last executing test programs: 12.144834714s ago: executing program 4 (id=290): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400005}, 0x94) 10.840187878s ago: executing program 4 (id=295): r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0a0308"], 0xd) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x4, 0x20, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, {&(0x7f00000002c0)}, 0x400000}) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000001000)=ANY=[], 0x1, 0x1c6, &(0x7f00000001c0)="$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") ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x50}}, 0x40) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002280)}], 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1) 7.919290173s ago: executing program 4 (id=307): r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) unshare(0x2040400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) mkdirat(r1, 0x0, 0x20) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000001480)) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, &(0x7f0000001500)) socket$nl_generic(0x10, 0x3, 0x10) accept4$tipc(r0, 0x0, 0x0, 0x80000) 7.114713432s ago: executing program 4 (id=311): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 5.58225765s ago: executing program 2 (id=315): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r1, &(0x7f0000000500)=""/202, 0xca, 0x200000200009, 0x0) 5.220441604s ago: executing program 2 (id=317): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='nobarrier,nls=ascii,part=0x0000000000000000,nodecompose,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00'/15, @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x40, 0x729, &(0x7f00000034c0)="$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") r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r3, &(0x7f00000001c0)=""/214, 0xd6) 4.898534102s ago: executing program 2 (id=320): r0 = gettid() utimensat(0xffffffffffffffff, 0x0, 0x0, 0xc9d3c38f99888156) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) splice(r4, 0x0, r5, 0x0, 0x1, 0x3) write$binfmt_misc(r5, 0x0, 0x0) splice(r2, 0x0, r5, 0x0, 0x80, 0x3) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.793327788s ago: executing program 4 (id=321): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x4) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x75) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x4040000) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x44, 0xfffffffe}]}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000240)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @val={@val={0x88a8, 0x5, 0x1, 0x22}, {0x8100, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0x1, 0x6, "a0421e", 0x14, 0x6, 0x0, @private2, @mcast2, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0x2}}}}}}}, 0x0) 4.57079736s ago: executing program 0 (id=322): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mknod(&(0x7f0000000280)='./file0\x00', 0x8001420, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002d40)='./file0\x00', 0x101001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x22842, 0x0) write$yama_ptrace_scope(r2, &(0x7f0000000000)='1\x00', 0xffffffaf) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) 4.286008673s ago: executing program 0 (id=324): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4400046, r1}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @remote, @private1, 0x0, 0x0, 0x0, 0x0, 0x3ffffffe, 0x0, r3}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r5}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a00000000002300000000001400050000000000000000000000000000000002"], 0x30}, 0x1, 0x11}, 0x0) 4.062941256s ago: executing program 0 (id=325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 3.640680579s ago: executing program 2 (id=328): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") sched_setscheduler(0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000200)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 3.267117505s ago: executing program 3 (id=330): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) write(r0, &(0x7f0000000000)='270', 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) unshare(0x40000000) 2.791970415s ago: executing program 1 (id=331): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x1, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 2.117301985s ago: executing program 0 (id=332): r0 = io_uring_setup(0xa91, &(0x7f00000000c0)={0x0, 0x8161, 0x2, 0x3, 0x25c}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4051) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0200000001"], 0x48) r4 = fsmount(r1, 0x1, 0x0) fchdir(r4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.106283437s ago: executing program 1 (id=333): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) inotify_add_watch(r0, &(0x7f00000000c0)='./control\x00', 0x40000c17) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) rmdir(&(0x7f0000000100)='./control\x00') 1.927825064s ago: executing program 3 (id=334): eventfd(0xfffffff9) r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x6000001a}) sendfile(r0, r1, 0x0, 0x8) epoll_pwait2(r0, &(0x7f0000000600)=[{}], 0x1, &(0x7f0000000640), 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x70bd2c, 0x25dfdbf9, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10007}}, 0x1c}}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x10, 0xf8, 0xff, 0x0, 0x0, 0x1, 0x1000a}, [@FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) syz_emit_ethernet(0x3d, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@llc={0x4, {@snap={0xaa, 0xaa, "9a16", "c5f960", 0x806, "1d15a7389ea7c89ca8f71d4b782accc8f03808c29d678fadfa32d649fdf95b41a896d9a306d7"}}}}}, 0x0) 1.917426155s ago: executing program 0 (id=335): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000042, &(0x7f0000000040)=ANY=[], 0x0, 0x2d3, &(0x7f0000000780)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000740)={0xeeee8000, 0x102000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.88240204s ago: executing program 1 (id=336): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x26102, 0x0) ptrace$setsig(0x4203, r0, 0x9, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280), 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() ptrace$setregset(0x4205, r2, 0x3, 0x0) 1.690908039s ago: executing program 3 (id=337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x3f) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33) 1.580236495s ago: executing program 4 (id=338): timer_create(0x1, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x7}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) 1.370977306s ago: executing program 1 (id=339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = gettid() futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) 1.290418148s ago: executing program 3 (id=340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)={0x1, 0x0, [{0xa, 0x7, 0x0, 0x2517, 0x15, 0x9, 0x7}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x100000000005, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0x10009c2, 0x5, 0x1006, 0xc, 0x8, 0x8000, 0xffffffffffffffff], 0x1000, 0xc2302}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x5, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.283012909s ago: executing program 0 (id=341): socket(0x2, 0x805, 0x0) socket$inet(0x2, 0x80001, 0x84) unshare(0x6a040000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x9fc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) 576.601244ms ago: executing program 3 (id=342): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0xa, r2, 0x48000000}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) 559.301717ms ago: executing program 2 (id=343): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r0, 0xa, 0x13) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r0, 0x400, 0x2) 388.278733ms ago: executing program 1 (id=344): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4000010) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x100, 0x3) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) 311.486144ms ago: executing program 2 (id=345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d00)=@raw={'raw\x00', 0x3c1, 0x3, 0x638, 0x400, 0xffffff80, 0x178, 0x400, 0x178, 0x568, 0x22b, 0x258, 0x568, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x400, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x2f0}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6b62}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x20}, {0x6}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7f7}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x7, 0x9, 0xffff, 'snmp_trap\x00', 'syz1\x00', {0x80000001}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x1, 0x17}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) 75.606709ms ago: executing program 1 (id=346): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYRES64=r0, @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x4008000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x2c, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 0s ago: executing program 3 (id=347): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x7, 0x0, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. [ 62.015769][ T4173] cgroup: Unknown subsys name 'net' [ 62.150470][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.736867][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.999856][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 66.015192][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 66.058857][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 66.081117][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 66.147686][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 66.215608][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.225291][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.234235][ T4185] device bridge_slave_0 entered promiscuous mode [ 66.268461][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.276024][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.285065][ T4185] device bridge_slave_1 entered promiscuous mode [ 66.316060][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.330317][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.339613][ T4187] device bridge_slave_0 entered promiscuous mode [ 66.351661][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.359979][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.368623][ T4192] device bridge_slave_0 entered promiscuous mode [ 66.402103][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.410758][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.420119][ T4187] device bridge_slave_1 entered promiscuous mode [ 66.436734][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.445229][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.454631][ T4192] device bridge_slave_1 entered promiscuous mode [ 66.466018][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.477509][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.486997][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.498957][ T4200] device bridge_slave_0 entered promiscuous mode [ 66.540236][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.554775][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.568133][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.576565][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.586292][ T4200] device bridge_slave_1 entered promiscuous mode [ 66.597460][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.606870][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.618551][ T4195] device bridge_slave_0 entered promiscuous