last executing test programs: 4.996180003s ago: executing program 1 (id=195): r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, &(0x7f00000004c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000400)={0x2, r1, 0x1, 0xffff, 0x81, 0x1ff, 0x1}) 4.856571227s ago: executing program 1 (id=197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}], {0x14, 0x10}}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4.70239371s ago: executing program 1 (id=200): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x9102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000008c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xcabe, 0xdc, 0x800, 0x0, 0x5, 0x6, 0x6, 0xffffff81, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000540), 0x56) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f00000005c0)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.288098551s ago: executing program 1 (id=206): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) lstat(&(0x7f0000016240)='./file0\x00', 0x0) syz_emit_ethernet(0x11, &(0x7f00000000c0)={@multicast, @local, @void, {@llc={0x4, {@llc={0x8e, 0xff, "bb"}}}}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000004c40)={0x0, 0x989680}) 3.284122846s ago: executing program 1 (id=221): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) read$FUSE(r0, 0x0, 0x0) 3.196047529s ago: executing program 2 (id=223): r0 = syz_open_dev$ublk_chdev(&(0x7f0000000000), 0x0, 0x24c0) close(r0) 3.079714831s ago: executing program 2 (id=226): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x5b, r0, {0x6b3}}, 'mtd0\x00'}) 3.028047663s ago: executing program 1 (id=227): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) write$nci(r0, &(0x7f0000000380)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="500404"], 0x7) write$nci(r0, &(0x7f0000000cc0)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x70bd28, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffff3d}]}, 0x24}, 0x1, 0x0, 0x0, 0x4851}, 0x0) write$nci(r0, &(0x7f0000000500)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0xf, {0x1, 0xd, "299506ad626d94209abe7953d5"}}, 0x12) 2.944559065s ago: executing program 2 (id=230): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x3, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x700, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x10, 0x0, 'Sp'}, @sadb_address={0x5, 0x6, 0xff, 0x0, 0x0, @in6={0xa, 0x4e23, 0x6, @private2, 0x9}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0xd2ef, @private1, 0x9}}]}, 0x80}, 0x1, 0x7}, 0x800) 2.495960057s ago: executing program 4 (id=237): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x42, 0xa}, {0x80, 0x40, 0x100, 0x100, 0xa}}}}, 0x17) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) 1.97229279s ago: executing program 2 (id=241): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x1c, 0x36, 0x1, 0x470fd2b, 0x25dfdbfc, {0x5}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040050}, 0x24008004) 1.848173003s ago: executing program 2 (id=243): connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000140)=ANY=[@ANYRES32]) 1.797492234s ago: executing program 2 (id=244): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x4000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000940)='./md0\x00', 0x6180, 0x0) r1 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000980)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f00000009c0)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000a40)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000a80)={0x1, {0x1, 0x1}, 0x1, 0x40032}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000d80)={0x1, @pix={0xb5, 0xa, 0x31384142, 0x5, 0x0, 0x7, 0xa, 0x800, 0x1, 0x3, 0x0, 0x3}}) ioctl$RUN_ARRAY(r1, 0x400c0930, &(0x7f0000000ac0)) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x4a000200) timer_create(0x0, &(0x7f0000000e80)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000ec0)) timer_settime(0x0, 0x0, &(0x7f0000000f00)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setns(0xc9, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="2363060100766c616e000000001400028006000100ffff0000060005008100"/43], 0x44}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) r4 = socket(0x2, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000840)={0x2, 0xfffa, @local}, 0x10) 1.536018211s ago: executing program 4 (id=247): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x1fb7f000) 1.424478504s ago: executing program 4 (id=250): setns(0xc9, 0x0) r0 = fsopen(&(0x7f00000000c0)='nfs\x00', 0x1) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000140)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='addr\x00', &(0x7f00000001c0)='127.0.0.1\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x44, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 1.233654158s ago: executing program 4 (id=253): syz_80211_inject_frame(0x0, 0x0, 0x2c9) 1.15221268s ago: executing program 0 (id=254): connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000140)=ANY=[@ANYRES32]) 1.064888263s ago: executing program 0 (id=255): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000005c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) 972.047135ms ago: executing program 3 (id=256): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5608, 0x2) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x5, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0xffffffffffffff56) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl(r1, 0x8b1a, &(0x7f0000000140)) socket$unix(0x1, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000001b80)={0xa, 0x4e23, 0x0, @local, 0x8}, 0x1c) 935.348246ms ago: executing program 0 (id=257): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 775.39723ms ago: executing program 0 (id=258): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write(r0, &(0x7f0000000380)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,hdr_digest,data_digest', 0x4b) 588.093085ms ago: executing program 3 (id=259): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r1, 0x801, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_BE={0x5}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x79}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xdc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 487.193497ms ago: executing program 3 (id=260): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder-control\x00', 0x802, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000200)={'custom1\x00'}) 438.912409ms ago: executing program 4 (id=261): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="20010000410007012cbd7000fddbdf25037c00000400c2800801018004011080140008"], 0x120}, 0x1, 0x0, 0x0, 0x4c084}, 0xc0) 335.981212ms ago: executing program 0 (id=262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000680)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 296.918263ms ago: executing program 3 (id=263): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xffffffffea110f4c, 0xd, 0xfffd, 0xf, 0x802, 0x0, 0x0, 0x40, 0x6}}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 280.607243ms ago: executing program 4 (id=264): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2000000013000100"/20, @ANYRES32=r2, @ANYBLOB="c588"], 0x20}}, 0x40040000) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000640)={0x11, 0x300, r2}, 0x14) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000680)=0x10001, 0x4) write(r3, &(0x7f00000006c0)='\x00', 0x1) 185.309195ms ago: executing program 0 (id=265): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000140)=ANY=[@ANYRES32=r0]) 135.965137ms ago: executing program 3 (id=266): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000001840)='./file0\x00', 0x0, 0x2008800, 0x0) read$FUSE(r1, &(0x7f0000001940)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000003980)="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", 0x2000, &(0x7f0000005980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005a40)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) close(r1) flock(0xffffffffffffffff, 0x2) mount(0x0, 0x0, &(0x7f0000005c00)='erofs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) r3 = open$dir(&(0x7f0000000540)='./file0\x00', 0x46642, 0xc) r4 = add_key(&(0x7f0000000580)='rxrpc\x00', &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000600)={@id={0x2, 0x0, @c}, 0x10, r4, '\x00', @d}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000003c0), 0x4000095, 0x8090) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'syz_tun\x00'}) 0s ago: executing program 3 (id=267): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000003c0)={r0, r0, 0x3e4c, 0x4, &(0x7f0000000480)="43e7824d", 0x24, 0x9, 0x15c2, 0x8000, 0x5, 0x3, 0x4, 'syz0\x00'}) kernel console output (not intermixed with test programs): [ 52.295270][ T3932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.322144][ T3932] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK [ 53.010386][ T4017] sshd (4017) used greatest stack depth: 20832 bytes left syzkaller Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. syzkaller login: [ 77.957536][ T4257] cgroup: Unknown subsys name 'net' [ 78.060759][ T4257] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.609489][ T4257] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 