last executing test programs: 17.539300474s ago: executing program 4 (id=200): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 16.415393811s ago: executing program 4 (id=204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 16.171909747s ago: executing program 4 (id=209): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="68c99b", 0x3}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/256, 0x100}], 0x1}, 0x40) 14.587068874s ago: executing program 4 (id=218): syz_open_dev$mtd(0x0, 0x10001, 0x8000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$binfmt_format(r2, &(0x7f0000000a00)='1\x00', 0x2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14.287508732s ago: executing program 4 (id=224): syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000880), &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40012301, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x5, {0xb, 0x2, 0x0, {0x2, 0x9, 0x1000, 0x90000005, 0x2000000000001, 0x8000000000000001, 0x9ec, 0x35741061, 0x40, 0xa593e9c1ca988eda, 0xfffffff9, 0x0, 0xee01, 0x7, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4000000002}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xe) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 13.595485838s ago: executing program 4 (id=229): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 7.471511513s ago: executing program 0 (id=284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 7.271826728s ago: executing program 0 (id=287): syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c000101008032090400"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) close(0x3) write$P9_RREADLINK(r0, 0x0, 0x0) 5.379866913s ago: executing program 1 (id=292): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_open_procfs(0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}}, 0x1080) mount(&(0x7f00000000c0)=@filename='none\x00', 0x0, &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x1c}}, 0x8000) 5.379750473s ago: executing program 0 (id=293): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_dev$video(0x0, 0x2, 0x200001) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 4.951575993s ago: executing program 0 (id=295): syz_usb_connect(0x3, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0xdd, 0xea, 0x45, 0x20, 0x45e, 0x775, 0x37b8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x6, 0x22c79bca6396f991, 0x2b, "", [{{0x9, 0x4, 0xea, 0x0, 0x1, 0xff, 0x93, 0xc0, 0x7, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x40, 0x49, 0x7}}]}}]}}]}}, 0x0) 4.677793539s ago: executing program 3 (id=297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 4.475718974s ago: executing program 3 (id=298): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_open_procfs(0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}}, 0x1080) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 4.461049494s ago: executing program 1 (id=299): sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x4, 0x700000000000000, 0x0, 0x40040}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 4.405036716s ago: executing program 1 (id=300): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000300)=0x5) 4.287550168s ago: executing program 1 (id=301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x16, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 4.266653209s ago: executing program 1 (id=302): capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000040)={0x0, 0x372e, 0xfffffffc, 0x7e, 0xfffffffe}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) 4.188616761s ago: executing program 1 (id=303): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') read$FUSE(r2, &(0x7f0000001300)={0x2020}, 0x2020) 3.575580515s ago: executing program 3 (id=304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x44, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 3.561498725s ago: executing program 3 (id=305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000a0601010000002400000000010000000500010007000000040008800900020073797a3200000000"], 0x2c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000340)="321fd091a87e772eff209eb4fc94bc160160f0979cce7c869a4e68e7f611a3cae83e843c20630b579a4ba542fcbb1728c6d03b69b10bfe268c692c7b218f9346ff3987fdd486bb8c71a0f984a3015addbff35734a067f62267a7f77512119053", 0x60, 0xe7c) 3.383577029s ago: executing program 3 (id=307): syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) 3.193650244s ago: executing program 0 (id=309): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_open_procfs(0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}}, 0x1080) mount(&(0x7f00000000c0)=@filename='none\x00', 0x0, &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x1c}}, 0x8000) 2.422674632s ago: executing program 2 (id=316): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='off', 0x3) 2.299543585s ago: executing program 2 (id=317): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, 0x0, &(0x7f00000002c0)) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) pipe2$watch_queue(&(0x7f0000000300), 0x80) 2.273270316s ago: executing program 0 (id=318): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240112000a000201020904010000010200000904010101010200000905010910000206000725010c0040000904020001010200000904020101010200000905820900020303100725010c08ff03"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1555563c}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xf3c) 2.139615559s ago: executing program 2 (id=319): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4040, 0x4) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xf00, @multicast1}, 0x10, &(0x7f0000001600)=[{0x0}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x38}, 0x0) read$FUSE(r1, &(0x7f00000027c0)={0x2020}, 0x2020) 593.094375ms ago: executing program 3 (id=320): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090400000003"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x2cc31, 0x0) 592.337096ms ago: executing program 2 (id=330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 295.084143ms ago: executing program 2 (id=321): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000100)=0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x3, 0x4, 0x4, 0x2, 0x3, 0xf1, 0x0, 0x7fffffffffffb, 0x8000, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c53c5}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x3, 0x2, 0x2, 0x10001, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7ffffffe, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0xfffffffffffffffe, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x103, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x8, 0xffffffffffffffff, 0xd, 0x11, 0x0, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x1, 0x7, 0x7, 0xae8f, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x3, 0x4, 0x10001, 0xfffffffffffffff9, 0x400000000003, 0x5, 0x21, 0xfffffffffffffc04, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x2, 0xd, 0x100000000004, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x81031, 0xffffffffffffffff, 0x4b50a000) 0s ago: executing program 2 (id=322): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='./dev/loop0,', 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts. [ 57.018238][ T4173] cgroup: Unknown subsys name 'net' [ 57.150886][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.398285][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.733201][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 59.754980][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 59.831149][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 59.882115][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 59.897504][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 59.944199][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.951462][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.960228][ T4185] device bridge_slave_0 entered promiscuous mode [ 59.968388][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.975724][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.983439][ T4196] device bridge_slave_0 entered promiscuous mode [ 59.996055][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.003116][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.011116][ T4196] device bridge_slave_1 entered promiscuous mode [ 60.034092][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.041288][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.049316][ T4185] device bridge_slave_1 entered promiscuous mode [ 60.117799][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.128539][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.137807][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.144869][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.152889][ T4186] device bridge_slave_0 entered promiscuous mode [ 60.173574][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.184485][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.204497][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.211849][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.219618][ T4186] device bridge_slave_1 entered promiscuous mode [ 60.226650][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.233704][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.242366][ T4195] device bridge_slave_0 entered promiscuous mode [ 60.250159][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.257775][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.265565][ T4190] device bridge_slave_0 entered promiscuous mode [ 60.282004][ T4196] team0: Port device team_slave_0 added [ 60.301154][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.308483][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.316682][ T4195] device bridge_slave_1 entered promiscuous mode [ 60.323544][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.330760][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.339081][ T4190] device bridge_slave_1 entered promiscuous mode [ 60.347241][ T4196] team0: Port device team_slave_1 added [ 60.360369][ T4185] team0: Port device team_slave_0 added [ 60.373677][ T4185] team0: Port device team_slave_1 added [ 60.398024][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.409318][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.435737][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.445511][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.452462][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.478460][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.500617][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.511343][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.520880][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.527858][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.554054][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.572033][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.579028][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.605016][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.617439][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.651728][ T4186] team0: Port device team_slave_0 added [ 60.658836][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.666119][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.692056][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.712146][ T4195] team0: Port device team_slave_0 added [ 60.720169][ T4186] team0: Port device team_slave_1 added [ 60.742823][ T4190] team0: Port device team_slave_0 added [ 60.761884][ T4195] team0: Port device team_slave_1 added [ 60.780324][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.787653][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.814668][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.828941][ T4196] device hsr_slave_0 entered promiscuous mode [ 60.836671][ T4196] device hsr_slave_1 entered promiscuous mode [ 60.844861][ T4190] team0: Port device team_slave_1 added [ 60.861315][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.868508][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.895194][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.919537][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.926744][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.952914][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.985058][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.992246][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.018253][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.032173][ T4185] device hsr_slave_0 entered promiscuous mode [ 61.039172][ T4185] device hsr_slave_1 entered promiscuous mode [ 61.046278][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.054054][ T4185] Cannot create hsr debugfs directory [ 61.067705][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.074668][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.100779][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.113730][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.120731][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.146899][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.189786][ T4195] device hsr_slave_0 entered promiscuous mode [ 61.197148][ T4195] device hsr_slave_1 entered promiscuous mode [ 61.204047][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.211713][ T4195] Cannot create hsr debugfs directory [ 61.294175][ T4186] device hsr_slave_0 entered promiscuous mode [ 61.300984][ T4186] device hsr_slave_1 entered promiscuous mode [ 61.307681][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.315223][ T4186] Cannot create hsr debugfs directory [ 61.332245][ T4190] device hsr_slave_0 entered promiscuous mode [ 61.339030][ T4190] device hsr_slave_1 entered promiscuous mode [ 61.346111][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.353679][ T4190] Cannot create hsr debugfs directory [ 61.436427][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 61.443209][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 