last executing test programs: 9.877876621s ago: executing program 1 (id=473): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x8, 0x1, 0x13}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 9.773575276s ago: executing program 0 (id=476): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x845, 0x9, 0xfffffffffffffffd, 0x8, 0x10000, 0x0, 0x4002004c2, 0x2000000000fff, 0x1400000000000000, 0x0, 0x3fd, 0x1080, 0x3, 0x0, 0x8, 0x4000000000008d], 0x100000, 0x80}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.727651688s ago: executing program 4 (id=477): socket$rds(0x15, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe2(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000600)='4', 0x1}], 0x1, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 9.724112069s ago: executing program 1 (id=478): syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x1c}}, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 8.593303385s ago: executing program 1 (id=479): openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, 'syz0\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x7, 0x6, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x43, 0x81, 0x80, 0xe8de, 0xfffffffffffffff9, 0x9, 0x201, 0x9, 0x1, 0x8, 0x1, 0x4, 0x0, 0x8000, 0x8, 0xa36, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x8, 0x1ff, 0x10000, 0x2, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x8, 0x8000000000000003, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x1, 0xec7, 0x646, 0xc58e, 0x5, 0x11ad, 0x5, 0x6, 0x8000, 0x100080, 0x7f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x2, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x3, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0xfffffffffffffff9, 0x851a, 0x5e997b8e, 0x0, 0x7, 0x6, 0x4, 0x100, 0x1000000004, 0x3ff, 0x6, 0x0, 0xffffffffffffff95, 0xa, 0x108000001, 0xcc7e, 0x8, 0x0, 0x6, 0x800000000006, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x0, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec2, 0x1, 0x5, 0xfff, 0x0, 0x80]}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 8.331781497s ago: executing program 4 (id=481): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, r0, 0x7d243a6ea807936d, 0x70bd2c, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x815}, 0x40110) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) 6.964577665s ago: executing program 0 (id=482): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 6.923826627s ago: executing program 4 (id=483): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, r0, 0x7d243a6ea807936d, 0x70bd2c, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x815}, 0x40110) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) 6.681908979s ago: executing program 4 (id=484): openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000200)=@req3={0xffff, 0xfffffffb, 0x80000000, 0x0, 0x7, 0xe, 0x7fff}, 0x1c) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, 'syz0\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x7, 0x6, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x43, 0x81, 0x80, 0xe8de, 0xfffffffffffffff9, 0x9, 0x201, 0x9, 0x1, 0x8, 0x1, 0x4, 0x0, 0x8000, 0x8, 0xa36, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x8, 0x1ff, 0x10000, 0x2, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x8, 0x8000000000000003, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x1, 0xec7, 0x646, 0xc58e, 0x5, 0x11ad, 0x5, 0x6, 0x8000, 0x100080, 0x7f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x2, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x3, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0xfffffffffffffff9, 0x851a, 0x5e997b8e, 0x0, 0x7, 0x6, 0x4, 0x100, 0x1000000004, 0x3ff, 0x6, 0x0, 0xffffffffffffff95, 0xa, 0x108000001, 0xcc7e, 0x8, 0x0, 0x6, 0x800000000006, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x0, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec2, 0x1, 0x5, 0xfff, 0x0, 0x80]}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) 5.338879756s ago: executing program 0 (id=485): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000080)={@private=0xa010100, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x8, 0x16, 0xfffffffe, 0x3}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r5, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe3d, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x8, 0x0, 0x0}}, 0x10) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000000) open$dir(0x0, 0x8001, 0x101) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1, 0xc, 0x10}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000340)={0x3, 0x0, 0x27f}) syz_usb_connect$midi(0x0, 0x44, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x499, 0x103e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x1, 0x1, 0xff, 0x50, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1a, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x8, 0xc8}], [{{0x9, 0x5, 0x4, 0xc, 0x40, 0x7, 0x6, 0x3, {0x4}}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x9, 0x4, 0x4, {0x4}}}]}}}}}]}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 5.175067754s ago: executing program 4 (id=487): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) write$binfmt_script(r4, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write(0xffffffffffffffff, &(0x7f0000000100)="240000005a001f001007f41108", 0xd) ioctl$sock_ifreq(0xffffffffffffffff, 0x8993, 0x0) 4.232397431s ago: executing program 3 (id=489): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) prctl$PR_GET_PDEATHSIG(0x2, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) 4.230816991s ago: executing program 1 (id=490): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) 3.621815031s ago: executing program 2 (id=491): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) 2.727121945s ago: executing program 1 (id=492): bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket(0x400000000010, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4955, &(0x7f0000000300)={0x0, 0xe1d6, 0x2, 0x2, 0x144}, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') getpid() socket(0x2b, 0x1, 0x1) 2.636254229s ago: executing program 3 (id=493): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x845, 0x9, 0xfffffffffffffffd, 0x8, 0x10000, 0x0, 0x4002004c2, 0x2000000000fff, 0x1400000000000000, 0x0, 0x3fd, 0x1080, 0x3, 0x0, 0x8, 0x4000000000008d], 0x100000, 0x80}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.575526523s ago: executing program 2 (id=494): openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(0x0, 0x0) io_submit(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) dup3(r5, r3, 0x0) 2.101620856s ago: executing program 2 (id=495): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) 2.100316646s ago: executing program 0 (id=496): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) 1.932332805s ago: executing program 1 (id=497): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xa3, 0xfffffffffffffff7, 0x40, 0xfffffffffffffffb}}, @nested_load_code={0x12e, 0x5b, {0x2, "b9800000c00f3235008000000f30420f01f836410f23b4410f01c9431026c4a17e121dfe870000460f013bc4c33d426e071d66ba2000b87d1d8e71ef2e2666410f6f12"}}], 0x93}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000007c0)=[@wr_crn={0x46, 0x20, {0x4, 0x6}}, @wr_drn={0x6e, 0x20, {0x0, 0x5}}, @rdmsr={0x32, 0x18, {0x181}}, @code={0xa, 0x53, {"67735a2e0f019ee0000000650f01cfab66ba420066b89b1566ef4d0fc79ee388ef1966450f38803266baf80cb8947a2c89ef66bafc0ced40e80018000043d07c7800"}}, @out_dx={0xaa, 0x28, {0x5b77, 0x5, 0x8}}, @cpuid={0x14, 0x18, {0x10001, 0x9}}, @rdmsr={0x32, 0x18, {0xb7d}}, @rdmsr={0x32, 0x18, {0x2f0}}, @out_dx={0xaa, 0x28, {0xe6cb, 0x3, 0x80000000004}}, @code={0xa, 0x46, {"26640f35360f060f2084b9f70b00000f32420fc75d00c461fc298f0a630000c462c3f521c40299ac66410f01c9b8010000000f01d9"}}, @rdmsr={0x32, 0x18, {0x966}}, @rdmsr={0x32, 0x18, {0x4000009e}}, @nested_create_vm={0x12d, 0x18, 0x1}, @in_dx={0x82, 0x20, {0xbde0, 0x7}}], 0x1f1}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.83057928s ago: executing program 3 (id=498): ftruncate(0xffffffffffffffff, 0x51a9497) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5, 0xfffffffc}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0) 1.692107487s ago: executing program 3 (id=499): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, r0, 0x7d243a6ea807936d, 0x70bd2c, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x815}, 0x40110) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) 1.639644899s ago: executing program 2 (id=500): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) 1.60999568s ago: executing program 4 (id=501): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.523843194s ago: executing program 0 (id=502): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)={0x2, 0x0, [{0x1, 0xffb, &(0x7f0000001d80)=""/4091}, {0x0, 0x83, &(0x7f0000000a00)=""/131}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 1.523122425s ago: executing program 3 (id=503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) 82.214336ms ago: executing program 2 (id=504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000000c0)={0x1c, r1, 0x5, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x810) 81.171666ms ago: executing program 3 (id=505): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x2}) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) io_uring_setup(0x4fee, 0x0) 874.75µs ago: executing program 2 (id=506): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043ef50d", @ANYBLOB="53cec8"], 0xf8) 0s ago: executing program 0 (id=507): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x1c, 0x20, 0xf4db158ec847dc81, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.194' (ED25519) to the list of known hosts. [ 48.312494][ T4172] cgroup: Unknown subsys name 'net' [ 48.450843][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.662975][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.491750][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 51.534323][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 51.620510][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 51.658725][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 51.674093][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.681709][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.690052][ T4191] device bridge_slave_0 entered promiscuous mode [ 51.701762][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.708977][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.717053][ T4191] device bridge_slave_1 entered