last executing test programs: 17.029815558s ago: executing program 1 (id=206): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 14.382754259s ago: executing program 1 (id=209): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00') ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x2000000000000004) 7.413455702s ago: executing program 2 (id=230): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405205105500000102000109023e0001010080320904000004080662000705010200020004240100"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000580), 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000002680)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000026c0)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000002700)=0x1, 0x4) sendmsg$can_raw(r4, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000027c0)=@can={{0x4, 0x0, 0x0, 0x1}, 0x3, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) recvmmsg(r4, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x40000043, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000002b00)={{0x1, 0x1, 0x400}}) 4.925218616s ago: executing program 3 (id=242): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r1, 0x701, 0x70bd2c, 0x4, {0x45}}, 0x14}, 0x1, 0x0, 0x0, 0x240080e4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r5 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@ip_ttl={{0x14, 0x110, 0x2, 0x5}}], 0x18, 0x4c00}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7001}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x1}}]}}]}, 0x40}}, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) close(r12) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000740)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f00000007c0)={&(0x7f0000000800)=@xdp={0x2c, 0xdd86, r13, 0x3e}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)="80", 0x1}], 0x1}, 0x4) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x104, r3, 0x28, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xb, 0x7c}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6}, {0x2, 0x5}, {0x20, 0x1}], "f91ff9f41c299039"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x40, 0x6}, {0xbd, 0x2}, {0x4}, {0x6, 0x7}, {0xff, 0x5}, {0x7, 0x6}, {0x6, 0x2}, {0x7}, {0x40, 0x5}, {0x8c, 0x3}, {0x9, 0x7}, {0xf8, 0x4}, {0x2, 0x2}, {0x61, 0x6}, {0x81, 0x7}, {0x8, 0x3}], "72bc87e1a40bab17"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x42, 0x2}, {0x0, 0x5}], "3182e4cc601f3824"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x8}, {0xd5, 0x4}, {0xa8, 0x2}, {0xd, 0x2}, {0x10}, {0xf8, 0x2}, {0x8}, {0x8}, {0x4, 0x5}, {0x19, 0x1}, {0x9c, 0x4}, {0x9, 0x4}, {0x4, 0x4}, {0x6, 0x4}, {0x0, 0x7}], "23cfe3ca617c0972"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x2, 0x5}, {0xf, 0x3}, {0x7}, {0x5, 0x2}, {0x5, 0x7}, {0xf, 0x1}, {0x1, 0x1}, {0x9}, {0x9}, {0x3, 0x6}, {0x6}, {0xfb, 0x6}, {0xc, 0x1}, {0x8, 0x4}], "108455350564d867"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x6}, {0x2, 0x5}, {0x1, 0x6}], "f1eb0a853de568fe"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x0, 0x6}, {0x9, 0x3}, {0xd4, 0x4}, {0x81, 0x1}, {0x81, 0x7}, {}], "44a36a5b042cffe5"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "cea8eabb55d0ef20"}}]}, 0x104}, 0x1, 0x0, 0x0, 0x84810}, 0x80) socket(0x28, 0x4, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fedbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="7071fae7457c52b81b002a003e010365125050505050500802110000010802110000410038002d8004"], 0x78}}, 0x40408c0) 4.361471624s ago: executing program 3 (id=244): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000b80)={0x5, 0x7}) 4.11137113s ago: executing program 3 (id=245): openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setns(0xc9, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x2, 0xb2, &(0x7f0000000380)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) memfd_create(&(0x7f0000000540)='\x00', 0x8340b1aabcc04bec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000640), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000680)=0x2) recvmmsg(r1, &(0x7f00000006c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x8, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000040000000000000000ff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000980)={0x2, 0xc22, @remote}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) 3.962132905s ago: executing program 1 (id=247): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x8, &(0x7f0000000700)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000740)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./file0/file2\x00', 0x1000) unlink(&(0x7f00000007c0)='./file1\x00') mount$fuse(0x0, &(0x7f0000000800)='./file0\x00', 0x0, 0x20, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000840)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./upper\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newlink={0x64, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x3, @multicast}}]}]}]}, 0x64}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./work\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x3, 0x40000000}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x4a}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./lower1/dir1\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000400)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/dir2\x00', 0x0) mount(0x0, &(0x7f0000000540)='./mnt\x00', &(0x7f0000000580)='overlay\x00', 0x0, &(0x7f00000005c0)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') creat(&(0x7f0000000640)='./mnt/dir2\x00', 0x202) 2.661051988s ago: executing program 4 (id=248): mmap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xc75db000) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f00000000c0)={0x6, 0x1000000, [{0xd, 0xfffffbfc, 0x1, 0x7, 0x6, 0x6, 0xffffffff}, {0x6, 0x4, 0x0, 0x8001, 0x29, 0x7, 0x5}, {0x7, 0x8, 0x0, 0x4, 0x2, 0x5, 0xffff}, {0x4, 0xe5f, 0x3, 0x30e, 0x8001, 0x6, 0x80000001}, {0xb, 0x2bb, 0x2, 0xd, 0x3, 0x7ff, 0x400}, {0x2, 0x44, 0x5, 0x6, 0x0, 0x4, 0x3}]}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x0, 0x8) r4 = socket(0x21, 0x2, 0x2) shutdown(r4, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000300)={0x2, 0x4e20, @multicast2}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000340)={0x0, 0x8001}, 0x4) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000000380)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000003c0)=0x1, 0xfff0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000400)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000440)=0x9, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000480)) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000706010200000000000000000000000005000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r5, 0x0, 0x32600) r11 = openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r11, 0x40946400, &(0x7f0000000600)={'pcl818\x00', [0x140, 0x2, 0x3, 0xdf92, 0x1, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x2, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x8000, 0x401, 0x9, 0x8, 0x4, 0x2, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x2]}) ioctl$COMEDI_SETWSUBD(r11, 0x6411) 2.592888645s ago: executing program 2 (id=249): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0x1) close(r0) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0xe00) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000002c0)=0x639) r2 = fsopen(&(0x7f0000000300)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r2]) 2.514107063s ago: executing program 1 (id=251): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x10) finit_module(r0, 0x0, 0x0) 2.488544956s ago: executing program 2 (id=252): shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xbffffe0000000001, 0xfa11, 0x5}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x7, 0x5000, 0x2000, &(0x7f00009f2000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) clock_gettime(0x5, &(0x7f0000000000)) setitimer(0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0xea60}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20045808}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000100)="9ce9278bc8e075ab325f533c317c0f6cc8ec5759ac10394692141c2a6f6ee9377498cc806957c4202eb5c8e5ed5e41298228b77cd208054dbdf1f07b2870dbdd0c4cee5ed895041c0a077925fb2b3f84475a628ebc6c9bb6212649b6a234a3bf24c4d136c29dda77bfb3bf0ab3f1a83a2bfb4e5828b2", 0x76, 0x0, &(0x7f00000001c0)={0xa, 0x4e24, 0x3, @loopback, 0x9}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r3, &(0x7f0000000140)='ne', 0x2) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000300)={0xffffffffffffffff, 0x2, 0x3, r3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000440)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x10, 0x0, 0x0, @by_dev={r5}, [@thin_pool={0x0, 0x2000, 0x0, 0x70, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128', 0x20, 0x1e, ' 1 no_discard_passdown'}}]}) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x181341, 0x0) 2.485113706s ago: executing program 3 (id=253): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x1c0102, 0x0) write$vga_arbiter(r0, &(0x7f0000000340)=@target={'target ', {'PCI:', '0', ':', '0', ':', '1', '.', '10'}}, 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="15000000652e"], 0x15) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="fff8bb56e28b25670bf0e4b2911bb1d1b10bf7d2b0875e5fd6a782f8626b08066cdbd930e3c00d4d0d574623d24c744255", 0x31}], 0x1, 0x0, 0x0, 0x20008000}}], 0x1, 0x8020) io_setup(0x6, &(0x7f0000000200)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/wakeup_count', 0x1a1081, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000000400)="040000000000000000000000380100003801000000000000") write(0xffffffffffffffff, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2 7:0 0 7:1 0 ', 0x49) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) ioctl(r2, 0xc138fd09, &(0x7f0000000500)="040000000800000000000000a0010000380100000100"/42) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x20000, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f00000000c0)=0xfdfdffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 2.45281939s ago: executing program 1 (id=254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r1, 0x701, 0x70bd2c, 0x4, {0x45}}, 0x14}, 0x1, 0x0, 0x0, 0x240080e4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r5 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@ip_ttl={{0x14, 0x110, 0x2, 0x5}}], 0x18, 0x4c00}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7001}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x1}}]}}]}, 0x40}}, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) close(r12) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000740)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f00000007c0)={&(0x7f0000000800)=@xdp={0x2c, 0xdd86, r13, 0x3e}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)="80", 0x1}], 0x1}, 0x4) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x104, r3, 0x28, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xb, 0x7c}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6}, {0x2, 0x5}, {0x20, 0x1}], "f91ff9f41c299039"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x40, 0x6}, {0xbd, 0x2}, {0x4}, {0x6, 0x7}, {0xff, 0x5}, {0x7, 0x6}, {0x6, 0x2}, {0x7}, {0x40, 0x5}, {0x8c, 0x3}, {0x9, 0x7}, {0xf8, 0x4}, {0x2, 0x2}, {0x61, 0x6}, {0x81, 0x7}, {0x8, 0x3}], "72bc87e1a40bab17"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x42, 0x2}, {0x0, 0x5}], "3182e4cc601f3824"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x8}, {0xd5, 0x4}, {0xa8, 0x2}, {0xd, 0x2}, {0x10}, {0xf8, 0x2}, {0x8}, {0x8}, {0x4, 0x5}, {0x19, 0x1}, {0x9c, 0x4}, {0x9, 0x4}, {0x4, 0x4}, {0x6, 0x4}, {0x0, 0x7}], "23cfe3ca617c0972"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x2, 0x5}, {0xf, 0x3}, {0x7}, {0x5, 0x2}, {0x5, 0x7}, {0xf, 0x1}, {0x1, 0x1}, {0x9}, {0x9}, {0x3, 0x6}, {0x6}, {0xfb, 0x6}, {0xc, 0x1}, {0x8, 0x4}], "108455350564d867"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x6}, {0x2, 0x5}, {0x1, 0x6}], "f1eb0a853de568fe"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x0, 0x6}, {0x9, 0x3}, {0xd4, 0x4}, {0x81, 0x1}, {0x81, 0x7}, {}], "44a36a5b042cffe5"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "cea8eabb55d0ef20"}}]}, 0x104}, 0x1, 0x0, 0x0, 0x84810}, 0x80) socket(0x28, 0x4, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fedbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="7071fae7457c52b81b002a003e010365125050505050500802110000010802110000410038002d8004"], 0x78}}, 0x40408c0) 2.34578083s ago: executing program 3 (id=256): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000b80)={0x5, 0x7}) 2.333181732s ago: executing program 4 (id=257): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0], 0xfc}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 2.303420285s ago: executing program 1 (id=258): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000ac0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000300), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000340)={0x1, 0x8d6c30f34124690b, 0x55f}) 2.271593408s ago: executing program 3 (id=259): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) mount(0x0, &(0x7f0000000780)='./debug\x00', &(0x7f00000007c0)='debugfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) r3 = syz_open_dev$cec(&(0x7f0000000300), 0xffffffffffffffff, 0xc8520) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000600)={"000c1b25", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f00000006c0)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000700)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2bec4f439ff80e1d1c8", "fa07030000000000000016d1"]}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)={0x90, 