last executing test programs: 4.084002921s ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x1000000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, 0x0}) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc020aed5, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) 3.665507591s ago: executing program 1 (id=7): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 3.329733949s ago: executing program 2 (id=8): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001100)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10) connect$inet(r0, &(0x7f0000001200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 3.040513536s ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/trace\x00', 0x66a42, 0x16a) 2.735167614s ago: executing program 2 (id=10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, 0x0) 2.519033549s ago: executing program 1 (id=11): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8], 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r2, 0x0, 0xfffffcd9) close_range(r0, 0xffffffffffffffff, 0x0) 2.396558662s ago: executing program 4 (id=5): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1000c094}, 0x4000c00) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xa}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xffe0}, {0xffff, 0xffff}, {0x14, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) 1.781403917s ago: executing program 3 (id=4): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x8, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x4, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x200007, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x466, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0x6, 0xa7, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1.65795221s ago: executing program 4 (id=12): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000d80)={0x24, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "a6f890ea"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1301"], 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) 1.590265652s ago: executing program 2 (id=13): mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) openat(0xffffff9c, &(0x7f0000000a00)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_mute_present\x00', 0x40100, 0x0) 1.399621786s ago: executing program 0 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)="86c4efc2a7", 0x5) 1.26996234s ago: executing program 0 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)="81", 0x1) 1.268921769s ago: executing program 3 (id=16): socket(0x840000000002, 0x3, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.23903369s ago: executing program 2 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f3c00000000000000010000"], 0x6a) 1.013233086s ago: executing program 0 (id=18): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) write(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 792.856021ms ago: executing program 0 (id=19): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c00048008f5010000000001200002800c000100706f8369637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) 730.407362ms ago: executing program 2 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers/vhci_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vhci_hcd.0\x00', 0xa) 602.312985ms ago: executing program 1 (id=21): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 452.874809ms ago: executing program 0 (id=22): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x161841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "b6a04f1bb4e3a33805c0240284054753afc5f0e68292e85065a4e99abb092fa1729f4755d39cd1b85b3a30bbc3547bb4991d589d6066bfb7362c765795a7f8a4", 0x38}, 0x48, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 106.007828ms ago: executing program 1 (id=23): mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='/dev/loop0,131072\x00', 0x12) 0s ago: executing program 0 (id=24): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$dupfd(r0, 0x406, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}, 0x80) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f2", @ANYRES64=r7], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 56.259792][ T3933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.270491][ T3933] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.111' (ED25519) to the list of known hosts. syzkaller login: [ 82.191136][ T4280] cgroup: Unknown subsys name 'net' [ 82.299589][ T4280] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.808942][ T4280] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 85.885856][ T4306] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.902550][ T4308] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.910672][ T4308] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.918857][ T4308] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.928031][ T4308] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.936028][ T4308] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.943788][ T4308] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.959765][ T4309] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.969933][ T4317] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.978940][ T4317] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.987702][ T4317] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.997306][ T4317] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.005505][ T4317] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.014154][ T4317] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.021716][ T4317] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.029035][ T4317] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.032100][ T4314] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.042837][ T4317] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.051515][ T4317] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.052683][ T4318] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.059032][ T4317] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.065880][ T4318] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.080815][ T4317] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.082509][ T4318] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.088379][ T4317] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.096823][ T4318] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.109597][ T4318] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.118201][ T4318] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.151203][ T4302] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.177285][ T4308] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.595635][ T4313] chnl_net:caif_netlink_parms(): no params data found [ 86.729044][ T4312] chnl_net:caif_netlink_parms(): no params data found [ 86.749541][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.772594][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.781406][ T4313] device bridge_slave_0 entered promiscuous mode [ 86.796583][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.804257][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.812478][ T4313] device bridge_slave_1 entered promiscuous mode [ 86.856188][ T4310] chnl_net:caif_netlink_parms(): no params data found [ 86.878325][ T4313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.893224][ T4299] chnl_net:caif_netlink_parms(): no params data found [ 86.904095][ T4301] chnl_net:caif_netlink_parms(): no params data found [ 86.937814][ T4313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.090075][ T4313] team0: Port device team_slave_0 added [ 87.133919][ T4313] team0: Port device team_slave_1 added [ 87.172076][ T4312] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.179309][ T4312] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.192442][ T4312] device bridge_slave_0 entered promiscuous mode [ 87.255429][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.269636][ T4312] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.278290][ T4312] device bridge_slave_1 entered promiscuous mode [ 87.322379][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.330618][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.340613][ T4301] device bridge_slave_0 entered promiscuous mode [ 87.356621][ T4313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.365771][ T4313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.397736][ T4313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.428853][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.437344][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.446257][ T4310] device bridge_slave_0 entered promiscuous mode [ 87.454293][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.461517][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.469763][ T4301] device bridge_slave_1 entered promiscuous mode [ 87.477780][ T4313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.485095][ T4313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.511288][ T4313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.585865][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.594159][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.604206][ T4310] device bridge_slave_1 entered promiscuous mode [ 87.620755][ T4312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.636111][ T4312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.645612][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.653130][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.662801][ T4299] device bridge_slave_0 entered promiscuous mode [ 87.710452][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.721139][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.730082][ T4299] device bridge_slave_1 entered promiscuous mode [ 87.740505][ T4301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.753079][ T4310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.766936][ T4312] team0: Port device team_slave_0 added [ 87.784847][ T4301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.798426][ T4310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.819459][ T4312] team0: Port device team_slave_1 added [ 87.855861][ T4299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.893559][ T4301] team0: Port device team_slave_0 added [ 87.909210][ T4299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.930524][ T4313] device hsr_slave_0 entered promiscuous mode [ 87.938465][ T4313] device hsr_slave_1 entered promiscuous mode [ 87.946795][ T4312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.954528][ T4312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.981174][ T4312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.996447][ T4310] team0: Port device team_slave_0 added [ 88.005432][ T4301] team0: Port device team_slave_1 added [ 88.023718][ T4299] team0: Port device team_slave_0 added [ 88.039879][ T4312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.047010][ T4312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.073966][ T4312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.086959][ T4310] team0: Port device team_slave_1 added [ 88.103959][ T4299] team0: Port device team_slave_1 added [ 88.159251][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.166887][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.193792][ T4318] Bluetooth: hci4: command 0x0409 tx timeout [ 88.193809][ T4314] Bluetooth: hci1: command 0x0409 tx timeout [ 88.201332][ T4318] Bluetooth: hci2: command 0x0409 tx timeout [ 88.214304][ T4301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.235999][ T4299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.244240][ T4299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.271371][ T4318] Bluetooth: hci3: command 0x0409 tx timeout [ 88.271393][ T4314] Bluetooth: hci0: command 0x0409 tx timeout [ 88.281241][ T4299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.301743][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.308836][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.335579][ T4301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.355815][ T4310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.363749][ T4310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.390992][ T4310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.403022][ T4299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.410108][ T4299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.438687][ T4299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.473677][ T4310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.480718][ T4310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.510338][ T4310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.554268][ T4312] device hsr_slave_0 entered promiscuous