last executing test programs: 7.672304095s ago: executing program 4 (id=304): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x140, 0x1a0) r1 = fanotify_init(0x20, 0x400) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0x60000726) fanotify_init(0xf00, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) 5.511715117s ago: executing program 3 (id=307): r0 = socket(0x2d, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000700)=@generic={0x2d, "0000010000000f010800"}, 0x80) 5.489060217s ago: executing program 4 (id=308): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1004, 0x1) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x0, 0x3}, 0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file2\x00', 0xc000, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2) 5.023736728s ago: executing program 4 (id=309): ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, 0x0) 5.023471858s ago: executing program 3 (id=310): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) r0 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000640)='3', 0x1}], 0x1, 0x800, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000680)=0x4, 0x4) mmap$fb(&(0x7f000081d000/0x2000)=nil, 0x2000, 0x1000000, 0x41d2110, 0xffffffffffffffff, 0xf000) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) 5.023307238s ago: executing program 4 (id=311): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000900)='.U/', 0x3, 0x12, 0x0, 0x0) 5.023116318s ago: executing program 2 (id=312): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000005, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0xf, 0x76, 0xc596, 0x20000400, 0x8, 0xffffffffffffffff, 0x1fffffffffffffff, 0xb3, 0x91], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x68ff, 0xa, 0x0, 0x3, 0xa], 0x41000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.637204648s ago: executing program 1 (id=314): r0 = socket$rxrpc(0x21, 0x2, 0x2) close(0x4) syz_open_procfs$namespace(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)="390000001300034700000000c3e4ffff010000000100", 0x16}], 0x1) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) sendto$rxrpc(r0, 0x0, 0x0, 0x4080, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.615807498s ago: executing program 3 (id=315): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 4.392116454s ago: executing program 2 (id=316): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="64000000100001060000000000000000000000003f000000000000000000000010000300766574683000000000000000100012000800010076657468180002000a00010000", 0x45}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000380)={0x5, 0x0, [{0xc0000001, 0x2, 0x1, 0x6, 0x7, 0x10001, 0x44}, {0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}, {0x80000008, 0x9, 0x0, 0x1000005, 0xfffffffc, 0x4, 0x80000001}, {0x80000008, 0xb, 0x2, 0x0, 0x8, 0x37b5c985, 0x9}, {0x80000007, 0x33, 0x4, 0xe, 0x10000, 0x0, 0x1}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.637554572s ago: executing program 3 (id=318): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="64000000100001060000000000000000000000003f000000000000000000000010000300766574683000000000000000100012000800010076657468180002000a00010000", 0x45}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000380)={0x4, 0x0, [{0xc0000001, 0x2, 0x1, 0x6, 0x7, 0x10001, 0x44}, {0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}, {0x80000008, 0x9, 0x0, 0x1000005, 0xfffffffc, 0x4, 0x80000001}, {0x80000007, 0x33, 0x4, 0xe, 0x10000, 0x0, 0x1}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.960182328s ago: executing program 1 (id=321): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000080), 0xfd, 0x571, &(0x7f0000000140)="$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") ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000000c0)={0x0, 0x0, "6339ead618e597cb1072897a52c30fec"}) 2.960074518s ago: executing program 0 (id=322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000019380)=ANY=[@ANYBLOB="200000000209030000000008000000000300000109000100"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x80) 2.852340621s ago: executing program 0 (id=323): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[], 0xac}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000300), 0x2e9, 0xffe0) 2.780225142s ago: executing program 4 (id=324): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) socket(0x1e, 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) geteuid() socket(0x29, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000200)="e8", 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='p:p1 ./file0:0', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r1, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.632084196s ago: executing program 2 (id=325): mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$inet6_sctp(0xa, 0x1, 0x84) memfd_create(0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f00000013c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000014c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000001540), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000015c0)=0x6) getsockopt$bt_hci(r1, 0x84, 0x2, &(0x7f0000000080)=""/4115, 0x0) getsockopt(r0, 0x114, 0x0, 0x0, &(0x7f0000000040)) 2.577669457s ago: executing program 0 (id=326): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000005, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0xf, 0x76, 0xc596, 0x20000400, 0x8, 0xffffffffffffffff, 0x1fffffffffffffff, 0xb3, 0x91], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x68ff, 0xa, 0x0, 0x3, 0xa], 0x41000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.528209669s ago: executing program 1 (id=327): syz_emit_ethernet(0x46, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x5, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 1.542336242s ago: executing program 2 (id=328): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r1, 0x401, 0xfffd}, 0x8) 1.536270013s ago: executing program 0 (id=329): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x28, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007d, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x9, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mount$cgroup2(0x0, &(0x7f0000000480)='.\x00', &(0x7f00000004c0), 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB='pids_l']) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000380)={0x5, 0x0, [{0xc0000001, 0x2, 0x1, 0x6, 0x7, 0x10001, 0x44}, {0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}, {0x80000008, 0x9, 0x0, 0x1000005, 0xfffffffc, 0x4, 0x80000001}, {0x80000008, 0xb, 0x2, 0x0, 0x8, 0x37b5c985, 0x9}, {0x80000007, 0x33, 0x4, 0xe, 0x10000, 0x0, 0x1}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.462445524s ago: executing program 3 (id=330): r0 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x400) ioctl$COMEDI_SETRSUBD(r0, 0x6410) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000005c0)) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000280)={0x1, 0x0, 0x2, 0xc6c0, 0x10c, 0x0, 0xd7ed, 0x81, 0x4}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="d80000000b06050100000000000000000500080224000780060005404e2000001800018014000240ff0100080000000000000000000000010900020073797a30000000003400078006001d4000070000060005404e2500000900120073797a3000000000060005404e2400000900120073797a30000000000900020073797a31000000001400078008001c400000000908001c4000000005380007800c0014800800014064010100080006400000000318001680000000000000000000bb05001500400000000500010007000000"], 0xd8}, 0x1, 0x0, 0x0, 0x48}, 0x4800) 1.396320196s ago: executing program 1 (id=331): add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/loop0/make-it-fail\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000240)=0x24, 0x12) 1.378307906s ago: executing program 2 (id=332): setns(0xc9, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000180)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4, 0x2, 0x3, 0xc, 0x0, 0x7}, 0x20) 1.284653409s ago: executing program 1 (id=333): r0 = socket(0x1, 0x4, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f00000007c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x10, "c7dff70e4f853f3a4c1240f0f02fd60d"}, &(0x7f0000000200)=0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2}) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000070601030000000000000000010000050900020073797a3100000000050001000700dd89baea3ed8c1"], 0x28}, 0x1, 0x0, 0x0, 0x40091}, 0x20000080) recvmsg(r4, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0) 1.156158222s ago: executing program 2 (id=334): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000900)='.U/', 0x3, 0x12, 0x0, 0x0) 232.769604ms ago: executing program 1 (id=335): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="64000000100001060000000000000000000000003f000000000000000000000010000300766574683000000000000000100012000800010076657468180002000a00010000", 0x45}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000380)={0x5, 0x0, [{0xc0000001, 0x2, 0x1, 0x6, 0x7, 0x10001, 0x44}, {0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}, {0x80000008, 0x9, 0x0, 0x1000005, 0xfffffffc, 0x4, 0x80000001}, {0x80000008, 0xb, 0x2, 0x0, 0x8, 0x37b5c985, 0x9}, {0x80000007, 0x33, 0x4, 0xe, 0x10000, 0x0, 0x1}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 181.889395ms ago: executing program 4 (id=336): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14010000", @ANYRES16=r1, @ANYBLOB="cd3e0000000002000000010000000800020005000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204020b"], 0x114}}, 0x0) 161.084716ms ago: executing program 0 (id=337): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 303.13µs ago: executing program 3 (id=338): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x101f01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TCXONC(r0, 0x540a, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="5e1e02fd", 0x4}], 0x1) 0s ago: executing program 0 (id=339): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000005, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0xf, 0x76, 0xc596, 0x20000400, 0x8, 0xffffffffffffffff, 0x1fffffffffffffff, 0xb3, 0x91], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x68ff, 0xa, 0x0, 0x3, 0xa], 0x41000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.33' (ED25519) to the list of known hosts. [ 61.981183][ T4172] cgroup: Unknown subsys name 'net' [ 62.110106][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.615117][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.362952][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.372082][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.380516][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.401539][ T4184] rdma_rxe: rxe_register_device failed with error -23 [ 65.413347][ T4184] rdma_rxe: failed to add rxe_eth0 [ 65.417766][ T4189] rdma_rxe: rxe_register_device failed with error -23 [ 65.442975][ T4191] rdma_rxe: rxe_register_device failed with error -23 [ 65.463845][ T4192] rdma_rxe: rxe_register_device failed with error -23 [ 65.470842][ T4192] rdma_rxe: failed to add rxe_eth0 [ 65.486278][ T4189] rdma_rxe: failed to add rxe_eth0 [ 65.514029][ T4191] rdma_rxe: failed to add rxe_eth0 [ 65.602882][ T4185] infiniband rxe0: set active [ 65.620443][ T4198] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.626920][ T4185] infiniband rxe0: added rxe_eth0 [ 65.665129][ T4185] RDS/IB: rxe0: added [ 65.669757][ T4185] smc: adding ib device rxe0 with port count 1 [ 65.676450][ T4185] smc: ib device