mode [ 66.638530][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.662482][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.670541][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.680210][ T4195] device bridge_slave_1 entered promiscuous mode [ 66.689425][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.715335][ T4185] team0: Port device team_slave_0 added [ 66.737860][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.757652][ T4185] team0: Port device team_slave_1 added [ 66.766969][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.792560][ T4187] team0: Port device team_slave_0 added [ 66.813550][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.825855][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.837501][ T4187] team0: Port device team_slave_1 added [ 66.846575][ T4192] team0: Port device team_slave_0 added [ 66.869032][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.890662][ T4192] team0: Port device team_slave_1 added [ 66.898291][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.907031][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.940154][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.968178][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.975628][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.004526][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.038544][ T4200] team0: Port device team_slave_0 added [ 67.065670][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.077029][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.115348][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.148300][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.157525][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.187974][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.202896][ T4200] team0: Port device team_slave_1 added [ 67.227850][ T4195] team0: Port device team_slave_0 added [ 67.234943][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.243153][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.270864][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.283357][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.290506][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.321220][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.340780][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.347930][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.376939][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.391142][ T4195] team0: Port device team_slave_1 added [ 67.421621][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.429580][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.459620][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.487469][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.497710][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.540076][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.540128][ T4188] Bluetooth: hci0: command 0x0409 tx timeout [ 67.566087][ T4185] device hsr_slave_0 entered promiscuous mode [ 67.575558][ T4185] device hsr_slave_1 entered promiscuous mode [ 67.612457][ T1354] Bluetooth: hci3: command 0x0409 tx timeout [ 67.617729][ T4188] Bluetooth: hci4: command 0x0409 tx timeout [ 67.624072][ T4187] device hsr_slave_0 entered promiscuous mode [ 67.628607][ T4188] Bluetooth: hci1: command 0x0409 tx timeout [ 67.642398][ T4188] Bluetooth: hci2: command 0x0409 tx timeout [ 67.642610][ T4187] device hsr_slave_1 entered promiscuous mode [ 67.658961][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.668221][ T4187] Cannot create hsr debugfs directory [ 67.674691][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.682928][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.716353][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.768476][ T4195] device hsr_slave_0 entered promiscuous mode [ 67.776752][ T4195] device hsr_slave_1 entered promiscuous mode [ 67.784301][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.792311][ T4195] Cannot create hsr debugfs directory [ 67.802043][ T4192] device hsr_slave_0 entered promiscuous mode [ 67.809099][ T4192] device hsr_slave_1 entered promiscuous mode [ 67.816074][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.824170][ T4192] Cannot create hsr debugfs directory [ 67.863279][ T4200] device hsr_slave_0 entered promiscuous mode [ 67.870869][ T4200] device hsr_slave_1 entered promiscuous mode [ 67.878634][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.887606][ T4200] Cannot create hsr debugfs directory [ 68.244009][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.263306][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.273112][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.284315][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.326990][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.347515][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.365087][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.405751][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.420302][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.441049][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.463672][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.488771][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.532659][ T4200] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.557655][ T4200] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.569980][ T4200] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.601274][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.614845][ T4200] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.672052][ T4192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.683766][ T4192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.698642][ T4192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.721068][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.733103][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.743808][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.755327][ T4192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.770416][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.794000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.806977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.819077][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.827139][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.847429][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.868998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.878812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.889372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.898605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.909268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.920932][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.929090][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.938331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.950516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.960252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.968929][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.976138][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.006500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.016131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.025987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.035489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.044843][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.052491][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.064374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.076360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.086362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.096569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.114885][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.128030][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.138052][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.160137][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.179009][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.189630][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.224186][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.233958][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.243600][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.253628][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.263309][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.272306][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.282021][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.318605][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.327813][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.338771][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.347267][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.370796][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.383092][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.399378][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.411246][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.421284][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.434473][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.458738][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.479210][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.489541][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.511255][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.526816][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.546726][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.565718][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.576635][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.584827][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.595704][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.604725][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.612123][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 69.614867][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.635360][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.644787][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.652870][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.660847][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.670585][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.691584][ T4236] Bluetooth: hci2: command 0x041b tx timeout [ 69.701705][ T4236] Bluetooth: hci1: command 0x041b tx timeout [ 69.711213][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.727191][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.727705][ T4236] Bluetooth: hci4: command 0x041b tx timeout [ 69.750874][ T4236] Bluetooth: hci3: command 0x041b tx timeout [ 