81.189777][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.198931][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.210956][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.218420][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.226033][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.233989][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.243865][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.251028][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.258424][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.265924][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.266849][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.277587][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.284294][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.288662][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.296896][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.302765][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.309995][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.324658][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.326415][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.334835][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.339890][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.348816][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.360445][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.385022][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.393617][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.401072][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.401688][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.410708][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.423545][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.431353][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.510909][ T4269] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.536354][ T4270] rdma_rxe: rxe_register_device failed with error -23 [ 81.559084][ T4274] rdma_rxe: rxe_register_device failed with error -23 [ 81.564352][ T4269] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.574559][ T4270] rdma_rxe: failed to add rxe_eth0 [ 81.591153][ T4269] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.597652][ T4274] rdma_rxe: failed to add rxe_eth0 [ 81.608677][ T4279] rdma_rxe: rxe_register_device failed with error -23 [ 81.623179][ T4279] rdma_rxe: failed to add rxe_eth0 [ 81.632893][ T4282] rdma_rxe: rxe_register_device failed with error -23 [ 81.639937][ T4282] rdma_rxe: failed to add rxe_eth0 [ 81.809283][ T4269] infiniband rxe0: set active [ 81.836020][ T4269] infiniband rxe0: added rxe_eth0 [ 81.849946][ T4271] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.928138][ T4269] RDS/IB: rxe0: added [ 81.935608][ T4269] smc: adding ib device rxe0 with port count 1 [ 81.961967][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.969147][ T4269] smc: ib device rxe0 port 1 has pnetid [ 81.987443][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.010107][ T4269] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.130174][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 82.263537][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 82.286809][ T4269] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.410948][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 82.436507][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 82.451010][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.464987][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.482248][ T4270] device bridge_slave_0 entered promiscuous mode [ 82.508132][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.523892][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.541235][ T4270] device bridge_slave_1 entered promiscuous mode [ 82.590592][ T4269] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.615634][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.635252][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.766014][ T4270] team0: Port device team_slave_0 added [ 82.772471][ T4269] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.806702][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.818972][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.842789][ T4279] device bridge_slave_0 entered promiscuous mode [ 82.852418][ T4270] team0: Port device team_slave_1 added [ 82.901627][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.917605][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.937771][ T4279] device bridge_slave_1 entered promiscuous mode [ 83.048722][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.056734][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.073323][ T4274] device bridge_slave_0 entered promiscuous mode [ 83.106888][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.118816][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.149369][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.161882][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.174587][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.185951][ T4274] device bridge_slave_1 entered promiscuous mode [ 83.197687][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.210203][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.220569][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.231293][ T4282] device bridge_slave_0 entered promiscuous mode [ 83.248324][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.257984][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.268621][ T4282] device bridge_slave_1 entered promiscuous mode [ 83.278838][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.288496][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.328749][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.348991][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.366863][ T4269] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.412863][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.455716][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.467176][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.479657][ T4279] team0: Port device team_slave_0 added [ 83.486538][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 83.505076][ T4279] team0: Port device team_slave_1 added [ 83.521956][ T4270] device hsr_slave_0 entered promiscuous mode [ 83.529538][ T4270] device hsr_slave_1 entered promiscuous mode [ 83.543880][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.553175][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 83.562783][ T4272] Bluetooth: hci4: command 0x0409 tx timeout [ 83.569117][ T4272] Bluetooth: hci2: command 0x0409 tx timeout [ 83.575676][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 83.635097][ T4282] team0: Port device team_slave_0 added [ 83.668434][ T4274] team0: Port device team_slave_0 added [ 83.675995][ T4282] team0: Port device team_slave_1 added [ 83.682354][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.689981][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.716300][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.736229][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.743377][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.769363][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.789278][ T4274] team0: Port device team_slave_1 added [ 83.820553][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.827767][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.853931][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.887059][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.895010][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.921197][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.954079][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.961277][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.987810][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.000813][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.007938][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.034705][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.141863][ T4282] device hsr_slave_0 entered promiscuous mode [ 84.149012][ T4282] device hsr_slave_1 entered promiscuous mode [ 84.156972][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.165192][ T4282] Cannot create hsr debugfs directory [ 84.215450][ T4279] device hsr_slave_0 entered promiscuous mode [ 84.222704][ T4279] device hsr_slave_1 entered promiscuous mode [ 84.229666][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.237616][ T4279] Cannot create hsr debugfs directory [ 84.247583][ T4274] device hsr_slave_0 entered promiscuous mode [ 84.254499][ T4274] device hsr_slave_1 entered promiscuous mode [ 84.261033][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.268692][ T4274] Cannot create hsr debugfs directory [ 84.581298][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 84.662413][ T4270] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.686067][ T4270] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.696159][ T4270] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.720526][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.731198][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.740196][ T4269] device bridge_slave_0 entered promiscuous mode [ 84.758913][ T4270] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.768086][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.775636][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.784374][ T4269] device bridge_slave_1 entered promiscuous mode [ 84.818478][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.834486][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.869968][ T4269] team0: Port device team_slave_0 added [ 84.884921][ T4269] team0: Port device team_slave_1 added [ 84.921371][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.929487][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.956500][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.969579][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.976926][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.003031][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.017259][ T4274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.028262][ T4274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.052015][ T4274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.066658][ T4274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.133952][ T4269] device hsr_slave_0 entered promiscuous mode [ 85.143308][ T4269] device hsr_slave_1 entered promiscuous mode [ 85.150026][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.158747][ T4269] Cannot create hsr debugfs directory [ 85.208198][ T4282] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.229896][ T4282] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.246058][ T4282] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.285682][ T4282] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.391272][ T4279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.424078][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.431258][ T4279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.467819][ T4279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.486439][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.498144][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.511347][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.530678][ T4279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.553383][ T4272] Bluetooth: hci0: command 0x041b tx timeout [ 85.605845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.617900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.631662][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.633039][ T4272] Bluetooth: hci2: command 0x041b tx timeout [ 85.639345][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.645106][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 85.656803][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 85.658691][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 85.679387][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.694171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.703558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.714464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.723676][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.731694][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.741496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.767078][ T4269] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.790579][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.804135][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.814441][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.823540][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.832239][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.841686][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.852813][ T4269] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.865057][ T4269] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.890864][ T4269] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.905596][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.918334][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.927051][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.942362][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.966537][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.975802][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.985492][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.995203][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.005223][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.012380][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.020493][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.030119][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.038970][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.046171][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.059098][ T4270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.071358][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.091697][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.105953][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.118970][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.128657][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.138409][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.147314][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.158442][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.178733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.227235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.237668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.248450][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.255652][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.266441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.279513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.296886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.308457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.358330][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.383440][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.407462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.420739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.431467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.449434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.459827][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.467121][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.478267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.487441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.496182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.508195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.517469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.526565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.565780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.574822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.595611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.619219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.643837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.663597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.721714][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.745881][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.777180][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.831638][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.869111][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.894931][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.909428][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.921757][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.965424][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.974601][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.000055][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.019801][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.059205][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.110476][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.194099][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.201857][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.223612][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.232327][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.239830][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.288140][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.303612][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.311705][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.372396][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.387970][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.416147][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.423539][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.453306][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.463813][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.492289][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.499528][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.523032][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.538919][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.547736][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.554940][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.563821][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.573255][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.580752][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.589121][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.603473][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.618837][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.627829][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.636035][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 