last executing test programs: 18.597795451s ago: executing program 2 (id=43): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x13) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x20, 0x2}}}}}}, 0x0) 17.978615257s ago: executing program 1 (id=46): r0 = gettid() ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x82002, 0x105) setns(0xc9, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000300)='net/packet\x00') preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000040)=""/209, 0xd1}], 0x1, 0x1, 0x2) 17.87372181s ago: executing program 1 (id=47): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x1, 0x10, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 17.577829267s ago: executing program 2 (id=50): syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x10, 0xfffffffc, 0x0, 0x0, "810000cc2b000000000000facc1fff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0x7fffffff, 0xd, 0x0, 0x2, 0xfd, "d5a94ff95059ebff0000000000400000008000", 0x5a, 0x78d1}) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) 17.311018024s ago: executing program 1 (id=53): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000080)='%y', 0x2}], 0x2}, 0x4004) readv(r0, &(0x7f0000000980)=[{&(0x7f0000000240)=""/95, 0x5f}], 0x1) 17.089213059s ago: executing program 2 (id=57): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/netfilter/nfnetlink_log\x00', 0x0, 0x0) read(r1, &(0x7f0000000700), 0x1000) 16.999339521s ago: executing program 1 (id=58): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newtfilter={0x64, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0xffff, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002}, {0x1004}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}]}}]}]}]}}]}, 0x64}}, 0x0) 16.832267905s ago: executing program 2 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x103496, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) unshare(0x22020400) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 16.749760848s ago: executing program 1 (id=62): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r0, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) 16.494786934s ago: executing program 2 (id=65): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)={@ifindex, r1, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) 16.072048195s ago: executing program 1 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001080)='./proc\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0) r0 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/fail_make_request/probability\x00', 0x1, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/misc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/50, 0x32}], 0x1, 0xb, 0x3) 15.686846605s ago: executing program 2 (id=68): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 15.217443146s ago: executing program 32 (id=68): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 9.334415394s ago: executing program 4 (id=101): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000100)={&(0x7f0000000180)=[{0x202, 0x2801, 0x0, 0x0}, {0x8001, 0x0, 0x0, 0x0}], 0x2}) 7.216231388s ago: executing program 4 (id=105): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/62, 0x3e) 6.894780586s ago: executing program 4 (id=106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x25af}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0xffffff00, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x29, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0xb00}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 5.614295878s ago: executing program 4 (id=108): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x70) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3013809, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000a80)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000480)=ANY=[]) 5.245872177s ago: executing program 3 (id=110): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0xb, 0xffffffff, 0x4, 0xbfffff89, 0x6, 0x3, 0x3}, {0x1, 0x4, 0x0, 0x8, 0x0, 0x1, 0x5}, {0x0, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0x31}, {0x80000019, 0xe5f, 0x1, 0x8, 0xdf3, 0x6, 0x80000001}, {0x80000000, 0x2ab, 0x1, 0xd, 0x3, 0xff, 0x400}, {0xc0000005, 0xfe, 0x4, 0x7, 0x400003, 0x40000002, 0x9}, {0x7ffffffe, 0x2, 0x3f91c194927b8e21, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 4.902159896s ago: executing program 4 (id=111): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB=' (\a'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000340)={0x0, 0x10, 0x2, "8a0b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="2016a900"], 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 3.845633393s ago: executing program 3 (id=113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 3.373615675s ago: executing program 3 (id=114): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='10', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) 3.13669141s ago: executing program 0 (id=115): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000140)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000180)=0x4) pwritev(r0, &(0x7f0000000c80)=[{&(0x7f0000000200)="00214500002c000000003c0600000a0000010a000002005000500000000100000001601003e80008000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="00214500002c00000000400600000a0000010a00000200500050000b000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) 3.014572284s ago: executing program 3 (id=116): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 2.831812298s ago: executing program 0 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000006880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000068c0)='./sys\x00', &(0x7f0000006900)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000006940)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x82) write(r1, &(0x7f0000006bc0)='3', 0x4e) write(r0, &(0x7f0000006c00)='k', 0x1) 2.183112554s ago: executing program 0 (id=118): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) read$watch_queue(r3, &(0x7f0000000040)=""/4, 0xfffffda1) 2.013191069s ago: executing program 4 (id=119): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x4010, 0x0) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ttyUSB0\x00', 0x12df00, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_disconnect(r0) 875.298758ms ago: executing program 33 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001080)='./proc\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0) r0 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/fail_make_request/probability\x00', 0x1, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/misc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/50, 0x32}], 0x1, 0xb, 0x3) 563.118735ms ago: executing program 3 (id=121): capset(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket$nl_audit(0x10, 0x3, 0x9) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)="d74d", 0x2) 498.620237ms ago: executing program 0 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./security/apparmor/.load\x00', 0x1, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi0\x00', 0x40440, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0xeff00000) write(r0, &(0x7f0000000400)="0408", 0x2) 251.980933ms ago: executing program 3 (id=123): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) read(r0, &(0x7f0000001780)=""/4096, 0x1000) 226.993704ms ago: executing program 0 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/cpu/cpu1/firmware_node/eject\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/acpi/devices/ACPI0007:01/eject\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='1', 0x1) 0s ago: executing program 0 (id=125): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, &(0x7f00000005c0)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000640)={0x6, 0xc0, 0x43, 0x3, 0x8, 0x12, 0x3e, 0x2, 0x6f, 0xe3, 0x9, 0x0, 0x8, 0x1}, 0xe) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)="f6", 0x1}], 0x1, &(0x7f0000000e00), 0x0, 0x4048800}, 0x14) recvmmsg(r0, &(0x7f0000000700), 0x40000000000036a, 0x10122, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.90' (ED25519) to the list of known hosts. [ 79.112442][ T4260] cgroup: Unknown subsys name 'net' [ 79.241318][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.794858][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 82.792725][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.809246][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.817722][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.826141][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.834016][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.842807][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.850755][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.861311][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.890030][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.898564][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.899185][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.913104][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.921202][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.921316][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.936706][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.937445][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.951649][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.952674][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.961460][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.968206][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.975390][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.980358][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.989692][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.994657][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.007382][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.016128][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.026182][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.070381][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.089893][ T4291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.097335][ T4291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.152403][ T4274] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.166550][ T4272] rdma_rxe: rxe_register_device failed with error -23 [ 83.173552][ T4287] rdma_rxe: rxe_register_device failed with error -23 [ 83.174653][ T4272] rdma_rxe: failed to add rxe_eth0 [ 83.190169][ T4277] rdma_rxe: rxe_register_device failed with error -23 [ 83.199330][ T4280] rdma_rxe: rxe_register_device failed with error -23 [ 83.207507][ T4274] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.214021][ T4280] rdma_rxe: failed to add rxe_eth0 [ 83.219731][ T4287] rdma_rxe: failed to add rxe_eth0 [ 83.220039][ T4277] rdma_rxe: failed to add rxe_eth0 [ 83.229378][ T4274] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.460071][ T4274] infiniband rxe0: set active [ 83.466085][ T955] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.475164][ T4274] infiniband rxe0: added rxe_eth0 [ 83.556246][ T4274] RDS/IB: rxe0: added [ 83.560899][ T4274] smc: adding ib device rxe0 with port count 1 [ 83.567393][ T4274] smc: ib device rxe0 port 1 has pnetid [ 83.575431][ T955] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.609233][ T4274] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.768489][ T4274] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.783051][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 83.920605][ T4274] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.991644][ T4287] chnl_net:caif_netlink_parms(): no params data found [ 84.013926][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 84.053448][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 84.186517][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.193707][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.208130][ T4277] device bridge_slave_0 entered promiscuous mode [ 84.221032][ T4274] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.279799][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.287286][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.305615][ T4277] device bridge_slave_1 entered promiscuous mode [ 84.442373][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.484146][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.497883][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.506676][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.518973][ T4272] device bridge_slave_0 entered promiscuous mode [ 84.528219][ T4274] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.535739][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.542882][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.569633][ T4287] device bridge_slave_0 entered promiscuous mode [ 84.590431][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.599816][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.611791][ T4280] device bridge_slave_0 entered promiscuous mode [ 84.646149][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.653305][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.685181][ T4272] device bridge_slave_1 entered promiscuous mode [ 84.703466][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.725205][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.733462][ T4287] device bridge_slave_1 entered promiscuous mode [ 84.741885][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.749330][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.761636][ T4280] device bridge_slave_1 entered promiscuous mode [ 84.792559][ T4277] team0: Port device team_slave_0 added [ 84.840654][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.852847][ T4277] team0: Port device team_slave_1 added [ 84.896007][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.916371][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.931849][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.939207][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.974849][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.989515][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.002878][ T4287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.028185][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.035588][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.062079][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.068374][ T4291] Bluetooth: hci1: command 0x0409 tx timeout [ 85.083766][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 85.093470][ T4287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.125508][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 85.131802][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 85.138469][ T4290] Bluetooth: hci2: command 0x0409 tx timeout [ 85.169053][ T4280] team0: Port device team_slave_0 added [ 85.183503][ T4272] team0: Port device team_slave_0 added [ 85.221278][ T4280] team0: Port device team_slave_1 added [ 85.244860][ T4272] team0: Port device team_slave_1 added [ 85.275533][ T4287] team0: Port device team_slave_0 added [ 85.342805][ T4287] team0: Port device team_slave_1 added [ 85.379666][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.386791][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.413845][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.431372][ T4277] device hsr_slave_0 entered promiscuous mode [ 85.439409][ T4277] device hsr_slave_1 entered promiscuous mode [ 85.452723][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.460113][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.486598][ T4287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.503381][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.511564][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.542704][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.554912][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.562109][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.593287][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.613597][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.621276][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.652211][ T4287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.664137][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.676181][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.706938][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.857233][ T4287] device hsr_slave_0 entered promiscuous mode [ 85.870477][ T4287] device hsr_slave_1 entered promiscuous mode [ 85.877665][ T4287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.890388][ T4287] Cannot create hsr debugfs directory [ 85.934158][ T4280] device hsr_slave_0 entered promiscuous mode [ 85.942696][ T4280] device hsr_slave_1 entered promiscuous mode [ 85.949859][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.962109][ T4280] Cannot create hsr debugfs directory [ 85.987452][ T4272] device hsr_slave_0 entered promiscuous mode [ 85.999879][ T4272] device hsr_slave_1 entered promiscuous mode [ 86.022220][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.030524][ T4272] Cannot create hsr debugfs directory [ 86.102290][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 86.223113][ T4105] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.460549][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.476042][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.484555][ T4274] device bridge_slave_0 entered promiscuous mode [ 86.512260][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.523048][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.539388][ T4274] device bridge_slave_1 entered promiscuous mode [ 86.623770][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.643016][ T4277] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.666911][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.677482][ T4277] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.697101][ T4277] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.723830][ T4277] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.743041][ T4274] team0: Port device team_slave_0 added [ 86.768182][ T4274] team0: Port device team_slave_1 added [ 86.833191][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.840972][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.867568][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.918156][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.927218][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.953627][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.977218][ T4272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.105872][ T4272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.125105][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 87.131193][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 87.195080][ T4272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.205169][ T4284] Bluetooth: hci4: command 0x041b tx timeout [ 87.215296][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 87.215304][ T4290] Bluetooth: hci2: command 0x041b tx timeout [ 87.252076][ T4274] device hsr_slave_0 entered promiscuous mode [ 87.260183][ T4274] device hsr_slave_1 entered promiscuous mode [ 87.267486][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.275710][ T4274] Cannot create hsr debugfs directory [ 87.286236][ T4272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.323122][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.353150][ T3933] infiniband rxe0: set active [ 87.364069][ T4287] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.414645][ T4287] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.452278][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.474018][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.515459][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.554565][ T4366] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.573879][ T4287] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.616640][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.631491][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.641109][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.648569][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.664278][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.673757][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.689842][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.697026][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.711230][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.748046][ T4287] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.763841][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.845159][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.881225][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.892633][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.902356][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.912874][ T4280] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.931126][ T4280] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.967249][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.977561][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.996131][ T4280] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.036110][ T4280] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.054468][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.062361][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.073183][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.090597][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.107139][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.122102][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.131480][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.191014][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.207382][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.223351][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.239544][ T4274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.259906][ T4287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.271211][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.300039][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.316048][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.323215][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.348619][ T4274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.359981][ T4274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.381509][ T4274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.400917][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.410307][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.422127][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.431618][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.438830][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.467839][ T4287] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.504456][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.513297][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.526977][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.537303][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.546969][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.557028][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.601529][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.612937][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.622413][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.632711][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.639923][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.651989][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.661573][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.671116][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.678430][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.688095][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.697310][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.706609][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.751728][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.762411][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.786005][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.796028][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.804560][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.814913][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.829269][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.841043][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.863380][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.872012][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.882211][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.893294][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.902727][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.920734][ T4287] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.931584][ T4287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.951367][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.969830][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.979227][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.989182][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.001713][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.052454][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.066821][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.074442][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.091247][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.101867][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.119859][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.150605][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.168948][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.208221][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.217037][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 89.223093][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 89.240217][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.250151][ T4386] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.257364][ T4386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.266603][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.276018][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.284638][ T4386] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.291837][ T4386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.299971][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 89.306438][ T4291] Bluetooth: hci4: command 0x040f tx timeout [ 89.306452][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 89.317498][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.347182][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.370757][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.386189][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.394408][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.409840][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.422162][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.434105][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.448640][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.507102][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.518537][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.530592][ T4386] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.537811][ T4386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.553857][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.564767][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.580859][ T4386] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.588087][ T4386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.603106][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.614361][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.630308][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.641344][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.654566][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.668647][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.679368][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.710842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.723056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.738641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.755496][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.780777][ T4277] device veth0_vlan entered promiscuous mode [ 89.805427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.815744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.824247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.834110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.843689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.853671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.876353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.913106][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.931332][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.959239][ T4277] device veth1_vlan entered promiscuous mode [ 89.985586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.993624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.032208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.049853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.059097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.067522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.075576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.084578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.097882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.110732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.126595][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.164378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.186871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.205824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.213558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.260831][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.281492][ T4277] device veth0_macvtap entered promiscuous mode [ 90.306863][ T4277] device veth1_macvtap entered promiscuous mode [ 90.315715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.355658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.376863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.419067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.470716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.480444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.551472][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.584120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.607483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.642869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.666686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.698016][ T4272] device veth0_vlan entered promiscuous mode [ 90.707327][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.734262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.746286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.765439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.785944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.811620][ T4272] device veth1_vlan entered promiscuous mode [ 90.829443][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.856311][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.865472][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.874211][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.901803][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.921743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.937057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.951803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.962865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.023912][ T4272] device veth0_macvtap entered promiscuous mode [ 91.042109][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.052337][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.065901][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.079447][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.089789][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.103727][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.114736][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.128287][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.144500][ T4272] device veth1_macvtap entered promiscuous mode [ 91.183876][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.192714][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.201844][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.213316][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.223087][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.232268][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.241066][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.285350][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 91.291445][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 91.310804][ T4280] device veth0_vlan entered promiscuous mode [ 91.334410][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.356638][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.365581][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 