69.790292][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.808089][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.823071][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.830274][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.840689][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.850806][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.862318][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.870160][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.879837][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.890302][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.900332][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.909555][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.920298][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.933182][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.944390][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.954697][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.962808][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.972836][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.983857][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.995894][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.005874][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.016139][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.025574][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.036469][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.045576][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.055245][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.064508][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.075231][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.085905][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.097322][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.107594][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.117515][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.126934][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.135273][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.183492][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.202545][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.220190][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.231257][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.257077][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.270145][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.298068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.308435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.326651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.342412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.354203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.362272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.369892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.379310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.388492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.398428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.407797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.416491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.431263][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.462030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.469916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.486539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.499656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.509511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.518754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.550600][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.570806][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.593030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.602985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.630382][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.681601][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.705831][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.747459][ T4185] device veth0_vlan entered promiscuous mode [ 70.757167][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.793726][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.809508][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.822235][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.840976][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.849543][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.858776][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.869024][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.884391][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.912834][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.930819][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.953982][ T4185] device veth1_vlan entered promiscuous mode [ 70.972751][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.991897][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.999720][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.029561][ T4195] device veth0_vlan entered promiscuous mode [ 71.044351][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.055763][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.068230][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.086656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.097189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.117771][ T4195] device veth1_vlan entered promiscuous mode [ 71.144348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.154369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.166500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.180595][ T4185] device veth0_macvtap entered promiscuous mode [ 71.196376][ T4192] device veth0_vlan entered promiscuous mode [ 71.209541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.223787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.235893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.246316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.257758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.266337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.278318][ T4185] device veth1_macvtap entered promiscuous mode [ 71.297256][ T4192] device veth1_vlan entered promiscuous mode [ 71.336429][ T4187] device veth0_vlan entered promiscuous mode [ 71.345508][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.355077][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.363757][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.374622][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.388195][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.396498][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.418168][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.439094][ T4187] device veth1_vlan entered promiscuous mode [ 71.449479][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.475045][ T4192] device veth0_macvtap entered promiscuous mode [ 71.487026][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.496124][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.509234][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.518989][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.528074][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.538082][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.548637][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.559027][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.575532][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.588153][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.598045][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.608483][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.619703][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.638833][ T4192] device veth1_macvtap entered promiscuous mode [ 71.649631][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.666107][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.674834][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.688352][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.693154][ T4188] Bluetooth: hci0: command 0x040f tx timeout [ 71.717865][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.726232][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.742459][ T4195] device veth0_macvtap entered promiscuous mode [ 71.760610][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.772579][ T4236] Bluetooth: hci3: command 0x040f tx timeout [ 71.779253][ T4236] Bluetooth: hci4: command 0x040f tx timeout [ 71.781931][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.786218][ T4236] Bluetooth: hci1: command 0x040f tx timeout [ 71.797649][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.803369][ T4236] Bluetooth: hci2: command 0x040f tx timeout [ 71.816095][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.827871][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.840210][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.862483][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.872574][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.886101][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.896720][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.909373][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.920317][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.930204][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.944629][ T4195] device veth1_macvtap entered promiscuous mode [ 71.975210][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.986810][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.998220][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.007511][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.024882][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.034047][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.044323][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.053354][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.063480][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.083371][ T4200] device veth0_vlan entered promiscuous mode [ 72.111002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.124404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.136597][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.149186][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.160891][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.172696][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.184156][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.193861][ T4187] device veth0_macvtap entered promiscuous mode [ 72.210172][ T4200] device veth1_vlan entered promiscuous mode [ 72.220768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.229321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.239917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.249213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.265961][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.278743][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.289344][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.300348][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.315561][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.326247][ T4187] device veth1_macvtap entered promiscuous mode [ 72.351598][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.360973][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.376818][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.386223][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.396584][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.406237][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.435132][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.448265][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.459874][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.474768][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.485628][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.498937][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.510807][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.543041][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.555577][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.575432][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.589085][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.600484][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.614149][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.626678][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.638754][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.650217][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.681297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.690804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.707666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.716942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.729178][ T4200] device veth0_macvtap entered promiscuous mode [ 72.741005][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.750703][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.761309][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.772775][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.820972][ T4200] device veth1_macvtap entered promiscuous mode [ 72.853091][ T1203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.866119][ T1203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.892939][ T4214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.906905][ T1203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.912152][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.917378][ T1203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.940560][ T4214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.946020][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.958018][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.966797][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.976304][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.001619][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.012883][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.024340][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.036218][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.046890][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.059715][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.070718][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.085399][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.099306][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.117718][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.130643][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.154334][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.165758][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.177801][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.189136][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.200588][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.212487][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.223157][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.235479][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.247621][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.271002][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.283528][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.295220][ T4200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.308284][ T4200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.317897][ T4200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.327796][ T4200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.348051][ T4214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.369153][ T4214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.399810][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.423858][ T3026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.432746][ T3026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.442574][ T3026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.443749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.478981][ T3026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.512663][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.560391][ T4214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.602129][ T4214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.648471][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.690851][ T4272] device syzkaller0 entered promiscuous mode [ 73.699416][ T3026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.717308][ T3026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.745678][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.771866][ T4233] Bluetooth: hci0: command 0x0419 tx timeout [ 73.791772][ T4256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.834246][ T4256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.852149][ T4236] Bluetooth: hci2: command 0x0419 tx timeout [ 73.859950][ T4236] Bluetooth: hci1: command 0x0419 tx timeout [ 73.933345][ T4236] Bluetooth: hci4: command 0x0419 tx timeout [ 73.945879][ T4236] Bluetooth: hci3: command 0x0419 tx timeout [ 74.452339][ T4232] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.883469][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.910103][ T4256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.910641][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.926917][ T4256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.928049][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.946964][ T4290] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.983436][ T4279] device bridge_slave_1 left promiscuous mode [ 75.018449][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.059059][ T4279] device bridge_slave_0 left promiscuous mode [ 75.074343][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.587481][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.600067][ T4299] FAULT_INJECTION: forcing a failure. [ 75.600067][ T4299] name failslab, interval 1, probability 0, space 0, times 1 [ 75.601436][ T4232] usb 5-1: Using ep0 maxpacket: 32 [ 75.627542][ T4299] CPU: 0 PID: 4299 Comm: syz.2.9 Not tainted syzkaller #0 [ 75.638604][ T4299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 75.655931][ T4299] Call Trace: [ 75.661381][ T4299] [ 75.666534][ T4299] dump_stack_lvl+0x188/0x250 [ 75.672248][ T4299] ? show_regs_print_info+0x20/0x20 [ 75.678332][ T4299] ? load_image+0x410/0x410 [ 75.684142][ T4299] ? __might_sleep+0xf0/0xf0 [ 75.690344][ T4299] ? __lock_acquire+0x7b50/0x7b50 [ 75.700329][ T4299] should_fail+0x383/0x4b0 [ 75.706028][ T4299] should_failslab+0x5/0x20 [ 75.711942][ T4299] slab_pre_alloc_hook+0x51/0xc0 [ 75.718521][ T4299] kmem_cache_alloc_trace+0x47/0x290 [ 75.726826][ T4299] ? snd_seq_prioq_new+0x43/0x90 [ 75.733565][ T4299] snd_seq_prioq_new+0x43/0x90 [ 75.739973][ T4299] snd_seq_queue_alloc+0x114/0x740 [ 75.748342][ T4299] snd_seq_ioctl_create_queue+0x7b/0x320 [ 75.755206][ T4299] ? snd_seq_ioctl_unsubscribe_port+0x6d0/0x6d0 [ 75.763150][ T4299] snd_seq_oss_open+0x622/0xf00 [ 75.768888][ T4299] ? snd_seq_oss_delete_client+0x50/0x50 [ 75.775184][ T4299] ? __mutex_lock_common+0x435/0x2400 [ 75.782191][ T4299] ? mutex_lock_io_nested+0x60/0x60 [ 75.789831][ T4299] ? snd_seq_oss_process_event+0x2910/0x2910 [ 75.797076][ T4299] ? async_call_lookup_ports+0x10/0x10 [ 75.803383][ T4299] ? do_raw_spin_unlock+0x11d/0x230 [ 75.810024][ T4299] odev_open+0x63/0x90 [ 75.815407][ T4299] chrdev_open+0x585/0x5f0 [ 75.820252][ T4299] ? cd_forget+0x160/0x160 [ 75.828187][ T4299] ? fsnotify_perm+0x3a7/0x560 [ 75.834697][ T4299] ? cd_forget+0x160/0x160 [ 75.840040][ T4299] do_dentry_open+0x7f7/0xf90 [ 75.846211][ T4299] ? vfs_open+0x2b/0x80 [ 75.851869][ T4299] path_openat+0x2718/0x2fb0 [ 75.856841][ T4299] ? __kasan_slab_alloc+0xa9/0xc0 [ 75.862283][ T4299] ? do_filp_open+0x400/0x400 [ 75.867035][ T4299] do_filp_open+0x1df/0x400 [ 75.872146][ T4299] ? vfs_tmpfile+0x300/0x300 [ 75.877277][ T4299] ? _raw_spin_unlock+0x24/0x40 [ 75.885005][ T4299] ? alloc_fd+0x59e/0x650 [ 75.890115][ T4299] do_sys_openat2+0x14b/0x500 [ 75.896036][ T4299] ? __lock_acquire+0x7b50/0x7b50 [ 75.902742][ T4299] ? do_sys_open+0xe0/0xe0 [ 75.907851][ T4299] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 75.914633][ T4299] ? lock_chain_count+0x20/0x20 [ 75.920648][ T4299] __x64_sys_openat+0x135/0x160 [ 75.928430][ T4299] do_syscall_64+0x4c/0xa0 [ 75.933944][ T4299] ? clear_bhb_loop+0x30/0x80 [ 75.940270][ T4299] ? clear_bhb_loop+0x30/0x80 [ 75.945190][ T4299] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.951624][ T4299] RIP: 0033:0x7f3dcd970159 [ 75.956884][ T4299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.981968][ T4299] RSP: 002b:00007f3dcbbc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 75.991564][ T4299] RAX: ffffffffffffffda RBX: 00007f3dcdbf7fa0 RCX: 00007f3dcd970159 [ 76.000660][ T4299] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 76.008836][ T4299] RBP: 00007f3dcda0706b R08: 0000000000000000 R09: 0000000000000000 [ 76.017897][ T4299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.027476][ T4299] R13: 00007f3dcdbf8038 R14: 00007f3dcdbf7fa0 R15: 00007ffd447e5648 [ 76.036069][ T4299] [ 76.186300][ T4310] loop3: detected capacity change from 0 to 512 [ 76.255153][ T4312] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709518847) [ 76.282353][ T4310] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 76.344791][ T4312] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 76.364493][ T4232] usb 5-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 76.391563][ T4310] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 76.399555][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.420888][ T4232] usb 5-1: Product: syz [ 76.435584][ T4232] usb 5-1: Manufacturer: syz [ 76.579754][ T4310] EXT4-fs (loop3): 1 truncate cleaned up [ 76.597620][ T4310] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.614023][ T4232] usb 5-1: SerialNumber: syz [ 76.721377][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 76.731399][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 76.741374][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 76.751375][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 76.771381][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 76.782363][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 76.791377][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 76.801365][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 76.811376][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 76.822035][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 78.641346][ C1] sched: RT throttling activated [ 78.895806][ T4325] loop2: detected capacity change from 0 to 4096 [ 78.903393][ T4232] usb 5-1: can't set config #1, error -71 [ 78.935445][ T4232] usb 5-1: USB disconnect, device number 2 [ 79.083832][ T4334] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 79.273592][ T4333] loop1: detected capacity change from 0 to 512 [ 79.470700][ T4333] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.20: missing EA_INODE flag [ 79.542127][ T4333] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.20: error while reading EA inode 12 err=-117 [ 79.588039][ T4325] EXT4-fs (loop2): Test dummy encryption mode enabled [ 79.628475][ T4333] EXT4-fs (loop1): 1 orphan inode deleted [ 79.659166][ T4325] EXT4-fs (loop2): Ignoring removed orlov option [ 79.693088][ T4333] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.708670][ T4325] EXT4-fs: failed to create workqueue [ 79.731505][ T4325] EXT4-fs (loop2): mount failed [ 79.757935][ T4347] loop3: detected capacity change from 0 to 8 [ 80.021575][ T4347] squashfs: Unknown parameter 'vUѰ*}`:jfvM1b/@pD[; 6]5xiha_9qmb;nȓepȧD' [ 81.321621][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.330683][ T4365] device syzkaller0 entered promiscuous mode [ 81.726950][ T26] audit: type=1326 audit(1790977818.276:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.2.29" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd970159 code=0x7ffc0000 [ 82.539983][ T26] audit: type=1326 audit(1790977818.276:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.2.29" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3dcd970159 code=0x7ffc0000 [ 82.568625][ T26] audit: type=1326 audit(1790977818.286:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.2.29" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd970159 code=0x7ffc0000 [ 82.584996][ T4384] loop4: detected capacity change from 0 to 256 [ 82.602532][ T26] audit: type=1326 audit(1790977818.296:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.2.29" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f3dcd970159 code=0x7ffc0000 [ 82.634106][ T4388] loop0: detected capacity change from 0 to 256 [ 82.653099][ T26] audit: type=1326 audit(1790977818.296:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.2.29" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd970159 code=0x7ffc0000 [ 82.721529][ T26] audit: type=1326 audit(1790977818.296:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.2.29" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd970159 code=0x7ffc0000 [ 82.752495][ T7] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.754618][ T4384] FAT-fs (loop4): Unrecognized mount option "iochB8|.WEarset=cp949" or missing value [ 82.795458][ T26] audit: type=1326 audit(1790977818.296:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.2.29" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3dcd970159 code=0x7ffc0000 [ 82.800418][ T7] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.876846][ T26] audit: type=1326 audit(1790977818.296:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.2.29" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd970159 code=0x7ffc0000 [ 83.013411][ T4388] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 83.087618][ T26] audit: type=1326 audit(1790977818.296:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.2.29" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd970159 code=0x7ffc0000 [ 83.133210][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 83.161849][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 83.235902][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.255103][ T7] usb 2-1: config 0 descriptor?? [ 83.265365][ T26] audit: type=1326 audit(1790977818.296:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.2.29" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3dcd970159 code=0x7ffc0000 [ 83.361918][ T4388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.33'. [ 83.402162][ T4401] netlink: 14 bytes leftover after parsing attributes in process `syz.2.38'. [ 83.671678][ T7] usbhid 2-1:0.0: can't add hid device: -71 [ 83.686343][ T7] usbhid: probe of 2-1:0.0 failed with error -71 [ 83.734269][ T7] usb 2-1: USB disconnect, device number 2 [ 83.893459][ T4407] loop0: detected capacity change from 0 to 8192 [ 83.986056][ T4412] ======================================================= [ 83.986056][ T4412] WARNING: The mand mount option has been deprecated and [ 83.986056][ T4412] and is ignored by this kernel. Remove the mand [ 83.986056][ T4412] option from the mount to silence this warning. [ 83.986056][ T4412] ======================================================= [ 84.988339][ T4442] netlink: 277 bytes leftover after parsing attributes in process `syz.3.50'. [ 85.018776][ T4444] loop1: detected capacity change from 0 to 512 [ 85.081521][ T4444] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 85.159584][ T4444] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c128, mo2=0002] [ 85.271536][ T4444] System zones: 1-12 [ 85.295810][ T4444] EXT4-fs (loop1): 1 truncate cleaned up [ 85.307127][ T4444] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000009,bsddf,debug,data_err=ignore,errors=remount-ro,. Quota mode: none. [ 85.398007][ T4444] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 85.470838][ T4444] EXT4-fs (loop1): Remounting filesystem read-only [ 85.497368][ T4444] EXT4-fs error (device loop1): __ext4_new_inode:1360: inode #18: comm syz.1.51: mark_inode_dirty error [ 85.523533][ T4444] EXT4-fs (loop1): Remounting filesystem read-only [ 85.546188][ T4444] EXT4-fs error (device loop1) in __ext4_new_inode:1362: Corrupt filesystem [ 85.549455][ T4451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 85.575965][ T4444] EXT4-fs (loop1): Remounting filesystem read-only [ 85.597015][ T4444] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 85.624009][ T4444] EXT4-fs (loop1): Remounting filesystem read-only [ 85.655615][ T4444] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #18: comm syz.1.51: mark_inode_dirty error [ 85.696616][ T4444] EXT4-fs (loop1): Remounting filesystem read-only [ 85.719470][ T4444] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 85.936408][ T4462] Illegal XDP return value 4291387392, expect packet loss! [ 86.011648][ T4284] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 86.533146][ T4284] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1800, setting to 64 [ 86.789353][ T4284] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.551569][ T4284] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.580212][ T4284] usb 5-1: New USB device found, idVendor=17ef, idProduct=6049, bcdDevice= 0.00 [ 87.620885][ T4284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.649049][ T4284] usb 5-1: config 0 descriptor?? [ 87.681839][ T4455] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 88.203499][ T4284] input: HID 17ef:6049 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:17EF:6049.0001/input/input5 [ 88.344975][ T4284] lenovo 0003:17EF:6049.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6049] on usb-dummy_hcd.4-1/input0 [ 88.851076][ T4468] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.860412][ T4468] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.784939][ T4468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.859512][ T4468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.874181][ T4502] loop4: detected capacity change from 0 to 8192 [ 90.177913][ T4236] usb 5-1: USB disconnect, device number 3 [ 90.231706][ T26] kauditd_printk_skb: 75 callbacks suppressed [ 90.231727][ T26] audit: type=1804 audit(1790977826.776:87): pid=4502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.69" name="/newroot/10/bus/bus" dev="loop4" ino=1048591 res=1 errno=0 [ 90.534411][ T4468] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.545963][ T4468] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.556563][ T4468] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.566840][ T4468] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.681019][ T4487] netlink: 'syz.0.66': attribute type 4 has an invalid length. [ 90.719044][ T4468] syz.2.61 (4468) used greatest stack depth: 20928 bytes left [ 90.756053][ T4489] netlink: 'syz.0.66': attribute type 4 has an invalid length. [ 90.790220][ T4510] netlink: 'syz.1.71': attribute type 1 has an invalid length. [ 90.828473][ T4513] Zero length message leads to an empty skb [ 90.835873][ T4514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 91.056576][ T4522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.120451][ T4524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.73'. [ 91.136813][ T4524] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 91.147283][ T4524] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821) [ 91.259969][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.280128][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.288782][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.649688][ T4528] loop3: detected capacity change from 0 to 512 [ 92.173479][ T23] cfg80211: failed to load regulatory.db [ 92.210479][ T4528] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 92.384244][ T4528] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 92.506918][ T4536] netlink: 'syz.0.81': attribute type 10 has an invalid length. [ 92.515314][ T4528] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 94.527451][ T4528] EXT4-fs: failed to create workqueue [ 94.540062][ T4528] EXT4-fs (loop3): mount failed [ 94.553184][ T4536] team0: Port device dummy0 added [ 94.900359][ T4547] netlink: 'syz.0.81': attribute type 10 has an invalid length. [ 95.392089][ T4547] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 95.514689][ T4536] syz.0.81 (4536) used greatest stack depth: 20816 bytes left [ 95.526560][ T4547] team0: Port device dummy0 removed [ 95.555336][ T4547] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 95.788324][ T4566] netlink: 20 bytes leftover after parsing attributes in process `syz.0.87'. [ 95.811007][ T4566] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.819143][ T4566] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.897198][ T4580] device syzkaller0 entered promiscuous mode [ 96.002942][ T4575] loop1: detected capacity change from 0 to 1024 [ 96.508307][ T4605] loop0: detected capacity change from 0 to 3904 [ 96.537853][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.401628][ T4608] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 97.439186][ T4608] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 97.457758][ T4608] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 97.464857][ T4608] loop0: [ 97.541699][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 97.703431][ T7] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 97.719483][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.731780][ T7] usb 3-1: config 0 has no interface number 0 [ 97.738794][ T7] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 97.751171][ T7] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 97.765842][ T7] usb 3-1: config 0 interface 255 has no altsetting 0 [ 98.891585][ T7] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 98.901583][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.926938][ T7] usb 3-1: Product: syz [ 98.931425][ T7] usb 3-1: Manufacturer: syz [ 98.937027][ T7] usb 3-1: SerialNumber: syz [ 98.944046][ T7] usb 3-1: config 0 descriptor?? [ 99.187664][ T4634] loop3: detected capacity change from 0 to 164 [ 99.216650][ T4632] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 99.253947][ T7] usb 3-1: USB disconnect, device number 2 [ 99.316484][ T4638] device lo entered promiscuous mode [ 99.414576][ T4638] device tunl0 entered promiscuous mode [ 99.454056][ T4638] device gre0 entered promiscuous mode [ 99.461002][ T4647] process 'syz.2.111' launched './file0' with NULL argv: empty string added [ 99.710657][ T4638] device gretap0 entered promiscuous mode [ 99.799293][ T4638] device erspan0 entered promiscuous mode [ 99.889097][ T4638] device ip_vti0 entered promiscuous mode [ 99.931521][ T4638] device ip6_vti0 entered promiscuous mode [ 100.007162][ T4638] device sit0 entered promiscuous mode [ 100.197041][ T4638] device ip6tnl0 entered promiscuous mode [ 100.265950][ T4638] device ip6gre0 entered promiscuous mode [ 100.316531][ T4638] device syz_tun entered promiscuous mode [ 100.358989][ T4638] device ip6gretap0 entered promiscuous mode [ 100.425049][ T4638] device vcan0 entered promiscuous mode [ 100.458678][ T4638] device bond0 entered promiscuous mode [ 100.468174][ T4638] device bond_slave_0 entered promiscuous mode [ 100.485944][ T4638] device bond_slave_1 entered promiscuous mode [ 100.550073][ T4638] device team0 entered promiscuous mode [ 100.556644][ T4638] device team_slave_0 entered promiscuous mode [ 100.572196][ T4638] device team_slave_1 entered promiscuous mode [ 100.627753][ T4638] device dummy0 entered promiscuous mode [ 100.711735][ T4638] device nlmon0 entered promiscuous mode [ 100.744558][ T4638] device caif0 entered promiscuous mode [ 100.790161][ T4638] device batadv0 entered promiscuous mode [ 100.877569][ T4638] device vxcan0 entered promiscuous mode [ 100.895307][ T4672] loop1: detected capacity change from 0 to 512 [ 101.437701][ T4672] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.598445][ T4672] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.639125][ T4638] device vxcan1 entered promiscuous mode [ 101.660439][ T4638] device veth0 entered promiscuous mode [ 101.862831][ T4638] device veth1 entered promiscuous mode [ 101.902443][ T4638] device wg0 entered promiscuous mode [ 101.939611][ T4638] device wg1 entered promiscuous mode [ 102.922728][ T4638] device wg2 entered promiscuous mode [ 103.059061][ T4638] device veth0_to_bridge entered promiscuous mode [ 103.103190][ T4638] device bridge_slave_0 entered promiscuous mode [ 103.123034][ T4683] loop3: detected capacity change from 0 to 8192 [ 103.138512][ T4638] device veth1_to_bridge entered promiscuous mode [ 103.197416][ T4638] device bridge_slave_1 entered promiscuous mode [ 103.227736][ T4638] device veth0_to_bond entered promiscuous mode [ 103.286777][ T4638] device veth1_to_bond entered promiscuous mode [ 103.351290][ T4638] device veth0_to_team entered promiscuous mode [ 103.417886][ T4638] device veth1_to_team entered promiscuous mode [ 103.505972][ T4638] device veth0_to_batadv entered promiscuous mode [ 103.522568][ T4638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.543517][ T4638] device batadv_slave_0 entered promiscuous mode [ 103.569760][ T4638] device veth1_to_batadv entered promiscuous mode [ 103.584252][ T4638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.599994][ T4638] device batadv_slave_1 entered promiscuous mode [ 103.623246][ T4638] device xfrm0 entered promiscuous mode [ 103.646594][ T4638] device veth0_to_hsr entered promiscuous mode [ 103.680401][ T4638] device veth1_to_hsr entered promiscuous mode [ 103.723056][ T4638] device hsr0 entered promiscuous mode [ 103.750357][ T4638] device veth1_virt_wifi entered promiscuous mode [ 103.775145][ T4638] device veth0_virt_wifi entered promiscuous mode [ 103.784534][ T4638] device virt_wifi0 entered promiscuous mode [ 103.843695][ T4638] device vlan0 entered promiscuous mode [ 103.849917][ T4638] device vlan1 entered promiscuous mode [ 103.896334][ T4638] device macvlan0 entered promiscuous mode [ 103.928331][ T4638] device macvlan1 entered promiscuous mode [ 103.939488][ T4638] device ipvlan0 entered promiscuous mode [ 103.951602][ T4638] device ipvlan1 entered promiscuous mode [ 103.979041][ T4700] loop0: detected capacity change from 0 to 128 [ 104.012162][ T4699] 9pnet: p9_errstr2errno: server reported unknown error 'I$۷= [ 104.034894][ T4638] device macvtap0 entered promiscuous mode [ 104.056551][ T4638] device macsec0 entered promiscuous mode [ 104.117388][ T4638] device geneve0 entered promiscuous mode [ 104.131586][ T4638] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.159267][ T4638] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.169509][ T4638] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.183754][ T4638] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.195390][ T4638] device geneve1 entered promiscuous mode [ 104.354265][ T4638] device netdevsim0 entered promiscuous mode [ 104.524281][ T4638] device netdevsim1 entered promiscuous mode [ 104.689997][ T4638] device netdevsim2 entered promiscuous mode [ 104.877782][ T4638] device netdevsim3 entered promiscuous mode [ 105.073608][ T4638] device wlan0 entered promiscuous mode [ 105.172190][ T4638] device wlan1 entered promiscuous mode [ 105.214221][ T4695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'. [ 105.236552][ T4696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'. [ 106.181452][ T4233] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.661096][ T4721] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4192] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4721] [ 106.819275][ T4723] device syzkaller0 entered promiscuous mode [ 106.877695][ T4233] usb 4-1: device descriptor read/64, error -71 [ 106.948670][ T4735] netlink: 'syz.0.135': attribute type 3 has an invalid length. [ 107.161667][ T4233] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.335533][ T4748] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 107.343803][ T4748] Error parsing options; rc = [-22] [ 107.421662][ T4233] usb 4-1: device descriptor read/64, error -71 [ 107.612144][ T4233] usb usb4-port1: attempt power cycle [ 108.061465][ T4233] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 108.101807][ T4753] tipc: Started in network mode [ 108.118654][ T4753] tipc: Node identity ac14140f, cluster identity 4711 [ 108.136798][ T4753] tipc: New replicast peer: 255.255.255.255 [ 108.152396][ T4233] usb 4-1: device descriptor read/8, error -71 [ 108.171014][ T4753] tipc: Enabled bearer , priority 10 [ 108.369763][ T4767] xt_ipcomp: unknown flags 1D [ 108.407619][ T4760] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.510177][ T4769] netlink: 'syz.3.144': attribute type 10 has an invalid length. [ 108.555735][ T4769] device geneve0 entered promiscuous mode [ 108.620751][ T4769] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 108.671818][ T4236] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 108.679267][ T4760] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.712835][ T4778] netlink: 13310 bytes leftover after parsing attributes in process `syz.2.147'. [ 108.729503][ T4771] device pim6reg1 entered promiscuous mode [ 108.826383][ T4760] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.858779][ T4784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.149'. [ 108.940009][ T4760] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.071629][ T4236] usb 1-1: unable to get BOS descriptor or descriptor too short [ 109.112902][ T4790] netlink: 204 bytes leftover after parsing attributes in process `syz.4.152'. [ 109.157682][ T4790] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.161556][ T4236] usb 1-1: not running at top speed; connect to a high speed hub [ 109.261743][ T4236] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.272339][ T4788] loop3: detected capacity change from 0 to 256 [ 109.278164][ T4236] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.314630][ T4233] tipc: Node number set to 2886997007 [ 109.373324][ T4801] capability: warning: `syz.4.154' uses 32-bit capabilities (legacy support in use) [ 109.418140][ T4788] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 109.454986][ T4788] attempt to access beyond end of device [ 109.454986][ T4788] loop3: rw=524288, want=34359738496, limit=256 [ 109.486978][ T4788] attempt to access beyond end of device [ 109.486978][ T4788] loop3: rw=0, want=34359738496, limit=256 [ 109.507909][ T26] audit: type=1800 audit(1790977846.056:88): pid=4788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.151" name="file1" dev="loop3" ino=1048592 res=0 errno=0 [ 109.551781][ T4236] usb 1-1: string descriptor 0 read error: -22 [ 109.558379][ T4236] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.579580][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.662168][ T4236] usb 1-1: 0:2 : does not exist [ 109.941568][ T4232] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.127826][ T4236] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 110.201462][ T4232] usb 5-1: Using ep0 maxpacket: 8 [ 110.267094][ T26] audit: type=1326 audit(1790977846.816:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.2.160" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd970159 code=0x7ffc0000 [ 110.321633][ T26] audit: type=1326 audit(1790977846.816:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.2.160" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd970159 code=0x7ffc0000 [ 110.344744][ T4236] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 110.362352][ T4232] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 110.391478][ T4232] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 110.428773][ T26] audit: type=1326 audit(1790977846.816:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.2.160" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd970159 code=0x7ffc0000 [ 110.473777][ T4232] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.512890][ T4232] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.525164][ T26] audit: type=1326 audit(1790977846.816:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.2.160" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3dcd970159 code=0x7ffc0000 [ 110.557032][ T4232] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.580629][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.651668][ T4236] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 110.680058][ T26] audit: type=1326 audit(1790977846.816:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.2.160" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd970159 code=0x7ffc0000 [ 110.782516][ T26] audit: type=1326 audit(1790977846.816:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.2.160" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd970159 code=0x7ffc0000 [ 110.841928][ T4829] loop1: detected capacity change from 0 to 40427 [ 110.843856][ T26] audit: type=1326 audit(1790977846.816:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.2.160" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd970159 code=0x7ffc0000 [ 110.905371][ T26] audit: type=1326 audit(1790977846.816:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.2.160" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f3dcd970159 code=0x7ffc0000 [ 110.935272][ T26] audit: type=1326 audit(1790977846.816:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.2.160" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd970159 code=0x7ffc0000 [ 110.960934][ T4232] usb 5-1: usb_control_msg returned -71 [ 110.977376][ T4236] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 110.979857][ T4232] usbtmc 5-1:16.0: can't read capabilities [ 111.010661][ T4236] usb 1-1: USB disconnect, device number 2 [ 111.058360][ T4829] F2FS-fs (loop1): invalid crc value [ 111.120329][ T4829] F2FS-fs (loop1): Found nat_bits in checkpoint [ 111.153633][ T4232] usb 5-1: USB disconnect, device number 4 [ 111.468465][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.361509][ T4829] F2FS-fs (loop1): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 112.516340][ T4871] syz.4.168 uses obsolete (PF_INET,SOCK_PACKET) [ 113.714805][ T4893] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 114.233830][ T4907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.180'. [ 114.415731][ T4909] netlink: 224 bytes leftover after parsing attributes in process `syz.4.179'. [ 114.571012][ T4916] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 115.591937][ T4932] loop4: detected capacity change from 0 to 1024 [ 115.798058][ T4935] dns_resolver: Unsupported content type (6) [ 117.325392][ T4943] loop3: detected capacity change from 0 to 2048 [ 117.879975][ T4943] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.018453][ T154] hfsplus: b-tree write err: -5, ino 25 [ 118.065415][ T154] hfsplus: b-tree write err: -5, ino 4 [ 118.095840][ T154] hfsplus: b-tree write err: -5, ino 2 [ 118.104152][ T4959] x_tables: unsorted entry at hook 2 [ 118.130147][ T4943] netlink: 'syz.3.188': attribute type 16 has an invalid length. [ 118.157871][ T4959] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.181746][ T4943] netlink: 'syz.3.188': attribute type 17 has an invalid length. [ 118.190203][ T4943] netlink: 'syz.3.188': attribute type 27 has an invalid length. [ 118.431616][ T4969] loop1: detected capacity change from 0 to 512 [ 119.273574][ T4967] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 119.371773][ T4967] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 119.446000][ T4967] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 