last executing test programs: 4.85883417s ago: executing program 3 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) 4.310343883s ago: executing program 1 (id=2): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000700)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @loopback}, {0xa, 0x4e20, 0x0, @loopback}, r2, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000003c0)={0xc, 0x8, 0xfa00, {&(0x7f0000001300)}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x120) 4.03969781s ago: executing program 4 (id=5): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='Y\x00', 0x1) r2 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='1\x00', 0x1) syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) 4.01905322s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000f40)={[{0xc, 0x4e00, "155038aad51c1e2bedcda6bd"}]}) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/pm_test\x00', 0x1, 0x0) 3.936877282s ago: executing program 3 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='offline\n', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='offline\n', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='3\n', 0x2) 3.936153072s ago: executing program 4 (id=9): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x4fc, 0x5d8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0xdb, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xd8f, 0x3, 0x1, {0x22, 0x70}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00227000000005010501050105010501050105010501050105010501050105010501050105010501050105010501050105010501050105010501050105010501050105010501050105010501050105010501050105010501050105010501050105010501050105010501050105012680030501260000"], 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 3.22088063s ago: executing program 1 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000100)={'dummy0\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000140)={'bond0\x00', @ifru_names='dummy0\x00'}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'erspan0\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f00000001c0)={'bond0\x00', @ifru_names='erspan0\x00'}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'bond_slave_0\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00', @ifru_names='bond_slave_0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='+bond0\x00', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/dummy0/bonding_slave/mii_status\x00', 0x0, 0x0) 2.310684842s ago: executing program 1 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000100)={'dummy0\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000140)={'bond0\x00', @ifru_names='dummy0\x00'}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'erspan0\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f00000001c0)={'bond0\x00', @ifru_names='erspan0\x00'}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'bond_slave_0\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00', @ifru_names='bond_slave_0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='+bond0\x00', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/bonding/bond0\x00', 0x0, 0x0) read(r2, &(0x7f00000003c0)=""/4096, 0x1000) 1.958410651s ago: executing program 1 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/ignore-gfp-wait\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='N\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='Y\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='10000\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/verbose\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='0\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='5\x00', 0x1) close(r4) r5 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='1\x00', 0x1) close(r5) r6 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) 1.750697856s ago: executing program 1 (id=17): mkdir(&(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='-2 -3\n', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) close(r2) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000600)={0x2, 0x801, @loopback}, 0x10) 1.470109063s ago: executing program 0 (id=20): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80, &(0x7f0000000200)=""/128, 0x80, &(0x7f0000000300)=""/128, 0x80, &(0x7f0000000400)=""/128}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x80, &(0x7f0000000600)=""/128, 0x80, &(0x7f0000000700)=""/128, 0x80, &(0x7f0000000800)=""/128}) 1.370810266s ago: executing program 0 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='ath9k\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='pcspkr\x00', 0x7) close(r1) 1.352561446s ago: executing program 0 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/ignore-gfp-wait\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='N\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='Y\x00', 0x1) close(r1) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/verbose\x00', 0x2, 0x0) close(r2) r3 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='1\x00', 0x1) r4 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) 1.314381847s ago: executing program 0 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/PNP0103:00/driver\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/tpm_tis\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/platform/drivers/tpm_crb\x00', 0x0, 0x0) 1.20664912s ago: executing program 3 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r0, &(0x7f0000000070)='cell0\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000060)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r1, &(0x7f00000000a0)='add syz0 127.0.0.1\x00', 0x13) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn\x00']) 1.20653794s ago: executing program 0 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000100)={'dummy0\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000140)={'bond0\x00', @ifru_names='dummy0\x00'}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'erspan0\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f00000001c0)={'bond0\x00', @ifru_names='erspan0\x00'}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'bond_slave_0\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00', @ifru_names='bond_slave_0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='+bond0\x00', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/dummy0/bonding_slave/mii_status\x00', 0x0, 0x0) 1.131685592s ago: executing program 3 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000100)={'dummy0\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000140)={'bond0\x00', @ifru_names='dummy0\x00'}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'erspan0\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f00000001c0)={'bond0\x00', @ifru_names='erspan0\x00'}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'bond_slave_0\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00', @ifru_names='bond_slave_0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='+bond0\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/bonding/bond0\x00', 0x0, 0x0) read(r2, &(0x7f00000003c0)=""/4096, 0x1000) 1.074019553s ago: executing program 0 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/ignore-gfp-wait\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='N\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='Y\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='10000\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/verbose\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='0\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='5\x00', 0x1) close(r4) r5 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='1\x00', 0x1) close(r5) r6 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) 566.879005ms ago: executing program 4 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000100)={'dummy0\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000140)={'bond0\x00', @ifru_names='dummy0\x00'}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'erspan0\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f00000001c0)={'bond0\x00', @ifru_names='erspan0\x00'}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'bond_slave_0\x00', @ifru_flags}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00', @ifru_names='bond_slave_0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='+bond0\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='+dummy0\x00', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/dummy0/bonding_slave/mii_status\x00', 0x0, 0x0) read(r3, &(0x7f0000000440)=""/128, 0x80) 514.875427ms ago: executing program 3 (id=29): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) write(r0, &(0x7f0000000880), 0x0) 199.748225ms ago: executing program 2 (id=30): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='1\x00', 0x1) syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) 142.569876ms ago: executing program 3 (id=31): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 69.457618ms