000 R09: 0000000000000000 [ 101.863617][ T5256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.871668][ T5256] R13: 00007f8feaa4b038 R14: 00007ffd26b361f0 R15: 00007ffd26b362d8 [ 101.879701][ T5256] [ 102.023135][ T5273] FAULT_INJECTION: forcing a failure. [ 102.023135][ T5273] name failslab, interval 1, probability 0, space 0, times 0 [ 102.044598][ T5273] CPU: 0 PID: 5273 Comm: syz.2.366 Not tainted syzkaller #0 [ 102.051972][ T5273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 102.063007][ T5273] Call Trace: [ 102.066353][ T5273] [ 102.069334][ T5273] dump_stack_lvl+0x188/0x250 [ 102.074081][ T5273] ? show_regs_print_info+0x20/0x20 [ 102.079336][ T5273] ? load_image+0x410/0x410 [ 102.083900][ T5273] ? __might_sleep+0xf0/0xf0 [ 102.088536][ T5273] ? __lock_acquire+0x7d40/0x7d40 [ 102.093629][ T5273] should_fail+0x383/0x4b0 [ 102.098101][ T5273] should_failslab+0x5/0x20 [ 102.102646][ T5273] slab_pre_alloc_hook+0x51/0xc0 [ 102.107634][ T5273] kmem_cache_alloc_trace+0x47/0x290 [ 102.112971][ T5273] ? __list_lru_init+0x535/0xac0 [ 102.117968][ T5273] __list_lru_init+0x535/0xac0 [ 102.122802][ T5273] alloc_super+0x787/0x970 [ 102.127277][ T5273] ? kill_litter_super+0xa0/0xa0 [ 102.132263][ T5273] sget_fc+0x2d4/0x6f0 [ 102.136383][ T5273] ? kill_litter_super+0xa0/0xa0 [ 102.141383][ T5273] ? proc_reconfigure+0x370/0x370 [ 102.146502][ T5273] get_tree_nodev+0x26/0x160 [ 102.151153][ T5273] vfs_get_tree+0x88/0x270 [ 102.155631][ T5273] do_new_mount+0x247/0xa40 [ 102.160199][ T5273] __se_sys_mount+0x2e3/0x3d0 [ 102.164920][ T5273] ? acct_account_cputime+0x19a/0x270 [ 102.170351][ T5273] ? __x64_sys_mount+0xc0/0xc0 [ 102.175179][ T5273] ? lockdep_hardirqs_on+0x94/0x140 [ 102.180434][ T5273] ? __x64_sys_mount+0x1c/0xc0 [ 102.185280][ T5273] do_syscall_64+0x4c/0xa0 [ 102.189752][ T5273] ? clear_bhb_loop+0x30/0x80 [ 102.194478][ T5273] ? clear_bhb_loop+0x30/0x80 [ 102.199201][ T5273] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.205652][ T5273] RIP: 0033:0x7f8fea7c4559 [ 102.210116][ T5273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.229775][ T5273] RSP: 002b:00007f8fe8a1b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.238270][ T5273] RAX: ffffffffffffffda RBX: 00007f8feaa4afa0 RCX: 00007f8fea7c4559 [ 102.246322][ T5273] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 102.254401][ T5273] RBP: 00007f8fea85bb20 R08: 0000000000000000 R09: 0000000000000000 [ 102.262428][ T5273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.270446][ T5273] R13: 00007f8feaa4b038 R14: 00007f8feaa4afa0 R15: 00007ffd26b362d8 [ 102.278486][ T5273] [ 102.435666][ T5291] device syzkaller0 entered promiscuous mode [ 102.508250][ T5298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 102.543608][ T5298] netlink: 32 bytes leftover after parsing attributes in process `syz.3.376'. [ 102.559435][ T5297] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.955944][ T5321] md/raid1:md1: active with 1 out of 2 mirrors [ 102.993855][ T5326] md: recovery of RAID array md1 [ 103.013705][ T5326] md: md1: recovery done. [ 103.086474][ T5329] md: recovery of RAID array md1 [ 103.101321][ T5329] md: md1: recovery done. [ 103.186734][ T5339] md: recovery of RAID array md1 [ 103.195327][ T5339] md: md1: recovery done. [ 103.256073][ T5341] md: recovery of RAID array md1 [ 103.282606][ T5341] md: md1: recovery done. [ 103.294391][ T5344] autofs4:pid:5344:autofs_fill_super: called with bogus options [ 103.357384][ T5348] md: recovery of RAID array md1 [ 103.371690][ T5348] md: md1: recovery done. [ 103.436649][ T5354] md: recovery of RAID array md1 [ 103.459580][ T5354] md: md1: recovery done. [ 103.519531][ T5360] ======================================================= [ 103.519531][ T5360] WARNING: The mand mount option has been deprecated and [ 103.519531][ T5360] and is ignored by this kernel. Remove the mand [ 103.519531][ T5360] option from the mount to silence this warning. [ 103.519531][ T5360] ======================================================= [ 103.563507][ T5362] md: recovery of RAID array md1 [ 103.585809][ T5362] md: md1: recovery done. [ 103.653784][ T5365] md: recovery of RAID array md1 [ 103.671564][ T5365] md: md1: recovery done. [ 103.716259][ T5371] md: recovery of RAID array md1 [ 103.722778][ T1107] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.734294][ T5371] md: md1: recovery done. [ 103.795710][ T5374] md: recovery of RAID array md1 [ 103.812669][ T5374] md: md1: recovery done. [ 103.845212][ T5377] md: recovery of RAID array md1 [ 103.855221][ T5377] md: md1: recovery done. [ 103.920136][ T5383] md: recovery of RAID array md1 [ 103.920165][ T5383] md: md1: recovery done. [ 103.934214][ T5384] FAULT_INJECTION: forcing a failure. [ 103.934214][ T5384] name failslab, interval 1, probability 0, space 0, times 0 [ 103.934248][ T5384] CPU: 1 PID: 5384 Comm: syz.2.407 Not tainted syzkaller #0 [ 103.934270][ T5384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.934283][ T5384] Call Trace: [ 103.934290][ T5384] [ 103.934299][ T5384] dump_stack_lvl+0x188/0x250 [ 103.934328][ T5384] ? show_regs_print_info+0x20/0x20 [ 103.934351][ T5384] ? load_image+0x410/0x410 [ 103.934377][ T5384] ? __might_sleep+0xf0/0xf0 [ 103.934400][ T5384] ? __lock_acquire+0x7d40/0x7d40 [ 103.934432][ T5384] should_fail+0x383/0x4b0 [ 103.934461][ T5384] should_failslab+0x5/0x20 [ 103.934482][ T5384] slab_pre_alloc_hook+0x51/0xc0 [ 103.934507][ T5384] __kmalloc+0x6b/0x340 [ 103.934525][ T5384] ? _ib_alloc_device+0x39/0x5c0 [ 103.934557][ T5384] _ib_alloc_device+0x39/0x5c0 [ 103.934583][ T5384] siw_newlink+0xc3/0xf30 [ 103.934612][ T5384] nldev_newlink+0x524/0x580 [ 103.934637][ T5384] ? nldev_set_doit+0x420/0x420 [ 103.934656][ T5384] ? mark_lock+0x94/0x320 [ 103.934754][ T5384] ? aa_get_newest_label+0xf5/0x5a0 [ 103.934777][ T5384] ? end_current_label_crit_section+0x170/0x170 [ 103.934802][ T5384] ? end_current_label_crit_section+0x170/0x170 [ 103.934841][ T5384] ? bpf_lsm_capable+0x5/0x10 [ 103.934861][ T5384] ? security_capable+0x85/0xb0 [ 103.934899][ T5384] ? nldev_set_doit+0x420/0x420 [ 103.934921][ T5384] rdma_nl_rcv+0x6d8/0xa00 [ 103.934957][ T5384] ? rdma_nl_net_init+0x190/0x190 [ 103.934979][ T5384] ? rcu_lock_release+0x5/0x20 [ 103.935022][ T5384] netlink_unicast+0x78f/0x940 [ 103.935060][ T5384] netlink_sendmsg+0x8ba/0xbe0 [ 103.935090][ T5384] ? netlink_getsockopt+0x570/0x570 [ 103.935110][ T5384] ? aa_sock_msg_perm+0x94/0x150 [ 103.935135][ T5384] ? apparmor_socket_sendmsg+0x88/0x230 [ 103.935159][ T5384] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 103.935182][ T5384] ? security_socket_sendmsg+0x7c/0xa0 [ 103.935206][ T5384] ? netlink_getsockopt+0x570/0x570 [ 103.935229][ T5384] ____sys_sendmsg+0x5be/0x8f0 [ 103.935263][ T5384] ? __sys_sendmsg_sock+0x30/0x30 [ 103.935298][ T5384] ? import_iovec+0x6f/0xa0 [ 103.935326][ T5384] ___sys_sendmsg+0x236/0x2e0 [ 103.935360][ T5384] ? __sys_sendmsg+0x290/0x290 [ 103.935427][ T5384] __se_sys_sendmsg+0x1b7/0x2a0 [ 103.935454][ T5384] ? __x64_sys_sendmsg+0x80/0x80 [ 103.935477][ T5384] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 103.935523][ T5384] ? lockdep_hardirqs_on+0x94/0x140 [ 103.935553][ T5384] do_syscall_64+0x4c/0xa0 [ 103.935575][ T5384] ? clear_bhb_loop+0x30/0x80 [ 103.935599][ T5384] ? clear_bhb_loop+0x30/0x80 [ 103.935626][ T5384] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.935652][ T5384] RIP: 0033:0x7f8fea7c4559 [ 103.935672][ T5384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.935690][ T5384] RSP: 002b:00007f8fe8a1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.935716][ T5384] RAX: ffffffffffffffda RBX: 00007f8feaa4afa0 RCX: 00007f8fea7c4559 [ 103.935733][ T5384] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 103.935747][ T5384] RBP: 00007f8fea85bb20 R08: 0000000000000000 R09: 0000000000000000 [ 103.935762][ T5384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.935776][ T5384] R13: 00007f8feaa4b038 R14: 00007f8feaa4afa0 R15: 00007ffd26b362d8 [ 103.935810][ T5384] [ 103.953823][ T5386] md: recovery of RAID array md1 [ 103.953896][ T5386] md: md1: recovery done. [ 104.035366][ T5389] md: recovery of RAID array md1 [ 104.035484][ T5389] md: md1: recovery done. [ 104.100356][ T5393] md: recovery of RAID array md1 [ 104.127613][ T1107] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.446087][ T5393] md: md1: recovery done. [ 104.467698][ T5399] md: recovery of RAID array md1 [ 104.472837][ T5399] md: md1: recovery done. [ 104.522123][ T5405] md: recovery of RAID array md1 [ 104.542123][ T5405] md: md1: recovery done. [ 104.587911][ T5407] md: recovery of RAID array md1 [ 104.600625][ T5407] md: md1: recovery done. [ 104.656863][ T1107] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 104.666632][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.700027][ T1107] usb 5-1: Product: syz [ 104.704277][ T1107] usb 5-1: Manufacturer: syz [ 104.712585][ T1107] usb 5-1: SerialNumber: syz [ 104.779484][ T1107] keyspan 5-1:1.0: Keyspan 1 port adapter converter detected [ 104.796721][ T1107] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 104.818272][ T1107] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 104.832367][ T1107] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82 [ 104.843508][ T5419] md: recovery of RAID array md1 [ 104.849245][ T5419] md: md1: recovery done. [ 104.856705][ T1107] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 104.871986][ T1107] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 104.888979][ T1107] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 83 [ 104.909362][ T1107] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 3 [ 104.939607][ T1107] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 104.962560][ T5415] tcpci: probe of 0-0050 failed with error -5 [ 104.969481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.970947][ T5415] i2c i2c-0: new_device: Instantiated device tcpci at 0x50 [ 105.077778][ T5423] md: recovery of RAID array md1 [ 105.100612][ T5423] md: md1: recovery done. [ 105.186699][ T5427] md: recovery of RAID array md1 [ 105.209088][ T5427] md: md1: recovery done. [ 105.256638][ T5431] md: recovery of RAID array md1 [ 105.268200][ T21] usb 5-1: USB disconnect, device number 2 [ 105.288055][ T5431] md: md1: recovery done. [ 105.306640][ T21] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 105.349458][ T21] keyspan 5-1:1.0: device disconnected [ 105.376659][ T5432] md: recovery of RAID array md1 [ 105.388997][ T5432] md: md1: recovery done. [ 105.432819][ T5434] md: recovery of RAID array md1 [ 105.447054][ T5434] md: md1: recovery done. [ 105.501008][ T5439] md: recovery of RAID array md1 [ 105.513081][ T5439] md: md1: recovery done. [ 105.552370][ T5441] md: recovery of RAID array md1 [ 105.569280][ T5441] md: md1: recovery done. [ 105.626918][ T5445] md: recovery of RAID array md1 [ 105.649410][ T5445] md: md1: recovery done. [ 105.696993][ T5450] md: recovery of RAID array md1 [ 105.710015][ T5450] md: md1: recovery done. [ 105.761584][ T5452] md: recovery of RAID array md1 [ 105.766736][ T5452] md: md1: recovery done. [ 105.841532][ T5454] md: recovery of RAID array md1 [ 105.877957][ T5454] md: md1: recovery done. [ 105.948489][ T5459] md: recovery of RAID array md1 [ 105.967595][ T5459] md: md1: recovery done. [ 106.022754][ T5465] md: recovery of RAID array md1 [ 106.032927][ T5465] md: md1: recovery done. [ 106.108796][ T5469] md: recovery of RAID array md1 [ 106.118880][ T5469] md: md1: recovery done. [ 106.154093][ T5471] input: syz0 as /devices/virtual/input/input8 [ 106.175094][ T5474] md: recovery of RAID array md1 [ 106.197201][ T5474] md: md1: recovery done. [ 106.312846][ T4315] [ 