61.445493][ T1344] Bluetooth: hci1: command 0x0409 tx timeout [ 61.449767][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 61.515622][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 61.612211][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.627464][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.636948][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.650221][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.689060][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.701253][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.710874][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.720373][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.778292][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.795087][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.819303][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.828811][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.857019][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.883188][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.893155][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.903081][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.960168][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.973032][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.983206][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.993502][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.020318][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.030138][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.041927][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.053740][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.074552][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.111673][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.120808][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.131052][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.138317][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.146827][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.167191][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.188245][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.197019][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.204739][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.213187][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.222082][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.231376][ T1232] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.238493][ T1232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.247749][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.256791][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.267587][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.277370][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.302865][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.311132][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.320500][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.331607][ T1232] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.338723][ T1232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.347477][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.356195][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.364472][ T1232] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.371551][ T1232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.379443][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.388925][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.396755][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.404340][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.413634][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.422193][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.439693][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.472647][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.481620][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.491187][ T1232] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.498292][ T1232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.508503][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.517582][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.526315][ T1232] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.533372][ T1232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.541279][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.550926][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.559721][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.568759][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.577351][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.585604][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.593864][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.602844][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.628286][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.649809][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.659530][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.670513][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.679594][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.688586][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.697152][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.706500][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.715066][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.723913][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.732743][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.741565][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.750877][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.759269][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.767821][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.777133][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.785022][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.794303][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.803181][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.821410][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.841844][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.860797][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.881454][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.892611][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.922598][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.940233][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.969293][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.988232][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.998661][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.007548][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.014598][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.024907][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.054971][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.064276][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.080442][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.092687][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.099837][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.135848][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.152040][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.161596][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.170759][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.181529][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.202375][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.211842][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.220420][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.227516][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.235901][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.244409][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.253097][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.260547][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.269215][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.277291][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.291197][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.299343][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.308216][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.317208][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.326231][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.346765][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.360264][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.375219][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.383426][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.391191][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.399551][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.407511][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.418078][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.427400][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.435865][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.445132][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.459211][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.471654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.480955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.489689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.500134][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.510235][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.515853][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 63.524514][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 63.530818][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 63.537185][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 63.553100][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.572105][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.588056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.596319][ T4226] Bluetooth: hci3: command 0x041b tx timeout [ 63.603153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.612639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.621419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.631310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.640401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.649052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.658823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.668094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.699431][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.714560][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.723477][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.737849][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.752703][ T4190] device veth0_vlan entered promiscuous mode [ 63.779564][ T4185] device veth0_vlan entered promiscuous mode [ 63.793277][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.802035][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.815323][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.824008][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.832792][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.840993][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.861368][ T4190] device veth1_vlan entered promiscuous mode [ 63.878245][ T4196] device veth0_vlan entered promiscuous mode [ 63.895821][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.906091][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.928707][ T4185] device veth1_vlan entered promiscuous mode [ 63.942432][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.950729][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.959372][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.967087][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.988306][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.997948][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.023422][ T4190] device veth0_macvtap entered promiscuous mode [ 64.036833][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.044308][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.052417][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.061593][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.076725][ T4196] device veth1_vlan entered promiscuous mode [ 64.113243][ T4190] device veth1_macvtap entered promiscuous mode [ 64.124810][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.140274][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.152593][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.161891][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.170860][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.180771][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.189657][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.201718][ T4185] device veth0_macvtap entered promiscuous mode [ 64.223347][ T4185] device veth1_macvtap entered promiscuous mode [ 64.250696][ T4186] device veth0_vlan entered promiscuous mode [ 64.268208][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.277769][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.286301][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.294153][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.302477][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.311014][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.320215][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.328971][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.338291][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.349359][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.366721][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.376287][ T4196] device veth0_macvtap entered promiscuous mode [ 