ago: executing program 1 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/usb_gadget/naa.5001405bd4e49776\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/target/usb_gadget/naa.5001405bd4e49776/tpgt_1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget/naa.5001405bd4e49776/tpgt_1/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='1', 0x1) close(r0) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/tcm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='dummy_udc.0', 0xb) close(r1) nanosleep(&(0x7f0000000500)={0x2}, 0x0) 0s ago: executing program 4 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/ignore-gfp-wait\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='N\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='Y\x00', 0x1) close(r1) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/verbose\x00', 0x2, 0x0) close(r2) r3 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='1\x00', 0x1) r4 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 43.407231][ T3851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.418406][ T3851] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. syzkaller login: [ 62.713424][ T4173] cgroup: Unknown subsys name 'net' [ 62.839488][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.315020][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.790376][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 65.892210][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 65.902409][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 65.980960][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.988486][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.997732][ T4186] device bridge_slave_0 entered promiscuous mode [ 66.006397][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 66.020212][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 66.037016][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.044280][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.052204][ T4186] device bridge_slave_1 entered promiscuous mode [ 66.125704][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.144271][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.181297][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.188657][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.197312][ T4197] device bridge_slave_0 entered promiscuous mode [ 66.230893][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.238358][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.247147][ T4197] device bridge_slave_1 entered promiscuous mode [ 66.257420][ T4186] team0: Port device team_slave_0 added [ 66.263779][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.270870][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.279541][ T4187] device bridge_slave_0 entered promiscuous mode [ 66.318318][ T4186] team0: Port device team_slave_1 added [ 66.330499][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.338430][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.346939][ T4187] device bridge_slave_1 entered promiscuous mode [ 66.354828][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.361927][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.370426][ T4185] device bridge_slave_0 entered promiscuous mode [ 66.394359][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.404455][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.411541][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.419779][ T4190] device bridge_slave_0 entered promiscuous mode [ 66.436573][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.443920][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.452058][ T4185] device bridge_slave_1 entered promiscuous mode [ 66.468028][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.477496][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.484870][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.493281][ T4190] device bridge_slave_1 entered promiscuous mode [ 66.511135][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.518314][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.544677][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.578721][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.588432][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.595849][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.621922][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.648098][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.659259][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.676649][ T4197] team0: Port device team_slave_0 added [ 66.686829][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.697891][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.731036][ T4197] team0: Port device team_slave_1 added [ 66.738514][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.771305][ T4187] team0: Port device team_slave_0 added [ 66.791368][ T4186] device hsr_slave_0 entered promiscuous mode [ 66.798228][ T4186] device hsr_slave_1 entered promiscuous mode [ 66.821720][ T4190] team0: Port device team_slave_0 added [ 66.830310][ T4190] team0: Port device team_slave_1 added [ 66.837658][ T4187] team0: Port device team_slave_1 added [ 66.858967][ T4185] team0: Port device team_slave_0 added [ 66.892214][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.899925][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.928243][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.945082][ T4185] team0: Port device team_slave_1 added [ 66.951301][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.958433][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.985336][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.009365][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.016447][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.043159][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.062009][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.070058][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.096589][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.131741][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.139107][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.165165][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.181639][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.188964][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.215145][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.245785][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.252783][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.279099][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.295773][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.302963][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.329855][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.352179][ T4197] device hsr_slave_0 entered promiscuous mode [ 67.360460][ T4197] device hsr_slave_1 entered promiscuous mode [ 67.367503][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.375709][ T4197] Cannot create hsr debugfs directory [ 67.429022][ T4187] device hsr_slave_0 entered promiscuous mode [ 67.436262][ T4187] device hsr_slave_1 entered promiscuous mode [ 67.443314][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.450917][ T4187] Cannot create hsr debugfs directory [ 67.495863][ T4190] device hsr_slave_0 entered promiscuous mode [ 67.503432][ T4190] device hsr_slave_1 entered promiscuous mode [ 67.510172][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.518610][ T4190] Cannot create hsr debugfs directory [ 67.533865][ T1324] Bluetooth: hci3: command 0x0409 tx timeout [ 67.540613][ T1324] Bluetooth: hci2: command 0x0409 tx timeout [ 67.543116][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 67.552684][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 67.564299][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 67.605292][ T4185] device hsr_slave_0 entered promiscuous mode [ 67.612251][ T4185] device hsr_slave_1 entered promiscuous mode [ 67.619952][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.627726][ T4185] Cannot create hsr debugfs directory [ 67.860126][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.876772][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.889534][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.908887][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.953432][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.972610][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.985088][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.005138][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.075823][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.089756][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.101495][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.112555][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.127698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.137857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.157939][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.170348][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.206593][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.220362][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.229970][ T1223] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.237365][ T1223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.248776][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.260194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.269371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.278369][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.285501][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.300196][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.326678][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.338731][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.348378][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.358288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.368308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.396880][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.408024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.418618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.429246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.437686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.445968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.478083][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.496450][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.510141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.519734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.530711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.540397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.549375][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.556508][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.567158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.578103][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.588894][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.599516][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.618173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.627211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.637593][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.644726][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.652614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.661441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.670846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.680498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.689074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.715756][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.738197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.749498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.760653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.769990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.779248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.790981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.820844][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.832315][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.872277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.881830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.892794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.902052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.937823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.000972][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.028742][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.055344][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.080929][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.092186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.107069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.118798][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.131693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.142776][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.149923][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.158723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.167892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.177407][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.184554][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.193011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.201789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.235836][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.251147][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.264442][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.272381][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.289688][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.302222][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.314771][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.322516][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.331873][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.342442][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.361939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.371154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.389986][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.398727][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.408811][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.426135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.434396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.445761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.455448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.464537][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.471639][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.481546][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.495612][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.506982][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.516582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.525615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.537038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.545993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.555925][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.566119][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.573285][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.583857][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.599810][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.610082][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.618570][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 69.623569][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 69.625745][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 69.642112][ T4241] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.649299][ T4241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.657231][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 69.664249][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.672471][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 69.739985][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.750372][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.762157][ T1223] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.769316][ T1223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.785509][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.799990][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.811733][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.821406][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.830601][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.840319][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.849453][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.859900][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.868998][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.878060][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.912784][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.931062][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.958220][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.990793][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.003584][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.024323][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.033447][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.042064][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.051262][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.060736][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.069942][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.079845][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.089727][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.101533][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.111854][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.121151][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.131648][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.144636][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.175700][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.203815][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.219944][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.239276][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.258238][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.271730][ T4197] device veth0_vlan entered promiscuous mode [ 70.281835][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.294822][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.329625][ T4197] device veth1_vlan entered promiscuous mode [ 70.377347][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.386702][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.395807][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.419096][ T4187] device veth0_vlan entered promiscuous mode [ 70.454137][ T4197] device veth0_macvtap entered promiscuous mode [ 70.475250][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.490587][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.501338][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.517029][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.529421][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.542107][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.555119][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.569027][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.577230][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.587198][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.607116][ T4197] device veth1_macvtap entered promiscuous mode [ 70.619473][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.628214][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.636294][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.647864][ T4187] device veth1_vlan entered promiscuous mode [ 70.677272][ T4186] device veth0_vlan entered promiscuous mode [ 70.688273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.699743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.708307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.718363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.727786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.737843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.752329][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.764910][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.789403][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.798393][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.807280][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.817064][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.826779][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.840160][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.851302][ T4186] device veth1_vlan entered promiscuous mode [ 70.862484][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.871050][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.880873][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.895370][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.905548][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.914575][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.924780][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.988397][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.997488][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.008400][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.029998][ T4187] device veth0_macvtap entered promiscuous mode [ 71.059539][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.069304][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.080475][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.093890][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.102789][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.111282][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.120231][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.130051][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.149318][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.158109][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.167546][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.175813][ T4190] device veth0_vlan entered promiscuous mode [ 71.185213][ T4187] device veth1_macvtap entered promiscuous mode [ 71.204748][ T4186] device veth0_macvtap entered promiscuous mode [ 71.219305][ T4190] device veth1_vlan entered promiscuous mode [ 71.254025][ T4186] device veth1_macvtap entered promiscuous mode [ 71.270198][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.287398][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.289732][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.310854][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.319622][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.327342][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.335340][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.359682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.370266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.380547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.389624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.399209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.408158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.417643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.427898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.437361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.446819][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.459602][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.471135][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.483039][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.512087][ T4190] device veth0_macvtap entered promiscuous mode [ 71.520561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.529603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.538871][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.548379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.557495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.567953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.578249][ T4185] device veth0_vlan entered promiscuous mode [ 71.587776][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.597431][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.606449][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.616456][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.634726][ T4190] device veth1_macvtap entered promiscuous mode [ 71.647796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.656408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.666058][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.677730][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.688223][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.694658][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 71.702001][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.713333][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 71.721739][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.730428][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 71.736895][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.754054][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.762067][ T4185] device veth1_vlan entered promiscuous mode [ 71.771232][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.776760][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 71.788817][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.797300][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 71.800948][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.812303][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.823724][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.835024][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.845161][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.857809][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.871123][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.880619][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.891869][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.901803][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.913222][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.923530][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.935076][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.947005][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.960246][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.969196][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.980207][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.989996][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.999585][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.018301][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.038837][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.051644][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.066852][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.101805][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.121383][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.138921][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.159071][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.169518][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.187970][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.201098][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.224668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.242816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.259628][ T4264] nvme_fabrics: missing parameter 'transport=%s' [ 72.270902][ T4264] nvme_fabrics: missing parameter 'nqn=%s' [ 72.301674][ T4185] device veth0_macvtap entered promiscuous mode [ 72.334501][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.353190][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.362742][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.372911][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.385975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.398888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.408113][ T4267] FAULT_INJECTION: forcing a failure. [ 72.408113][ T4267] name failslab, interval 1, probability 5, space 0, times 10000 [ 72.408877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.429790][ T4267] CPU: 1 PID: 4267 Comm: syz.3.6 Not tainted syzkaller #0 [ 72.436963][ T4267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 72.447074][ T4267] Call Trace: [ 72.450399][ T4267] [ 72.453356][ T4267] dump_stack_lvl+0x188/0x250 [ 72.458098][ T4267] ? show_regs_print_info+0x20/0x20 [ 72.463357][ T4267] ? load_image+0x410/0x410 [ 72.467916][ T4267] should_fail+0x383/0x4b0 [ 72.472389][ T4267] should_failslab+0x5/0x20 [ 72.476923][ T4267] slab_pre_alloc_hook+0x51/0xc0 [ 72.476950][ T4267] ? security_file_alloc+0x30/0x110 [ 72.476977][ T4267] kmem_cache_alloc+0x3d/0x280 [ 72.492030][ T4267] ? rcu_is_watching+0x11/0xa0 [ 72.496836][ T4267] security_file_alloc+0x30/0x110 [ 72.501902][ T4267] __alloc_file+0xc2/0x240 [ 72.506366][ T4267] alloc_empty_file+0x90/0x180 [ 72.511172][ T4267] path_openat+0x11c/0x2fb0 [ 72.515729][ T4267] ? stack_trace_snprint+0xe0/0xe0 [ 72.520907][ T4267] ? verify_lock_unused+0x140/0x140 [ 72.526153][ T4267] ? verify_lock_unused+0x140/0x140 [ 72.531396][ T4267] ? __kasan_slab_alloc+0xa9/0xc0 [ 72.536486][ T4267] ? __kasan_slab_alloc+0x92/0xc0 [ 72.541574][ T4267] ? slab_post_alloc_hook+0x4c/0x380 [ 72.546909][ T4267] ? verify_lock_unused+0x140/0x140 [ 72.552157][ T4267] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.558360][ T4267] ? do_filp_open+0x400/0x400 [ 72.563100][ T4267] do_filp_open+0x1df/0x400 [ 72.567676][ T4267] ? vfs_tmpfile+0x300/0x300 [ 72.572350][ T4267] ? _raw_spin_unlock+0x24/0x40 [ 72.577247][ T4267] ? alloc_fd+0x59e/0x650 [ 72.581620][ T4267] do_sys_openat2+0x14b/0x500 [ 72.586348][ T4267] ? __lock_acquire+0x7d40/0x7d40 [ 72.591416][ T4267] ? do_sys_open+0xe0/0xe0 [ 72.595861][ T4267] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 72.601914][ T4267] ? lock_chain_count+0x20/0x20 [ 72.606803][ T4267] __x64_sys_openat+0x135/0x160 [ 72.611709][ T4267] do_syscall_64+0x4c/0xa0 [ 72.616158][ T4267] ? clear_bhb_loop+0x30/0x80 [ 72.620877][ T4267] ? clear_bhb_loop+0x30/0x80 [ 72.625602][ T4267] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.630115][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.631566][ T4267] RIP: 0033:0x7fc275aca98e [ 72.643826][ T4267] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 72.663467][ T4267] RSP: 002b:00007fc273d61b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 72.663495][ T4267] RAX: ffffffffffffffda RBX: 00007fc273d626c0 RCX: 00007fc275aca98e [ 72.663520][ T4267] RDX: 0000000000000002 RSI: 00007fc273d61c00 RDI: ffffffffffffff9c [ 72.663534][ T4267] RBP: 00007fc273d61c00 R08: 0000000000000000 R09: 0000000000000000 [ 72.663547][ T4267] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 72.663561][ T4267] R13: 00007fc275d92038 R14: 00007fc275d91fa0 R15: 00007ffc30c8f298 [ 72.663592][ T4267] [ 72.729779][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.741537][ T4185] device veth1_macvtap entered promiscuous mode [ 72.766332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.776133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.861451][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.875504][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.885959][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.897129][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.907424][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.918790][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.929352][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.939902][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.951705][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.988196][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.999607][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.018845][ T4256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.027834][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.038685][ T4256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.041269][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.058257][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.068862][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.079169][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.090672][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.102269][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.117135][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.128781][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.147584][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.159464][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.177670][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.196291][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.227269][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.241032][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.265925][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.278898][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.290372][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.315736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.338813][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.367922][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.377683][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.396314][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.420258][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.428889][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.444010][ T4275] lo speed is unknown, defaulting to 1000 [ 73.459444][ T4275] lo speed is unknown, defaulting to 1000 [ 73.469873][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.497555][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.525166][ T4275] lo speed is unknown, defaulting to 1000 [ 73.527180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.556467][ T4276] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.581768][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.609732][ T4276] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 73.635903][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.665525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.687774][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.716149][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.751852][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.773312][ T4232] Bluetooth: hci0: command 0x0419 tx timeout [ 73.779438][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 73.846871][ T4275] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 73.855704][ T4232] Bluetooth: hci4: command 0x0419 tx timeout [ 73.872709][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 73.892208][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 73.938179][ T4275] lo speed is unknown, defaulting to 1000 [ 73.974144][ T4275] lo speed is unknown, defaulting to 1000 [ 73.981006][ T4275] lo speed is unknown, defaulting to 1000 [ 73.994311][ T4275] lo speed is unknown, defaulting to 1000 [ 74.008358][ T4275] lo speed is unknown, defaulting to 1000 [ 74.044523][ T4286] page:ffffea0004600000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 74.071201][ T4286] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 74.083766][ T4286] raw: 017ff00000001000 ffffea0004600008 ffffea0004600008 0000000000000000 [ 74.107954][ T4293] FAULT_INJECTION: forcing a failure. [ 74.107954][ T4293] name failslab, interval 1, probability 5, space 0, times 9999 [ 74.122393][ T4230] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.133270][ T4286] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 74.148709][ T4286] page dumped because: unmovable page [ 74.153272][ T4293] CPU: 1 PID: 4293 Comm: syz.0.10 Not tainted syzkaller #0 [ 74.156538][ T4286] page_owner info is not present (never set?) [ 74.161350][ T4293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.161367][ T4293] Call Trace: [ 74.161376][ T4293] [ 74.161386][ T4293] dump_stack_lvl+0x188/0x250 [ 74.161420][ T4293] ? show_regs_print_info+0x20/0x20 [ 74.193741][ T4293] ? load_image+0x410/0x410 [ 74.198299][ T4293] ? prandom_u32+0x217/0x250 [ 74.203084][ T4293] should_fail+0x383/0x4b0 [ 74.207603][ T4293] should_failslab+0x5/0x20 [ 74.212155][ T4293] slab_pre_alloc_hook+0x51/0xc0 [ 74.217131][ T4293] ? vidtv_mux_init+0x3ad/0x1950 [ 74.222195][ T4293] __kmalloc_track_caller+0x69/0x330 [ 74.227540][ T4293] ? vidtv_mux_init+0x3ad/0x1950 [ 74.232528][ T4293] kstrdup+0x32/0x70 [ 74.236469][ T4293] vidtv_mux_init+0x3ad/0x1950 [ 74.241280][ T4293] ? __mutex_lock_common+0x435/0x2400 [ 74.246709][ T4293] vidtv_start_feed+0x368/0x590 [ 74.251604][ T4293] ? vidtv_i2c_func+0x10/0x10 [ 74.256324][ T4293] ? vidtv_stop_feed+0x250/0x250 [ 74.261311][ T4293] ? _raw_spin_unlock_irq+0x1f/0x40 [ 74.266554][ T4293] ? lockdep_hardirqs_on+0x94/0x140 [ 74.271804][ T4293] dmx_ts_feed_start_filtering+0x11c/0x210 [ 74.277652][ T4293] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 74.283596][ T4293] dvb_dmxdev_filter_start+0x422/0x1060 [ 74.289190][ T4293] dvb_demux_do_ioctl+0x48d/0x530 [ 74.294258][ T4293] dvb_usercopy+0x191/0x2b0 [ 74.298806][ T4293] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 74.304389][ T4293] ? dvb_generic_ioctl+0xb0/0xb0 [ 74.309384][ T4293] ? dvb_demux_poll+0x210/0x210 [ 74.314277][ T4293] dvb_demux_ioctl+0x25/0x30 [ 74.318915][ T4293] __se_sys_ioctl+0xfa/0x170 [ 74.323553][ T4293] do_syscall_64+0x4c/0xa0 [ 74.328012][ T4293] ? clear_bhb_loop+0x30/0x80 [ 74.332730][ T4293] ? clear_bhb_loop+0x30/0x80 [ 74.337453][ T4293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.343393][ T4293] RIP: 0033:0x7f30ae038159 [ 74.347847][ T4293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.367490][ T4293] RSP: 002b:00007f30ac290028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.375954][ T4293] RAX: ffffffffffffffda RBX: 00007f30ae2bffa0 RCX: 00007f30ae038159 [ 74.383974][ T4293] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000004 [ 74.391985][ T4293] RBP: 00007f30ae0cf06b R08: 0000000000000000 R09: 0000000000000000 [ 74.399997][ T4293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.408007][ T4293] R13: 00007f30ae2c0038 R14: 00007f30ae2bffa0 R15: 00007ffe8af50698 [ 74.416034][ T4293] [ 74.433440][ T23] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 74.448076][ T4288] page:ffffea0004400000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110000 [ 74.489961][ T4288] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 74.509715][ T4288] raw: 017ff00000001000 ffffea0004400008 ffffea0004400008 0000000000000000 [ 74.554547][ T4288] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 74.570313][ T4296] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 74.573889][ T4288] page dumped because: unmovable page [ 74.599388][ T4288] page_owner info is not present (never set?) [ 74.631931][ T4293] FAULT_INJECTION: forcing a failure. [ 74.631931][ T4293] name failslab, interval 1, probability 5, space 0, times 9998 [ 74.671676][ T4296] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 74.680911][ T4293] CPU: 0 PID: 4293 Comm: syz.0.10 Not tainted syzkaller #0 [ 74.688170][ T4293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.698265][ T4293] Call Trace: [ 74.701581][ T4293] [ 74.704541][ T4293] dump_stack_lvl+0x188/0x250 [ 74.709259][ T4293] ? show_regs_print_info+0x20/0x20 [ 74.714496][ T4293] ? load_image+0x410/0x410 [ 74.719041][ T4293] ? prandom_u32+0x217/0x250 [ 74.723679][ T4293] should_fail+0x383/0x4b0 [ 74.728139][ T4293] should_failslab+0x5/0x20 [ 74.732822][ T4293] slab_pre_alloc_hook+0x51/0xc0 [ 74.737809][ T4293] __kmalloc+0x6b/0x340 [ 74.742022][ T4293] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 74.747794][ T4293] tomoyo_realpath_from_path+0xed/0x5e0 [ 74.753403][ T4293] tomoyo_path_number_perm+0x251/0x6b0 [ 74.758929][ T4293] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 74.764435][ T4293] ? do_futex+0xdc2/0x12b0 [ 74.768948][ T4293] security_file_ioctl+0x6c/0xa0 [ 74.773983][ T4293] __se_sys_ioctl+0x48/0x170 [ 74.778649][ T4293] do_syscall_64+0x4c/0xa0 [ 74.783106][ T4293] ? clear_bhb_loop+0x30/0x80 [ 74.787827][ T4293] ? clear_bhb_loop+0x30/0x80 [ 74.792546][ T4293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.798580][ T4293] RIP: 0033:0x7f30ae038159 [ 74.803084][ T4293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.822729][ T4293] RSP: 002b:00007f30ac290028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.825872][ T4296] bonding: bond0 is being created... [ 74.831179][ T4293] RAX: ffffffffffffffda RBX: 00007f30ae2bffa0 RCX: 00007f30ae038159 [ 74.831208][ T4293] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000004 [ 74.831222][ T4293] RBP: 00007f30ae0cf06b R08: 0000000000000000 R09: 0000000000000000 [ 74.831236][ T4293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.831247][ T4293] R13: 00007f30ae2c0038 R14: 00007f30ae2bffa0 R15: 00007ffe8af50698 [ 74.876659][ T4293] [ 74.894145][ T4293] ERROR: Out of memory at tomoyo_realpath_from_path. [ 74.901714][ T4293] FAULT_INJECTION: forcing a failure. [ 74.901714][ T4293] name failslab, interval 1, probability 5, space 0, times 9997 [ 74.915627][ T4293] CPU: 0 PID: 4293 Comm: syz.0.10 Not tainted syzkaller #0 [ 74.922886][ T4293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.932979][ T4293] Call Trace: [ 74.936296][ T4293] [ 74.939267][ T4293] dump_stack_lvl+0x188/0x250 [ 74.943989][ T4293] ? show_regs_print_info+0x20/0x20 [ 74.949229][ T4293] ? load_image+0x410/0x410 [ 74.953774][ T4293] ? prandom_u32+0x217/0x250 [ 74.958414][ T4293] should_fail+0x383/0x4b0 [ 74.962876][ T4293] should_failslab+0x5/0x20 [ 74.967425][ T4293] slab_pre_alloc_hook+0x51/0xc0 [ 74.972405][ T4293] kmem_cache_alloc_trace+0x47/0x290 [ 74.977726][ T4293] ? vidtv_s302m_encoder_init+0xde/0x770 [ 74.983415][ T4293] vidtv_s302m_encoder_init+0xde/0x770 [ 74.988921][ T4293] ? vidtv_pes_write_into+0x11e0/0x11e0 [ 74.994525][ T4293] vidtv_channel_s302m_init+0x357/0x830 [ 75.000138][ T4293] vidtv_channels_init+0x41/0x90 [ 75.005115][ T4293] vidtv_mux_init+0x4d0/0x1950 [ 75.009920][ T4293] ? __mutex_lock_common+0x435/0x2400 [ 75.015334][ T4293] vidtv_start_feed+0x368/0x590 [ 75.020229][ T4293] ? vidtv_i2c_func+0x10/0x10 [ 75.024937][ T4293] ? vidtv_stop_feed+0x250/0x250 [ 75.027441][ T23] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 75.029922][ T4293] ? _raw_spin_unlock_irq+0x1f/0x40 [ 75.046239][ T4293] ? lockdep_hardirqs_on+0x94/0x140 [ 75.051489][ T4293] dmx_ts_feed_start_filtering+0x11c/0x210 [ 75.057335][ T4293] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 75.063270][ T4293] dvb_dmxdev_filter_start+0x422/0x1060 [ 75.068872][ T4293] dvb_demux_do_ioctl+0x48d/0x530 [ 75.073933][ T4293] dvb_usercopy+0x191/0x2b0 [ 75.077100][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.078469][ T4293] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 75.090717][ T4293] ? dvb_generic_ioctl+0xb0/0xb0 [ 75.095721][ T4293] ? dvb_demux_poll+0x210/0x210 [ 75.100610][ T4293] dvb_demux_ioctl+0x25/0x30 [ 75.103017][ T23] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 75.105230][ T4293] __se_sys_ioctl+0xfa/0x170 [ 75.118963][ T4293] do_syscall_64+0x4c/0xa0 [ 75.123448][ T4293] ? clear_bhb_loop+0x30/0x80 [ 75.128164][ T4293] ? clear_bhb_loop+0x30/0x80 [ 75.132888][ T4293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.138823][ T4293] RIP: 0033:0x7f30ae038159 [ 75.143274][ T4293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.159621][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.162988][ T4293] RSP: 002b:00007f30ac290028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.163013][ T4293] RAX: ffffffffffffffda RBX: 00007f30ae2bffa0 RCX: 00007f30ae038159 [ 75.187465][ T4293] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000004 [ 75.195465][ T4293] RBP: 00007f30ae0cf06b R08: 0000000000000000 R09: 0000000000000000 [ 75.203471][ T4293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.209738][ T23] usb 5-1: config 0 descriptor?? [ 75.211496][ T4293] R13: 00007f30ae2c0038 R14: 00007f30ae2bffa0 R15: 00007ffe8af50698 [ 75.211537][ T4293] [ 75.232143][ T4298] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved [ 75.273218][ T4230] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 