91.371680][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 91.378055][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 91.390723][ T4287] device veth0_vlan entered promiscuous mode [ 91.420919][ T4280] device veth1_vlan entered promiscuous mode [ 91.431216][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.440502][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.452425][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.461907][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.473077][ T4274] device veth0_vlan entered promiscuous mode [ 91.493834][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.508843][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.520963][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.537185][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.545988][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.554129][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.563232][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.574369][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.584103][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.597164][ T4287] device veth1_vlan entered promiscuous mode [ 91.612676][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.624217][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.638501][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.657599][ T4400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.666059][ T4400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.684382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.697035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.709048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.718178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.727381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.742031][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.751277][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.773499][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.787187][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.796109][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.804844][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.816653][ T4274] device veth1_vlan entered promiscuous mode [ 91.828128][ T4280] device veth0_macvtap entered promiscuous mode [ 91.878224][ T4280] device veth1_macvtap entered promiscuous mode [ 91.900826][ T4400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.909303][ T4400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.942775][ T26] cfg80211: failed to load regulatory.db [ 91.950508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.968474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.978085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.987832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.996629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.006310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.017923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.026343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.035651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.053066][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.065750][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.075921][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.087631][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.106094][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.115942][ T4287] device veth0_macvtap entered promiscuous mode [ 92.123942][ T4274] device veth0_macvtap entered promiscuous mode [ 92.156811][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.175195][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.186501][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.196240][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.207784][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.226214][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.243025][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.255932][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.267956][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.278383][ T4287] device veth1_macvtap entered promiscuous mode [ 92.290786][ T4274] device veth1_macvtap entered promiscuous mode [ 92.302440][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.310716][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.319485][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.333137][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.355556][ T4280] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.371122][ T4280] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.380820][ T4280] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.395181][ T4280] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.427697][ T4412] FAULT_INJECTION: forcing a failure. [ 92.427697][ T4412] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 92.443076][ T4412] CPU: 0 PID: 4412 Comm: syz.3.4 Not tainted syzkaller #0 [ 92.450263][ T4412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 92.460391][ T4412] Call Trace: [ 92.463715][ T4412] [ 92.466691][ T4412] dump_stack_lvl+0x188/0x24e [ 92.471444][ T4412] ? show_regs_print_info+0x12/0x12 [ 92.476701][ T4412] ? load_image+0x410/0x410 [ 92.481262][ T4412] ? __lock_acquire+0x7ea0/0x7ea0 [ 92.486372][ T4412] ? verify_lock_unused+0x140/0x140 [ 92.491674][ T4412] should_fail_ex+0x390/0x4c0 [ 92.496422][ T4412] prepare_alloc_pages+0x1e1/0x5b0 [ 92.501610][ T4412] __alloc_pages+0x130/0x4f0 [ 92.506269][ T4412] ? zone_statistics+0x170/0x170 [ 92.511289][ T4412] pte_alloc_one+0x7b/0x310 [ 92.515854][ T4412] ? pfn_modify_allowed+0x560/0x560 [ 92.521090][ T4412] ? blk_cgroup_congested+0x1b/0x220 [ 92.526441][ T4412] ? blk_cgroup_congested+0x20d/0x220 [ 92.531845][ T4412] ? __cgroup_throttle_swaprate+0xa8/0x1a0 [ 92.537686][ T4412] do_huge_pmd_anonymous_page+0x569/0x1510 [ 92.543563][ T4412] ? count_memcg_event_mm+0x8a/0x3c0 [ 92.548875][ T4412] ? vma_thp_gfp_mask+0x160/0x160 [ 92.553933][ T4412] ? hugepage_vma_check+0x46d/0x540 [ 92.559165][ T4412] handle_mm_fault+0x11f0/0x3d40 [ 92.564137][ T4412] ? numa_migrate_prep+0x250/0x250 [ 92.569293][ T4412] __get_user_pages+0x40d/0xec0 [ 92.574192][ T4412] ? populate_vma_page_range+0x2b0/0x2b0 [ 92.579866][ T4412] populate_vma_page_range+0x214/0x2b0 [ 92.585388][ T4412] __mm_populate+0x25c/0x380 [ 92.590019][ T4412] ? check_vma_flags+0x4c0/0x4c0 [ 92.594992][ T4412] ? up_write+0x1b6/0x410 [ 92.599357][ T4412] ? do_mlock+0x194/0x640 [ 92.603715][ T4412] do_mlock+0x53a/0x640 [ 92.607910][ T4412] ? lru_gen_add_folio+0xe20/0xe20 [ 92.613075][ T4412] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 92.619090][ T4412] ? lock_chain_count+0x20/0x20 [ 92.623980][ T4412] ? syscall_enter_from_user_mode+0x21/0x80 [ 92.629909][ T4412] __x64_sys_mlock+0x5c/0x70 [ 92.634529][ T4412] do_syscall_64+0x4c/0xa0 [ 92.638971][ T4412] ? clear_bhb_loop+0x60/0xb0 [ 92.643675][ T4412] ? clear_bhb_loop+0x60/0xb0 [ 92.648485][ T4412] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.654415][ T4412] RIP: 0033:0x7f453839f559 [ 92.658854][ T4412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.678511][ T4412] RSP: 002b:00007f45391c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 92.686980][ T4412] RAX: ffffffffffffffda RBX: 00007f4538625fa0 RCX: 00007f453839f559 [ 92.694985][ T4412] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 92.702990][ T4412] RBP: 00007f4538436b20 R08: 0000000000000000 R09: 0000000000000000 [ 92.710984][ T4412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.718975][ T4412] R13: 00007f4538626038 R14: 00007f4538625fa0 R15: 00007ffee62090b8 [ 92.726986][ T4412] [ 92.753047][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.767165][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.778732][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.789450][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.802235][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.823871][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.842860][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.886558][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.896622][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.917194][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.928703][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.940705][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.953507][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.964137][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.980712][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.997045][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.017394][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.033470][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.044330][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.056905][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.066860][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.079596][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.093213][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.105044][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.117291][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.137677][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.147928][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.157894][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.167234][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.180881][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.191951][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.201764][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.212745][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.224244][ T4414] loop3: detected capacity change from 0 to 2048 [ 93.249252][ T4386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.259394][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.272984][ T4386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.285626][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.315435][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.333157][ T4414] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 93.341944][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.355106][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.390639][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.406096][ T27] audit: type=1800 audit(1792630211.493:2): pid=4414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 93.457819][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.468810][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.480515][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.514454][ T4287] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.523522][ T4287] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.533644][ T4287] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.542747][ T4287] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.558153][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.571492][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.581221][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.640569][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 93.672213][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.684564][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.731044][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.786932][ T4400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.794829][ T4400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.816447][ T4421] loop3: detected capacity change from 0 to 256 [ 93.835515][ T4421] ======================================================= [ 93.835515][ T4421] WARNING: The mand mount option has been deprecated and [ 93.835515][ T4421] and is ignored by this kernel. Remove the mand [ 93.835515][ T4421] option from the mount to silence this warning. [ 93.835515][ T4421] ======================================================= [ 93.850876][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.985084][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.993036][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.003927][ T4400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.015642][ T4400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.043947][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.069306][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.117457][ T4386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.151693][ T4386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.182756][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.203241][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.232495][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.270984][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.300967][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.338759][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.372991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.479005][ T4432] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 94.594383][ T4426] loop2: detected capacity change from 0 to 4096 [ 94.624206][ T4426] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 94.800480][ T4441] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.275044][ T4450] Illegal XDP return value 65535 on prog (id 4) dev syz_tun, expect packet loss! [ 95.647374][ T4465] user requested TSC rate below hardware speed [ 95.964385][ T4479] loop3: detected capacity change from 0 to 512 [ 96.011229][ T4479] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 96.057029][ T4479] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.127227][ T4479] EXT4-fs (loop3): 1 truncate cleaned up [ 96.132993][ T4479] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 96.177384][ T4485] netlink: 'syz.0.28': attribute type 3 has an invalid length. [ 96.282728][ T4487] EXT4-fs (loop3): shut down requested (2) [ 96.323753][ T27] audit: type=1800 audit(1792630470.402:3): pid=4479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.26" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 96.497138][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 96.933989][ T4366] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.108965][ T4496] loop0: detected capacity change from 0 to 32768 [ 97.145090][ T4366] usb 4-1: Using ep0 maxpacket: 16 [ 97.159411][ T4366] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.180687][ T4366] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.202875][ T4496] XFS (loop0): Mounting V5 Filesystem [ 97.221263][ T4366] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.236706][ T4366] usb 4-1: New USB device found, idVendor=045e, idProduct=00dc, bcdDevice= 0.00 [ 97.247632][ T4366] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.264314][ T4366] usb 4-1: config 0 descriptor?? [ 97.270379][ T4375] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.315174][ T4496] XFS (loop0): Ending clean mount [ 97.413672][ T27] audit: type=1800 audit(1792630471.492:4): pid=4496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.32" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 97.492869][ T4375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.524396][ T4375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.553206][ T4375] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.599475][ T4375] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.615021][ T4375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.653778][ T4375] usb 5-1: config 0 descriptor?? [ 97.743800][ T4522] ip_tables: iptables: counters copy to user failed while replacing table [ 97.744998][ T4366] microsoft 0003:045E:00DC.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 045e:00dc] on usb-dummy_hcd.3-1/input0 [ 97.765582][ T4366] microsoft 0003:045E:00DC.0001: no inputs found [ 97.773282][ T4366] microsoft 0003:045E:00DC.0001: could not initialize ff, continuing anyway [ 97.971387][ T4274] XFS (loop0): Unmounting Filesystem [ 98.000750][ T4527] loop1: detected capacity change from 0 to 64 [ 98.072420][ T4375] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 98.088666][ T4375] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 98.107336][ T4375] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 98.168156][ T4529] ip_tables: iptables: counters copy to user failed while replacing table [ 98.192727][ T4375] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 98.598031][ T7] usb 4-1: USB disconnect, device number 2 [ 98.703620][ T4543] loop0: detected capacity change from 0 to 512 [ 98.782167][ T4543] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 98.798461][ T4543] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.887653][ T4548] syz.1.47 uses obsolete (PF_INET,SOCK_PACKET) [ 98.895407][ T4369] usb 5-1: USB disconnect, device number 2 [ 98.976328][ T4548] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 99.031750][ T4366] rxe_eth0 speed is unknown, defaulting to 1000 [ 99.042562][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 99.562078][ T4569] netlink: 15 bytes leftover after parsing attributes in process `syz.0.55'. [ 99.584781][ T4105] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.601853][ T4569] Zero length message leads to an empty skb [ 99.804795][ T4105] usb 4-1: Using ep0 maxpacket: 32 [ 99.822433][ T4105] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 99.864798][ T4105] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 99.901445][ T4105] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 99.932491][ T4105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.954684][ T4105] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 99.984952][ T4105] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 100.003891][ T4105] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 100.058157][ T4105] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.098023][ T4105] usb 4-1: config 0 descriptor?? [ 100.176820][ T4595] FAULT_INJECTION: forcing a failure. [ 100.176820][ T4595] name failslab, interval 1, probability 0, space 0, times 1 [ 100.236400][ T4595] CPU: 0 PID: 4595 Comm: syz.0.64 Not tainted syzkaller #0 [ 100.243702][ T4595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 100.253834][ T4595] Call Trace: [ 100.257160][ T4595] [ 100.260135][ T4595] dump_stack_lvl+0x188/0x24e [ 100.264880][ T4595] ? show_regs_print_info+0x12/0x12 [ 100.270143][ T4595] ? load_image+0x410/0x410 [ 100.274695][ T4595] ? __might_sleep+0xd0/0xd0 [ 100.279333][ T4595] ? __lock_acquire+0x7ea0/0x7ea0 [ 100.284435][ T4595] should_fail_ex+0x390/0x4c0 [ 100.289184][ T4595] should_failslab+0x5/0x20 [ 100.293735][ T4595] slab_pre_alloc_hook+0x59/0x300 [ 100.298819][ T4595] ? iovec_from_user+0x83/0x360 [ 100.303736][ T4595] __kmem_cache_alloc_node+0x4f/0x270 [ 100.309175][ T4595] ? iovec_from_user+0x83/0x360 [ 100.314093][ T4595] __kmalloc+0xa3/0x240 [ 100.318327][ T4595] iovec_from_user+0x83/0x360 [ 100.323076][ T4595] __import_iovec+0x6c/0x510 [ 100.327739][ T4595] import_iovec+0x6f/0xa0 [ 100.332170][ T4595] do_pwritev+0x1fb/0x3a0 [ 100.336582][ T4595] ? do_preadv+0x390/0x390 [ 100.341082][ T4595] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 100.347133][ T4595] ? lock_chain_count+0x20/0x20 [ 100.352054][ T4595] ? lockdep_hardirqs_on+0x94/0x140 [ 100.357316][ T4595] ? __x64_sys_pwritev2+0xba/0x100 [ 100.362517][ T4595] do_syscall_64+0x4c/0xa0 [ 100.367023][ T4595] ? clear_bhb_loop+0x60/0xb0 [ 100.371766][ T4595] ? clear_bhb_loop+0x60/0xb0 [ 100.376503][ T4595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.382457][ T4595] RIP: 0033:0x7fe43939f559 [ 100.386928][ T4595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.401457][ T4105] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 100.406568][ T4595] RSP: 002b:00007fe43a272028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 100.406597][ T4595] RAX: ffffffffffffffda RBX: 00007fe439625fa0 RCX: 00007fe43939f559 [ 100.406613][ T4595] RDX: 000000000000001c RSI: 0000200000000ac0 RDI: 0000000000000003 [ 100.406626][ T4595] RBP: 00007fe439436b20 R08: 0000000000000000 R09: 0000000000000022 [ 100.406640][ T4595] R10: 0000000000000a00 R11: 0000000000000246 R12: 0000000000000000 [ 100.406653][ T4595] R13: 00007fe439626038 R14: 00007fe439625fa0 R15: 00007ffe6b536de8 [ 100.406686][ T4595] [ 100.647295][ T4369] usb 4-1: USB disconnect, device number 3 [ 100.678549][ T4369] usblp0: removed [ 101.021329][ T29] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.161242][ T29] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.334359][ T29] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.457019][ T29] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.765005][ T14] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 101.870215][ T4621] loop0: detected capacity change from 0 to 512 [ 101.971797][ T14] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 102.002600][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.049562][ T14] usb 4-1: Product: syz [ 102.069443][ T14] usb 4-1: Manufacturer: syz [ 102.101932][ T14] usb 4-1: SerialNumber: syz [ 102.545678][ T4291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.556209][ T4291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.564953][ T4291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.571790][ T14] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 102.584450][ T4291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.594040][ T4291] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 102.601710][ T4291] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.776455][ T4635] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.216489][ T29] device hsr_slave_0 left promiscuous mode [ 104.244140][ T29] device hsr_slave_1 left promiscuous mode [ 104.263573][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.291617][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.311291][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.339230][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.373201][ T29] device bridge_slave_1 left promiscuous mode [ 