mode [ 88.562470][ T4312] device hsr_slave_1 entered promiscuous mode [ 88.569414][ T4312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.579274][ T4312] Cannot create hsr debugfs directory [ 88.608296][ T4301] device hsr_slave_0 entered promiscuous mode [ 88.615389][ T4301] device hsr_slave_1 entered promiscuous mode [ 88.623540][ T4301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.631253][ T4301] Cannot create hsr debugfs directory [ 88.697939][ T4299] device hsr_slave_0 entered promiscuous mode [ 88.705881][ T4299] device hsr_slave_1 entered promiscuous mode [ 88.713042][ T4299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.721161][ T4299] Cannot create hsr debugfs directory [ 88.796343][ T4310] device hsr_slave_0 entered promiscuous mode [ 88.803953][ T4310] device hsr_slave_1 entered promiscuous mode [ 88.811668][ T4310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.819586][ T4310] Cannot create hsr debugfs directory [ 89.140402][ T4313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.158114][ T4313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.173219][ T4313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.189759][ T4313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.220647][ T4312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.246436][ T4312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.258838][ T4312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.279346][ T4312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.350027][ T4301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.373132][ T4301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.382909][ T4301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.402844][ T4301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.465312][ T4313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.488978][ T4299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.505408][ T4299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.545954][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.559244][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.571599][ T4299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.613622][ T4299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.625009][ T4313] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.660612][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.676773][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.688410][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.696409][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.705549][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.743229][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.753746][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.763412][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.770568][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.781701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.810003][ T4310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.826705][ T4310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.839400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.849665][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.864162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.874319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.895001][ T4310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.905090][ T4310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.927809][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.937202][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.946528][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.956393][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.973596][ T4312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.983704][ T4301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.996090][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.007681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.035009][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.064875][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.074912][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.083525][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.092543][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.122518][ T4312] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.131160][ T4301] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.153525][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.163649][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.172771][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.180012][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.237491][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.248402][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.259455][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.271099][ T4319] Bluetooth: hci2: command 0x041b tx timeout [ 90.277697][ T4319] Bluetooth: hci1: command 0x041b tx timeout [ 90.277706][ T4318] Bluetooth: hci4: command 0x041b tx timeout [ 90.288800][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.297544][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.308068][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.332051][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.341662][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.348806][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.357126][ T4319] Bluetooth: hci0: command 0x041b tx timeout [ 90.363256][ T4318] Bluetooth: hci3: command 0x041b tx timeout [ 90.371683][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.380728][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.389657][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.396910][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.405994][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.420217][ T4299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.448023][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.472331][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.485921][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.500132][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.510381][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.552028][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.568051][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.594151][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.608922][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.618348][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.633216][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.642622][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.653571][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.668460][ T4299] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.699878][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.710816][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.720326][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.734949][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.747369][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.756822][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.766613][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.775795][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.784566][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.793489][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.819534][ T4312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.837230][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.860406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.869665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.878803][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.886241][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.898739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.907491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.919318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.929124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.937845][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.945035][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.954416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.968095][ T4310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.981646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.989365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.030657][ T4313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.059493][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.072634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.123819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.159898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.182851][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.206796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.236006][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.264836][ T4310] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.283723][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.293565][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.313039][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.322726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.382376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.402073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.427401][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.451700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.471602][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.478772][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.497988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.508448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.523012][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.530176][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.544943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.565027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.578090][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.594759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.606416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.619336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.640023][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.651484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.659596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.676264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.690815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.703618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.714747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.727984][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.746171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.768516][ T4313] device veth0_vlan entered promiscuous mode [ 91.823206][ T4301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.830489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.848630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.859899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.878277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.904431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.916225][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.933314][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.979634][ T4312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.992062][ T4313] device veth1_vlan entered promiscuous mode [ 92.010179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.033106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.034886][ T22] cfg80211: failed to load regulatory.db [ 92.123348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.152223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.215389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.249277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.290253][ T4313] device veth0_macvtap entered promiscuous mode [ 92.306158][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.322959][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.341980][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.352209][ T4314] Bluetooth: hci1: command 0x040f tx timeout [ 92.352229][ T4319] Bluetooth: hci4: command 0x040f tx timeout [ 92.358316][ T4314] Bluetooth: hci2: command 0x040f tx timeout [ 92.397916][ T4312] device veth0_vlan entered promiscuous mode [ 92.408553][ T4313] device veth1_macvtap entered promiscuous mode [ 92.431167][ T4319] Bluetooth: hci3: command 0x040f tx timeout [ 92.431767][ T4314] Bluetooth: hci0: command 0x040f tx timeout [ 92.449674][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.475460][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.514066][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.564520][ T4312] device veth1_vlan entered promiscuous mode [ 92.606116][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.621834][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.641817][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.674430][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.706478][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.724630][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.733721][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.762028][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.792245][ T4312] device veth0_macvtap entered promiscuous mode [ 92.819151][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.832477][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.840052][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.865980][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.878241][ T4312] device veth1_macvtap entered promiscuous mode [ 92.889612][ T4299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.902596][ T4313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.914098][ T4313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.927272][ T4313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.944179][ T4313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.959075][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.031774][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.043623][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.082949][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.097511][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.110298][ T4312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.133888][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.141888][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.149789][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.160529][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.172537][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.182990][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.206102][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.217080][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.230509][ T4312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.248928][ T4310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.275367][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.294605][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.306966][ T4312] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.316822][ T4312] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.326102][ T4312] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.336358][ T4312] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.370247][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.389985][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.399737][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.413384][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.432743][ T4301] device veth0_vlan entered promiscuous mode [ 93.465773][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.474831][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.483550][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.493138][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.503313][ T4299] device veth0_vlan entered promiscuous mode [ 93.522021][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.530293][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.570595][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.582456][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.592602][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.608080][ T4301] device veth1_vlan entered promiscuous mode [ 93.628668][ T4299] device veth1_vlan entered promiscuous mode [ 93.707515][ T4376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.723452][ T4376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.739424][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.751731][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.761797][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.770300][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.781872][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.798943][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.807986][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.817329][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.825814][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.835043][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.846336][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.855893][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.879295][ T4310] device veth0_vlan entered promiscuous mode [ 93.910827][ T4376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.918762][ T4376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.927778][ T4301] device veth0_macvtap entered promiscuous mode [ 93.945303][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.956354][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.967045][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.978898][ T4310] device veth1_vlan entered promiscuous mode [ 93.990029][ T4301] device veth1_macvtap entered promiscuous mode [ 94.008836][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.018462][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.040365][ T4299] device veth0_macvtap entered promiscuous mode [ 94.070235][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.085828][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.099187][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.119066][ T4299] device veth1_macvtap entered promiscuous mode [ 94.163080][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.175266][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.188353][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.235281][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.259629][ T4391] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.278213][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.286461][ T26] audit: type=1800 audit(1785233506.575:2): pid=4389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3" name="ipv4_address" dev="configfs" ino=33966 res=0 errno=0 [ 