0x0, 0x2, {0x7, 0x0, 0xd04, 0xfffffffffffffffc, 0x1, 0x100000, {0x0, 0xa, 0xfffffffffffffffd, 0x3, 0x4, 0x6, 0x4, 0x4, 0x4, 0x2000, 0x101, 0x0, 0x0, 0xf0ee, 0x9c}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x0, 0x0, 0x2007) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2, 0x3}, 0x18) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d171e4c4c55f7973", 0x8}], 0x1}}], 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x74, 0x0, {0x0, 0xa}, {0xfff1, 0x9}, {0x9, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x46}, 0x20004844) 1.402007257s ago: executing program 4 (id=261): socket$nl_route(0x10, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) 1.401796287s ago: executing program 0 (id=262): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0x1) close(r0) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0xe00) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000002c0)=0x639) r2 = fsopen(&(0x7f0000000300)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r2]) 1.346036943s ago: executing program 0 (id=263): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000cc0)={@fallback=r0, r0, 0x36, 0x8, r0, @void, @value=0x0}, 0x20) 1.328056264s ago: executing program 4 (id=264): openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f00000012c0)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000001340), 0x2, 0x141102) writev(r0, &(0x7f0000001380)=[{&(0x7f00000013c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) r1 = syz_open_dev$cec(&(0x7f0000001400), 0x0, 0x200) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0x0, &(0x7f00000015c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) open_tree(0xffffffffffffff9c, &(0x7f0000001600)='\x00', 0x89901) syz_mount_image$squashfs(&(0x7f00000016c0), &(0x7f0000001700)='./file0\x00', 0x0, &(0x7f0000001740)=ANY=[], 0x1, 0x1a3, &(0x7f0000001780)="$eJzs0L9rE2Ecx/H397nLL6FKVBwq2IDF80K1d6k6uBicIuTAwUUwaEjPpnhV0stgSwtdpCDV/gs6SB1V0ElEwbk4CA56Lt2kGYqDOEjkkieCf0OfF9x97vuBu/vytONOnAP+7K20qDJgcZBPCDYwIcNOqWG+0fMPnZvD4LKeN3Q+1zkeLy3faUZRuFi6WKL4XwH8HHT/qvglxxQFoYp82VtpNeVWQL/KgpoNKNYpP8Jq0HEfM26PcfQmFn1ngyuKjjh1ODTdzTMdLy2fmV9ozoVz4d1KZeaCd87zzqf7R6H3GnEfiuIJq7gBuYCCu0qmwYNt+wBTgrhtlVhS7pFtsLltnT451UO5u/QR3js9ct/sdkld4xT5G+nyNY4IT7ECJusUFDa356PQqyFX1Svx7c/2r4wiv2ZZZ1v3otn160p+Z7eqspsXf4eM41Mp+8ykR8NhPrCeMJlQS9hK2PnOhLxN/zI6V3stvb/Q03FO8CzL/Wa3u+hn4aM4AZX0ugRjg8+pwV5FeKff0cHX0YNhGIZhGIZhGIaxD/wNAAD//yMlYgQ=") 1.249995213s ago: executing program 0 (id=265): openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setns(0xc9, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b5f6f1dcffd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe0968cf531f807869226e09094c8e506f047f05ea76ac18c50fb5b0a035b5aed846814f642006d878f74353104ca305e887b37cbc683c19f30b8130701ba80ca3"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x2, 0xb2, &(0x7f0000000380)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) memfd_create(&(0x7f0000000540)='\x00', 0x8340b1aabcc04bec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000640), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000680)=0x2) recvmmsg(r1, &(0x7f00000006c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x8, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000040000000000000000ff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000980)={0x2, 0xc22, @remote}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) 438.470435ms ago: executing program 0 (id=266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002240), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000024c0)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) 194.259791ms ago: executing program 0 (id=267): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) 158.889274ms ago: executing program 2 (id=268): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x10) finit_module(r0, 0x0, 0x0) 150.610065ms ago: executing program 4 (id=269): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) r0 = socket$inet6(0xa, 0x2, 0x3a) socket(0x2b, 0x80801, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x20040000) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@dellink={0x34, 0x11, 0x1, 0x470bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xc0a742c700a80d57, 0x301}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, 0x0) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) 90.435411ms ago: executing program 2 (id=270): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f00000007c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.9812ms ago: executing program 0 (id=271): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0], 0xfc}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 5.69645ms ago: executing program 2 (id=272): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) getpid() syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) madvise(0xffffffffffffffff, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x12, {0x2, 0x4e20, @rand_addr=0x64010101}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000400)=0x7, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000440)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x58}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400000000000354, 0x42, 0x0) 0s ago: executing program 4 (id=273): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="f4", 0xfdef}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.198' (ED25519) to the list of known hosts. syzkaller login: [ 50.793681][ T4176] cgroup: Unknown subsys name 'net' [ 50.898401][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.109020][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.163130][ T4198] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.179839][ T4195] rdma_rxe: rxe_register_device failed with error -23 [ 53.180618][ T4189] rdma_rxe: rxe_register_device failed with error -23 [ 53.187352][ T4195] rdma_rxe: failed to add rxe_eth0 [ 53.194954][ T4198] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.207407][ T4202] rdma_rxe: rxe_register_device failed with error -23 [ 53.207468][ T4190] rdma_rxe: rxe_register_device failed with error -23 [ 53.221320][ T4202] rdma_rxe: failed to add rxe_eth0 [ 53.222264][ T4189] rdma_rxe: failed to add rxe_eth0 [ 53.232234][ T4190] rdma_rxe: failed to add rxe_eth0 [ 53.243925][ T4198] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.390580][ T13] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.388194][ T4198] infiniband rxe0: set active [ 53.401820][ T4198] infiniband rxe0: added rxe_eth0 [ 53.447895][ T4198] RDS/IB: rxe0: added [ 53.452735][ T4198] smc: adding ib device rxe0 with port count 1 [ 53.459173][ T4198] smc: ib device rxe0 port 1 has pnetid [ 53.507782][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.518138][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 53.531192][ T4202] chnl_net:caif_netlink_parms(): no params data found [ 53.551851][ T4198] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.616403][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 53.702598][ T4198] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.762828][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.771398][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.794810][ T4195] device bridge_slave_0 entered promiscuous mode [ 53.806262][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.813315][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.844669][ T4195] device bridge_slave_1 entered promiscuous mode [ 53.873196][ T4202] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.880356][ T4202] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.888866][ T4202] device bridge_slave_0 entered promiscuous mode [ 53.896587][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 53.913604][ T4198] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.927452][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.937667][ T4202] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.947263][ T4202] device bridge_slave_1 entered promiscuous mode [ 53.971838][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.990675][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.045519][ T4198] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.045577][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.068268][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.079628][ T4190] device bridge_slave_0 entered promiscuous mode [ 54.118540][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.126913][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.138312][ T4190] device bridge_slave_1 entered promiscuous mode [ 54.155137][ T4202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.186278][ T4195] team0: Port device team_slave_0 added [ 54.197283][ T4198] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.198348][ T4202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.232513][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.258138][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.278835][ T4189] device bridge_slave_0 entered promiscuous mode [ 54.307128][ T4195] team0: Port device team_slave_1 added [ 54.338261][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.357906][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.366066][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.398471][ T4189] device bridge_slave_1 entered promiscuous mode [ 54.420604][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.448216][ T4202] team0: Port device team_slave_0 added [ 54.485552][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.495605][ T4202] team0: Port device team_slave_1 added [ 54.502357][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.513203][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.518162][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.526586][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.552600][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.574465][ T4190] team0: Port device team_slave_0 added [ 54.596859][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.604451][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.630572][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.648348][ T4190] team0: Port device team_slave_1 added [ 54.659990][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.666968][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.692898][ T4202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.705061][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.712001][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.737952][ T4202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.749496][ T3855] infiniband rxe0: set active [ 54.773676][ T4189] team0: Port device team_slave_0 added [ 54.782237][ T13] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.808698][ T4189] team0: Port device team_slave_1 added [ 54.828833][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.835972][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.861964][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.890717][ T4195] device hsr_slave_0 entered promiscuous mode [ 54.897802][ T4195] device hsr_slave_1 entered promiscuous mode [ 54.917042][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.924011][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.949944][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.961430][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.968655][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.994736][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.024005][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.030952][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.056957][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.078854][ T4202] device hsr_slave_0 entered promiscuous mode [ 55.085819][ T4202] device hsr_slave_1 entered promiscuous mode [ 55.092432][ T4202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.100211][ T4202] Cannot create hsr debugfs directory [ 55.174763][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 55.176951][ T4190] device hsr_slave_0 entered promiscuous mode [ 55.181984][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 55.187397][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 55.193065][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 55.205167][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 55.212046][ T4190] device hsr_slave_1 entered promiscuous mode [ 55.218714][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.227048][ T4190] Cannot create hsr debugfs directory [ 55.236160][ T4189] device hsr_slave_0 entered promiscuous mode [ 55.242666][ T4189] device hsr_slave_1 entered promiscuous mode [ 55.249265][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.257574][ T4189] Cannot create hsr debugfs directory [ 55.278026][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 55.421455][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.428650][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.437176][ T4198] device bridge_slave_0 entered promiscuous mode [ 55.447349][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.454596][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.462180][ T4198] device bridge_slave_1 entered promiscuous mode [ 55.492040][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.527268][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.568959][ T4198] team0: Port device team_slave_0 added [ 55.584528][ T4198] team0: Port device team_slave_1 added [ 55.633017][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.640328][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.666552][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.684600][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.691558][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.717550][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.740471][ T4202] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.752603][ T4202] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.762197][ T4202] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.770910][ T4202] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.811511][ T4198] device hsr_slave_0 entered promiscuous mode [ 55.818274][ T4198] device hsr_slave_1 entered promiscuous mode [ 55.825232][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.832782][ T4198] Cannot create hsr debugfs directory [ 55.909637][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.918883][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.943163][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.952536][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.018974][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.048695][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.057902][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.071912][ T4202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.082754][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.096393][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.110548][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.120531][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.132158][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.150876][ T4202] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.162150][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.170974][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.192742][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.224278][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.233547][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.242536][ T1230] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.249751][ T1230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.258443][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.268880][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.277028][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.288711][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.297328][ T1230] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.304389][ T1230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.312354][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.322949][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.359001][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.370182][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.380162][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.390232][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.400040][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.411771][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.420266][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.428835][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.437493][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.445926][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.461145][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.486374][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.495758][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.504700][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.511724][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.519765][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.528352][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.537036][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.544137][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.551950][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.561458][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.570383][ T4198] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.581094][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.597646][ T4198] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.607983][ T4198] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.619146][ T4198] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.670686][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.680239][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.689404][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.698345][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.712697][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.733226][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.741265][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.749904][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.758525][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.771118][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.787438][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.799873][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.811908][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.821435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.833171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.856234][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.872777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.882184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.891028][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.898133][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.907101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.916014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.930760][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.937843][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.945832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.954800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.982013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.991964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.001073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.010961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.021763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.030450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.039370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.047955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.061685][ T4202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.078434][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.087373][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.102603][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.110250][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.121572][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.132712][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.153072][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.175869][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.183325][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.195225][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.203001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.211454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.220737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.229168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.238381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.246216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.254482][ T4264] Bluetooth: hci3: command 0x041b tx timeout [ 57.277726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.286667][ T4264] Bluetooth: hci2: command 0x041b tx timeout [ 57.292239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.293115][ T4264] Bluetooth: hci1: command 0x041b tx timeout [ 57.307152][ T4264] Bluetooth: hci0: command 0x041b tx timeout [ 57.313221][ T4264] Bluetooth: hci4: command 0x041b tx timeout [ 57.324579][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.331634][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.348692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.361898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.371912][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.379007][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.387882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.396517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.405329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.413576][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.420638][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.429322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.438042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.447684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.472597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.489937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.523450][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.530568][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.538939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.548956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.559101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.569056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.578089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.587012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.596319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.634933][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.645641][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.655020][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.663386][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.672048][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.680420][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.689195][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.697634][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.705745][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.714414][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.722620][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.731072][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.739842][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.748356][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.756601][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.768181][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.778051][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.786702][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.796833][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.830876][ T4195] device veth0_vlan entered promiscuous mode [ 57.839248][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.849372][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.857259][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.866505][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.879872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.887786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.910156][ T4195] device veth1_vlan entered promiscuous mode [ 57.928741][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.947860][ T4202] device veth0_vlan entered promiscuous mode [ 57.983828][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.991788][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.017968][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.026785][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.035198][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.042838][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.062673][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.071407][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.080211][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.089940][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.100254][ T4202] device veth1_vlan entered promiscuous mode [ 58.126171][ T4195] device veth0_macvtap entered promiscuous mode [ 58.149371][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.160344][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.172727][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.180320][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.191709][ T4189] device veth0_vlan entered promiscuous mode [ 58.201952][ T4195] device veth1_macvtap entered promiscuous mode [ 58.211067][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.220114][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.228460][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.237077][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.246129][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.254309][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.265181][ T4189] device veth1_vlan entered promiscuous mode [ 58.292415][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.301629][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.309966][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.319844][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.328646][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.337303][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.345398][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.352760][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.361359][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.370697][ T4202] device veth0_macvtap entered promiscuous mode [ 58.379624][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.396537][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.406319][ T4202] device veth1_macvtap entered promiscuous mode [ 58.415698][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.423650][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.432444][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.442627][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.452412][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.464941][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.474110][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.482795][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.491829][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.539226][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.548986][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.561303][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.572139][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.583649][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.602032][ T4189] device veth0_macvtap entered promiscuous mode [ 58.622208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.633443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.644622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.653075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.662295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.671124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.680331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.690060][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.701304][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.712384][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.722709][ T4202] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.731882][ T4202] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.740706][ T4202] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.750123][ T4202] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.767313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.781962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.796189][ T4189] device veth1_macvtap entered promiscuous mode [ 58.838742][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.848654][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.878774][ T4198] device veth0_vlan entered promiscuous mode [ 58.885443][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.896653][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.905491][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.913592][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.922080][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.930335][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.939398][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.947145][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.954697][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.984028][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.994780][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.006144][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.017504][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.029863][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.042993][ T4190] device veth0_vlan entered promiscuous mode [ 59.058794][ T4198] device veth1_vlan entered promiscuous mode [ 59.068173][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.076351][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.085967][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.097763][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.108633][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.119066][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.129747][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.140489][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.162760][ T4190] device veth1_vlan entered promiscuous mode [ 59.175593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.183552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.192234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.200663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.210338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.222389][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.224264][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.238940][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.240824][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.256181][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.264911][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.283973][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.292199][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.304202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.312164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.334217][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 59.336777][ T4190] device veth0_macvtap entered promiscuous mode [ 59.352445][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 59.356105][ T4198] device veth0_macvtap entered promiscuous mode [ 59.369986][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 59.376967][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 59.377190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.383249][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 59.397466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.416333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.429144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.437882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.446231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.462094][ T4198] device veth1_macvtap entered promiscuous mode [ 59.481329][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.492213][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.503363][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.520333][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.530368][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.550328][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.566933][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.600860][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.617443][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.628623][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.649437][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.668667][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.679968][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.703840][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.713586][ T4190] device veth1_macvtap entered promiscuous mode [ 59.724997][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.732808][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.740911][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.749054][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.757467][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.766385][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.775089][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.785851][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.794751][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.822459][ T4198] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.866870][ T4198] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.876913][ T4198] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.886905][ T4198] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.913347][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.931320][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.934850][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.959884][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.969935][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.981631][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.993501][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.004204][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.014944][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.026150][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.038220][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.089419][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.104589][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.131007][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.375280][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.392083][ T4280] Bluetooth: hci5: Frame reassembly failed (-84) [ 60.457069][ T4280] Bluetooth: hci5: Frame reassembly failed (-84) [ 60.479607][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.587363][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.781085][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.813718][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.824075][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.840017][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.850251][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.870668][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.882082][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.897252][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.937343][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.947843][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.957397][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.967087][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.977458][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.998841][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.019928][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.111542][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.129518][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.145326][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.635302][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.643154][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.655514][ T4310] Bluetooth: hci3: command 0x0419 tx timeout [ 61.661553][ T4310] Bluetooth: hci2: command 0x0419 tx timeout [ 61.675685][ T4310] Bluetooth: hci1: command 0x0419 tx timeout [ 61.682152][ T4310] Bluetooth: hci0: command 0x0419 tx timeout [ 61.703666][ T4310] Bluetooth: hci4: command 0x0419 tx timeout [ 61.703933][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.729427][ T4319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 61.753728][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.773733][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.783729][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.793731][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.803728][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.813726][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.823726][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.833726][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.843727][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.853732][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 62.852120][ T4262] Bluetooth: hci5: command 0x1003 tx timeout [ 62.891235][ T4193] Bluetooth: hci5: sending frame failed (-49) [ 62.921106][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.977542][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.016795][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.044694][ T1226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.063438][ T1226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.094779][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.303196][ T4331] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 64.391654][ T9] Bluetooth: hci6: Frame reassembly failed (-84) [ 64.846437][ T4349] syz.1.13 uses obsolete (PF_INET,SOCK_PACKET) [ 64.934466][ T4263] Bluetooth: hci5: command 0x1001 tx timeout [ 64.941988][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 65.117642][ T4356] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 66.133756][ T4357] Bluetooth: hci6: command 0x1003 tx timeout [ 66.489163][ T4201] Bluetooth: hci6: sending frame failed (-49) [ 66.804901][ T4357] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.426024][ T2238] Bluetooth: hci5: command 0x1009 tx timeout [ 67.827083][ T4368] device-mapper: ioctl: Unable to rename non-existent device, syzb2 to uuid LVM-syzb3 [ 68.616553][ T2238] Bluetooth: hci6: command 0x1001 tx timeout [ 68.623373][ T4201] Bluetooth: hci6: sending frame failed (-49) [ 68.681931][ T4385] device-mapper: table: 248:0: clone: Invalid region size [ 68.701693][ T4389] Zero length message leads to an empty skb [ 68.710222][ T4385] device-mapper: ioctl: error adding target to table [ 70.083597][ T4405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 70.720926][ T4357] Bluetooth: hci6: command 0x1009 tx timeout [ 71.182545][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.216152][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.297602][ T4447] device-mapper: table: 248:2: ram1 too small for target: start=0, len=14400, dev_size=8192 [ 71.384982][ T4447] device-mapper: core: Cannot calculate initial queue limits [ 71.386762][ T25] audit: type=1800 audit(1792768445.032:2): pid=4449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.29" name="memory_backed" dev="configfs" ino=33115 res=0 errno=0 [ 71.392380][ T4447] device-mapper: ioctl: unable to set up device queue for new table. [ 71.474345][ T25] audit: type=1800 audit(1792768445.072:3): pid=4449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.29" name="zoned" dev="configfs" ino=33116 res=0 errno=0 [ 71.559678][ T25] audit: type=1800 audit(1792768445.202:4): pid=4449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.29" name="power" dev="configfs" ino=33122 