75.288679][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.300340][ T4296] bonding: bond0 already exists [ 75.323243][ T4230] usb 3-1: Product: syz [ 75.327494][ T4230] usb 3-1: Manufacturer: syz [ 75.332727][ T4230] usb 3-1: SerialNumber: syz [ 75.477433][ T4305] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 75.522198][ T4305] bond0: (slave erspan0): Error: Device is in use and cannot be enslaved [ 75.551734][ T4305] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved [ 75.577572][ T4305] bonding: bond0 is being created... [ 75.620957][ T4308] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 75.644531][ T4305] bonding: bond0 already exists [ 75.682233][ T4308] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 75.722898][ T4308] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved [ 75.732969][ T4308] bonding: bond0 is being created... [ 75.739991][ T4308] bonding: bond0 already exists [ 75.747415][ T4308] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 75.757145][ T4308] bond0: option slaves: unable to set because the bond device is up [ 75.768079][ T23] sunplus 0003:04FC:05D8.0001: fixing up Sunplus Wireless Desktop report descriptor [ 75.804944][ T23] sunplus 0003:04FC:05D8.0001: hidraw0: USB HID vd.8f Device [HID 04fc:05d8] on usb-dummy_hcd.4-1/input0 [ 75.923355][ T4313] nvme_fabrics: missing parameter 'transport=%s' [ 75.929765][ T4313] nvme_fabrics: missing parameter 'nqn=%s' [ 76.187102][ T4230] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 76.391930][ T4291] syz.3.8 (4291): drop_caches: 3 [ 76.464884][ T4333] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 76.474822][ T23] usb 5-1: USB disconnect, device number 2 [ 76.504666][ T4333] bond0: (slave erspan0): Error: Device is in use and cannot be enslaved [ 76.519783][ T4333] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved [ 76.534773][ T4333] bonding: bond0 is being created... [ 76.540679][ T4333] bonding: bond0 already exists [ 76.627677][ T4337] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 76.673457][ T4339] syz.0.27: vmalloc error: size 8192, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 76.674266][ T4337] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 76.697163][ T4339] CPU: 0 PID: 4339 Comm: syz.0.27 Not tainted syzkaller #0 [ 76.704408][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 76.714590][ T4339] Call Trace: [ 76.717900][ T4339] [ 76.720860][ T4339] dump_stack_lvl+0x188/0x250 [ 76.725569][ T4339] ? rcu_lock_release+0x5/0x20 [ 76.730381][ T4339] ? show_regs_print_info+0x20/0x20 [ 76.735703][ T4339] ? load_image+0x410/0x410 [ 76.740273][ T4339] warn_alloc+0x245/0x320 [ 76.744620][ T4339] ? slab_free_freelist_hook+0xec/0x170 [ 76.750227][ T4339] ? zone_watermark_ok_safe+0x250/0x250 [ 76.755792][ T4339] ? kfree+0xef/0x2a0 [ 76.759815][ T4339] ? __get_vm_area_node+0x164/0x2d0 [ 76.765085][ T4339] __vmalloc_node_range+0x2b1/0x8b0 [ 76.770328][ T4339] ? dvb_demux_do_ioctl+0x2ad/0x530 [ 76.775564][ T4339] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 76.781244][ T4339] ? dvb_dmxdev_filter_start+0x107/0x1060 [ 76.787095][ T4339] vmalloc+0x75/0x80 [ 76.791038][ T4339] ? dvb_dmxdev_filter_start+0x107/0x1060 [ 76.796802][ T4339] dvb_dmxdev_filter_start+0x107/0x1060 [ 76.802393][ T4339] dvb_demux_do_ioctl+0x48d/0x530 [ 76.807443][ T4339] dvb_usercopy+0x191/0x2b0 [ 76.811990][ T4339] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 76.817580][ T4339] ? dvb_generic_ioctl+0xb0/0xb0 [ 76.822625][ T4339] ? dvb_demux_poll+0x210/0x210 [ 76.827515][ T4339] dvb_demux_ioctl+0x25/0x30 [ 76.832142][ T4339] __se_sys_ioctl+0xfa/0x170 [ 76.836763][ T4339] do_syscall_64+0x4c/0xa0 [ 76.841189][ T4339] ? clear_bhb_loop+0x30/0x80 [ 76.845888][ T4339] ? clear_bhb_loop+0x30/0x80 [ 76.850609][ T4339] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.856598][ T4339] RIP: 0033:0x7f30ae038159 [ 76.861056][ T4339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.880709][ T4339] RSP: 002b:00007f30ac290028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.889284][ T4339] RAX: ffffffffffffffda RBX: 00007f30ae2bffa0 RCX: 00007f30ae038159 [ 76.897312][ T4339] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000005 [ 76.905333][ T4339] RBP: 00007f30ae0cf06b R08: 0000000000000000 R09: 0000000000000000 [ 76.913374][ T4339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.921385][ T4339] R13: 00007f30ae2c0038 R14: 00007f30ae2bffa0 R15: 00007ffe8af50698 [ 76.929416][ T4339] [ 76.932233][ T23] usb 3-1: USB disconnect, device number 2 [ 76.932680][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.975325][ T4337] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved [ 76.986314][ T4339] Mem-Info: [ 76.989578][ T4339] active_anon:12 inactive_anon:6006 isolated_anon:0 [ 76.989578][ T4339] active_file:3281 inactive_file:1491 isolated_file:0 [ 76.989578][ T4339] unevictable:768 dirty:1751 writeback:0 [ 76.989578][ T4339] slab_reclaimable:20396 slab_unreclaimable:91069 [ 76.989578][ T4339] mapped:30508 shmem:1635 pagetables:655 bounce:0 [ 76.989578][ T4339] kernel_misc_reclaimable:0 [ 76.989578][ T4339] free:1426370 free_pcp:13027 free_cma:0 [ 77.031248][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.046969][ T4339] Node 0 active_anon:48kB inactive_anon:23380kB active_file:13220kB inactive_file:5704kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122032kB dirty:6964kB writeback:0kB shmem:4460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10352kB pagetables:2520kB all_unreclaimable? no [ 77.077944][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.108681][ T4339] Node 1 active_anon:0kB inactive_anon:544kB active_file:4kB inactive_file:160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:40kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 77.137784][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.150657][ T4339] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 77.176976][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.197243][ T4339] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 77.209767][ T4339] Node 0 DMA32 free:1776900kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:48kB inactive_anon:23380kB active_file:13220kB inactive_file:5704kB unevictable:1536kB writepending:6964kB present:3129332kB managed:2606500kB mlocked:0kB bounce:0kB free_pcp:42792kB local_pcp:21580kB free_cma:0kB [ 77.239621][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.252013][ T4349] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 77.262036][ T4339] lowmem_reserve[]: 0 0 0 0 0 [ 77.268759][ T4339] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 77.294479][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.303532][ T4318] NFSD: attempt to initialize umh client tracking in a container ignored. [ 77.307984][ T4339] lowmem_reserve[]: 0 0 0 0 0 [ 77.325116][ T4318] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 77.348934][ T4349] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 77.353207][ T4339] Node 1 [ 77.367887][ T4318] NFSD: Unable to initialize client recovery tracking! (-22) [ 77.384240][ T4339] Normal free:3912916kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:0kB inactive_anon:544kB active_file:4kB inactive_file:160kB unevictable:1536kB writepending:40kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:9700kB local_pcp:3500kB free_cma:0kB [ 77.412469][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.414252][ T4318] NFSD: starting 90-second grace period (net f0000474) [ 77.441048][ T4347] nvme_fabrics: missing parameter 'transport=%s' [ 77.451614][ T4349] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved [ 77.462550][ T4347] nvme_fabrics: missing parameter 'nqn=%s' [ 77.468126][ T4230] usb 3-1: Service connection timeout for: 256 [ 77.483685][ T4230] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 77.493876][ T4345] bonding: bond0 is being created... [ 77.509983][ T4230] ath9k_htc: Failed to initialize the device [ 77.523604][ T23] usb 3-1: ath9k_htc: USB layer deinitialized [ 77.532532][ T4339] lowmem_reserve[]: 0 0 0 0 0 [ 77.547500][ T4349] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 77.578956][ T4349] bond0: option slaves: unable to set because the bond device is up [ 77.583566][ T4339] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 77.604868][ T4345] bonding: bond0 already exists [ 77.610091][ T4339] Node 0 DMA32: 486*4kB (UM) 204*8kB (UME) 94*16kB (UME) 107*32kB (UME) 49*64kB (UME) 35*128kB (ME) 22*256kB (UME) 21*512kB (M) 19*1024kB (ME) 9*2048kB (M) 417*4096kB (M) = 1778424kB [ 77.661702][ T4339] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 77.681110][ T4339] Node 1 Normal: 44*4kB (UE) 18*8kB (UME) 27*16kB (UME) 63*32kB (UE) 35*64kB (UME) 19*128kB (UME) 6*256kB (UME) 1*512kB (U) 2*1024kB (UE) 1*2048kB (M) 952*4096kB (M) = 3912976kB [ 77.710642][ T4339] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 77.720916][ T4339] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 77.736625][ T4339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 77.747820][ T4339] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 77.757556][ T4187] nfsd: last server has exited, flushing export cache [ 77.769631][ T4339] 6482 total pagecache pages [ 77.776244][ T4339] 0 pages in swap cache [ 77.780539][ T4339] Swap cache stats: add 0, delete 0, find 0/0 [ 77.796834][ T4339] Free swap = 124996kB [ 77.801079][ T4339] Total swap = 124996kB [ 77.806832][ T4339] 2097051 pages RAM [ 77.811008][ T4339] 0 pages HighMem/MovableOnly [ 77.821156][ T4339] 411503 pages reserved [ 77.826657][ T4339] 0 pages cma reserved [ 77.851860][ T4360] [ 77.854264][ T4360] ====================================================== [ 77.861301][ T4360] WARNING: possible circular locking dependency detected [ 77.868353][ T4360] syzkaller #0 Not tainted [ 77.872793][ T4360] ------------------------------------------------------ [ 77.879831][ T4360] syz.1.32/4360 is trying to acquire lock: [ 77.885658][ T4360] ffffffff8cf20bc8 (tpg_instances_lock){+.