rxe0 port 1 has pnetid [ 65.683306][ T4198] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.712607][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.894791][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 65.914756][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.947705][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 66.080639][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.102434][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 66.167256][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 66.250485][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.253191][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.268724][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.277635][ T4184] device bridge_slave_0 entered promiscuous mode [ 66.337439][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.344837][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.353004][ T4184] device bridge_slave_1 entered promiscuous mode [ 66.412996][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.432098][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.440571][ T4189] device bridge_slave_0 entered promiscuous mode [ 66.484396][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.491522][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.500024][ T4192] device bridge_slave_0 entered promiscuous mode [ 66.508013][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.516663][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.525055][ T4189] device bridge_slave_1 entered promiscuous mode [ 66.548177][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.557807][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.565981][ T4192] device bridge_slave_1 entered promiscuous mode [ 66.575315][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.592631][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.603328][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.610101][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.617471][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.637940][ T4191] device bridge_slave_0 entered promiscuous mode [ 66.646332][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.653410][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.661506][ T4191] device bridge_slave_1 entered promiscuous mode [ 66.722224][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.752265][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.765819][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.786693][ T4184] team0: Port device team_slave_0 added [ 66.800854][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.819577][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.835362][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.845603][ T4184] team0: Port device team_slave_1 added [ 66.874855][ T4191] team0: Port device team_slave_0 added [ 66.902219][ T4192] team0: Port device team_slave_0 added [ 66.911515][ T4192] team0: Port device team_slave_1 added [ 66.924007][ T4191] team0: Port device team_slave_1 added [ 66.938017][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.945401][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.976603][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.004255][ T4189] team0: Port device team_slave_0 added [ 67.017525][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.024851][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.050891][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.071572][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.078753][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.105079][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.118193][ T4189] team0: Port device team_slave_1 added [ 67.124735][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.131704][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.157826][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.211495][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.218615][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.245082][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.276713][ T4192] device hsr_slave_0 entered promiscuous mode [ 67.283624][ T4192] device hsr_slave_1 entered promiscuous mode [ 67.290817][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.298128][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.324933][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 67.331419][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.334299][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 67.347172][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.356170][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.360249][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 67.383305][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.403627][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 67.414005][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 67.421580][ T4184] device hsr_slave_0 entered promiscuous mode [ 67.428425][ T4184] device hsr_slave_1 entered promiscuous mode [ 67.435402][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.443329][ T4184] Cannot create hsr debugfs directory [ 67.458664][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.465832][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.492146][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.592238][ T4191] device hsr_slave_0 entered promiscuous mode [ 67.601941][ T4191] device hsr_slave_1 entered promiscuous mode [ 67.608603][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.616425][ T4191] Cannot create hsr debugfs directory [ 67.664938][ T4189] device hsr_slave_0 entered promiscuous mode [ 67.672307][ T4189] device hsr_slave_1 entered promiscuous mode [ 67.679086][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.686739][ T4189] Cannot create hsr debugfs directory [ 67.822771][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 67.966851][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.976329][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.984890][ T4185] device bridge_slave_0 entered promiscuous mode [ 67.997580][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.010712][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.018022][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.028273][ T4185] device bridge_slave_1 entered promiscuous mode [ 68.056737][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.074648][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.087266][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.097003][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.111536][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.153238][ T4185] team0: Port device team_slave_0 added [ 68.162520][ T4185] team0: Port device team_slave_1 added [ 68.193085][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.204313][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.211320][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.238116][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.250779][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.260179][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.286856][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.305038][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.343422][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.358803][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.370726][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.392672][ T4185] device hsr_slave_0 entered promiscuous mode [ 68.400034][ T4185] device hsr_slave_1 entered promiscuous mode [ 68.407074][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.415117][ T4185] Cannot create hsr debugfs directory [ 68.427400][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.452909][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.486368][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.504919][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.519187][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.529225][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.538929][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.637344][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.694067][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.702910][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.731257][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.750826][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.779997][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.790254][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.800198][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.807509][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.830392][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.856362][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.865156][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.872952][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.882070][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.891118][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.903921][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.910989][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.923730][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.932525][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.943406][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.950595][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.959408][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.969015][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.978186][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.004048][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.013193][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.022105][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.029246][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.038761][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.050636][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.061099][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.071084][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.087079][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.098278][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.107315][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.117316][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.128088][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.138742][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.154000][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.167717][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.177576][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.200338][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.212627][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.221936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.236463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.248651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.257945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.269183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.277979][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.287054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.300683][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.312427][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.321701][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.331568][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.340658][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.353129][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.368428][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.387513][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.403323][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.411092][ T4255] Bluetooth: hci2: command 0x041b tx timeout [ 69.423846][ T4255] Bluetooth: hci3: command 0x041b tx timeout [ 69.430997][ T4255] Bluetooth: hci1: command 0x041b tx timeout [ 69.442646][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.453212][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.467148][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.474281][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.485215][ T4206] Bluetooth: hci0: command 0x041b tx timeout [ 69.491571][ T4206] Bluetooth: hci4: command 0x041b tx timeout [ 69.499216][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.508656][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.517628][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.524777][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.532418][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.541273][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.565793][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.585352][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.594863][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.614887][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.629467][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.640459][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.654851][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.670622][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.680719][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.687885][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.697293][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.706377][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.717855][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.725015][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.733377][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.745934][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.754891][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.764130][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.772851][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.809890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.820836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.830838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.841121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.850202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.858771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.879780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.889588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.907502][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.923571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.932261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.953526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.962451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.973253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.982190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.997357][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.018699][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.032439][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.078871][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.117881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.127946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.157493][ T4184] device veth0_vlan entered promiscuous mode [ 70.175148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.194377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.214743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.222803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.245831][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.259569][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.280629][ T4184] device veth1_vlan entered promiscuous mode [ 70.310688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.321302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.335319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.343004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.357926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.405051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.415344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.434311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.447353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.456620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.475153][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.488918][ T4192] device veth0_vlan entered promiscuous mode [ 70.523332][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.532713][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.541775][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.551084][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.560328][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.568223][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.577370][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.587184][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.595837][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.602959][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.610931][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.622838][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.631691][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.640188][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.650796][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.684212][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.693252][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.703870][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.712632][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.724406][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.733236][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.747397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.755564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.770140][ T4184] device veth0_macvtap entered promiscuous mode [ 70.781198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.789902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.800283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.812523][ T4192] device veth1_vlan entered promiscuous mode [ 70.834145][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.845702][ T4184] device veth1_macvtap entered promiscuous mode [ 70.868308][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.880127][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.889639][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.900675][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.910354][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.956155][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.977538][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.990379][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.002830][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.025006][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.039882][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.051272][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.067206][ T4192] device veth0_macvtap entered promiscuous mode [ 71.090733][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.102774][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.115751][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.126550][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.136045][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.147823][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.172999][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.186773][ T4189] device veth0_vlan entered promiscuous mode [ 71.196719][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.214453][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.222986][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.253689][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.262688][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.264231][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.277752][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.307304][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.324036][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.335716][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.344866][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.357612][ T4192] device veth1_macvtap entered promiscuous mode [ 71.373767][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.388131][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.398647][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.441098][ T4189] device veth1_vlan entered promiscuous mode [ 71.467547][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.485392][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.499473][ T4255] Bluetooth: hci1: command 0x040f tx timeout [ 71.507211][ T4255] Bluetooth: hci3: command 0x040f tx timeout [ 71.507708][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.514820][ T4255] Bluetooth: hci2: command 0x040f tx timeout [ 71.535028][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.551572][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.562447][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.574307][ T4255] Bluetooth: hci4: command 0x040f tx timeout [ 71.580428][ T4255] Bluetooth: hci0: command 0x040f tx timeout [ 71.587528][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.604952][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.614008][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.622734][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.632895][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.659146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.667747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.676400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.686670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.695819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.709040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.718051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.728475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.744666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.755001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.768359][ T4189] device veth0_macvtap entered promiscuous mode [ 71.808820][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.826152][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.836387][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.854831][ T4189] device veth1_macvtap entered promiscuous mode [ 71.886613][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.895739][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.905049][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.914459][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.922479][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.937525][ T4191] device veth0_vlan entered promiscuous mode [ 