res=0 errno=0 [ 72.250133][ T4459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33'. [ 73.750360][ T4455] ODEBUG: Out of memory. ODEBUG disabled [ 74.284024][ T4465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 75.513709][ C0] sched: RT throttling activated [ 75.549721][ T4359] Bluetooth: hci5: Frame reassembly failed (-84) [ 75.870016][ T4483] process 'syz.0.41' launched './file0' with NULL argv: empty string added [ 75.960097][ T4488] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.921403][ T4263] Bluetooth: hci5: command 0x1003 tx timeout [ 76.935987][ T147] Bluetooth: hci5: sending frame failed (-49) [ 77.004682][ T25] audit: type=1800 audit(1792768450.652:5): pid=4495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.43" name="memory_backed" dev="configfs" ino=33157 res=0 errno=0 [ 77.049578][ T25] audit: type=1800 audit(1792768450.652:6): pid=4495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.43" name="zoned" dev="configfs" ino=33158 res=0 errno=0 [ 77.088631][ T25] audit: type=1800 audit(1792768450.672:7): pid=4495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.43" name="power" dev="configfs" ino=33165 res=0 errno=0 [ 77.250779][ T4358] Bluetooth: hci6: Frame reassembly failed (-84) [ 77.295909][ T4358] Bluetooth: hci6: Frame reassembly failed (-84) [ 78.115583][ T4510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 78.291193][ T4521] loop1: detected capacity change from 0 to 128 [ 78.315897][ T4521] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.327320][ T4521] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.536052][ T4263] Bluetooth: hci5: command 0x1001 tx timeout [ 79.542142][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 79.572655][ T21] Bluetooth: hci6: command 0x1003 tx timeout [ 79.579579][ T4201] Bluetooth: hci6: sending frame failed (-49) [ 79.705790][ T25] audit: type=1800 audit(1792768453.352:8): pid=4538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.58" name="memory_backed" dev="configfs" ino=34315 res=0 errno=0 [ 79.738060][ T25] audit: type=1800 audit(1792768453.382:9): pid=4538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.58" name="zoned" dev="configfs" ino=34320 res=0 errno=0 [ 79.878150][ T25] audit: type=1800 audit(1792768453.502:10): pid=4538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.58" name="power" dev="configfs" ino=34325 res=0 errno=0 [ 80.079753][ T4545] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.435332][ T26] cfg80211: failed to load regulatory.db [ 81.573867][ T26] Bluetooth: hci5: command 0x1009 tx timeout [ 81.664188][ T26] Bluetooth: hci6: command 0x1001 tx timeout [ 81.670731][ T4201] Bluetooth: hci6: sending frame failed (-49) [ 82.033816][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.394241][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.405551][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.415778][ T1108] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.429134][ T1108] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.439111][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.645870][ T21] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 82.652209][ T1108] usb 2-1: config 0 descriptor?? [ 82.654475][ T21] Bluetooth: hci4: Injecting HCI hardware error event [ 82.728535][ T4567] netlink: 36 bytes leftover after parsing attributes in process `syz.4.64'. [ 83.207050][ T1108] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 83.240068][ T4192] Bluetooth: hci4: hardware error 0x00 [ 83.277051][ T1108] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 83.317990][ T4570] netlink: 32 bytes leftover after parsing attributes in process `syz.2.65'. [ 83.354556][ T4570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.65'. [ 83.364578][ T4570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.65'. [ 83.431103][ T4573] loop2: detected capacity change from 0 to 128 [ 83.478144][ T1327] usb 2-1: USB disconnect, device number 2 [ 83.478849][ T4555] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -19 [ 83.520061][ T4573] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.544379][ T4573] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.733844][ T21] Bluetooth: hci6: command 0x1009 tx timeout [ 84.454457][ T4604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.484167][ T4604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.508754][ T4604] bond0 (unregistering): Released all slaves [ 84.607479][ T4612] loop4: detected capacity change from 0 to 8 [ 84.790905][ T4619] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 84.849590][ T4612] SQUASHFS error: Unable to read inode 0x11f [ 85.546841][ T4627] FAULT_INJECTION: forcing a failure. [ 85.546841][ T4627] name failslab, interval 1, probability 0, space 0, times 1 [ 85.606037][ T4627] CPU: 0 PID: 4627 Comm: syz.3.82 Not tainted syzkaller #0 [ 85.613271][ T4627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 85.623336][ T4627] Call Trace: [ 85.626618][ T4627] [ 85.629546][ T4627] dump_stack_lvl+0x188/0x250 [ 85.634241][ T4627] ? show_regs_print_info+0x20/0x20 [ 85.639455][ T4627] ? load_image+0x410/0x410 [ 85.643966][ T4627] ? __might_sleep+0xf0/0xf0 [ 85.648560][ T4627] ? __lock_acquire+0x7d40/0x7d40 [ 85.653598][ T4627] should_fail+0x383/0x4b0 [ 85.658028][ T4627] should_failslab+0x5/0x20 [ 85.662538][ T4627] slab_pre_alloc_hook+0x51/0xc0 [ 85.667479][ T4627] ? security_inode_alloc+0x30/0x110 [ 85.672768][ T4627] kmem_cache_alloc+0x3d/0x280 [ 85.677538][ T4627] security_inode_alloc+0x30/0x110 [ 85.682652][ T4627] inode_init_always+0x8e5/0xc90 [ 85.687600][ T4627] new_inode_pseudo+0x8e/0x210 [ 85.692372][ T4627] new_inode+0x25/0x1d0 [ 85.696542][ T4627] devpts_pty_new+0xd6/0x650 [ 85.701149][ T4627] ? devpts_kill_index+0x40/0x40 [ 85.706097][ T4627] ? do_raw_spin_unlock+0x11d/0x230 [ 85.711304][ T4627] ptmx_open+0x1b9/0x2c0 [ 85.715553][ T4627] chrdev_open+0x585/0x5f0 [ 85.719976][ T4627] ? cd_forget+0x160/0x160 [ 85.724399][ T4627] ? fsnotify_perm+0x3a7/0x560 [ 85.729162][ T4627] ? cd_forget+0x160/0x160 [ 85.733580][ T4627] do_dentry_open+0x7f7/0xf90 [ 85.738259][ T4627] ? vfs_open+0x2b/0x80 [ 85.742417][ T4627] path_openat+0x2718/0x2fb0 [ 85.747138][ T4627] ? __kasan_slab_alloc+0xa9/0xc0 [ 85.752180][ T4627] ? do_filp_open+0x400/0x400 [ 85.756878][ T4627] do_filp_open+0x1df/0x400 [ 85.761388][ T4627] ? vfs_tmpfile+0x300/0x300 [ 85.765994][ T4627] ? _raw_spin_unlock+0x24/0x40 [ 85.770844][ T4627] ? alloc_fd+0x59e/0x650 [ 85.775180][ T4627] do_sys_openat2+0x14b/0x500 [ 85.779865][ T4627] ? __lock_acquire+0x7d40/0x7d40 [ 85.784904][ T4627] ? do_sys_open+0xe0/0xe0 [ 85.789320][ T4627] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 85.795303][ T4627] ? lock_chain_count+0x20/0x20 [ 85.800158][ T4627] __x64_sys_openat+0x135/0x160 [ 85.805016][ T4627] do_syscall_64+0x4c/0xa0 [ 85.809430][ T4627] ? clear_bhb_loop+0x30/0x80 [ 85.814106][ T4627] ? clear_bhb_loop+0x30/0x80 [ 85.818782][ T4627] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.824691][ T4627] RIP: 0033:0x7fe5f3900559 [ 85.829112][ T4627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.848718][ T4627] RSP: 002b:00007fe5f1b36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 85.857135][ T4627] RAX: ffffffffffffffda RBX: 00007fe5f3b87090 RCX: 00007fe5f3900559 [ 85.865106][ T4627] RDX: 0000000000121301 RSI: 000020000001d9c0 RDI: ffffffffffffff9c [ 85.873076][ T4627] RBP: 00007fe5f3997b20 R08: 0000000000000000 R09: 0000000000000000 [ 85.881044][ T4627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.889010][ T4627] R13: 00007fe5f3b87128 R14: 00007fe5f3b87090 R15: 00007ffddcda7048 [ 85.896994][ T4627] [ 86.397480][ T4635] loop2: detected capacity change from 0 to 128 [ 86.471324][ T4635] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.502666][ T4635] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.825448][ T4654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.91'. [ 87.900534][ T4657] loop0: detected capacity change from 0 to 8 [ 87.907168][ T4650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.932327][ T4657] SQUASHFS error: Unable to read inode 0x11f [ 87.991280][ T4650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.129287][ T4666] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.024554][ T4650] bond0 (unregistering): Released all slaves [ 89.223555][ T4674] device-mapper: table: 248:3: crypt: Error decoding and setting key [ 89.327708][ T4674] device-mapper: ioctl: error adding target to table [ 89.414263][ T4679] loop4: detected capacity change from 0 to 128 [ 89.625362][ T4679] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.662832][ T4679] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.699169][ T4682] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 89.759293][ T4690] ======================================================= [ 89.759293][ T4690] WARNING: The mand mount option has been deprecated and [ 89.759293][ T4690] and is ignored by this kernel. Remove the mand [ 89.759293][ T4690] option from the mount to silence this warning. [ 89.759293][ T4690] ======================================================= [ 89.835123][ T4682] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.881868][ T4695] device syzkaller0 entered promiscuous mode [ 89.901142][ T4695] netlink: 92 bytes leftover after parsing attributes in process `syz.3.104'. [ 89.924616][ T4697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 90.161907][ T4702] loop0: detected capacity change from 0 to 8 [ 90.320816][ T4702] SQUASHFS error: Unable to read inode 0x11f [ 90.348794][ T4707] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 93.026688][ T4717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.200198][ T4717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.226103][ T4717] bond0 (unregistering): Released all slaves [ 93.239646][ T4732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'. [ 93.272645][ T4736] FAULT_INJECTION: forcing a failure. [ 93.272645][ T4736] name failslab, interval 1, probability 0, space 0, times 0 [ 93.285787][ T4736] CPU: 1 PID: 4736 Comm: syz.2.117 Not tainted syzkaller #0 [ 93.293086][ T4736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 93.303145][ T4736] Call Trace: [ 93.306532][ T4736] [ 93.309475][ T4736] dump_stack_lvl+0x188/0x250 [ 93.314172][ T4736] ? show_regs_print_info+0x20/0x20 [ 93.319384][ T4736] ? load_image+0x410/0x410 [ 93.323901][ T4736] ? __might_sleep+0xf0/0xf0 [ 93.328502][ T4736] ? __lock_acquire+0x7d40/0x7d40 [ 93.333539][ T4736] should_fail+0x383/0x4b0 [ 93.337972][ T4736] should_failslab+0x5/0x20 [ 93.342481][ T4736] slab_pre_alloc_hook+0x51/0xc0 [ 93.347425][ T4736] ? taskstats_exit+0x14a/0xd80 [ 93.352286][ T4736] kmem_cache_alloc+0x3d/0x280 [ 93.357062][ T4736] taskstats_exit+0x14a/0xd80 [ 93.361751][ T4736] ? lockdep_hardirqs_on+0x94/0x140 [ 93.366966][ T4736] ? __delayacct_thrashing_end+0x110/0x110 [ 93.372789][ T4736] ? sync_mm_rss+0x211/0x350 [ 93.377394][ T4736] do_exit+0x5ab/0x2110 [ 93.381564][ T4736] ? put_task_struct+0x80/0x80 [ 93.386339][ T4736] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 93.392335][ T4736] ? _raw_spin_lock_irq+0xb7/0xf0 [ 93.397371][ T4736] do_group_exit+0x12c/0x2f0 [ 93.401969][ T4736] ? lockdep_hardirqs_on+0x94/0x140 [ 93.407177][ T4736] get_signal+0x7eb/0x12e0 [ 93.411613][ T4736] arch_do_signal_or_restart+0xe6/0x12a0 [ 93.417270][ T4736] ? futex_exit_release+0x1c0/0x1c0 [ 93.422478][ T4736] ? get_sigframe_size+0x10/0x10 [ 93.427423][ T4736] ? __context_tracking_exit+0x4c/0x80 [ 93.429867][ T4740] loop0: detected capacity change from 0 to 128 [ 93.432896][ T4736] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 93.432926][ T4736] ? exit_to_user_mode_loop+0x3b/0x130 [ 93.450558][ T4736] exit_to_user_mode_loop+0x9e/0x130 [ 93.455854][ T4736] exit_to_user_mode_prepare+0xee/0x180 [ 93.461403][ T4736] syscall_exit_to_user_mode+0x16/0x40 [ 93.466862][ T4736] do_syscall_64+0x58/0xa0 [ 93.471274][ T4736] ? clear_bhb_loop+0x30/0x80 [ 93.475945][ T4736] ? clear_bhb_loop+0x30/0x80 [ 93.480614][ T4736] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.486499][ T4736] RIP: 0033:0x7f90889c5559 [ 93.490904][ T4736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.510497][ T4736] RSP: 002b:00007f9086c1c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 93.518900][ T4736] RAX: fffffffffffffe00 RBX: 00007f9088c4bfa8 RCX: 00007f90889c5559 [ 93.526860][ T4736] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9088c4bfa8 [ 93.534818][ T4736] RBP: 00007f9088c4bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 93.542775][ T4736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.550729][ T4736] R13: 00007f9088c4c038 R14: 00007ffe92fd27c0 R15: 00007ffe92fd28a8 [ 93.558696][ T4736] [ 93.663333][ T4740] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.679966][ T4740] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.744095][ T4756] loop4: detected capacity change from 0 to 8 [ 93.932879][ T4756] SQUASHFS error: Unable to read inode 0x11f [ 94.625410][ T4768] netlink: 'syz.1.127': attribute type 1 has an invalid length. [ 94.639595][ T4770] loop0: detected capacity change from 0 to 128 [ 94.666554][ T4771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 94.724986][ T4770] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 94.798506][ T4770] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.299534][ T4784] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 95.749947][ T4787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.132'. [ 