106.315280][ T4315] ====================================================== [ 106.322315][ T4315] WARNING: possible circular locking dependency detected [ 106.329366][ T4315] syzkaller #0 Not tainted [ 106.333797][ T4315] ------------------------------------------------------ [ 106.340830][ T4315] kworker/0:9/4315 is trying to acquire lock: [ 106.346920][ T4315] ffff888079a3d028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 106.358273][ T4315] [ 106.358273][ T4315] but task is already holding lock: [ 106.365660][ T4315] ffffffff8e4d7308 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 106.374771][ T4315] [ 106.374771][ T4315] which lock already depends on the new lock. [ 106.374771][ T4315] [ 106.385199][ T4315] [ 106.385199][ T4315] the existing dependency chain (in reverse order) is: [ 106.394244][ T4315] [ 106.394244][ T4315] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 106.402296][ T4315] __mutex_lock_common+0x1e5/0x2400 [ 106.408049][ T4315] mutex_lock_nested+0x17/0x20 [ 106.413371][ T4315] rfkill_register+0x2f/0x970 [ 106.418598][ T4315] hci_register_dev+0x459/0x980 [ 106.424001][ T4315] vhci_create_device+0x32e/0x5c0 [ 106.429609][ T4315] vhci_write+0x389/0x440 [ 106.434491][ T4315] vfs_write+0x748/0xd70 [ 106.439285][ T4315] ksys_write+0x153/0x260 [ 106.444167][ T4315] do_syscall_64+0x4c/0xa0 [ 106.445078][ T5477] md: recovery of RAID array md1 [ 106.449135][ T4315] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.449160][ T4315] [ 106.449160][ T4315] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 106.449191][ T4315] __mutex_lock_common+0x1e5/0x2400 [ 106.455311][ T5477] md: md1: recovery done. [ 106.460601][ T4315] mutex_lock_nested+0x17/0x20 [ 106.460622][ T4315] vhci_send_frame+0x88/0x100 [ 106.460643][ T4315] hci_send_frame+0x1a9/0x2e0 [ 106.460663][ T4315] hci_tx_work+0x9b5/0x16d0 [ 106.460682][ T4315] process_one_work+0x867/0xff0 [ 106.460702][ T4315] worker_thread+0xad7/0x12a0 [ 106.460719][ T4315] kthread+0x42e/0x520 [ 106.460735][ T4315] ret_from_fork+0x1f/0x30 [ 106.519427][ T4315] [ 106.519427][ T4315] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 106.528772][ T4315] __flush_work+0x116/0x210 [ 106.533981][ T4315] hci_dev_do_close+0x201/0x1020 [ 106.539472][ T4315] hci_error_reset+0x101/0x2c0 [ 106.544882][ T4315] process_one_work+0x867/0xff0 [ 106.550309][ T4315] worker_thread+0xad7/0x12a0 [ 106.555542][ T4315] kthread+0x42e/0x520 [ 106.559295][ T5479] md: recovery of RAID array md1 [ 106.560163][ T4315] ret_from_fork+0x1f/0x30 [ 106.570071][ T4315] [ 106.570071][ T4315] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 106.574838][ T5479] md: md1: recovery done. [ 106.577744][ T4315] __mutex_lock_common+0x1e5/0x2400 [ 106.577770][ T4315] mutex_lock_nested+0x17/0x20 [ 106.577786][ T4315] bg_scan_update+0x44/0x3b0 [ 106.577807][ T4315] process_one_work+0x867/0xff0 [ 106.577826][ T4315] worker_thread+0xad7/0x12a0 [ 106.577844][ T4315] kthread+0x42e/0x520 [ 106.577858][ T4315] ret_from_fork+0x1f/0x30 [ 106.618524][ T4315] [ 106.618524][ T4315] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 106.628377][ T4315] __lock_acquire+0x38f7/0x7d40 [ 106.633792][ T4315] lock_acquire+0x19f/0x400 [ 106.638861][ T4315] __flush_work+0x116/0x210 [ 106.643915][ T4315] __cancel_work_timer+0x3f4/0x560 [ 106.649573][ T4315] hci_request_cancel_all+0xcc/0x300 [ 106.655415][ T4315] hci_dev_do_close+0x4e/0x1020 [ 106.660816][ T4315] hci_rfkill_set_block+0x101/0x180 [ 106.666564][ T4315] rfkill_set_block+0x1c1/0x3c0 [ 106.671977][ T4315] rfkill_epo+0x75/0x170 [ 106.676772][ T4315] rfkill_op_handler+0x76/0x220 [ 106.681872][ T5481] md: recovery of RAID array md1 [ 106.682169][ T4315] process_one_work+0x867/0xff0 [ 106.692494][ T4315] worker_thread+0xad7/0x12a0 [ 106.696608][ T5481] md: md1: recovery done. [ 106.697716][ T4315] kthread+0x42e/0x520 [ 106.697736][ T4315] ret_from_fork+0x1f/0x30 [ 106.697757][ T4315] [ 106.697757][ T4315] other info that might help us debug this: [ 106.697757][ T4315] [ 106.697762][ T4315] Chain exists of: [ 106.697762][ T4315] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 106.697762][ T4315] [ 106.697797][ T4315] Possible unsafe locking scenario: [ 106.697797][ T4315] [ 106.697803][ T4315] CPU0 CPU1 [ 106.697808][ T4315] ---- ---- [ 106.697813][ T4315] lock(rfkill_global_mutex); [ 106.760755][ T4315] lock(&data->open_mutex); [ 106.767898][ T4315] lock(rfkill_global_mutex); [ 106.775211][ T4315] lock((work_completion)(&hdev->bg_scan_update)); [ 106.781830][ T4315] [ 106.781830][ T4315] *** DEADLOCK *** [ 106.781830][ T4315] [ 106.790001][ T4315] 3 locks held by kworker/0:9/4315: [ 106.795221][ T4315] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 106.805561][ T4315] #1: ffffc9000325fd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 106.815978][ T4315] #2: ffffffff8e4d7308 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 106.825601][ T4315] [ 106.825601][ T4315] stack backtrace: [ 106.831557][ T4315] CPU: 0 PID: 4315 Comm: kworker/0:9 Not tainted syzkaller #0 [ 106.839079][ T4315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 106.849171][ T4315] Workqueue: events rfkill_op_handler [ 106.850865][ T5482] md: recovery of RAID array md1 [ 106.854586][ T4315] Call Trace: [ 106.854595][ T4315] [ 106.854603][ T4315] dump_stack_lvl+0x188/0x250 [ 106.870484][ T4315] ? load_image+0x410/0x410 [ 106.875031][ T4315] ? show_regs_print_info+0x20/0x20 [ 106.880279][ T4315] ? print_circular_bug+0x12b/0x1a0 [ 106.883483][ T5482] md: md1: recovery done. [ 106.885518][ T4315] check_noncircular+0x2f8/0x400 [ 106.894830][ T4315] ? print_deadlock_bug+0x5d0/0x5d0 [ 106.900061][ T4315] ? lockdep_lock+0xf1/0x1f0 [ 106.904717][ T4315] ? __lock_acquire+0x12df/0x7d40 [ 106.909783][ T4315] ? mark_lock+0x94/0x320 [ 106.914159][ T4315] ? _find_first_zero_bit+0xd1/0xf0 [ 106.919398][ T4315] __lock_acquire+0x38f7/0x7d40 [ 106.924290][ T4315] ? verify_lock_unused+0x140/0x140 [ 106.929529][ T4315] ? mark_lock+0x94/0x320 [ 106.933907][ T4315] ? verify_lock_unused+0x140/0x140 [ 106.939150][ T4315] ? mark_lock+0x94/0x320 [ 106.943523][ T4315] lock_acquire+0x19f/0x400 [ 106.948077][ T4315] ? __flush_work+0xfa/0x210 [ 106.952707][ T4315] ? __lock_acquire+0x7d40/0x7d40 [ 106.957771][ T4315] ? read_lock_is_recursive+0x10/0x10 [ 106.963180][ T4315] ? start_flush_work+0x784/0x830 [ 106.968246][ T4315] __flush_work+0x116/0x210 [ 106.972784][ T4315] ? __flush_work+0xfa/0x210 [ 106.977410][ T4315] ? flush_work+0x20/0x20 [ 106.981770][ T4315] ? try_to_grab_pending+0xfb/0x820 [ 106.987031][ T4315] ? mark_lock+0x94/0x320 [ 106.991393][ T4315] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 106.997416][ T4315] ? lock_chain_count+0x20/0x20 [ 107.002300][ T4315] ? mark_lock+0x94/0x320 [ 107.006656][ T4315] ? __cancel_work_timer+0x36a/0x560 [ 107.011974][ T4315] __cancel_work_timer+0x3f4/0x560 [ 107.017123][ T4315] ? cancel_work_sync+0x20/0x20 [ 107.022002][ T4315] ? __cancel_work+0x1f9/0x2e0 [ 107.026799][ T4315] ? lockdep_hardirqs_on+0x94/0x140 [ 107.032037][ T4315] ? __cancel_work+0x27b/0x2e0 [ 107.036858][ T4315] ? cancel_work+0x20/0x20 [ 107.041308][ T4315] ? __rwlock_init+0x140/0x140 [ 107.046131][ T4315] hci_request_cancel_all+0xcc/0x300 [ 107.051459][ T4315] hci_dev_do_close+0x4e/0x1020 [ 107.053246][ T5483] md: recovery of RAID array md1 [ 107.056347][ T4315] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 107.067217][ T4315] ? _raw_spin_unlock+0x40/0x40 [ 107.072138][ T4315] hci_rfkill_set_block+0x101/0x180 [ 107.077379][ T4315] ? rcu_lock_release+0x20/0x20 [ 107.082297][ T4315] rfkill_set_block+0x1c1/0x3c0 [ 107.085243][ T5483] md: md1: recovery done. [ 107.087182][ T4315] rfkill_epo+0x75/0x170 [ 107.087208][ T4315] rfkill_op_handler+0x76/0x220 [ 107.087228][ T4315] process_one_work+0x867/0xff0 [ 107.087257][ T4315] ? worker_detach_from_pool+0x240/0x240 [ 107.087277][ T4315] ? lockdep_hardirqs_off+0x70/0x100 [ 107.087302][ T4315] ? _raw_spin_lock_irq+0xb7/0xf0 [ 107.121587][ T4315] ? _raw_spin_lock_irqsave+0x100/0x100 [ 107.127173][ T4315] ? wq_worker_running+0x97/0x170 [ 107.132236][ T4315] worker_thread+0xad7/0x12a0 [ 107.136957][ T4315] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 107.142885][ T4315] kthread+0x42e/0x520 [ 107.146986][ T4315] ? rcu_lock_release+0x20/0x20 [ 107.151866][ T4315] ? kthread_blkcg+0xd0/0xd0 [ 107.156513][ T4315] ret_from_fork+0x1f/0x30 [ 107.160980][ T4315] [ 107.164080][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.198032][ T5485] md: recovery of RAID array md1 [ 107.203116][ T5485] md: md1: recovery done. [ 107.272738][ T5488] md: recovery of RAID array md1 [ 107.296825][ T5488] md: md1: recovery done. [ 107.373469][ T5491] md: recovery of RAID array md1 [ 107.380637][ T5491] md: md1: recovery done. [ 107.426258][ T5493] md: recovery of RAID array md1 [ 107.435930][ T5493] md: md1: recovery done. [ 107.497366][ T5496] md: recovery of RAID array md1 [ 107.502385][ T5496] md: md1: recovery done. [ 107.539473][ T5499] md: recovery of RAID array md1 [ 107.550053][ T5499] md: md1: recovery done. [ 107.589429][ T5502] md: recovery of RAID array md1 [ 107.594589][ T5502] md: md1: recovery done. [ 107.611607][ T5503] md: recovery of RAID array md1 [ 107.616643][ T5503] md: md1: recovery done. [ 107.632922][ T5505] md: recovery of RAID array md1 [ 107.639032][ T5505] md: md1: recovery done. [ 107.657992][ T5507] md: recovery of RAID array md1 [ 107.663129][ T5507] md: md1: recovery done. [ 107.679874][ T5510] md: recovery of RAID array md1 [ 107.684975][ T5510] md: md1: recovery done. [ 107.702157][ T5511] md: recovery of RAID array md1 [ 107.707406][ T5511] md: md1: recovery done. [ 107.724193][ T5513] md: recovery of RAID array md1 [ 107.730612][ T5513] md: md1: recovery done. [ 107.751924][ T1140] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.775809][ T5516] md: recovery of RAID array md1 [ 107.782661][ T5516] md: md1: recovery done. [ 107.805426][ T5519] md: recovery of RAID array md1 [ 107.815778][ T5519] md: md1: recovery done. [ 107.823370][ T1140] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.860880][ T5520] md: recovery of RAID array md1 [ 107.866062][ T5520] md: md1: recovery done. [ 107.907425][ T5523] md: recovery of RAID array md1 [ 107.916552][ T5523] md: md1: recovery done. [ 107.934099][ T5525] md: recovery of RAID array md1 [ 107.947661][ T1140] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.960289][ T5525] md: md1: recovery done. [ 107.976572][ T5526] md: recovery of RAID array md1 [ 107.984838][ T5526] md: md1: recovery done. [ 108.002877][ T5528] md: recovery of RAID array md1 [ 108.008103][ T5528] md: md1: recovery done. [ 108.024204][ T1140] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.049717][ T5530] md: recovery of RAID array md1 [ 108.054843][ T5530] md: md1: recovery done. [ 108.072118][ T5531] md: recovery of RAID array md1 [ 108.079237][ T5531] md: md1: recovery done. [ 108.094326][ T5532] md: recovery of RAID array md1 [ 108.101736][ T5532] md: md1: recovery done. [ 108.147981][ T5534] md: recovery of RAID array md1 [ 108.153192][ T5534] md: md1: recovery done. [ 108.197038][ T5537] md: recovery of RAID array md1 [ 108.202152][ T5537] md: md1: recovery done. [ 108.236992][ T5538] md: recovery of RAID array md1 [ 108.247050][ T5538] md: md1: recovery done. [ 108.273880][ T5540] md: recovery of RAID array md1 [ 108.281234][ T5540] md: md1: recovery done. [ 108.327142][ T5542] md: recovery of RAID array md1 [ 108.335211][ T5542] md: md1: recovery done. [ 108.358893][ T5545] md: recovery of RAID array md1 [ 108.363980][ T5545] md: md1: recovery done. [ 108.406414][ T5547] md: recovery of RAID array md1 [ 108.415298][ T5547] md: md1: recovery done. [ 