71.955860][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.967422][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.978671][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.989907][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.001821][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.022461][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.046363][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.056413][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.068579][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.078417][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.094030][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.108144][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.118301][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.129735][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.141188][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.158902][ T4191] device veth1_vlan entered promiscuous mode [ 72.170073][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.180192][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.189467][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.198353][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.207444][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.216918][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.237411][ T4185] device veth0_vlan entered promiscuous mode [ 72.264063][ T4267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.271965][ T4267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.308040][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.319874][ T4185] device veth1_vlan entered promiscuous mode [ 72.327114][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.338723][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.353246][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.362601][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.374315][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.391894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.401289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.410159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.497784][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.512771][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.524919][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.533221][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.555532][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.565593][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.581894][ T4191] device veth0_macvtap entered promiscuous mode [ 72.598239][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.627700][ T4191] device veth1_macvtap entered promiscuous mode [ 72.643852][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.652190][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.667168][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.681793][ T4185] device veth0_macvtap entered promiscuous mode [ 72.716243][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.742459][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.755295][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.772846][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.778966][ T4293] FAULT_INJECTION: forcing a failure. [ 72.778966][ T4293] name failslab, interval 1, probability 0, space 0, times 1 [ 72.785799][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.809403][ T4293] CPU: 1 PID: 4293 Comm: syz.3.4 Not tainted syzkaller #0 [ 72.816899][ T4293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.817930][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.827244][ T4293] Call Trace: [ 72.827255][ T4293] [ 72.827264][ T4293] dump_stack_lvl+0x188/0x250 [ 72.844828][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.848827][ T4293] ? show_regs_print_info+0x20/0x20 [ 72.861251][ T4293] ? load_image+0x410/0x410 [ 72.865803][ T4293] ? __might_sleep+0xf0/0xf0 [ 72.870459][ T4293] ? __lock_acquire+0x7d40/0x7d40 [ 72.875688][ T4293] should_fail+0x383/0x4b0 [ 72.877379][ T4185] device veth1_macvtap entered promiscuous mode [ 72.880150][ T4293] should_failslab+0x5/0x20 [ 72.890996][ T4293] slab_pre_alloc_hook+0x51/0xc0 [ 72.896123][ T4293] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 72.901907][ T4293] ? blkg_alloc+0xa9/0x640 [ 72.906403][ T4293] blkg_alloc+0xa9/0x640 [ 72.910706][ T4293] blkcg_init_queue+0x26/0x430 [ 72.915542][ T4293] blk_alloc_queue+0x427/0x580 [ 72.920351][ T4293] __blk_mq_alloc_disk+0x43/0x150 [ 72.925417][ T4293] ? loop_add+0x263/0x890 [ 72.929864][ T4293] loop_add+0x288/0x890 [ 72.931248][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.934056][ T4293] loop_control_ioctl+0x124/0x550 [ 72.934091][ T4293] ? xor_init+0x60/0x60 [ 72.944775][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.949756][ T4293] ? bpf_lsm_file_ioctl+0x5/0x10 [ 72.968814][ T4293] ? security_file_ioctl+0x7c/0xa0 [ 72.973965][ T4293] ? xor_init+0x60/0x60 [ 72.975732][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.978156][ T4293] __se_sys_ioctl+0xfa/0x170 [ 72.993354][ T4293] do_syscall_64+0x4c/0xa0 [ 72.997806][ T4293] ? clear_bhb_loop+0x30/0x80 [ 73.000512][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.002540][ T4293] ? clear_bhb_loop+0x30/0x80 [ 73.017507][ T4293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.023449][ T4293] RIP: 0033:0x7fe547b61559 [ 73.027901][ T4293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.035162][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.047527][ T4293] RSP: 002b:00007fe545db9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.047553][ T4293] RAX: ffffffffffffffda RBX: 00007fe547de8fa0 RCX: 00007fe547b61559 [ 73.047569][ T4293] RDX: ffffffffff600000 RSI: 0000000000004c80 RDI: 0000000000000008 [ 73.047584][ T4293] RBP: 00007fe547bf88b0 R08: 0000000000000000 R09: 0000000000000000 [ 73.079445][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.082375][ T4293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.100530][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.108149][ T4293] R13: 00007fe547de9038 R14: 00007fe547de8fa0 R15: 00007ffdf30189b8 [ 73.108182][ T4293] [ 73.134974][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.147167][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.165119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.165829][ T4295] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 73.182017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.185064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.204434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.213345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.228050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.241499][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.255392][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.266848][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.278724][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.292337][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.305727][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.321119][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.352967][ T4297] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.362206][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.384105][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.391960][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.423922][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.442107][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.457686][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.541784][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.570101][ T4252] Bluetooth: hci2: command 0x0419 tx timeout [ 73.576646][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.604817][ T4252] Bluetooth: hci3: command 0x0419 tx timeout [ 73.622894][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.643408][ T4252] Bluetooth: hci1: command 0x0419 tx timeout [ 73.671896][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.683867][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.693956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.702634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.712172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.720182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.729913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.752948][ T4258] Bluetooth: hci0: command 0x0419 tx timeout [ 73.759177][ T4258] Bluetooth: hci4: command 0x0419 tx timeout [ 73.781100][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.957522][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.212793][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.428248][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.498344][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.524002][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.560328][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.569808][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.615863][ T4309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.646186][ T4309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.770560][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.792193][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.817863][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.844409][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.868324][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.889603][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.923822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.970292][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.989232][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.022590][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.069963][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.110015][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.154087][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.331749][ T4331] overlayfs: failed to set xattr on upper [ 75.349419][ T4331] overlayfs: ...falling back to index=off,metacopy=off. [ 75.598081][ T4335] FAULT_INJECTION: forcing a failure. [ 75.598081][ T4335] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 75.613613][ T4335] CPU: 1 PID: 4335 Comm: syz.2.3 Not tainted syzkaller #0 [ 75.620785][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.630875][ T4335] Call Trace: [ 75.634185][ T4335] [ 75.637144][ T4335] dump_stack_lvl+0x188/0x250 [ 75.641866][ T4335] ? show_regs_print_info+0x20/0x20 [ 75.647103][ T4335] ? load_image+0x410/0x410 [ 75.651648][ T4335] ? __lock_acquire+0x7d40/0x7d40 [ 75.656712][ T4335] ? memslot_rmap_alloc+0xe7/0x2b0 [ 75.661859][ T4335] ? kvm_set_memslot+0x65b/0x1a00 [ 75.666921][ T4335] ? __kvm_set_memory_region+0xb5e/0xd90 [ 75.672587][ T4335] ? kvm_vm_ioctl_set_memory_region+0x6f/0xa0 [ 75.678694][ T4335] should_fail+0x383/0x4b0 [ 75.683158][ T4335] prepare_alloc_pages+0x1e3/0x5b0 [ 75.688838][ T4335] __alloc_pages+0x11b/0x480 [ 75.688891][ T4335] ? zone_statistics+0x170/0x170 [ 75.688934][ T4335] __vmalloc_node_range+0x4b1/0x8b0 [ 75.688968][ T4335] ? memslot_rmap_alloc+0xe7/0x2b0 [ 75.688989][ T4335] __vmalloc+0x76/0x80 [ 75.689012][ T4335] ? memslot_rmap_alloc+0xe7/0x2b0 [ 75.689035][ T4335] memslot_rmap_alloc+0xe7/0x2b0 [ 75.689069][ T4335] kvm_arch_prepare_memory_region+0xaf/0xb70 [ 75.689096][ T4335] ? kvm_set_memslot+0x63e/0x1a00 [ 75.689122][ T4335] kvm_set_memslot+0x65b/0x1a00 [ 75.689143][ T4335] ? arch_stack_walk+0xf2/0x140 [ 75.689183][ T4335] ? __kvm_memslots+0x1a0/0x1a0 [ 75.689225][ T4335] __kvm_set_memory_region+0xb5e/0xd90 [ 75.689256][ T4335] ? __mutex_lock_common+0x435/0x2400 [ 75.689358][ T4335] ? kvm_put_kvm_no_destroy+0x80/0x80 [ 75.689455][ T4335] ? kvm_vm_ioctl_set_memory_region+0x64/0xa0 [ 75.689553][ T4335] ? __might_fault+0xb7/0x110 [ 75.689638][ T4335] ? mutex_lock_io_nested+0x60/0x60 [ 75.689754][ T4335] ? __might_fault+0xb3/0x110 [ 75.689849][ T4335] kvm_vm_ioctl_set_memory_region+0x6f/0xa0 [ 75.689947][ T4335] kvm_vm_ioctl+0x8d7/0xb00 [ 75.690043][ T4335] ? kvm_device_release+0x1e0/0x1e0 [ 75.690131][ T4335] ? kfree+0xef/0x2a0 [ 75.690234][ T4335] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 75.690353][ T4335] ? bpf_lsm_file_ioctl+0x5/0x10 [ 75.690374][ T4335] ? security_file_ioctl+0x7c/0xa0 [ 75.690397][ T4335] ? kvm_device_release+0x1e0/0x1e0 [ 75.690422][ T4335] __se_sys_ioctl+0xfa/0x170 [ 75.690447][ T4335] do_syscall_64+0x4c/0xa0 [ 75.690468][ T4335] ? clear_bhb_loop+0x30/0x80 [ 75.690492][ T4335] ? clear_bhb_loop+0x30/0x80 [ 75.690518][ T4335] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.690542][ T4335] RIP: 0033:0x7ff5107cb559 [ 75.690562][ T4335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.690581][ T4335] RSP: 002b:00007ff50ea23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.690606][ T4335] RAX: ffffffffffffffda RBX: 00007ff510a52fa0 RCX: 00007ff5107cb559 [ 75.690622][ T4335] RDX: 00002000000001c0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 75.690637][ T4335] RBP: 00007ff5108628b0 R08: 0000000000000000 R09: 0000000000000000 [ 75.690651][ T4335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.690664][ T4335] R13: 00007ff510a53038 R14: 00007ff510a52fa0 R15: 00007ffc8394f468 [ 75.690697][ T4335] [ 75.692012][ T4350] Console: switching to colour VGA+ 80x25 [ 76.044312][ T4351] Console: switching to colour frame buffer device 128x48 [ 76.394348][ T4253] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.663663][ T4206] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.778725][ T4374] bond0: (slave ip6tnl1): refused to change device type [ 76.848380][ T4379] syz.0.24 uses obsolete (PF_INET,SOCK_PACKET) [ 77.017640][ T4381] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.944053][ T4206] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 77.973632][ T4206] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 78.016884][ T4396] netlink: 'syz.0.29': attribute type 1 has an invalid length. [ 78.108965][ T4396] qfq: no options [ 78.273964][ T4255] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.022525][ T4206] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 79.032562][ T4206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.041071][ T4206] usb 4-1: Product: syz [ 79.045825][ T4206] usb 4-1: Manufacturer: syz [ 79.050499][ T4206] usb 4-1: SerialNumber: syz [ 79.243624][ T4254] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.253616][ T4255] usb 3-1: Using ep0 maxpacket: 8 [ 79.337955][ T4429] FAULT_INJECTION: forcing a failure. [ 79.337955][ T4429] name failslab, interval 1, probability 0, space 0, times 0 [ 79.381614][ T4429] CPU: 1 PID: 4429 Comm: syz.0.33 Not tainted syzkaller #0 [ 79.388887][ T4429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.398981][ T4429] Call Trace: [ 79.402296][ T4429] [ 79.405287][ T4429] dump_stack_lvl+0x188/0x250 [ 79.410117][ T4429] ? show_regs_print_info+0x20/0x20 [ 79.415360][ T4429] ? load_image+0x410/0x410 [ 79.419902][ T4429] ? __might_sleep+0xf0/0xf0 [ 79.424531][ T4429] ? __lock_acquire+0x7d40/0x7d40 [ 79.429602][ T4429] should_fail+0x383/0x4b0 [ 79.434057][ T4429] should_failslab+0x5/0x20 [ 79.435203][ T4206] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 79.438587][ T4429] slab_pre_alloc_hook+0x51/0xc0 [ 79.438618][ T4429] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 79.438641][ T4429] ? __get_vm_area_node+0x119/0x2d0 [ 79.454151][ T4255] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 79.456197][ T4429] __get_vm_area_node+0x119/0x2d0 [ 79.456234][ T4429] __vmalloc_node_range+0xef/0x8b0 [ 79.461430][ T4255] usb 3-1: config 179 has no interface number 0 [ 79.469664][ T4429] ? memslot_rmap_alloc+0x191/0x2b0 [ 79.469699][ T4429] ? memslot_rmap_alloc+0x191/0x2b0 [ 79.469719][ T4429] __vmalloc+0x76/0x80 [ 79.469742][ T4429] ? memslot_rmap_alloc+0x191/0x2b0 [ 79.505873][ T4429] memslot_rmap_alloc+0x191/0x2b0 [ 79.510945][ T4429] kvm_arch_prepare_memory_region+0xaf/0xb70 [ 79.512322][ T4255] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 79.516959][ T4429] ? kvm_set_memslot+0x63e/0x1a00 [ 79.516990][ T4429] kvm_set_memslot+0x65b/0x1a00 [ 79.517010][ T4429] ? arch_stack_walk+0xf2/0x140 [ 79.517047][ T4429] ? __kvm_memslots+0x1a0/0x1a0 [ 79.517088][ T4429] __kvm_set_memory_region+0xb5e/0xd90 [ 79.517117][ T4429] ? __mutex_lock_common+0x435/0x2400 [ 79.517147][ T4429] ? kvm_put_kvm_no_destroy+0x80/0x80 [ 79.517179][ T4429] ? kvm_vm_ioctl_set_memory_region+0x64/0xa0 [ 79.517208][ T4429] ? __might_fault+0xb7/0x110 [ 79.517231][ T4429] ? mutex_lock_io_nested+0x60/0x60 [ 79.517262][ T4429] ? __might_fault+0xb3/0x110 [ 79.517294][ T4429] kvm_vm_ioctl_set_memory_region+0x6f/0xa0 [ 79.517323][ T4429] kvm_vm_ioctl+0x8d7/0xb00 [ 79.535512][ T4206] usb 4-1: unit 4 not found! [ 79.538239][ T4429] ? kvm_device_release+0x1e0/0x1e0 [ 79.564562][ T4255] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 79.570219][ T4429] ? kfree+0xef/0x2a0 [ 79.570255][ T4429] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 79.603581][ T4255] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 79.605154][ T4429] ? bpf_lsm_file_ioctl+0x5/0x10 [ 79.641881][ T4429] ? security_file_ioctl+0x7c/0xa0 [ 79.643541][ T4255] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 79.647028][ T4429] ? kvm_device_release+0x1e0/0x1e0 [ 79.647060][ T4429] __se_sys_ioctl+0xfa/0x170 [ 79.668267][ T4429] do_syscall_64+0x4c/0xa0 [ 79.672725][ T4429] ? clear_bhb_loop+0x30/0x80 [ 79.677441][ T4429] ? clear_bhb_loop+0x30/0x80 [ 79.681107][ T4255] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 79.682250][ T4429] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.682286][ T4429] RIP: 0033:0x7f1f995cf559 [ 79.705889][ T4429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.712444][ T4206] usb 4-1: USB disconnect, device number 2 [ 79.725526][ T4429] RSP: 002b:00007f1f97827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.725555][ T4429] RAX: ffffffffffffffda RBX: 00007f1f99856fa0 RCX: 00007f1f995cf559 [ 79.725570][ T4429] RDX: 00002000000001c0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 79.725584][ T4429] RBP: 00007f1f996668b0 R08: 0000000000000000 R09: 0000000000000000 [ 79.725597][ T4429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.725609][ T4429] R13: 00007f1f99857038 R14: 00007f1f99856fa0 R15: 00007ffff9a564e8 [ 79.725640][ T4429] [ 79.795804][ T4429] syz.0.33: vmalloc error: size 8, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 79.813719][ T4255] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 79.828525][ T4439] netlink: 'syz.1.35': attribute type 4 has an invalid length. [ 79.843382][ T4255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.853362][ T4429] CPU: 0 PID: 4429 Comm: syz.0.33 Not tainted syzkaller #0 [ 79.860880][ T4429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.870972][ T4429] Call Trace: [ 79.874282][ T4429] [ 79.877242][ T4429] dump_stack_lvl+0x188/0x250 [ 79.881958][ T4429] ? rcu_lock_release+0x5/0x20 [ 79.886763][ T4429] ? show_regs_print_info+0x20/0x20 [ 79.891993][ T4429] ? load_image+0x410/0x410 [ 79.896546][ T4429] warn_alloc+0x245/0x320 [ 79.900921][ T4429] ? zone_watermark_ok_safe+0x250/0x250 [ 79.906510][ T4429] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 79.912130][ T4439] netlink: 'syz.1.35': attribute type 5 has an invalid length. [ 79.912527][ T4429] ? __get_vm_area_node+0x2b5/0x2d0 [ 79.925293][ T4429] __vmalloc_node_range+0x2b1/0x8b0 [ 79.930551][ T4429] ? memslot_rmap_alloc+0x191/0x2b0 [ 79.935785][ T4429] __vmalloc+0x76/0x80 [ 79.939896][ T4429] ? memslot_rmap_alloc+0x191/0x2b0 [ 79.945133][ T4429] memslot_rmap_alloc+0x191/0x2b0 [ 79.950201][ T4429] kvm_arch_prepare_memory_region+0xaf/0xb70 [ 79.956216][ T4429] ? kvm_set_memslot+0x63e/0x1a00 [ 79.961275][ T4429] kvm_set_memslot+0x65b/0x1a00 [ 79.966166][ T4429] ? arch_stack_walk+0xf2/0x140 [ 79.971063][ T4429] ? __kvm_memslots+0x1a0/0x1a0 [ 79.975962][ T4429] __kvm_set_memory_region+0xb5e/0xd90 [ 79.981578][ T4429] ? __mutex_lock_common+0x435/0x2400 [ 79.986998][ T4429] ? kvm_put_kvm_no_destroy+0x80/0x80 [ 79.987096][ T4439] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.35'. [ 79.992401][ T4429] ? kvm_vm_ioctl_set_memory_region+0x64/0xa0 [ 80.007425][ T4429] ? __might_fault+0xb7/0x110 [ 80.012138][ T4429] ? mutex_lock_io_nested+0x60/0x60 [ 80.017383][ T4429] ? __might_fault+0xb3/0x110 [ 80.022094][ T4429] kvm_vm_ioctl_set_memory_region+0x6f/0xa0 [ 80.028026][ T4429] kvm_vm_ioctl+0x8d7/0xb00 [ 80.032571][ T4429] ? kvm_device_release+0x1e0/0x1e0 [ 80.037803][ T4429] ? kfree+0xef/0x2a0 [ 80.041826][ T4429] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 80.047551][ T4429] ? bpf_lsm_file_ioctl+0x5/0x10 [ 80.052518][ T4429] ? security_file_ioctl+0x7c/0xa0 [ 80.057662][ T4429] ? kvm_device_release+0x1e0/0x1e0 [ 80.062901][ T4429] __se_sys_ioctl+0xfa/0x170 [ 80.067523][ T4429] do_syscall_64+0x4c/0xa0 [ 80.071972][ T4429] ? clear_bhb_loop+0x30/0x80 [ 80.076683][ T4429] ? clear_bhb_loop+0x30/0x80 [ 80.081397][ T4429] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.087325][ T4429] RIP: 0033:0x7f1f995cf559 [ 80.091773][ T4429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.111412][ T4429] RSP: 002b:00007f1f97827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.119865][ T4429] RAX: ffffffffffffffda RBX: 00007f1f99856fa0 RCX: 00007f1f995cf559 [ 80.127875][ T4429] RDX: 00002000000001c0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 80.135877][ T4429] RBP: 00007f1f996668b0 R08: 0000000000000000 R09: 0000000000000000 [ 80.143879][ T4429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.144370][ T4254] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 80.151870][ T4429] R13: 00007f1f99857038 R14: 00007f1f99856fa0 R15: 00007ffff9a564e8 [ 80.151905][ T4429] [ 80.152117][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.202409][ T4254] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.222414][ T4390] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 80.224062][ T4254] usb 5-1: Product: syz [ 80.275003][ T4254] usb 5-1: Manufacturer: syz [ 80.279810][ T4254] usb 5-1: SerialNumber: syz [ 80.326139][ T4442] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.376311][ T4429] Mem-Info: [ 80.380161][ T4429] active_anon:265 inactive_anon:5974 isolated_anon:0 [ 80.380161][ T4429] active_file:4628 inactive_file:36425 isolated_file:0 [ 80.380161][ T4429] unevictable:768 dirty:1800 writeback:0 [ 80.380161][ T4429] slab_reclaimable:20767 slab_unreclaimable:93138 [ 80.380161][ T4429] mapped:29529 shmem:1636 pagetables:673 bounce:0 [ 80.380161][ T4429] kernel_misc_reclaimable:0 [ 80.380161][ T4429] free:1383021 free_pcp:11184 free_cma:0 [ 80.431167][ T4429] Node 0 active_anon:1028kB inactive_anon:23384kB active_file:18308kB inactive_file:145700kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118116kB dirty:7164kB writeback:0kB shmem:4464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10764kB pagetables:2692kB all_unreclaimable? no [ 80.471619][ T4429] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:36kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 80.508830][ T4254] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 80.527617][ T4429] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 80.581441][ T4206] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input5 [ 80.591116][ T4429] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 80.605455][ T4429] Node 0 DMA32 free:1613004kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1028kB inactive_anon:23384kB active_file:18308kB inactive_file:145700kB unevictable:1536kB writepending:7116kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:31488kB local_pcp:10156kB free_cma:0kB [ 80.704987][ T4429] lowmem_reserve[]: 0 0 0 0 0 [ 80.709911][ T4429] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 80.776714][ T4255] usb 3-1: USB disconnect, device number 2 [ 80.790777][ T4429] lowmem_reserve[]: 0 0 0 0 0 [ 80.799338][ T4429] Node 1 Normal free:3904040kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:13772kB local_pcp:7056kB free_cma:0kB [ 80.828500][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 80.838591][ T4255] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 80.858409][ T4429] lowmem_reserve[]: 0 0 0 0 0 [ 80.869074][ T4429] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 80.890440][ T4429] Node 0 DMA32: 328*4kB (UME) 113*8kB (UM) 37*16kB (ME) 29*32kB (UME) 7*64kB (ME) 3*128kB (ME) 4*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (U) 391*4096kB (M) = 1613272kB [ 80.914413][ T4429] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 80.935129][ T4429] Node 1 Normal: 4*4kB (ME) 7*8kB (ME) 12*16kB (UME) 39*32kB (UME) 19*64kB (UME) 13*128kB (UME) 9*256kB (U) 4*512kB (U) 2*1024kB (UE) 3*2048kB (UME) 949*4096kB (M) = 3904040kB [ 80.962465][ T4429] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 80.985151][ T4429] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 81.002251][ T4429] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 81.013349][ T4429] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 81.028685][ T4429] 42693 total pagecache pages [ 81.033894][ T4429] 0 pages in swap cache [ 81.041522][ T4429] Swap cache stats: add 0, delete 0, find 0/0 [ 81.049033][ T4429] Free swap = 124996kB [ 81.054721][ T4429] Total swap = 124996kB [ 81.059568][ T4429] 2097051 pages RAM [ 81.064682][ T4429] 0 pages HighMem/MovableOnly [ 81.069493][ T4429] 415313 pages reserved [ 81.074501][ T4429] 0 pages cma reserved [ 81.116248][ T4254] usb 5-1: driver API: 1.9.9 2016-02-15 [1-1] [ 81.122606][ T4254] usb 5-1: firmware API: 1.9.6 2012-07-07 [ 81.376248][ T4455] FAULT_INJECTION: forcing a failure. [ 81.376248][ T4455] name failslab, interval 1, probability 0, space 0, times 0 [ 81.403523][ T4455] CPU: 0 PID: 4455 Comm: syz.2.40 Not tainted syzkaller #0 [ 81.410792][ T4455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.420893][ T4455] Call Trace: [ 81.424212][ T4455] [ 81.427313][ T4455] dump_stack_lvl+0x188/0x250 [ 81.432050][ T4455] ? show_regs_print_info+0x20/0x20 [ 81.437336][ T4455] ? load_image+0x410/0x410 [ 81.441886][ T4455] ? __might_sleep+0xf0/0xf0 [ 81.444035][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.446517][ T4455] ? __lock_acquire+0x7d40/0x7d40 [ 81.446554][ T4455] should_fail+0x383/0x4b0 [ 81.463481][ T4455] should_failslab+0x5/0x20 [ 81.468342][ T4455] slab_pre_alloc_hook+0x51/0xc0 [ 81.473332][ T4455] __kmalloc_node+0x6d/0x3a0 [ 81.477968][ T4455] ? mempool_init_node+0x12b/0x480 [ 81.483121][ T4455] ? __init_waitqueue_head+0xa4/0x140 [ 81.488550][ T4455] mempool_init_node+0x12b/0x480 [ 81.493536][ T4455] ? mempool_alloc_slab+0x60/0x60 [ 81.498633][ T4455] ? xa_load+0x276/0x2a0 [ 81.502927][ T4455] ? mempool_alloc_slab+0x60/0x60 [ 81.507987][ T4455] ? mempool_free+0x320/0x320 [ 81.512698][ T4455] mempool_init+0x36/0x50 [ 81.517062][ T4455] bioset_init+0x282/0x6d0 [ 81.521514][ T4455] blk_alloc_queue+0xaf/0x580 [ 81.526227][ T4455] __blk_mq_alloc_disk+0x43/0x150 [ 81.531293][ T4455] ? loop_add+0x263/0x890 [ 81.535662][ T4455] loop_add+0x288/0x890 [ 81.539861][ T4455] loop_control_ioctl+0x124/0x550 [ 81.544925][ T4455] ? xor_init+0x60/0x60 [ 81.549120][ T4455] ? bpf_lsm_file_ioctl+0x5/0x10 [ 81.554090][ T4455] ? security_file_ioctl+0x7c/0xa0 [ 81.559233][ T4455] ? xor_init+0x60/0x60 [ 81.563421][ T4455] __se_sys_ioctl+0xfa/0x170 [ 81.568052][ T4455] do_syscall_64+0x4c/0xa0 [ 81.572510][ T4455] ? clear_bhb_loop+0x30/0x80 [ 81.577234][ T4455] ? clear_bhb_loop+0x30/0x80 [ 81.581946][ T4455] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.587888][ T4455] RIP: 0033:0x7ff5107cb559 [ 81.592341][ T4455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.611984][ T4455] RSP: 002b:00007ff50ea23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.620446][ T4455] RAX: ffffffffffffffda RBX: 00007ff510a52fa0 RCX: 00007ff5107cb559 [ 81.628452][ T4455] RDX: ffffffffff60003f RSI: 0000000000004c80 RDI: 0000000000000004 [ 81.636458][ T4455] RBP: 00007ff5108628b0 R08: 0000000000000000 R09: 0000000000000000 [ 81.644462][ T4455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.652468][ T4455] R13: 00007ff510a53038 R14: 00007ff510a52fa0 R15: 00007ffc8394f468 [ 81.660500][ T4455] [ 81.689492][ T4445] block nbd3: shutting down sockets [ 81.763632][ C1] usb 5-1: received invalid command response:got -4, instead of 0 [ 81.771939][ C1] usb 5-1: restart device (9) [ 81.781172][ T4458] FAULT_INJECTION: forcing a failure. [ 81.781172][ T4458] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 81.802688][ T4458] CPU: 0 PID: 4458 Comm: syz.2.41 Not tainted syzkaller #0 [ 81.809942][ T4458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.820026][ T4458] Call Trace: [ 81.823324][ T4458] [ 81.824586][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.826269][ T4458] dump_stack_lvl+0x188/0x250 [ 81.841849][ T4458] ? show_regs_print_info+0x20/0x20 [ 81.847085][ T4458] ? load_image+0x410/0x410 [ 81.849226][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.851622][ T4458] ? verify_lock_unused+0x140/0x140 [ 81.866596][ T4458] should_fail+0x383/0x4b0 [ 81.871054][ T4458] prepare_alloc_pages+0x1e3/0x5b0 [ 81.876213][ T4458] __alloc_pages+0x11b/0x480 [ 81.880843][ T4458] ? zone_statistics+0x170/0x170 [ 81.885820][ T4458] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 81.891839][ T4458] ? __lock_acquire+0x7d40/0x7d40 [ 81.896902][ T4458] ? alloc_pages+0x452/0x560 [ 81.901533][ T4458] new_slab+0xc0/0x4b0 [ 81.903875][ T23] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 81.905637][ T4458] ___slab_alloc+0x807/0xdd0 [ 81.919266][ T4458] ? __se_sys_userfaultfd+0xc2/0x380 [ 81.924601][ T4458] ? __se_sys_userfaultfd+0xc2/0x380 [ 81.929919][ T4458] kmem_cache_alloc+0xf0/0x280 [ 81.933629][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.934743][ T4458] __se_sys_userfaultfd+0xc2/0x380 [ 81.947847][ T4458] do_syscall_64+0x4c/0xa0 [ 81.952295][ T4458] ? clear_bhb_loop+0x30/0x80 [ 81.957003][ T4458] ? clear_bhb_loop+0x30/0x80 [ 81.961715][ T4458] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.968156][ T4458] RIP: 0033:0x7ff5107cb559 [ 81.972604][ T4458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.992274][ T4458] RSP: 002b:00007ff50ea23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 82.000723][ T4458] RAX: ffffffffffffffda RBX: 00007ff510a52fa0 RCX: 00007ff5107cb559 [ 82.008820][ T4458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080001 [ 82.016819][ T4458] RBP: 00007ff5108628b0 R08: 0000000000000000 R09: 0000000000000000 [ 82.024817][ T4458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.024836][ T23] usb 1-1: config 0 descriptor?? [ 82.032813][ T4458] R13: 00007ff510a53038 R14: 00007ff510a52fa0 R15: 00007ffc8394f468 [ 82.032847][ T4458] [ 82.063573][ C1] usb 5-1: received invalid command response:got -4, instead of 0 [ 82.256579][ T4413] udc-core: couldn't find an available UDC or it's busy [ 82.265872][ T4413] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.349587][ T4413] udc-core: couldn't find an available UDC or it's busy [ 82.363796][ T4254] usb 5-1: firmware upload failed (-110). [ 82.367701][ T4413] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.414173][ T4413] udc-core: couldn't find an available UDC or it's busy [ 82.437517][ T4413] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.991963][ T23] hid-led 0003:27B8:01ED.0001: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 83.039709][ T23] hid-led 0003:27B8:01ED.0001: ThingM blink(1) initialized [ 83.113371][ T4475] FAULT_INJECTION: forcing a failure. [ 83.113371][ T4475] name failslab, interval 1, probability 0, space 0, times 0 [ 83.148342][ T4475] CPU: 1 PID: 4475 Comm: syz.4.46 Not tainted syzkaller #0 [ 83.155628][ T4475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.165730][ T4475] Call Trace: [ 83.169045][ T4475] [ 83.172019][ T4475] dump_stack_lvl+0x188/0x250 [ 83.176752][ T4475] ? show_regs_print_info+0x20/0x20 [ 83.182038][ T4475] ? load_image+0x410/0x410 [ 83.186584][ T4475] ? __might_sleep+0xf0/0xf0 [ 83.191216][ T4475] ? __lock_acquire+0x7d40/0x7d40 [ 83.196296][ T4475] should_fail+0x383/0x4b0 [ 83.200765][ T4475] should_failslab+0x5/0x20 [ 83.205335][ T4475] slab_pre_alloc_hook+0x51/0xc0 [ 83.210316][ T4475] __kmalloc_node+0x6d/0x3a0 [ 83.214948][ T4475] ? memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 83.220974][ T4475] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 83.226128][ T4475] memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 83.231975][ T4475] slab_post_alloc_hook+0xba/0x380 [ 83.237131][ T4475] kmem_cache_alloc_trace+0x165/0x290 [ 83.242541][ T4475] ? alloc_mnt_ns+0xaf/0x3b0 [ 83.247193][ T4475] alloc_mnt_ns+0xaf/0x3b0 [ 83.251664][ T4475] __se_sys_fsmount+0x5ac/0x9b0 [ 83.256580][ T4475] ? __x64_sys_fsmount+0x80/0x80 [ 83.261563][ T4475] ? lockdep_hardirqs_on+0x94/0x140 [ 83.266900][ T4475] do_syscall_64+0x4c/0xa0 [ 83.271362][ T4475] ? clear_bhb_loop+0x30/0x80 [ 83.276083][ T4475] ? clear_bhb_loop+0x30/0x80 [ 83.280807][ T4475] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.286744][ T4475] RIP: 0033:0x7f463c40a559 [ 83.291210][ T4475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.310862][ T4475] RSP: 002b:00007f463a662028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 83.319351][ T4475] RAX: ffffffffffffffda RBX: 00007f463c691fa0 RCX: 00007f463c40a559 [ 83.327370][ T4475] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 83.335384][ T4475] RBP: 00007f463c4a18b0 R08: 0000000000000000 R09: 0000000000000000 [ 83.343401][ T4475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.351408][ T4475] R13: 00007f463c692038 R14: 00007f463c691fa0 R15: 00007ffc3a4d0b58 [ 83.359447][ T4475] [ 83.463490][ T4251] usb 1-1: USB disconnect, device number 2 [ 84.690446][ T4490] capability: warning: `syz.0.49' uses 32-bit capabilities (legacy support in use) [ 85.140046][ T4464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 86.278770][ T4510] loop0: detected capacity change from 0 to 1024 [ 86.388980][ T4510] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.593441][ C0] sched: RT throttling activated [ 87.598239][ T13] cfg80211: failed to load regulatory.db [ 87.719220][ T4535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.64'. [ 88.576077][ T4570] input: syz0 as /devices/virtual/input/input6 [ 89.001469][ T4572] ptrace attach of ""[4585] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4572] [ 89.486334][ T4595] ip_tables: iptables: counters copy to user failed