97.982416][ T25] audit: type=1800 audit(1792768471.622:11): pid=4802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.135" name="memory_backed" dev="configfs" ino=34827 res=0 errno=0 [ 98.111702][ T25] audit: type=1800 audit(1792768471.752:12): pid=4802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.135" name="zoned" dev="configfs" ino=34828 res=0 errno=0 [ 98.138251][ T4336] Bluetooth: hci6: Frame reassembly failed (-84) [ 98.169077][ T25] audit: type=1800 audit(1792768471.812:13): pid=4802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.135" name="power" dev="configfs" ino=33736 res=0 errno=0 [ 98.237800][ T4818] FAULT_INJECTION: forcing a failure. [ 98.237800][ T4818] name failslab, interval 1, probability 0, space 0, times 0 [ 98.251008][ T4818] CPU: 1 PID: 4818 Comm: syz.2.140 Not tainted syzkaller #0 [ 98.258307][ T4818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 98.268358][ T4818] Call Trace: [ 98.271620][ T4818] [ 98.274541][ T4818] dump_stack_lvl+0x188/0x250 [ 98.279205][ T4818] ? show_regs_print_info+0x20/0x20 [ 98.284389][ T4818] ? load_image+0x410/0x410 [ 98.288876][ T4818] ? __might_sleep+0xf0/0xf0 [ 98.293454][ T4818] ? __lock_acquire+0x7d40/0x7d40 [ 98.298463][ T4818] should_fail+0x383/0x4b0 [ 98.302866][ T4818] should_failslab+0x5/0x20 [ 98.307355][ T4818] slab_pre_alloc_hook+0x51/0xc0 [ 98.312296][ T4818] kmem_cache_alloc_trace+0x47/0x290 [ 98.317565][ T4818] ? snd_rawmidi_open+0x33e/0xae0 [ 98.322592][ T4818] ? snd_card_file_add+0x210/0x240 [ 98.327692][ T4818] snd_rawmidi_open+0x33e/0xae0 [ 98.332526][ T4818] ? soundcore_open+0x270/0x4b0 [ 98.337361][ T4818] ? snd_rawmidi_ioctl_compat+0x6e0/0x6e0 [ 98.343073][ T4818] chrdev_open+0x585/0x5f0 [ 98.347480][ T4818] ? cd_forget+0x160/0x160 [ 98.351886][ T4818] ? fsnotify_perm+0x3a7/0x560 [ 98.356641][ T4818] ? cd_forget+0x160/0x160 [ 98.361046][ T4818] do_dentry_open+0x7f7/0xf90 [ 98.365713][ T4818] ? vfs_open+0x2b/0x80 [ 98.369857][ T4818] path_openat+0x2718/0x2fb0 [ 98.374465][ T4818] ? __kasan_slab_alloc+0xa9/0xc0 [ 98.379509][ T4818] ? do_filp_open+0x400/0x400 [ 98.384209][ T4818] do_filp_open+0x1df/0x400 [ 98.388729][ T4818] ? vfs_tmpfile+0x300/0x300 [ 98.393337][ T4818] ? _raw_spin_unlock+0x24/0x40 [ 98.398170][ T4818] ? alloc_fd+0x59e/0x650 [ 98.402489][ T4818] do_sys_openat2+0x14b/0x500 [ 98.407150][ T4818] ? __lock_acquire+0x7d40/0x7d40 [ 98.412166][ T4818] ? do_sys_open+0xe0/0xe0 [ 98.416607][ T4818] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 98.422615][ T4818] ? lock_chain_count+0x20/0x20 [ 98.427464][ T4818] __x64_sys_openat+0x135/0x160 [ 98.432319][ T4818] do_syscall_64+0x4c/0xa0 [ 98.436733][ T4818] ? clear_bhb_loop+0x30/0x80 [ 98.441414][ T4818] ? clear_bhb_loop+0x30/0x80 [ 98.446081][ T4818] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.451972][ T4818] RIP: 0033:0x7f9088985d8e [ 98.456373][ T4818] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 98.475959][ T4818] RSP: 002b:00007f9086c1bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 98.484356][ T4818] RAX: ffffffffffffffda RBX: 00007f9086c1c6c0 RCX: 00007f9088985d8e [ 98.492308][ T4818] RDX: 0000000000189083 RSI: 00007f9086c1bc00 RDI: ffffffffffffff9c [ 98.500264][ T4818] RBP: 00007f9086c1bc00 R08: 0000000000000000 R09: 0000000000000000 [ 98.508231][ T4818] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 98.516189][ T4818] R13: 00007f9088c4c038 R14: 00007f9088c4bfa0 R15: 00007ffe92fd28a8 [ 98.524164][ T4818] [ 98.610875][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.621422][ T4820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.543024][ T4826] loop1: detected capacity change from 0 to 128 [ 99.701049][ T4826] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 99.715062][ T4826] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.931194][ T2238] Bluetooth: hci5: command 0x1003 tx timeout [ 100.937849][ T4193] Bluetooth: hci5: sending frame failed (-49) [ 100.954663][ T1108] Bluetooth: hci6: command 0x1003 tx timeout [ 100.972703][ T4193] Bluetooth: hci6: sending frame failed (-49) [ 101.026161][ T4834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'. [ 102.262647][ T4847] FAULT_INJECTION: forcing a failure. [ 102.262647][ T4847] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 102.276934][ T4847] CPU: 1 PID: 4847 Comm: syz.0.149 Not tainted syzkaller #0 [ 102.284231][ T4847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 102.294286][ T4847] Call Trace: [ 102.297565][ T4847] [ 102.300491][ T4847] dump_stack_lvl+0x188/0x250 [ 102.305177][ T4847] ? show_regs_print_info+0x20/0x20 [ 102.310400][ T4847] ? load_image+0x410/0x410 [ 102.314907][ T4847] ? __lock_acquire+0x7d40/0x7d40 [ 102.319940][ T4847] should_fail+0x383/0x4b0 [ 102.324363][ T4847] prepare_alloc_pages+0x1e3/0x5b0 [ 102.329482][ T4847] __alloc_pages+0x11b/0x480 [ 102.334079][ T4847] ? zone_statistics+0x170/0x170 [ 102.339024][ T4847] kmalloc_large_node+0x7d/0x1a0 [ 102.343945][ T4847] __kmalloc_node+0x21e/0x3a0 [ 102.348602][ T4847] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 102.354477][ T4847] kvmalloc_node+0x84/0x130 [ 102.358963][ T4847] snd_seq_pool_init+0x68/0x340 [ 102.363800][ T4847] snd_seq_ioctl_set_client_pool+0x2bb/0x710 [ 102.369761][ T4847] snd_seq_oss_writeq_new+0x201/0x340 [ 102.375113][ T4847] ? lockdep_softirqs_off+0x430/0x430 [ 102.380466][ T4847] ? snd_seq_oss_readq_info_read+0xd0/0xd0 [ 102.386271][ T4847] ? __raw_spin_lock_init+0x41/0x100 [ 102.391581][ T4847] snd_seq_oss_open+0x868/0xf00 [ 102.396421][ T4847] ? snd_seq_oss_delete_client+0x50/0x50 [ 102.402051][ T4847] ? __mutex_lock_common+0x435/0x2400 [ 102.407411][ T4847] ? mutex_lock_io_nested+0x60/0x60 [ 102.412592][ T4847] ? snd_seq_oss_process_event+0x2910/0x2910 [ 102.418550][ T4847] ? async_call_lookup_ports+0x10/0x10 [ 102.423986][ T4847] ? do_raw_spin_unlock+0x11d/0x230 [ 102.429166][ T4847] odev_open+0x63/0x90 [ 102.433213][ T4847] chrdev_open+0x585/0x5f0 [ 102.437628][ T4847] ? cd_forget+0x160/0x160 [ 102.442025][ T4847] ? fsnotify_perm+0x3a7/0x560 [ 102.446769][ T4847] ? cd_forget+0x160/0x160 [ 102.451162][ T4847] do_dentry_open+0x7f7/0xf90 [ 102.455834][ T4847] ? vfs_open+0x2b/0x80 [ 102.459971][ T4847] path_openat+0x2718/0x2fb0 [ 102.464553][ T4847] ? __kasan_slab_alloc+0xa9/0xc0 [ 102.469563][ T4847] ? do_filp_open+0x400/0x400 [ 102.474230][ T4847] do_filp_open+0x1df/0x400 [ 102.478714][ T4847] ? vfs_tmpfile+0x300/0x300 [ 102.483292][ T4847] ? _raw_spin_unlock+0x24/0x40 [ 102.488118][ T4847] ? alloc_fd+0x59e/0x650 [ 102.492437][ T4847] do_sys_openat2+0x14b/0x500 [ 102.497095][ T4847] ? __lock_acquire+0x7d40/0x7d40 [ 102.502101][ T4847] ? do_sys_open+0xe0/0xe0 [ 102.506498][ T4847] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 102.512459][ T4847] ? lock_chain_count+0x20/0x20 [ 102.517294][ T4847] __x64_sys_openat+0x135/0x160 [ 102.522131][ T4847] do_syscall_64+0x4c/0xa0 [ 102.526525][ T4847] ? clear_bhb_loop+0x30/0x80 [ 102.531180][ T4847] ? clear_bhb_loop+0x30/0x80 [ 102.535849][ T4847] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.541778][ T4847] RIP: 0033:0x7fa229349559 [ 102.546182][ T4847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.565771][ T4847] RSP: 002b:00007fa2275a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 102.574173][ T4847] RAX: ffffffffffffffda RBX: 00007fa2295cffa0 RCX: 00007fa229349559 [ 102.582122][ T4847] RDX: 0000000000080a02 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 102.590075][ T4847] RBP: 00007fa2293e0b20 R08: 0000000000000000 R09: 0000000000000000 [ 102.598028][ T4847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.605979][ T4847] R13: 00007fa2295d0038 R14: 00007fa2295cffa0 R15: 00007ffdac8c9368 [ 102.613939][ T4847] [ 102.686190][ T25] audit: type=1800 audit(1792768476.332:14): pid=4850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.150" name="memory_backed" dev="configfs" ino=34905 res=0 errno=0 [ 102.738955][ T25] audit: type=1800 audit(1792768476.352:15): pid=4850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.150" name="zoned" dev="configfs" ino=34906 res=0 errno=0 [ 102.773838][ T25] audit: type=1800 audit(1792768476.362:16): pid=4850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.150" name="power" dev="configfs" ino=34911 res=0 errno=0 [ 102.814572][ T4855] loop1: detected capacity change from 0 to 8 [ 102.839235][ T4855] SQUASHFS error: Unable to read inode 0x11f [ 103.032099][ T1327] Bluetooth: hci6: command 0x1001 tx timeout [ 103.053437][ T4193] Bluetooth: hci6: sending frame failed (-49) [ 103.060570][ T1327] Bluetooth: hci5: command 0x1001 tx timeout [ 103.749446][ T4193] Bluetooth: hci5: sending frame failed (-49) [ 104.736989][ T25] audit: type=1800 audit(1792768478.382:17): pid=4868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.155" name="memory_backed" dev="configfs" ino=34944 res=0 errno=0 [ 104.740435][ T1108] hid-generic 0003:0001:0001.0002: No inputs registered, leaving [ 104.815935][ T1108] hid-generic 0003:0001:0001.0002: hidraw0: USB HID v0.01 Mouse [syz1] on syz0 [ 104.828402][ T25] audit: type=1800 audit(1792768478.402:18): pid=4868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.155" name="power" dev="configfs" ino=34949 res=0 errno=0 [ 104.906715][ T4869] fido_id[4869]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 104.931598][ T4873] loop1: detected capacity change from 0 to 128 [ 104.939762][ T4871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 105.103814][ T13] Bluetooth: hci6: command 0x1009 tx timeout [ 105.863401][ T1108] Bluetooth: hci5: command 0x1009 tx timeout [ 105.900255][ T4873] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 105.918447][ T4882] device bridge1 entered promiscuous mode [ 105.926948][ T4882] team0: Port device bridge1 added [ 105.937073][ T4882] bridge0: port 3(team0) entered blocking state [ 105.943264][ T4873] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.954558][ T4882] bridge0: port 3(team0) entered disabled state [ 106.623990][ T4882] device team0 entered promiscuous mode [ 106.629581][ T4882] device team_slave_0 entered promiscuous mode [ 106.641646][ T4882] device team_slave_1 entered promiscuous mode [ 106.651366][ T4882] bridge0: port 3(team0) entered blocking state [ 106.657899][ T4882] bridge0: port 3(team0) entered forwarding state [ 106.848020][ T4891] loop0: detected capacity change from 0 to 8 [ 106.872429][ T4891] SQUASHFS error: Unable to read inode 0x11f [ 106.900843][ T25] audit: type=1800 audit(1792768480.542:19): pid=4893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.162" name="memory_backed" dev="configfs" ino=35872 res=0 errno=0 [ 106.981132][ T25] audit: type=1800 audit(1792768480.572:20): pid=4893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.162" name="zoned" dev="configfs" ino=35873 res=0 errno=0 [ 107.110666][ T25] audit: type=1800 audit(1792768480.572:21): pid=4893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.162" name="power" dev="configfs" ino=35875 res=0 errno=0 [ 108.371184][ T4909] FAULT_INJECTION: forcing a failure. [ 108.371184][ T4909] name failslab, interval 1, probability 0, space 0, times 0 [ 108.456967][ T4914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'. [ 108.468648][ T4909] CPU: 0 PID: 4909 Comm: syz.0.169 Not tainted syzkaller #0 [ 108.475959][ T4909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.486025][ T4909] Call Trace: [ 108.489286][ T4909] [ 108.492196][ T4909] dump_stack_lvl+0x188/0x250 [ 108.496858][ T4909] ? show_regs_print_info+0x20/0x20 [ 108.502052][ T4909] ? load_image+0x410/0x410 [ 108.506538][ T4909] ? __might_sleep+0xf0/0xf0 [ 108.511108][ T4909] ? __lock_acquire+0x7d40/0x7d40 [ 108.516117][ T4909] should_fail+0x383/0x4b0 [ 108.520514][ T4909] should_failslab+0x5/0x20 [ 108.524996][ T4909] slab_pre_alloc_hook+0x51/0xc0 [ 108.529917][ T4909] kmem_cache_alloc_trace+0x47/0x290 [ 108.535178][ T4909] ? kvm_dev_ioctl+0x1bfe/0x20a0 [ 108.540102][ T4909] kvm_dev_ioctl+0x1bfe/0x20a0 [ 108.544859][ T4909] ? hardware_enable_nolock+0x130/0x130 [ 108.550396][ T4909] ? bpf_lsm_file_ioctl+0x5/0x10 [ 108.555328][ T4909] ? security_file_ioctl+0x7c/0xa0 [ 108.560451][ T4909] ? hardware_enable_nolock+0x130/0x130 [ 108.565994][ T4909] __se_sys_ioctl+0xfa/0x170 [ 108.570565][ T4909] do_syscall_64+0x4c/0xa0 [ 108.574976][ T4909] ? clear_bhb_loop+0x30/0x80 [ 108.579654][ T4909] ? clear_bhb_loop+0x30/0x80 [ 108.584329][ T4909] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.590204][ T4909] RIP: 0033:0x7fa229349559 [ 108.594601][ T4909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.614186][ T4909] RSP: 002b:00007fa2275a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.622578][ T4909] RAX: ffffffffffffffda RBX: 00007fa2295cffa0 RCX: 00007fa229349559 [ 108.630529][ T4909] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 108.638485][ T4909] RBP: 00007fa2293e0b20 R08: 0000000000000000 R09: 0000000000000000 [ 108.646436][ T4909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.654388][ T4909] R13: 00007fa2295d0038 R14: 00007fa2295cffa0 R15: 00007ffdac8c9368 [ 108.662350][ T4909] [ 108.700373][ T25] audit: type=1326 audit(1792768482.342:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4908 comm="syz.1.168" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4243b71559 code=0x7ffc0000 [ 108.702315][ T25] audit: type=1326 audit(1792768482.342:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4908 comm="syz.1.168" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4243b71559 code=0x7ffc0000 [ 109.824898][ T25] audit: type=1800 