108.453722][ T5550] md: recovery of RAID array md1 [ 108.469197][ T5550] md: md1: recovery done. [ 108.506022][ T5551] md: recovery of RAID array md1 [ 108.513597][ T5551] md: md1: recovery done. [ 108.551816][ T5553] md: recovery of RAID array md1 [ 108.564523][ T5553] md: md1: recovery done. [ 108.597261][ T5555] md: recovery of RAID array md1 [ 108.609302][ T5555] md: md1: recovery done. [ 108.661972][ T5558] md: recovery of RAID array md1 [ 108.667068][ T5558] md: md1: recovery done. [ 108.690232][ T5560] md: recovery of RAID array md1 [ 108.707431][ T5560] md: md1: recovery done. [ 108.746943][ T5561] md: recovery of RAID array md1 [ 108.746965][ T5561] md: md1: recovery done. [ 108.799055][ T5566] md: recovery of RAID array md1 [ 108.804098][ T5566] md: md1: recovery done. [ 108.840212][ T5568] md: recovery of RAID array md1 [ 108.845286][ T5568] md: md1: recovery done. [ 108.866936][ T5570] md: recovery of RAID array md1 [ 108.877115][ T5570] md: md1: recovery done. [ 108.924156][ T5572] md: recovery of RAID array md1 [ 108.929859][ T5572] md: md1: recovery done. [ 108.965086][ T5575] md: recovery of RAID array md1 [ 108.980493][ T5575] md: md1: recovery done. [ 109.017817][ T5578] md: recovery of RAID array md1 [ 109.022848][ T5578] md: md1: recovery done. [ 109.056998][ T5580] md: recovery of RAID array md1 [ 109.067143][ T5580] md: md1: recovery done. [ 109.096928][ T5582] md: recovery of RAID array md1 [ 109.107009][ T5582] md: md1: recovery done. [ 109.145649][ T5584] md: recovery of RAID array md1 [ 109.150772][ T5584] md: md1: recovery done. [ 109.193683][ T5585] md: recovery of RAID array md1 [ 109.198867][ T5585] md: md1: recovery done. [ 109.240909][ T5588] md: recovery of RAID array md1 [ 109.246010][ T5588] md: md1: recovery done. [ 109.277705][ T5590] md: recovery of RAID array md1 [ 109.284019][ T5590] md: md1: recovery done. [ 109.299444][ T5591] md: recovery of RAID array md1 [ 109.304696][ T5591] md: md1: recovery done. [ 109.332112][ T5592] md: recovery of RAID array md1 [ 109.339674][ T5592] md: md1: recovery done. [ 109.372968][ T5595] md: recovery of RAID array md1 [ 109.380563][ T5595] md: md1: recovery done. [ 109.409633][ T5597] md: recovery of RAID array md1 [ 109.414709][ T5597] md: md1: recovery done. [ 109.440151][ T5600] md: recovery of RAID array md1 [ 109.445351][ T5600] md: md1: recovery done. [ 109.457349][ T1140] device hsr_slave_0 left promiscuous mode [ 109.479266][ T1140] device hsr_slave_1 left promiscuous mode [ 109.486204][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.493903][ T5601] md: recovery of RAID array md1 [ 109.500220][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.512006][ T5601] md: md1: recovery done. [ 109.519452][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.536065][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.544312][ T5604] md: recovery of RAID array md1 [ 109.557256][ T5604] md: md1: recovery done. [ 109.567788][ T1140] device bridge_slave_1 left promiscuous mode [ 109.574068][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.594330][ T5605] md: recovery of RAID array md1 [ 109.601162][ T1140] device bridge_slave_0 left promiscuous mode [ 109.607124][ T5605] md: md1: recovery done. [ 109.617025][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.629406][ T1140] device veth1_macvtap left promiscuous mode [ 109.635493][ T1140] device veth0_macvtap left promiscuous mode [ 109.655768][ T1140] device veth1_vlan left promiscuous mode [ 109.669824][ T5608] md: recovery of RAID array md1 [ 109.675083][ T1140] device veth0_vlan left promiscuous mode [ 109.688864][ T5608] md: md1: recovery done. [ 109.723418][ T5609] md: recovery of RAID array md1 [ 109.740549][ T5609] md: md1: recovery done. [ 109.759554][ T5610] md: recovery of RAID array md1 [ 109.764707][ T5610] md: md1: recovery done. [ 109.782145][ T5611] md: recovery of RAID array md1 [ 109.789858][ T5611] md: md1: recovery done. [ 109.805560][ T5612] md: recovery of RAID array md1 [ 109.813215][ T5612] md: md1: recovery done. [ 109.830738][ T5613] md: recovery of RAID array md1 [ 109.835976][ T5613] md: md1: recovery done. [ 109.851788][ T5614] md: recovery of RAID array md1 [ 109.859487][ T5614] md: md1: recovery done. [ 109.874912][ T5615] md: recovery of RAID array md1 [ 109.882585][ T5615] md: md1: recovery done. [ 109.898036][ T5616] md: recovery of RAID array md1 [ 109.903069][ T5616] md: md1: recovery done. [ 109.921200][ T5617] md: recovery of RAID array md1 [ 109.926708][ T5617] md: md1: recovery done. [ 109.944342][ T5618] md: recovery of RAID array md1 [ 109.952011][ T5618] md: md1: recovery done. [ 109.969987][ T5619] md: recovery of RAID array md1 [ 109.975103][ T5619] md: md1: recovery done. [ 109.991214][ T5620] md: recovery of RAID array md1 [ 109.996266][ T5620] md: md1: recovery done. [ 110.014324][ T5621] md: recovery of RAID array md1 [ 110.021812][ T5621] md: md1: recovery done. [ 110.036775][ T5622] md: recovery of RAID array md1 [ 110.044538][ T5622] md: md1: recovery done. [ 110.062647][ T5623] md: recovery of RAID array md1 [ 110.067793][ T5623] md: md1: recovery done. [ 110.084653][ T5624] md: recovery of RAID array md1 [ 110.091987][ T5624] md: md1: recovery done. [ 110.096989][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 110.116567][ T5625] md: recovery of RAID array md1 [ 110.124572][ T5625] md: md1: recovery done. [ 110.129550][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 110.148278][ T5626] md: recovery of RAID array md1 [ 110.153389][ T5626] md: md1: recovery done. [ 110.168112][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.178930][ T5627] md: recovery of RAID array md1 [ 110.188780][ T5627] md: md1: recovery done. [ 110.197707][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.237158][ T5628] md: recovery of RAID array md1 [ 110.242207][ T5628] md: md1: recovery done. [ 110.290655][ T5629] md: recovery of RAID array md1 [ 110.298651][ T1140] bond0 (unregistering): Released all slaves [ 110.302468][ T5629] md: md1: recovery done. [ 110.340363][ T5631] md: recovery of RAID array md1 [ 110.345437][ T5631] md: md1: recovery done. [ 110.361275][ T5632] md: recovery of RAID array md1 [ 110.366323][ T5632] md: md1: recovery done. [ 110.385638][ T5633] md: recovery of RAID array md1 [ 110.390789][ T5633] md: md1: recovery done. [ 110.433124][ T5635] md: recovery of RAID array md1 [ 110.438247][ T5635] md: md1: recovery done. [ 110.460171][ T5638] md: recovery of RAID array md1 [ 110.465209][ T5638] md: md1: recovery done. [ 110.522897][ T5640] md: recovery of RAID array md1 [ 110.528621][ T5640] md: md1: recovery done. [ 110.556932][ T5642] md: recovery of RAID array md1 [ 110.579455][ T5642] md: md1: recovery done. [ 110.616194][ T5644] md: recovery of RAID array md1 [ 110.623500][ T5644] md: md1: recovery done. [ 110.650366][ T5647] md: recovery of RAID array md1 [ 110.667055][ T5647] md: md1: recovery done. [ 110.717263][ T5650] md: recovery of RAID array md1 [ 110.722288][ T5650] md: md1: recovery done. [ 110.757616][ T5651] md: recovery of RAID array md1 [ 110.767740][ T5651] md: md1: recovery done. [ 110.807348][ T5653] md: recovery of RAID array md1 [ 110.812488][ T5653] md: md1: recovery done. [ 110.847626][ T5654] md: recovery of RAID array md1 [ 110.857069][ T5654] md: md1: recovery done. [ 110.886937][ T5656] md: recovery of RAID array md1 [ 110.897135][ T5656] md: md1: recovery done. [ 110.949465][ T5657] md: recovery of RAID array md1 [ 110.954506][ T5657] md: md1: recovery done. [ 110.996977][ T5660] md: recovery of RAID array md1 [ 111.007038][ T5660] md: md1: recovery done. [ 111.059052][ T5663] md: recovery of RAID array md1 [ 111.064086][ T5663] md: md1: recovery done. [ 111.109117][ T5665] md: recovery of RAID array md1 [ 111.116997][ T5665] md: md1: recovery done. [ 111.161281][ T5668] md: recovery of RAID array md1 [ 111.166339][ T5668] md: md1: recovery done. [ 111.203372][ T5671] md: recovery of RAID array md1 [ 111.215939][ T5671] md: md1: recovery done. [ 111.232007][ T5673] md: recovery of RAID array md1 [ 111.237139][ T5673] md: md1: recovery done. [ 111.266936][ T5675] md: recovery of RAID array md1 [ 111.271964][ T5675] md: md1: recovery done. [ 111.317374][ T5677] md: recovery of RAID array md1 [ 111.322421][ T5677] md: md1: recovery done. [ 111.378983][ T5679] md: recovery of RAID array md1 [ 111.387018][ T5679] md: md1: recovery done. [ 111.424804][ T5681] md: recovery of RAID array md1 [ 111.447459][ T5681] md: md1: recovery done. [ 111.475091][ T5684] md: recovery of RAID array md1 [ 111.482569][ T5684] md: md1: recovery done. [ 111.500227][ T5686] md: recovery of RAID array md1 [ 111.505268][ T5686] md: md1: recovery done. [ 111.536965][ T5688] md: recovery of RAID array md1 [ 111.546535][ T5688] md: md1: recovery done. [ 111.587058][ T5691] md: recovery of RAID array md1 [ 111.597069][ T5691] md: md1: recovery done. [ 111.651328][ T5693] md: recovery of RAID array md1 [ 111.666143][ T5693] md: md1: recovery done. [ 111.697025][ T5696] md: recovery of RAID array md1 [ 111.703348][ T5696] md: md1: recovery done. [ 111.746939][ T5699] md: recovery of RAID array md1 [ 111.751980][ T5699] md: md1: recovery done. [ 111.769871][ T5701] md: recovery of RAID array md1 [ 111.788535][ T5701] md: md1: recovery done. [ 111.835580][ T5703] md: recovery of RAID array md1 [ 111.849807][ T5703] md: md1: recovery done. [ 111.865975][ T5705] md: recovery of RAID array md1 [ 111.876888][ T5705] md: md1: recovery done. [ 111.911704][ T5707] md: recovery of RAID array md1 [ 111.916745][ T5707] md: md1: recovery done. [ 111.952467][ T5708] md: recovery of RAID array md1 [ 111.966615][ T5708] md: md1: recovery done. [ 111.982276][ T5710] md: recovery of RAID array md1 [ 111.987484][ T5710] md: md1: recovery done. [ 112.011494][ T5712] md: recovery of RAID array md1 [ 112.026840][ T5712] md: md1: recovery done. [ 112.058078][ T5715] md: recovery of RAID array md1 [ 112.063131][ T5715] md: md1: recovery done. [ 112.095617][ T5717] md: recovery of RAID array md1 [ 112.104231][ T5717] md: md1: recovery done. [ 112.128610][ T5720] md: recovery of RAID array md1 [ 112.133640][ T5720] md: md1: recovery done. [ 112.167633][ T5722] md: recovery of RAID array md1 [ 112.177149][ T5722] md: md1: recovery done. [ 112.202976][ T5725] md: recovery of RAID array md1 [ 112.216924][ T5725] md: md1: recovery done. [ 112.247838][ T5726] md: recovery of RAID array md1 [ 112.267128][ T5726] md: md1: recovery done. [ 112.292995][ T5729] md: recovery of RAID array md1 [ 112.298161][ T5729] md: md1: recovery done. [ 112.327190][ T5730] md: recovery of RAID array md1 [ 112.332232][ T5730] md: md1: recovery done. [ 112.368756][ T5731] md: recovery of RAID array md1 [ 112.373798][ T5731] md: md1: recovery done. [ 112.407177][ T5733] md: recovery of RAID array md1 [ 112.417110][ T5733] md: md1: recovery done. [ 112.457014][ T5735] md: recovery of RAID array md1 [ 112.465542][ T5735] md: md1: recovery done. [ 112.506619][ T5739] md: recovery of RAID array md1 [ 112.512641][ T5739] md: md1: recovery done. [ 112.539264][ T5742] md: recovery of RAID array md1 [ 112.547067][ T5742] md: md1: recovery done. [ 112.584463][ T5744] md: recovery of RAID array md1 [ 112.590044][ T5744] md: md1: recovery done. [ 112.617753][ T5747] md: recovery of RAID array md1 [ 112.635011][ T5747] md: md1: recovery done. [ 112.658488][ T5749] md: recovery of RAID array md1 [ 112.663596][ T5749] md: md1: recovery done. [ 112.697478][ T5751] md: recovery of RAID array md1 [ 112.702519][ T5751] md: md1: recovery done. [ 112.728577][ T5753] md: recovery of RAID array md1 [ 112.737597][ T5753] md: md1: recovery done. [ 112.770206][ T5755] md: recovery of RAID array md1 [ 112.775253][ T5755] md: md1: recovery done. [ 112.815507][ T5756] md: recovery of RAID array md1 [ 112.820623][ T5756] md: md1: recovery done. [ 112.836477][ T5757] md: recovery of RAID array md1 [ 112.841617][ T5757] md: md1: recovery done. [ 112.858308][ T5758] md: recovery of RAID array md1 [ 112.863445][ T5758] md: md1: recovery done. [ 112.879879][ T5759] md: recovery of RAID array md1 [ 112.885047][ T5759] md: md1: recovery done. [ 112.925837][ T5761] md: recovery of RAID array md1 [ 112.930915][ T5761] md: md1: recovery done. [ 112.966588][ T5764] md: recovery of RAID array md1 [ 112.972148][ T5764] md: md1: recovery done. [ 112.988555][ T5765] md: recovery of RAID array md1 [ 112.993584][ T5765] md: md1: recovery done. [ 113.014648][ T5767] md: recovery of RAID array md1 [ 113.027444][ T5767] md: md1: recovery done. [ 113.061295][ T5770] md: recovery of RAID array md1 [ 113.066327][ T5770] md: md1: recovery done. [ 113.097184][ T5772] md: recovery of RAID array md1 [ 113.105127][ T5772] md: md1: recovery done. [ 113.133907][ T5775] md: recovery of RAID array md1 [ 113.139504][ T5775] md: md1: recovery done. [ 113.172965][ T5777] md: recovery of RAID array md1 [ 113.181345][ T5777] md: md1: recovery done. [ 113.208465][ T5780] md: recovery of RAID array md1 [ 113.213511][ T5780] md: md1: recovery done. [ 113.251723][ T5781] md: recovery of RAID array md1 [ 113.256773][ T5781] md: md1: recovery done. [ 113.271976][ T5783] md: recovery of RAID array md1 [ 113.277092][ T5783] md: md1: recovery done. [ 113.292449][ T5784] md: recovery of RAID array md1 [ 113.297562][ T5784] md: md1: recovery done. [ 113.340493][ T5786] md: recovery of RAID array md1 [ 113.345826][ T5786] md: md1: recovery done. [ 113.362203][ T5787] md: recovery of RAID array md1 [ 113.368230][ T5787] md: md1: recovery done. [ 113.384851][ T5788] md: recovery of RAID array md1 [ 113.390314][ T5788] md: md1: recovery done. [ 113.427777][ T5790] md: recovery of RAID array md1 [ 113.437006][ T5790] md: md1: recovery done. [ 113.466883][ T5792] md: recovery of RAID array md1 [ 113.471956][ T5792] md: md1: recovery done. [ 113.495473][ T5794] md: recovery of RAID array md1 [ 113.501330][ T5794] md: md1: recovery done. [ 113.518058][ T5795] md: recovery of RAID array md1 [ 113.523089][ T5795] md: md1: recovery done. [ 113.538683][ T5796] md: recovery of RAID array md1 [ 113.543726][ T5796] md: md1: recovery done. [ 113.566988][ T5799] md: recovery of RAID array md1 [ 113.572018][ T5799] md: md1: recovery done. [ 113.588514][ T5800] md: recovery of RAID array md1 [ 113.597596][ T5800] md: md1: recovery done. [ 113.634426][ T5802] md: recovery of RAID array md1 [ 113.639669][ T5802] md: md1: recovery done. [ 113.666924][ T5804] md: recovery of RAID array md1 [ 113.671968][ T5804] md: md1: recovery done. [ 113.704030][ T5805] md: recovery of RAID array md1 [ 113.714144][ T5805] md: md1: recovery done. [ 113.754374][ T5809] md: recovery of RAID array md1 [ 113.767377][ T5809] md: md1: recovery done. [ 113.783302][ T5811] md: recovery of RAID array md1 [ 113.788410][ T5811] md: md1: recovery done. [ 113.825270][ T5813] md: recovery of RAID array md1 [ 113.830451][ T5813] md: md1: recovery done. [ 113.876953][ T5816] md: recovery of RAID array md1 [ 113.882013][ T5816] md: md1: recovery done. [ 113.923203][ T5817] md: recovery of RAID array md1 [ 113.929009][ T5817] md: md1: recovery done. [ 113.966910][ T5819] md: recovery of RAID array md1 [ 113.971958][ T5819] md: md1: recovery done. [ 113.989532][ T5820] md: recovery of RAID array md1 [ 113.994781][ T5820] md: md1: recovery done. [ 114.037011][ T5822] md: recovery of RAID array md1 [ 114.047505][ T5822] md: md1: recovery done. [ 114.079861][ T5825] md: recovery of RAID array md1 [ 114.085092][ T5825] md: md1: recovery done. [ 114.101619][ T5826] md: recovery of RAID array md1 [ 114.106657][ T5826] md: md1: recovery done. [ 114.123046][ T5827] md: recovery of RAID array md1 [ 114.128352][ T5827] md: md1: recovery done. [ 114.150383][ T5830] md: recovery of RAID array md1 [ 114.155710][ T5830] md: md1: recovery done. [ 114.197287][ T5831] md: recovery of RAID array md1 [ 114.202339][ T5831] md: md1: recovery done. [ 114.236326][ T5834] md: recovery of RAID array md1 [ 114.244917][ T5834] md: md1: recovery done. [ 114.268903][ T5837] md: recovery of RAID array md1 [ 114.273941][ T5837] md: md1: recovery done. [ 114.306947][ T5839] md: recovery of RAID array md1 [ 114.312004][ T5839] md: md1: recovery done. [ 114.342208][ T5842] md: recovery of RAID array md1 [ 114.347317][ T5842] md: md1: recovery done. [ 114.385142][ T5843] md: recovery of RAID array md1 [ 114.391349][ T5843] md: md1: recovery done. [ 114.406491][ T5845] md: recovery of RAID array md1 [ 114.411638][ T5845] md: md1: recovery done. [ 114.427981][ T5846] md: recovery of RAID array md1 [ 114.433034][ T5846] md: md1: recovery done. [ 114.457002][ T5848] md: recovery of RAID array md1 [ 114.467041][ T5848] md: md1: recovery done. [ 114.495435][ T5849] md: recovery of RAID array md1 [ 114.500778][ T5849] md: md1: recovery done. [ 114.516102][ T5850] md: recovery of RAID array md1 [ 114.521606][ T5850] md: md1: recovery done. [ 114.557663][ T5852] md: recovery of RAID array md1 [ 114.565355][ T5852] md: md1: recovery done. [ 114.602288][ T5854] md: recovery of RAID array md1 [ 114.617946][ T5854] md: md1: recovery done. [ 114.659089][ T5859] md: recovery of RAID array md1 [ 114.667561][ T5859] md: md1: recovery done. [ 114.707549][ T5861] md: recovery of RAID array md1 [ 114.719793][ T5861] md: md1: recovery done. [ 114.740336][ T5865] md: recovery of RAID array md1 [ 114.745382][ T5865] md: md1: recovery done. [ 114.760846][ T5866] md: recovery of RAID array md1 [ 114.765885][ T5866] md: md1: recovery done. [ 114.782073][ T5867] md: recovery