+.}-{3:3}, at: tcm_alloc+0x1d/0x2c0 [ 77.894612][ T4360] [ 77.894612][ T4360] but task is already holding lock: [ 77.902001][ T4360] ffff88807b3df310 (&gi->lock){+.+.}-{3:3}, at: config_usb_cfg_link+0x55/0x250 [ 77.911012][ T4360] [ 77.911012][ T4360] which lock already depends on the new lock. [ 77.911012][ T4360] [ 77.921537][ T4360] [ 77.921537][ T4360] the existing dependency chain (in reverse order) is: [ 77.930579][ T4360] [ 77.930579][ T4360] -> #2 (&gi->lock){+.+.}-{3:3}: [ 77.937763][ T4360] __mutex_lock_common+0x1e5/0x2400 [ 77.943525][ T4360] mutex_lock_nested+0x17/0x20 [ 77.948844][ T4360] config_usb_cfg_link+0x55/0x250 [ 77.954426][ T4360] configfs_symlink+0x5a4/0x13b0 [ 77.959927][ T4360] vfs_symlink+0x245/0x3d0 [ 77.964892][ T4360] do_symlinkat+0x1ab/0x6b0 [ 77.969921][ T4360] __x64_sys_symlinkat+0x95/0xa0 [ 77.975391][ T4360] do_syscall_64+0x4c/0xa0 [ 77.980366][ T4360] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.986808][ T4360] [ 77.986808][ T4360] -> #1 (&sb->s_type->i_mutex_key#22){++++}-{3:3}: [ 77.995538][ T4360] down_write+0x38/0x60 [ 78.000273][ T4360] configfs_depend_item_unlocked+0x14c/0x450 [ 78.006917][ T4360] usbg_make_tpg+0x1dd/0x550 [ 78.012033][ T4360] target_fabric_make_tpg+0xa0/0x6d0 [ 78.017850][ T4360] configfs_mkdir+0x511/0x9e0 [ 78.023085][ T4360] vfs_mkdir+0x386/0x570 [ 78.027878][ T4360] do_mkdirat+0x1dd/0x5c0 [ 78.032738][ T4360] __x64_sys_mkdirat+0x85/0x90 [ 78.038071][ T4360] do_syscall_64+0x4c/0xa0 [ 78.043022][ T4360] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.049551][ T4360] [ 78.049551][ T4360] -> #0 (tpg_instances_lock){+.+.}-{3:3}: [ 78.057463][ T4360] __lock_acquire+0x38f7/0x7d40 [ 78.062872][ T4360] lock_acquire+0x19f/0x400 [ 78.068104][ T4360] __mutex_lock_common+0x1e5/0x2400 [ 78.073841][ T4360] mutex_lock_nested+0x17/0x20 [ 78.079161][ T4360] tcm_alloc+0x1d/0x2c0 [ 78.083850][ T4360] usb_get_function+0x59/0xa0 [ 78.089071][ T4360] config_usb_cfg_link+0x144/0x250 [ 78.094715][ T4360] configfs_symlink+0x5a4/0x13b0 [ 78.100200][ T4360] vfs_symlink+0x245/0x3d0 [ 78.105288][ T4360] do_symlinkat+0x1ab/0x6b0 [ 78.110346][ T4360] __x64_sys_symlinkat+0x95/0xa0 [ 78.115836][ T4360] do_syscall_64+0x4c/0xa0 [ 78.120781][ T4360] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.127225][ T4360] [ 78.127225][ T4360] other info that might help us debug this: [ 78.127225][ T4360] [ 78.137614][ T4360] Chain exists of: [ 78.137614][ T4360] tpg_instances_lock --> &sb->s_type->i_mutex_key#22 --> &gi->lock [ 78.137614][ T4360] [ 78.151531][ T4360] Possible unsafe locking scenario: [ 78.151531][ T4360] [ 78.158981][ T4360] CPU0 CPU1 [ 78.164353][ T4360] ---- ---- [ 78.169762][ T4360] lock(&gi->lock); [ 78.173668][ T4360] lock(&sb->s_type->i_mutex_key#22); [ 78.181782][ T4360] lock(&gi->lock); [ 78.188323][ T4360] lock(tpg_instances_lock); [ 78.193006][ T4360] [ 78.193006][ T4360] *** DEADLOCK *** [ 78.193006][ T4360] [ 78.201257][ T4360] 3 locks held by syz.1.32/4360: [ 78.206213][ T4360] #0: ffff8881461b4460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 78.215532][ T4360] #1: ffff88805f68c150 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: configfs_symlink+0x47b/0x13b0 [ 78.226486][ T4360] #2: ffff88807b3df310 (&gi->lock){+.+.}-{3:3}, at: config_usb_cfg_link+0x55/0x250 [ 78.235928][ T4360] [ 78.235928][ T4360] stack backtrace: [ 78.241810][ T4360] CPU: 1 PID: 4360 Comm: syz.1.32 Not tainted syzkaller #0 [ 78.249008][ T4360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 78.259074][ T4360] Call Trace: [ 78.262372][ T4360] [ 78.265309][ T4360] dump_stack_lvl+0x188/0x250 [ 78.270014][ T4360] ? load_image+0x410/0x410 [ 78.274521][ T4360] ? show_regs_print_info+0x20/0x20 [ 78.279726][ T4360] ? print_circular_bug+0x12b/0x1a0 [ 78.284935][ T4360] check_noncircular+0x2f8/0x400 [ 78.289900][ T4360] ? print_deadlock_bug+0x5d0/0x5d0 [ 78.295133][ T4360] ? lockdep_lock+0xf1/0x1f0 [ 78.299742][ T4360] ? mark_lock+0x94/0x320 [ 78.304087][ T4360] ? _find_first_zero_bit+0xd1/0xf0 [ 78.309320][ T4360] __lock_acquire+0x38f7/0x7d40 [ 78.314206][ T4360] ? verify_lock_unused+0x140/0x140 [ 78.319440][ T4360] ? verify_lock_unused+0x140/0x140 [ 78.324665][ T4360] lock_acquire+0x19f/0x400 [ 78.329200][ T4360] ? tcm_alloc+0x1d/0x2c0 [ 78.333545][ T4360] ? __might_sleep+0xf0/0xf0 [ 78.338161][ T4360] ? read_lock_is_recursive+0x10/0x10 [ 78.343546][ T4360] ? __mutex_trylock_common+0x15c/0x260 [ 78.349173][ T4360] __mutex_lock_common+0x1e5/0x2400 [ 78.354386][ T4360] ? tcm_alloc+0x1d/0x2c0 [ 78.358755][ T4360] ? __mutex_lock_common+0x435/0x2400 [ 78.364138][ T4360] ? lock_chain_count+0x20/0x20 [ 78.369018][ T4360] ? tcm_alloc+0x1d/0x2c0 [ 78.373364][ T4360] ? mutex_lock_io_nested+0x60/0x60 [ 78.378586][ T4360] ? mutex_lock_io_nested+0x60/0x60 [ 78.383799][ T4360] mutex_lock_nested+0x17/0x20 [ 78.388598][ T4360] tcm_alloc+0x1d/0x2c0 [ 78.392760][ T4360] usb_get_function+0x59/0xa0 [ 78.397447][ T4360] config_usb_cfg_link+0x144/0x250 [ 78.402585][ T4360] configfs_symlink+0x5a4/0x13b0 [ 78.407547][ T4360] ? end_current_label_crit_section+0x14b/0x170 [ 78.413833][ T4360] ? common_perm+0x15d/0x1b0 [ 78.418475][ T4360] ? from_kgid+0x14f/0x6a0 [ 78.422939][ T4360] ? apparmor_path_symlink+0x1ac/0x230 [ 78.428453][ T4360] ? lookup_one_qstr_excl+0x11c/0x240 [ 78.433865][ T4360] ? detach_groups+0x370/0x370 [ 78.438656][ T4360] ? inode_permission+0xef/0x480 [ 78.443599][ T4360] ? bpf_lsm_inode_symlink+0x5/0x10 [ 78.448866][ T4360] ? security_inode_symlink+0xb2/0x100 [ 78.454333][ T4360] vfs_symlink+0x245/0x3d0 [ 78.458799][ T4360] do_symlinkat+0x1ab/0x6b0 [ 78.463324][ T4360] ? strncpy_from_user+0x1f4/0x350 [ 78.468463][ T4360] ? vfs_symlink+0x3d0/0x3d0 [ 78.473100][ T4360] __x64_sys_symlinkat+0x95/0xa0 [ 78.478066][ T4360] do_syscall_64+0x4c/0xa0 [ 78.482492][ T4360] ? clear_bhb_loop+0x30/0x80 [ 78.487183][ T4360] ? clear_bhb_loop+0x30/0x80 [ 78.491888][ T4360] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.497785][ T4360] RIP: 0033:0x7f46c038c159 [ 78.502220][ T4360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.521852][ T4360] RSP: 002b:00007f46be5e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 78.530532][ T4360] RAX: ffffffffffffffda RBX: 00007f46c0613fa0 RCX: 00007f46c038c159 [ 78.538536][ T4360] RDX: 00002000000003c0 RSI: ffffffffffffff9c RDI: 0000200000000380 [ 78.546541][ T4360] RBP: 00007f46c042306b R08: 0000000000000000 R09: 0000000000000000 [ 78.554714][ T4360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.562777][ T4360] R13: 00007f46c0614038 R14: 00007f46c0613fa0 R15: 00007ffee7823e68 [ 78.570777][ T4360] [ 78.579578][ T4191] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.862927][ T4191] usb 4-1: Using ep0 maxpacket: 8 [ 78.868592][ T4230] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.013077][ T4191] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 79.021824][ T4191] usb 4-1: config 0 has no interface number 0 [ 79.028533][ T4191] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 79.037810][ T4191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.047410][ T4191] usb 4-1: config 0 descriptor?? [ 79.253081][ T4191] viperboard 4-1:0.143: version 0.00 found at bus 004 address 002 [ 79.273383][ T4230] usb 1-1: Dual-Role OTG device on HNP port [ 79.293453][ T4191] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 79.302229][ T4191] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 79.310734][ T4230] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15 [ 79.319972][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.353043][ T4191] Using the BOT protocol [ 79.453619][ T4191] Using the UAS protocol [ 79.516665][ T4230] scsi host1: uas [ 79.542913][ C1] Missing nexus, ignoring command [ 80.289961][ T4230] usb 4-1: USB disconnect, device number 2 [ 86.658824][ T21] cfg80211: failed to load regulatory.db