promiscuous mode [ 51.737952][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 51.783821][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.807540][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.814617][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.822825][ T4193] device bridge_slave_0 entered promiscuous mode [ 51.831848][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.862314][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.869538][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.877723][ T4193] device bridge_slave_1 entered promiscuous mode [ 51.940624][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.952142][ T4191] team0: Port device team_slave_0 added [ 51.958414][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.965846][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.973525][ T4187] device bridge_slave_0 entered promiscuous mode [ 51.984698][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.992191][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.000342][ T4187] device bridge_slave_1 entered promiscuous mode [ 52.007893][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.015252][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.023839][ T4195] device bridge_slave_0 entered promiscuous mode [ 52.033008][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.044148][ T4191] team0: Port device team_slave_1 added [ 52.074326][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.081534][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.089689][ T4195] device bridge_slave_1 entered promiscuous mode [ 52.116367][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.123331][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.150049][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.174388][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.181846][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.189785][ T4184] device bridge_slave_0 entered promiscuous mode [ 52.199395][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.211322][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.229821][ T4193] team0: Port device team_slave_0 added [ 52.236754][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.243715][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.270281][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.283455][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.293354][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.300871][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.308751][ T4184] device bridge_slave_1 entered promiscuous mode [ 52.324178][ T4193] team0: Port device team_slave_1 added [ 52.336566][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.376983][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.384145][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.410846][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.437434][ T4187] team0: Port device team_slave_0 added [ 52.446108][ T4195] team0: Port device team_slave_0 added [ 52.453649][ T4195] team0: Port device team_slave_1 added [ 52.460113][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.467420][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.493531][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.506652][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.517542][ T4187] team0: Port device team_slave_1 added [ 52.524720][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.594965][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.602425][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.628605][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.645419][ T4191] device hsr_slave_0 entered promiscuous mode [ 52.652412][ T4191] device hsr_slave_1 entered promiscuous mode [ 52.659827][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.667216][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.693772][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.706961][ T4184] team0: Port device team_slave_0 added [ 52.713195][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.720204][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.746358][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.763745][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.771178][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.797378][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.814938][ T4184] team0: Port device team_slave_1 added [ 52.860897][ T4193] device hsr_slave_0 entered promiscuous mode [ 52.869551][ T4193] device hsr_slave_1 entered promiscuous mode [ 52.876298][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.884096][ T4193] Cannot create hsr debugfs directory [ 52.890607][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.897797][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.924143][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.936297][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.943246][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.969644][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.994388][ T4195] device hsr_slave_0 entered promiscuous mode [ 53.001785][ T4195] device hsr_slave_1 entered promiscuous mode [ 53.008524][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.016395][ T4195] Cannot create hsr debugfs directory [ 53.064702][ T4187] device hsr_slave_0 entered promiscuous mode [ 53.071640][ T4187] device hsr_slave_1 entered promiscuous mode [ 53.078444][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.086272][ T4187] Cannot create hsr debugfs directory [ 53.160491][ T4184] device hsr_slave_0 entered promiscuous mode [ 53.166190][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 53.173210][ T4184] device hsr_slave_1 entered promiscuous mode [ 53.180214][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.187835][ T4184] Cannot create hsr debugfs directory [ 53.255652][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 53.267310][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 53.273519][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 53.335716][ T1110] Bluetooth: hci4: command 0x0409 tx timeout [ 53.440230][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.451672][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.460978][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.471093][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.513915][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.541115][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.553974][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.574279][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.609927][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.620933][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.631088][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.668649][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.687953][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.717681][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.728621][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.738559][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.750008][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.759151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.770391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.786276][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.823956][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.833163][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.843441][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.850828][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.862325][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.877297][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.892896][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.914427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.923607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.932705][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.939923][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.950430][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.962455][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.991113][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.000685][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.017039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.027975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.046537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.072967][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.082315][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.091395][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.101818][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.118061][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.132574][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.144646][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.166385][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.174852][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.214493][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.226780][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.248370][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.263126][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.278393][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.290061][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.300001][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.328024][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.342618][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.352080][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.361242][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.368330][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.382449][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.391192][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.400072][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.408640][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.415733][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.424069][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.432969][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.441613][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.448690][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.461035][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.469217][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.480020][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.488647][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.496068][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.509957][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.532376][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.540198][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.549543][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.558782][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.568395][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.577677][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.587053][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.595909][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.616841][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.638369][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.647394][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.654974][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.664468][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.674343][ T4230] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.681510][ T4230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.697474][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.706224][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.714577][ T4230] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.721695][ T4230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.729873][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.738929][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.747833][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.757214][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.781984][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.793217][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.801937][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.815128][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.824277][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.834140][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.843951][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.853538][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.862293][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.871654][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.881691][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.889706][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.897906][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.907213][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.915654][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.924215][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.934152][ T4230] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.941231][ T4230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.949407][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.957397][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.965129][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.975074][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.984905][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.994962][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.012624][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.021557][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.033013][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.040209][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.082076][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.101634][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.121749][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.137619][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.151840][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.160697][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.169976][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.178633][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.187805][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.197974][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.207163][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.215431][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.224411][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.240285][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.248099][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 55.256272][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.265436][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.279541][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.306542][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.325922][ T4225] Bluetooth: hci1: command 0x041b tx timeout [ 55.332247][ T4225] Bluetooth: hci2: command 0x041b tx timeout [ 55.341905][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.357083][ T4225] Bluetooth: hci3: command 0x041b tx timeout [ 55.361387][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.406095][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 55.416973][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.429313][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.441449][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.450753][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.462421][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.477963][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.488052][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.497017][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.509477][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.517705][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.525165][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.562413][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.579351][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.589180][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.605737][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.616990][ T4195] device veth0_vlan entered promiscuous mode [ 55.628020][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.639107][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.656877][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.664887][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.686948][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.700282][ T4195] device veth1_vlan entered promiscuous mode [ 55.710853][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.724481][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.772340][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.788027][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.797556][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.807586][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.825071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.835128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.853312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.861954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.897104][ T4193] device veth0_vlan entered promiscuous mode [ 55.904523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.913279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.921965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.930904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.940325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.948089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.957031][ T4191] device veth0_vlan entered promiscuous mode [ 55.964437][ T4195] device veth0_macvtap entered promiscuous mode [ 55.980820][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.992749][ T4193] device veth1_vlan entered promiscuous mode [ 55.999864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.009059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.017239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.025090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.033540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.041766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.060801][ T4187] device veth0_vlan entered promiscuous mode [ 56.070400][ T4195] device veth1_macvtap entered promiscuous mode [ 56.082343][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.091731][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.100351][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.110030][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.118763][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.127926][ T4191] device veth1_vlan entered promiscuous mode [ 56.140760][ T4187] device veth1_vlan entered promiscuous mode [ 56.180088][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.191762][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.203342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.211934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.220319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.228507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.236538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.244452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.253217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.263059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.272026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.281737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.291126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.317871][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.328331][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.337116][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.345933][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.363078][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.373270][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.387743][ T4193] device veth0_macvtap entered promiscuous mode [ 56.399960][ T4184] device veth0_vlan entered promiscuous mode [ 56.420034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.428763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.437353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.445677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.454100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.464890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.473634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.483903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.492187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.500776][ T4191] device veth0_macvtap entered promiscuous mode [ 56.510227][ T4193] device veth1_macvtap entered promiscuous mode [ 56.522736][ T4187] device veth0_macvtap