last executing test programs: 2.224598402s ago: executing program 2 (id=307): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sec\x00', &(0x7f00000002c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sec/tomoyo/domain_policy\x00', 0x2, 0x28) write(r0, &(0x7f0000000400)='select pid=1\nuse_group 0\nnetwork inet stream bind @grp1 0-65535\n', 0x40) 2.121659632s ago: executing program 2 (id=309): syz_usb_connect(0x5, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e402010902"], 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000000c0)='X', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x0, 0xfc, 0x0, 0x0, 0x40, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x41, 0x0}}], 0x414, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) 1.877419567s ago: executing program 3 (id=314): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000013c0), 0xffffffffffffffaf, 0x10, &(0x7f0000001400)}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={r0, 0x0, 0xe, 0x0, &(0x7f00000014c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.840010701s ago: executing program 3 (id=315): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000040)) 1.821278953s ago: executing program 3 (id=316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x2c, r1, 0x1, 0x72bda9, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x16]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.75765558s ago: executing program 3 (id=317): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}]}, 0x48}, 0x1, 0x30000, 0x0, 0x1d4}, 0x8840) 1.75753481s ago: executing program 3 (id=318): r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x2, 0x20000) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000400)=""/96) 1.75424875s ago: executing program 3 (id=319): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000040)=""/172, 0xac) syz_usb_disconnect(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 1.122684955s ago: executing program 1 (id=332): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000140)='27', 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) fsopen(&(0x7f0000000740)='ceph\x00', 0x0) 721.424286ms ago: executing program 1 (id=333): openat$mice(0xffffffffffffff9c, &(0x7f0000000f80), 0x20100) 655.113253ms ago: executing program 1 (id=336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 441.686744ms ago: executing program 1 (id=341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x100}}, 0xc008880) 441.451374ms ago: executing program 1 (id=343): sendmmsg(0xffffffffffffffff, &(0x7f000000a580)=[{{0x0, 0x0, &(0x7f0000007900)=[{&(0x7f0000006500)="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", 0xd15}], 0x1}}], 0x1, 0x400a891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000000b000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f000000b040)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f000000b080)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 441.344274ms ago: executing program 0 (id=344): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mount(&(0x7f0000000040)=@filename='./mnt\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x80800, 0x106) getdents64(r0, &(0x7f0000000140)=""/32, 0x20) 396.235829ms ago: executing program 0 (id=345): r0 = syz_open_dev$dri(&(0x7f0000000840), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000300)={0x3}) 347.344624ms ago: executing program 4 (id=346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(0x0, 0xffff, 0x14f600) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000600)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x29001, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'CRP-syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, &(0x7f00000029c0)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r1}, [@snapshot={0x0, 0x2018, 0x0, 0x80, 'snapshot-merge\x00', {@ram_num={'1:', 0x1}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, 'p', 0x20, '8', ' 2 discard_zeroes_cow discard_passdown_origin'}}]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000380)=""/183, 0xb7}, {&(0x7f0000000440)=""/231, 0xe7}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x4, &(0x7f0000001980)=""/4096, 0x1000}, 0x50f1df2036a2e146) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 294.404399ms ago: executing program 0 (id=347): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000040000901feffffff00000000017c0000040042800c0001800600060088470000500002"], 0x74}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 294.287159ms ago: executing program 2 (id=348): r0 = syz_open_dev$usbmon(&(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8, 0x12, r0, 0xb0dd000) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x1189b0) 294.227349ms ago: executing program 1 (id=349): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 293.119829ms ago: executing program 4 (id=350): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc04464b8, &(0x7f0000000340)={0x0, 0x200, 0x1ff, 0x14325258, 0x0, [], [0x800], [0x8, 0x0, 0x1, 0xffffffff]}) 225.717566ms ago: executing program 0 (id=351): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0), 0x180302, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x2) 225.533066ms ago: executing program 2 (id=352): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 206.706048ms ago: executing program 4 (id=353): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000480)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@my=0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000340)={{@my=0x1, 0x7}, @any, 0x9, 0xbba, 0x7fff, 0x200, 0xfffffffffffffff9, 0x25, 0x1ff}) 170.008312ms ago: executing program 0 (id=354): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0xc4bb69f4c1880afb) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) 97.700369ms ago: executing program 4 (id=355): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_BULK(r0, 0x4004550d, 0x0) 97.59647ms ago: executing program 2 (id=356): r0 = fanotify_init(0x8, 0x80000) fanotify_mark(r0, 0x80, 0x1018, 0xffffffffffffff9c, 0x0) 93.4867ms ago: executing program 0 (id=357): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0x3}, 0x2) 81.086401ms ago: executing program 2 (id=358): setxattr$incfs_metadata(&(0x7f0000002180)='./cgroup\x00', &(0x7f00000021c0), 0x0, 0x0, 0x1) 15.847718ms ago: executing program 4 (id=359): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x24, &(0x7f0000000300)="f0c46000", 0x4) syz_emit_ethernet(0x46, &(0x7f0000000940)=ANY=[@ANYBLOB="bbbbbbbb3b0000ffffffffff86dd60122d9200103afffe800000000000000000000000000037ff02000000000000000000000000000186"], 0x0) 0s ago: executing program 4 (id=360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="610233005030010008021100000108"], 0x288}}, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 38.238421][ T3855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.249668][ T3855] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts. syzkaller login: [ 58.506650][ T4177] cgroup: Unknown subsys name 'net' [ 58.644975][ T4177] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.836588][ T4177] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.546403][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.555137][ T4191] rdma_rxe: rxe_register_device failed with error -23 [ 61.555711][ T4200] rdma_rxe: rxe_register_device failed with error -23 [ 61.566871][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.577188][ T4200] rdma_rxe: failed to add rxe_eth0 [ 61.578064][ T4190] rdma_rxe: rxe_register_device failed with error -23 [ 61.590435][ T4197] rdma_rxe: rxe_register_device failed with error -23 [ 61.598312][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.606799][ T4191] rdma_rxe: failed to add rxe_eth0 [ 61.615078][ T4197] rdma_rxe: failed to add rxe_eth0 [ 61.621363][ T4190] rdma_rxe: failed to add rxe_eth0 [ 61.832843][ T4189] infiniband rxe0: set active [ 61.846886][ T4189] infiniband rxe0: added rxe_eth0 [ 61.858504][ T13] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.920839][ T4189] RDS/IB: rxe0: added [ 61.942813][ T4189] smc: adding ib device rxe0 with port count 1 [ 61.950505][ T4189] smc: ib device rxe0 port 1 has pnetid [ 61.972834][ T13] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.990157][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.083460][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.118628][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 62.143948][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 62.185150][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 62.198638][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 62.255078][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.378631][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.467645][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.474751][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.497769][ T4197] device bridge_slave_0 entered promiscuous mode [ 62.532573][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.542485][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.555526][ T4190] device bridge_slave_0 entered promiscuous mode [ 62.563788][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.572005][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.580031][ T4197] device bridge_slave_1 entered promiscuous mode [ 62.594728][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.602993][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.611291][ T4191] device bridge_slave_0 entered promiscuous mode [ 62.619144][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.626775][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.634555][ T4200] device bridge_slave_0 entered promiscuous mode [ 62.647326][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.654403][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.663480][ T4190] device bridge_slave_1 entered promiscuous mode [ 62.680593][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.687785][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.696699][ T4191] device bridge_slave_1 entered promiscuous mode [ 62.704296][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.713173][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.722117][ T4200] device bridge_slave_1 entered promiscuous mode [ 62.730766][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.754912][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.772255][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.786146][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.799638][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.812123][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.846114][ T3855] infiniband rxe0: set active [ 62.877764][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.889570][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.903581][ T1112] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.915065][ T4197] team0: Port device team_slave_0 added [ 62.923592][ T4197] team0: Port device team_slave_1 added [ 62.935334][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.962884][ T4200] team0: Port device team_slave_0 added [ 62.976574][ T4200] team0: Port device team_slave_1 added [ 62.997646][ T4191] team0: Port device team_slave_0 added [ 63.011396][ T4190] team0: Port