64.384186][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.395227][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.404773][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.413884][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.430740][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.438989][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.447895][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.458121][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.466766][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.477634][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.488976][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.500427][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.515284][ T4196] device veth1_macvtap entered promiscuous mode [ 64.536585][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.544742][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.553868][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.564273][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.574406][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.584864][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.596594][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.608245][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.628704][ T4186] device veth1_vlan entered promiscuous mode [ 64.638543][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.649323][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.659331][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.670087][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.681398][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.690234][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.699843][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.709209][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.719292][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.728686][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.740738][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.749652][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.758658][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.767425][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.783024][ T4195] device veth0_vlan entered promiscuous mode [ 64.791563][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.800994][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.809824][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.825023][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.835811][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.845799][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.856543][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.867596][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.898650][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.906938][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.914645][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.923610][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.942006][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.951099][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.962902][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.971919][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.000025][ T4195] device veth1_vlan entered promiscuous mode [ 65.099682][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.109819][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.153165][ T4186] device veth0_macvtap entered promiscuous mode [ 65.164402][ T4186] device veth1_macvtap entered promiscuous mode [ 65.183822][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.186839][ T4195] device veth0_macvtap entered promiscuous mode [ 65.194561][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.207647][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.216257][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.224215][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.232794][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.241566][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.249569][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.271954][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.282840][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.292873][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.303633][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.313788][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.324401][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.337010][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.348436][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.360931][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.371053][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.381767][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.391729][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.402801][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.414041][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.426985][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.438394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.445690][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.453373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.463544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.473120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.482331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.492751][ T4195] device veth1_macvtap entered promiscuous mode [ 65.507471][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.517284][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.526245][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.534944][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.547326][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.555178][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.587689][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.598917][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.599304][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 65.610935][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.620553][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 65.625560][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.631605][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 65.641196][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.652432][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 65.657825][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.673653][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.679877][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 65.685849][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.702062][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.716530][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.724947][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.733165][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.742218][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.754443][ T1232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.763577][ T1232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.768931][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.787425][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.797548][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.808180][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.818484][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.829039][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.840016][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.851735][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.862666][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.901199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.909424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.920791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.930240][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.939149][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.948195][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.957040][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.969366][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.992058][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.999988][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.002531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.029870][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.044979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.111651][ T1232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.124559][ T1232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.162616][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.210829][ T1232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.224866][ T1232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.252799][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.286182][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.294021][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.342284][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.369233][ T1232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.392775][ T1232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.427963][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.447350][ T4276] FAULT_INJECTION: forcing a failure. [ 66.447350][ T4276] name failslab, interval 1, probability 0, space 0, times 1 [ 66.483272][ T4278] jffs2: notice: (4278) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 66.486817][ T4276] CPU: 1 PID: 4276 Comm: syz.0.1 Not tainted syzkaller #0 [ 66.506982][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.517060][ T4276] Call Trace: [ 66.520353][ T4276] [ 66.523296][ T4276] dump_stack_lvl+0x188/0x250 [ 66.528011][ T4276] ? show_regs_print_info+0x20/0x20 [ 66.533229][ T4276] ? load_image+0x410/0x410 [ 66.537753][ T4276] ? __lock_acquire+0x7b50/0x7b50 [ 66.542791][ T4276] ? rcu_lock_acquire+0x30/0x30 [ 66.547647][ T4276] should_fail+0x383/0x4b0 [ 66.552078][ T4276] should_failslab+0x5/0x20 [ 66.556570][ T4276] slab_pre_alloc_hook+0x51/0xc0 [ 66.561496][ T4276] ? security_file_alloc+0x30/0x110 [ 66.566707][ T4276] kmem_cache_alloc+0x3d/0x280 [ 66.571458][ T4276] ? rcu_is_watching+0x11/0xa0 [ 66.576215][ T4276] security_file_alloc+0x30/0x110 [ 66.581241][ T4276] __alloc_file+0xc2/0x240 [ 66.585658][ T4276] alloc_empty_file+0x90/0x180 [ 66.590423][ T4276] path_openat+0x11c/0x2fb0 [ 66.594916][ T4276] ? __lock_acquire+0x13dc/0x7b50 [ 66.599937][ T4276] ? stack_trace_snprint+0xe0/0xe0 [ 66.605060][ T4276] ? verify_lock_unused+0x140/0x140 [ 66.610276][ T4276] ? verify_lock_unused+0x140/0x140 [ 66.615465][ T4276] ? __kasan_slab_alloc+0xa9/0xc0 [ 66.620491][ T4276] ? __kasan_slab_alloc+0x92/0xc0 [ 66.625498][ T4276] ? slab_post_alloc_hook+0x4c/0x380 [ 66.630890][ T4276] ? verify_lock_unused+0x140/0x140 [ 66.636081][ T4276] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.642145][ T4276] ? do_filp_open+0x400/0x400 [ 66.646986][ T4276] do_filp_open+0x1df/0x400 [ 66.651517][ T4276] ? vfs_tmpfile+0x300/0x300 [ 66.656124][ T4276] ? _raw_spin_unlock+0x24/0x40 [ 66.660962][ T4276] ? alloc_fd+0x59e/0x650 [ 66.665283][ T4276] do_sys_openat2+0x14b/0x500 [ 66.669956][ T4276] ? __lock_acquire+0x7b50/0x7b50 [ 66.674968][ T4276] ? do_sys_open+0xe0/0xe0 [ 66.679370][ T4276] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 66.685339][ T4276] ? lock_chain_count+0x20/0x20 [ 66.690183][ T4276] __x64_sys_openat+0x135/0x160 [ 66.695028][ T4276] do_syscall_64+0x4c/0xa0 [ 66.699451][ T4276] ? clear_bhb_loop+0x30/0x80 [ 66.704134][ T4276] ? clear_bhb_loop+0x30/0x80 [ 66.708819][ T4276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.714730][ T4276] RIP: 0033:0x7fa548b3898e [ 66.719150][ T4276] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 66.738767][ T4276] RSP: 002b:00007fa546dcfec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 66.747197][ T4276] RAX: ffffffffffffffda RBX: 00007fa546dd06c0 RCX: 00007fa548b3898e [ 66.755174][ T4276] RDX: 0000000000000002 RSI: 00007fa546dcff90 RDI: ffffffffffffff9c [ 66.763139][ T4276] RBP: 00007fa548c0f024 R08: 0000000000000000 R09: 0000000000000000 [ 66.771093][ T4276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.779049][ T4276] R13: 00007fa548e00038 R14: 00007fa548dfffa0 R15: 00007ffc75599f08 [ 66.787014][ T4276] [ 66.877314][ T4226] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 66.892866][ T4283] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 66.913020][ T4281] netlink: 'syz.2.7': attribute type 10 has an invalid length. [ 66.923070][ T4281] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7'. [ 66.991666][ T4285] FAULT_INJECTION: forcing a failure. [ 66.991666][ T4285] name failslab, interval 1, probability 0, space 0, times 0 [ 67.011544][ T4285] CPU: 1 PID: 4285 Comm: syz.1.8 Not tainted syzkaller #0 [ 67.018695][ T4285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.028763][ T4285] Call Trace: [ 67.032065][ T4285] [ 67.035007][ T4285] dump_stack_lvl+0x188/0x250 [ 67.039703][ T4285] ? show_regs_print_info+0x20/0x20 [ 67.044915][ T4285] ? load_image+0x410/0x410 [ 67.049447][ T4285] ? __might_sleep+0xf0/0xf0 [ 67.054055][ T4285] ? __lock_acquire+0x7b50/0x7b50 [ 67.059100][ T4285] should_fail+0x383/0x4b0 [ 67.063540][ T4285] should_failslab+0x5/0x20 [ 67.068059][ T4285] slab_pre_alloc_hook+0x51/0xc0 [ 67.073012][ T4285] kmem_cache_alloc_node+0x47/0x2c0 [ 67.078218][ T4285] ? __alloc_skb+0xf4/0x750 [ 67.082737][ T4285] __alloc_skb+0xf4/0x750 [ 67.087092][ T4285] __ip6_append_data+0x26b7/0x38f0 [ 67.092575][ T4285] ? ip6_setup_cork+0x11e0/0x11e0 [ 67.097615][ T4285] ? ip6_setup_cork+0xc68/0x11e0 [ 67.102589][ T4285] ip6_append_data+0x1d4/0x310 [ 67.107352][ T4285] ? rawv6_send_hdrinc+0x1650/0x1650 [ 67.112635][ T4285] ? rawv6_send_hdrinc+0x1650/0x1650 [ 67.117915][ T4285] rawv6_sendmsg+0x1220/0x1710 [ 67.122679][ T4285] ? __might_sleep+0xf0/0xf0 [ 67.127254][ T4285] ? compat_rawv6_ioctl+0x60/0x60 [ 67.132276][ T4285] ? aa_sk_perm+0x7dc/0x910 [ 67.136779][ T4285] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 67.143182][ T4285] ? sock_rps_record_flow+0x17/0x3b0 [ 67.148455][ T4285] ? inet_sendmsg+0x7a/0x2a0 [ 67.153031][ T4285] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 67.158303][ T4285] ? inet_send_prepare+0x250/0x250 [ 67.163408][ T4285] ____sys_sendmsg+0x5be/0x8f0 [ 67.168172][ T4285] ? __sys_sendmsg_sock+0x30/0x30 [ 67.173188][ T4285] ? import_iovec+0x6f/0xa0 [ 67.177681][ T4285] ___sys_sendmsg+0x236/0x2e0 [ 67.182360][ T4285] ? __sys_sendmsg+0x290/0x290 [ 67.187156][ T4285] __sys_sendmmsg+0x2ba/0x500 [ 67.191823][ T4285] ? __ia32_sys_sendmsg+0x80/0x80 [ 67.196847][ T4285] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 67.202835][ T4285] ? lock_chain_count+0x20/0x20 [ 67.207715][ T4285] __x64_sys_sendmmsg+0x9c/0xb0 [ 67.212555][ T4285] do_syscall_64+0x4c/0xa0 [ 67.216956][ T4285] ? clear_bhb_loop+0x30/0x80 [ 67.221616][ T4285] ? clear_bhb_loop+0x30/0x80 [ 67.226303][ T4285] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.232180][ T4285] RIP: 0033:0x7f968ce25159 [ 67.236759][ T4285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.256531][ T4285] RSP: 002b:00007f968b07d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 67.264931][ T4285] RAX: ffffffffffffffda RBX: 00007f968d0acfa0 RCX: 00007f968ce25159 [ 67.272892][ T4285] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000005 [ 67.280849][ T4285] RBP: 00007f968cebc024 R08: 0000000000000000 R09: 0000000000000000 [ 67.288805][ T4285] R10: 0000000020004084 R11: 0000000000000246 R12: 0000000000000000 [ 67.296773][ T4285] R13: 00007f968d0ad038 R14: 00007f968d0acfa0 R15: 00007ffe34580788 [ 67.304742][ T4285] [ 67.476603][ T4226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.512560][ T4226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.656750][ T4226] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 67.678234][ T4226] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 67.689465][ T4226] usb 4-1: Manufacturer: syz [ 67.712465][ T4226] usb 4-1: config 0 descriptor?? [ 67.722851][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 67.732030][ T4268] Bluetooth: hci1: command 0x0419 tx timeout [ 67.740908][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 67.750449][ T4268] Bluetooth: hci4: command 0x0419 tx timeout [ 67.771998][ T4268] Bluetooth: hci3: command 0x0419 tx timeout [ 67.963418][ T4264] jffs2: notice: (4264) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 68.227528][ T4268] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.343972][ T4308] device syzkaller0 entered promiscuous mode [ 68.476364][ T4268] usb 5-1: Using ep0 maxpacket: 16 [ 68.595745][ T4268] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.640099][ T4268] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.644453][ T4313] Zero length message leads to an empty skb [ 68.662731][ T4311] device syzkaller0 entered promiscuous mode [ 68.672274][ T4268] usb 5-1: config 0 interface 0 has no altsetting 0 [ 68.686321][ T4268] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 68.706540][ T4314] device syzkaller0 entered promiscuous mode [ 68.716793][ T4268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.739553][ T4268] usb 5-1: config 0 descriptor?? [ 68.951723][ T4264] udc-core: couldn't find an available UDC or it's busy [ 69.000935][ T4264] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 69.029423][ T4322] syz.0.18 (4322): drop_caches: 0 [ 69.066535][ T4226] uclogic 0003:256C:006D.0001: failed retrieving Huion firmware version: -71 [ 69.087795][ T4226] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 69.095757][ T4226] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 69.128375][ T4226] usb 4-1: USB disconnect, device number 2 [ 69.228619][ T4268] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 69.236652][ T4268] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 69.245404][ T4268] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 69.253126][ T4268] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 69.262459][ T4268] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 69.273296][ T4268] mcp2221 0003:04D8:00DD.0002: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 69.335564][ T4228] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.455702][ T4227] usb 5-1: USB disconnect, device number 2 [ 69.769079][ T4228] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 69.790646][ T4228] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.963928][ T4228] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 69.986904][ T4325] ceph: No mds server is up or the cluster is laggy [ 70.024759][ T4228] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.070865][ T4227] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 70.081158][ T4335] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.098358][ T4337] device syzkaller0 entered promiscuous mode [ 70.109814][ T4339] device syzkaller0 entered promiscuous mode [ 70.205841][ T4228] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 70.225118][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 70.242314][ T4228] usb 2-1: Product: syz [ 70.246557][ T4228] usb 2-1: Manufacturer: syz [ 70.356765][ T4228] cdc_wdm 2-1:1.0: skipping garbage [ 70.362197][ T4228] cdc_wdm 2-1:1.0: skipping garbage [ 70.371743][ T4345] device syzkaller0 entered promiscuous mode [ 70.440209][ T4228] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 70.459444][ T4349] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.462257][ T4348] device syzkaller0 entered promiscuous mode [ 70.495347][ T4228] cdc_wdm 2-1:1.0: Unknown control protocol [ 70.605467][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 70.687839][ T4227] usb 2-1: USB disconnect, device number 2 [ 71.283016][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.289713][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.376000][ T4227] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 71.467053][ T4378] device syzkaller0 entered promiscuous mode [ 71.659075][ T4380] device syzkaller0 entered promiscuous mode [ 71.775611][ T4382] device syzkaller0 entered promiscuous mode [ 71.790817][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.831177][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.905742][ T4384] device syzkaller0 entered promiscuous mode [ 71.933626][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079f88000: rx timeout, send abort [ 71.951261][ T4227] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 71.962692][ T4227] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 71.983220][ T4227] usb 2-1: Manufacturer: syz [ 72.011448][ T4227] usb 2-1: config 0 descriptor?? [ 72.310712][ T4366] jffs2: notice: (4366) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 72.394201][ T4404] device syzkaller0 entered promiscuous mode [ 72.442734][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079f88000: abort rx timeout. Force session deactivation [ 72.524932][ T4408] device syzkaller0 entered promiscuous mode [ 72.624138][ T4411] device syzkaller0 entered promiscuous mode [ 72.880636][ T4419] device syzkaller0 entered promiscuous mode [ 73.177057][ T4366] udc-core: couldn't find an available UDC or it's busy [ 73.184292][ T4366] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 73.226317][ T4227] uclogic 0003:256C:006D.0003: failed retrieving Huion firmware version: -71 [ 73.237502][ T4227] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 73.245073][ T4227] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 73.255928][ T4227] usb 2-1: USB disconnect, device number 3 [ 73.378863][ T4431] device syzkaller0 entered promiscuous mode [ 73.562027][ T4438] device syzkaller0 entered promiscuous mode [ 73.702897][ T4445] device syzkaller0 entered promiscuous mode [ 73.781040][ T4449] device syzkaller0 entered promiscuous mode [ 74.023716][ T4465] device syzkaller0 entered promiscuous mode [ 74.625584][ T4230] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.236059][ T4485] device syzkaller0 entered promiscuous mode [ 75.294310][ T4501] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.414673][ T4515] device syzkaller0 entered promiscuous mode [ 75.455811][ T4230] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 75.493201][ T4230] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.678173][ T4230] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 75.727044][ T4542] device syzkaller0 entered promiscuous mode [ 75.741899][ T4230] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.768989][ T4230] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.896180][ T4230] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 75.907389][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 75.920828][ T4230] usb 4-1: Product: syz [ 75.925179][ T4230] usb 4-1: Manufacturer: syz [ 75.988802][ T4554] FAULT_INJECTION: forcing a failure. [ 75.988802][ T4554] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 75.998815][ T4230] cdc_wdm 4-1:1.0: skipping garbage [ 76.002555][ T4554] CPU: 0 PID: 4554 Comm: syz.0.87 Not tainted syzkaller #0 [ 76.014685][ T4554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.021477][ T4230] cdc_wdm 4-1:1.0: skipping garbage [ 76.024748][ T4554] Call Trace: [ 76.024759][ T4554] [ 76.036159][ T4554] dump_stack_lvl+0x188/0x250 [ 76.040861][ T4554] ? show_regs_print_info+0x20/0x20 [ 76.046080][ T4554] ? load_image+0x410/0x410 [ 76.050597][ T4554] ? __kasan_kmalloc+0xc6/0xe0 [ 76.055367][ T4554] ? sg_write+0xac0/0xe90 [ 76.056285][ T4230] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 76.059707][ T4554] ? do_iter_write+0x3c3/0x7a0 [ 76.070392][ T4554] should_fail+0x383/0x4b0 [ 76.070811][ T4230] cdc_wdm 4-1:1.0: Unknown control protocol [ 76.074828][ T4554] prepare_alloc_pages+0x1e3/0x5b0 [ 76.085802][ T4554] __alloc_pages+0x11b/0x480 [ 76.090410][ T4554] ? zone_statistics+0x170/0x170 [ 76.095364][ T4554] ? alloc_pages+0x452/0x560 [ 76.099968][ T4554] sg_build_indirect+0x2a4/0x870 [ 76.104933][ T4554] sg_common_write+0xb1c/0x1c10 [ 76.109814][ T4554] ? sg_add_request+0x690/0x690 [ 76.114678][ T4554] ? __lock_acquire+0x7b50/0x7b50 [ 76.119801][ T4554] ? _raw_write_unlock_irqrestore+0xc1/0x120 [ 76.125834][ T4554] ? mutex_unlock+0x10/0x10 [ 76.130347][ T4554] ? __lock_acquire+0x7b50/0x7b50 [ 76.135386][ T4554] ? __might_fault+0xb3/0x110 [ 76.140080][ T4554] ? _copy_from_user+0x111/0x170 [ 76.145030][ T4554] sg_write+0xac0/0xe90 [ 76.149200][ T4554] ? __lock_acquire+0x7b50/0x7b50 [ 76.154242][ T4554] ? sg_read+0x1420/0x1420 [ 76.158676][ T4554] ? aa_file_perm+0x38b/0xe80 [ 76.163385][ T4554] ? end_current_label_crit_section+0x14b/0x170 [ 76.169632][ T4554] ? common_file_perm+0x171/0x1c0 [ 76.174668][ T4554] ? fsnotify_perm+0x5d/0x560 [ 76.179159][ T4556] device syzkaller0 entered promiscuous mode [ 76.179351][ T4554] ? security_file_permission+0x75/0xa0 [ 76.190841][ T4554] do_iter_write+0x3c3/0x7a0 [ 76.195449][ T4554] do_writev+0x281/0x480 [ 76.199708][ T4554] ? do_readv+0x460/0x460 [ 76.204065][ T4554] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 76.210148][ T4554] ? lock_chain_count+0x20/0x20 [ 76.212102][ T4468] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 76.215010][ T4554] ? lockdep_hardirqs_on+0x94/0x140 [ 76.215034][ T4554] do_syscall_64+0x4c/0xa0 [ 76.231150][ T4554] ? clear_bhb_loop+0x30/0x80 [ 76.232233][ T4226] usb 4-1: USB disconnect, device number 3 [ 76.235830][ T4554] ? clear_bhb_loop+0x30/0x80 [ 76.235856][ T4554] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.235874][ T4554] RIP: 0033:0x7fa548b78159 [ 76.235891][ T4554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.235903][ T4554] RSP: 002b:00007fa546dd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 76.235922][ T4554] RAX: ffffffffffffffda RBX: 00007fa548dfffa0 RCX: 00007fa548b78159 [ 76.235933][ T4554] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 76.235943][ T4554] RBP: 00007fa548c0f024 R08: 0000000000000000 R09: 0000000000000000 [ 76.235953][ T4554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.235963][ T4554] R13: 00007fa548e00038 R14: 00007fa548dfffa0 R15: 00007ffc75599f08 [ 76.235987][ T4554] [ 76.240364][ T4227] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.725604][ T4227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.344802][ T4227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.465831][ T4227] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 77.499505][ T4227] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 77.524315][ T4604] device syzkaller0 entered promiscuous mode [ 77.545479][ T4227] usb 5-1: Manufacturer: syz [ 77.612181][ T4227] usb 5-1: config 0 descriptor?? [ 77.844924][ T4579] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 77.871492][ T4636] device syzkaller0 entered promiscuous mode [ 77.951585][ T4545] jffs2: notice: (4545) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 78.104108][ T4652] device syzkaller0 entered promiscuous mode [ 78.934531][ T4545] udc-core: couldn't find an available UDC or it's busy [ 78.935634][ T4268] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 78.990673][ T4545] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.049820][ T4694] device syzkaller0 entered promiscuous mode [ 79.066392][ T4227] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71 [ 79.093199][ T4227] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 79.129048][ T4227] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 79.185362][ T4227] usb 5-1: USB disconnect, device number 3 [ 79.237541][ T4699] device syzkaller0 entered promiscuous mode [ 79.315640][ T4268] usb 2-1: config index 0 descriptor too short (expected 49700, got 36) [ 79.329002][ T4268] usb 2-1: config 8 has an invalid descriptor of length 199, skipping remainder of the config [ 79.346211][ T4268] usb 2-1: config 8 has 0 interfaces, different from the descriptor's value: 6 [ 79.375522][ T4268] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 79.390563][ T4268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.750142][ T4226] usb 2-1: USB disconnect, device