entered promiscuous mode [ 56.543483][ T4184] device veth1_vlan entered promiscuous mode [ 56.553578][ T4191] device veth1_macvtap entered promiscuous mode [ 56.574808][ T4187] device veth1_macvtap entered promiscuous mode [ 56.621135][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.637839][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.649061][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.659065][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.669959][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.679882][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.690904][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.702236][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.723195][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.734682][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.745682][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.756380][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.771299][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.782191][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.793661][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.801345][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.809938][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.818179][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.827039][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.835022][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.843262][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.852697][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.862499][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.871742][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.880677][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.889360][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.898296][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.907264][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.918369][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.929294][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.940712][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.954336][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.963725][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.972750][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.981773][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.997392][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.007975][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.018413][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.029119][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.041213][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.059219][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.069832][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.080044][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.092497][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.102728][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.113352][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.124669][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.132276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.141221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.151031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.159805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.169743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.178422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.200018][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.209792][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.218677][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.228034][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.246070][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.254787][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.265348][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.274135][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.286048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.295256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.307908][ T4184] device veth0_macvtap entered promiscuous mode [ 57.322451][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.325937][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 57.337631][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.364215][ T4184] device veth1_macvtap entered promiscuous mode [ 57.371743][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.380895][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.390098][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.406313][ T4224] Bluetooth: hci3: command 0x040f tx timeout [ 57.414730][ T4224] Bluetooth: hci2: command 0x040f tx timeout [ 57.421237][ T4224] Bluetooth: hci1: command 0x040f tx timeout [ 57.451849][ T4230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.469449][ T4230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.488474][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 57.508600][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.521516][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.531686][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.546286][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.556669][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.567956][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.578054][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.588867][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.600548][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.608646][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.616966][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.626066][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.681366][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.693187][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.703264][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.713728][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.724210][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.735134][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.745040][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.756236][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.771466][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.796324][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.805030][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.828959][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.831830][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.847677][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.858121][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.868276][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.877199][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.887625][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.929480][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.957152][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.004380][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.040109][ T4230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.047275][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.060564][ T4230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.074734][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.081233][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.090277][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.099272][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.126209][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.137303][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.167756][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.192976][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.215025][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.231155][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.236979][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.254179][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.299015][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.324379][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.371436][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.445943][ T4267] fuse: Unknown parameter 'group_i00000000000000000000' [ 58.466421][ T4267] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.720313][ T4281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.795976][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 59.176072][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.216293][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.275094][ T23] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 59.357713][ T4300] tipc: Started in network mode [ 59.365635][ T4225] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 59.403846][ T4300] tipc: Node identity 96494386ddfc, cluster identity 4711 [ 59.421190][ T4300] tipc: Enabled bearer , priority 0 [ 59.423430][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.431496][ T4302] device syzkaller0 entered promiscuous mode [ 59.472373][ T4300] tipc: Resetting bearer [ 59.491602][ T4299] tipc: Resetting bearer [ 59.521100][ T4299] tipc: Disabling bearer [ 59.554561][ T23] usb 4-1: config 0 descriptor?? [ 59.568687][ T4227] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 59.628938][ T4224] Bluetooth: hci0: command 0x0419 tx timeout [ 59.646382][ T4225] usb 1-1: Using ep0 maxpacket: 16 [ 59.676918][ T4224] Bluetooth: hci1: command 0x0419 tx timeout [ 59.692997][ T4224] Bluetooth: hci2: command 0x0419 tx timeout [ 59.703029][ T4224] Bluetooth: hci3: command 0x0419 tx timeout [ 59.718850][ T4224] Bluetooth: hci4: command 0x0419 tx timeout [ 59.796677][ T4225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.829149][ T4225] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 59.860145][ T4270] udc-core: couldn't find an available UDC or it's busy [ 59.870267][ T4225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.902621][ T4270] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 59.916220][ T4225] usb 1-1: config 0 descriptor?? [ 59.975734][ T4227] usb 3-1: unable to get BOS descriptor or descriptor too short [ 60.006224][ T4310] xt_hashlimit: size too large, truncated to 1048576 [ 60.016286][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 60.022866][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 60.070756][ T23] usb 4-1: USB disconnect, device number 2 [ 60.115948][ T4227] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 60.123721][ T4227] usb 3-1: can't