device team_slave_0 added [ 63.019849][ T4190] team0: Port device team_slave_1 added [ 63.047786][ T4191] team0: Port device team_slave_1 added [ 63.058304][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.065369][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.091823][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.117843][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.124839][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.151622][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.177919][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.185178][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.212829][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.228715][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.235866][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.264333][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.276002][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.283414][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.310041][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.325852][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.333844][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.361688][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.374357][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.382528][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.410388][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.440311][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.447443][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.474749][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.486552][ T4221] Bluetooth: hci0: command 0x0409 tx timeout [ 63.539496][ T4197] device hsr_slave_0 entered promiscuous mode [ 63.547067][ T4197] device hsr_slave_1 entered promiscuous mode [ 63.556837][ T1112] Bluetooth: hci4: command 0x0409 tx timeout [ 63.566878][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 63.569562][ T4191] device hsr_slave_0 entered promiscuous mode [ 63.572962][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 63.586026][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 63.586612][ T4191] device hsr_slave_1 entered promiscuous mode [ 63.601308][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.609320][ T4191] Cannot create hsr debugfs directory [ 63.673189][ T4200] device hsr_slave_0 entered promiscuous mode [ 63.680991][ T4200] device hsr_slave_1 entered promiscuous mode [ 63.688179][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.696004][ T4200] Cannot create hsr debugfs directory [ 63.710866][ T4190] device hsr_slave_0 entered promiscuous mode [ 63.718664][ T4190] device hsr_slave_1 entered promiscuous mode [ 63.725631][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.733564][ T4190] Cannot create hsr debugfs directory [ 63.773168][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 63.937592][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.944877][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.953523][ T4189] device bridge_slave_0 entered promiscuous mode [ 63.985844][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.993084][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.001049][ T4189] device bridge_slave_1 entered promiscuous mode [ 64.054240][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.077988][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.113633][ T4189] team0: Port device team_slave_0 added [ 64.122045][ T4189] team0: Port device team_slave_1 added [ 64.143884][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.151275][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.177927][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.190626][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.202546][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.209588][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.237448][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.261983][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.288590][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.302214][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.317718][ T4189] device hsr_slave_0 entered promiscuous mode [ 64.324933][ T4189] device hsr_slave_1 entered promiscuous mode [ 64.332223][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.341471][ T4189] Cannot create hsr debugfs directory [ 64.351717][ T4197] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.380157][ T4197] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.395121][ T4197] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.421656][ T4197] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.509582][ T4200] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.531637][ T4200] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.541998][ T4200] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.553923][ T4200] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.595578][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.604379][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.628192][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.643448][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.662639][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.703376][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.714551][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.743071][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.757783][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.768934][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.785480][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.794103][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.805605][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.835461][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.846968][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.855975][ T3040] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.863428][ T3040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.872974][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.884178][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.893067][ T3040] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.901098][ T3040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.909598][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.927334][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.944359][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.953308][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.965331][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.973468][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.993898][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.003495][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.012787][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.022773][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.031364][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.038458][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.046457][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.054350][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.066034][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.075047][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.084031][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.091164][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.120720][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.130836][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.162385][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.173928][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.183733][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.193873][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.204481][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.221066][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.233657][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.256030][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.265301][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.278378][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.292147][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.333499][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.343202][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.353813][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.364921][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.377075][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.387817][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.405656][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.424602][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.435579][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.455661][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.471988][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.482577][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.498147][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.507119][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.514674][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.523978][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.532888][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.542070][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.549240][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.557745][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 65.564722][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.574792][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.598125][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.609135][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.624669][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.635010][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.643302][ T4267] Bluetooth: hci3: command 0x041b tx timeout [ 65.646630][ T4269] Bluetooth: hci2: command 0x041b tx timeout [ 65.650032][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.663238][ T4267] Bluetooth: hci1: command 0x041b tx timeout [ 65.664682][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.674567][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 65.679367][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.705215][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.719344][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.730929][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.746228][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.761874][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.771635][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.779458][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.788320][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.797911][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.806233][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.813404][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.821414][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.829614][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.842033][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.851732][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.860419][ T3040] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.867663][ T3040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.881251][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.890264][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.898992][ T3040] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.906051][ T3040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.919682][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.935321][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.944459][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.968305][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.978329][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.988256][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.996919][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.003980][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.011996][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.022948][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.031648][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.041485][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.050585][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.060029][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.075351][ T4200] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.085889][ T4200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.106423][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.114532][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.130631][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.144427][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.158381][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.168899][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.177921][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.186376][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.196268][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.215085][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.233020][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.243551][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.256882][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.265869][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.275510][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.285070][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.329198][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.338001][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.346107][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.362953][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.374067][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.383246][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.393472][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.403296][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.411980][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.419594][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.428960][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.442020][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.451388][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.460190][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.480243][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.500368][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.514812][ T4191] device veth0_vlan entered promiscuous mode [ 66.537311][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.548860][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.568966][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.583877][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.597748][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.622935][ T4197] device veth0_vlan entered promiscuous mode [ 66.636683][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.645705][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.662764][ T4191] device veth1_vlan entered promiscuous mode [ 66.687862][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.696136][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.721266][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.738590][ T4197] device veth1_vlan entered promiscuous mode [ 66.800540][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.811775][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.820428][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.832636][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.841897][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.851632][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.862663][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.881621][ T4191] device veth0_macvtap entered promiscuous mode [ 66.902264][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.917271][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.954223][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.967316][ T4191] device veth1_macvtap entered promiscuous mode [ 66.982332][ T4197] device veth0_macvtap entered promiscuous mode [ 66.992449][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.003459][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.011786][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.021140][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.031361][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.043953][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.057173][ T4200] device veth0_vlan entered promiscuous mode [ 67.081180][ T4197] device veth1_macvtap entered promiscuous mode [ 67.089136][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.098326][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.105951][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.119666][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.138058][ T4200] device veth1_vlan entered promiscuous mode [ 67.156767][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.171366][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.180293][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.188346][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.197114][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.210962][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.222402][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.234858][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.248370][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.261985][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.273635][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.284093][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.295720][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.308079][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.318297][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.328861][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.340233][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.352845][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.364798][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.377627][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.387488][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.397705][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.406485][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.436206][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.445376][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.458798][ T4197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.468307][ T4197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.483392][ T4197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.493066][ T4197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.519099][ T4200] device veth0_macvtap entered promiscuous mode [ 67.540208][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.550709][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.582248][ T4200] device veth1_macvtap entered promiscuous mode [ 67.598010][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.606195][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.617947][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.631482][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.641317][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.647116][ T4271] Bluetooth: hci0: command 0x040f tx timeout [ 67.650104][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.699323][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.709067][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.718255][ T1112] Bluetooth: hci4: command 0x040f tx timeout [ 67.719066][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.733026][ T4271] Bluetooth: hci1: command 0x040f tx timeout [ 67.737778][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.745046][ T4271] Bluetooth: hci3: command 0x040f tx timeout [ 67.765978][ T4271] Bluetooth: hci2: command 0x040f tx timeout [ 67.767872][ T4189] device veth0_vlan entered promiscuous mode [ 67.786643][ T4190] device veth0_vlan entered promiscuous mode [ 67.794076][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.806186][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.817479][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.828979][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.842232][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.851063][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.860840][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.869800][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.882361][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.918454][ T4189] device veth1_vlan entered promiscuous mode [ 67.938804][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.950401][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.964353][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.978282][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.991530][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.027857][ T4190] device veth1_vlan entered promiscuous mode [ 68.038337][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.047431][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.059798][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.070414][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.081795][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.132150][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.139086][ T4189] device veth0_macvtap entered promiscuous mode [ 68.152493][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.154325][ T4200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.173932][ T4200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.183140][ T4200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.193165][ T4200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.205407][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.214913][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.223972][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.233775][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.242672][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.255499][ T4189] device veth1_macvtap entered promiscuous mode [ 68.313077][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.326655][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.334469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.374959][ T1283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.374959][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.398738][ T1283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.409568][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.421146][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.432834][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.445111][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.459016][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.471514][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.481796][ T4190] device veth0_macvtap entered promiscuous mode [ 68.490948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.499567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.509442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.518817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.528346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.538927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.569055][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.579869][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.591338][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.602886][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.615114][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.627992][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.640639][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.651454][ T4190] device veth1_macvtap entered promiscuous mode [ 68.683464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.692316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.701730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.714301][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.724568][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.740761][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.750543][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.770861][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.783912][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.802357][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.811090][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.819099][ T4308] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.827889][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.866173][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.883052][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.895721][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.912051][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.932168][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.945778][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.962838][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.979015][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.992907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.011581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.021194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.035809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.061882][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.073454][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.087238][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.106437][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.122346][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.133785][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.145909][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.160769][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.178952][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.201481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.215654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.248880][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.270720][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.290099][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.314243][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.348262][ T4292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.359134][ T4292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.383601][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.683220][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.693384][ T4327] device syzkaller0 entered promiscuous mode [ 69.717175][ T1112] Bluetooth: hci0: command 0x0419 tx timeout [ 69.733419][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.764903][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.801689][ T1283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.805026][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 69.831884][ T4270] Bluetooth: hci3: command 0x0419 tx timeout [ 69.847611][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 69.852767][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.861504][ T4270] Bluetooth: hci4: command 0x0419 tx timeout [ 69.870565][ T1283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.894872][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.964707][ T4292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.966769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.985713][ T4292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.992000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.005729][ T4330] FAULT_INJECTION: forcing a failure. [ 70.005729][ T4330] name failslab, interval 1, probability 0, space 0, times 1 [ 70.021296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.034807][ T4330] CPU: 1 PID: 4330 Comm: syz.0.10 Not tainted syzkaller #0 [ 70.042344][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 70.052524][ T4330] Call Trace: [ 70.056126][ T4330] [ 70.059285][ T4330] dump_stack_lvl+0x188/0x250 [ 70.064090][ T4330] ? show_regs_print_info+0x20/0x20 [ 70.069430][ T4330] ? load_image+0x410/0x410 [ 70.073972][ T4330] ? __lock_acquire+0x7d40/0x7d40 [ 70.079080][ T4330] ? rcu_is_watching+0x11/0xa0 [ 70.083833][ T4330] should_fail+0x383/0x4b0 [ 70.088427][ T4330] should_failslab+0x5/0x20 [ 70.093062][ T4330] slab_pre_alloc_hook+0x51/0xc0 [ 70.100571][ T4330] __kmalloc_node+0x6d/0x3a0 [ 70.105174][ T4330] ? __rb_allocate_pages+0x197/0x6b0 [ 70.111239][ T4330] __rb_allocate_pages+0x197/0x6b0 [ 70.116379][ T4330] rb_allocate_cpu_buffer+0x625/0x9e0 [ 70.122107][ T4330] ? rb_wake_up_waiters+0x190/0x190 [ 70.127573][ T4330] __ring_buffer_alloc+0x24b/0x540 [ 70.132683][ T4330] allocate_trace_buffers+0x70/0x2c0 [ 70.137964][ T4330] ? __raw_spin_lock_init+0x41/0x100 [ 70.143275][ T4330] trace_array_create+0x2ac/0xc00 [ 70.148574][ T4330] instance_mkdir+0xc8/0x120 [ 70.153902][ T4330] tracefs_syscall_mkdir+0xb7/0x110 [ 70.159149][ T4330] vfs_mkdir+0x386/0x570 [ 70.163501][ T4330] do_mkdirat+0x1dd/0x5c0 [ 70.167967][ T4330] ? vfs_mkdir+0x570/0x570 [ 70.172519][ T4330] __x64_sys_mkdirat+0x85/0x90 [ 70.177313][ T4330] do_syscall_64+0x4c/0xa0 [ 70.181836][ T4330] ? clear_bhb_loop+0x30/0x80 [ 70.186702][ T4330] ? clear_bhb_loop+0x30/0x80 [ 70.191380][ T4330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.197317][ T4330] RIP: 0033:0x7f75c92f7559 [ 70.202006][ T4330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.223154][ T4330] RSP: 002b:00007f75c754e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 70.231840][ T4330] RAX: ffffffffffffffda RBX: 00007f75c957dfa0 RCX: 00007f75c92f7559 [ 70.239807][ T4330] RDX: 00000000000001ff RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 70.247883][ T4330] RBP: 00007f75c938eb20 R08: 0000000000000000 R09: 0000000000000000 [ 70.255861][ T4330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.264269][ T4330] R13: 00007f75c957e038 R14: 00007f75c957dfa0 R15: 00007fff248e2ab8 [ 70.272371][ T4330] [ 70.422029][ T4339] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.514460][ T4345] FAULT_INJECTION: forcing a failure. [ 70.514460][ T4345] name failslab, interval 1, probability 0, space 0, times 0 [ 70.559402][ T4345] CPU: 0 PID: 4345 Comm: syz.0.14 Not tainted syzkaller #0 [ 70.567265][ T4345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 70.577333][ T4345] Call Trace: [ 70.580628][ T4345] [ 70.583691][ T4345] dump_stack_lvl+0x188/0x250 [ 70.588694][ T4345] ? show_regs_print_info+0x20/0x20 [ 70.594051][ T4345] ? load_image+0x410/0x410 [ 70.598675][ T4345] ? __might_sleep+0xf0/0xf0 [ 70.603472][ T4345] ? __lock_acquire+0x7d40/0x7d40 [ 70.608786][ T4345] should_fail+0x383/0x4b0 [ 70.613490][ T4345] should_failslab+0x5/0x20 [ 70.618019][ T4345] slab_pre_alloc_hook+0x51/0xc0 [ 70.622981][ T4345] ? hugetlbfs_alloc_inode+0xd7/0x130 [ 70.628382][ T4345] kmem_cache_alloc+0x3d/0x280 [ 70.633259][ T4345] hugetlbfs_alloc_inode+0xd7/0x130 [ 70.639086][ T4345] ? hugetlbfs_fill_super+0x910/0x910 [ 70.645182][ T4345] new_inode_pseudo+0x5f/0x210 [ 70.649980][ T4345] new_inode+0x25/0x1d0 [ 70.655075][ T4345] ? resv_map_alloc+0x1a6/0x2a0 [ 70.660159][ T4345] hugetlbfs_get_inode+0x78/0x510 [ 70.665720][ T4345] hugetlb_file_setup+0x249/0x6f0 [ 70.670855][ T4345] __se_sys_memfd_create+0x2e0/0x450 [ 70.676522][ T4345] ? __x64_sys_memfd_create+0x60/0x60 [ 70.681918][ T4345] ? lockdep_hardirqs_on+0x94/0x140 [ 70.687124][ T4345] do_syscall_64+0x4c/0xa0 [ 70.691578][ T4345] ? clear_bhb_loop+0x30/0x80 [ 70.696251][ T4345] ? clear_bhb_loop+0x30/0x80 [ 70.701889][ T4345] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.710214][ T4345] RIP: 0033:0x7f75c92f7559 [ 70.715101][ T4345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.737085][ T4345] RSP: 002b:00007f75c754e028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 70.748904][ T4345] RAX: ffffffffffffffda RBX: 00007f75c957dfa0 RCX: 00007f75c92f7559 [ 70.759575][ T4345] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000400 [ 70.770088][ T4345] RBP: 00007f75c938eb20 R08: 0000000000000000 R09: 0000000000000000 [ 70.778836][ T4345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.787617][ T4345] R13: 00007f75c957e038 R14: 00007f75c957dfa0 R15: 00007fff248e2ab8 [ 70.795767][ T4345] [ 70.949488][ T4357] jffs2: notice: (4357) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 71.400453][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.415637][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.486209][ T4365] Zero length message leads to an empty skb [ 71.856535][ T4390] FAULT_INJECTION: forcing a failure. [ 71.856535][ T4390] name failslab, interval 1, probability 0, space 0, times 0 [ 71.892456][ T4390] CPU: 1 PID: 4390 Comm: syz.4.30 Not tainted syzkaller #0 [ 71.900570][ T4390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 71.910637][ T4390] Call Trace: [ 71.913928][ T4390] [ 71.916965][ T4390] dump_stack_lvl+0x188/0x250 [ 71.921803][ T4390] ? show_regs_print_info+0x20/0x20 [ 71.927119][ T4390] ? load_image+0x410/0x410 [ 71.931655][ T4390] ? __might_sleep+0xf0/0xf0 [ 71.936349][ T4390] ? __lock_acquire+0x7d40/0x7d40 [ 71.941958][ T4390] should_fail+0x383/0x4b0 [ 71.946486][ T4390] should_failslab+0x5/0x20 [ 71.951242][ T4390] slab_pre_alloc_hook+0x51/0xc0 [ 71.956467][ T4390] ? hugetlbfs_alloc_inode+0xd7/0x130 [ 71.961864][ T4390] kmem_cache_alloc+0x3d/0x280 [ 71.966659][ T4390] hugetlbfs_alloc_inode+0xd7/0x130 [ 71.971882][ T4390] ? hugetlbfs_fill_super+0x910/0x910 [ 71.977644][ T4390] new_inode_pseudo+0x5f/0x210 [ 71.982607][ T4390] new_inode+0x25/0x1d0 [ 71.987159][ T4390] ? resv_map_alloc+0x1a6/0x2a0 [ 71.992038][ T4390] hugetlbfs_get_inode+0x78/0x510 [ 71.997381][ T4390] hugetlb_file_setup+0x249/0x6f0 [ 72.002533][ T4390] __se_sys_memfd_create+0x2e0/0x450 [ 72.008187][ T4390] ? __x64_sys_memfd_create+0x60/0x60 [ 72.014547][ T4390] ? lockdep_hardirqs_on+0x94/0x140 [ 72.021210][ T4390] do_syscall_64+0x4c/0xa0 [ 72.026747][ T4390] ? clear_bhb_loop+0x30/0x80 [ 72.032577][ T4390] ? clear_bhb_loop+0x30/0x80 [ 72.038913][ T4390] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.045642][ T4390] RIP: 0033:0x7f8f3f88e559 [ 72.052209][ T4390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.076169][ T4390] RSP: 002b:00007f8f3dae5028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 72.085823][ T4390] RAX: ffffffffffffffda RBX: 00007f8f3fb14fa0 RCX: 00007f8f3f88e559 [ 72.094150][ T4390] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000400 [ 72.102485][ T4390] RBP: 00007f8f3f925b20 R08: 0000000000000000 R09: 0000000000000000 [ 72.112002][ T4390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.119986][ T4390] R13: 00007f8f3fb15038 R14: 00007f8f3fb14fa0 R15: 00007ffeecbdee68 [ 72.128331][ T4390] [ 72.151289][ T4396] jffs2: notice: (4396) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 72.332637][ T4403] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.599046][ T4414] device-mapper: raid: Choosing default region size of 4MiB [ 72.677417][ T4414] device-mapper: table: 248:0: raid: Invalid flags combination [ 72.686133][ T4414] device-mapper: ioctl: error adding target to table [ 72.967143][ T4430] FAULT_INJECTION: forcing a failure. [ 72.967143][ T4430] name failslab, interval 1, probability 0, space 0, times 0 [ 72.990096][ T4428] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.003941][ T4430] CPU: 0 PID: 4430 Comm: syz.3.45 Not tainted syzkaller #0 [ 73.011354][ T4430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 73.023034][ T4430] Call Trace: [ 73.026466][ T4430] [ 73.029542][ T4430] dump_stack_lvl+0x188/0x250 [ 73.034317][ T4430] ? show_regs_print_info+0x20/0x20 [ 73.040628][ T4430] ? load_image+0x410/0x410 [ 73.045254][ T4430] ? __lock_acquire+0x7d40/0x7d40 [ 73.051583][ T4430] ? rcu_is_watching+0x11/0xa0 [ 73.056410][ T4430] should_fail+0x383/0x4b0 [ 73.060865][ T4430] should_failslab+0x5/0x20 [ 73.065504][ T4430] slab_pre_alloc_hook+0x51/0xc0 [ 73.071121][ T4430] ? vm_area_alloc+0x20/0xe0 [ 73.075749][ T4430] kmem_cache_alloc+0x3d/0x280 [ 73.080805][ T4430] vm_area_alloc+0x20/0xe0 [ 73.085247][ T4430] mmap_region+0xbd2/0x1730 [ 73.089782][ T4430] ? file_mmap_ok+0x11f/0x170 [ 73.094526][ T4430] do_mmap+0x801/0xe30 [ 73.098630][ T4430] aio_setup_ring+0x728/0xda0 [ 73.103504][ T4430] ? free_ioctx_reqs+0x180/0x180 [ 73.108467][ T4430] ? percpu_ref_init+0x210/0x340 [ 73.114206][ T4430] ? free_ioctx_users+0x1c0/0x1c0 [ 73.119348][ T4430] ioctx_alloc+0x316/0x770 [ 73.124667][ T4430] __se_sys_io_setup+0x7b/0x190 [ 73.129817][ T4430] do_syscall_64+0x4c/0xa0 [ 73.134265][ T4430] ? clear_bhb_loop+0x30/0x80 [ 73.140652][ T4430] ? clear_bhb_loop+0x30/0x80 [ 73.146398][ T4430] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.153669][ T4430] RIP: 0033:0x7f04a791d559 [ 73.159683][ T4430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.185455][ T4430] RSP: 002b:00007f04a5b74028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 73.196057][ T4430] RAX: ffffffffffffffda RBX: 00007f04a7ba3fa0 RCX: 00007f04a791d559 [ 73.206653][ T4430] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 00000000000003fd [ 73.215168][ T4430] RBP: 00007f04a79b4b20 R08: 0000000000000000 R09: 0000000000000000 [ 73.223154][ T4430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.231128][ T4430] R13: 00007f04a7ba4038 R14: 00007f04a7ba3fa0 R15: 00007ffdc2c00cb8 [ 73.231222][ T4430] [ 73.354533][ T4428] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.397328][ T4269] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.407085][ T4438] jffs2: notice: (4438) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 73.433224][ T4440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.48'. [ 73.449307][ T4438] overlayfs: workdir and upperdir must reside under the same mount [ 73.531080][ T4428] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.654932][ T4452] db_root: cannot be changed: target drivers registered [ 73.685304][ T4428] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.772004][ T4457] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 73.806600][ T4457] device-mapper: raid: Choosing default region size of 8589934592 sectors [ 73.818984][ T4460] jffs2: notice: (4460) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 73.862216][ T4457] device-mapper: table: 248:1: raid: Component device(s) too small [ 73.883196][ T4457] device-mapper: ioctl: error adding target to table [ 74.018717][ T4472] FAULT_INJECTION: forcing a failure. [ 74.018717][ T4472] name failslab, interval 1, probability 0, space 0, times 0 [ 74.064982][ T4472] CPU: 1 PID: 4472 Comm: syz.0.58 Not tainted syzkaller #0 [ 74.072826][ T4472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 74.083506][ T4472] Call Trace: [ 74.086808][ T4472] [ 74.089989][ T4472] dump_stack_lvl+0x188/0x250 [ 74.095671][ T4472] ? show_regs_print_info+0x20/0x20 [ 74.100901][ T4472] ? load_image+0x410/0x410 [ 74.105704][ T4472] ? __lock_acquire+0x7d40/0x7d40 [ 74.111186][ T4472] ? rcu_is_watching+0x11/0xa0 [ 74.116310][ T4472] should_fail+0x383/0x4b0 [ 74.121104][ T4472] should_failslab+0x5/0x20 [ 74.125986][ T4472] slab_pre_alloc_hook+0x51/0xc0 [ 74.132193][ T4472] ? vm_area_alloc+0x20/0xe0 [ 74.137318][ T4472] kmem_cache_alloc+0x3d/0x280 [ 74.142299][ T4472] vm_area_alloc+0x20/0xe0 [ 74.146756][ T4472] mmap_region+0xbd2/0x1730 [ 74.151368][ T4472] ? file_mmap_ok+0x11f/0x170 [ 74.156247][ T4472] do_mmap+0x801/0xe30 [ 74.160367][ T4472] aio_setup_ring+0x728/0xda0 [ 74.165100][ T4472] ? free_ioctx_reqs+0x180/0x180 [ 74.170067][ T4472] ? percpu_ref_init+0x210/0x340 [ 74.175066][ T4472] ? free_ioctx_users+0x1c0/0x1c0 [ 74.180289][ T4472] ioctx_alloc+0x316/0x770 [ 74.184766][ T4472] __se_sys_io_setup+0x7b/0x190 [ 74.189640][ T4472] do_syscall_64+0x4c/0xa0 [ 74.194371][ T4472] ? clear_bhb_loop+0x30/0x80 [ 74.199078][ T4472] ? clear_bhb_loop+0x30/0x80 [ 74.203785][ T4472] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.209820][ T4472] RIP: 0033:0x7f75c92f7559 [ 74.214257][ T4472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.234053][ T4472] RSP: 002b:00007f75c754e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 74.242484][ T4472] RAX: ffffffffffffffda RBX: 00007f75c957dfa0 RCX: 00007f75c92f7559 [ 74.250759][ T4472] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 00000000000003fd [ 74.258943][ T4472] RBP: 00007f75c938eb20 R08: 0000000000000000 R09: 0000000000000000 [ 74.266946][ T4472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.275021][ T4472] R13: 00007f75c957e038 R14: 00007f75c957dfa0 R15: 00007fff248e2ab8 [ 74.283640][ T4472] [ 74.603069][ T4488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.61'. [ 74.722865][ T4498] jffs2: notice: (4498) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 74.805915][ T4502] db_root: cannot be changed: target drivers registered [ 74.823590][ T4498] overlayfs: workdir and upperdir must reside under the same mount [ 74.890073][ T4506] db_root: cannot be changed: target drivers registered [ 75.061072][ T4515] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 75.069716][ T4466] ODEBUG: Out of memory. ODEBUG disabled [ 75.093746][ T4515] device-mapper: raid: Choosing default region size of 8589934592 sectors [ 75.109195][ T4515] device-mapper: table: 248:2: raid: Component device(s) too small [ 75.120931][ T4515] device-mapper: ioctl: error adding target to table [ 75.173005][ T4516] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.291365][ T4516] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.359982][ T4516] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.463396][ T4516] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.544036][ T4529] FAULT_INJECTION: forcing a failure. [ 75.544036][ T4529] name failslab, interval 1, probability 0, space 0, times 0 [ 75.582865][ T4529] CPU: 1 PID: 4529 Comm: syz.2.72 Not tainted syzkaller #0 [ 75.592021][ T4529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 75.604844][ T4529] Call Trace: [ 75.609342][ T4529] [ 75.613805][ T4529] dump_stack_lvl+0x188/0x250 [ 75.619599][ T4529] ? show_regs_print_info+0x20/0x20 [ 75.626901][ T4529] ? load_image+0x410/0x410 [ 75.632415][ T4529] ? __might_sleep+0xf0/0xf0 [ 75.637429][ T4529] ? __lock_acquire+0x7d40/0x7d40 [ 75.644925][ T4529] should_fail+0x383/0x4b0 [ 75.653054][ T4529] should_failslab+0x5/0x20 [ 75.657949][ T4529] slab_pre_alloc_hook+0x51/0xc0 [ 75.663559][ T4529] __kmalloc+0x6b/0x340 [ 75.668656][ T4529] ? ioctx_add_table+0x13c/0x4b0 [ 75.675075][ T4529] ioctx_add_table+0x13c/0x4b0 [ 75.680187][ T4529] ioctx_alloc+0x4ba/0x770 [ 75.685321][ T4529] __se_sys_io_setup+0x7b/0x190 [ 75.690401][ T4529] do_syscall_64+0x4c/0xa0 [ 75.695421][ T4529] ? clear_bhb_loop+0x30/0x80 [ 75.702567][ T4529] ? clear_bhb_loop+0x30/0x80 [ 75.708569][ T4529] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.716442][ T4529] RIP: 0033:0x7ff57ef60559 [ 75.723379][ T4529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.747682][ T4529] RSP: 002b:00007ff57d1b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 75.757179][ T4529] RAX: ffffffffffffffda RBX: 00007ff57f1e6fa0 RCX: 00007ff57ef60559 [ 75.765607][ T4529] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 00000000000003fd [ 75.775330][ T4529] RBP: 00007ff57eff7b20 R08: 0000000000000000 R09: 0000000000000000 [ 75.784394][ T4529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.793036][ T4529] R13: 00007ff57f1e7038 R14: 00007ff57f1e6fa0 R15: 00007fff7d657738 [ 75.801313][ T4529] [ 75.955541][ T4534] jffs2: notice: (4534) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 75.997011][ T4539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.74'. [ 76.194838][ T4552] Cannot find add_set index 0 as target [ 76.663335][ T4582] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 76.670579][ T4582] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 76.693453][ T4582] vhci_hcd vhci_hcd.0: Device attached [ 76.719285][ T4582] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 76.726284][ T4582] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 76.735502][ T4582] vhci_hcd vhci_hcd.0: Device attached [ 76.745127][ T4583] vhci_hcd: connection closed [ 76.752298][ T1283] vhci_hcd: stop threads [ 76.760734][ T4585] vhci_hcd: connection closed [ 76.762481][ T1283] vhci_hcd: release socket [ 76.762526][ T1283] vhci_hcd: disconnect device [ 76.783430][ T1283] vhci_hcd: stop threads [ 76.787853][ T1283] vhci_hcd: release socket [ 76.792448][ T1283] vhci_hcd: disconnect device [ 77.153409][ T4601] autofs4:pid:4601:autofs_fill_super: called with bogus options [ 77.343743][ T4611] ip_tables: iptables: counters copy to user failed while replacing table [ 77.417607][ T4619] 9pnet_virtio: no channels available for device syz [ 77.534702][ T4634] block nbd4: Unsupported socket: shutdown callout must be supported. [ 77.645365][ T4642] ip_tables: iptables: counters copy to user failed while replacing table [ 77.646413][ T4640] syz.0.119 uses obsolete (PF_INET,SOCK_PACKET) [ 77.663115][ T4642] ip_tables: iptables: counters copy to user failed while replacing table [ 77.764224][ T4644] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 77.787893][ T4644] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 77.908400][ T4657] CacheFiles: Failed to register: -95 [ 78.053343][ T4666] FAULT_INJECTION: forcing a failure. [ 78.053343][ T4666] name failslab, interval 1, probability 0, space 0, times 0 [ 78.059316][ T4668] FAULT_INJECTION: forcing a failure. [ 78.059316][ T4668] name failslab, interval 1, probability 0, space 0, times 0 [ 78.085066][ T4666] CPU: 0 PID: 4666 Comm: syz.4.130 Not tainted syzkaller #0 [ 78.092402][ T4666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 78.102739][ T4666] Call Trace: [ 78.106153][ T4666] [ 78.109089][ T4666] dump_stack_lvl+0x188/0x250 [ 78.113809][ T4666] ? __kasan_kmalloc+0xaf/0xe0 [ 78.118673][ T4666] ? tipc_topsrv_kern_subscr+0xf5/0x250 [ 78.125028][ T4666] ? show_regs_print_info+0x20/0x20 [ 78.131354][ T4666] ? load_image+0x410/0x410 [ 78.136061][ T4666] should_fail+0x383/0x4b0 [ 78.140494][ T4666] should_failslab+0x5/0x20 [ 78.145014][ T4666] slab_pre_alloc_hook+0x51/0xc0 [ 78.149971][ T4666] kmem_cache_alloc_trace+0x47/0x290 [ 78.155284][ T4666] ? tipc_sub_subscribe+0x110/0x750 [ 78.160625][ T4666] tipc_sub_subscribe+0x110/0x750 [ 78.166385][ T4666] tipc_conn_rcv_sub+0x14f/0x370 [ 78.171355][ T4666] tipc_topsrv_kern_subscr+0x185/0x250 [ 78.176820][ T4666] ? conn_put+0x320/0x320 [ 78.181183][ T4666] tipc_group_create+0x357/0x4e0 [ 78.186416][ T4666] tipc_sk_join+0x256/0x6a0 [ 78.190940][ T4666] ? __tipc_sendstream+0x1280/0x1280 [ 78.196241][ T4666] tipc_setsockopt+0x6b8/0x960 [ 78.201026][ T4666] ? tipc_shutdown+0x4d0/0x4d0 [ 78.205903][ T4666] ? aa_sock_opt_perm+0x74/0x100 [ 78.210858][ T4666] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 78.216498][ T4666] ? security_socket_setsockopt+0x7a/0xa0 [ 78.223051][ T4666] ? tipc_shutdown+0x4d0/0x4d0 [ 78.227836][ T4666] __sys_setsockopt+0x2bf/0x3d0 [ 78.232723][ T4666] __x64_sys_setsockopt+0xb1/0xc0 [ 78.237753][ T4666] do_syscall_64+0x4c/0xa0 [ 78.242179][ T4666] ? clear_bhb_loop+0x30/0x80 [ 78.246879][ T4666] ? clear_bhb_loop+0x30/0x80 [ 78.251563][ T4666] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.257584][ T4666] RIP: 0033:0x7f8f3f88e559 [ 78.262021][ T4666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.281901][ T4666] RSP: 002b:00007f8f3dae5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.291294][ T4666] RAX: ffffffffffffffda RBX: 00007f8f3fb14fa0 RCX: 00007f8f3f88e559 [ 78.299504][ T4666] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 78.307838][ T4666] RBP: 00007f8f3f925b20 R08: 000000000000002e R09: 0000000000000000 [ 78.316063][ T4666] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000000 [ 78.324067][ T4666] R13: 00007f8f3fb15038 R14: 00007f8f3fb14fa0 R15: 00007ffeecbdee68 [ 78.332513][ T4666] [ 78.335871][ T4668] CPU: 1 PID: 4668 Comm: syz.1.131 Not tainted syzkaller #0 [ 78.335882][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.343197][ T4668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 78.361143][ T4668] Call Trace: [ 78.364706][ T4668] [ 78.367738][ T4668] dump_stack_lvl+0x188/0x250 [ 78.372439][ T4668] ? show_regs_print_info+0x20/0x20 [ 78.377024][ T4666] tipc: Subscription rejected, no memory [ 78.377652][ T4668] ? load_image+0x410/0x410 [ 78.388627][ T4668] ? __lock_acquire+0x7d40/0x7d40 [ 78.393800][ T4668] ? rcu_lock_acquire+0x30/0x30 [ 78.399485][ T4668] should_fail+0x383/0x4b0 [ 78.404786][ T4668] should_failslab+0x5/0x20 [ 78.409390][ T4668] slab_pre_alloc_hook+0x51/0xc0 [ 78.414358][ T4668] ? security_file_alloc+0x30/0x110 [ 78.419660][ T4668] kmem_cache_alloc+0x3d/0x280 [ 78.424451][ T4668] ? rcu_is_watching+0x11/0xa0 [ 78.429246][ T4668] security_file_alloc+0x30/0x110 [ 78.434756][ T4668] __alloc_file+0xc2/0x240 [ 78.439194][ T4668] alloc_empty_file+0x90/0x180 [ 78.443990][ T4668] alloc_file+0x5c/0x510 [ 78.448423][ T4668] alloc_file_clone+0x23/0xa0 [ 78.453217][ T4668] create_pipe_files+0x409/0x6b0 [ 78.458275][ T4668] __do_pipe_flags+0x46/0x1f0 [ 78.463150][ T4668] do_pipe2+0xa7/0x190 [ 78.467403][ T4668] ? pipe_fcntl+0x530/0x530 [ 78.474014][ T4668] ? lock_chain_count+0x20/0x20 [ 78.479070][ T4668] ? syscall_enter_from_user_mode+0x21/0x70 [ 78.485098][ T4668] __x64_sys_pipe+0x36/0x40 [ 78.489624][ T4668] do_syscall_64+0x4c/0xa0 [ 78.494273][ T4668] ? clear_bhb_loop+0x30/0x80 [ 78.498961][ T4668] ? clear_bhb_loop+0x30/0x80 [ 78.503940][ T4668] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.509854][ T4668] RIP: 0033:0x7f1d66487559 [ 78.514287][ T4668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.534201][ T4668] RSP: 002b:00007f1d646de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 78.543347][ T4668] RAX: ffffffffffffffda RBX: 00007f1d6670dfa0 RCX: 00007f1d66487559 [ 78.551443][ T4668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.553813][ T4677] FAULT_INJECTION: forcing a failure. [ 78.553813][ T4677] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 78.559508][ T4668] RBP: 00007f1d6651eb20 R08: 0000000000000000 R09: 0000000000000000 [ 78.559525][ T4668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.559534][ T4668] R13: 00007f1d6670e038 R14: 00007f1d6670dfa0 R15: 00007ffeedb37978 [ 78.559556][ T4668] [ 78.602839][ T4677] CPU: 0 PID: 4677 Comm: syz.2.135 Not tainted syzkaller #0 [ 78.610213][ T4677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 78.620376][ T4677] Call Trace: [ 78.624012][ T4677] [ 78.627204][ T4677] dump_stack_lvl+0x188/0x250 [ 78.631903][ T4677] ? show_regs_print_info+0x20/0x20 [ 78.637353][ T4677] ? load_image+0x410/0x410 [ 78.641856][ T4677] should_fail+0x383/0x4b0 [ 78.646285][ T4677] prepare_alloc_pages+0x1e3/0x5b0 [ 78.651618][ T4677] __alloc_pages+0x11b/0x480 [ 78.656218][ T4677] ? zone_statistics+0x170/0x170 [ 78.661161][ T4677] ? rcu_lock_acquire+0x30/0x30 [ 78.666012][ T4677] ? alloc_pages+0x452/0x560 [ 78.670607][ T4677] __get_free_pages+0x8/0x30 [ 78.675472][ T4677] __tlb_remove_page_size+0x1f2/0x3f0 [ 78.680971][ T4677] unmap_page_range+0xfcf/0x2410 [ 78.686011][ T4677] unmap_vmas+0x131/0x250 [ 78.690345][ T4677] ? unmap_page_range+0x2410/0x2410 [ 78.695644][ T4677] ? __mutex_lock_common+0x435/0x2400 [ 78.701101][ T4677] ? exit_mm_release+0x16/0x30 [ 78.705866][ T4677] exit_mmap+0x3b9/0x640 [ 78.710112][ T4677] ? vm_brk+0x20/0x20 [ 78.714288][ T4677] ? uprobe_clear_state+0x2f6/0x460 [ 78.719488][ T4677] __mmput+0x115/0x390 [ 78.723695][ T4677] exit_mm+0x632/0x7b0 [ 78.728642][ T4677] ? perf_pmu_migrate_context+0xb70/0xb70 [ 78.734473][ T4677] ? do_exit+0x2110/0x2110 [ 78.738899][ T4677] ? __ia32_sys_timer_delete+0x40/0x40 [ 78.744367][ T4677] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 78.749828][ T4677] ? tty_audit_exit+0x149/0x1f0 [ 78.754803][ T4677] do_exit+0x5b8/0x2110 [ 78.759379][ T4677] ? put_task_struct+0x80/0x80 [ 78.764137][ T4677] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 78.770219][ T4677] ? _raw_spin_lock_irq+0xb7/0xf0 [ 78.775274][ T4677] do_group_exit+0x12c/0x2f0 [ 78.779882][ T4677] ? lockdep_hardirqs_on+0x94/0x140 [ 78.786233][ T4677] get_signal+0x7eb/0x12e0 [ 78.790717][ T4677] arch_do_signal_or_restart+0xe6/0x12a0 [ 78.796711][ T4677] ? futex_exit_release+0x1c0/0x1c0 [ 78.802090][ T4677] ? get_sigframe_size+0x10/0x10 [ 78.808001][ T4677] ? __context_tracking_exit+0x4c/0x80 [ 78.814047][ T4677] ? exit_to_user_mode_loop+0x3b/0x130 [ 78.819677][ T4677] exit_to_user_mode_loop+0x9e/0x130 [ 78.825016][ T4677] exit_to_user_mode_prepare+0xee/0x180 [ 78.830938][ T4677] syscall_exit_to_user_mode+0x16/0x40 [ 78.836784][ T4677] do_syscall_64+0x58/0xa0 [ 78.841357][ T4677] ? clear_bhb_loop+0x30/0x80 [ 78.846139][ T4677] ? clear_bhb_loop+0x30/0x80 [ 78.850906][ T4677] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.857962][ T4677] RIP: 0033:0x7ff57ef60559 [ 78.862487][ T4677] Code: Unable to access opcode bytes at RIP 0x7ff57ef6052f. [ 78.870272][ T4677] RSP: 002b:00007ff57d1b70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 78.878816][ T4677] RAX: 0000000000000001 RBX: 00007ff57f1e6fa8 RCX: 00007ff57ef60559 [ 78.886787][ T4677] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff57f1e6fac [ 78.894769][ T4677] RBP: 00007ff57f1e6fa0 R08: 001d51b916daa759 R09: 0000000000000000 [ 78.903148][ T4677] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 78.911993][ T4677] R13: 00007ff57f1e7038 R14: 00007fff7d657650 R15: 00007fff7d657738 [ 78.920403][ T4677] [ 78.923480][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.054978][ T4691] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 79.106588][ T4269] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.376423][ T4269] usb 4-1: Using ep0 maxpacket: 16 [ 79.505265][ T4741] device syzkaller0 entered promiscuous mode [ 79.512272][ T4269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 79.728114][ T4269] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 79.742747][ T4269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.754450][ T4269] usb 4-1: Product: syz [ 79.758855][ T4269] usb 4-1: Manufacturer: syz [ 79.763658][ T4269] usb 4-1: SerialNumber: syz [ 79.778046][ T4269] usb 4-1: config 0 descriptor?? [ 79.831541][ T4269] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 79.843195][ T4269] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 80.044418][ T4708] nvme nvme0: rdma connection establishment failed (-512) [ 80.476494][ T4269] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 80.541597][ T4776] jffs2: notice: (4776) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 80.856434][ T4270] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.016543][ T4269] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 81.035586][ T4269] em28xx 4-1:0.0: board has no eeprom [ 81.131722][ T4814] jffs2: notice: (4814) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 81.251296][ T4823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.202'. [ 81.276531][ T4270] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.287637][ T4270] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 81.300396][ T4270] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 81.314546][ T4270] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 81.323908][ T4270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.366410][ T4267] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.406644][ T4269] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 81.423363][ T4269] em28xx 4-1:0.0: dvb set to bulk mode. [ 81.458231][ T4269] em28xx 4-1:0.0: Binding DVB extension [ 81.516085][ T4304] usb 4-1: USB disconnect, device number 2 [ 81.524513][ T4304] em28xx 4-1:0.0: Disconnecting em28xx [ 81.584668][ T4269] em28xx 4-1:0.0: Registering input extension [ 81.603137][ T4304] em28xx 4-1:0.0: Closing input extension [ 81.627756][ T4270] cxacru 2-1:1.0: send of cm 0x90 failed (-71) [ 81.653077][ T4270] cxacru 2-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 81.667807][ T4304] em28xx 4-1:0.0: Freeing device [ 81.692646][ T4270] cxacru: probe of 2-1:1.0 failed with error -22 [ 81.731543][ T4270] usb 2-1: USB disconnect, device number 2 [ 81.772599][ T4850] ======================================================= [ 81.772599][ T4850] WARNING: The mand mount option has been deprecated and [ 81.772599][ T4850] and is ignored by this kernel. Remove the mand [ 81.772599][ T4850] option from the mount to silence this warning. [ 81.772599][ T4850] ======================================================= [ 81.823125][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.826690][ T4267] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 81.862565][ T4267] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 81.884513][ T4267] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 81.894102][ T4267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.933408][ T4855] jffs2: notice: (4855) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 81.952980][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.178646][ T4304] usb 3-1: USB disconnect, device number 2 [ 82.286540][ T4876] 9pnet_virtio: no channels available for device syz [ 82.317348][ T4872] TC_ACT_REPEAT abuse ? [ 82.453783][ T4883] FAULT_INJECTION: forcing a failure. [ 82.453783][ T4883] name failslab, interval 1, probability 0, space 0, times 0 [ 82.511717][ T4883] CPU: 1 PID: 4883 Comm: syz.0.226 Not tainted syzkaller #0 [ 82.511744][ T4883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 82.511754][ T4883] Call Trace: [ 82.511761][ T4883] [ 82.511770][ T4883] dump_stack_lvl+0x188/0x250 [ 82.511799][ T4883] ? show_regs_print_info+0x20/0x20 [ 82.511820][ T4883] ? load_image+0x410/0x410 [ 82.511841][ T4883] ? __lock_acquire+0x7d40/0x7d40 [ 82.556787][ T4883] ? tomoyo_path_permission+0x3a0/0x3a0 [ 82.562416][ T4883] should_fail+0x383/0x4b0 [ 82.562452][ T4883] should_failslab+0x5/0x20 [ 82.562466][ T4883] slab_pre_alloc_hook+0x51/0xc0 [ 82.562483][ T4883] ? shmem_match+0x160/0x160 [ 82.581575][ T4883] ? shmem_alloc_inode+0x16/0x30 [ 82.581606][ T4883] kmem_cache_alloc+0x3d/0x280 [ 82.581625][ T4883] ? shmem_match+0x160/0x160 [ 82.596296][ T4883] shmem_alloc_inode+0x16/0x30 [ 82.596330][ T4883] new_inode_pseudo+0x5f/0x210 [ 82.596361][ T4883] new_inode+0x25/0x1d0 [ 82.596383][ T4883] shmem_get_inode+0x304/0xa40 [ 82.596411][ T4883] shmem_symlink+0x97/0x6c0 [ 82.596428][ T4883] ? inode_permission+0xef/0x480 [ 82.596445][ T4883] ? bpf_lsm_inode_symlink+0x5/0x10 [ 82.596467][ T4883] vfs_symlink+0x245/0x3d0 [ 82.596493][ T4883] do_symlinkat+0x1ab/0x6b0 [ 82.596515][ T4883] ? vfs_symlink+0x3d0/0x3d0 [ 82.596535][ T4883] ? getname_flags+0x1f9/0x4f0 [ 82.596558][ T4883] __x64_sys_symlink+0x7a/0x90 [ 82.596578][ T4883] do_syscall_64+0x4c/0xa0 [ 82.596593][ T4883] ? clear_bhb_loop+0x30/0x80 [ 82.596611][ T4883] ? clear_bhb_loop+0x30/0x80 [ 82.596630][ T4883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.596648][ T4883] RIP: 0033:0x7f75c92f7559 [ 82.596666][ T4883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.596681][ T4883] RSP: 002b:00007f75c754e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 82.596702][ T4883] RAX: ffffffffffffffda RBX: 00007f75c957dfa0 RCX: 00007f75c92f7559 [ 82.596715][ T4883] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000200000000400 [ 82.596728][ T4883] RBP: 00007f75c938eb20 R08: 0000000000000000 R09: 0000000000000000 [ 82.596740][ T4883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.596751][ T4883] R13: 00007f75c957e038 R14: 00007f75c957dfa0 R15: 00007fff248e2ab8 [ 82.596778][ T4883] [ 83.181374][ T4270] asus 0005:0B05:8502.0001: item fetching failed at offset 2/3 [ 83.195536][ T4270] asus 0005:0B05:8502.0001: Asus hid parse failed: -22 [ 83.230245][ T4270] asus: probe of 0005:0B05:8502.0001 failed with error -22 [ 83.287791][ T4270] libceph: connect (1)[c::]:6789 error -101 [ 83.299908][ T4270] libceph: mon0 (1)[c::]:6789 connect error [ 83.309185][ T4270] libceph: connect (1)[c::]:6789 error -101 [ 83.315189][ T4270] libceph: mon0 (1)[c::]:6789 connect error [ 83.358212][ T4928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.404763][ T4928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.588109][ T4267] libceph: connect (1)[c::]:6789 error -101 [ 83.594877][ T4267] libceph: mon0 (1)[c::]:6789 connect error [ 83.766495][ T4964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'. [ 83.842541][ T4968] FAULT_INJECTION: forcing a failure. [ 83.842541][ T4968] name failslab, interval 1, probability 0, space 0, times 0 [ 83.863311][ T4968] CPU: 0 PID: 4968 Comm: syz.3.260 Not tainted syzkaller #0 [ 83.870658][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 83.880736][ T4968] Call Trace: [ 83.884041][ T4968] [ 83.886996][ T4968] dump_stack_lvl+0x188/0x250 [ 83.891702][ T4968] ? show_regs_print_info+0x20/0x20 [ 83.896927][ T4968] ? load_image+0x410/0x410 [ 83.901463][ T4968] ? __might_sleep+0xf0/0xf0 [ 83.906075][ T4968] ? __lock_acquire+0x7d40/0x7d40 [ 83.911227][ T4968] ? alloc_pipe_info+0x1f5/0x4a0 [ 83.916212][ T4968] ? __do_pipe_flags+0x46/0x1f0 [ 83.921077][ T4968] ? do_pipe2+0xa7/0x190 [ 83.925330][ T4968] should_fail+0x383/0x4b0 [ 83.929747][ T4968] should_failslab+0x5/0x20 [ 83.934241][ T4968] slab_pre_alloc_hook+0x51/0xc0 [ 83.939197][ T4968] ? __d_alloc+0x27/0x6d0 [ 83.943518][ T4968] kmem_cache_alloc+0x3d/0x280 [ 83.948282][ T4968] __d_alloc+0x27/0x6d0 [ 83.952614][ T4968] ? d_alloc_pseudo+0xe/0x70 [ 83.957228][ T4968] d_alloc_pseudo+0x19/0x70 [ 83.961733][ T4968] alloc_file_pseudo+0xe0/0x200 [ 83.966796][ T4968] ? alloc_empty_file_noaccount+0x80/0x80 [ 83.973096][ T4968] ? atime_needs_update+0x770/0x770 [ 83.978307][ T4968] ? debug_mutex_init+0x34/0x70 [ 83.983179][ T4968] ? create_pipe_files+0x2b9/0x6b0 [ 83.988719][ T4968] create_pipe_files+0x390/0x6b0 [ 83.993664][ T4968] __do_pipe_flags+0x46/0x1f0 [ 83.998337][ T4968] do_pipe2+0xa7/0x190 [ 84.002411][ T4968] ? pipe_fcntl+0x530/0x530 [ 84.006907][ T4968] ? lock_chain_count+0x20/0x20 [ 84.011756][ T4968] ? syscall_enter_from_user_mode+0x21/0x70 [ 84.017740][ T4968] __x64_sys_pipe2+0x56/0x60 [ 84.022350][ T4968] do_syscall_64+0x4c/0xa0 [ 84.026787][ T4968] ? clear_bhb_loop+0x30/0x80 [ 84.031480][ T4968] ? clear_bhb_loop+0x30/0x80 [ 84.036327][ T4968] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.042218][ T4968] RIP: 0033:0x7f04a791d559 [ 84.046715][ T4968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.068221][ T4968] RSP: 002b:00007f04a5b74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 84.077374][ T4968] RAX: ffffffffffffffda RBX: 00007f04a7ba3fa0 RCX: 00007f04a791d559 [ 84.085594][ T4968] RDX: 0000000000000000 RSI: 0000000000004800 RDI: 0000000000000000 [ 84.093837][ T4968] RBP: 00007f04a79b4b20 R08: 0000000000000000 R09: 0000000000000000 [ 84.103291][ T4968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.111890][ T4968] R13: 00007f04a7ba4038 R14: 00007f04a7ba3fa0 R15: 00007ffdc2c00cb8 [ 84.120434][ T4968] [ 84.123581][ C0] vkms_vblank_simulate: vblank timer overrun [ 84.142607][ T4923] ceph: No mds server is up or the cluster is laggy [ 84.155475][ T4267] libceph: connect (1)[c::]:6789 error -101 [ 84.163188][ T4267] libceph: mon0 (1)[c::]:6789 connect error [ 84.446825][ T2289] nvmet: connect request for invalid subsystem testsubsys! [ 84.478171][ T4986] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 84.916446][ T4269] Bluetooth: hci4: command 0x0407 tx timeout [ 84.989726][ T5031] FAULT_INJECTION: forcing a failure. [ 84.989726][ T5031] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 85.028944][ T5031] CPU: 1 PID: 5031 Comm: syz.3.280 Not tainted syzkaller #0 [ 85.037214][ T5031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 85.048489][ T5031] Call Trace: [ 85.051826][ T5031] [ 85.054864][ T5031] dump_stack_lvl+0x188/0x250 [ 85.059763][ T5031] ? show_regs_print_info+0x20/0x20 [ 85.065856][ T5031] ? load_image+0x410/0x410 [ 85.070508][ T5031] ? __lock_acquire+0x7d40/0x7d40 [ 85.075653][ T5031] ? snd_dma_alloc_pages+0xfb/0x1d0 [ 85.081323][ T5031] ? do_alloc_pages+0xee/0x210 [ 85.087300][ T5031] should_fail+0x383/0x4b0 [ 85.091841][ T5031] prepare_alloc_pages+0x1e3/0x5b0 [ 85.097173][ T5031] __alloc_pages+0x11b/0x480 [ 85.102491][ T5031] ? zone_statistics+0x170/0x170 [ 85.108107][ T5031] ? alloc_pages+0x452/0x560 [ 85.112869][ T5031] __vmalloc_node_range+0x4b1/0x8b0 [ 85.118109][ T5031] ? snd_dma_alloc_pages+0xfb/0x1d0 [ 85.123684][ T5031] __vmalloc+0x76/0x80 [ 85.127918][ T5031] ? snd_dma_alloc_pages+0xfb/0x1d0 [ 85.133268][ T5031] snd_dma_alloc_pages+0xfb/0x1d0 [ 85.138753][ T5031] do_alloc_pages+0xee/0x210 [ 85.144164][ T5031] snd_pcm_lib_malloc_pages+0x2e5/0x720 [ 85.150181][ T5031] snd_pcm_hw_params+0x814/0x1cf0 [ 85.155539][ T5031] ? kasan_quarantine_put+0xd4/0x210 [ 85.160955][ T5031] ? slab_free_freelist_hook+0xec/0x170 [ 85.166629][ T5031] ? snd_pcm_hw_param_first+0x5de/0xa60 [ 85.172208][ T5031] ? snd_pcm_forward+0x580/0x580 [ 85.177156][ T5031] ? snd_pcm_hw_param_near+0x3da/0x460 [ 85.182622][ T5031] ? snd_pcm_kernel_ioctl+0xf1/0x340 [ 85.187909][ T5031] snd_pcm_oss_change_params_locked+0x1e46/0x3cf0 [ 85.194436][ T5031] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 85.199649][ T5031] ? mutex_lock_io_nested+0x60/0x60 [ 85.204947][ T5031] ? __fsnotify_parent+0x72a/0x820 [ 85.210072][ T5031] snd_pcm_oss_sync+0x370/0xb10 [ 85.214930][ T5031] snd_pcm_oss_release+0xfe/0x240 [ 85.220047][ T5031] ? snd_pcm_oss_open+0x1e60/0x1e60 [ 85.225243][ T5031] __fput+0x212/0x8c0 [ 85.229399][ T5031] task_work_run+0x125/0x1a0 [ 85.233992][ T5031] exit_to_user_mode_loop+0x10f/0x130 [ 85.239535][ T5031] exit_to_user_mode_prepare+0xee/0x180 [ 85.245087][ T5031] syscall_exit_to_user_mode+0x16/0x40 [ 85.250568][ T5031] do_syscall_64+0x58/0xa0 [ 85.255004][ T5031] ? clear_bhb_loop+0x30/0x80 [ 85.259776][ T5031] ? clear_bhb_loop+0x30/0x80 [ 85.265005][ T5031] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.271164][ T5031] RIP: 0033:0x7f04a791d559 [ 85.275622][ T5031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.295396][ T5031] RSP: 002b:00007f04a5b74028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 85.303836][ T5031] RAX: 0000000000000000 RBX: 00007f04a7ba3fa0 RCX: 00007f04a791d559 [ 85.312510][ T5031] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 85.320674][ T5031] RBP: 00007f04a79b4b20 R08: 0000000000000000 R09: 0000000000000000 [ 85.328765][ T5031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.336737][ T5031] R13: 00007f04a7ba4038 R14: 00007f04a7ba3fa0 R15: 00007ffdc2c00cb8 [ 85.345599][ T5031] [ 85.765946][ T5084] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.815306][ T5087] loop0: detected capacity change from 0 to 3904 [ 85.902622][ T5087] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 85.941645][ T5087] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 85.962818][ T5087] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 85.977854][ T5087] loop0: [ 86.044597][ T5107] device syzkaller0 entered promiscuous mode [ 86.312635][ T5126] jffs2: notice: (5126) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 86.366481][ T2289] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.752261][ T4267] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.770853][ T7] cfg80211: failed to load regulatory.db [ 86.802741][ T2289] usb 3-1: config 0 has no interfaces? [ 86.935622][ T5161] device