94.340355][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.372152][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.389569][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.407104][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.417275][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.431121][ T4314] Bluetooth: hci2: command 0x0419 tx timeout [ 94.437199][ T4314] Bluetooth: hci1: command 0x0419 tx timeout [ 94.443429][ T4318] Bluetooth: hci4: command 0x0419 tx timeout [ 94.455012][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.485693][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.501391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.511761][ T4319] Bluetooth: hci0: command 0x0419 tx timeout [ 94.515031][ T4314] Bluetooth: hci3: command 0x0419 tx timeout [ 94.539188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.557469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.566604][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.581239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.593355][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.615315][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.627682][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.643906][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.659053][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.673530][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.685479][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.695408][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.706102][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.716726][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.734657][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.747760][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.766339][ T4396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6'. [ 94.780590][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.796284][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.805757][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.816931][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.826078][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.835851][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.845747][ T4397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6'. [ 94.857848][ T4301] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.871527][ T4397] Zero length message leads to an empty skb [ 94.871625][ T4301] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.888948][ T4301] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.898219][ T4301] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.920182][ T4299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.939350][ T4299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.948979][ T4299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.965278][ T4299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.981788][ T4310] device veth0_macvtap entered promiscuous mode [ 95.069966][ T4310] device veth1_macvtap entered promiscuous mode [ 95.148755][ T4376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.176686][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.187625][ T4376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.210189][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.223387][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.240003][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.258053][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.268935][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.288982][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.300529][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.313771][ T4310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.327802][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.338653][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.348241][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.368877][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.383338][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.401970][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.413836][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.423900][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.435809][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.447112][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.457996][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.479725][ T4310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.514985][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.531448][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.545769][ T4310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.558043][ T4310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.568247][ T4310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.577419][ T4310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.642710][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.650615][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.698697][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.723459][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.748154][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.761301][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.890707][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.938780][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.951353][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.005643][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.028089][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.059750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.082677][ T4412] netlink: 'syz.4.5': attribute type 13 has an invalid length. [ 96.127372][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.146992][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.162441][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.224547][ T4348] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 96.344741][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.361115][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.395479][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.425398][ T4348] usb 2-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 96.440458][ T4348] usb 2-1: config 0 interface 0 has no altsetting 0 [ 96.491927][ T4348] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 96.503266][ T4417] device syzkaller0 entered promiscuous mode [ 96.516113][ T4348] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 96.545017][ T4348] usb 2-1: Product: syz [ 96.549284][ T4348] usb 2-1: Manufacturer: syz [ 96.586266][ T4348] usb 2-1: SerialNumber: syz [ 96.619197][ T4348] usb 2-1: config 0 descriptor?? [ 96.803193][ T4348] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 96.849199][ T26] audit: type=1800 audit(1785233509.145:3): pid=4426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.13" name="c_mute_present" dev="configfs" ino=33751 res=0 errno=0 [ 96.972053][ T4423] udevd[4423]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.028111][ T4349] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.084385][ T4348] usb 2-1: USB disconnect, device number 2 [ 97.223941][ T4349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.238858][ T4434] syz.2.17 uses obsolete (PF_INET,SOCK_PACKET) [ 97.256450][ T4349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.288175][ T4349] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 97.301681][ T4349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.356889][ T4349] usb 5-1: config 0 descriptor?? [ 97.597935][ T4439] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19'. [ 97.748677][ T4441] vhci_hcd vhci_hcd.0: remove, state 4 [ 97.769341][ T4441] usb usb34: USB disconnect, device number 1 [ 97.809715][ T4349] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 97.878077][ T4349] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input5 [ 97.936819][ T9] vhci_hcd: stop threads [ 97.942759][ T9] vhci_hcd: release socket [ 97.969257][ T9] vhci_hcd: disconnect device [ 97.988142][ T9] vhci_hcd: stop threads [ 97.998409][ T4422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.007778][ T9] vhci_hcd: release socket [ 98.019152][ T9] vhci_hcd: disconnect device [ 98.025664][ T9] vhci_hcd: stop threads [ 98.030030][ T9] vhci_hcd: release socket [ 98.041255][ T4422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.073757][ T9] vhci_hcd: disconnect device [ 98.116922][ T47] vhci_hcd: stop threads [ 98.126829][ T47] vhci_hcd: release socket [ 98.140757][ T4349] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 98.151719][ T47] vhci_hcd: disconnect device [ 98.205393][ T47] vhci_hcd: stop threads [ 98.217899][ T47] vhci_hcd: release socket [ 98.227353][ T47] vhci_hcd: disconnect device [ 98.249835][ T4349] usb 5-1: USB disconnect, device number 2 [ 98.281269][ T47] vhci_hcd: stop threads [ 98.285599][ T47] vhci_hcd: release socket [ 98.290088][ T47] vhci_hcd: disconnect device [ 98.406279][ T47] vhci_hcd: stop threads [ 98.410698][ T47] vhci_hcd: release socket [ 98.452942][ T47] vhci_hcd: disconnect device [ 98.460513][ T47] vhci_hcd: stop threads [ 98.470374][ T47] vhci_hcd: release socket [ 98.482160][ T47] vhci_hcd: disconnect device [ 98.486983][ T4441] vhci_hcd vhci_hcd.0: USB bus 34 deregistered [ 98.532531][ T4441] vhci_hcd vhci_hcd.0: remove, state 4 [ 98.538259][ T4441] usb usb33: USB disconnect, device number 1 [ 98.629893][ T4441] vhci_hcd vhci_hcd.0: USB bus 33 deregistered [ 98.640683][ T9] vhci_hcd: stop threads [ 98.645187][ T9] vhci_hcd: release socket [ 98.649649][ T9] vhci_hcd: disconnect device [ 98.704205][ T9] ================================================================== [ 98.712551][ T9] BUG: KASAN: use-after-free in __lock_acquire+0x107/0x7c40 [ 98.720110][ T9] Read of size 8 at addr ffff888146f10440 by task kworker/u4:0/9 [ 98.728499][ T9] [ 98.730914][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 98.738295][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.748523][ T9] Workqueue: usbip_event event_handler [ 98.754042][ T9] Call Trace: [ 98.757359][ T9] [ 98.760324][ T9] dump_stack_lvl+0x188/0x24e [ 98.765063][ T9] ? __lock_acquire+0x7c40/0x7c40 [ 98.770145][ T9] ? show_regs_print_info+0x12/0x12 [ 98.775417][ T9] ? load_image+0x410/0x410 [ 98.780060][ T9] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 98.785586][ T9] ? __virt_addr_valid+0x188/0x540 [ 98.790765][ T9] ? __virt_addr_valid+0x467/0x540 [ 98.795959][ T9] ? __lock_acquire+0x107/0x7c40 [ 98.800978][ T9] print_report+0xa8/0x210 [ 98.805644][ T9] kasan_report+0x10b/0x140 [ 98.810407][ T9] ? __lock_acquire+0x107/0x7c40 [ 98.815588][ T9] __lock_acquire+0x107/0x7c40 [ 98.820509][ T9] ? __sched_text_start+0x8/0x8 [ 98.825423][ T9] ? prb_read_valid+0x60/0x60 [ 98.830153][ T9] ? llist_add_batch+0x12b/0x180 [ 98.835156][ T9] ? preempt_schedule+0xbc/0xd0 [ 98.840163][ T9] ? verify_lock_unused+0x140/0x140 [ 98.845435][ T9] ? preempt_schedule_common+0xa5/0xd0 [ 98.850983][ T9] ? preempt_schedule+0xbc/0xd0 [ 98.855898][ T9] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 98.861338][ T9] ? __irq_work_queue_local+0x12c/0x190 [ 98.866950][ T9] ? irq_work_queue+0xb8/0x140 [ 98.871782][ T9] ? __wake_up_klogd+0xd9/0x100 [ 98.876691][ T9] lock_acquire+0x1bb/0x4a0 [ 98.881255][ T9] ? event_handler+0x2a5/0x460 [ 98.886197][ T9] ? lock_chain_count+0x20/0x20 [ 98.888500][ T4447] fido_id[4447]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 98.891086][ T9] ? read_lock_is_recursive+0x10/0x10 [ 98.891126][ T9] _raw_spin_lock_irqsave+0xb0/0x100 [ 98.916005][ T9] ? event_handler+0x2a5/0x460 [ 98.920823][ T9] ? _raw_spin_lock+0x40/0x40 [ 98.925576][ T9] ? vhci_shutdown_connection+0x3d5/0x580 [ 98.931348][ T9] event_handler+0x2a5/0x460 [ 98.936088][ T9] ? process_one_work+0x7b4/0x1160 [ 98.941267][ T9] process_one_work+0x8ab/0x1160 [ 98.946276][ T9] ? worker_detach_from_pool+0x240/0x240 [ 98.951967][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 98.957044][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 98.962643][ T9] ? wq_worker_running+0x97/0x190 [ 98.967728][ T9] worker_thread+0xaf5/0x12a0 [ 98.972502][ T9] kthread+0x29d/0x330 [ 98.976655][ T9] ? worker_clr_flags+0x1a0/0x1a0 [ 98.981730][ T9] ? kthread_blkcg+0xd0/0xd0 [ 98.986408][ T9] ret_from_fork+0x1f/0x30 [ 98.990885][ T9] [ 98.993940][ T9] [ 98.996292][ T9] Allocated by task 1: [ 99.000431][ T9] kasan_set_track+0x4b/0x70 [ 99.005075][ T9] __kasan_kmalloc+0x8e/0xa0 [ 99.009758][ T9] __kmalloc+0xb3/0x240 [ 99.013986][ T9] __usb_create_hcd+0x5f/0x830 [ 99.018886][ T9] vhci_hcd_probe+0xff/0x370 [ 99.023521][ T9] platform_probe+0x137/0x1c0 [ 99.028334][ T9] really_probe+0x24a/0xb40 [ 99.032875][ T9] __driver_probe_device+0x1f5/0x390 [ 99.038210][ T9] driver_probe_device+0x4f/0x420 [ 99.043278][ T9] __device_attach_driver+0x2c6/0x510 [ 99.048698][ T9] bus_for_each_drv+0x184/0x210 [ 99.053589][ T9] __device_attach+0x2a7/0x480 [ 99.058402][ T9] bus_probe_device+0xba/0x1d0 [ 99.063215][ T9] device_add+0xbcf/0x1050 [ 99.067687][ T9] platform_device_add+0x4bf/0x830 [ 99.072936][ T9] vhci_hcd_init+0x3c7/0x4f1 [ 99.077621][ T9] do_one_initcall+0x257/0x800 [ 99.082466][ T9] do_initcall_level+0x13d/0x1ed [ 99.087547][ T9] do_initcalls+0x4b/0x8a [ 99.091921][ T9] kernel_init_freeable+0x401/0x5ab [ 99.097173][ T9] kernel_init+0x19/0x1b0 [ 99.101553][ T9] ret_from_fork+0x1f/0x30 [ 99.106026][ T9] [ 99.108429][ T9] Freed by task 4441: [ 99.112477][ T9] kasan_set_track+0x4b/0x70 [ 99.117151][ T9] kasan_save_free_info+0x27/0x40 [ 99.122241][ T9] ____kasan_slab_free+0x126/0x1f0 [ 99.127489][ T9] slab_free_freelist_hook+0x133/0x1b0 [ 99.132996][ T9] __kmem_cache_free+0xb6/0x200 [ 99.137892][ T9] vhci_hcd_remove+0xe0/0x100 [ 99.142696][ T9] platform_remove+0x92/0xe0 [ 99.147337][ T9] device_release_driver_internal+0x47d/0x7c0 [ 99.153510][ T9] unbind_store+0x2e2/0x300 [ 99.158603][ T9] kernfs_fop_write_iter+0x3a0/0x520 [ 99.164947][ T9] vfs_write+0x482/0x9a0 [ 99.169248][ T9] ksys_write+0x14d/0x260 [ 99.173632][ T9] do_syscall_64+0x4c/0xa0 [ 99.178104][ T9] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.184230][ T9] [ 99.186589][ T9] The buggy address belongs to the object at ffff888146f10000 [ 99.186589][ T9] which belongs to the cache kmalloc-8k of size 8192 [ 99.200685][ T9] The buggy address is located 1088 bytes inside of [ 99.200685][ T9] 8192-byte region [ffff888146f10000, ffff888146f12000) [ 99.214190][ T9] [ 99.216581][ T9] The buggy address belongs to the physical page: [ 99.223042][ T9] page:ffffea00051bc400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x146f10 [ 99.233337][ T9] head:ffffea00051bc400 order:3 compound_mapcount:0 compound_pincount:0 [ 99.241707][ T9] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 99.249939][ T9] raw: 057ff00000010200 0000000000000000 dead000000000122 ffff888017442280 [ 99.258580][ T9] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 99.267643][ T9] page dumped because: kasan: bad access detected [ 99.274200][ T9] page_owner tracks the page as allocated [ 99.279959][ T9] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16366770066, free_ts 0 [ 99.299903][ T9] post_alloc_hook+0x173/0x1a0 [ 99.304735][ T9] get_page_from_freelist+0x206b/0x2180 [ 99.310342][ T9] __alloc_pages+0x1ec/0x4f0 [ 99.314991][ T9] alloc_page_interleave+0x24/0x1e0 [ 99.320255][ T9] alloc_slab_page+0x5d/0x180 [ 99.325106][ T9] new_slab+0x87/0x2d0 [ 99.329224][ T9] ___slab_alloc+0xbc5/0x1240 [ 99.333957][ T9] __kmem_cache_alloc_node+0x126/0x270 [ 99.339591][ T9] __kmalloc+0xa3/0x240 [ 99.343890][ T9] __usb_create_hcd+0x5f/0x830 [ 99.348719][ T9] vhci_hcd_probe+0xff/0x370 [ 99.353364][ T9] platform_probe+0x137/0x1c0 [ 99.358099][ T9] really_probe+0x24a/0xb40 [ 99.362659][ T9] __driver_probe_device+0x1f5/0x390 [ 99.367996][ T9] driver_probe_device+0x4f/0x420 [ 99.373148][ T9] __device_attach_driver+0x2c6/0x510 [ 99.378582][ T9] page_owner free stack trace missing [ 99.383987][ T9] [ 99.386379][ T9] Memory state around the buggy address: [ 99.392047][ T9] ffff888146f10300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.400149][ T9] ffff888146f10380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.408261][ T9] >ffff888146f10400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.416389][ T9] ^ [ 99.422579][ T9] ffff888146f10480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.431480][ T9] ffff888146f10500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.439584][ T9] ================================================================== [ 99.447710][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 99.454951][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 99.462307][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 99.472417][ T9] Workqueue: usbip_event event_handler [ 99.478025][ T9] Call Trace: [ 99.481355][ T9] [ 99.484415][ T9] dump_stack_lvl+0x188/0x24e [ 99.489144][ T9] ? memcpy+0x3c/0x60 [ 99.493195][ T9] ? show_regs_print_info+0x12/0x12 [ 99.498461][ T9] ? load_image+0x410/0x410 [ 99.503107][ T9] panic+0x2d3/0x710 [ 99.507050][ T9] ? __lock_acquire+0x7c40/0x7c40 [ 99.512184][ T9] ? bpf_jit_dump+0xd0/0xd0 [ 99.516916][ T9] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 99.522870][ T9] ? _raw_spin_unlock+0x40/0x40 [ 99.527784][ T9] check_panic_on_warn+0x80/0xa0 [ 99.532785][ T9] ? __lock_acquire+0x107/0x7c40 [ 99.537793][ T9] end_report+0x66/0x110 [ 99.542138][ T9] kasan_report+0x118/0x140 [ 99.546929][ T9] ? __lock_acquire+0x107/0x7c40 [ 99.552052][ T9] __lock_acquire+0x107/0x7c40 [ 99.556883][ T9] ? __sched_text_start+0x8/0x8 [ 99.561784][ T9] ? prb_read_valid+0x60/0x60 [ 99.566550][ T9] ? llist_add_batch+0x12b/0x180 [ 99.571547][ T9] ? preempt_schedule+0xbc/0xd0 [ 99.576446][ T9] ? verify_lock_unused+0x140/0x140 [ 99.581696][ T9] ? preempt_schedule_common+0xa5/0xd0 [ 99.587210][ T9] ? preempt_schedule+0xbc/0xd0 [ 99.592116][ T9] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 99.597539][ T9] ? __irq_work_queue_local+0x12c/0x190 [ 99.603144][ T9] ? irq_work_queue+0xb8/0x140 [ 99.607968][ T9] ? __wake_up_klogd+0xd9/0x100 [ 99.613485][ T9] lock_acquire+0x1bb/0x4a0 [ 99.618141][ T9] ? event_handler+0x2a5/0x460 [ 99.622968][ T9] ? lock_chain_count+0x20/0x20 [ 99.627886][ T9] ? read_lock_is_recursive+0x10/0x10 [ 99.633322][ T9] _raw_spin_lock_irqsave+0xb0/0x100 [ 99.638669][ T9] ? event_handler+0x2a5/0x460 [ 99.643479][ T9] ? _raw_spin_lock+0x40/0x40 [ 99.648217][ T9] ? vhci_shutdown_connection+0x3d5/0x580 [ 99.654007][ T9] event_handler+0x2a5/0x460 [ 99.658752][ T9] ? process_one_work+0x7b4/0x1160 [ 99.663925][ T9] process_one_work+0x8ab/0x1160 [ 99.668921][ T9] ? worker_detach_from_pool+0x240/0x240 [ 99.674715][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 99.679823][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 99.685466][ T9] ? wq_worker_running+0x97/0x190 [ 99.690989][ T9] worker_thread+0xaf5/0x12a0 [ 99.695933][ T9] kthread+0x29d/0x330 [ 99.700755][ T9] ? worker_clr_flags+0x1a0/0x1a0 [ 99.705841][ T9] ? kthread_blkcg+0xd0/0xd0 [ 99.710585][ T9] ret_from_fork+0x1f/0x30 [ 99.715081][ T9] [ 99.718893][ T9] Kernel Offset: disabled [ 99.723236][ T9] Rebooting in 86400 seconds..