of RAID array md1 [ 114.787671][ T5867] md: md1: recovery done. [ 114.815419][ T5869] md: recovery of RAID array md1 [ 114.826851][ T5869] md: md1: recovery done. [ 114.857016][ T5871] md: recovery of RAID array md1 [ 114.865936][ T5871] md: md1: recovery done. [ 114.897245][ T5873] md: recovery of RAID array md1 [ 114.902417][ T5873] md: md1: recovery done. [ 114.924309][ T5875] md: recovery of RAID array md1 [ 114.929549][ T5875] md: md1: recovery done. [ 114.945043][ T5876] md: recovery of RAID array md1 [ 114.950720][ T5876] md: md1: recovery done. [ 114.968477][ T5877] md: recovery of RAID array md1 [ 114.973540][ T5877] md: md1: recovery done. [ 115.018418][ T5879] md: recovery of RAID array md1 [ 115.026621][ T5879] md: md1: recovery done. [ 115.046212][ T5881] md: recovery of RAID array md1 [ 115.067456][ T5881] md: md1: recovery done. [ 115.108690][ T5882] md: recovery of RAID array md1 [ 115.113788][ T5882] md: md1: recovery done. [ 115.154298][ T5885] md: recovery of RAID array md1 [ 115.161736][ T5885] md: md1: recovery done. [ 115.182603][ T5887] md: recovery of RAID array md1 [ 115.187716][ T5887] md: md1: recovery done. [ 115.229762][ T5888] md: recovery of RAID array md1 [ 115.235666][ T5888] md: md1: recovery done. [ 115.254025][ T5890] md: recovery of RAID array md1 [ 115.267078][ T5890] md: md1: recovery done. [ 115.299897][ T5891] md: recovery of RAID array md1 [ 115.305266][ T5891] md: md1: recovery done. [ 115.346013][ T5893] md: recovery of RAID array md1 [ 115.351837][ T5893] md: md1: recovery done. [ 115.368132][ T5894] md: recovery of RAID array md1 [ 115.373167][ T5894] md: md1: recovery done. [ 115.389294][ T5895] md: recovery of RAID array md1 [ 115.394326][ T5895] md: md1: recovery done. [ 115.411002][ T5896] md: recovery of RAID array md1 [ 115.416038][ T5896] md: md1: recovery done. [ 115.432574][ T5897] md: recovery of RAID array md1 [ 115.437802][ T5897] md: md1: recovery done. [ 115.453458][ T5898] md: recovery of RAID array md1 [ 115.459151][ T5898] md: md1: recovery done. [ 115.474936][ T5899] md: recovery of RAID array md1 [ 115.480342][ T5899] md: md1: recovery done. [ 115.495940][ T5900] md: recovery of RAID array md1 [ 115.501094][ T5900] md: md1: recovery done. [ 115.518761][ T5901] md: recovery of RAID array md1 [ 115.523802][ T5901] md: md1: recovery done. [ 115.539888][ T5902] md: recovery of RAID array md1 [ 115.544982][ T5902] md: md1: recovery done. [ 115.561333][ T5903] md: recovery of RAID array md1 [ 115.566694][ T5903] md: md1: recovery done. [ 115.593183][ T5905] md: recovery of RAID array md1 [ 115.598345][ T5905] md: md1: recovery done. [ 115.637760][ T5907] md: recovery of RAID array md1 [ 115.642815][ T5907] md: md1: recovery done. [ 115.664553][ T5908] md: recovery of RAID array md1 [ 115.669693][ T5908] md: md1: recovery done. [ 115.685060][ T5909] md: recovery of RAID array md1 [ 115.690692][ T5909] md: md1: recovery done. [ 115.707541][ T5910] md: recovery of RAID array md1 [ 115.712639][ T5910] md: md1: recovery done. [ 115.728592][ T5911] md: recovery of RAID array md1 [ 115.733620][ T5911] md: md1: recovery done. [ 115.749831][ T5912] md: recovery of RAID array md1 [ 115.754868][ T5912] md: md1: recovery done. [ 115.771448][ T5913] md: recovery of RAID array md1 [ 115.776479][ T5913] md: md1: recovery done. [ 115.792252][ T5914] md: recovery of RAID array md1 [ 115.797895][ T5914] md: md1: recovery done. [ 115.813718][ T5915] md: recovery of RAID array md1 [ 115.818850][ T5915] md: md1: recovery done. [ 115.835767][ T5916] md: recovery of RAID array md1 [ 115.840851][ T5916] md: md1: recovery done. [ 115.858702][ T5917] md: recovery of RAID array md1 [ 115.863749][ T5917] md: md1: recovery done. [ 115.879865][ T5918] md: recovery of RAID array md1 [ 115.884916][ T5918] md: md1: recovery done. [ 115.900857][ T5919] md: recovery of RAID array md1 [ 115.905895][ T5919] md: md1: recovery done. [ 115.922305][ T5920] md: recovery of RAID array md1 [ 115.927945][ T5920] md: md1: recovery done. [ 115.944030][ T5921] md: recovery of RAID array md1 [ 115.949178][ T5921] md: md1: recovery done. [ 115.964948][ T5922] md: recovery of RAID array md1 [ 115.970598][ T5922] md: md1: recovery done. [ 115.986387][ T5923] md: recovery of RAID array md1 [ 115.991535][ T5923] md: md1: recovery done. [ 116.007390][ T5924] md: recovery of RAID array md1 [ 116.012523][ T5924] md: md1: recovery done. [ 116.029475][ T5925] md: recovery of RAID array md1 [ 116.034505][ T5925] md: md1: recovery done. [ 116.051005][ T5926] md: recovery of RAID array md1 [ 116.056071][ T5926] md: md1: recovery done. [ 116.071943][ T5927] md: recovery of RAID array md1 [ 116.077620][ T5927] md: md1: recovery done. [ 116.094201][ T5928] md: recovery of RAID array md1 [ 116.099532][ T5928] md: md1: recovery done. [ 116.115840][ T5929] md: recovery of RAID array md1 [ 116.121164][ T5929] md: md1: recovery done. [ 116.138409][ T5930] md: recovery of RAID array md1 [ 116.143456][ T5930] md: md1: recovery done. [ 116.159565][ T5931] md: recovery of RAID array md1 [ 116.164611][ T5931] md: md1: recovery done. [ 116.181020][ T5932] md: recovery of RAID array md1 [ 116.186055][ T5932] md: md1: recovery done. [ 116.202362][ T5933] md: recovery of RAID array md1 [ 116.207458][ T5933] md: md1: recovery done. [ 116.223008][ T5934] md: recovery of RAID array md1 [ 116.228096][ T5934] md: md1: recovery done. [ 116.243655][ T5935] md: recovery of RAID array md1 [ 116.249347][ T5935] md: md1: recovery done. [ 116.265490][ T5936] md: recovery of RAID array md1 [ 116.270575][ T5936] md: md1: recovery done. [ 116.286627][ T5937] md: recovery of RAID array md1 [ 116.291749][ T5937] md: md1: recovery done. [ 116.307755][ T5938] md: recovery of RAID array md1 [ 116.312776][ T5938] md: md1: recovery done. [ 116.328950][ T5939] md: recovery of RAID array md1