while replacing table [ 89.627748][ T26] audit: type=1326 audit(1792115985.066:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4599 comm="syz.4.86" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463c40a559 code=0x7ffc0000 [ 89.701204][ T4601] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.724016][ T26] audit: type=1326 audit(1792115985.066:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4599 comm="syz.4.86" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f463c40a559 code=0x7ffc0000 [ 89.760366][ T4608] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 89.768019][ T26] audit: type=1326 audit(1792115985.066:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4599 comm="syz.4.86" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463c40a559 code=0x7ffc0000 [ 89.850812][ T26] audit: type=1326 audit(1792115985.066:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4599 comm="syz.4.86" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463c40a559 code=0x7ffc0000 [ 89.941257][ T26] audit: type=1326 audit(1792115985.066:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4599 comm="syz.4.86" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463c40a559 code=0x7ffc0000 [ 90.055802][ T26] audit: type=1326 audit(1792115985.066:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4599 comm="syz.4.86" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463c40a559 code=0x7ffc0000 [ 90.128220][ T26] audit: type=1326 audit(1792115985.066:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4599 comm="syz.4.86" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f463c40a559 code=0x7ffc0000 [ 90.695900][ T4620] syz.4.89 (4620) used greatest stack depth: 20208 bytes left [ 90.735611][ T26] audit: type=1326 audit(1792115985.066:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4599 comm="syz.4.86" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f463c40a559 code=0x7ffc0000 [ 91.531583][ T4446] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.819710][ T4674] bridge0: port 3(syz_tun) entered blocking state [ 92.832992][ T4671] netlink: 160 bytes leftover after parsing attributes in process `syz.1.109'. [ 92.834413][ T4674] bridge0: port 3(syz_tun) entered disabled state [ 92.854705][ T4674] device syz_tun entered promiscuous mode [ 92.864962][ T4674] bridge0: port 3(syz_tun) entered blocking state [ 92.871834][ T4674] bridge0: port 3(syz_tun) entered forwarding state [ 92.882542][ T4671] netlink: 20 bytes leftover after parsing attributes in process `syz.1.109'. [ 93.024906][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.034908][ T4688] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 93.051125][ T4686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.260890][ T4702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.123'. [ 93.281717][ T4702] netlink: set zone limit has 4 unknown bytes [ 94.893358][ T4746] loop3: detected capacity change from 0 to 512 [ 95.002971][ T4746] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 95.073655][ T4746] System zones: 1-12 [ 95.116173][ T4746] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.139: missing EA_INODE flag [ 95.164315][ T4748] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.206576][ T4746] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.139: error while reading EA inode 12 err=-117 [ 95.266419][ T4746] EXT4-fs (loop3): 1 orphan inode deleted [ 95.272221][ T4746] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 95.638082][ T4758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'. [ 96.158326][ T4758] device hsr_slave_1 left promiscuous mode [ 96.919482][ T4776] cgroup2: Unknown parameter 'pids_l' [ 97.223646][ T4778] bond0: option all_slaves_active: invalid value (155) [ 97.679910][ T4788] loop3: detected capacity change from 0 to 512 [ 97.771306][ T4788] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.782841][ T4788] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.182780][ T4807] input: syz0 as /devices/virtual/input/input7 [ 98.193099][ T4804] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.307023][ T4808] device bond_slave_0 entered promiscuous mode [ 98.313593][ T4808] device bond_slave_1 entered promiscuous mode [ 98.324218][ T4808] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 98.393807][ T4808] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 98.490381][ T4810] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 98.634259][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 98.731176][ T4816] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.744526][ T4823] FAULT_INJECTION: forcing a failure. [ 98.744526][ T4823] name failslab, interval 1, probability 0, space 0, times 0 [ 98.783279][ T4823] CPU: 0 PID: 4823 Comm: syz.0.159 Not tainted syzkaller #0 [ 98.790630][ T4823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.800724][ T4823] Call Trace: [ 98.804032][ T4823] [ 98.806985][ T4823] dump_stack_lvl+0x188/0x250 [ 98.811697][ T4823] ? show_regs_print_info+0x20/0x20 [ 98.816920][ T4823] ? load_image+0x410/0x410 [ 98.821453][ T4823] ? __might_sleep+0xf0/0xf0 [ 98.826079][ T4823] ? __lock_acquire+0x7d40/0x7d40 [ 98.831144][ T4823] should_fail+0x383/0x4b0 [ 98.835611][ T4823] should_failslab+0x5/0x20 [ 98.840145][ T4823] slab_pre_alloc_hook+0x51/0xc0 [ 98.845129][ T4823] ? new_inode_pseudo+0x77/0x210 [ 98.850111][ T4823] kmem_cache_alloc+0x3d/0x280 [ 98.854922][ T4823] new_inode_pseudo+0x77/0x210 [ 98.859724][ T4823] alloc_anon_inode+0x1b/0x300 [ 98.864530][ T4823] __se_sys_memfd_secret+0xc4/0x2f0 [ 98.869768][ T4823] do_syscall_64+0x4c/0xa0 [ 98.874223][ T4823] ? clear_bhb_loop+0x30/0x80 [ 98.878933][ T4823] ? clear_bhb_loop+0x30/0x80 [ 98.883643][ T4823] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.889570][ T4823] RIP: 0033:0x7f1f995cf559 [ 98.894017][ T4823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.913659][ T4823] RSP: 002b:00007f1f97827028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 98.922110][ T4823] RAX: ffffffffffffffda RBX: 00007f1f99856fa0 RCX: 00007f1f995cf559 [ 98.930123][ T4823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 98.938131][ T4823] RBP: 00007f1f996668b0 R08: 0000000000000000 R09: 0000000000000000 [ 98.946137][ T4823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.954140][ T4823] R13: 00007f1f99857038 R14: 00007f1f99856fa0 R15: 00007ffff9a564e8 [ 98.962162][ T4823] [ 99.039272][ T4825] cgroup2: Unknown parameter 'pids_l' [ 99.309841][ T4838] capability: warning: `syz.1.164' uses deprecated v2 capabilities in a way that may be insecure [ 100.539355][ T4845] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.547791][ T4845] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.354783][ T4883] cgroup2: Unknown parameter 'pids_l' [ 101.739443][ T4897] IPVS: persistence engine module ip_vs_pe_ not found [ 102.011761][ T4845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.067620][ T4909] cgroup2: Unknown parameter 'pids_l' [ 102.091634][ T4845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.731385][ T4920] FAULT_INJECTION: forcing a failure. [ 102.731385][ T4920] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 102.789774][ T4920] CPU: 1 PID: 4920 Comm: syz.1.193 Not tainted syzkaller #0 [ 102.797137][ T4920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.807232][ T4920] Call Trace: [ 102.810546][ T4920] [ 102.813512][ T4920] dump_stack_lvl+0x188/0x250 [ 102.818239][ T4920] ? show_regs_print_info+0x20/0x20 [ 102.823503][ T4920] ? load_image+0x410/0x410 [ 102.826892][ T4251] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 102.828047][ T4920] ? __lock_acquire+0x7d40/0x7d40 [ 102.828112][ T4920] should_fail+0x383/0x4b0 [ 102.846034][ T4920] copy_page_to_iter+0x3d8/0x930 [ 102.849683][ T4251] Bluetooth: hci3: Injecting HCI hardware error event [ 102.851020][ T4920] ? lockdep_hardirqs_on+0x94/0x140 [ 102.862992][ T4920] pipe_read+0x52a/0x12d0 [ 102.867389][ T4920] ? pipe_wait_writable+0x5c0/0x5c0 [ 102.872632][ T4920] ? end_current_label_crit_section+0x14b/0x170 [ 102.878917][ T4920] ? memset+0x1e/0x40 [ 102.882940][ T4920] ? iov_iter_init+0xb4/0x170 [ 102.887657][ T4920] vfs_read+0x75e/0xd50 [ 102.891858][ T4920] ? kernel_read+0x1e0/0x1e0 [ 102.896531][ T4920] ? __fget_files+0x402/0x470 [ 102.896792][ T4202] Bluetooth: hci3: hardware error 0x00 [ 102.901343][ T4920] ? __fdget_pos+0x1e2/0x370 [ 102.901367][ T4920] ? ksys_read+0x70/0x260 [ 102.915927][ T4920] ksys_read+0x153/0x260 [ 102.920254][ T4920] ? vfs_write+0xd70/0xd70 [ 102.924713][ T4920] ? lockdep_hardirqs_on+0x94/0x140 [ 102.929955][ T4920] do_syscall_64+0x4c/0xa0 [ 102.934400][ T4920] ? clear_bhb_loop+0x30/0x80 [ 102.939117][ T4920] ? clear_bhb_loop+0x30/0x80 [ 102.943830][ T4920] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.949762][ T4920] RIP: 0033:0x7f28ba0cf559 [ 102.954216][ T4920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.973857][ T4920] RSP: 002b:00007f28b8327028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.982310][ T4920] RAX: ffffffffffffffda RBX: 00007f28ba356fa0 RCX: 00007f28ba0cf559 [ 102.990322][ T4920] RDX: 000000000000fdef RSI: 0000200000000780 RDI: 0000000000000006 [ 102.998333][ T4920] RBP: 00007f28ba1668b0 R08: 0000000000000000 R09: 0000000000000000 [ 103.006342][ T4920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.014350][ T4920] R13: 00007f28ba357038 R14: 00007f28ba356fa0 R15: 00007ffed944ea48 [ 103.022373][ T4920] [ 103.467729][ T4845] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.499419][ T4845] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.514145][ T4845] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.523082][ T4845] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.532654][ T4845] netdevsim netdevsim10 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.767921][ T4933] device vlan2 entered promiscuous mode [ 103.814360][ T4934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.199'. [ 103.843654][ T4879] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.709591][ T4951] cgroup2: Unknown parameter 'pids_l' [ 105.360527][ T4967] loop2: detected capacity change from 0 to 256 [ 105.417462][ T4967] ======================================================= [ 105.417462][ T4967] WARNING: The mand mount option has been deprecated and [ 105.417462][ T4967] and is ignored by this kernel. Remove the mand [ 105.417462][ T4967] option from the mount to silence this warning. [ 105.417462][ T4967] ======================================================= [ 105.500907][ T4967] FAT-fs (loop2): Unrecognized mount option "utf 5!