119.517293][ T4982] loop3: detected capacity change from 0 to 512 [ 119.649169][ T4982] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.197: iget: bad extended attribute block 134217728 [ 119.763171][ T4982] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.197: couldn't read orphan inode 15 (err -117) [ 119.822083][ T4982] EXT4-fs (loop3): mounted filesystem without journal. Opts: prjquota,,errors=continue. Quota mode: writeback. [ 120.029555][ T5002] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.197: bg 0: block 465: padding at end of block bitmap is not set [ 120.107986][ T5006] EXT4-fs (loop3): shut down requested (1) [ 120.151003][ T5007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.200'. [ 120.208122][ T5009] loop1: detected capacity change from 0 to 1024 [ 120.417672][ T5007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.893919][ T5034] loop4: detected capacity change from 0 to 128 [ 122.434266][ T5038] loop0: detected capacity change from 0 to 8 [ 122.736739][ T5038] SQUASHFS error: Unable to read inode 0x127 [ 122.841286][ T154] hfsplus: b-tree write err: -5, ino 25 [ 122.848222][ T154] hfsplus: b-tree write err: -5, ino 4 [ 122.868258][ T154] hfsplus: b-tree write err: -5, ino 2 [ 122.874727][ T154] hfsplus: b-tree write err: -5, ino 26 [ 122.880903][ T154] hfsplus: b-tree write err: -5, ino 27 [ 122.964407][ T5038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'. [ 122.964581][ T5050] loop0: detected capacity change from 0 to 3904 [ 122.991502][ T5038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.116943][ T5038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.270854][ T5050] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 123.291546][ T5050] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 123.298902][ T5050] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 123.351946][ T5050] loop0: [ 124.384923][ T5069] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.217'. [ 124.718489][ T5085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'. [ 128.669044][ T5133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 129.018377][ T5145] loop3: detected capacity change from 0 to 512 [ 129.773537][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.713484][ T5178] Cannot find add_set index 0 as target [ 131.941442][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 132.043537][ T5182] device syzkaller0 entered promiscuous mode [ 132.111858][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 132.280783][ T5195] loop0: detected capacity change from 0 to 512 [ 132.331629][ T7] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 132.352864][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.362082][ T5195] EXT4-fs (loop0): Ignoring removed oldalloc option [ 132.393342][ T5195] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 132.432903][ T7] usb 2-1: Product: syz [ 132.437592][ T7] usb 2-1: Manufacturer: syz [ 132.460904][ T7] usb 2-1: SerialNumber: syz [ 132.541629][ T7] usb 2-1: can't set config #1, error -71 [ 132.658168][ T7] usb 2-1: USB disconnect, device number 3 [ 132.674278][ T5195] EXT4-fs (loop0): 1 truncate cleaned up [ 132.899936][ T5195] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 133.003897][ T5215] ip_tables: iptables: counters copy to user failed while replacing table [ 133.144433][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.158752][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.661553][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 133.971593][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 134.202741][ T7] usb 2-1: config 0 has no interfaces? [ 134.275920][ T7] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 134.480081][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.555746][ T7] usb 2-1: config 0 descriptor?? [ 135.034685][ T5213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.252'. [ 135.127557][ T5247] xt_socket: unknown flags 0x4c [ 135.739729][ T5248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.252'. [ 135.903705][ T4236] usb 2-1: USB disconnect, device number 4 [ 135.939598][ T5256] loop3: detected capacity change from 0 to 512 [ 135.967971][ T5254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.260'. [ 136.040036][ T5256] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 136.107659][ T5256] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 136.281716][ T5267] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 136.491410][ T5266] overlayfs: failed to look up (tracing) for ino (-66) [ 137.709823][ T5286] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.796095][ T5299] device syzkaller0 entered promiscuous mode [ 137.908501][ T5286] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.936768][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 137.936786][ T26] audit: type=1326 audit(1790977874.486:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.2.274" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd970159 code=0x0 [ 138.040314][ T5286] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.145703][ T5286] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.146314][ T5306] IPVS: fo: FWM 3 0x00000003 - no destination available [ 138.172659][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 138.328395][ T5286] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.405544][ T5286] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.457338][ T5286] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.487891][ T5286] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.772551][ T5360] loop3: detected capacity change from 0 to 164 [ 140.901725][ T5360] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 141.050084][ T5360] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 141.090935][ T5360] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 142.618318][ T5408] loop4: detected capacity change from 0 to 8 [ 142.802108][ T5408] SQUASHFS error: zlib decompression failed, data probably corrupt [ 142.822877][ T5408] SQUASHFS error: Failed to read block 0x9b: -5 [ 142.829673][ T5408] SQUASHFS error: Unable to read metadata cache entry [99] [ 143.373279][ T5408] SQUASHFS error: Unable to read inode 0x127 [ 144.126530][ T5419] netlink: 32 bytes leftover after parsing attributes in process `syz.1.299'. [ 144.597359][ T5395] bond0: Unable to set down delay as MII monitoring is disabled [ 145.517137][ T5454] FAULT_INJECTION: forcing a failure. [ 145.517137][ T5454] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 145.532054][ T5454] CPU: 0 PID: 5454 Comm: syz.4.307 Not tainted syzkaller #0 [ 145.539474][ T5454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 145.550104][ T5454] Call Trace: [ 145.553414][ T5454] [ 145.556593][ T5454] dump_stack_lvl+0x188/0x250 [ 145.562210][ T5454] ? show_regs_print_info+0x20/0x20 [ 145.567719][ T5454] ? load_image+0x410/0x410 [ 145.572519][ T5454] should_fail+0x383/0x4b0 [ 145.578405][ T5454] prepare_alloc_pages+0x1e3/0x5b0 [ 145.584186][ T5454] __alloc_pages+0x11b/0x480 [ 145.589019][ T5454] ? zone_statistics+0x170/0x170 [ 145.594286][ T5454] ? rcu_lock_acquire+0x30/0x30 [ 145.599462][ T5454] ? alloc_pages+0x452/0x560 [ 145.604623][ T5454] __get_free_pages+0x8/0x30 [ 145.609359][ T5454] __tlb_remove_page_size+0x1f2/0x3f0 [ 145.616521][ T5454] unmap_page_range+0xfcf/0x2410 [ 145.622145][ T5454] unmap_vmas+0x131/0x250 [ 145.626996][ T5454] ? unmap_page_range+0x2410/0x2410 [ 145.632482][ T5454] ? __mutex_lock_common+0x435/0x2400 [ 145.638302][ T5454] ? exit_mm_release+0x16/0x30 [ 145.644070][ T5454] exit_mmap+0x3b9/0x640 [ 145.648979][ T5454] ? vm_brk+0x20/0x20 [ 145.653109][ T5454] ? uprobe_clear_state+0x2f6/0x460 [ 145.658954][ T5454] __mmput+0x115/0x390 [ 145.663241][ T5454] exit_mm+0x632/0x7b0 [ 145.667700][ T5454] ? perf_pmu_migrate_context+0xb70/0xb70 [ 145.673990][ T5454] ? do_exit+0x2110/0x2110 [ 145.678880][ T5454] ? __ia32_sys_timer_delete+0x40/0x40 [ 145.684919][ T5454] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 145.692966][ T5454] ? tty_audit_exit+0x149/0x1f0 [ 145.699144][ T5454] do_exit+0x5b8/0x2110 [ 145.705592][ T5454] ? put_task_struct+0x80/0x80 [ 145.712118][ T5454] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 145.719091][ T5454] ? _raw_spin_lock_irq+0xb7/0xf0 [ 145.724714][ T5454] do_group_exit+0x12c/0x2f0 [ 145.730004][ T5454] ? lockdep_hardirqs_on+0x94/0x140 [ 145.735345][ T5454] get_signal+0x7eb/0x12e0 [ 145.740576][ T5454] arch_do_signal_or_restart+0xe6/0x12a0 [ 145.746289][ T5454] ? futex_exit_release+0x1c0/0x1c0 [ 145.751730][ T5454] ? get_sigframe_size+0x10/0x10 [ 145.756935][ T5454] ? __context_tracking_exit+0x4c/0x80 [ 145.763200][ T5454] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 145.770351][ T5454] ? exit_to_user_mode_loop+0x3b/0x130 [ 145.776310][ T5454] exit_to_user_mode_loop+0x9e/0x130 [ 145.782619][ T5454] exit_to_user_mode_prepare+0xee/0x180 [ 145.788844][ T5454] syscall_exit_to_user_mode+0x16/0x40 [ 145.794450][ T5454] do_syscall_64+0x58/0xa0 [ 145.799158][ T5454] ? clear_bhb_loop+0x30/0x80 [ 145.805053][ T5454] ? clear_bhb_loop+0x30/0x80 [ 145.810225][ T5454] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.816509][ T5454] RIP: 0033:0x7f219c110159 [ 145.821077][ T5454] Code: Unable to access opcode bytes at RIP 0x7f219c11012f. [ 145.829152][ T5454] RSP: 002b:00007f219a3680e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 145.837781][ T5454] RAX: fffffffffffffe00 RBX: 00007f219c397fa8 RCX: 00007f219c110159 [ 145.846206][ T5454] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f219c397fa8 [ 145.854459][ T5454] RBP: 00007f219c397fa0 R08: 0000000000000000 R09: 0000000000000000 [ 145.863048][ T5454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.871392][ T5454] R13: 00007f219c398038 R14: 00007ffd7cb864f0 R15: 00007ffd7cb865d8 [ 145.879751][ T5454] [ 147.438295][ T4549] libceph: connect (1)[c::]:6789 error -101 [ 147.480938][ T4549] libceph: mon0 (1)[c::]:6789 connect error [ 147.528785][ T4549] libceph: connect (1)[c::]:6789 error -101 [ 147.546417][ T4549] libceph: mon0 (1)[c::]:6789 connect error [ 147.694386][ T5484] overlayfs: failed to verify origin (65/file1, ino=371, err=-116) [ 147.795745][ T5484] overlayfs: failed to verify origin (65/file1, ino=371, err=-116) [ 147.823654][ T4235] libceph: connect (1)[c::]:6789 error -101 [ 147.829967][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 148.151812][ T5474] ceph: No mds server is up or the cluster is laggy [ 148.163795][ T5502] loop2: detected capacity change from 0 to 1024 [ 148.229916][ T4235] libceph: connect (1)[c::]:6789 error -101 [ 148.236663][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 148.274388][ T5479] ceph: No mds server is up or the cluster is laggy [ 148.389437][ T4235] libceph: connect (1)[c::]:6789 error -101 [ 148.401598][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 148.406111][ T9] hfsplus: b-tree write err: -5, ino 25 [ 148.470438][ T9] hfsplus: b-tree write err: -5, ino 4 [ 148.492389][ T9] hfsplus: b-tree write err: -5, ino 2 [ 148.861767][ T4188] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 149.111781][ T4188] usb 5-1: Using ep0 maxpacket: 16 [ 149.234085][ T4188] usb 5-1: config 0 has no interfaces? [ 149.403788][ T4188] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 149.455138][ T4188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.495355][ T4188] usb 5-1: Product: syz [ 149.516874][ T4188] usb 5-1: Manufacturer: syz [ 149.537154][ T4188] usb 5-1: SerialNumber: syz [ 149.572522][ T4188] usb 5-1: config 0 descriptor?? [ 149.667319][ T5554] loop2: detected capacity change from 0 to 128 [ 150.097295][ T5564] FAULT_INJECTION: forcing a failure. [ 150.097295][ T5564] name failslab, interval 1, probability 0, space 0, times 0 [ 150.146960][ T5564] CPU: 0 PID: 5564 Comm: syz.3.330 Not tainted syzkaller #0 [ 150.154779][ T5564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 150.166321][ T5564] Call Trace: [ 150.169914][ T5564] [ 150.173151][ T5564] dump_stack_lvl+0x188/0x250 [ 150.178142][ T5564] ? show_regs_print_info+0x20/0x20 [ 150.184539][ T5564] ? load_image+0x410/0x410 [ 150.189750][ T5564] ? __might_sleep+0xf0/0xf0 [ 150.196310][ T5564] ? __lock_acquire+0x7b50/0x7b50 [ 150.202849][ T5564] should_fail+0x383/0x4b0 [ 150.208589][ T5564] should_failslab+0x5/0x20 [ 150.215852][ T5564] slab_pre_alloc_hook+0x51/0xc0 [ 150.222511][ T5564] ? __proc_create+0x36f/0x8b0 [ 150.228736][ T5564] kmem_cache_alloc+0x3d/0x280 [ 150.233918][ T5564] __proc_create+0x36f/0x8b0 [ 150.239028][ T5564] ? proc_symlink+0x210/0x210 [ 150.244283][ T5564] ? proc_symlink+0x210/0x210 [ 150.249649][ T5564] proc_create_data+0xa0/0x2d0 [ 150.254994][ T5564] cache_register_net+0x2d6/0x480 [ 150.260246][ T5564] nfsd_idmap_init+0x92/0x1e0 [ 150.265053][ T5564] ? nfsd_init_net+0x34/0x1e0 [ 150.269775][ T5564] nfsd_init_net+0x47/0x1e0 [ 150.274757][ T5564] ops_init+0x360/0x5f0 [ 150.279520][ T5564] setup_net+0x39e/0xa10 [ 150.284171][ T5564] ? copy_net_ns+0x5b0/0x5b0 [ 150.289154][ T5564] ? copy_net_ns+0x324/0x5b0 [ 150.293813][ T5564] ? down_read_killable+0x1ce/0x340 [ 150.299373][ T5564] copy_net_ns+0x33e/0x5b0 [ 150.304534][ T5564] create_new_namespaces+0x3ce/0x700 [ 150.310205][ T5564] unshare_nsproxy_namespaces+0x116/0x160 [ 150.316935][ T5564] ksys_unshare+0x4f6/0x8e0 [ 150.322290][ T5564] ? __lock_acquire+0x7b50/0x7b50 [ 150.327686][ T5564] ? sighand_ctor+0x40/0x40 [ 150.332318][ T5564] ? lock_chain_count+0x20/0x20 [ 150.337733][ T5564] ? syscall_enter_from_user_mode+0x21/0x70 [ 150.344083][ T5564] __x64_sys_unshare+0x34/0x40 [ 150.349356][ T5564] do_syscall_64+0x4c/0xa0 [ 150.354235][ T5564] ? clear_bhb_loop+0x30/0x80 [ 150.359379][ T5564] ? clear_bhb_loop+0x30/0x80 [ 150.364458][ T5564] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.371957][ T5564] RIP: 0033:0x7f35a540c159 [ 150.377017][ T5564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.401903][ T5564] RSP: 002b:00007f35a3664028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 150.412068][ T5564] RAX: ffffffffffffffda RBX: 00007f35a5693fa0 RCX: 00007f35a540c159 [ 150.421742][ T5564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 150.430019][ T5564] RBP: 00007f35a54a306b R08: 0000000000000000 R09: 0000000000000000 [ 150.438750][ T5564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.446886][ T5564] R13: 00007f35a5694038 R14: 00007f35a5693fa0 R15: 00007ffcce659988 [ 150.455088][ T5564] [ 151.482140][ T5594] loop0: detected capacity change from 0 to 256 [ 151.610574][ T5594] FAT-fs (loop0): bogus logical sector size 0 [ 151.631136][ T5594] FAT-fs (loop0): Can't find a valid FAT filesystem [ 151.663068][ T4549] usb 5-1: USB disconnect, device number 5 [ 151.700955][ T5605] netlink: 132 bytes leftover after parsing attributes in process `syz.3.337'. [ 151.808808][ T5605] netlink: 132 bytes leftover after parsing attributes in process `syz.3.337'. [ 152.256575][ T5624] kvm: pic: non byte write [ 152.361667][ T5625] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 152.370712][ T5625] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 153.337899][ T5650] x_tables: ip6_tables: bpf.1 match: invalid size 528 (kernel) != (user) 720 [ 153.531599][ C1] [ 153.533989][ C1] ================================ [ 153.539281][ C1] WARNING: inconsistent lock state [ 153.544482][ C1] syzkaller #0 Not tainted [ 153.548901][ C1] -------------------------------- [ 153.554106][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 153.561137][ C1] ksoftirqd/1/20 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 153.567477][ C1] ffff888077f4c120 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x109/0x250 [ 153.577157][ C1] {SOFTIRQ-ON-W} state was registered at: [ 153.583064][ C1] lock_acquire+0x19e/0x400 [ 153.587703][ C1] lock_sock_nested+0x44/0x100 [ 153.592748][ C1] x25_release+0x9c/0x380 [ 153.597534][ C1] sock_close+0xbf/0x210 [ 153.602049][ C1] __fput+0x212/0x8c0 [ 153.606421][ C1] task_work_run+0x125/0x1a0 [ 153.611216][ C1] exit_to_user_mode_loop+0x10f/0x130 [ 153.617331][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 153.623328][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 153.628982][ C1] do_syscall_64+0x58/0xa0 [ 153.633622][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.639884][ C1] irq event stamp: 520760 [ 153.645102][ C1] hardirqs last enabled at (520760): [] __local_bh_enable_ip+0x136/0x1c0 [ 153.655538][ C1] hardirqs last disabled at (520759): [] __local_bh_enable_ip+0xd7/0x1c0 [ 153.665827][ C1] softirqs last enabled at (520708): [] run_ksoftirqd+0xa4/0x100 [ 153.675577][ C1] softirqs last disabled at (520713): [] run_ksoftirqd+0xa4/0x100 [ 153.685636][ C1] [ 153.685636][ C1] other info that might help us debug this: [ 153.694344][ C1] Possible unsafe locking scenario: [ 153.694344][ C1] [ 153.702415][ C1] CPU0 [ 153.705797][ C1] ---- [ 153.709092][ C1] lock(sk_lock-AF_X25); [ 153.713581][ C1] [ 153.717134][ C1] lock(sk_lock-AF_X25); [ 153.721723][ C1] [ 153.721723][ C1] *** DEADLOCK *** [ 153.721723][ C1] [ 153.730135][ C1] 1 lock held by ksoftirqd/1/20: [ 153.735068][ C1] #0: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 153.744393][ C1] [ 153.744393][ C1] stack backtrace: [ 153.750751][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 153.758326][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 153.768873][ C1] Call Trace: [ 153.772479][ C1] [ 153.775692][ C1] dump_stack_lvl+0x188/0x250 [ 153.780413][ C1] ? show_regs_print_info+0x20/0x20 [ 153.786127][ C1] valid_state+0x13b/0x1d0 [ 153.791130][ C1] mark_lock_irq+0xa9/0x900 [ 153.795888][ C1] ? stack_trace_save+0xa6/0xf0 [ 153.801278][ C1] ? save_trace+0xad0/0xad0 [ 153.806280][ C1] ? mark_lock+0x94/0x320 [ 153.811008][ C1] ? save_trace+0x5a/0xad0 [ 153.816122][ C1] mark_lock+0x208/0x320 [ 153.820466][ C1] __lock_acquire+0xc63/0x7b50 [ 153.825422][ C1] ? ____kasan_slab_free+0xd5/0x110 [ 153.830622][ C1] ? verify_lock_unused+0x140/0x140 [ 153.835914][ C1] ? __napi_poll+0xbb/0x430 [ 153.840958][ C1] ? run_ksoftirqd+0xa4/0x100 [ 153.845816][ C1] ? smpboot_thread_fn+0x520/0x990 [ 153.851109][ C1] ? verify_lock_unused+0x140/0x140 [ 153.856485][ C1] ? verify_lock_unused+0x140/0x140 [ 153.862067][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 153.868406][ C1] ? lock_chain_count+0x20/0x20 [ 153.873443][ C1] ? __rwlock_init+0x140/0x140 [ 153.878474][ C1] lock_acquire+0x19e/0x400 [ 153.883002][ C1] ? x25_kill_by_neigh+0x109/0x250 [ 153.889195][ C1] ? lock_chain_count+0x20/0x20 [ 153.894878][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 153.901177][ C1] ? read_lock_is_recursive+0x10/0x10 [ 153.906697][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 153.912853][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 153.919011][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 153.925016][ C1] ? _local_bh_enable+0xa0/0xa0 [ 153.931281][ C1] lock_sock_nested+0x44/0x100 [ 153.936463][ C1] ? x25_kill_by_neigh+0x109/0x250 [ 153.941788][ C1] x25_kill_by_neigh+0x109/0x250 [ 153.947021][ C1] x25_lapb_receive_frame+0x19d/0xf20 [ 153.952419][ C1] ? x25_device_event+0x250/0x250 [ 153.958188][ C1] netif_receive_skb_core+0x149/0x210 [ 153.964536][ C1] lapbeth_napi_poll+0x3e/0x80 [ 153.969677][ C1] __napi_poll+0xbb/0x430 [ 153.974112][ C1] net_rx_action+0x522/0xa80 [ 153.978732][ C1] ? net_tx_action+0x880/0x880 [ 153.983720][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 153.991032][ C1] ? lock_chain_count+0x20/0x20 [ 153.996372][ C1] handle_softirqs+0x336/0x830 [ 154.001476][ C1] ? run_ksoftirqd+0xa4/0x100 [ 154.006296][ C1] ? do_softirq+0x210/0x210 [ 154.011144][ C1] ? run_ksoftirqd+0x81/0x100 [ 154.016008][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 154.021392][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 154.027215][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 154.032566][ C1] run_ksoftirqd+0xa4/0x100 [ 154.037895][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 154.043097][ C1] smpboot_thread_fn+0x520/0x990 [ 154.048343][ C1] kthread+0x42e/0x520 [ 154.052498][ C1] ? cpu_report_death+0x180/0x180 [ 154.057528][ C1] ? kthread_blkcg+0xd0/0xd0 [ 154.062376][ C1] ret_from_fork+0x1f/0x30 [ 154.066794][ C1] [ 154.069915][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3260 [ 154.078934][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 20, name: ksoftirqd/1 [ 154.088223][ C1] INFO: lockdep is turned off. [ 154.093414][ C1] Preemption disabled at: [ 154.093426][ C1] [] handle_softirqs+0xfd/0x830 [ 154.104946][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 154.112804][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 154.123857][ C1] Call Trace: [ 154.127481][ C1] [ 154.130710][ C1] dump_stack_lvl+0x188/0x250 [ 154.135590][ C1] ? trace_hardirqs_off_finish+0xca/0x1f0 [ 154.141430][ C1] ? show_regs_print_info+0x20/0x20 [ 154.146853][ C1] ? load_image+0x410/0x410 [ 154.151486][ C1] ___might_sleep+0x493/0x610 [ 154.156199][ C1] ? handle_softirqs+0xfd/0x830 [ 154.161278][ C1] ? __might_sleep+0xf0/0xf0 [ 154.165897][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 154.171213][ C1] ? read_lock_is_recursive+0x10/0x10 [ 154.176702][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 154.182224][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 154.187899][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 154.189482][ T5617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.341'. [ 154.193785][ C1] ? _local_bh_enable+0xa0/0xa0 [ 154.193815][ C1] lock_sock_nested+0x5b/0x100 [ 154.193836][ C1] x25_kill_by_neigh+0x109/0x250 [ 154.219798][ C1] x25_lapb_receive_frame+0x19d/0xf20 [ 154.226227][ C1] ? x25_device_event+0x250/0x250 [ 154.231672][ C1] netif_receive_skb_core+0x149/0x210 [ 154.237463][ C1] lapbeth_napi_poll+0x3e/0x80 [ 154.242278][ C1] __napi_poll+0xbb/0x430 [ 154.247004][ C1] net_rx_action+0x522/0xa80 [ 154.252102][ C1] ? net_tx_action+0x880/0x880 [ 154.257185][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 154.263293][ C1] ? lock_chain_count+0x20/0x20 [ 154.268357][ C1] handle_softirqs+0x336/0x830 [ 154.273285][ C1] ? run_ksoftirqd+0xa4/0x100 [ 154.278462][ C1] ? do_softirq+0x210/0x210 [ 154.283505][ C1] ? run_ksoftirqd+0x81/0x100 [ 154.289102][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 154.295054][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 154.300468][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 154.305700][ C1] run_ksoftirqd+0xa4/0x100 [ 154.310573][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 154.315819][ C1] smpboot_thread_fn+0x520/0x990 [ 154.320900][ C1] kthread+0x42e/0x520 [ 154.325111][ C1] ? cpu_report_death+0x180/0x180 [ 154.330694][ C1] ? kthread_blkcg+0xd0/0xd0 [ 154.335322][ C1] ret_from_fork+0x1f/0x30 [ 154.339879][ C1] [ 154.651895][ T5660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.346'. [ 154.750384][ T5660] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.761263][ T5660] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.779975][ T5660] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 154.793143][ T5660] caif:caif_disconnect_client(): nothing to disconnect [ 154.802106][ T5660] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 154.815876][ T5660] chnl_net:chnl_net_open(): state disconnected [ 154.826120][ T5660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.