read configurations, error -71 [ 60.429721][ T4225] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 60.541936][ T4295] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 60.595688][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 60.627442][ T4317] device syzkaller0 entered promiscuous mode [ 60.885767][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 60.931477][ T4295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.944100][ T4295] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 60.957289][ T4295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.985892][ T4295] usb 2-1: config 0 descriptor?? [ 61.035731][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.050551][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.061025][ T23] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 61.070613][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.087225][ T23] usb 4-1: config 0 descriptor?? [ 61.252196][ T4315] udc-core: couldn't find an available UDC or it's busy [ 61.260557][ T4315] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 61.395738][ T4295] usbhid 2-1:0.0: can't add hid device: -71 [ 61.404793][ T4295] usbhid: probe of 2-1:0.0 failed with error -71 [ 61.434384][ T4295] usb 2-1: USB disconnect, device number 2 [ 61.572637][ T23] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 61.592742][ T23] mcp2221 0003:04D8:00DD.0002: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 61.866248][ T4295] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 62.001945][ T23] usb 1-1: USB disconnect, device number 2 [ 62.115877][ T4295] usb 2-1: Using ep0 maxpacket: 16 [ 62.236069][ T4295] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.254038][ T4295] usb 2-1: config 0 interface 0 has no altsetting 0 [ 62.262637][ T4295] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 62.288923][ T4295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.308810][ T4227] usb 4-1: USB disconnect, device number 3 [ 62.309010][ T4295] usb 2-1: config 0 descriptor?? [ 62.544527][ T4328] fuse: Unknown parameter 'group_id00000000000000000000' [ 62.620586][ T4329] process 'syz.3.15' launched './file2' with NULL argv: empty string added [ 62.755163][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 62.764478][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 62.774656][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.783736][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 62.792836][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 62.925726][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.960064][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 63.085734][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 63.267121][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 63.369536][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 63.514177][ T4295] mcp2221 0003:04D8:00DD.0003: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 63.532037][ T4315] udc-core: couldn't find an available UDC or it's busy [ 63.588014][ T4315] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 63.707499][ T4295] usb 2-1: USB disconnect, device number 3 [ 64.431843][ T4350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.143580][ T4356] tipc: Started in network mode [ 65.176895][ T4356] tipc: Node identity 46f6b9f17205, cluster identity 4711 [ 65.201953][ T4356] tipc: Enabled bearer , priority 0 [ 65.229640][ T4360] device syzkaller0 entered promiscuous mode [ 65.267067][ T4356] tipc: Resetting bearer [ 65.276640][ T4355] tipc: Resetting bearer [ 65.293435][ T4355] tipc: Disabling bearer [ 65.515970][ T4295] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 65.695875][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 65.859702][ T4225] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 66.125960][ T4225] usb 3-1: Using ep0 maxpacket: 16 [ 66.275906][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.805676][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.871941][ T4380] fuse: Unknown parameter 'group_id00000000000000000000' [ 66.876492][ T4225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.904418][ T21] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 66.943611][ T4225] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 66.962661][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.988457][ T4225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.011269][ T21] usb 2-1: config 0 descriptor?? [ 67.049716][ T4225] usb 3-1: config 0 descriptor?? [ 67.116177][ T4295] usb 1-1: unable to get BOS descriptor or descriptor too short [ 67.265738][ T4295] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 67.272163][ T4388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.283215][ T4363] udc-core: couldn't find an available UDC or it's busy [ 67.283232][ T4363] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 67.303609][ T4295] usb 1-1: can't read configurations, error -71 [ 67.375844][ T21] usbhid 2-1:0.0: can't add hid device: -71 [ 67.381918][ T21] usbhid: probe of 2-1:0.0 failed with error -71 [ 67.402722][ T21] usb 2-1: USB disconnect, device number 4 [ 67.548221][ T4225] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 67.896288][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 68.165583][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 68.285987][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.314509][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.347579][ T21] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 68.383479][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.462957][ T21] usb 2-1: config 0 descriptor?? [ 68.525669][ T21] usb 2-1: can't set config #0, error -71 [ 68.581119][ T21] usb 2-1: USB disconnect, device number 5 [ 68.679464][ T4403] tipc: Enabled bearer , priority 0 [ 68.728182][ T4403] device syzkaller0 entered promiscuous mode [ 68.826409][ T4403] tipc: Resetting bearer [ 68.883301][ T4402] tipc: Resetting bearer [ 68.926303][ T4402] tipc: Disabling bearer [ 69.552794][ T4227] usb 3-1: USB disconnect, device number 4 [ 70.487524][ T4422] fuse: Unknown parameter 'group_id00000000000000000000' [ 71.332564][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.339131][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.414001][ T4424] netlink: 36 bytes leftover after parsing attributes in process `syz.1.44'. [ 71.513337][ T4436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.622868][ T4442] tipc: Enabled bearer , priority 0 [ 71.632156][ T4442] device syzkaller0 entered promiscuous mode [ 71.652900][ T4442] tipc: Resetting bearer [ 71.661074][ T4441] tipc: Resetting bearer [ 71.673029][ T4441] tipc: Disabling bearer [ 71.805625][ T4295] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 71.865526][ T4227] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 72.205627][ T4257] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 72.245639][ T4295] usb 1-1: unable to get BOS descriptor or descriptor too short [ 72.275779][ T4227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.287848][ T4227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.298160][ T4227] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 72.307475][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.317663][ T4227] usb 3-1: config 0 descriptor?? [ 72.375912][ T4295] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 72.392287][ T4295] usb 1-1: can't read configurations, error -71 [ 72.475666][ T4257] usb 4-1: Using ep0 maxpacket: 16 [ 72.589385][ T4440] udc-core: couldn't find an available UDC or it's busy [ 72.602661][ T4440] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 72.605813][ T4257] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.640413][ T4257] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 72.681389][ T4257] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.735647][ T4227] usbhid 3-1:0.0: can't add hid device: -71 [ 72.743526][ T4227] usbhid: probe of 3-1:0.0 failed with error -71 [ 72.750139][ T4257] usb 4-1: config 0 descriptor?? [ 72.812158][ T4227] usb 3-1: USB disconnect, device number 5 [ 73.485802][ T4227] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 74.107575][ T4257] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 74.125624][ T4227] usb 3-1: Using ep0 maxpacket: 16 [ 74.245831][ T4227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.284349][ T4227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.345284][ T4227] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 74.401487][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.449637][ T4227] usb 3-1: config 0 descriptor?? [ 74.685734][ T4227] usbhid 3-1:0.0: can't add hid device: -71 [ 74.692067][ T4227] usbhid: probe of 3-1:0.0 failed with error -71 [ 74.738927][ T4227] usb 3-1: USB disconnect, device number 6 [ 74.996178][ T4488] fuse: Bad value for 'user_id' [ 75.302341][ T4495] tipc: Enabled bearer , priority 0 [ 75.337003][ T4495] device syzkaller0 entered promiscuous mode [ 75.375725][ T4495] tipc: Resetting bearer [ 75.404926][ T4493] tipc: Resetting bearer [ 75.457971][ T4493] tipc: Disabling bearer [ 75.589154][ T4496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.018054][ T4227] usb 4-1: USB disconnect, device number 4 [ 76.447808][ T13] cfg80211: failed to load regulatory.db [ 77.064294][ T4522] fuse: Bad value for 'user_id' [ 77.105627][ T13] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 77.451327][ T4535] tipc: Enabled bearer , priority 0 [ 77.496303][ T4535] device syzkaller0 entered promiscuous mode [ 77.535023][ T4535] tipc: Resetting bearer [ 77.578414][ T4534] tipc: Resetting bearer [ 77.644548][ T4534] tipc: Disabling bearer [ 77.755773][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 77.916333][ T13] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 77.923975][ T13] usb 3-1: can't read configurations, error -71 [ 78.214894][ T4546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.895612][ T4228] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 79.995553][ T4228] usb 1-1: Using ep0 maxpacket: 16 [ 80.072477][ T4567] syz.4.87 uses obsolete (PF_INET,SOCK_PACKET) [ 80.135801][ T4228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.164448][ T4572] fuse: Bad value for 'user_id' [ 80.172320][ T4228] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 80.235674][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.312864][ T4228] usb 1-1: config 0 descriptor?? [ 80.588339][ T4582] tipc: Enabled bearer , priority 0 [ 80.633844][ T4582] device syzkaller0 