104.400559][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.444594][ T29] device bridge_slave_0 left promiscuous mode [ 104.451485][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.569912][ T14] usb 4-1: USB disconnect, device number 4 [ 104.591477][ T14] usblp0: removed [ 104.631074][ T29] device veth1_macvtap left promiscuous mode [ 104.643482][ T29] device veth0_macvtap left promiscuous mode [ 104.654254][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 104.736554][ T29] device veth1_vlan left promiscuous mode [ 104.742738][ T29] device veth0_vlan left promiscuous mode [ 105.489758][ T4698] input: syz0 as /devices/virtual/input/input5 [ 106.526297][ T4715] loop8: detected capacity change from 0 to 8 [ 106.546232][ T4532] Dev loop8: unable to read RDB block 8 [ 106.555677][ T4532] loop8: unable to read partition table [ 106.561552][ T4532] loop8: partition table beyond EOD, truncated [ 106.611617][ T4715] Dev loop8: unable to read RDB block 8 [ 106.667351][ T4715] loop8: unable to read partition table [ 106.673240][ T4715] loop8: partition table beyond EOD, truncated [ 106.684008][ T4715] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 106.723954][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 106.831054][ T4707] loop0: detected capacity change from 0 to 32768 [ 106.984235][ T4707] XFS (loop0): Mounting V5 Filesystem [ 107.092128][ T29] team0 (unregistering): Port device team_slave_1 removed [ 107.115850][ T4707] XFS (loop0): Ending clean mount [ 107.130831][ T4707] XFS (loop0): Quotacheck needed: Please wait. [ 107.250214][ T4707] XFS (loop0): Quotacheck: Done. [ 107.345271][ T29] team0 (unregistering): Port device team_slave_0 removed [ 107.418640][ T27] audit: type=1804 audit(1792630481.504:5): pid=4707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.95" name="/newroot/23/file7/file1" dev="loop0" ino=9286 res=1 errno=0 [ 107.466182][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.499601][ T4274] XFS (loop0): Unmounting Filesystem [ 107.568051][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.664318][ T14] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.844700][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 107.857389][ T14] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 107.875521][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.893655][ T14] usb 5-1: Product: syz [ 107.897962][ T14] usb 5-1: Manufacturer: syz [ 107.902593][ T14] usb 5-1: SerialNumber: syz [ 107.925757][ T14] usb 5-1: config 0 descriptor?? [ 107.948518][ T14] usb 5-1: selecting invalid altsetting 1 [ 107.955107][ T14] technisat-usb2: could not set alternate setting to 0 [ 108.144346][ T14] technisat-usb2: firmware version: 0.0 [ 108.149957][ T14] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 108.324796][ T29] bond0 (unregistering): Released all slaves [ 108.333989][ T4375] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.461485][ T4635] chnl_net:caif_netlink_parms(): no params data found [ 108.543639][ T4375] usb 1-1: Using ep0 maxpacket: 8 [ 108.564437][ T14] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.575422][ T4375] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 108.593338][ T4375] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 108.608414][ T14] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 108.632027][ T4375] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.665010][ T14] usb 5-1: media controller created [ 108.677076][ T4375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 108.686340][ T14] technisat-usb2: i2c-error: out failed 53 = -22 [ 108.695562][ T14] dvb-usb: MAC address reading failed. [ 108.713883][ T4375] usb 1-1: SerialNumber: syz [ 108.736613][ T4738] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 108.751140][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.758562][ T4736] technisat-usb2: i2c-error: out failed 02 = -22 [ 108.798681][ T4635] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.806145][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 108.844655][ T4635] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.871875][ T4635] device bridge_slave_0 entered promiscuous mode [ 108.923365][ T4635] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.966077][ T4738] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 108.973633][ T4635] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.997331][ T4635] device bridge_slave_1 entered promiscuous mode [ 109.078014][ T14] DVB: Unable to find symbol stv090x_attach() [ 109.094526][ T14] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 109.119334][ T4635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.134296][ T4635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.241029][ T4635] team0: Port device team_slave_0 added [ 109.300761][ T4635] team0: Port device team_slave_1 added [ 109.432446][ T4635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.439775][ T14] rc_core: IR keymap rc-technisat-usb2 not found [ 109.456872][ T14] Registered IR keymap rc-empty [ 109.461944][ T4375] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 109.482003][ T4635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.521251][ T14] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 109.580581][ T14] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input6 [ 109.599629][ T4635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.652496][ T14] dvb-usb: schedule remote query interval to 100 msecs. [ 109.668120][ T4635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.679993][ T4635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.713854][ T14] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 109.768556][ T14] usb 5-1: USB disconnect, device number 3 [ 109.781365][ T4635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.794405][ T4375] dvb-usb: error -19 while querying for an remote control event. [ 110.074227][ T4369] usb 1-1: USB disconnect, device number 2 [ 110.179587][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 110.206788][ T4369] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 110.289492][ T4635] device hsr_slave_0 entered promiscuous mode [ 110.304198][ T14] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 110.337216][ T4635] device hsr_slave_1 entered promiscuous mode [ 110.369550][ T4635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.387477][ T4635] Cannot create hsr debugfs directory [ 110.584665][ T4748] loop3: detected capacity change from 0 to 32768 [ 110.669362][ T4758] device syzkaller1 entered promiscuous mode [ 110.688901][ T4748] XFS (loop3): Mounting V5 Filesystem [ 110.845669][ T4748] XFS (loop3): Ending clean mount [ 110.883554][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 111.209819][ T4748] syz.3.104 (4748) used greatest stack depth: 20656 bytes left [ 111.271743][ T4635] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.316621][ T4784] FAULT_INJECTION: forcing a failure. [ 111.316621][ T4784] name failslab, interval 1, probability 0, space 0, times 0 [ 111.334262][ T4635] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.360064][ T4635] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.367060][ T4784] CPU: 1 PID: 4784 Comm: syz.0.109 Not tainted syzkaller #0 [ 111.374404][ T4784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 111.384501][ T4784] Call Trace: [ 111.387819][ T4784] [ 111.390792][ T4784] dump_stack_lvl+0x188/0x24e [ 111.395531][ T4784] ? show_regs_print_info+0x12/0x12 [ 111.400783][ T4784] ? load_image+0x410/0x410 [ 111.405342][ T4784] ? __might_sleep+0xd0/0xd0 [ 111.409983][ T4784] ? __lock_acquire+0x7ea0/0x7ea0 [ 111.415069][ T4784] should_fail_ex+0x390/0x4c0 [ 111.419838][ T4784] should_failslab+0x5/0x20 [ 111.424391][ T4784] slab_pre_alloc_hook+0x59/0x300 [ 111.429477][ T4784] ? __rdma_create_id+0x65/0x620 [ 111.434451][ T4784] __kmem_cache_alloc_node+0x4f/0x270 [ 111.439853][ T4784] ? __rdma_create_id+0x65/0x620 [ 111.444824][ T4784] kmalloc_trace+0x26/0xe0 [ 111.449258][ T4784] ? ucma_alloc_ctx+0x2d0/0x2d0 [ 111.454135][ T4784] ? ucma_alloc_ctx+0x2d0/0x2d0 [ 111.459013][ T4784] __rdma_create_id+0x65/0x620 [ 111.463807][ T4784] ? do_raw_spin_unlock+0x11d/0x230 [ 111.469027][ T4784] ? ucma_alloc_ctx+0x2d0/0x2d0 [ 111.473912][ T4784] rdma_create_user_id+0x7d/0xc0 [ 111.478903][ T4784] ucma_create_id+0x227/0x370 [ 111.483637][ T4784] ? __lock_acquire+0x7ea0/0x7ea0 [ 111.488703][ T4784] ? ucma_close+0x170/0x170 [ 111.493241][ T4784] ? __might_fault+0xa6/0x120 [ 111.497948][ T4784] ? __might_fault+0xc2/0x120 [ 111.502651][ T4784] ? __might_fault+0xa6/0x120 [ 111.507351][ T4784] ucma_write+0x24e/0x2f0 [ 111.511707][ T4784] ? ucma_get_global_nl_info+0x70/0x70 [ 111.517191][ T4784] ? common_file_perm+0x171/0x1c0 [ 111.522250][ T4784] ? fsnotify_perm+0x5a/0x550 [ 111.526953][ T4784] ? security_file_permission+0x75/0xa0 [ 111.532528][ T4784] ? ucma_get_global_nl_info+0x70/0x70 [ 111.538011][ T4784] vfs_write+0x2dc/0x9a0 [ 111.542412][ T4784] ? file_end_write+0x250/0x250 [ 111.547369][ T4784] ? __fget_files+0x28/0x460 [ 111.552001][ T4784] ? __fget_files+0x3fc/0x460 [ 111.556779][ T4784] ? __fdget_pos+0x1d4/0x360 [ 111.561419][ T4784] ? ksys_write+0x70/0x260 [ 111.565968][ T4784] ksys_write+0x14d/0x260 [ 111.570334][ T4784] ? __ia32_sys_read+0x80/0x80 [ 111.575136][ T4784] ? lockdep_hardirqs_on+0x94/0x140 [ 111.580370][ T4784] do_syscall_64+0x4c/0xa0 [ 111.584813][ T4784] ? clear_bhb_loop+0x60/0xb0 [ 111.589514][ T4784] ? clear_bhb_loop+0x60/0xb0 [ 111.594217][ T4784] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.600155][ T4784] RIP: 0033:0x7fe43939f559 [ 111.604605][ T4784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.624246][ T4784] RSP: 002b:00007fe43a272028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.632695][ T4784] RAX: ffffffffffffffda RBX: 00007fe439625fa0 RCX: 00007fe43939f559 [ 111.640777][ T4784] RDX: 0000000000000020 RSI: 0000200000000880 RDI: 0000000000000003 [ 111.648777][ T4784] RBP: 00007fe439436b20 R08: 0000000000000000 R09: 0000000000000000 [ 111.656778][ T4784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.664770][ T4784] R13: 00007fe439626038 R14: 00007fe439625fa0 R15: 00007ffe6b536de8 [ 111.672779][ T4784] [ 111.720040][ T4277] XFS (loop3): Unmounting Filesystem [ 111.735463][ T4635] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.023496][ T4635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.066881][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.075515][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.098101][ T4635] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.119251][ T4105] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 112.131092][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.166670][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.199202][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.206641][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.235243][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.268722][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.303430][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.322995][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.330200][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.333234][ T4105] usb 5-1: Using ep0 maxpacket: 16 [ 112.369282][ T4105] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 112.385403][ T4105] usb 5-1: config 0 has no interface number 0 [ 112.391583][ T4105] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 112.393948][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.427946][ T4105] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 112.448849][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.469181][ T4105] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 112.484595][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.492228][ T4105] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.515913][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.515928][ T4105] usb 5-1: Product: syz [ 112.547559][ T4105] usb 5-1: Manufacturer: syz [ 112.559514][ T4105] usb 5-1: SerialNumber: syz [ 112.567503][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.587618][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.597729][ T4105] usb 5-1: config 0 descriptor?? [ 112.603742][ T4787] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 112.625702][ T4787] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 112.641673][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.678154][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.721150][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.759016][ T4635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.803490][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.838497][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.854500][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.877180][ T4787] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 112.939993][ T4787] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 113.205499][ T4105] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 113.901218][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.931692][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.957905][ T4635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.010133][ T4105] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 114.042507][ T4105] asix: probe of 5-1:0.34 failed with error -71 [ 114.074542][ T4105] usb 5-1: USB disconnect, device number 4 [ 114.996748][ T4105] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 115.027992][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.068692][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.120358][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.151134][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.184611][ T4105] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 115.195660][ T4635] device veth0_vlan entered promiscuous mode [ 115.213075][ T4105] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 115.218016][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.238535][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.244521][ T4105] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 115.275467][ T4635] device veth1_vlan entered promiscuous mode [ 115.287975][ T4105] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 115.333608][ T4105] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.343060][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.352108][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.368772][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.379012][ T4837] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 115.395916][ T4837] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 115.418945][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.427860][ T4105] pl2303 5-1:1.0: pl2303 converter detected [ 115.434464][ T4635] device veth0_macvtap entered promiscuous mode [ 115.452086][ T4635] device veth1_macvtap entered promiscuous mode [ 115.456340][ T4105] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 115.524211][ T4635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.542802][ T4635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.572709][ T4635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.613815][ T4635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.632745][ T4635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.668258][ T4635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.714671][ T4635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.758234][ T4635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.803121][ T4837] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 115.823324][ T4837] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 115.832706][ T4635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.841658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.844906][ T4291] Bluetooth: hci5: command 0x1003 tx timeout [ 115.855637][ T4284] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 115.873107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.898757][ T4837] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 115.946249][ T4380] usb 5-1: USB disconnect, device number 5 [ 115.965111][ T4837] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -19 [ 115.973691][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.022797][ T4837] pl2303 ttyUSB0: failed to submit interrupt urb: -19 [ 116.031988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.037318][ T4380] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 116.096837][ T4380] pl2303 5-1:1.0: device disconnected [ 116.108827][ T4635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.142677][ T4635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.185239][ T4635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.217287][ T4635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.251033][ T4635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.294499][ T4635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.334940][ T4635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.379997][ T4635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.412151][ T4635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.442408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.463494][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.512995][ T4635] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.528952][ T4635] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.573150][ T4635] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.591804][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 116.592791][ T4635] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.612767][ T4278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 116.629137][ T4278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 116.658284][ T4278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 116.667703][ T4278] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 116.675291][ T4278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 116.752453][ T14] smpboot: CPU 1 is now offline [ 116.829977][ T29] [ 116.832349][ T29] ====================================================== [ 116.839406][ T29] WARNING: possible circular locking dependency detected [ 116.846436][ T29] syzkaller #0 Not tainted [ 116.850866][ T29] ------------------------------------------------------ [ 116.857880][ T29] kworker/u4:2/29 is trying to acquire lock: [ 116.863851][ T29] ffff88801da49578 (kn->active#5){++++}-{0:0}, at: __kernfs_remove+0x3f4/0x6c0 [ 116.872830][ T29] [ 116.872830][ T29] but task is already holding lock: [ 116.880203][ T29] ffffffff8d7ca1b0 (cpu_hotplug_lock){++++}-{0:0}, at: acpi_processor_remove+0x1cb/0x360 [ 116.890043][ T29] [ 116.890043][ T29] which lock already depends on the new lock. [ 116.890043][ T29] [ 116.900479][ T29] [ 116.900479][ T29] the existing dependency chain (in reverse order) is: [ 116.909498][ T29] [ 116.909498][ T29] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 116.917229][ T29] percpu_down_write+0x50/0x2f0 [ 116.922610][ T29] _cpu_up+0x78/0x8f0 [ 116.927135][ T29] cpu_up+0x1ea/0x270 [ 116.931638][ T29] bringup_nonboot_cpus+0x11f/0x1c0 [ 116.937368][ T29] smp_init+0x3a/0x142 [ 116.941961][ T29] kernel_init_freeable+0x3bc/0x5ab [ 116.947680][ T29] kernel_init+0x19/0x1b0 [ 116.952528][ T29] ret_from_fork+0x1f/0x30 [ 116.957472][ T29] [ 116.957472][ T29] -> #2 (cpu_add_remove_lock){+.+.}-{3:3}: [ 116.965479][ T29] __mutex_lock+0x12d/0xae0 [ 116.970511][ T29] cpu_down+0x75/0x1d0 [ 116.975104][ T29] device_offline+0x259/0x3a0 [ 116.980327][ T29] acpi_bus_offline+0x23e/0x400 [ 116.985751][ T29] acpi_device_hotplug+0x562/0xc90 [ 116.991415][ T29] acpi_hotplug_work_fn+0x51/0x80 [ 116.996980][ T29] process_one_work+0x8ab/0x1160 [ 117.002449][ T29] worker_thread+0xaf5/0x12a0 [ 117.007651][ T29] kthread+0x29d/0x330 [ 117.012237][ T29] ret_from_fork+0x1f/0x30 [ 117.017196][ T29] [ 117.017196][ T29] -> #1 (&device->physical_node_lock){+.+.}-{3:3}: [ 117.025884][ T29] __mutex_lock+0x12d/0xae0 [ 117.030918][ T29] acpi_companion_match+0x86/0x110 [ 117.036550][ T29] acpi_device_uevent_modalias+0x16/0x30 [ 117.042703][ T29] platform_uevent+0x38/0xb0 [ 117.047832][ T29] dev_uevent+0x3a5/0x740 [ 117.052702][ T29] kobject_uevent_env+0x45b/0x890 [ 117.058266][ T29] kobject_synth_uevent+0x457/0x940 [ 117.063997][ T29] uevent_store+0x22/0x60 [ 117.068867][ T29] kernfs_fop_write_iter+0x3a0/0x520 [ 117.074704][ T29] vfs_write+0x482/0x9a0 [ 117.079473][ T29] ksys_write+0x14d/0x260 [ 117.084332][ T29] do_syscall_64+0x4c/0xa0 [ 117.089298][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.095715][ T29] [ 117.095715][ T29] -> #0 (kn->active#5){++++}-{0:0}: [ 117.103103][ T29] __lock_acquire+0x3a03/0x7ea0 [ 117.108484][ T29] lock_acquire+0x1bc/0x4a0 [ 117.113518][ T29] kernfs_drain+0x31a/0x6d0 [ 117.118542][ T29] __kernfs_remove+0x3f4/0x6c0 [ 117.123829][ T29] kernfs_remove_by_name_ns+0xd8/0x150 [ 117.129810][ T29] device_del+0x62f/0xa80 [ 117.134686][ T29] device_unregister+0x1c/0xc0 [ 117.139987][ T29] unregister_cpu+0x4d/0xf0 [ 117.145019][ T29] acpi_processor_remove+0x1e0/0x360 [ 117.150834][ T29] acpi_device_hotplug+0x8df/0xc90 [ 117.156468][ T29] acpi_hotplug_work_fn+0x51/0x80 [ 117.162018][ T29] process_one_work+0x8ab/0x1160 [ 117.167505][ T29] worker_thread+0xaf5/0x12a0 [ 117.172766][ T29] kthread+0x29d/0x330 [ 117.177369][ T29] ret_from_fork+0x1f/0x30 [ 117.182338][ T29] [ 117.182338][ T29] other info that might help us debug this: [ 117.182338][ T29] [ 117.192565][ T29] Chain exists of: [ 117.192565][ T29] kn->active#5 --> cpu_add_remove_lock --> cpu_hotplug_lock [ 117.192565][ T29] [ 117.205782][ T29] Possible unsafe locking scenario: [ 117.205782][ T29] [ 117.213231][ T29] CPU0 CPU1 [ 117.218595][ T29] ---- ---- [ 117.223957][ T29] lock(cpu_hotplug_lock); [ 117.228462][ T29] lock(cpu_add_remove_lock); [ 117.235747][ T29] lock(cpu_hotplug_lock); [ 117.242765][ T29] lock(kn->active#5); [ 117.246927][ T29] [ 117.246927][ T29] *** DEADLOCK *** [ 117.246927][ T29] [ 117.255066][ T29] 6 locks held by kworker/u4:2/29: [ 117.260171][ T29] #0: ffff88801ba98138 ((wq_completion)kacpi_hotplug){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 117.271142][ T29] #1: ffffc90000a5fd00 ((work_completion)(&hpw->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 117.282195][ T29] #2: ffffffff8e1cfb08 (device_hotplug_lock){+.