â8=0" or missing value [ 105.598200][ T4967] binder: 4965:4967 unknown command 1074291477 [ 105.613725][ T4967] binder: 4965:4967 ioctl c0306201 200000000280 returned -22 [ 106.033390][ T4988] Zero length message leads to an empty skb [ 106.162600][ T4996] cgroup2: Unknown parameter 'pids_l' [ 106.460973][ T5004] rxe_eth0 speed is unknown, defaulting to 1000 [ 106.509902][ T5007] FAULT_INJECTION: forcing a failure. [ 106.509902][ T5007] name fail_futex, interval 1, probability 0, space 0, times 1 [ 106.545664][ T5007] CPU: 0 PID: 5007 Comm: syz.0.220 Not tainted syzkaller #0 [ 106.553038][ T5007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.563127][ T5007] Call Trace: [ 106.566442][ T5007] [ 106.569406][ T5007] dump_stack_lvl+0x188/0x250 [ 106.574133][ T5007] ? futex_wait_queue_me+0x16e/0x440 [ 106.579464][ T5007] ? show_regs_print_info+0x20/0x20 [ 106.584705][ T5007] ? load_image+0x410/0x410 [ 106.589278][ T5007] should_fail+0x383/0x4b0 [ 106.593740][ T5007] get_futex_key+0x1a1/0x12d0 [ 106.598452][ T5007] ? __lock_acquire+0x13b3/0x7d40 [ 106.603519][ T5007] ? futex_wait_restart+0x250/0x250 [ 106.608778][ T5007] futex_wake+0x101/0x540 [ 106.613156][ T5007] ? futex_wait+0x680/0x680 [ 106.617697][ T5007] ? verify_lock_unused+0x140/0x140 [ 106.622941][ T5007] ? verify_lock_unused+0x140/0x140 [ 106.628178][ T5007] do_futex+0xd83/0x12b0 [ 106.632483][ T5007] ? vfs_write+0xaa6/0xd70 [ 106.636958][ T5007] ? futex_exit_release+0x1c0/0x1c0 [ 106.642224][ T5007] ? __context_tracking_exit+0x4c/0x80 [ 106.647738][ T5007] __se_sys_futex+0x389/0x420 [ 106.652464][ T5007] ? __x64_sys_futex+0xf0/0xf0 [ 106.657272][ T5007] ? __x64_sys_futex+0x1d/0xf0 [ 106.662078][ T5007] do_syscall_64+0x4c/0xa0 [ 106.666524][ T5007] ? clear_bhb_loop+0x30/0x80 [ 106.671250][ T5007] ? clear_bhb_loop+0x30/0x80 [ 106.675971][ T5007] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.681934][ T5007] RIP: 0033:0x7f1f995cf559 [ 106.686380][ T5007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.706025][ T5007] RSP: 002b:00007f1f978270e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 106.714478][ T5007] RAX: ffffffffffffffda RBX: 00007f1f99856fa8 RCX: 00007f1f995cf559 [ 106.722491][ T5007] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1f99856fac [ 106.730492][ T5007] RBP: 00007f1f99856fa0 R08: 001b3a541bd9db06 R09: 0000000000000000 [ 106.738501][ T5007] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 106.746507][ T5007] R13: 00007f1f99857038 R14: 00007ffff9a56400 R15: 00007ffff9a564e8 [ 106.754528][ T5007] [ 106.943055][ T5015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.224'. [ 107.430153][ T5031] cgroup2: Unknown parameter 'pids_l' [ 107.747762][ T5053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.238'. [ 108.114541][ T5064] rxe_eth0 speed is unknown, defaulting to 1000 [ 108.464710][ T5071] loop0: detected capacity change from 0 to 256 [ 109.124484][ T5090] FAULT_INJECTION: forcing a failure. [ 109.124484][ T5090] name failslab, interval 1, probability 0, space 0, times 0 [ 109.187389][ T5090] CPU: 1 PID: 5090 Comm: syz.2.253 Not tainted syzkaller #0 [ 109.194744][ T5090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.204833][ T5090] Call Trace: [ 109.208143][ T5090] [ 109.211098][ T5090] dump_stack_lvl+0x188/0x250 [ 109.215828][ T5090] ? show_regs_print_info+0x20/0x20 [ 109.221067][ T5090] ? load_image+0x410/0x410 [ 109.225609][ T5090] ? __might_sleep+0xf0/0xf0 [ 109.225811][ T5097] cgroup2: Unknown parameter 'pids_l' [ 109.230230][ T5090] ? __lock_acquire+0x7d40/0x7d40 [ 109.230263][ T5090] ? account_kernel_stack+0x1b1/0x390 [ 109.230288][ T5090] ? lockdep_hardirqs_on+0x94/0x140 [ 109.251300][ T5090] should_fail+0x383/0x4b0 [ 109.255767][ T5090] should_failslab+0x5/0x20 [ 109.260296][ T5090] slab_pre_alloc_hook+0x51/0xc0 [ 109.265270][ T5090] ? prepare_creds+0x3c/0x610 [ 109.269982][ T5090] kmem_cache_alloc+0x3d/0x280 [ 109.274781][ T5090] prepare_creds+0x3c/0x610 [ 109.279324][ T5090] copy_creds+0x146/0xce0 [ 109.283691][ T5090] copy_process+0x8d7/0x3e70 [ 109.288343][ T5090] ? __pidfd_prepare+0x140/0x140 [ 109.293463][ T5090] ? verify_lock_unused+0x140/0x140 [ 109.298709][ T5090] kernel_clone+0x23f/0x990 [ 109.303255][ T5090] ? create_io_thread+0x180/0x180 [ 109.308333][ T5090] __x64_sys_clone+0x19a/0x210 [ 109.313135][ T5090] ? __ia32_sys_vfork+0x130/0x130 [ 109.318216][ T5090] ? lockdep_hardirqs_on+0x94/0x140 [ 109.323456][ T5090] do_syscall_64+0x4c/0xa0 [ 109.327913][ T5090] ? clear_bhb_loop+0x30/0x80 [ 109.332635][ T5090] ? clear_bhb_loop+0x30/0x80 [ 109.337352][ T5090] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.343284][ T5090] RIP: 0033:0x7ff5107cb559 [ 109.347731][ T5090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.367523][ T5090] RSP: 002b:00007ff50ea22fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 109.375976][ T5090] RAX: ffffffffffffffda RBX: 00007ff510a52fa0 RCX: 00007ff5107cb559 [ 109.383974][ T5090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 109.391972][ T5090] RBP: 00007ff5108628b0 R08: 0000000000000000 R09: 0000000000000000 [ 109.399982][ T5090] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 109.407991][ T5090] R13: 00007ff510a53038 R14: 00007ff510a52fa0 R15: 00007ffc8394f468 [ 109.416098][ T5090] [ 109.842386][ T5115] rxe_eth0 speed is unknown, defaulting to 1000 [ 110.154188][ T5124] cgroup2: Unknown parameter 'pids_l' [ 111.405525][ T5159] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.954621][ T5195] cgroup2: Unknown parameter 'pids_l' [ 113.169628][ T5202] ip_tables: iptables: counters copy to user failed while replacing table [ 113.391890][ T5212] loop1: detected capacity change from 0 to 512 [ 113.541699][ T5212] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 113.553726][ T5212] System zones: 1-12 [ 113.594733][ T5212] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.297: missing EA_INODE flag [ 113.674289][ T5212] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.297: error while reading EA inode 12 err=-117 [ 113.774062][ T5212] EXT4-fs (loop1): 1 orphan inode deleted [ 113.779951][ T5212] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 113.798239][ T5219] rxe_eth0 speed is unknown, defaulting to 1000 [ 116.346156][ T5251] FAULT_INJECTION: forcing a failure. [ 116.346156][ T5251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.424529][ T5251] CPU: 1 PID: 5251 Comm: syz.3.310 Not tainted syzkaller #0 [ 116.432025][ T5251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.442123][ T5251] Call Trace: [ 116.445432][ T5251] [ 116.448392][ T5251] dump_stack_lvl+0x188/0x250 [ 116.453113][ T5251] ? show_regs_print_info+0x20/0x20 [ 116.458350][ T5251] ? load_image+0x410/0x410 [ 116.462913][ T5251] ? __lock_acquire+0x7d40/0x7d40 [ 116.467984][ T5251] should_fail+0x383/0x4b0 [ 116.472474][ T5251] _copy_from_user+0x2e/0x170 [ 116.477188][ T5251] udp_lib_setsockopt+0x150/0x8c0 [ 116.482251][ T5251] ? udp_destroy_sock+0x2b0/0x2b0 [ 116.487315][ T5251] udpv6_setsockopt+0x66/0xa0 [ 116.492040][ T5251] ? udp_v6_send_skb+0x14a0/0x14a0 [ 116.497186][ T5251] ? sock_common_recvmsg+0x1c0/0x1c0 [ 116.502537][ T5251] __sys_setsockopt+0x2bf/0x3d0 [ 116.507430][ T5251] __x64_sys_setsockopt+0xb1/0xc0 [ 116.512490][ T5251] do_syscall_64+0x4c/0xa0 [ 116.516936][ T5251] ? clear_bhb_loop+0x30/0x80 [ 116.521640][ T5251] ? clear_bhb_loop+0x30/0x80 [ 116.526811][ T5251] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.532736][ T5251] RIP: 0033:0x7fe547b61559 [ 116.537180][ T5251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.556894][ T5251] RSP: 002b:00007fe545db9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 116.565341][ T5251] RAX: ffffffffffffffda RBX: 00007fe547de8fa0 RCX: 00007fe547b61559 [ 116.573345][ T5251] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 0000000000000003 [ 116.581338][ T5251] RBP: 00007fe547bf88b0 R08: 0000000000000004 R09: 0000000000000000 [ 116.589340][ T5251] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000000 [ 116.597345][ T5251] R13: 00007fe547de9038 R14: 00007fe547de8fa0 R15: 00007ffdf30189b8 [ 116.605364][ T5251] [ 116.900710][ T5265] overlayfs: upper fs does not support file handles, falling back to index=off. [ 117.853909][ T5276] cgroup2: Unknown parameter 'pids_l' [ 118.489057][ T5295] loop1: detected capacity change from 0 to 512 [ 118.668798][ T5295] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.686622][ T5295] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.816793][ T5301] rxe_eth0 speed is unknown, defaulting to 1000 [ 119.834407][ T5313] IPv6: addrconf: prefix option has invalid lifetime [ 120.045541][ T5317] cgroup2: Unknown parameter 'pids_l' [ 120.737447][ T5334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 121.457786][ T5350] INFO: trying to register non-static key. [ 121.463641][ T5350] The code is fine but needs lockdep annotation, or maybe [ 121.470774][ T5350] you didn't initialize this object before use? [ 121.477031][ T5350] turning off the locking correctness validator. [ 121.483375][ T5350] CPU: 0 PID: 5350 Comm: syz.3.338 Not tainted syzkaller #0 [ 121.490685][ T5350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.500766][ T5350] Call Trace: [ 121.504068][ T5350] [ 121.507021][ T5350] dump_stack_lvl+0x188/0x250 [ 121.511718][ T5350] ? show_regs_print_info+0x20/0x20 [ 121.516929][ T5350] ? load_image+0x410/0x410 [ 121.521447][ T5350] ? cpumask_next+0xb3/0xd0 [ 121.525975][ T5350] assign_lock_key+0x1ec/0x200 [ 121.530786][ T5350] ? SOFTIRQ_verbose+0x10/0x10 [ 121.535565][ T5350] ? check_noncircular+0x186/0x400 [ 121.540687][ T5350] ? mark_lock+0x94/0x320 [ 121.545028][ T5350] register_lock_class+0x21d/0x880 [ 121.550157][ T5350] ? is_dynamic_key+0x1f0/0x1f0 [ 121.555019][ T5350] ? rcu_lock_release+0x5/0x20 [ 121.559809][ T5350] __lock_acquire+0x265/0x7d40 [ 121.564602][ T5350] ? __lock_acquire+0x12df/0x7d40 [ 121.569665][ T5350] ? __rwlock_init+0x140/0x140 [ 121.574453][ T5350] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 121.580364][ T5350] ? verify_lock_unused+0x140/0x140 [ 121.585583][ T5350] ? __might_sleep+0xf0/0xf0 [ 121.590179][ T5350] ? __might_fault+0xb7/0x110 [ 121.594872][ T5350] lock_acquire+0x19f/0x400 [ 121.599391][ T5350] ? gsmld_write+0x57/0x120 [ 121.603905][ T5350] ? __might_fault+0xb3/0x110 [ 121.608591][ T5350] ? read_lock_is_recursive+0x10/0x10 [ 121.613974][ T5350] ? _copy_from_iter+0x5bf/0x1160 [ 121.619008][ T5350] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 121.624483][ T5350] ? lockdep_hardirqs_off+0x70/0x100 [ 121.629782][ T5350] _raw_spin_lock_irqsave+0xb0/0x100 [ 121.635076][ T5350] ? gsmld_write+0x57/0x120 [ 121.639590][ T5350] ? _raw_spin_lock+0x40/0x40 [ 121.644286][ T5350] ? __virt_addr_valid+0x3c6/0x470 [ 121.649411][ T5350] gsmld_write+0x57/0x120 [ 121.653755][ T5350] file_tty_write+0x50c/0x8a0 [ 121.658443][ T5350] ? gsmld_read+0x10/0x10 [ 121.662786][ T5350] do_iter_readv_writev+0x47d/0x5f0 [ 121.667994][ T5350] ? aa_path_link+0x8a0/0x8a0 [ 121.672678][ T5350] ? generic_file_rw_checks+0x280/0x280 [ 121.678238][ T5350] ? common_file_perm+0x171/0x1c0 [ 121.683272][ T5350] ? fsnotify_perm+0x5d/0x560 [ 121.687957][ T5350] ? security_file_permission+0x75/0xa0 [ 121.693514][ T5350] do_iter_write+0x1f8/0x7a0 [ 121.698121][ T5350] ? import_iovec+0x6f/0xa0 [ 121.702640][ T5350] do_writev+0x281/0x480 [ 121.706901][ T5350] ? do_readv+0x460/0x460 [ 121.711247][ T5350] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 121.717245][ T5350] ? lock_chain_count+0x20/0x20 [ 121.722114][ T5350] ? lockdep_hardirqs_on+0x94/0x140 [ 121.727323][ T5350] do_syscall_64+0x4c/0xa0 [ 121.731770][ T5350] ? clear_bhb_loop+0x30/0x80 [ 121.736457][ T5350] ? clear_bhb_loop+0x30/0x80 [ 121.741149][ T5350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.747052][ T5350] RIP: 0033:0x7fe547b61559 [ 121.751501][ T5350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.771123][ T5350] RSP: 002b:00007fe545db9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 121.779550][ T5350] RAX: ffffffffffffffda RBX: 00007fe547de8fa0 RCX: 00007fe547b61559 [ 121.787539][ T5350] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 121.795521][ T5350] RBP: 00007fe547bf88b0 R08: 0000000000000000 R09: 0000000000000000 [ 121.803509][ T5350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.811495][ T5350] R13: 00007fe547de9038 R14: 00007fe547de8fa0 R15: 00007ffdf30189b8 [ 121.819483][ T5350]