number 4 [ 79.775661][ T4268] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 79.903806][ T4715] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.155825][ T4268] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 80.255728][ T4268] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 80.455944][ T4268] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 80.469478][ T4724] device syzkaller0 entered promiscuous mode [ 80.481559][ T4268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.507499][ T4268] usb 4-1: Product: syz [ 80.517253][ T4268] usb 4-1: Manufacturer: syz [ 80.530194][ T4268] usb 4-1: SerialNumber: syz [ 80.587505][ T4268] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 80.633030][ T4268] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 80.672772][ T4268] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 81.367281][ T4733] device syzkaller0 entered promiscuous mode [ 81.881855][ T4753] FAULT_INJECTION: forcing a failure. [ 81.881855][ T4753] name failslab, interval 1, probability 0, space 0, times 0 [ 81.942897][ T4753] CPU: 0 PID: 4753 Comm: syz.1.134 Not tainted syzkaller #0 [ 81.950219][ T4753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.960286][ T4753] Call Trace: [ 81.963575][ T4753] [ 81.966513][ T4753] dump_stack_lvl+0x188/0x250 [ 81.971206][ T4753] ? show_regs_print_info+0x20/0x20 [ 81.976416][ T4753] ? load_image+0x410/0x410 [ 81.980995][ T4753] ? __might_sleep+0xf0/0xf0 [ 81.985590][ T4753] ? __lock_acquire+0x7b50/0x7b50 [ 81.990636][ T4753] ? rcu_is_watching+0x11/0xa0 [ 81.995420][ T4753] should_fail+0x383/0x4b0 [ 81.999860][ T4753] should_failslab+0x5/0x20 [ 82.004369][ T4753] slab_pre_alloc_hook+0x51/0xc0 [ 82.009340][ T4753] kmem_cache_alloc_trace+0x47/0x290 [ 82.014633][ T4753] ? cuse_channel_open+0x1a8/0x610 [ 82.019765][ T4753] cuse_channel_open+0x1a8/0x610 [ 82.024718][ T4753] ? fuse_dax_writepages+0xe0/0xe0 [ 82.029853][ T4753] misc_open+0x31f/0x390 [ 82.034106][ T4753] chrdev_open+0x585/0x5f0 [ 82.038540][ T4753] ? cd_forget+0x160/0x160 [ 82.042967][ T4753] ? fsnotify_perm+0x3a7/0x560 [ 82.047751][ T4753] ? cd_forget+0x160/0x160 [ 82.052178][ T4753] do_dentry_open+0x7f7/0xf90 [ 82.056861][ T4753] ? vfs_open+0x2b/0x80 [ 82.061028][ T4753] path_openat+0x2718/0x2fb0 [ 82.065647][ T4753] ? __kasan_slab_alloc+0xa9/0xc0 [ 82.070687][ T4753] ? do_filp_open+0x400/0x400 [ 82.075398][ T4753] do_filp_open+0x1df/0x400 [ 82.079913][ T4753] ? vfs_tmpfile+0x300/0x300 [ 82.084531][ T4753] ? _raw_spin_unlock+0x24/0x40 [ 82.089390][ T4753] ? alloc_fd+0x59e/0x650 [ 82.093748][ T4753] do_sys_openat2+0x14b/0x500 [ 82.098435][ T4753] ? __lock_acquire+0x7b50/0x7b50 [ 82.103670][ T4753] ? do_sys_open+0xe0/0xe0 [ 82.108098][ T4753] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 82.114095][ T4753] ? lock_chain_count+0x20/0x20 [ 82.118965][ T4753] __x64_sys_openat+0x135/0x160 [ 82.123831][ T4753] do_syscall_64+0x4c/0xa0 [ 82.128256][ T4753] ? clear_bhb_loop+0x30/0x80 [ 82.132943][ T4753] ? clear_bhb_loop+0x30/0x80 [ 82.137634][ T4753] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.143552][ T4753] RIP: 0033:0x7f968ce25159 [ 82.147988][ T4753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.167610][ T4753] RSP: 002b:00007f968b07d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 82.176043][ T4753] RAX: ffffffffffffffda RBX: 00007f968d0acfa0 RCX: 00007f968ce25159 [ 82.184035][ T4753] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 82.192027][ T4753] RBP: 00007f968cebc024 R08: 0000000000000000 R09: 0000000000000000 [ 82.200024][ T4753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.208036][ T4753] R13: 00007f968d0ad038 R14: 00007f968d0acfa0 R15: 00007ffe34580788 [ 82.216044][ T4753] [ 82.612062][ T4768] device syzkaller0 entered promiscuous mode [ 83.596417][ T4792] device syzkaller0 entered promiscuous mode [ 83.995550][ T23] Bluetooth: hci0: command 0x201b tx timeout [ 84.495910][ T4727] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 84.553016][ T4727] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 84.675723][ T4727] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -32 [ 84.775596][ T4727] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 84.800744][ T4262] usb 4-1: USB disconnect, device number 4 [ 84.846620][ T4262] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 84.923198][ T4262] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 84.948267][ T4896] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 84.948858][ T4898] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 84.973383][ T4906] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 84.991158][ T4912] device syzkaller0 entered promiscuous mode [ 85.011343][ T4908] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 85.013953][ T4913] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 85.025974][ T4915] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 85.027430][ T4262] ti_usb_3410_5052 4-1:2.0: device disconnected [ 85.047655][ T4918] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 85.057525][ T4920] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 85.066972][ T4922] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 85.081906][ T4924] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 85.135532][ T4230] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.164305][ T4930] device syzkaller0 entered promiscuous mode [ 85.253272][ T4973] device syzkaller0 entered promiscuous mode [ 85.405715][ T4230] usb 3-1: Using ep0 maxpacket: 8 [ 85.686414][ T4230] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 85.732955][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.830682][ T4230] usb 3-1: Product: syz [ 85.874905][ T4230] usb 3-1: Manufacturer: syz [ 85.934719][ T4230] usb 3-1: SerialNumber: syz [ 86.086894][ T4230] usb 3-1: config 0 descriptor?? [ 86.145522][ T4977] request_module: sigkill sent for modprobe crypto-hmac(md5), giving up [ 86.148454][ T4977] request_module: sigkill sent for modprobe crypto-hmac(md5)-all, giving up [ 86.179974][ T4977] request_module: sigkill sent for modprobe cryptomgr, giving up [ 86.197788][ T4230] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 86.221841][ T4977] request_module: sigkill sent for modprobe crypto-hmac(sha384), giving up [ 86.221856][ T4977] request_module: sigkill sent for modprobe crypto-hmac(sha384)-all, giving up [ 86.232642][ T4977] request_module: sigkill sent for modprobe cryptomgr, giving up [ 86.257981][ T4977] request_module: sigkill sent for modprobe crypto-hmac(sha512), giving up [ 86.271401][ T4977] request_module: sigkill sent for modprobe crypto-hmac(sha512)-all, giving up [ 86.281139][ T4977] request_module: sigkill sent for modprobe cryptomgr, giving up [ 86.292355][ T4977] request_module: sigkill sent for modprobe crypto-hmac(rmd160), giving up [ 86.601162][ T5013] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 86.619005][ T5013] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 86.647879][ T7] cfg80211: failed to load regulatory.db [ 86.837653][ T4876] FAULT_INJECTION: forcing a failure. [ 86.837653][ T4876] name failslab, interval 1, probability 0, space 0, times 0 [ 86.865124][ T4876] CPU: 1 PID: 4876 Comm: syz.2.145 Not tainted syzkaller #0 [ 86.872441][ T4876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.882491][ T4876] Call Trace: [ 86.885774][ T4876] [ 86.888694][ T4876] dump_stack_lvl+0x188/0x250 [ 86.893360][ T4876] ? show_regs_print_info+0x20/0x20 [ 86.898555][ T4876] ? load_image+0x410/0x410 [ 86.903061][ T4876] ? __might_sleep+0xf0/0xf0 [ 86.907646][ T4876] ? __lock_acquire+0x7b50/0x7b50 [ 86.912676][ T4876] should_fail+0x383/0x4b0 [ 86.917088][ T4876] should_failslab+0x5/0x20 [ 86.921603][ T4876] slab_pre_alloc_hook+0x51/0xc0 [ 86.926546][ T4876] __kmalloc+0x6b/0x340 [ 86.930699][ T4876] ? tomoyo_encode+0x28a/0x550 [ 86.935456][ T4876] tomoyo_encode+0x28a/0x550 [ 86.940052][ T4876] tomoyo_mount_permission+0x4f8/0x9b0 [ 86.945493][ T4876] ? ____kasan_slab_free+0xd5/0x110 [ 86.950674][ T4876] ? slab_free_freelist_hook+0xec/0x170 [ 86.956206][ T4876] ? tomoyo_get_name+0x520/0x520 [ 86.961162][ T4876] security_sb_mount+0x83/0xb0 [ 86.965925][ T4876] path_mount+0xb8/0xfe0 [ 86.970184][ T4876] ? user_path_at_empty+0x13e/0x190 [ 86.975388][ T4876] __se_sys_mount+0x2e3/0x3d0 [ 86.980066][ T4876] ? __x64_sys_mount+0xc0/0xc0 [ 86.984907][ T4876] ? lockdep_hardirqs_on+0x94/0x140 [ 86.990095][ T4876] ? __x64_sys_mount+0x1c/0xc0 [ 86.994880][ T4876] do_syscall_64+0x4c/0xa0 [ 86.999306][ T4876] ? clear_bhb_loop+0x30/0x80 [ 87.003982][ T4876] ? clear_bhb_loop+0x30/0x80 [ 87.008662][ T4876] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.014538][ T4876] RIP: 0033:0x7f810d092159 [ 87.018940][ T4876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.038550][ T4876] RSP: 002b:00007f810b2ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.046965][ T4876] RAX: ffffffffffffffda RBX: 00007f810d319fa0 RCX: 00007f810d092159 [ 87.054937][ T4876] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 87.062893][ T4876] RBP: 00007f810d129024 R08: 0000000000000000 R09: 0000000000000000 [ 87.070847][ T4876] R10: 000000000002cc31 R11: 0000000000000246 R12: 0000000000000000 [ 87.078808][ T4876] R13: 00007f810d31a038 R14: 00007f810d319fa0 R15: 00007ffdba0e5508 [ 87.086786][ T4876] [ 87.167744][ T5019] device syzkaller0 entered promiscuous mode [ 87.284782][ T5023] device syzkaller0 entered promiscuous mode [ 87.545619][ T4230] radio-usb-si4713: probe of 3-1:0.0 failed with error -71 [ 87.555324][ T4230] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 87.565209][ T5026] crypto_alloc_aead failed rc=-2 [ 87.579064][ T4230] usb 3-1: USB disconnect, device number 2 [ 88.640544][ T5075] device syzkaller0 entered promiscuous mode [ 88.653307][ T5079] FAULT_INJECTION: forcing a failure. [ 88.653307][ T5079] name failslab, interval 1, probability 0, space 0, times 0 [ 88.667308][ T5079] CPU: 1 PID: 5079 Comm: syz.3.177 Not tainted syzkaller #0 [ 88.674620][ T5079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.684689][ T5079] Call Trace: [ 88.687972][ T5079] [ 88.690912][ T5079] dump_stack_lvl+0x188/0x250 [ 88.695610][ T5079] ? show_regs_print_info+0x20/0x20 [ 88.700814][ T5079] ? load_image+0x410/0x410 [ 88.705332][ T5079] ? __might_sleep+0xf0/0xf0 [ 88.709908][ T5079] ? __lock_acquire+0x7b50/0x7b50 [ 88.714922][ T5079] should_fail+0x383/0x4b0 [ 88.719336][ T5079] should_failslab+0x5/0x20 [ 88.723845][ T5079] slab_pre_alloc_hook+0x51/0xc0 [ 88.728772][ T5079] __kmalloc_node_track_caller+0x68/0x3a0 [ 88.734477][ T5079] ? inet_netconf_notify_devconf+0x16f/0x230 [ 88.740463][ T5079] ? __alloc_skb+0xf4/0x750 [ 88.744953][ T5079] ? inet_netconf_notify_devconf+0x16f/0x230 [ 88.750918][ T5079] __alloc_skb+0x22c/0x750 [ 88.755418][ T5079] ? ip_mroute_setsockopt+0x1230/0x1230 [ 88.761091][ T5079] inet_netconf_notify_devconf+0x16f/0x230 [ 88.766970][ T5079] ip_mroute_setsockopt+0x904/0x1230 [ 88.772275][ T5079] ? ipmr_rule_default+0x70/0x70 [ 88.777212][ T5079] ? __might_sleep+0xf0/0xf0 [ 88.781800][ T5079] ip_setsockopt+0x568/0x31e0 [ 88.786483][ T5079] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 88.792033][ T5079] ? aa_sk_perm+0x7dc/0x910 [ 88.796576][ T5079] ? aa_af_perm+0x340/0x340 [ 88.801079][ T5079] ? __fget_files+0x402/0x470 [ 88.805752][ T5079] ? aa_sock_opt_perm+0x74/0x100 [ 88.810687][ T5079] ? sock_common_setsockopt+0x32/0xb0 [ 88.816067][ T5079] ? raw_setsockopt+0xc2/0x170 [ 88.820856][ T5079] ? sock_common_recvmsg+0x1c0/0x1c0 [ 88.826167][ T5079] __sys_setsockopt+0x2bf/0x3d0 [ 88.831019][ T5079] __x64_sys_setsockopt+0xb1/0xc0 [ 88.836034][ T5079] do_syscall_64+0x4c/0xa0 [ 88.840432][ T5079] ? clear_bhb_loop+0x30/0x80 [ 88.845090][ T5079] ? clear_bhb_loop+0x30/0x80 [ 88.849759][ T5079] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.855640][ T5079] RIP: 0033:0x7f9cb5b41159 [ 88.860042][ T5079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.879633][ T5079] RSP: 002b:00007f9cb3d99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 88.888058][ T5079] RAX: ffffffffffffffda RBX: 00007f9cb5dc8fa0 RCX: 00007f9cb5b41159 [ 88.896045][ T5079] RDX: 00000000000000c8 RSI: 0000000000000000 RDI: 0000000000000007 [ 88.904027][ T5079] RBP: 00007f9cb5bd8024 R08: 0000000000000004 R09: 0000000000000000 [ 88.912052][ T5079] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.920032][ T5079] R13: 00007f9cb5dc9038 R14: 00007f9cb5dc8fa0 R15: 00007ffe09165f78 [ 88.928117][ T5079] [ 88.952215][ T5077] device syzkaller0 entered promiscuous mode [ 88.972925][ T5081] bridge0: port 3(syz_tun) entered blocking state [ 88.982664][ T5081] bridge0: port 3(syz_tun) entered disabled state [ 88.999151][ T5081] device syz_tun entered promiscuous mode [ 89.011563][ T5081] bridge0: port 3(syz_tun) entered blocking state [ 89.018350][ T5081] bridge0: port 3(syz_tun) entered forwarding state [ 89.280119][ T5101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 89.672202][ T5090] crypto_alloc_aead failed rc=-2 [ 89.996586][ T4898] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 90.005489][ T4896] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 90.075775][ T4918] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 90.075818][ T4906] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 90.075931][ T4913] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 90.076036][ T4920] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 90.085581][ T4915] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 90.098481][ T4908] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 90.156872][ T4950] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 90.156916][ T4948] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 90.189156][ T5102] __request_module: 99 callbacks suppressed [ 90.189169][ T5102] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module crypto-hmac(md5)-all, throttling... [ 90.382892][ T5204] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 