+.}-{3:3}, at: acpi_device_hotplug+0x85/0xc90 [ 117.292466][ T29] #3: ffffffff8e027748 (acpi_scan_lock){+.+.}-{3:3}, at: acpi_device_hotplug+0x93/0xc90 [ 117.302300][ T29] #4: ffffffff8d7ca088 (cpu_add_remove_lock){+.+.}-{3:3}, at: acpi_processor_remove+0x1c6/0x360 [ 117.312849][ T29] #5: ffffffff8d7ca1b0 (cpu_hotplug_lock){++++}-{0:0}, at: acpi_processor_remove+0x1cb/0x360 [ 117.323119][ T29] [ 117.323119][ T29] stack backtrace: [ 117.329004][ T29] CPU: 0 PID: 29 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 117.336371][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 117.346430][ T29] Workqueue: kacpi_hotplug acpi_hotplug_work_fn [ 117.352681][ T29] Call Trace: [ 117.355961][ T29] [ 117.358892][ T29] dump_stack_lvl+0x188/0x24e [ 117.363575][ T29] ? load_image+0x410/0x410 [ 117.368088][ T29] ? show_regs_print_info+0x12/0x12 [ 117.373307][ T29] ? print_circular_bug+0x12b/0x1a0 [ 117.378516][ T29] check_noncircular+0x2f8/0x400 [ 117.383460][ T29] ? print_deadlock_bug+0x5d0/0x5d0 [ 117.388664][ T29] ? lockdep_lock+0xf1/0x1f0 [ 117.393258][ T29] ? _find_first_zero_bit+0xd2/0x100 [ 117.398548][ T29] __lock_acquire+0x3a03/0x7ea0 [ 117.403408][ T29] ? __lock_acquire+0x7ea0/0x7ea0 [ 117.408466][ T29] ? mark_lock+0x94/0x320 [ 117.412798][ T29] ? verify_lock_unused+0x140/0x140 [ 117.418000][ T29] ? __lock_acquire+0x142d/0x7ea0 [ 117.423050][ T29] ? __stack_depot_save+0x439/0x480 [ 117.428253][ T29] ? kasan_set_track+0x4b/0x70 [ 117.433024][ T29] ? kernfs_put+0x311/0x480 [ 117.437552][ T29] lock_acquire+0x1bc/0x4a0 [ 117.442061][ T29] ? __kernfs_remove+0x3f4/0x6c0 [ 117.447005][ T29] ? read_lock_is_recursive+0x10/0x10 [ 117.452396][ T29] ? mark_lock+0x94/0x320 [ 117.456742][ T29] ? up_write+0x1b6/0x410 [ 117.461072][ T29] kernfs_drain+0x31a/0x6d0 [ 117.465577][ T29] ? __kernfs_remove+0x3f4/0x6c0 [ 117.470517][ T29] ? kernfs_show+0x370/0x370 [ 117.475115][ T29] __kernfs_remove+0x3f4/0x6c0 [ 117.479893][ T29] kernfs_remove_by_name_ns+0xd8/0x150 [ 117.485355][ T29] device_del+0x62f/0xa80 [ 117.489710][ T29] ? kill_device+0x160/0x160 [ 117.494307][ T29] ? kernfs_remove_by_name_ns+0x113/0x150 [ 117.500032][ T29] device_unregister+0x1c/0xc0 [ 117.504797][ T29] unregister_cpu+0x4d/0xf0 [ 117.509319][ T29] acpi_processor_remove+0x1e0/0x360 [ 117.514617][ T29] ? acpi_processor_add+0x1aa0/0x1aa0 [ 117.519998][ T29] acpi_device_hotplug+0x8df/0xc90 [ 117.525113][ T29] ? acpi_scan_is_offline+0x280/0x280 [ 117.530488][ T29] ? radix_tree_lookup+0x235/0x280 [ 117.535602][ T29] ? synchronize_hardirq+0x19e/0x1e0 [ 117.540886][ T29] ? process_one_work+0x7b4/0x1160 [ 117.545993][ T29] ? process_one_work+0x7b4/0x1160 [ 117.551119][ T29] acpi_hotplug_work_fn+0x51/0x80 [ 117.556151][ T29] process_one_work+0x8ab/0x1160 [ 117.561094][ T29] ? worker_detach_from_pool+0x240/0x240 [ 117.566728][ T29] ? _raw_spin_lock_irq+0xb7/0xf0 [ 117.571746][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 117.577290][ T29] ? wq_worker_running+0x97/0x190 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 117.582313][ T29] worker_thread+0xaf5/0x12a0 [ 117.586993][ T29] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 117.592886][ T29] kthread+0x29d/0x330 [ 117.596952][ T29] ? worker_clr_flags+0x1a0/0x1a0 [ 117.601976][ T29] ? kthread_blkcg+0xd0/0xd0 [ 117.606561][ T29] ret_from_fork+0x1f/0x30 [ 117.610985][ T29] [ 118.493437][ T29] ACPI: \_SB_.C001: Eject incomplete - status 0xf [ 118.610128][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.684740][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.728776][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.786852][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.853295][ T29] ACPI: \_SB_.C001: Eject incomplete - status 0xf [ 119.317882][ T57] device hsr_slave_0 left promiscuous mode [ 119.333907][ T57] device hsr_slave_1 left promiscuous mode [ 119.346784][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.375371][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.383814][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.391221][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.417145][ T57] device bridge_slave_1 left promiscuous mode [ 119.429190][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.450446][ T57] device bridge_slave_0 left promiscuous mode [ 119.473784][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.488503][ T57] device veth1_macvtap left promiscuous mode [ 119.502532][ T57] device veth0_macvtap left promiscuous mode [ 119.513573][ T57] device veth1_vlan left promiscuous mode [ 119.519383][ T57] device veth0_vlan left promiscuous mode [ 119.802819][ T57] team0 (unregistering): Port device team_slave_1 removed [ 119.862955][ T57] team0 (unregistering): Port device team_slave_0 removed [ 119.925566][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.946546][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.011684][ T57] bond0 (unregistering): Released all slaves [ 120.328649][ T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.385524][ T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.436269][ T57] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.485464][ T57] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.598884][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.645924][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.697685][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.745161][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.860285][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.917112][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.966540][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.017337][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.123247][ T57] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.176330][ T57] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.225218][ T57] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.276949][ T57] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.434587][ T57] device hsr_slave_0 left promiscuous mode [ 122.440842][ T57] device hsr_slave_1 left promiscuous mode [ 122.454832][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.462540][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.470111][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.479144][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.487243][ T57] device bridge_slave_1 left promiscuous mode [ 122.494599][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.502852][ T57] device bridge_slave_0 left promiscuous mode [ 122.509046][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.520186][ T57] device hsr_slave_0 left promiscuous mode [ 122.526944][ T57] device hsr_slave_1 left promiscuous mode [ 122.534500][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.542317][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.549852][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.558591][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.566782][ T57] device bridge_slave_1 left promiscuous mode [ 122.574129][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.582519][ T57] device bridge_slave_0 left promiscuous mode [ 122.588690][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.600027][ T57] device hsr_slave_0 left promiscuous mode [ 122.606421][ T57] device hsr_slave_1 left promiscuous mode [ 122.613897][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.621307][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.629148][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.637717][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.646482][ T57] device bridge_slave_1 left promiscuous mode [ 122.653815][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.661764][ T57] device bridge_slave_0 left promiscuous mode [ 122.668458][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.680428][ T57] device hsr_slave_0 left promiscuous mode [ 122.686781][ T57] device hsr_slave_1 left promiscuous mode [ 122.694211][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.701639][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.709774][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.720536][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.728341][ T57] device bridge_slave_1 left promiscuous mode [ 122.735785][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.743932][ T57] device bridge_slave_0 left promiscuous mode [ 122.750122][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.763961][ T57] device veth1_macvtap left promiscuous mode [ 122.769993][ T57] device veth0_macvtap left promiscuous mode [ 122.777346][ T57] device veth1_vlan left promiscuous mode [ 122.783645][ T57] device veth0_vlan left promiscuous mode [ 122.789935][ T57] device veth1_macvtap left promiscuous mode [ 122.797160][ T57] device veth0_macvtap left promiscuous mode [ 122.803450][ T57] device veth1_vlan left promiscuous mode [ 122.809257][ T57] device veth0_vlan left promiscuous mode [ 122.817372][ T57] device veth1_macvtap left promiscuous mode [ 122.823511][ T57] device veth0_macvtap left promiscuous mode [ 122.829653][ T57] device veth1_vlan left promiscuous mode [ 122.836764][ T57] device veth0_vlan left promiscuous mode [ 122.843578][ T57] device veth1_macvtap left promiscuous mode [ 122.849631][ T57] device veth0_macvtap left promiscuous mode [ 122.856943][ T57] device veth1_vlan left promiscuous mode [ 122.862918][ T57] device veth0_vlan left promiscuous mode [ 123.180797][ T57] team0 (unregistering): Port device team_slave_1 removed [ 123.204281][ T57] team0 (unregistering): Port device team_slave_0 removed [ 123.227666][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.253527][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.300532][ T57] bond0 (unregistering): Released all slaves [ 123.403221][ T57] team0 (unregistering): Port device team_slave_1 removed [ 123.415388][ T57] team0 (unregistering): Port device team_slave_0 removed [ 123.438972][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.467009][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.520251][ T57] bond0 (unregistering): Released all slaves [ 123.627714][ T57] team0 (unregistering): Port device team_slave_1 removed [ 123.651384][ T57] team0 (unregistering): Port device team_slave_0 removed [ 123.677618][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.702496][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.750407][ T57] bond0 (unregistering): Released all slaves [ 123.828654][ T57] team0 (unregistering): Port device team_slave_1 removed [ 123.854004][ T57] team0 (unregistering): Port device team_slave_0 removed [ 123.879197][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.904802][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.957716][ T57] bond0 (unregistering): Released all slaves