syzkaller0 entered promiscuous mode [ 86.948921][ T5161] tipc: Started in network mode [ 86.960687][ T5161] tipc: Node identity 0e4b77d349c3, cluster identity 4711 [ 86.976715][ T5161] tipc: Enabled bearer , priority 0 [ 86.984815][ T5161] netlink: 'syz.4.329': attribute type 16 has an invalid length. [ 86.995372][ T2289] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 87.006444][ T5161] device syzkaller0 left promiscuous mode [ 87.006632][ T2289] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 87.021373][ T2289] usb 3-1: Product: syz [ 87.025734][ T2289] usb 3-1: Manufacturer: syz [ 87.030548][ T2289] usb 3-1: SerialNumber: syz [ 87.046846][ T2289] usb 3-1: config 0 descriptor?? [ 87.058280][ T4267] usb 4-1: Using ep0 maxpacket: 32 [ 87.065070][ T5160] tipc: Resetting bearer [ 87.121686][ T5160] tipc: Disabling bearer [ 87.140228][ T5167] FAULT_INJECTION: forcing a failure. [ 87.140228][ T5167] name fail_futex, interval 1, probability 0, space 0, times 1 [ 87.161211][ T5167] CPU: 0 PID: 5167 Comm: syz.1.332 Not tainted syzkaller #0 [ 87.169419][ T5167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 87.180614][ T5167] Call Trace: [ 87.183915][ T5167] [ 87.187559][ T5167] dump_stack_lvl+0x188/0x250 [ 87.192617][ T5167] ? show_regs_print_info+0x20/0x20 [ 87.197921][ T5167] ? load_image+0x410/0x410 [ 87.202624][ T5167] ? cgroup_rstat_updated+0xce/0x350 [ 87.208453][ T5167] ? place_entity+0x4f0/0x4f0 [ 87.213440][ T5167] should_fail+0x383/0x4b0 [ 87.218085][ T5167] get_futex_key+0x1a1/0x12d0 [ 87.222790][ T5167] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 87.230612][ T5167] ? futex_wait_restart+0x250/0x250 [ 87.236319][ T5167] ? lock_chain_count+0x20/0x20 [ 87.242262][ T5167] futex_wait_setup+0x4b/0x520 [ 87.247062][ T5167] ? lockdep_hardirqs_on+0x94/0x140 [ 87.252284][ T5167] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 87.258319][ T5167] futex_wait+0x22f/0x680 [ 87.262665][ T5167] ? __lock_acquire+0x13b3/0x7d40 [ 87.266664][ T4267] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 87.268153][ T5167] ? do_futex+0x12b0/0x12b0 [ 87.283127][ T5167] ? verify_lock_unused+0x140/0x140 [ 87.288624][ T5167] ? verify_lock_unused+0x140/0x140 [ 87.293939][ T5167] do_futex+0xdc2/0x12b0 [ 87.298313][ T5167] ? futex_exit_release+0x1c0/0x1c0 [ 87.303691][ T5167] ? __context_tracking_exit+0x4c/0x80 [ 87.309305][ T5167] __se_sys_futex+0x389/0x420 [ 87.314032][ T5167] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 87.320622][ T5167] ? __x64_sys_futex+0xf0/0xf0 [ 87.326370][ T5167] ? __x64_sys_futex+0x1d/0xf0 [ 87.331371][ T5167] do_syscall_64+0x4c/0xa0 [ 87.336398][ T5167] ? clear_bhb_loop+0x30/0x80 [ 87.341435][ T5167] ? clear_bhb_loop+0x30/0x80 [ 87.346245][ T5167] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.352095][ T2289] usb 3-1: USB disconnect, device number 3 [ 87.352542][ T5167] RIP: 0033:0x7f1d66487559 [ 87.365274][ T5167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.386954][ T5167] RSP: 002b:00007f1d646de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 87.396027][ T5167] RAX: ffffffffffffffda RBX: 00007f1d6670dfa8 RCX: 00007f1d66487559 [ 87.404222][ T5167] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1d6670dfa8 [ 87.412245][ T5167] RBP: 00007f1d6670dfa0 R08: 0000000000000000 R09: 0000000000000000 [ 87.420220][ T5167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.432134][ T5167] R13: 00007f1d6670e038 R14: 00007ffeedb37890 R15: 00007ffeedb37978 [ 87.440727][ T5167] [ 87.444402][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.526631][ T4267] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 87.551806][ T4267] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 87.563226][ T5176] tun0: tun_chr_ioctl cmd 1074025675 [ 87.569591][ T4267] usb 4-1: Product: syz [ 87.576672][ T4267] usb 4-1: Manufacturer: syz [ 87.581380][ T4267] usb 4-1: SerialNumber: syz [ 87.583259][ T5176] tun0: persist enabled [ 87.602026][ T4267] usb 4-1: config 0 descriptor?? [ 87.604438][ T5176] tun0: tun_chr_ioctl cmd 1074025675 [ 87.616879][ T5176] tun0: persist disabled [ 87.626359][ T5180] program syz.4.337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.636876][ T5139] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 87.644793][ T5179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.338'. [ 87.658379][ T4267] hub 4-1:0.0: bad descriptor, ignoring hub [ 87.667307][ T4267] hub: probe of 4-1:0.0 failed with error -5 [ 87.721633][ T5184] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 87.729049][ T5184] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 88.190512][ T5221] [ 88.192990][ T5221] ====================================================== [ 88.196370][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 88.200962][ T5221] WARNING: possible circular locking dependency detected [ 88.200987][ T5221] syzkaller #0 Not tainted [ 88.200995][ T5221] ------------------------------------------------------ [ 88.228773][ T5221] syz.0.357/5221 is trying to acquire lock: [ 88.235268][ T5221] ffff88802be79bd0 (kn->active#365){++++}-{0:0}, at: kernfs_remove_by_name_ns+0x91/0x100 [ 88.245420][ T5228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'. [ 88.247992][ T5221] [ 88.247992][ T5221] but task is already holding lock: [ 88.248004][ T5221] ffffffff8dd6a468 (serio_mutex){+.+.}-{3:3}, at: serio_unregister_port+0x2b/0x150 [ 88.248050][ T5221] [ 88.248050][ T5221] which lock already depends on the new lock. [ 88.248050][ T5221] [ 88.248054][ T5221] [ 88.248054][ T5221] the existing dependency chain (in reverse order) is: [ 88.248058][ T5221] [ 88.248058][ T5221] -> #1 (serio_mutex){+.+.}-{3:3}: [ 88.248089][ T5221] __mutex_lock_common+0x1e5/0x2400 [ 88.313644][ T5221] mutex_lock_interruptible_nested+0x17/0x20 [ 88.321053][ T5221] drvctl_store+0x2a/0xae0 [ 88.326554][ T5221] kernfs_fop_write_iter+0x3a8/0x500 [ 88.332670][ T5221] vfs_write+0x748/0xd70 [ 88.338332][ T5221] ksys_write+0x153/0x260 [ 88.343499][ T5221] do_syscall_64+0x4c/0xa0 [ 88.348458][ T5221] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.354888][ T5221] [ 88.354888][ T5221] -> #0 (kn->active#365){++++}-{0:0}: [ 88.363096][ T5221] __lock_acquire+0x38f7/0x7d40 [ 88.368705][ T5221] lock_acquire+0x19f/0x400 [ 88.373760][ T5221] __kernfs_remove+0x5da/0xcb0 [ 88.379376][ T5221] kernfs_remove_by_name_ns+0x91/0x100 [ 88.385410][ T5221] sysfs_remove_group+0xfd/0x290 [ 88.393419][ T5221] sysfs_remove_groups+0x50/0xa0 [ 88.399124][ T5221] device_remove_attrs+0xc2/0x140 [ 88.404980][ T5221] device_del+0x637/0xa80 [ 88.410641][ T5221] serio_destroy_port+0x34a/0x470 [ 88.416347][ T5221] serio_unregister_port+0x12c/0x150 [ 88.423081][ T5221] userio_char_release+0x7f/0xb0 [ 88.430567][ T5221] __fput+0x212/0x8c0 [ 88.436017][ T5221] task_work_run+0x125/0x1a0 [ 88.446425][ T5221] exit_to_user_mode_loop+0x10f/0x130 [ 88.454955][ T5221] exit_to_user_mode_prepare+0xee/0x180 [ 88.462402][ T5221] syscall_exit_to_user_mode+0x16/0x40 [ 88.468490][ T5221] do_syscall_64+0x58/0xa0 [ 88.473730][ T5221] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.480183][ T5221] [ 88.480183][ T5221] other info that might help us debug this: [ 88.480183][ T5221] [ 88.492434][ T5221] Possible unsafe locking scenario: [ 88.492434][ T5221] [ 88.500170][ T5221] CPU0 CPU1 [ 88.505664][ T5221] ---- ---- [ 88.511110][ T5221] lock(serio_mutex); [ 88.516836][ T5221] lock(kn->active#365); [ 88.523734][ T5221] lock(serio_mutex); [ 88.530532][ T5221] lock(kn->active#365); [ 88.535035][ T5221] [ 88.535035][ T5221] *** DEADLOCK *** [ 88.535035][ T5221] [ 88.544527][ T5221] 1 lock held by syz.0.357/5221: [ 88.550934][ T5221] #0: ffffffff8dd6a468 (serio_mutex){+.+.}-{3:3}, at: serio_unregister_port+0x2b/0x150 [ 88.560973][ T5221] [ 88.560973][ T5221] stack backtrace: [ 88.569028][ T5221] CPU: 1 PID: 5221 Comm: syz.0.357 Not tainted syzkaller #0 [ 88.576483][ T5221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 88.586560][ T5221] Call Trace: [ 88.589970][ T5221] [ 88.593273][ T5221] dump_stack_lvl+0x188/0x250 [ 88.598098][ T5221] ? load_image+0x410/0x410 [ 88.603499][ T5221] ? show_regs_print_info+0x20/0x20 [ 88.608690][ T5221] ? print_circular_bug+0x12b/0x1a0 [ 88.614543][ T5221] check_noncircular+0x2f8/0x400 [ 88.621180][ T5221] ? print_deadlock_bug+0x5d0/0x5d0 [ 88.627581][ T5221] ? lockdep_lock+0xf1/0x1f0 [ 88.633866][ T5221] ? mark_lock+0x286/0x320 [ 88.639275][ T5221] ? _find_first_zero_bit+0xd1/0xf0 [ 88.645632][ T5221] __lock_acquire+0x38f7/0x7d40 [ 88.651109][ T5221] ? __lock_acquire+0x13b3/0x7d40 [ 88.656916][ T5221] ? kmem_cache_free+0x8f/0x210 [ 88.661790][ T5221] ? verify_lock_unused+0x140/0x140 [ 88.667466][ T5221] ? kasan_set_free_info+0x1f/0x40 [ 88.672841][ T5221] ? ____kasan_slab_free+0xd5/0x110 [ 88.678568][ T5221] ? kernfs_put+0x311/0x480 [ 88.683089][ T5221] ? sysfs_remove_groups+0x50/0xa0 [ 88.688566][ T5221] ? serio_destroy_port+0x34a/0x470 [ 88.693780][ T5221] ? exit_to_user_mode_loop+0x10f/0x130 [ 88.699339][ T5221] ? exit_to_user_mode_prepare+0xee/0x180 [ 88.705415][ T5221] lock_acquire+0x19f/0x400 [ 88.709925][ T5221] ? kernfs_remove_by_name_ns+0x91/0x100 [ 88.715550][ T5221] ? lock_chain_count+0x20/0x20 [ 88.720591][ T5221] ? read_lock_is_recursive+0x10/0x10 [ 88.726317][ T5221] ? up_write+0x1b6/0x410 [ 88.730646][ T5221] __kernfs_remove+0x5da/0xcb0 [ 88.735874][ T5221] ? kernfs_remove_by_name_ns+0x91/0x100 [ 88.741612][ T5221] ? kernfs_next_descendant_post+0x200/0x200 [ 88.748476][ T5221] kernfs_remove_by_name_ns+0x91/0x100 [ 88.754375][ T5221] sysfs_remove_group+0xfd/0x290 [ 88.760224][ T5221] sysfs_remove_groups+0x50/0xa0 [ 88.765939][ T5221] device_remove_attrs+0xc2/0x140 [ 88.770965][ T5221] device_del+0x637/0xa80 [ 88.775371][ T5221] ? kill_device+0x160/0x160 [ 88.779942][ T5221] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 88.785846][ T5221] ? _raw_spin_unlock+0x40/0x40 [ 88.790719][ T5221] serio_destroy_port+0x34a/0x470 [ 88.796271][ T5221] serio_unregister_port+0x12c/0x150 [ 88.801653][ T5221] userio_char_release+0x7f/0xb0 [ 88.807305][ T5221] ? userio_char_open+0x190/0x190 [ 88.812708][ T5221] __fput+0x212/0x8c0 [ 88.817075][ T5221] task_work_run+0x125/0x1a0 [ 88.822175][ T5221] exit_to_user_mode_loop+0x10f/0x130 [ 88.827930][ T5221] exit_to_user_mode_prepare+0xee/0x180 [ 88.836218][ T5221] syscall_exit_to_user_mode+0x16/0x40 [ 88.842573][ T5221] do_syscall_64+0x58/0xa0 [ 88.847521][ T5221] ? clear_bhb_loop+0x30/0x80 [ 88.852393][ T5221] ? clear_bhb_loop+0x30/0x80 [ 88.857796][ T5221] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.865729][ T5221] RIP: 0033:0x7f75c92f7559 [ 88.870897][ T5221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.895458][ T5221] RSP: 002b:00007fff248e2c18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 88.907621][ T5221] RAX: 0000000000000000 RBX: 00007fff248e2d00 RCX: 00007f75c92f7559 [ 88.919582][ T5221] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 88.933435][ T5221] RBP: 0000000000015827 R08: 0000000000000001 R09: 0000000000000000 [ 88.945418][ T5221] R10: 0000001b31820000 R11: 0000000000000246 R12: 00007fff248e2d40 [ 88.955369][ T5221] R13: 00007f75c957dfac R14: 000000000001586e R15: 00007f75c957dfa0 [ 88.964793][ T5221] [ 93.053762][ T4269] usb 4-1: USB disconnect, device number 3