90.392922][ T5163] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 90.396979][ T5206] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 90.414109][ T5159] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 90.424064][ T5208] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 90.432645][ T5196] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 90.444591][ T5132] jffs2: notice: (5132) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 90.458658][ T5199] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 90.485358][ T5158] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 90.486312][ T5195] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 90.677789][ T5216] FAULT_INJECTION: forcing a failure. [ 90.677789][ T5216] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 90.720357][ T5216] CPU: 1 PID: 5216 Comm: syz.3.191 Not tainted syzkaller #0 [ 90.727686][ T5216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.737754][ T5216] Call Trace: [ 90.741130][ T5216] [ 90.744059][ T5216] dump_stack_lvl+0x188/0x250 [ 90.748744][ T5216] ? show_regs_print_info+0x20/0x20 [ 90.753941][ T5216] ? load_image+0x410/0x410 [ 90.758446][ T5216] ? __lock_acquire+0x7b50/0x7b50 [ 90.763476][ T5216] ? __lock_acquire+0x1305/0x7b50 [ 90.768510][ T5216] should_fail+0x383/0x4b0 [ 90.772942][ T5216] prepare_alloc_pages+0x1e3/0x5b0 [ 90.778052][ T5216] __alloc_pages+0x11b/0x480 [ 90.782640][ T5216] ? zone_statistics+0x170/0x170 [ 90.787697][ T5216] ? count_memcg_event_mm+0x324/0x370 [ 90.793071][ T5216] ? remove_device_exclusive_entry+0xac0/0xac0 [ 90.799223][ T5216] alloc_pages_vma+0x2bc/0x790 [ 90.803997][ T5216] handle_mm_fault+0x23be/0x4440 [ 90.808941][ T5216] ? get_page+0xe0/0xe0 [ 90.813088][ T5216] ? vmacache_find+0x238/0x590 [ 90.817844][ T5216] ? find_vma+0xd2/0x230 [ 90.822077][ T5216] do_user_addr_fault+0x494/0xc90 [ 90.827096][ T5216] exc_page_fault+0x60/0x100 [ 90.831673][ T5216] ? clear_bhb_loop+0x30/0x80 [ 90.836337][ T5216] asm_exc_page_fault+0x22/0x30 [ 90.841174][ T5216] RIP: 0033:0x7f9cb5a089e6 [ 90.845575][ T5216] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d 11 01 1d 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 cc ca fe ff 4d 85 ed 0f 84 2b 0a 00 [ 90.865169][ T5216] RSP: 002b:00007f9cb3d96f60 EFLAGS: 00010206 [ 90.871233][ T5216] RAX: 0000000000000000 RBX: 00007f9cb5dc8fa0 RCX: 0000000000000000 [ 90.879195][ T5216] RDX: 0000200000000000 RSI: 0000200000000000 RDI: 00007f9cb5bd8ae1 [ 90.887158][ T5216] RBP: 00007f9cb5bd8024 R08: 00007f9cb59f5850 R09: 0000000000000000 [ 90.895115][ T5216] R10: 0000000000000000 R11: 0000200000000000 R12: 000000000000004d [ 90.903072][ T5216] R13: 0000200000000000 R14: 0000000000000000 R15: 00007ffe09165f78 [ 90.911045][ T5216] [ 90.934592][ T5216] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 91.006636][ T5224] jffs2: notice: (5224) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.085011][ T5228] device syzkaller0 entered promiscuous mode [ 91.151204][ T5232] netlink: 'syz.1.196': attribute type 1 has an invalid length. [ 91.175910][ T5232] netlink: 'syz.1.196': attribute type 2 has an invalid length. [ 91.235533][ T4226] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 91.596777][ T4226] usb 4-1: config 0 has no interfaces? [ 91.676553][ T4226] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.746000][ T4226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 91.860769][ T4226] usb 4-1: SerialNumber: syz [ 92.082391][ T4226] usb 4-1: config 0 descriptor?? [ 92.112480][ T5245] __request_module: 69 callbacks suppressed [ 92.112496][ T5245] request_module: sigkill sent for modprobe crypto-hmac(sha384), giving up [ 92.140098][ T5245] request_module: sigkill sent for modprobe crypto-hmac(sha384)-all, giving up [ 92.185030][ T5245] request_module: sigkill sent for modprobe cryptomgr, giving up [ 92.201761][ T5245] request_module: sigkill sent for modprobe crypto-hmac(sha512), giving up [ 92.216733][ T5245] request_module: sigkill sent for modprobe crypto-hmac(sha512)-all, giving up [ 92.226113][ T5245] request_module: sigkill sent for modprobe cryptomgr, giving up [ 92.267200][ T5245] request_module: sigkill sent for modprobe crypto-hmac(rmd160), giving up [ 92.278062][ T5245] request_module: sigkill sent for modprobe crypto-hmac(rmd160)-all, giving up [ 92.287888][ T5245] request_module: sigkill sent for modprobe cryptomgr, giving up [ 92.303033][ T5245] request_module: sigkill sent for modprobe crypto-xcbc(aes), giving up [ 92.381622][ T5269] jffs2: notice: (5269) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 92.409710][ T5270] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.203'. [ 92.426054][ T21] usb 4-1: USB disconnect, device number 5 [ 92.463194][ T5273] device syzkaller0 entered promiscuous mode [ 92.479755][ T5258] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.203'. [ 92.743541][ T5287] device syzkaller0 entered promiscuous mode [ 92.792145][ T5290] FAULT_INJECTION: forcing a failure. [ 92.792145][ T5290] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 92.806358][ T5290] CPU: 0 PID: 5290 Comm: syz.2.211 Not tainted syzkaller #0 [ 92.813661][ T5290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.823707][ T5290] Call Trace: [ 92.826993][ T5290] [ 92.829925][ T5290] dump_stack_lvl+0x188/0x250 [ 92.834617][ T5290] ? show_regs_print_info+0x20/0x20 [ 92.839829][ T5290] ? load_image+0x410/0x410 [ 92.844357][ T5290] ? __lock_acquire+0x7b50/0x7b50 [ 92.849526][ T5290] should_fail+0x383/0x4b0 [ 92.853968][ T5290] prepare_alloc_pages+0x1e3/0x5b0 [ 92.859109][ T5290] __alloc_pages+0x11b/0x480 [ 92.863716][ T5290] ? zone_statistics+0x170/0x170 [ 92.868680][ T5290] ? look_up_lock_class+0x71/0x110 [ 92.873815][ T5290] alloc_pages_vma+0x2bc/0x790 [ 92.878699][ T5290] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 92.884645][ T5290] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 92.890318][ T5290] ? shmem_swapin_page+0x22f0/0x22f0 [ 92.895637][ T5290] ? __lock_acquire+0x7b50/0x7b50 [ 92.900693][ T5290] ? xas_start+0x3d1/0x770 [ 92.905119][ T5290] ? xas_load+0x119/0x140 [ 92.909442][ T5290] ? pagecache_get_page+0xc32/0xf20 [ 92.914646][ T5290] ? page_cache_prev_miss+0x380/0x380 [ 92.920012][ T5290] ? mark_lock+0x94/0x320 [ 92.924332][ T5290] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 92.930312][ T5290] shmem_getpage_gfp+0x14be/0x2c10 [ 92.935467][ T5290] shmem_write_begin+0xcd/0x1a0 [ 92.940334][ T5290] generic_perform_write+0x2b6/0x550 [ 92.945627][ T5290] ? atime_needs_update+0x770/0x770 [ 92.950844][ T5290] ? grab_cache_page_write_begin+0xa0/0xa0 [ 92.956641][ T5290] ? file_remove_privs+0x5d0/0x5d0 [ 92.961767][ T5290] ? rwsem_write_trylock+0x135/0x1c0 [ 92.967050][ T5290] ? clear_nonspinnable+0x60/0x60 [ 92.972088][ T5290] __generic_file_write_iter+0x261/0x4e0 [ 92.977732][ T5290] ? generic_write_checks+0x3be/0x460 [ 92.983109][ T5290] generic_file_write_iter+0xa6/0x1b0 [ 92.988473][ T5290] __kernel_write+0x522/0x980 [ 92.993154][ T5290] ? vfs_read+0xd50/0xd50 [ 92.997478][ T5290] ? rcu_read_lock_any_held+0xb0/0x130 [ 93.002950][ T5290] kernel_write+0xcd/0x1f0 [ 93.007356][ T5290] big_key_preparse+0x39e/0x4c0 [ 93.012214][ T5290] ? keyctl_pkey_verify+0x430/0x430 [ 93.017410][ T5290] ? key_task_permission+0x360/0x4a0 [ 93.022698][ T5290] key_update+0x209/0x530 [ 93.027022][ T5290] ? __key_update+0x440/0x440 [ 93.031703][ T5290] ? _copy_from_user+0x71/0x170 [ 93.036546][ T5290] ? copy_user_enhanced_fast_string+0xe/0x40 [ 93.042547][ T5290] ? _copy_from_user+0x111/0x170 [ 93.047484][ T5290] keyctl_update_key+0xf0/0x120 [ 93.052346][ T5290] __se_sys_keyctl+0x2d6/0xa20 [ 93.057106][ T5290] ? __x64_sys_keyctl+0xc0/0xc0 [ 93.061970][ T5290] ? __context_tracking_exit+0x4c/0x80 [ 93.067429][ T5290] ? __lock_acquire+0x7b50/0x7b50 [ 93.072483][ T5290] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 93.078460][ T5290] ? lock_chain_count+0x20/0x20 [ 93.083333][ T5290] ? lockdep_hardirqs_on+0x94/0x140 [ 93.088525][ T5290] ? __x64_sys_keyctl+0x1c/0xc0 [ 93.093387][ T5290] do_syscall_64+0x4c/0xa0 [ 93.097798][ T5290] ? clear_bhb_loop+0x30/0x80 [ 93.102466][ T5290] ? clear_bhb_loop+0x30/0x80 [ 93.107135][ T5290] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.113036][ T5290] RIP: 0033:0x7f810d092159 [ 93.117461][ T5290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.137081][ T5290] RSP: 002b:00007f810b2ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 93.145506][ T5290] RAX: ffffffffffffffda RBX: 00007f810d319fa0 RCX: 00007f810d092159 [ 93.153511][ T5290] RDX: 00002000000000c0 RSI: 00000000327f17db RDI: 0000000000000002 [ 93.161475][ T5290] RBP: 00007f810d129024 R08: 0000000000000000 R09: 0000000000000000 [ 93.169439][ T5290] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000 [ 93.177405][ T5290] R13: 00007f810d31a038 R14: 00007f810d319fa0 R15: 00007ffdba0e5508 [ 93.185392][ T5290] [ 93.558501][ T5285] crypto_alloc_aead failed rc=-2 [ 94.360572][ T5335] device syzkaller0 entered promiscuous mode [ 94.471798][ T4195] cgroup: fork rejected by pids controller in /syz4 [ 94.569195][ T5350] FAULT_INJECTION: forcing a failure. [ 94.569195][ T5350] name failslab, interval 1, probability 0, space 0, times 0 [ 94.618932][ T5350] CPU: 0 PID: 5350 Comm: syz.1.226 Not tainted syzkaller #0 [ 94.626256][ T5350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.636323][ T5350] Call Trace: [ 94.639615][ T5350] [ 94.642557][ T5350] dump_stack_lvl+0x188/0x250 [ 94.647257][ T5350] ? show_regs_print_info+0x20/0x20 [ 94.652481][ T5350] ? load_image+0x410/0x410 [ 94.657008][ T5350] ? __might_sleep+0xf0/0xf0 [ 94.661607][ T5350] ? __lock_acquire+0x7b50/0x7b50 [ 94.666647][ T5350] should_fail+0x383/0x4b0 [ 94.671084][ T5350] should_failslab+0x5/0x20 [ 94.675684][ T5350] slab_pre_alloc_hook+0x51/0xc0 [ 94.680635][ T5350] __kmalloc_node_track_caller+0x68/0x3a0 [ 94.686369][ T5350] ? inet_netconf_notify_devconf+0x16f/0x230 [ 94.692362][ T5350] ? __alloc_skb+0xf4/0x750 [ 94.696877][ T5350] ? inet_netconf_notify_devconf+0x16f/0x230 [ 94.702870][ T5350] __alloc_skb+0x22c/0x750 [ 94.707296][ T5350] ? ip_mroute_setsockopt+0x1230/0x1230 [ 94.712859][ T5350] inet_netconf_notify_devconf+0x16f/0x230 [ 94.718681][ T5350] ip_mroute_setsockopt+0x904/0x1230 [ 94.723987][ T5350] ? ipmr_rule_default+0x70/0x70 [ 94.728947][ T5350] ? __might_sleep+0xf0/0xf0 [ 94.733548][ T5350] ip_setsockopt+0x568/0x31e0 [ 94.738242][ T5350] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 94.743621][ T5350] ? aa_sk_perm+0x7dc/0x910 [ 94.748134][ T5350] ? aa_af_perm+0x340/0x340 [ 94.752641][ T5350] ? __fget_files+0x402/0x470 [ 94.757323][ T5350] ? aa_sock_opt_perm+0x74/0x100 [ 94.762266][ T5350] ? sock_common_setsockopt+0x32/0xb0 [ 94.767646][ T5350] ? raw_setsockopt+0xc2/0x170 [ 94.772416][ T5350] ? sock_common_recvmsg+0x1c0/0x1c0 [ 94.777742][ T5350] __sys_setsockopt+0x2bf/0x3d0 [ 94.782611][ T5350] __x64_sys_setsockopt+0xb1/0xc0 [ 94.787644][ T5350] do_syscall_64+0x4c/0xa0 [ 94.792063][ T5350] ? clear_bhb_loop+0x30/0x80 [ 94.796747][ T5350] ? clear_bhb_loop+0x30/0x80 [ 94.801429][ T5350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.807457][ T5350] RIP: 0033:0x7f968ce25159 [ 94.811888][ T5350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.831503][ T5350] RSP: 002b:00007f968b07d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 94.839941][ T5350] RAX: ffffffffffffffda RBX: 00007f968d0acfa0 RCX: 00007f968ce25159 [ 94.847927][ T5350] RDX: 00000000000000c8 RSI: 0000000000000000 RDI: 0000000000000007 [ 94.855908][ T5350] RBP: 00007f968cebc024 R08: 0000000000000004 R09: 0000000000000000 [ 94.863891][ T5350] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.871866][ T5350] R13: 00007f968d0ad038 R14: 00007f968d0acfa0 R15: 00007ffe34580788 [ 94.879875][ T5350] [ 95.138136][ T4195] syz-executor (4195) used greatest stack depth: 20944 bytes left [ 95.167563][ T4976] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.257433][ T4976] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.305379][ T4976] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.354630][ T4976] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.395337][ T5361] jffs2: notice: (5361) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 95.515914][ T5185] __request_module: 19 callbacks suppressed [ 95.515929][ T5185] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 95.521945][ T5190] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 95.525668][ T5210] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 95.545529][ T5192] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 95.546362][ T5209] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 95.570114][ T5161] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 95.577145][ T5165] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 95.584971][ T5163] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 95.594472][ T5168] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 95.606179][ T5158] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 95.725311][ T5400] __request_module: 83 callbacks suppressed [ 95.725324][ T5400] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 95.769124][ T5415] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 95.776114][ T5414] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 95.782337][ T5416] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 95.820062][ T5417] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 95.831268][ T5363] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module rtnl-link-nicvf, throttling... [ 95.924492][ T5424] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module crypto-gcm(aes), throttling... [ 95.979267][ T5427] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module crypto-cryptd(__generic-gcm-aesni), throttling... [ 96.124643][ T5424] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module crypto-gcm(aes)-all, throttling... [ 96.124768][ T5427] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module crypto-cryptd(__generic-gcm-aesni)-all, throttling... [ 96.171528][ T5424] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module cryptomgr, throttling... [ 96.205371][ T5424] crypto_alloc_aead failed rc=-2 [ 96.290408][ T5447] netlink: 52 bytes leftover after parsing attributes in process `syz.0.235'. [ 96.405206][ T5452] device syzkaller0 entered promiscuous mode [ 96.651557][ T5468] netlink: 104 bytes leftover after parsing attributes in process `syz.0.244'. [ 96.715554][ T4268] Bluetooth: hci4: command 0x1003 tx timeout [ 96.721642][ T146] Bluetooth: hci4: sending frame failed (-49) [ 96.992905][ T4976] device hsr_slave_0 left promiscuous mode [ 97.003041][ T4976] device hsr_slave_1 left promiscuous mode [ 97.011607][ T4976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.021672][ T4976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.034997][ T4976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.044946][ T4976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.056750][ T4976] device bridge_slave_1 left promiscuous mode [ 97.064431][ T4976] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.103186][ T4976] device bridge_slave_0 left promiscuous mode [ 97.124266][ T4976] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.132804][ T5485] __request_module: 62 callbacks suppressed [ 97.132820][ T5485] request_module: sigkill sent for modprobe crypto-gcm(aes), giving up [ 97.135552][ T5490] request_module: sigkill sent for modprobe crypto-cryptd(__generic-gcm-aesni), giving up [ 97.139568][ T5485] request_module: sigkill sent for modprobe crypto-gcm(aes)-all, giving up [ 97.156033][ T5490] request_module: sigkill sent for modprobe crypto-cryptd(__generic-gcm-aesni)-all, giving up [ 97.157757][ T5485] request_module: sigkill sent for modprobe cryptomgr, giving up [ 97.177229][ T5485] crypto_alloc_aead failed rc=-2 [ 97.184348][ T5490] request_module: sigkill sent for modprobe cryptomgr, giving up [ 97.192667][ T4976] device veth1_macvtap left promiscuous mode [ 97.208030][ T4976] device veth0_macvtap left promiscuous mode [ 97.215226][ T4976] device veth1_vlan left promiscuous mode [ 97.223038][ T4976] device veth0_vlan left promiscuous mode [ 97.275763][ T5500] process 'syz.1.249' launched './file0' with NULL argv: empty string added [ 97.516451][ T4226] Bluetooth: hci5: command 0x0409 tx timeout [ 97.528325][ T5504] FAULT_INJECTION: forcing a failure. [ 97.528325][ T5504] name failslab, interval 1, probability 0, space 0, times 0 [ 97.541464][ T5504] CPU: 1 PID: 5504 Comm: syz.3.251 Not tainted syzkaller #0 [ 97.548767][ T5504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.558924][ T5504] Call Trace: [ 97.562216][ T5504] [ 97.565152][ T5504] dump_stack_lvl+0x188/0x250 [ 97.569843][ T5504] ? show_regs_print_info+0x20/0x20 [ 97.575048][ T5504] ? load_image+0x410/0x410 [ 97.579565][ T5504] ? __might_sleep+0xf0/0xf0 [ 97.584276][ T5504] ? __lock_acquire+0x7b50/0x7b50 [ 97.589323][ T5504] ? lockdep_init_map_type+0x98/0x900 [ 97.594710][ T5504] should_fail+0x383/0x4b0 [ 97.599147][ T5504] should_failslab+0x5/0x20 [ 97.603659][ T5504] slab_pre_alloc_hook+0x51/0xc0 [ 97.608615][ T5504] ? security_inode_alloc+0x30/0x110 [ 97.613918][ T5504] kmem_cache_alloc+0x3d/0x280 [ 97.618705][ T5504] security_inode_alloc+0x30/0x110 [ 97.623832][ T5504] inode_init_always+0x8e5/0xc90 [ 97.628787][ T5504] new_inode_pseudo+0x8e/0x210 [ 97.633540][ T5504] __sock_create+0x128/0x910 [ 97.638123][ T5504] __sys_socket+0xe2/0x170 [ 97.642523][ T5504] __x64_sys_socket+0x76/0x80 [ 97.647245][ T5504] do_syscall_64+0x4c/0xa0 [ 97.651662][ T5504] ? clear_bhb_loop+0x30/0x80 [ 97.656324][ T5504] ? clear_bhb_loop+0x30/0x80 [ 97.661000][ T5504] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.666874][ T5504] RIP: 0033:0x7f9cb5b41159 [ 97.671306][ T5504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.690987][ T5504] RSP: 002b:00007f9cb3d99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 97.699425][ T5504] RAX: ffffffffffffffda RBX: 00007f9cb5dc8fa0 RCX: 00007f9cb5b41159 [ 97.701734][ T5508] request_module: sigkill sent for modprobe netdev-syzkaller0, giving up [ 97.707444][ T5504] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 97.707462][ T5504] RBP: 00007f9cb5bd8024 R08: 0000000000000000 R09: 0000000000000000 [ 97.707473][ T5504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.707482][ T5504] R13: 00007f9cb5dc9038 R14: 00007f9cb5dc8fa0 R15: 00007ffe09165f78 [ 97.707507][ T5504] [ 97.715208][ T5504] socket: no more sockets [ 97.724052][ T4976] team0 (unregistering): Port device team_slave_1 removed [ 97.733616][ T5508] request_module: sigkill sent for modprobe syzkaller0, giving up [ 97.767499][ T4976] team0 (unregistering): Port device team_slave_0 removed [ 97.812891][ T4976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.834813][ T4976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.969438][ T4976] bond0 (unregistering): Released all slaves [ 98.078250][ T5510] netlink: 'syz.0.253': attribute type 2 has an invalid length. [ 98.093701][ T5510] netlink: 164 bytes leftover after parsing attributes in process `syz.0.253'. [ 98.224484][ T5525] ima: Unable to open file: / (-22) [ 98.225055][ T5524] ima: policy update failed [ 98.248904][ T26] audit: type=1802 audit(1788729536.312:2): pid=5524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.260" res=0 errno=0 [ 98.755606][ T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 98.807436][ T1110] Bluetooth: hci4: command 0x1001 tx timeout [ 98.813525][ T146] Bluetooth: hci4: sending frame failed (-49) [ 98.995549][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 99.102130][ T5564] syz.1.264 uses obsolete (PF_INET,SOCK_PACKET) [ 99.116013][ T21] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 99.129652][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.187985][ T21] pvrusb2: Hardware description: Terratec Grabster AV400 [ 99.201272][ T21] pvrusb2: ********** [ 99.215167][ T21] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 99.238692][ T26] audit: type=1807 audit(1788729537.302:3): action=measure uid>1 res=1 [ 99.247243][ T21] pvrusb2: Important functionality might not be entirely working. [ 99.268203][ T5568] ima: policy update completed [ 99.273136][ T26] audit: type=1802 audit(1788729537.332:4): pid=5568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.0.265" res=1 errno=0 [ 99.302158][ T21] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 99.341013][ T21] pvrusb2: ********** [ 99.408550][ T2425] pvrusb2: Invalid write control endpoint [ 99.600403][ T1110] Bluetooth: hci5: command 0x041b tx timeout [ 99.609434][ T5537] pvrusb2: Invalid write control endpoint [ 99.626393][ T21] usb 4-1: USB disconnect, device number 6 [ 99.702380][ T5587] binder_alloc: 5585: binder_alloc_buf, no vma [ 99.830941][ T5593] device syzkaller0 entered promiscuous mode [ 100.880579][ T5416] __request_module: 15 callbacks suppressed [ 100.880595][ T5416] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 100.885552][ T7] Bluetooth: hci4: command 0x1009 tx timeout [ 100.886622][ T5415] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 100.905492][ T5363] request_module: modprobe rtnl-link-nicvf cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 100.959531][ T5363] chnl_net:caif_netlink_parms(): no params data found [ 100.988939][ T5673] __request_module: 13 callbacks suppressed [ 100.988952][ T5673] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 100.989398][ T5677] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 101.004085][ T5678] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 101.175542][ T1110] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 101.239039][ T5363] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.297415][ T5363] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.306555][ T5363] device bridge_slave_0 entered promiscuous mode [ 101.320740][ T5699] device syzkaller0 entered promiscuous mode [ 101.357192][ T5363] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.367804][ T5363] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.387784][ T5363] device bridge_slave_1 entered promiscuous mode [ 101.449344][ T5363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.461568][ T5363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.487669][ T1110] usb 2-1: Using ep0 maxpacket: 16 [ 101.538548][ T5363] team0: Port device team_slave_0 added [ 101.552394][ T5363] team0: Port device team_slave_1 added [ 101.572806][ T5363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.580034][ T5363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.606103][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.612521][ T5363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.625591][ T5363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.632549][ T5363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.658632][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.665005][ T5363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.675930][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 101.695716][ T1110] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.714015][ T1110] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.722792][ T5363] device hsr_slave_0 entered promiscuous mode [ 101.745449][ T1110] usb 2-1: config 0 interface 0 has no altsetting 0 [ 101.752162][ T1110] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 101.752488][ T5363] device hsr_slave_1 entered promiscuous mode [ 101.761408][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.777024][ T1110] usb 2-1: config 0 descriptor?? [ 101.782701][ T5363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.790693][ T5363] Cannot create hsr debugfs directory [ 101.821540][ T4226] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 102.145706][ T4226] usb 1-1: not running at top speed; connect to a high speed hub [ 102.225742][ T4226] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.245052][ T4226] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 102.260680][ T4226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.305675][ T1110] usbhid 2-1:0.0: can't add hid device: -71 [ 102.307020][ T4226] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 102.311670][ T1110] usbhid: probe of 2-1:0.0 failed with error -71 [ 102.344422][ T4226] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 102.355802][ T1110] usb 2-1: USB disconnect, device number 5 [ 102.365676][ T4226] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 102.396364][ T4226] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 102.404112][ T4226] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 102.429350][ T4226] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 102.436426][ T5363] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.454492][ T4226] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 102.469488][ T4226] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 102.483682][ T5363] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.490217][ T4226] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 102.504876][ T5363] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.543325][ T1344] usb 1-1: USB disconnect, device number 2 [ 102.574476][ T5363] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.699692][ T5363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.716588][ T1344] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 102.740854][ T1344] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 102.760874][ T4976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.769131][ T4976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.786335][ T1344] keyspan 1-1:1.0: device disconnected [ 102.817363][ T5363] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.855660][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.866795][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.875646][ T4531] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.882762][ T4531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.891036][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.916797][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.925826][ T4531] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.932932][ T4531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.943533][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.961656][ T5754] FAULT_INJECTION: forcing a failure. [ 102.961656][ T5754] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 102.976302][ T5754] CPU: 1 PID: 5754 Comm: syz.1.291 Not tainted syzkaller #0 [ 102.983605][ T5754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.993669][ T5754] Call Trace: [ 102.996955][ T5754] [ 102.999894][ T5754] dump_stack_lvl+0x188/0x250 [ 103.001237][ T5363] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 103.004613][ T5754] ? show_regs_print_info+0x20/0x20 [ 103.020164][ T5754] ? load_image+0x410/0x410 [ 103.021593][ T5363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.024688][ T5754] should_fail+0x383/0x4b0 [ 103.024715][ T5754] prepare_alloc_pages+0x1e3/0x5b0 [ 103.044525][ T5754] __alloc_pages+0x11b/0x480 [ 103.048157][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.049125][ T5754] ? zone_statistics+0x170/0x170 [ 103.058748][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.062008][ T5754] ? rcu_lock_acquire+0x30/0x30 [ 103.062036][ T5754] ? alloc_pages+0x452/0x560 [ 103.070905][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.074737][ T5754] __get_free_pages+0x8/0x30 [ 103.074760][ T5754] __tlb_remove_page_size+0x1f2/0x3f0 [ 103.081686][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.087218][ T5754] unmap_page_range+0xfcf/0x2410 [ 103.087276][ T5754] unmap_vmas+0x131/0x250 [ 103.087293][ T5754] ? unmap_page_range+0x2410/0x2410 [ 103.087306][ T5754] ? __mutex_lock_common+0x435/0x2400 [ 103.087328][ T5754] ? exit_mm_release+0x16/0x30 [ 103.087353][ T5754] exit_mmap+0x3b9/0x640 [ 103.087371][ T5754] ? vm_brk+0x20/0x20 [ 103.087398][ T5754] ? uprobe_clear_state+0x2f6/0x460 [ 103.087420][ T5754] __mmput+0x115/0x390 [ 103.087438][ T5754] exit_mm+0x632/0x7b0 [ 103.087453][ T5754] ? perf_pmu_migrate_context+0xb70/0xb70 [ 103.087477][ T5754] ? do_exit+0x2110/0x2110 [ 103.087492][ T5754] ? __ia32_sys_timer_delete+0x40/0x40 [ 103.087509][ T5754] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 103.087530][ T5754] ? tty_audit_exit+0x149/0x1f0 [ 103.096485][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.097472][ T5754] do_exit+0x5b8/0x2110 [ 103.097503][ T5754] ? put_task_struct+0x80/0x80 [ 103.106341][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.110194][ T5754] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 103.110226][ T5754] ? _raw_spin_lock_irq+0xb7/0xf0 [ 103.115285][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.119716][ T5754] do_group_exit+0x12c/0x2f0 [ 103.119736][ T5754] ? lockdep_hardirqs_on+0x94/0x140 [ 103.119757][ T5754] get_signal+0x7eb/0x12e0 [ 103.119789][ T5754] arch_do_signal_or_restart+0xe6/0x12a0 [ 103.125937][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.129894][ T5754] ? futex_exit_release+0x1c0/0x1c0 [ 103.129919][ T5754] ? get_sigframe_size+0x10/0x10 [ 103.134962][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.138104][ T5754] ? __context_tracking_exit+0x4c/0x80 [ 103.138139][ T5754] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 103.138161][ T5754] ? exit_to_user_mode_loop+0x3b/0x130 [ 103.138179][ T5754] exit_to_user_mode_loop+0x9e/0x130 [ 103.138194][ T5754] exit_to_user_mode_prepare+0xee/0x180 [ 103.138209][ T5754] syscall_exit_to_user_mode+0x16/0x40 [ 103.138228][ T5754] do_syscall_64+0x58/0xa0 [ 103.138243][ T5754] ? clear_bhb_loop+0x30/0x80 [ 103.138266][ T5754] ? clear_bhb_loop+0x30/0x80 [ 103.138282][ T5754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.138299][ T5754] RIP: 0033:0x7f968ce25159 [ 103.138314][ T5754] Code: Unable to access opcode bytes at RIP 0x7f968ce2512f. [ 103.138322][ T5754] RSP: 002b:00007f968b07d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 103.138340][ T5754] RAX: fffffffffffffe00 RBX: 00007f968d0acfa8 RCX: 00007f968ce25159 [ 103.138353][ T5754] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f968d0acfa8 [ 103.138364][ T5754] RBP: 00007f968d0acfa0 R08: 0000000000000000 R09: 0000000000000000 [ 103.138374][ T5754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.138384][ T5754] R13: 00007f968d0ad038 R14: 00007ffe345806a0 R15: 00007ffe34580788 [ 103.138407][ T5754] [ 103.145114][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.147660][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.421846][ T5363] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module netdev-nicvf0, throttling... [ 103.441192][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.478979][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.498228][ T5768] FAULT_INJECTION: forcing a failure. [ 103.498228][ T5768] name failslab, interval 1, probability 0, space 0, times 0 [ 103.512819][ T5768] CPU: 1 PID: 5768 Comm: syz.0.293 Not tainted syzkaller #0 [ 103.520129][ T5768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.530195][ T5768] Call Trace: [ 103.533480][ T5768] [ 103.536413][ T5768] dump_stack_lvl+0x188/0x250 [ 103.541104][ T5768] ? show_regs_print_info+0x20/0x20 [ 103.546311][ T5768] ? load_image+0x410/0x410 [ 103.550829][ T5768] ? __might_sleep+0xf0/0xf0 [ 103.555430][ T5768] ? __lock_acquire+0x7b50/0x7b50 [ 103.560471][ T5768] should_fail+0x383/0x4b0 [ 103.564900][ T5768] should_failslab+0x5/0x20 [ 103.569413][ T5768] slab_pre_alloc_hook+0x51/0xc0 [ 103.574361][ T5768] ? __d_alloc+0x27/0x6d0 [ 103.578714][ T5768] kmem_cache_alloc+0x3d/0x280 [ 103.583492][ T5768] __d_alloc+0x27/0x6d0 [ 103.587657][ T5768] ? d_alloc_pseudo+0xe/0x70 [ 103.592275][ T5768] d_alloc_pseudo+0x19/0x70 [ 103.596796][ T5768] alloc_file_pseudo+0xe0/0x200 [ 103.601679][ T5768] ? alloc_empty_file_noaccount+0x80/0x80 [ 103.607422][ T5768] ? alloc_fd+0x59e/0x650 [ 103.611769][ T5768] sock_alloc_file+0xb3/0x240 [ 103.616465][ T5768] __sys_socket+0x11d/0x170 [ 103.620978][ T5768] __x64_sys_socket+0x76/0x80 [ 103.625669][ T5768] do_syscall_64+0x4c/0xa0 [ 103.630094][ T5768] ? clear_bhb_loop+0x30/0x80 [ 103.634790][ T5768] ? clear_bhb_loop+0x30/0x80 [ 103.639487][ T5768] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.645398][ T5768] RIP: 0033:0x7fa548b78159 [ 103.649826][ T5768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.669458][ T5768] RSP: 002b:00007fa546dcffc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 103.677892][ T5768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fa548b78159 [ 103.685861][ T5768] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 000000000000001f [ 103.693823][ T5768] RBP: 00007fa548c0f024 R08: 0000000000000000 R09: 0000000000000000 [ 103.701780][ T5768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.709742][ T5768] R13: 00007fa548e00038 R14: 00007fa548dfffa0 R15: 00007ffc75599f08 [ 103.717738][ T5768] [ 103.720797][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.756555][ T1110] Bluetooth: hci5: command 0x0419 tx timeout [ 104.087215][ T1110] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.143937][ T5798] device syzkaller0 entered promiscuous mode [ 104.339945][ T5812] netlink: 104 bytes leftover after parsing attributes in process `syz.1.299'. [ 104.350851][ T1110] usb 1-1: Using ep0 maxpacket: 32 [ 104.495672][ T1110] usb 1-1: config 7 has an invalid interface number: 234 but max is 0 [ 104.508877][ T1110] usb 1-1: config 7 has no interface number 0 [ 104.536366][ T1110] usb 1-1: config 7 interface 234 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 104.554328][ T5826] capability: warning: `syz.1.302' uses deprecated v2 capabilities in a way that may be insecure [ 104.715828][ T1110] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=37.b8 [ 104.729495][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.745567][ T1110] usb 1-1: Product: syz [ 104.754363][ T1110] usb 1-1: Manufacturer: syz [ 104.764721][ T1110] usb 1-1: SerialNumber: syz [ 105.125841][ T1110] usb 1-1: USB disconnect, device number 3 [ 105.249642][ T5857] jffs2: notice: (5857) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 105.383030][ T5862] FAT-fs (mtdblock0): invalid media value (0x94) [ 105.393668][ T5862] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 105.501198][ T5869] device syzkaller0 entered promiscuous mode [ 105.708207][ T5882] jffs2: notice: (5882) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 105.846804][ T5887] ======================================================= [ 105.846804][ T5887] WARNING: The mand mount option has been deprecated and [ 105.846804][ T5887] and is ignored by this kernel. Remove the mand [ 105.846804][ T5887] option from the mount to silence this warning. [ 105.846804][ T5887] ======================================================= [ 106.075986][ T5677] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 106.078485][ T5678] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 106.088843][ T5673] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 106.112998][ T2425] pvrusb2: Invalid write control endpoint [ 106.150515][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 106.170209][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 106.188101][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 106.221442][ T2425] pvrusb2: Device being rendered inoperable [ 106.245695][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 106.264072][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 106.284259][ T2425] pvrusb2: Attached sub-driver cx25840 [ 106.298554][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 106.309094][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 106.656020][ T5967] request_module: kmod_concurrent_max (0) close to 0 (max_modprobes: 50), for module binfmt-0000, throttling... [ 106.685663][ T21] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 106.825545][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.967708][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 107.088090][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.109346][ T21] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 107.225689][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 107.285883][ T21] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 107.299836][ T21] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 107.315753][ T23] usb 1-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.330058][ T21] usb 4-1: Product: syz [ 107.335827][ T21] usb 4-1: Manufacturer: syz [ 107.340756][ T21] usb 4-1: SerialNumber: syz [ 107.364647][ T21] usb 4-1: config 0 descriptor?? [ 107.418249][ T21] imon_raw 4-1:0.0: IR endpoint missing [ 107.590354][ T23] usb 1-1: string descriptor 0 read error: -22 [ 107.600410][ T23] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 107.628796][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.631279][ T1344] usb 4-1: USB disconnect, device number 7 [ 108.236574][ T6034] device syzkaller0 entered promiscuous mode [ 108.565572][ T4268] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 108.805639][ T4268] usb 4-1: Using ep0 maxpacket: 8 [ 108.819624][ T6056] divide error: 0000 [#1] PREEMPT SMP KASAN [ 108.825549][ T6056] CPU: 0 PID: 6056 Comm: syz.2.322 Not tainted syzkaller #0 [ 108.832833][ T6056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.842892][ T6056] RIP: 0010:block2mtd_setup2+0x5b0/0xd90 [ 108.848536][ T6056] Code: 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 80 3c 28 00 4c 8b 7c 24 18 74 08 4c 89 f7 e8 e8 7a 91 fc 49 8b 06 49 63 cf 48 99 <48> f7 f9 49 89 d6 31 ff 48 89 d6 e8 e0 50 4c fc 4d 85 f6 0f 85 98 [ 108.868143][ T6056] RSP: 0018:ffffc90002caf9e0 EFLAGS: 00010246 [ 108.874205][ T6056] RAX: 0000000000000000 RBX: 1ffff1100f4c3402 RCX: 0000000000000000 [ 108.882161][ T6056] RDX: 0000000000000000 RSI: 0000000000700000 RDI: 0000000001f00000 [ 108.890119][ T6056] RBP: ffffc90002cafbd0 R08: ffff88802005e4af R09: 1ffff1100400bc95 [ 108.898076][ T6056] R10: dffffc0000000000 R11: ffffed100400bc96 R12: ffffc90002cafa60 [ 108.906032][ T6056] R13: dffffc0000000000 R14: ffff88814088d920 R15: 0000000000000000 [ 108.913986][ T6056] FS: 00007f810b2ea6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 108.922902][ T6056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.929468][ T6056] CR2: 000000110c3d84dd CR3: 000000004f44c000 CR4: 00000000003526f0 [ 108.937423][ T6056] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.945378][ T6056] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 108.953336][ T6056] Call Trace: [ 108.956608][ T6056] [ 108.959526][ T6056] ? block2mtd_setup+0x40/0x40 [ 108.964276][ T6056] ? __mutex_lock_common+0x435/0x2400 [ 108.969646][ T6056] ? read_lock_is_recursive+0x10/0x10 [ 108.975016][ T6056] block2mtd_setup+0x1f/0x40 [ 108.979595][ T6056] param_attr_store+0x20a/0x300 [ 108.984429][ T6056] ? param_attr_show+0x170/0x170 [ 108.989346][ T6056] ? sysfs_kf_read+0x350/0x350 [ 108.994092][ T6056] module_attr_store+0x5b/0x80 [ 108.998837][ T6056] kernfs_fop_write_iter+0x3a8/0x500 [ 109.004110][ T6056] vfs_write+0x748/0xd70 [ 109.008340][ T6056] ? file_end_write+0x250/0x250 [ 109.013177][ T6056] ? mutex_lock_nested+0x17/0x20 [ 109.018097][ T6056] ? __fdget_pos+0x2bf/0x370 [ 109.022669][ T6056] ? ksys_write+0x70/0x260 [ 109.027065][ T6056] ksys_write+0x153/0x260 [ 109.031375][ T6056] ? __ia32_sys_read+0x80/0x80 [ 109.036207][ T6056] ? lockdep_hardirqs_on+0x94/0x140 [ 109.041389][ T6056] do_syscall_64+0x4c/0xa0 [ 109.045785][ T6056] ? clear_bhb_loop+0x30/0x80 [ 109.050444][ T6056] ? clear_bhb_loop+0x30/0x80 [ 109.055102][ T6056] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.060979][ T6056] RIP: 0033:0x7f810d092159 [ 109.065380][ T6056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.084975][ T6056] RSP: 002b:00007f810b2ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.093376][ T6056] RAX: ffffffffffffffda RBX: 00007f810d319fa0 RCX: 00007f810d092159 [ 109.101331][ T6056] RDX: 000000000000000c RSI: 0000200000000500 RDI: 0000000000000003 [ 109.109286][ T6056] RBP: 00007f810d129024 R08: 0000000000000000 R09: 0000000000000000 [ 109.117237][ T6056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.125189][ T6056] R13: 00007f810d31a038 R14: 00007f810d319fa0 R15: 00007ffdba0e5508 [ 109.133149][ T6056] [ 109.136159][ T6056] Modules linked in: [ 109.146366][ T6056] ---[ end trace 6af2cd0db864eb26 ]--- [ 109.151843][ T6056] RIP: 0010:block2mtd_setup2+0x5b0/0xd90 [ 109.159191][ T6056] Code: 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 80 3c 28 00 4c 8b 7c 24 18 74 08 4c 89 f7 e8 e8 7a 91 fc 49 8b 06 49 63 cf 48 99 <48> f7 f9 49 89 d6 31 ff 48 89 d6 e8 e0 50 4c fc 4d 85 f6 0f 85 98 [ 109.181108][ T6056] RSP: 0018:ffffc90002caf9e0 EFLAGS: 00010246 [ 109.187312][ T6056] RAX: 0000000000000000 RBX: 1ffff1100f4c3402 RCX: 0000000000000000 [ 109.198096][ T6056] RDX: 0000000000000000 RSI: 0000000000700000 RDI: 0000000001f00000 [ 109.206219][ T6056] RBP: ffffc90002cafbd0 R08: ffff88802005e4af R09: 1ffff1100400bc95 [ 109.214204][ T6056] R10: dffffc0000000000 R11: ffffed100400bc96 R12: ffffc90002cafa60 [ 109.223925][ T6056] R13: dffffc0000000000 R14: ffff88814088d920 R15: 0000000000000000 [ 109.232075][ T6056] FS: 00007f810b2ea6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 109.242842][ T6056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.250395][ T6056] CR2: 000055fc5ceed138 CR3: 000000004f44c000 CR4: 00000000003526e0 [ 109.260134][ T6056] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.268267][ T6056] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 109.277990][ T6056] Kernel panic - not syncing: Fatal exception [ 109.284162][ T6056] Kernel Offset: disabled [ 109.288482][ T6056] Rebooting in 86400 seconds..