audit(1792768483.472:24): pid=4937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.175" name="memory_backed" dev="configfs" ino=35991 res=0 errno=0 [ 109.879807][ T4940] 9pnet_virtio: no channels available for device syz [ 109.916770][ T25] audit: type=1800 audit(1792768483.502:25): pid=4937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.175" name="zoned" dev="configfs" ino=35996 res=0 errno=0 [ 110.989427][ T4949] exFAT-fs (nbd3): mounting with "discard" option, but the device does not support discard [ 111.004216][ T1092] block nbd3: Attempted send on invalid socket [ 111.012201][ T1092] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.024586][ T4949] exFAT-fs (nbd3): unable to read boot sector [ 111.030731][ T4949] exFAT-fs (nbd3): failed to read boot sector [ 111.062835][ T4950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 111.082698][ T4949] exFAT-fs (nbd3): failed to recognize exfat type [ 111.462951][ T25] audit: type=1800 audit(1792768483.512:26): pid=4937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.175" name="power" dev="configfs" ino=35998 res=0 errno=0 [ 112.295069][ T4946] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.329918][ T4957] FAULT_INJECTION: forcing a failure. [ 112.329918][ T4957] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 112.653889][ T4957] CPU: 1 PID: 4957 Comm: syz.1.182 Not tainted syzkaller #0 [ 112.661217][ T4957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 112.671256][ T4957] Call Trace: [ 112.674520][ T4957] [ 112.677439][ T4957] dump_stack_lvl+0x188/0x250 [ 112.682121][ T4957] ? show_regs_print_info+0x20/0x20 [ 112.687303][ T4957] ? load_image+0x410/0x410 [ 112.691790][ T4957] ? __lock_acquire+0x7d40/0x7d40 [ 112.696801][ T4957] ? __kasan_kmalloc+0xc6/0xe0 [ 112.701545][ T4957] ? __kasan_kmalloc+0xaf/0xe0 [ 112.706292][ T4957] should_fail+0x383/0x4b0 [ 112.710695][ T4957] prepare_alloc_pages+0x1e3/0x5b0 [ 112.715794][ T4957] __alloc_pages+0x11b/0x480 [ 112.720368][ T4957] ? zone_statistics+0x170/0x170 [ 112.725289][ T4957] ? alloc_pages+0x452/0x560 [ 112.729863][ T4957] alloc_pages_exact+0x35/0x70 [ 112.734609][ T4957] snd_pcm_attach_substream+0x61b/0xac0 [ 112.740139][ T4957] snd_pcm_open_substream+0xb7/0x2570 [ 112.745517][ T4957] ? snd_pcm_drop+0x250/0x250 [ 112.750189][ T4957] snd_pcm_oss_open+0x1084/0x1e60 [ 112.755225][ T4957] ? snd_pcm_oss_mmap+0x440/0x440 [ 112.760232][ T4957] ? soundcore_open+0x270/0x4b0 [ 112.765063][ T4957] ? __lock_acquire+0x7d40/0x7d40 [ 112.770071][ T4957] ? sched_dynamic_update+0x210/0x210 [ 112.775427][ T4957] ? do_raw_spin_unlock+0x11d/0x230 [ 112.780618][ T4957] chrdev_open+0x585/0x5f0 [ 112.785018][ T4957] ? cd_forget+0x160/0x160 [ 112.789416][ T4957] ? fsnotify_perm+0x3a7/0x560 [ 112.794160][ T4957] ? cd_forget+0x160/0x160 [ 112.798561][ T4957] do_dentry_open+0x7f7/0xf90 [ 112.803219][ T4957] ? vfs_open+0x2b/0x80 [ 112.807358][ T4957] path_openat+0x2718/0x2fb0 [ 112.811944][ T4957] ? __kasan_slab_alloc+0xa9/0xc0 [ 112.816954][ T4957] ? do_filp_open+0x400/0x400 [ 112.821625][ T4957] do_filp_open+0x1df/0x400 [ 112.826111][ T4957] ? vfs_tmpfile+0x300/0x300 [ 112.830691][ T4957] ? _raw_spin_unlock+0x24/0x40 [ 112.835522][ T4957] ? alloc_fd+0x59e/0x650 [ 112.839836][ T4957] do_sys_openat2+0x14b/0x500 [ 112.844491][ T4957] ? __lock_acquire+0x7d40/0x7d40 [ 112.849497][ T4957] ? do_sys_open+0xe0/0xe0 [ 112.853891][ T4957] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 112.859851][ T4957] ? lock_chain_count+0x20/0x20 [ 112.864684][ T4957] __x64_sys_openat+0x135/0x160 [ 112.869516][ T4957] do_syscall_64+0x4c/0xa0 [ 112.873915][ T4957] ? clear_bhb_loop+0x30/0x80 [ 112.878590][ T4957] ? clear_bhb_loop+0x30/0x80 [ 112.883262][ T4957] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.889135][ T4957] RIP: 0033:0x7f4243b71559 [ 112.893539][ T4957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.913125][ T4957] RSP: 002b:00007f4241dc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 112.921534][ T4957] RAX: ffffffffffffffda RBX: 00007f4243df7fa0 RCX: 00007f4243b71559 [ 112.929489][ T4957] RDX: 0000000000101000 RSI: 0000200000000700 RDI: ffffffffffffff9c [ 112.937451][ T4957] RBP: 00007f4243c08b20 R08: 0000000000000000 R09: 0000000000000000 [ 112.945404][ T4957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.953353][ T4957] R13: 00007f4243df8038 R14: 00007f4243df7fa0 R15: 00007ffd1b86fb98 [ 112.961311][ T4957] [ 112.964345][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.426147][ T4971] x_tables: duplicate underflow at hook 3 [ 113.580713][ T145] Bluetooth: hci5: Frame reassembly failed (-84) [ 114.431990][ T4971] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 114.466651][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020be4000: rx timeout, send abort [ 114.681147][ T25] audit: type=1800 audit(1792768488.322:27): pid=4979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.189" name="memory_backed" dev="configfs" ino=36116 res=0 errno=0 [ 114.745335][ T25] audit: type=1800 audit(1792768488.352:28): pid=4979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.189" name="zoned" dev="configfs" ino=36119 res=0 errno=0 [ 114.839162][ T25] audit: type=1800 audit(1792768488.362:29): pid=4979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.189" name="power" dev="configfs" ino=36121 res=0 errno=0 [ 114.974146][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ed18400: rx timeout, send abort [ 115.660286][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ed18400: abort rx timeout. Force session deactivation [ 115.673183][ T2238] Bluetooth: hci5: command 0x1003 tx timeout [ 115.698280][ T147] Bluetooth: hci5: sending frame failed (-49) [ 116.296497][ T5007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 117.009742][ T5011] FAULT_INJECTION: forcing a failure. [ 117.009742][ T5011] name failslab, interval 1, probability 0, space 0, times 0 [ 117.041907][ T5011] CPU: 0 PID: 5011 Comm: syz.2.201 Not tainted syzkaller #0 [ 117.049204][ T5011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 117.059264][ T5011] Call Trace: [ 117.062544][ T5011] [ 117.065477][ T5011] dump_stack_lvl+0x188/0x250 [ 117.070172][ T5011] ? show_regs_print_info+0x20/0x20 [ 117.075379][ T5011] ? load_image+0x410/0x410 [ 117.079867][ T25] audit: type=1800 audit(1792768490.682:30): pid=5017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.202" name="memory_backed" dev="configfs" ino=35200 res=0 errno=0 [ 117.080721][ T25] audit: type=1800 audit(1792768490.682:31): pid=5017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.202" name="zoned" dev="configfs" ino=35201 res=0 errno=0 [ 117.100427][ T5011] ? __might_sleep+0xf0/0xf0 [ 117.100485][ T5011] ? __lock_acquire+0x7d40/0x7d40 [ 117.100512][ T5011] should_fail+0x383/0x4b0 [ 117.100536][ T5011] should_failslab+0x5/0x20 [ 117.100552][ T5011] slab_pre_alloc_hook+0x51/0xc0 [ 117.100573][ T5011] __kmalloc_node+0x6d/0x3a0 [ 117.100589][ T5011] ? __vmalloc_node_range+0x2dd/0x8b0 [ 117.153651][ T5011] __vmalloc_node_range+0x2dd/0x8b0 [ 117.158853][ T5011] ? n_tty_open+0x19/0x150 [ 117.163258][ T5011] vzalloc+0x75/0x80 [ 117.167139][ T5011] ? n_tty_open+0x19/0x150 [ 117.171536][ T5011] n_tty_open+0x19/0x150 [ 117.175761][ T5011] tty_ldisc_setup+0xbf/0x250 [ 117.180420][ T5011] tty_init_dev+0x239/0x470 [ 117.184904][ T5011] ptmx_open+0xe1/0x2c0 [ 117.189036][ T5011] ? pty_start+0x140/0x140 [ 117.193428][ T5011] chrdev_open+0x585/0x5f0 [ 117.197829][ T5011] ? cd_forget+0x160/0x160 [ 117.202223][ T5011] ? fsnotify_perm+0x3a7/0x560 [ 117.206966][ T5011] ? cd_forget+0x160/0x160 [ 117.211360][ T5011] do_dentry_open+0x7f7/0xf90 [ 117.216015][ T5011] ? vfs_open+0x2b/0x80 [ 117.220151][ T5011] path_openat+0x2718/0x2fb0 [ 117.224733][ T5011] ? __kasan_slab_alloc+0xa9/0xc0 [ 117.229742][ T5011] ? do_filp_open+0x400/0x400 [ 117.234404][ T5011] do_filp_open+0x1df/0x400 [ 117.238888][ T5011] ? vfs_tmpfile+0x300/0x300 [ 117.243465][ T5011] ? _raw_spin_unlock+0x24/0x40 [ 117.248292][ T5011] ? alloc_fd+0x59e/0x650 [ 117.252606][ T5011] do_sys_openat2+0x14b/0x500 [ 117.257266][ T5011] ? __lock_acquire+0x7d40/0x7d40 [ 117.262273][ T5011] ? do_sys_open+0xe0/0xe0 [ 117.266666][ T5011] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 117.272625][ T5011] ? lock_chain_count+0x20/0x20 [ 117.277456][ T5011] __x64_sys_openat+0x135/0x160 [ 117.282289][ T5011] do_syscall_64+0x4c/0xa0 [ 117.286683][ T5011] ? clear_bhb_loop+0x30/0x80 [ 117.291337][ T5011] ? clear_bhb_loop+0x30/0x80 [ 117.295991][ T5011] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.301862][ T5011] RIP: 0033:0x7f90889c5559 [ 117.306256][ T5011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.325838][ T5011] RSP: 002b:00007f9086c1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 117.334227][ T5011] RAX: ffffffffffffffda RBX: 00007f9088c4bfa0 RCX: 00007f90889c5559 [ 117.342176][ T5011] RDX: 0000000000121301 RSI: 000020000001d9c0 RDI: ffffffffffffff9c [ 117.350123][ T5011] RBP: 00007f9088a5cb20 R08: 0000000000000000 R09: 0000000000000000 [ 117.358073][ T5011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.366033][ T5011] R13: 00007f9088c4c038 R14: 00007f9088c4bfa0 R15: 00007ffe92fd28a8 [ 117.374005][ T5011] [ 117.425129][ T5011] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 117.586186][ T25] audit: type=1800 audit(1792768491.202:32): pid=5017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.202" name="power" dev="configfs" ino=35202 res=0 errno=0 [ 117.743898][ T4263] Bluetooth: hci5: command 0x1001 tx timeout [ 117.753794][ T4193] Bluetooth: hci5: sending frame failed (-49) [ 117.770033][ T5020] FAULT_INJECTION: forcing a failure. [ 117.770033][ T5020] name failslab, interval 1, probability 0, space 0, times 0 [ 117.813991][ T1327] Bluetooth: hci6: command 0x1003 tx timeout [ 117.820150][ T4193] Bluetooth: hci6: sending frame failed (-49) [ 117.921378][ T5020] CPU: 1 PID: 5020 Comm: syz.0.203 Not tainted syzkaller #0 [ 117.928710][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 117.938777][ T5020] Call Trace: [ 117.942081][ T5020] [ 117.945024][ T5020] dump_stack_lvl+0x188/0x250 [ 117.949721][ T5020] ? show_regs_print_info+0x20/0x20 [ 117.954936][ T5020] ? load_image+0x410/0x410 [ 117.959467][ T5020] should_fail+0x383/0x4b0 [ 117.963903][ T5020] should_failslab+0x5/0x20 [ 117.968415][ T5020] slab_pre_alloc_hook+0x51/0xc0 [ 117.973361][ T5020] ? anon_vma_clone+0xbc/0x4d0 [ 117.978119][ T5020] kmem_cache_alloc+0x3d/0x280 [ 117.982892][ T5020] anon_vma_clone+0xbc/0x4d0 [ 117.987472][ T5020] __split_vma+0x1ab/0x410 [ 117.991887][ T5020] __do_munmap+0x38a/0xe10 [ 117.996284][ T5020] ? mremap_userfaultfd_prep+0xd1/0x1b0 [ 118.001814][ T5020] move_vma+0x770/0xbc0 [ 118.005969][ T5020] ? vma_expandable+0x110/0x110 [ 118.010826][ T5020] ? cap_mmap_addr+0x153/0x2c0 [ 118.015600][ T5020] ? bpf_lsm_file_free_security+0x10/0x10 [ 118.021327][ T5020] ? security_mmap_addr+0x6e/0x90 [ 118.026367][ T5020] ? get_unmapped_area+0x2f0/0x360 [ 118.031509][ T5020] mremap_to+0x556/0x6b0 [ 118.035768][ T5020] __se_sys_mremap+0x412/0x950 [ 118.040557][ T5020] ? __x64_sys_mremap+0xc0/0xc0 [ 118.045419][ T5020] ? lock_chain_count+0x20/0x20 [ 118.050285][ T5020] ? lockdep_hardirqs_on+0x94/0x140 [ 118.055488][ T5020] ? __x64_sys_mremap+0x1c/0xc0 [ 118.060346][ T5020] do_syscall_64+0x4c/0xa0 [ 118.064764][ T5020] ? clear_bhb_loop+0x30/0x80 [ 118.069456][ T5020] ? clear_bhb_loop+0x30/0x80 [ 118.074140][ T5020] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.080041][ T5020] RIP: 0033:0x7fa229349559 [ 118.084459][ T5020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.104065][ T5020] RSP: 002b:00007fa2275a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 118.112482][ T5020] RAX: ffffffffffffffda RBX: 00007fa2295cffa0 RCX: 00007fa229349559 [ 118.120453][ T5020] RDX: 0000000000400000 RSI: 0000000000002000 RDI: 0000200000097000 [ 118.128406][ T5020] RBP: 00007fa2293e0b20 R08: 0000200000bff000 R09: 0000000000000000 [ 118.136358][ T5020] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 118.144314][ T5020] R13: 00007fa2295d0038 R14: 00007fa2295cffa0 R15: 00007ffdac8c9368 [ 118.152284][ T5020] [ 118.353792][ T1108] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 118.643795][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 119.443847][ T1108] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 119.453895][ T1108] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.473761][ T1108] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.493759][ T1108] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.503973][ T1108] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.519887][ T1108] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 119.533749][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.814875][ T4266] Bluetooth: hci5: command 0x1009 tx timeout [ 119.824365][ T1108] usb 3-1: GET_CAPABILITIES returned 0 [ 119.831038][ T1108] usbtmc 3-1:16.0: can't read capabilities [ 119.904426][ T1108] Bluetooth: hci6: command 0x1001 tx timeout [ 119.911468][ T4193] Bluetooth: hci6: sending frame failed (-49) [ 120.032924][ T4263] usb 3-1: USB disconnect, device number 2 [ 121.727975][ T1230] Bluetooth: hci7: Frame reassembly failed (-84) [ 121.817521][ T5044] FAULT_INJECTION: forcing a failure. [ 121.817521][ T5044] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 121.831648][ T5044] CPU: 1 PID: 5044 Comm: syz.2.210 Not tainted syzkaller #0 [ 121.838940][ T5044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 121.848978][ T5044] Call Trace: [ 121.852244][ T5044] [ 121.855155][ T5044] dump_stack_lvl+0x188/0x250 [ 121.859817][ T5044] ? show_regs_print_info+0x20/0x20 [ 121.864993][ T5044] ? load_image+0x410/0x410 [ 121.869485][ T5044] ? uncharge_page+0x490/0x490 [ 121.874235][ T5044] should_fail+0x383/0x4b0 [ 121.878657][ T5044] prepare_alloc_pages+0x1e3/0x5b0 [ 121.883783][ T5044] __alloc_pages+0x11b/0x480 [ 121.888370][ T5044] ? zone_statistics+0x170/0x170 [ 121.893292][ T5044] ? rcu_lock_acquire+0x30/0x30 [ 121.898132][ T5044] ? alloc_pages+0x452/0x560 [ 121.902724][ T5044] __get_free_pages+0x8/0x30 [ 121.907301][ T5044] __tlb_remove_page_size+0x1f2/0x3f0 [ 121.912682][ T5044] unmap_page_range+0xfcf/0x2410 [ 121.917650][ T5044] unmap_vmas+0x131/0x250 [ 121.921979][ T5044] ? unmap_page_range+0x2410/0x2410 [ 121.927175][ T5044] ? __mutex_lock_common+0x435/0x2400 [ 121.932554][ T5044] ? exit_mm_release+0x16/0x30 [ 121.937330][ T5044] exit_mmap+0x3b9/0x640 [ 121.941581][ T5044] ? vm_brk+0x20/0x20 [ 121.945577][ T5044] ? uprobe_clear_state+0x2f6/0x460 [ 121.950782][ T5044] __mmput+0x115/0x390 [ 121.954853][ T5044] exit_mm+0x632/0x7b0 [ 121.958921][ T5044] ? perf_pmu_migrate_context+0xb70/0xb70 [ 121.964649][ T5044] ? do_exit+0x2110/0x2110 [ 121.969065][ T5044] ? __ia32_sys_timer_delete+0x40/0x40 [ 121.973782][ T4315] Bluetooth: hci6: command 0x1009 tx timeout [ 121.974551][ T5044] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 121.985963][ T5044] ? tty_audit_exit+0x149/0x1f0 [ 121.990819][ T5044] do_exit+0x5b8/0x2110 [ 121.994982][ T5044] ? put_task_struct+0x80/0x80 [ 121.999745][ T5044] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 122.005733][ T5044] ? _raw_spin_lock_irq+0xb7/0xf0 [ 122.010765][ T5044] do_group_exit+0x12c/0x2f0 [ 122.015357][ T5044] ? lockdep_hardirqs_on+0x94/0x140 [ 122.020561][ T5044] get_signal+0x7eb/0x12e0 [ 122.024993][ T5044] arch_do_signal_or_restart+0xe6/0x12a0 [ 122.030642][ T5044] ? futex_exit_release+0x1c0/0x1c0 [ 122.035844][ T5044] ? get_sigframe_size+0x10/0x10 [ 122.040790][ T5044] ? __context_tracking_exit+0x4c/0x80 [ 122.046257][ T5044] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 122.052246][ T5044] ? exit_to_user_mode_loop+0x3b/0x130 [ 122.057706][ T5044] exit_to_user_mode_loop+0x9e/0x130 [ 122.062992][ T5044] exit_to_user_mode_prepare+0xee/0x180 [ 122.068544][ T5044] syscall_exit_to_user_mode+0x16/0x40 [ 122.074010][ T5044] do_syscall_64+0x58/0xa0 [ 122.078424][ T5044] ? clear_bhb_loop+0x30/0x80 [ 122.083105][ T5044] ? clear_bhb_loop+0x30/0x80 [ 122.087782][ T5044] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.093675][ T5044] RIP: 0033:0x7f90889c5559 [ 122.098091][ T5044] Code: Unable to access opcode bytes at RIP 0x7f90889c552f. [ 122.105450][ T5044] RSP: 002b:00007f9086c1c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.115174][ T5044] RAX: 0000000000000001 RBX: 00007f9088c4bfa8 RCX: 00007f90889c5559 [ 122.115191][ T5044] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9088c4bfac [ 122.115203][ T5044] RBP: 00007f9088c4bfa0 R08: 002dba4f0ecca648 R09: 0000000000000000 [ 122.115215][ T5044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.115226][ T5044] R13: 00007f9088c4c038 R14: 00007ffe92fd27c0 R15: 00007ffe92fd28a8 [ 122.115253][ T5044] [ 124.045423][ T26] Bluetooth: hci7: command 0x1003 tx timeout [ 124.155713][ T4192] Bluetooth: hci7: sending frame failed (-49) [ 124.380319][ T5059] autofs4:pid:5059:autofs_fill_super: called with bogus options [ 124.607166][ T5069] device-mapper: table: 248:4: crypt: Device lookup failed [ 124.624801][ T5069] device-mapper: ioctl: error adding target to table [ 125.114376][ T1327] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.584019][ T1327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.604392][ T1327] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.618851][ T1327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.630936][ T1327] usb 1-1: config 0 descriptor?? [ 125.894306][ T4357] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.973879][ T1327] usbhid 1-1:0.0: can't add hid device: -71 [ 125.979988][ T1327] usbhid: probe of 1-1:0.0 failed with error -71 [ 125.994794][ T1327] usb 1-1: USB disconnect, device number 2 [ 126.141212][ T5092] loop2: detected capacity change from 0 to 8 [ 126.181323][ T5092] SQUASHFS error: Unable to read inode 0x11f [ 126.214582][ T26] Bluetooth: hci7: command 0x1001 tx timeout [ 126.234214][ T147] Bluetooth: hci7: sending frame failed (-49) [ 126.436384][ T4357] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 126.467478][ T4357] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 126.488275][ T4357] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 126.866815][ T1327] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 127.096212][ T4357] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 127.106502][ T4357] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 127.154042][ T4357] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 127.183844][ T4357] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 127.424164][ T4357] usb 4-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 127.445847][ T4357] usb 4-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 127.485715][ T4357] usb 4-1: Product: syz [ 127.508596][ T4357] usb 4-1: Manufacturer: syz [ 127.530668][ T4357] usb 4-1: SerialNumber: syz [ 127.604686][ T5082] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 127.620235][ T5082] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 127.661869][ T5082] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 127.687226][ T5082] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 127.723809][ T4357] keyspan 4-1:1.0: Keyspan 1 port adapter converter detected [ 127.752404][ T4357] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 127.795864][ T5106] overlayfs: overlapping lowerdir path [ 127.811294][ T4357] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 82 [ 127.846203][ T5107] loop4: detected capacity change from 0 to 8 [ 127.876619][ T4357] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 127.883797][ T1327] usb 1-1: Using ep0 maxpacket: 32 [ 128.002587][ T4357] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 128.294285][ T4265] Bluetooth: hci7: command 0x1009 tx timeout [ 128.613830][ T1327] usb 1-1: device descriptor read/all, error -71 [ 128.843009][ T5117] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 128.859056][ T4265] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.888473][ T5117] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 128.909808][ T5118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.233'. [ 129.011259][ T1108] usb 4-1: USB disconnect, device number 2 [ 129.022881][ T1108] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 129.036739][ T1108] keyspan 4-1:1.0: device disconnected [ 129.146522][ T5125] loop4: detected capacity change from 0 to 128 [ 129.283933][ T4265] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.294478][ T4265] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 129.308539][ T5125] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.334843][ T5125] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.464549][ T4265] usb 3-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 129.498929][ T4265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 129.630557][ T4265] usb 3-1: Product: syz [ 129.694873][ T4265] usb 3-1: Manufacturer: syz [ 130.062859][ T5131] 9pnet: Insufficient options for proto=fd [ 130.284259][ T5139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.237'. [ 130.315995][ T5143] netlink: 68 bytes leftover after parsing attributes in process `syz.3.241'. [ 130.464487][ T5145] device syzkaller0 entered promiscuous mode [ 130.476233][ T5145] netlink: 92 bytes leftover after parsing attributes in process `syz.3.242'. [ 131.417353][ T5158] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 132.542722][ T5162] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 132.615423][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.621778][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.725652][ T5158] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.744656][ T4265] usb 3-1: USB disconnect, device number 3 [ 132.782133][ T5167] 9pnet: Insufficient options for proto=fd [ 132.939568][ T5179] device syzkaller0 entered promiscuous mode [ 132.945596][ T5175] device-mapper: ioctl: name not supplied when creating device [ 132.955680][ T5179] netlink: 92 bytes leftover after parsing attributes in process `syz.1.254'. [ 133.195074][ T5193] netlink: 68 bytes leftover after parsing attributes in process `syz.4.257'. [ 133.496076][ T5194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 133.563804][ T4265] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.945020][ T4265] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 133.964749][ T4265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.968731][ T5201] 9pnet: Insufficient options for proto=fd [ 133.981190][ T4265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.006961][ T4265] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 134.093840][ T4265] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 134.170887][ T4265] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 134.179434][ T4265] usb 2-1: Manufacturer: syz [ 134.205857][ T4265] usb 2-1: config 0 descriptor?? [ 134.944855][ T5217] loop4: detected capacity change from 0 to 8 [ 135.068233][ T5210] overlayfs: overlapping lowerdir path [ 135.177483][ T4265] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 135.186016][ T4265] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 135.204367][ T4265] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 135.379187][ T5235] INFO: trying to register non-static key. [ 135.385017][ T5235] The code is fine but needs lockdep annotation, or maybe [ 135.392098][ T5235] you didn't initialize this object before use? [ 135.398326][ T5235] turning off the locking correctness validator. [ 135.404623][ T5235] CPU: 0 PID: 5235 Comm: syz.4.273 Not tainted syzkaller #0 [ 135.411878][ T5235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 135.421922][ T5235] Call Trace: [ 135.425202][ T5235] [ 135.428125][ T5235] dump_stack_lvl+0x188/0x250 [ 135.432785][ T5235] ? show_regs_print_info+0x20/0x20 [ 135.437961][ T5235] ? load_image+0x410/0x410 [ 135.442455][ T5235] ? cpumask_next+0xb3/0xd0 [ 135.446947][ T5235] assign_lock_key+0x1ec/0x200 [ 135.451694][ T5235] ? SOFTIRQ_verbose+0x10/0x10 [ 135.456460][ T5235] ? mark_lock+0x94/0x320 [ 135.460790][ T5235] register_lock_class+0x21d/0x880 [ 135.465909][ T5235] ? is_dynamic_key+0x1f0/0x1f0 [ 135.468123][ T5237] 9pnet: Insufficient options for proto=fd [ 135.470771][ T5235] ? rcu_lock_release+0x5/0x20 [ 135.470796][ T5235] __lock_acquire+0x265/0x7d40 [ 135.486073][ T5235] ? __lock_acquire+0x12df/0x7d40 [ 135.491106][ T5235] ? __rwlock_init+0x140/0x140 [ 135.495868][ T5235] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 135.501753][ T5235] ? verify_lock_unused+0x140/0x140 [ 135.506948][ T5235] ? __might_sleep+0xf0/0xf0 [ 135.511527][ T5235] ? __might_fault+0xb7/0x110 [ 135.516190][ T5235] lock_acquire+0x19f/0x400 [ 135.520680][ T5235] ? gsmld_write+0x57/0x120 [ 135.525168][ T5235] ? __might_fault+0xb3/0x110 [ 135.529828][ T5235] ? read_lock_is_recursive+0x10/0x10 [ 135.535181][ T5235] ? _copy_from_iter+0x36f/0x1160 [ 135.540190][ T5235] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 135.545629][ T5235] ? lockdep_hardirqs_off+0x70/0x100 [ 135.550911][ T5235] _raw_spin_lock_irqsave+0xb0/0x100 [ 135.556196][ T5235] ? gsmld_write+0x57/0x120 [ 135.560695][ T5235] ? _raw_spin_lock+0x40/0x40 [ 135.565366][ T5235] ? __virt_addr_valid+0x3c6/0x470 [ 135.570475][ T5235] gsmld_write+0x57/0x120 [ 135.574792][ T5235] file_tty_write+0x50c/0x8a0 [ 135.579458][ T5235] ? gsmld_read+0x10/0x10 [ 135.583776][ T5235] do_iter_readv_writev+0x47d/0x5f0 [ 135.588967][ T5235] ? aa_path_link+0x8a0/0x8a0 [ 135.593630][ T5235] ? generic_file_rw_checks+0x280/0x280 [ 135.599163][ T5235] ? common_file_perm+0x171/0x1c0 [ 135.604178][ T5235] ? fsnotify_perm+0x5d/0x560 [ 135.608841][ T5235] ? security_file_permission+0x75/0xa0 [ 135.614372][ T5235] do_iter_write+0x1f8/0x7a0 [ 135.618956][ T5235] ? import_iovec+0x6f/0xa0 [ 135.623446][ T5235] do_writev+0x281/0x480 [ 135.627676][ T5235] ? do_readv+0x460/0x460 [ 135.631993][ T5235] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 135.637960][ T5235] ? lock_chain_count+0x20/0x20 [ 135.642795][ T5235] ? lockdep_hardirqs_on+0x94/0x140 [ 135.647979][ T5235] do_syscall_64+0x4c/0xa0 [ 135.652384][ T5235] ? clear_bhb_loop+0x30/0x80 [ 135.657043][ T5235] ? clear_bhb_loop+0x30/0x80 [ 135.661703][ T5235] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.667582][ T5235] RIP: 0033:0x7f7918e47559 [ 135.671985][ T5235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.691575][ T5235] RSP: 002b:00007f791709e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 135.699975][ T5235] RAX: ffffffffffffffda RBX: 00007f79190cdfa0 RCX: 00007f7918e47559 [ 135.707933][ T5235] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 135.715885][ T5235] RBP: 00007f7918edeb20 R08: 0000000000000000 R09: 0000000000000000 [ 135.723839][ T5235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.731793][ T5235] R13: 00007f79190ce038 R14: 00007f79190cdfa0 R15: 00007ffe41d81f68 [ 135.739753][ T5235] [ 135.742843][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.826652][ T5243] netlink: 68 bytes leftover after parsing attributes in process `syz.0.271'. [ 137.974667][ T1327] usb 2-1: USB disconnect, device number 3