87.649491][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.669151][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.693306][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.701251][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.711241][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.719830][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 87.719845][ T4272] Bluetooth: hci2: command 0x040f tx timeout [ 87.725963][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 87.726017][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 87.751472][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.761959][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.770924][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.779987][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.790831][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.818567][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.830928][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.850268][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.859699][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.868443][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.877924][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.887861][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.911064][ T4279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.922819][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.947599][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.976066][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.994125][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.013122][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.032866][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.106027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.149339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.235083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.263899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.288058][ T4274] device veth0_vlan entered promiscuous mode [ 88.305111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.333784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.364373][ T4274] device veth1_vlan entered promiscuous mode [ 88.442485][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.451143][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.486928][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.502855][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.526122][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.571830][ T4274] device veth0_macvtap entered promiscuous mode [ 88.597336][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.617491][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.631396][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.677396][ T4274] device veth1_macvtap entered promiscuous mode [ 88.691057][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.703946][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.725481][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.798576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.815136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.860698][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.874465][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.899108][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.909762][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.924723][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.938549][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.949636][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.967478][ T4282] device veth0_vlan entered promiscuous mode [ 88.983052][ T4270] device veth0_vlan entered promiscuous mode [ 88.996993][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.012346][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.021279][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.037045][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.048681][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.060007][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.070644][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.097376][ T4282] device veth1_vlan entered promiscuous mode [ 89.107572][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.121042][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.130742][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.142597][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.162834][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.172577][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.180114][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.191384][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.199697][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.209244][ T4270] device veth1_vlan entered promiscuous mode [ 89.260448][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.281708][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.291719][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.300455][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.341697][ T4270] device veth0_macvtap entered promiscuous mode [ 89.372878][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.387641][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.397318][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.408923][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.440498][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.453534][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.474916][ T4270] device veth1_macvtap entered promiscuous mode [ 89.491077][ T4282] device veth0_macvtap entered promiscuous mode [ 89.522329][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.535516][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.553901][ T4282] device veth1_macvtap entered promiscuous mode [ 89.581690][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.590747][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.600376][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.609076][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.619713][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.629173][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.648506][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.663654][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.675553][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.683638][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.696389][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.712226][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.723356][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 89.731919][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.742011][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.752842][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.764385][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.779218][ T4279] device veth0_vlan entered promiscuous mode [ 89.788873][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.796789][ T4272] Bluetooth: hci2: command 0x0419 tx timeout [ 89.796834][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 89.802975][ T4272] Bluetooth: hci4: command 0x0419 tx timeout [ 89.803004][ T4272] Bluetooth: hci1: command 0x0419 tx timeout [ 89.822445][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.831226][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.840305][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.849430][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.858775][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.869814][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.880236][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.888900][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.901190][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.912233][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.924239][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.939459][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.950549][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.961444][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.974263][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.988049][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.995548][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.005116][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.014777][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.024111][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.039990][ T4270] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.049729][ T4270] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.059503][ T4270] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.069536][ T4270] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.095351][ T4279] device veth1_vlan entered promiscuous mode [ 90.110897][ T4282] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.126741][ T4282] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.147581][ T4282] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.159219][ T4282] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.224952][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.238057][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.248711][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.264528][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.300637][ T4269] device veth0_vlan entered promiscuous mode [ 90.327490][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.338826][ T4383] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.340146][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.372285][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.390657][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.421161][ T4383] capability: warning: `syz.2.6' uses 32-bit capabilities (legacy support in use) [ 90.434908][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.470212][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.488225][ T4279] device veth0_macvtap entered promiscuous mode [ 90.517939][ T4269] device veth1_vlan entered promiscuous mode [ 90.536400][ T4279] device veth1_macvtap entered promiscuous mode [ 90.610361][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.632220][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.642892][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.653606][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.664606][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.675566][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.694890][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.702314][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.716607][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.727987][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.740530][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.752014][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.765986][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.793781][ T4269] device veth0_macvtap entered promiscuous mode [ 90.804320][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.819702][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.830355][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.841607][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.851806][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.862640][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.879443][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.889324][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.906769][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.917863][ T4269] device veth1_macvtap entered promiscuous mode [ 90.943693][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.952087][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.962176][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.976134][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.988059][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.017115][ T4279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.032048][ T4279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.040969][ T4279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.050252][ T4279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.099439][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.110495][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.116639][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.131567][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.147412][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.159485][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.169882][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.184585][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.194901][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.211549][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.227482][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.273009][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.283548][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.293064][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.322726][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.334983][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.344147][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.362615][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.382588][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.399320][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.409957][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.422192][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.432355][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.443175][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.455413][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.469650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.480469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.492303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.511287][ T4269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.522389][ T4269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.532009][ T4269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.541396][ T4269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.571408][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.618530][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.679448][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.785838][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.796591][ T26] cfg80211: failed to load regulatory.db [ 91.831547][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.852128][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.853925][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.883027][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.956299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.993126][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.010608][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.019973][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.030873][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.057571][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.083113][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.562217][ T4416] tipc: Trying to set illegal importance in message [ 92.892844][ T4336] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 93.080422][ T4437] netlink: 272 bytes leftover after parsing attributes in process `syz.4.21'. [ 93.108137][ T4336] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 93.132897][ T4336] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 93.146607][ T4440] Cannot find set identified by id 0 to match [ 93.202662][ T4336] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 93.268088][ T4336] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 93.308713][ T4336] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 93.359635][ T4336] usb 4-1: config 168 interface 0 has no altsetting 0 [ 93.390549][ T4336] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 93.418717][ T4336] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 93.487108][ T4446] misc userio: Invalid payload size [ 93.492071][ T4336] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 93.532735][ T4336] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 93.591932][ T4336] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 93.646796][ T4336] usb 4-1: config 168 interface 0 has no altsetting 0 [ 93.699326][ T4337] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.707697][ T4336] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 93.742613][ T4336] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 93.777124][ T4449] tmpfs: Unknown parameter 'grpquota' [ 93.794970][ T4336] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 93.848789][ T4336] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 93.880431][ T4336] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 93.937094][ T4336] usb 4-1: config 168 interface 0 has no altsetting 0 [ 93.979244][ T4336] usb 4-1: string descriptor 0 read error: -22 [ 94.033261][ T4336] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 94.082625][ T4336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.169507][ T4336] adutux 4-1:168.0: interrupt endpoints not found [ 94.361475][ T4474] xt_hashlimit: size too large, truncated to 1048576 [ 94.518293][ T4346] usb 4-1: USB disconnect, device number 2 [ 95.270201][ T4504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'. [ 95.664866][ T27] audit: type=1400 audit(1792726466.002:2): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=4514 comm="syz.3.50" [ 95.679399][ T4516] jffs2: notice: (4516) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 96.071790][ T4534] device-mapper: multipath round-robin: repeat_count > 1 is deprecated, using 1 instead [ 96.143878][ T4534] device-mapper: table: 248:1: multipath: round-robin ps: invalid repeat count (-EINVAL) [ 96.153941][ T4534] device-mapper: ioctl: error adding target to table [ 96.619393][ T4558] Config c/1 of g1 needs at least one function. [ 96.653271][ T4558] udc dummy_udc.0: failed to start g1: -22 [ 96.659186][ T4558] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 96.703454][ T4558] UDC core: g1: couldn't find an available UDC or it's busy [ 96.738727][ T4564] FAULT_INJECTION: forcing a failure. [ 96.738727][ T4564] name failslab, interval 1, probability 0, space 0, times 1 [ 96.777218][ T4564] CPU: 0 PID: 4564 Comm: syz.0.65 Not tainted syzkaller #0 [ 96.784623][ T4564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.794754][ T4564] Call Trace: [ 96.798070][ T4564] [ 96.801074][ T4564] dump_stack_lvl+0x188/0x24e [ 96.805835][ T4564] ? show_regs_print_info+0x12/0x12 [ 96.811090][ T4564] ? load_image+0x410/0x410 [ 96.815678][ T4564] ? __might_sleep+0xd0/0xd0 [ 96.820323][ T4564] ? __lock_acquire+0x7ea0/0x7ea0 [ 96.825439][ T4564] should_fail_ex+0x390/0x4c0 [ 96.830179][ T4564] should_failslab+0x5/0x20 [ 96.834730][ T4564] slab_pre_alloc_hook+0x59/0x300 [ 96.839803][ T4564] ? memcg_list_lru_alloc+0x22d/0xb00 [ 96.845262][ T4564] __kmem_cache_alloc_node+0x4f/0x270 [ 96.850694][ T4564] ? memcg_list_lru_alloc+0x22d/0xb00 [ 96.856123][ T4564] __kmalloc+0xa3/0x240 [ 96.860325][ T4564] memcg_list_lru_alloc+0x22d/0xb00 [ 96.865583][ T4564] ? slab_pre_alloc_hook+0xb1/0x300 [ 96.870867][ T4564] ? memcg_reparent_list_lrus+0x850/0x850 [ 96.876657][ T4564] ? get_obj_cgroup_from_current+0xd0/0x280 [ 96.882634][ T4564] ? get_obj_cgroup_from_current+0xd0/0x280 [ 96.888598][ T4564] slab_pre_alloc_hook+0x2ad/0x300 [ 96.893771][ T4564] ? slab_pre_alloc_hook+0xb1/0x300 [ 96.899049][ T4564] kmem_cache_alloc_lru+0x49/0x2e0 [ 96.904231][ T4564] ? __d_alloc+0x2e/0x6e0 [ 96.908619][ T4564] __d_alloc+0x2e/0x6e0 [ 96.912825][ T4564] d_make_root+0x46/0xd0 [ 96.917200][ T4564] ? mqueue_get_tree+0xe0/0xe0 [ 96.922013][ T4564] mqueue_fill_super+0xfd/0x150 [ 96.926908][ T4564] get_tree_nodev+0xb0/0x160 [ 96.931572][ T4564] vfs_get_tree+0x88/0x270 [ 96.936073][ T4564] fc_mount+0x18/0xa0 [ 96.940104][ T4564] mq_init_ns+0x39d/0x510 [ 96.944569][ T4564] copy_ipcs+0x2de/0x500 [ 96.948885][ T4564] create_new_namespaces+0x212/0x700 [ 96.954239][ T4564] unshare_nsproxy_namespaces+0x116/0x160 [ 96.960010][ T4564] ksys_unshare+0x4f6/0x8e0 [ 96.964633][ T4564] ? sighand_ctor+0x40/0x40 [ 96.969189][ T4564] ? lock_chain_count+0x20/0x20 [ 96.974099][ T4564] ? syscall_enter_from_user_mode+0x21/0x80 [ 96.980052][ T4564] __x64_sys_unshare+0x34/0x40 [ 96.984870][ T4564] do_syscall_64+0x4c/0xa0 [ 96.989341][ T4564] ? clear_bhb_loop+0x60/0xb0 [ 96.994075][ T4564] ? clear_bhb_loop+0x60/0xb0 [ 96.998811][ T4564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.004783][ T4564] RIP: 0033:0x7fa7dcb9f559 [ 97.009250][ T4564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.028914][ T4564] RSP: 002b:00007fa7dda7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 97.037399][ T4564] RAX: ffffffffffffffda RBX: 00007fa7dce25fa0 RCX: 00007fa7dcb9f559 [ 97.045425][ T4564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 97.053705][ T4564] RBP: 00007fa7dcc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 97.061716][ T4564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.069725][ T4564] R13: 00007fa7dce26038 R14: 00007fa7dce25fa0 R15: 00007fffba30f718 [ 97.077837][ T4564] [ 97.674353][ T4583] FAULT_INJECTION: forcing a failure. [ 97.674353][ T4583] name failslab, interval 1, probability 0, space 0, times 1 [ 97.742707][ T4583] CPU: 0 PID: 4583 Comm: syz.3.70 Not tainted syzkaller #0 [ 97.749994][ T4583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 97.760100][ T4583] Call Trace: [ 97.763429][ T4583] [ 97.766601][ T4583] dump_stack_lvl+0x188/0x24e [ 97.771433][ T4583] ? show_regs_print_info+0x12/0x12 [ 97.776695][ T4583] ? load_image+0x410/0x410 [ 97.781270][ T4583] ? __lock_acquire+0x7ea0/0x7ea0 [ 97.786373][ T4583] should_fail_ex+0x390/0x4c0 [ 97.791124][ T4583] should_failslab+0x5/0x20 [ 97.795679][ T4583] slab_pre_alloc_hook+0x59/0x300 [ 97.800767][ T4583] ? snd_seq_timer_new+0x51/0x6a0 [ 97.805854][ T4583] __kmem_cache_alloc_node+0x4f/0x270 [ 97.811291][ T4583] ? snd_seq_timer_new+0x51/0x6a0 [ 97.816372][ T4583] kmalloc_trace+0x26/0xe0 [ 97.820849][ T4583] snd_seq_timer_new+0x51/0x6a0 [ 97.825764][ T4583] snd_seq_queue_alloc+0x165/0x740 [ 97.830936][ T4583] snd_seq_ioctl_create_queue+0x7b/0x3b0 [ 97.836622][ T4583] ? snd_seq_ioctl_unsubscribe_port+0x6d0/0x6d0 [ 97.842928][ T4583] snd_seq_oss_open+0x622/0xf00 [ 97.847872][ T4583] ? snd_seq_oss_delete_client+0x50/0x50 [ 97.853603][ T4583] ? trace_raw_output_contention_end+0xd0/0xd0 [ 97.859837][ T4583] ? odev_open+0x58/0x90 [ 97.864134][ T4583] ? __lock_acquire+0x7ea0/0x7ea0 [ 97.869233][ T4583] ? snd_seq_oss_process_event+0x2910/0x2910 [ 97.875294][ T4583] ? async_call_lookup_ports+0x10/0x10 [ 97.880823][ T4583] ? do_raw_spin_unlock+0x11d/0x230 [ 97.886126][ T4583] ? soundcore_open+0x309/0x4b0 [ 97.891050][ T4583] odev_open+0x63/0x90 [ 97.895184][ T4583] chrdev_open+0x585/0x5f0 [ 97.899687][ T4583] ? cd_forget+0x160/0x160 [ 97.904176][ T4583] ? fsnotify_perm+0x39b/0x550 [ 97.908996][ T4583] ? cd_forget+0x160/0x160 [ 97.913477][ T4583] do_dentry_open+0x7dd/0x10b0 [ 97.918320][ T4583] path_openat+0x2674/0x2f10 [ 97.923000][ T4583] ? kasan_set_track+0x60/0x70 [ 97.927844][ T4583] ? verify_lock_unused+0x140/0x140 [ 97.933116][ T4583] ? do_sys_openat2+0xdd/0x4f0 [ 97.937952][ T4583] ? do_filp_open+0x420/0x420 [ 97.942702][ T4583] do_filp_open+0x1ee/0x420 [ 97.947302][ T4583] ? vfs_tmpfile+0x470/0x470 [ 97.951999][ T4583] ? _raw_spin_unlock+0x24/0x40 [ 97.956899][ T4583] ? alloc_fd+0x590/0x640 [ 97.961295][ T4583] do_sys_openat2+0x14b/0x4f0 [ 97.966034][ T4583] ? do_sys_open+0xe0/0xe0 [ 97.970506][ T4583] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 97.976549][ T4583] ? lock_chain_count+0x20/0x20 [ 97.981466][ T4583] __x64_sys_openat+0x135/0x160 [ 97.986408][ T4583] do_syscall_64+0x4c/0xa0 [ 97.990875][ T4583] ? clear_bhb_loop+0x60/0xb0 [ 97.995610][ T4583] ? clear_bhb_loop+0x60/0xb0 [ 98.000365][ T4583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.006613][ T4583] RIP: 0033:0x7f490c59f559 [ 98.011081][ T4583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.030738][ T4583] RSP: 002b:00007f490d486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 98.039214][ T4583] RAX: ffffffffffffffda RBX: 00007f490c825fa0 RCX: 00007f490c59f559 [ 98.047240][ T4583] RDX: 0000000000080200 RSI: 0000200000003440 RDI: ffffffffffffff9c [ 98.055269][ T4583] RBP: 00007f490c636b20 R08: 0000000000000000 R09: 0000000000000000 [ 98.063294][ T4583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.071323][ T4583] R13: 00007f490c826038 R14: 00007f490c825fa0 R15: 00007ffeee5c8f58 [ 98.079368][ T4583] [ 98.229551][ T4590] tmpfs: Unknown parameter 'casefold' [ 98.382782][ T4336] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.576545][ T4336] usb 5-1: Using ep0 maxpacket: 8 [ 98.602286][ T4336] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 98.635868][ T4336] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.674711][ T4336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.002830][ T4612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.80'. [ 99.032168][ T4612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 99.069027][ T4612] FAULT_INJECTION: forcing a failure. [ 99.069027][ T4612] name failslab, interval 1, probability 0, space 0, times 0 [ 99.132702][ T4612] CPU: 1 PID: 4612 Comm: syz.0.80 Not tainted syzkaller #0 [ 99.139998][ T4612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.150103][ T4612] Call Trace: [ 99.153429][ T4612] [ 99.156414][ T4612] dump_stack_lvl+0x188/0x24e [ 99.161165][ T4612] ? show_regs_print_info+0x12/0x12 [ 99.166424][ T4612] ? load_image+0x410/0x410 [ 99.171018][ T4612] ? __might_sleep+0xd0/0xd0 [ 99.175661][ T4612] ? __lock_acquire+0x7ea0/0x7ea0 [ 99.180752][ T4612] should_fail_ex+0x390/0x4c0 [ 99.185502][ T4612] should_failslab+0x5/0x20 [ 99.190057][ T4612] slab_pre_alloc_hook+0x59/0x300 [ 99.195150][ T4612] kmem_cache_alloc+0x56/0x2f0 [ 99.199971][ T4612] ? __kernfs_new_node+0xe1/0x7f0 [ 99.205085][ T4612] __kernfs_new_node+0xe1/0x7f0 [ 99.210192][ T4612] ? __lock_acquire+0x7ea0/0x7ea0 [ 99.215389][ T4612] ? kernfs_new_node+0x250/0x250 [ 99.220415][ T4612] kernfs_new_node+0x148/0x250 [ 99.225369][ T4612] __kernfs_create_file+0x47/0x2e0 [ 99.230573][ T4612] sysfs_add_file_mode_ns+0x233/0x2f0 [ 99.236017][ T4612] internal_create_group+0x490/0xce0 [ 99.241362][ T4612] ? kernfs_add_one+0x14e/0x8f0 [ 99.246897][ T4612] ? __lock_acquire+0x7ea0/0x7ea0 [ 99.252112][ T4612] ? sysfs_create_group+0x20/0x20 [ 99.257220][ T4612] sysfs_create_groups+0x55/0x120 [ 99.262324][ T4612] device_add_attrs+0x1ae/0x830 [ 99.267252][ T4612] ? get_device_parent+0x3e0/0x3e0 [ 99.272442][ T4612] ? kernfs_create_link+0x186/0x200 [ 99.277725][ T4612] device_add+0x677/0x1050 [ 99.282322][ T4612] netdev_register_kobject+0x184/0x320 [ 99.287876][ T4612] register_netdevice+0x133a/0x1b80 [ 99.293157][ T4612] ? netif_stacked_transfer_operstate+0x200/0x200 [ 99.299739][ T4612] ? vscnprintf+0x80/0x80 [ 99.304145][ T4612] ? rtnl_configure_link+0x21d/0x320 [ 99.309484][ T4612] vxcan_newlink+0x553/0x670 [ 99.314119][ T4612] ? ___sys_sendmsg+0x2a2/0x360 [ 99.319023][ T4612] ? __se_sys_sendmsg+0x1c3/0x2b0 [ 99.324098][ T4612] ? vxcan_setup+0x370/0x370 [ 99.328790][ T4612] ? alloc_netdev_mqs+0xb56/0xf10 [ 99.333862][ T4612] ? validate_linkmsg+0x3db/0x4c0 [ 99.338950][ T4612] ? rtnl_create_link+0x905/0xb90 [ 99.344023][ T4612] ? vxcan_setup+0x370/0x370 [ 99.348665][ T4612] rtnl_newlink+0x14b3/0x1f90 [ 99.353512][ T4612] ? rtnl_setlink+0x510/0x510 [ 99.358242][ T4612] ? trace_raw_output_contention_end+0xd0/0xd0 [ 99.364488][ T4612] ? rcu_is_watching+0x11/0xa0 [ 99.369398][ T4612] ? trace_contention_end+0x5f/0x170 [ 99.374744][ T4612] ? __mutex_lock+0x1ab/0xae0 [ 99.379578][ T4612] ? rcu_read_unlock+0x8c/0xa0 [ 99.384426][ T4612] ? rtnl_setlink+0x510/0x510 [ 99.389154][ T4612] rtnetlink_rcv_msg+0x863/0xfb0 [ 99.394145][ T4612] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 99.399316][ T4612] ? rtnetlink_bind+0x80/0x80 [ 99.404048][ T4612] ? __local_bh_enable_ip+0x136/0x1c0 [ 99.409464][ T4612] ? lockdep_hardirqs_on+0x94/0x140 [ 99.414720][ T4612] ? __local_bh_enable_ip+0x136/0x1c0 [ 99.420147][ T4612] ? _local_bh_enable+0xa0/0xa0 [ 99.425081][ T4612] ? __dev_queue_xmit+0x281/0x3810 [ 99.430277][ T4612] ? __dev_queue_xmit+0x281/0x3810 [ 99.435449][ T4612] ? __dev_queue_xmit+0x1d84/0x3810 [ 99.440742][ T4612] ? __dev_queue_xmit+0x281/0x3810 [ 99.446037][ T4612] ? ref_tracker_free+0x682/0x830 [ 99.451578][ T4612] ? refcount_inc+0x70/0x70 [ 99.456236][ T4612] ? memcpy+0x3c/0x60 [ 99.460374][ T4612] ? __copy_skb_header+0x3ba/0x4f0 [ 99.465543][ T4612] ? __skb_clone+0x446/0x6c0 [ 99.470197][ T4612] netlink_rcv_skb+0x1ef/0x440 [ 99.475173][ T4612] ? rtnetlink_bind+0x80/0x80 [ 99.479924][ T4612] ? netlink_ack+0x1160/0x1160 [ 99.484938][ T4612] ? netlink_deliver_tap+0x2e/0x1b0 [ 99.490212][ T4612] netlink_unicast+0x7ad/0x920 [ 99.495050][ T4612] netlink_sendmsg+0x8ad/0xbd0 [ 99.499888][ T4612] ? netlink_getsockopt+0x550/0x550 [ 99.505149][ T4612] ? apparmor_socket_sendmsg+0x8a/0x330 [ 99.510761][ T4612] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 99.516095][ T4612] ? security_socket_sendmsg+0x7c/0xa0 [ 99.521620][ T4612] ? netlink_getsockopt+0x550/0x550 [ 99.526884][ T4612] ____sys_sendmsg+0x5ed/0x9a0 [ 99.531725][ T4612] ? __sys_sendmsg_sock+0x30/0x30 [ 99.536807][ T4612] ? __import_iovec+0x306/0x510 [ 99.541733][ T4612] ? import_iovec+0x6f/0xa0 [ 99.546318][ T4612] ___sys_sendmsg+0x2a2/0x360 [ 99.551072][ T4612] ? __sys_sendmsg+0x2a0/0x2a0 [ 99.555943][ T4612] __se_sys_sendmsg+0x1c3/0x2b0 [ 99.560851][ T4612] ? __x64_sys_sendmsg+0x80/0x80 [ 99.565872][ T4612] ? lockdep_hardirqs_on+0x94/0x140 [ 99.571140][ T4612] do_syscall_64+0x4c/0xa0 [ 99.575610][ T4612] ? clear_bhb_loop+0x60/0xb0 [ 99.580354][ T4612] ? clear_bhb_loop+0x60/0xb0 [ 99.585089][ T4612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.591044][ T4612] RIP: 0033:0x7fa7dcb9f559 [ 99.595520][ T4612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.615190][ T4612] RSP: 002b:00007fa7dda7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.623672][ T4612] RAX: ffffffffffffffda RBX: 00007fa7dce25fa0 RCX: 00007fa7dcb9f559 [ 99.631723][ T4612] RDX: 0000000000000840 RSI: 0000200000000040 RDI: 0000000000000005 [ 99.639747][ T4612] RBP: 00007fa7dcc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 99.648640][ T4612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.656672][ T4612] R13: 00007fa7dce26038 R14: 00007fa7dce25fa0 R15: 00007fffba30f718 [ 99.664712][ T4612] [ 100.231477][ T4648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 101.129932][ T4346] usb 5-1: USB disconnect, device number 2 [ 101.979186][ T4713] device syzkaller0 entered promiscuous mode [ 102.933274][ T4756] random: crng reseeded on system resumption [ 103.499613][ T4779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 103.714698][ T4784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'. [ 104.245748][ T4809] 9pnet_virtio: no channels available for device syz [ 104.272991][ T4806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.735234][ T4829] netlink: 3556 bytes leftover after parsing attributes in process `syz.4.160'. [ 105.312867][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.558167][ T4864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 105.667214][ T4868] batman_adv: batadv0: Adding interface: syzkaller0 [ 105.674478][ T4868] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.700837][ T4868] batman_adv: batadv0: Interface activated: syzkaller0 [ 106.164544][ T4873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 106.607808][ T4868] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 106.672955][ T4868] batman_adv: batadv0: Removing interface: syzkaller0 [ 107.108233][ T4897] jffs2: notice: (4897) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 107.352629][ T4346] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.557506][ T4346] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 107.575897][ T4346] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 107.610988][ T4346] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 107.624269][ T4346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.632451][ T4346] usb 5-1: Product: syz [ 107.657317][ T4346] usb 5-1: Manufacturer: syz [ 107.662017][ T4346] usb 5-1: SerialNumber: syz [ 107.736348][ T4921] device syzkaller0 entered promiscuous mode [ 107.906013][ T4346] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 107.954091][ T4285] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 107.962965][ T4285] Bluetooth: hci2: Injecting HCI hardware error event [ 107.972064][ T4285] Bluetooth: hci2: hardware error 0x00 [ 108.343534][ T4347] usb 5-1: USB disconnect, device number 3 [ 108.369548][ T4347] usblp0: removed [ 108.689833][ T4956] 9pnet_virtio: no channels available for device syz [ 108.712053][ T27] audit: type=1326 audit(1792726479.042:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4955 comm="syz.0.214" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7dcb9f559 code=0x0 [ 109.130473][ T4975] tmpfs: Unknown parameter 'usrquota' [ 109.382752][ T4988] netlink: 72 bytes leftover after parsing attributes in process `syz.4.228'. [ 109.477321][ T4992] nci: nci_start_poll: failed to set local general bytes [ 109.518680][ T4995] netlink: 68 bytes leftover after parsing attributes in process `syz.4.232'. [ 109.833068][ T5008] FAULT_INJECTION: forcing a failure. [ 109.833068][ T5008] name fail_futex, interval 1, probability 0, space 0, times 1 [ 109.874306][ T5008] CPU: 0 PID: 5008 Comm: syz.0.236 Not tainted syzkaller #0 [ 109.881751][ T5008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 109.891865][ T5008] Call Trace: [ 109.895398][ T5008] [ 109.898369][ T5008] dump_stack_lvl+0x188/0x24e [ 109.903105][ T5008] ? show_regs_print_info+0x12/0x12 [ 109.908376][ T5008] ? load_image+0x410/0x410 [ 109.912950][ T5008] ? rcu_is_watching+0x11/0xa0 [ 109.917779][ T5008] ? trace_pelt_se_tp+0x5d/0x190 [ 109.922769][ T5008] ? __update_load_avg_se+0x6dd/0xb40 [ 109.928285][ T5008] should_fail_ex+0x390/0x4c0 [ 109.933035][ T5008] get_futex_key+0x1b1/0x1000 [ 109.937791][ T5008] ? futex_setup_timer+0xc0/0xc0 [ 109.942784][ T5008] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 109.948838][ T5008] ? __lock_acquire+0x7ea0/0x7ea0 [ 109.953934][ T5008] ? lock_chain_count+0x20/0x20 [ 109.958856][ T5008] futex_wait_setup+0xb8/0x270 [ 109.963684][ T5008] ? futex_wait_multiple+0x920/0x920 [ 109.969034][ T5008] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 109.974985][ T5008] ? _raw_spin_unlock+0x40/0x40 [ 109.979904][ T5008] futex_wait+0x1b8/0x5c0 [ 109.984299][ T5008] ? futex_wait_setup+0x270/0x270 [ 109.989436][ T5008] ? lockdep_hardirqs_on+0x94/0x140 [ 109.995057][ T5008] do_futex+0x310/0x320 [ 109.999278][ T5008] ? __ia32_sys_get_robust_list+0x100/0x100 [ 110.005239][ T5008] __se_sys_futex+0x381/0x410 [ 110.010423][ T5008] ? __x64_sys_futex+0xf0/0xf0 [ 110.015287][ T5008] ? __x64_sys_futex+0x1d/0xf0 [ 110.020110][ T5008] do_syscall_64+0x4c/0xa0 [ 110.024587][ T5008] ? clear_bhb_loop+0x60/0xb0 [ 110.029335][ T5008] ? clear_bhb_loop+0x60/0xb0 [ 110.034209][ T5008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.040163][ T5008] RIP: 0033:0x7fa7dcb9f559 [ 110.044631][ T5008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.064995][ T5008] RSP: 002b:00007fa7dda7c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 110.073480][ T5008] RAX: ffffffffffffffda RBX: 00007fa7dce25fa8 RCX: 00007fa7dcb9f559 [ 110.081506][ T5008] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa7dce25fa8 [ 110.089527][ T5008] RBP: 00007fa7dce25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 110.097901][ T5008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.105929][ T5008] R13: 00007fa7dce26038 R14: 00007fffba30f630 R15: 00007fffba30f718 [ 110.113977][ T5008] [ 110.132121][ T4285] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 110.217172][ T5017] gadgetfs: bound to dummy_udc driver [ 110.502607][ T4337] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 110.516166][ C0] gadgetfs: connected [ 110.521982][ T5016] gadgetfs: suspended from state 3 [ 110.527678][ T5016] gadgetfs: disconnected [ 110.543029][ T5031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'. [ 110.977993][ T5044] device-mapper: table: 248:2: crypt: Bad cipher specification (-EINVAL) [ 111.002733][ T5032] block device autoloading is deprecated and will be removed. [ 111.018931][ T5044] device-mapper: ioctl: error adding target to table [ 111.099127][ T5032] md/raid:md2: device ram4 operational as raid disk 0 [ 111.176593][ T5049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.222767][ T5045] rxe_eth0 speed is unknown, defaulting to 1000 [ 111.278247][ T5032] md/raid:md2: not enough operational devices (2/3 failed) [ 111.284302][ T5056] comedi comedi3: board detection failed [ 111.450395][ T5032] md/raid:md2: failed to run raid set. [ 111.462647][ T5032] md: pers->run() failed ... [ 111.759044][ T5066] nvme nvme0: failed to connect socket: -111 [ 112.176774][ T5081] ip_tables: iptables: counters copy to user failed while replacing table [ 112.283362][ T4980] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.313480][ T4980] [ 112.315889][ T4980] ====================================================== [ 112.322966][ T4980] WARNING: possible circular locking dependency detected [ 112.330212][ T4980] syzkaller #0 Not tainted [ 112.334676][ T4980] ------------------------------------------------------ [ 112.341736][ T4980] syz.1.227/4980 is trying to acquire lock: [ 112.347673][ T4980] ffffffff8e21a8c8 (nci_mutex){+.+.}-{3:3}, at: virtual_nci_close+0x13/0x40 [ 112.356972][ T4980] [ 112.356972][ T4980] but task is already holding lock: [ 112.364377][ T4980] ffff8880268f5350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0x102/0x600 [ 112.373947][ T4980] [ 112.373947][ T4980] which lock already depends on the new lock. [ 112.373947][ T4980] [ 112.384379][ T4980] [ 112.384379][ T4980] the existing dependency chain (in reverse order) is: [ 112.393413][ T4980] [ 112.393413][ T4980] -> #3 (&ndev->req_lock){+.+.}-{3:3}: [ 112.401081][ T4980] __mutex_lock+0x12d/0xae0 [ 112.406136][ T4980] nci_start_poll+0x55c/0xd10 [ 112.411358][ T4980] nfc_start_poll+0x141/0x2c0 [ 112.416579][ T4980] nfc_genl_start_poll+0x1d7/0x340 [ 112.422224][ T4980] genl_family_rcv_msg_doit+0x22f/0x350 [ 112.428328][ T4980] genl_rcv_msg+0x601/0x790 [ 112.433389][ T4980] netlink_rcv_skb+0x1ef/0x440 [ 112.438728][ T4980] genl_rcv+0x24/0x40 [ 112.443295][ T4980] netlink_unicast+0x7ad/0x920 [ 112.448613][ T4980] netlink_sendmsg+0x8ad/0xbd0 [ 112.453937][ T4980] ____sys_sendmsg+0x5ed/0x9a0 [ 112.459256][ T4980] ___sys_sendmsg+0x2a2/0x360 [ 112.464476][ T4980] __se_sys_sendmsg+0x1c3/0x2b0 [ 112.469919][ T4980] do_syscall_64+0x4c/0xa0 [ 112.474912][ T4980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.481367][ T4980] [ 112.481367][ T4980] -> #2 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 112.490085][ T4980] __mutex_lock+0x12d/0xae0 [ 112.495151][ T4980] nfc_urelease_event_work+0x120/0x310 [ 112.501157][ T4980] process_one_work+0x8ab/0x1160 [ 112.506654][ T4980] worker_thread+0xaf5/0x12a0 [ 112.511875][ T4980] kthread+0x29d/0x330 [ 112.516487][ T4980] ret_from_fork+0x1f/0x30 [ 112.521454][ T4980] [ 112.521454][ T4980] -> #1 (nfc_devlist_mutex){+.+.}-{3:3}: [ 112.529296][ T4980] __mutex_lock+0x12d/0xae0 [ 112.534344][ T4980] nfc_register_device+0x38/0x300 [ 112.539922][ T4980] nci_register_device+0x89f/0x9f0 [ 112.545587][ T4980] virtual_ncidev_open+0x55/0xc0 [ 112.551094][ T4980] misc_open+0x31f/0x390 [ 112.555924][ T4980] chrdev_open+0x585/0x5f0 [ 112.560901][ T4980] do_dentry_open+0x7dd/0x10b0 [ 112.566233][ T4980] path_openat+0x2674/0x2f10 [ 112.571374][ T4980] do_filp_open+0x1ee/0x420 [ 112.576434][ T4980] do_sys_openat2+0x14b/0x4f0 [ 112.581668][ T4980] __x64_sys_openat+0x135/0x160 [ 112.587436][ T4980] do_syscall_64+0x4c/0xa0 [ 112.592407][ T4980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.598850][ T4980] [ 112.598850][ T4980] -> #0 (nci_mutex){+.+.}-{3:3}: [ 112.605998][ T4980] __lock_acquire+0x3a03/0x7ea0 [ 112.611410][ T4980] lock_acquire+0x1bc/0x4a0 [ 112.616473][ T4980] __mutex_lock+0x12d/0xae0 [ 112.621537][ T4980] virtual_nci_close+0x13/0x40 [ 112.626872][ T4980] nci_close_device+0x383/0x600 [ 112.632278][ T4980] nci_unregister_device+0x5e/0x250 [ 112.638043][ T4980] virtual_ncidev_close+0x55/0x90 [ 112.643639][ T4980] __fput+0x20a/0x8b0 [ 112.648187][ T4980] task_work_run+0x1d0/0x260 [ 112.653358][ T4980] exit_to_user_mode_loop+0xe6/0x110 [ 112.659200][ T4980] exit_to_user_mode_prepare+0xee/0x180 [ 112.665301][ T4980] syscall_exit_to_user_mode+0x16/0x40 [ 112.671322][ T4980] do_syscall_64+0x58/0xa0 [ 112.676325][ T4980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.682781][ T4980] [ 112.682781][ T4980] other info that might help us debug this: [ 112.682781][ T4980] [ 112.693040][ T4980] Chain exists of: [ 112.693040][ T4980] nci_mutex --> &genl_data->genl_data_mutex --> &ndev->req_lock [ 112.693040][ T4980] [ 112.706638][ T4980] Possible unsafe locking scenario: [ 112.706638][ T4980] [ 112.714119][ T4980] CPU0 CPU1 [ 112.719529][ T4980] ---- ---- [ 112.724914][ T4980] lock(&ndev->req_lock); [ 112.729375][ T4980] lock(&genl_data->genl_data_mutex); [ 112.737388][ T4980] lock(&ndev->req_lock); [ 112.744614][ T4980] lock(nci_mutex); [ 112.748536][ T4980] [ 112.748536][ T4980] *** DEADLOCK *** [ 112.748536][ T4980] [ 112.756958][ T4980] 1 lock held by syz.1.227/4980: [ 112.762057][ T4980] #0: ffff8880268f5350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0x102/0x600 [ 112.771875][ T4980] [ 112.771875][ T4980] stack backtrace: [ 112.777786][ T4980] CPU: 1 PID: 4980 Comm: syz.1.227 Not tainted syzkaller #0 [ 112.785156][ T4980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 112.795261][ T4980] Call Trace: [ 112.798569][ T4980] [ 112.801629][ T4980] dump_stack_lvl+0x188/0x24e [ 112.806352][ T4980] ? load_image+0x410/0x410 [ 112.810903][ T4980] ? show_regs_print_info+0x12/0x12 [ 112.816163][ T4980] ? print_circular_bug+0x12b/0x1a0 [ 112.821399][ T4980] check_noncircular+0x2f8/0x400 [ 112.826432][ T4980] ? print_deadlock_bug+0x5d0/0x5d0 [ 112.831691][ T4980] ? lockdep_lock+0xf1/0x1f0 [ 112.836336][ T4980] ? _find_first_zero_bit+0xd2/0x100 [ 112.841675][ T4980] __lock_acquire+0x3a03/0x7ea0 [ 112.846582][ T4980] ? verify_lock_unused+0x140/0x140 [ 112.851950][ T4980] ? release_firmware_map_entry+0x187/0x187 [ 112.857886][ T4980] ? prb_read_valid+0x60/0x60 [ 112.862620][ T4980] ? llist_add_batch+0x12b/0x180 [ 112.867590][ T4980] ? preempt_schedule+0xbc/0xd0 [ 112.872473][ T4980] ? find_next_clump8+0x1a0/0x1a0 [ 112.877527][ T4980] lock_acquire+0x1bc/0x4a0 [ 112.882062][ T4980] ? virtual_nci_close+0x13/0x40 [ 112.887058][ T4980] ? __irq_work_queue_local+0x12c/0x190 [ 112.892671][ T4980] ? __might_sleep+0xd0/0xd0 [ 112.897419][ T4980] ? read_lock_is_recursive+0x10/0x10 [ 112.902849][ T4980] ? vprintk_emit+0x59f/0x6a0 [ 112.907567][ T4980] ? printk_sprint+0x460/0x460 [ 112.912386][ T4980] __mutex_lock+0x12d/0xae0 [ 112.916930][ T4980] ? virtual_nci_close+0x13/0x40 [ 112.921909][ T4980] ? _raw_spin_unlock_irq+0x2a/0x40 [ 112.927143][ T4980] ? _printk+0xda/0x130 [ 112.931332][ T4980] ? virtual_nci_close+0x13/0x40 [ 112.936402][ T4980] ? mutex_lock_nested+0x10/0x10 [ 112.941373][ T4980] ? load_image+0x410/0x410 [ 112.945922][ T4980] ? nci_send_cmd+0x1db/0x320 [ 112.950652][ T4980] virtual_nci_close+0x13/0x40 [ 112.955446][ T4980] nci_close_device+0x383/0x600 [ 112.960324][ T4980] ? __kmem_cache_free+0xb6/0x200 [ 112.965373][ T4980] ? nci_unregister_device+0x250/0x250 [ 112.970859][ T4980] nci_unregister_device+0x5e/0x250 [ 112.976091][ T4980] ? __might_sleep+0xd0/0xd0 [ 112.980720][ T4980] ? virtual_ncidev_open+0xc0/0xc0 [ 112.986175][ T4980] virtual_ncidev_close+0x55/0x90 [ 112.991390][ T4980] __fput+0x20a/0x8b0 [ 112.995416][ T4980] task_work_run+0x1d0/0x260 [ 113.000043][ T4980] ? task_work_cancel+0x220/0x220 [ 113.005157][ T4980] ? __close_range+0x20c/0x770 [ 113.009959][ T4980] ? exit_to_user_mode_loop+0x3b/0x110 [ 113.015451][ T4980] exit_to_user_mode_loop+0xe6/0x110 [ 113.020765][ T4980] exit_to_user_mode_prepare+0xee/0x180 [ 113.026342][ T4980] syscall_exit_to_user_mode+0x16/0x40 [ 113.031835][ T4980] do_syscall_64+0x58/0xa0 [ 113.036279][ T4980] ? clear_bhb_loop+0x60/0xb0 [ 113.040980][ T4980] ? clear_bhb_loop+0x60/0xb0 [ 113.045685][ T4980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.051604][ T4980] RIP: 0033:0x7fd71ef9f559 [ 113.056065][ T4980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.075704][ T4980] RSP: 002b:00007ffef53bb648 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 113.084145][ T4980] RAX: 0000000000000000 RBX: 00007fd71f227da0 RCX: 00007fd71ef9f559 [ 113.092137][ T4980] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 113.100128][ T4980] RBP: 00007fd71f227da0 R08: 00007fd71f226128 R09: 0000000000000000 [ 113.108123][ T4980] R10: 00000000003ffcb0 R11: 0000000000000246 R12: 000000000001ae02 [ 113.116114][ T4980] R13: 00007fd71f225fac R14: 000000000001abac R15: 00007fd71f225fa0 [ 113.124112][ T4980] [ 113.127239][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.201919][ T4337] hid-generic 0005:15C2:8000.0001: item fetching failed at offset 0/4 [ 113.222736][ T4337] hid-generic: probe of 0005:15C2:8000.0001 failed with error -22