entered promiscuous mode [ 80.715435][ T4582] tipc: Resetting bearer [ 80.762657][ T4576] tipc: Resetting bearer [ 80.798203][ T4228] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 80.823071][ T4576] tipc: Disabling bearer [ 81.385744][ T4222] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 81.454660][ T4590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.925762][ T4222] usb 2-1: unable to get BOS descriptor or descriptor too short [ 82.061346][ T4222] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 82.071756][ T4222] usb 2-1: can't read configurations, error -71 [ 82.174175][ T4607] fuse: Bad value for 'fd' [ 82.751411][ T1335] usb 1-1: USB disconnect, device number 7 [ 83.881529][ T4625] tipc: Started in network mode [ 83.887259][ T4625] tipc: Node identity 228eb7b62aba, cluster identity 4711 [ 83.905425][ T4625] tipc: Enabled bearer , priority 0 [ 83.913362][ T4625] device syzkaller0 entered promiscuous mode [ 83.995313][ T4624] tipc: Resetting bearer [ 84.055717][ T4624] tipc: Disabling bearer [ 84.074314][ T4626] ODEBUG: Out of memory. ODEBUG disabled [ 84.399650][ T4637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.852693][ T4648] fuse: Bad value for 'fd' [ 85.138097][ T4295] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 85.310163][ T4670] tipc: Enabled bearer , priority 0 [ 85.328622][ T4670] device syzkaller0 entered promiscuous mode [ 85.345174][ T4669] tipc: Resetting bearer [ 85.366688][ T4226] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 85.386398][ T4669] tipc: Disabling bearer [ 85.526102][ T4295] usb 3-1: unable to get BOS descriptor or descriptor too short [ 85.625661][ T4226] usb 1-1: Using ep0 maxpacket: 16 [ 85.645636][ T4295] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 85.661772][ T4295] usb 3-1: can't read configurations, error -71 [ 86.586043][ T4226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.618298][ T4226] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 86.697159][ T4226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.724855][ T4226] usb 1-1: config 0 descriptor?? [ 86.776445][ T4686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.250455][ T4226] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 87.551073][ T4693] fuse: Bad value for 'fd' [ 88.425371][ T4717] tipc: Started in network mode [ 88.434743][ T4717] tipc: Node identity 4aa7a6f529b7, cluster identity 4711 [ 88.471543][ T4717] tipc: Enabled bearer , priority 0 [ 88.510469][ T4720] device syzkaller0 entered promiscuous mode [ 88.573813][ T4716] tipc: Resetting bearer [ 88.638400][ T4716] tipc: Disabling bearer [ 88.895590][ T4225] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 88.935661][ T4725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.019870][ T1107] usb 1-1: USB disconnect, device number 8 [ 89.115535][ T1335] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 89.252048][ T4733] device syzkaller0 entered promiscuous mode [ 89.265892][ T4225] usb 5-1: unable to get BOS descriptor or descriptor too short [ 89.388703][ T4738] fuse: Bad value for 'fd' [ 89.408834][ T4225] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 89.421520][ T4225] usb 5-1: can't read configurations, error -71 [ 89.425655][ T1335] usb 4-1: too many configurations: 13, using maximum allowed: 8 [ 89.535740][ T1335] usb 4-1: config 0 has no interfaces? [ 90.225725][ T1335] usb 4-1: config 0 has no interfaces? [ 90.455712][ T1335] usb 4-1: config 0 has no interfaces? [ 90.535725][ T1335] usb 4-1: config 0 has no interfaces? [ 90.625749][ T1335] usb 4-1: config 0 has no interfaces? [ 90.715813][ T1335] usb 4-1: config 0 has no interfaces? [ 90.729221][ T4759] tipc: Enabled bearer , priority 0 [ 90.743645][ T4759] device syzkaller0 entered promiscuous mode [ 90.766533][ T4757] tipc: Resetting bearer [ 90.789421][ T4757] tipc: Disabling bearer [ 90.818468][ T1335] usb 4-1: config 0 has no interfaces? [ 90.896914][ T1335] usb 4-1: config 0 has no interfaces? [ 91.075749][ T1335] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.096438][ T1335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.139293][ T1335] usb 4-1: Product: syz [ 91.149496][ T1335] usb 4-1: Manufacturer: syz [ 91.164588][ T1335] usb 4-1: SerialNumber: syz [ 91.187880][ T1335] usb 4-1: config 0 descriptor?? [ 91.351396][ T4776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.450455][ T4257] usb 4-1: USB disconnect, device number 5 [ 91.473221][ T4781] fuse: Bad value for 'fd' [ 91.506365][ T4222] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 91.765792][ T4222] usb 1-1: Using ep0 maxpacket: 16 [ 91.886001][ T4222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.897000][ T1335] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 91.951206][ T4222] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 92.295686][ T1335] usb 2-1: unable to get BOS descriptor or descriptor too short [ 92.722766][ T4222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.895198][ T4792] device syzkaller0 entered promiscuous mode [ 92.927404][ T4222] usb 1-1: config 0 descriptor?? [ 93.005832][ T1335] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 93.028657][ T1335] usb 2-1: can't read configurations, error -71 [ 93.192441][ T4801] tipc: Started in network mode [ 93.220280][ T4801] tipc: Node identity 928d396c3755, cluster identity 4711 [ 93.271798][ T4801] tipc: Enabled bearer , priority 0 [ 93.310677][ T4804] device syzkaller0 entered promiscuous mode [ 93.333439][ T4800] tipc: Resetting bearer [ 93.388830][ T4800] tipc: Disabling bearer [ 93.427398][ T4222] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 94.545975][ T4826] fuse: Bad value for 'fd' [ 94.845869][ T4828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.215588][ T1107] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 95.303636][ T21] usb 1-1: USB disconnect, device number 9 [ 95.490704][ T4850] tipc: Enabled bearer , priority 0 [ 95.519619][ T4850] device syzkaller0 entered promiscuous mode [ 95.549583][ T4849] tipc: Resetting bearer [ 95.608669][ T4849] tipc: Disabling bearer [ 95.706115][ T1107] usb 5-1: unable to get BOS descriptor or descriptor too short [ 95.895665][ T1107] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 95.926964][ T1107] usb 5-1: can't read configurations, error -71 [ 96.475609][ T4870] fuse: Invalid rootmode [ 97.142436][ T4890] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 97.519139][ T4891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.925338][ T4904] tipc: Enabled bearer , priority 0 [ 97.981605][ T4904] tipc: Resetting bearer [ 98.022639][ T4903] tipc: Disabling bearer [ 99.113217][ T4911] fuse: Invalid rootmode [ 99.485594][ T4225] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 99.613716][ T4936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.675671][ T4257] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 99.908404][ T4225] usb 4-1: unable to get BOS descriptor or descriptor too short [ 100.045982][ T4257] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 100.055663][ T4225] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 100.068329][ T4225] usb 4-1: can't read configurations, error -71 [ 100.075540][ T4257] usb 2-1: config 0 has no interface number 0 [ 100.085852][ T1335] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 100.111600][ T4257] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 100.168999][ T4257] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid maxpacket 65288, setting to 64 [ 100.375785][ T4257] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 100.383807][ T4948] tipc: Enabled bearer , priority 0 [ 100.395570][ T1335] usb 1-1: Using ep0 maxpacket: 16 [ 100.419081][ T4257] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.422858][ T4948] tipc: Resetting bearer [ 100.454249][ T4257] usb 2-1: Product: syz [ 100.461026][ T4257] usb 2-1: Manufacturer: syz [ 100.476104][ T4257] usb 2-1: SerialNumber: syz [ 100.507149][ T4257] usb 2-1: config 0 descriptor?? [ 100.515642][ T1335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.528745][ T4947] tipc: Disabling bearer [ 100.555738][ T1335] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 100.575953][ T4926] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 100.583529][ T1335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.592889][ T4926] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 100.623617][ T4257] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 1e:44:19:3e:78:3f [ 100.643425][ T1335] usb 1-1: config 0 descriptor?? [ 101.665892][ T4926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.194'. [ 101.707714][ T4966] fuse: Invalid rootmode [ 101.792774][ T4225] usb 2-1: USB disconnect, device number 10 [ 101.816630][ T4225] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 101.991475][ T4977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.375542][ T4222] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 102.765771][ T4222] usb 5-1: unable to get BOS descriptor or descriptor too short [ 102.776166][ T5021] tipc: Enabled bearer , priority 0 [ 102.804571][ T5021] tipc: Resetting bearer [ 102.881694][ T5019] tipc: Disabling bearer [ 102.905605][ T4222] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 103.686223][ T4222] usb 5-1: can't read configurations, error -71 [ 103.884215][ T5032] fuse: Bad value for 'rootmode' [ 103.900461][ T5033] ucma_write: process 143 (syz.3.218) changed security contexts after opening file descriptor, this is not allowed. [ 104.073812][ T5038] netlink: 36 bytes leftover after parsing attributes in process `syz.3.220'. [ 104.235747][ T1335] usbhid 1-1:0.0: can't add hid device: -71 [ 104.242032][ T1335] usbhid: probe of 1-1:0.0 failed with error -71 [ 104.262194][ T1335] usb 1-1: USB disconnect, device number 10 [ 104.353917][ T5049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.645701][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 104.905546][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 105.025847][ T7] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 105.885256][ T5067] device syzkaller0 entered promiscuous mode [ 106.005571][ T4222] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 106.036820][ T7] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 106.069653][ T7] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 106.087010][ T5074] fuse: Bad value for 'rootmode' [ 106.100183][ T7] usb 4-1: Product: syz [ 106.106603][ T7] usb 4-1: Manufacturer: syz [ 106.121922][ T7] usb 4-1: SerialNumber: syz [ 106.137025][ T7] usb 4-1: config 0 descriptor?? [ 106.155725][ T5053] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 106.177012][ T7] hub 4-1:0.0: bad descriptor, ignoring hub [ 106.182946][ T7] hub: probe of 4-1:0.0 failed with error -5 [ 106.375656][ T4222] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.505603][ T4222] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 106.531570][ T4222] usb 1-1: can't read configurations, error -71 [ 106.655576][ T4225] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 106.935017][ T4225] usb 3-1: Using ep0 maxpacket: 16 [ 107.022759][ T5101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.076378][ T4225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.101106][ T4225] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 107.124041][ T4225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.156033][ T4225] usb 3-1: config 0 descriptor?? [ 107.267300][ T21] usb 4-1: USB disconnect, device number 8 [ 108.723721][ T5115] device syzkaller0 entered promiscuous mode [ 108.817431][ T146] Bluetooth: hci4: Dropping invalid advertising data [ 108.825183][ T146] Bluetooth: hci4: Dropping invalid advertising data [ 108.832244][ T146] Bluetooth: hci4: Malicious advertising data. [ 109.011530][ T5120] fuse: Bad value for 'rootmode' [ 109.394979][ T5133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.715538][ T7] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 109.995769][ T4225] usbhid 3-1:0.0: can't add hid device: -71 [ 110.002031][ T4225] usbhid: probe of 3-1:0.0 failed with error -71 [ 110.032124][ T4225] usb 3-1: USB disconnect, device number 11 [ 110.135696][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 110.190423][ T5149] fuse: Invalid rootmode [ 110.257802][ T7] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 110.273343][ T7] usb 5-1: can't read configurations, error -71 [ 110.284617][ T5156] device syzkaller0 entered promiscuous mode [ 110.339189][ T5158] fuse: Unknown parameter 'use00000000000000000000' [ 110.485620][ T4225] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 110.765745][ T4225] usb 3-1: Using ep0 maxpacket: 16 [ 111.176902][ T4225] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.500180][ T4225] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 111.515256][ T5175] Zero length message leads to an empty skb [ 111.537940][ T5174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.551716][ T4225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.585215][ T4225] usb 3-1: config 0 descriptor?? [ 112.078070][ T4225] dragonrise 0003:0079:0011.0009: unknown main item tag 0x0 [ 112.104250][ T4225] dragonrise 0003:0079:0011.0009: unknown main item tag 0x0 [ 112.111986][ T4226] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 112.141031][ T4225] dragonrise 0003:0079:0011.0009: unknown main item tag 0x0 [ 112.150805][ T4225] dragonrise 0003:0079:0011.0009: unknown main item tag 0x0 [ 112.263257][ T4225] dragonrise 0003:0079:0011.0009: unknown main item tag 0x0 [ 112.280757][ T4225] dragonrise 0003:0079:0011.0009: unknown main item tag 0x0 [ 112.295222][ T4225] dragonrise 0003:0079:0011.0009: item fetching failed at offset 9/44 [ 112.309620][ T4225] dragonrise 0003:0079:0011.0009: parse failed [ 112.435579][ T4226] usb 1-1: Using ep0 maxpacket: 16 [ 113.054411][ T4225] dragonrise: probe of 0003:0079:0011.0009 failed with error -22 [ 113.069978][ T4225] usb 3-1: USB disconnect, device number 12 [ 113.505750][ T4226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.518491][ T4226] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 113.532228][ T4226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.606375][ T4226] usb 1-1: config 0 descriptor?? [ 113.690424][ T5193] device syzkaller0 entered promiscuous mode [ 113.828670][ T5205] fuse: Unknown parameter 'use00000000000000000000' [ 114.415541][ T23] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 115.014502][ T5216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.215565][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 115.345882][ T23] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 115.384497][ T23] usb 3-1: can't read configurations, error -71 [ 116.173462][ T5243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.282'. [ 117.005613][ T4226] usbhid 1-1:0.0: can't add hid device: -71 [ 117.011914][ T4226] usbhid: probe of 1-1:0.0 failed with error -71 [ 117.818089][ T4226] usb 1-1: USB disconnect, device number 13 [ 117.846079][ T5247] device syzkaller0 entered promiscuous mode [ 118.062256][ T5259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.128449][ T5262] fuse: Unknown parameter 'use00000000000000000000' [ 119.564160][ T1335] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 120.095546][ T4227] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 120.126095][ T1335] usb 3-1: unable to get BOS descriptor or descriptor too short [ 120.128042][ T4226] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 120.255561][ T1335] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 120.263422][ T1335] usb 3-1: can't read configurations, error -71 [ 120.345909][ T4227] usb 5-1: Using ep0 maxpacket: 16 [ 120.397872][ T21] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 120.419543][ T5299] device syzkaller0 entered promiscuous mode [ 120.426395][ T4226] usb 4-1: Using ep0 maxpacket: 32 [ 120.466013][ T4227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.483155][ T4227] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 120.501609][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.523500][ T4227] usb 5-1: config 0 descriptor?? [ 120.561252][ T4226] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 120.573952][ T4226] usb 4-1: config 0 has no interface number 0 [ 120.584531][ T4226] usb 4-1: config 0 interface 12 has no altsetting 0 [ 120.695567][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 121.488554][ T5304] fuse: Unknown parameter 'user_i00000000000000000000' [ 121.565590][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.576087][ T4226] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 121.588758][ T4226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.603448][ T4226] usb 4-1: Product: syz [ 121.608132][ T4226] usb 4-1: Manufacturer: syz [ 121.615780][ T4226] usb 4-1: SerialNumber: syz [ 121.623088][ T4226] usb 4-1: config 0 descriptor?? [ 121.755633][ T21] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 121.774793][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.791008][ T21] usb 1-1: Product: syz [ 121.798931][ T21] usb 1-1: Manufacturer: syz [ 121.808723][ T21] usb 1-1: SerialNumber: syz [ 121.815258][ T21] usb 1-1: config 0 descriptor?? [ 121.856891][ T21] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 122.065691][ T21] usb 1-1: qt2_attach - failed to power on unit: -71 [ 122.076144][ T21] quatech2: probe of 1-1:0.0 failed with error -71 [ 122.114152][ T21] usb 1-1: USB disconnect, device number 14 [ 122.214986][ T5319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.069868][ T5338] vivid-001: kernel_thread() failed [ 123.615634][ T4226] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: f8 failed: -71 [ 124.173342][ T4226] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 124.227323][ T5347] fuse: Unknown parameter 'user_i00000000000000000000' [ 124.285100][ T4226] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 124.296055][ T4227] usbhid 5-1:0.0: can't add hid device: -71 [ 124.302294][ T4227] usbhid: probe of 5-1:0.0 failed with error -71 [ 124.356118][ T4226] f81534: probe of 4-1:0.12 failed with error -71 [ 124.367207][ T4227] usb 5-1: USB disconnect, device number 10 [ 124.406578][ T4226] usb 4-1: USB disconnect, device number 9 [ 124.785675][ T21] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 125.429936][ T5369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.705926][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 125.865767][ T21] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 125.879541][ T21] usb 2-1: can't read configurations, error -71 [ 127.248916][ T146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 127.258626][ T146] CPU: 1 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 127.266082][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 127.276134][ T146] Workqueue: hci2 hci_rx_work [ 127.280836][ T146] Call Trace: [ 127.284097][ T146] [ 127.287014][ T146] dump_stack_lvl+0x188/0x250 [ 127.291676][ T146] ? show_regs_print_info+0x20/0x20 [ 127.296977][ T146] ? load_image+0x400/0x400 [ 127.301499][ T146] sysfs_create_dir_ns+0x26a/0x290 [ 127.306610][ T146] ? sysfs_warn_dup+0xa0/0xa0 [ 127.311271][ T146] ? process_one_work+0x85f/0x1010 [ 127.316374][ T146] ? do_raw_spin_unlock+0x11d/0x230 [ 127.321588][ T146] kobject_add_internal+0x6e0/0xd90 [ 127.326799][ T146] kobject_add+0x160/0x230 [ 127.331255][ T146] ? kobject_init+0x1d0/0x1d0 [ 127.336281][ T146] ? klist_children_get+0x50/0x50 [ 127.341291][ T146] ? get_device_parent+0x121/0x3f0 [ 127.346507][ T146] device_add+0x483/0xfb0 [ 127.350901][ T146] hci_conn_add_sysfs+0xd1/0x1e0 [ 127.355833][ T146] le_conn_complete_evt+0xc48/0x15c0 [ 127.361112][ T146] ? cs_le_create_conn+0x5e0/0x5e0 [ 127.366268][ T146] ? __mutex_trylock_common+0x155/0x260 [ 127.371801][ T146] hci_le_meta_evt+0x285/0x3c90 [ 127.376648][ T146] ? hci_event_packet+0x37b/0x1370 [ 127.381774][ T146] ? __lock_acquire+0x7d10/0x7d10 [ 127.386813][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 127.392889][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 127.398527][ T146] ? mark_lock+0x94/0x320 [ 127.402853][ T146] ? mutex_unlock+0x10/0x10 [ 127.407344][ T146] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 127.413317][ T146] ? lock_chain_count+0x20/0x20 [ 127.418156][ T146] ? __rwlock_init+0x140/0x140 [ 127.422912][ T146] hci_event_packet+0xe48/0x1370 [ 127.427837][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 127.433030][ T146] ? rcu_lock_release+0x20/0x20 [ 127.437875][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 127.443083][ T146] hci_rx_work+0x255/0xa10 [ 127.447501][ T146] process_one_work+0x85f/0x1010 [ 127.452440][ T146] ? worker_detach_from_pool+0x240/0x240 [ 127.458058][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 127.463333][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 127.468345][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 127.473891][ T146] ? wq_worker_running+0x97/0x170 [ 127.478921][ T146] worker_thread+0xaa6/0x1290 [ 127.483693][ T146] kthread+0x436/0x520 [ 127.487745][ T146] ? rcu_lock_release+0x20/0x20 [ 127.492580][ T146] ? kthread_blkcg+0xd0/0xd0 [ 127.497154][ T146] ret_from_fork+0x1f/0x30 [ 127.501567][ T146] [ 127.507290][ T146] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 127.520644][ T146] Bluetooth: hci2: failed to register connection device [ 127.575540][ T4307] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 127.935846][ T4307] usb 1-1: config 1 interface 0 has no altsetting 0 [ 127.980891][ T5419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.175764][ T4307] usb 1-1: string descriptor 0 read error: -22 [ 128.182251][ T4307] usb 1-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.40 [ 128.197851][ T4307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.214918][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 128.518141][ T5430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.342'. [ 128.527501][ T5430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.558081][ T5430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.621422][ T23] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 129.510930][ T4307] hid (null): invalid report_count 45434 [ 129.529147][ T4307] hid (null): invalid report_count -495431619 [ 129.561365][ T4307] hid (null): invalid report_count 27775 [ 129.570951][ T4307] hid (null): invalid report_size 46049 [ 129.588865][ T5437] fuse: Unknown parameter 'user_id00000000000000000000' [ 129.651365][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 129.658659][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 129.666567][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 129.673847][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 129.681266][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 129.688575][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 129.708699][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 129.716309][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 129.728330][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 129.741544][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 129.753369][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 129.765193][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 129.777266][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 129.791381][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 129.818912][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 129.849760][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 129.916256][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 129.935199][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 129.951497][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 129.958916][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 129.973201][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 129.980523][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 130.005613][ T1335] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 130.028571][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 130.046545][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 130.054059][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 130.066604][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 130.074069][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 130.089849][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 130.110500][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 130.125568][ T23] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 130.140718][ T23] usb 4-1: can't read configurations, error -71 [ 130.150977][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 130.168197][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 130.176966][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 130.212542][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 130.323483][ T1335] usb 2-1: Using ep0 maxpacket: 16 [ 130.340169][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 130.347805][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 130.355067][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 130.368445][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 130.375951][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 130.385714][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 130.393167][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 131.085513][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 131.092799][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 131.155682][ T1335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.187591][ T1335] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 131.225958][ T1335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.235517][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 131.355769][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 131.363684][ T1335] usb 2-1: config 0 descriptor?? [ 131.379157][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 131.479205][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 131.486681][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 131.494064][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 131.501584][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 131.509131][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 131.516568][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 131.523968][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 131.844184][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 131.910203][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 131.920624][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 131.931432][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 131.941631][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 131.952101][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 131.978909][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.003576][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.021144][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.032757][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.053905][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x2 [ 132.068577][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.076040][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.083703][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.092641][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.100293][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.107710][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.115704][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.122833][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.135651][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.154758][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.173718][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.181869][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.190776][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.198402][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.206358][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.213632][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.221306][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.228789][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.236342][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.243569][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.265699][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.291174][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.311364][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.323731][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.331537][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.338953][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.346599][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.353790][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.361585][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.376777][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.385693][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.393399][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.401457][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.409478][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.418052][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.433013][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.445275][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.453132][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.460570][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.468337][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.476691][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.491751][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.510434][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.522426][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.540462][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.553871][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.568622][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.580627][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.594140][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.610853][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.623801][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.637135][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.651791][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.663084][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.674316][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x1 [ 132.688885][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.700783][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.713305][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.724858][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x4 [ 132.738163][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.752831][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x4 [ 132.764194][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.768715][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.779520][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.798226][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.810972][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.820727][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.832243][ T4307] glorious 0003:258A:0033.000A: unknown main item tag 0x0 [ 132.840343][ T4307] glorious 0003:258A:0033.000A: unexpected long global item [ 132.848434][ T4307] glorious: probe of 0003:258A:0033.000A failed with error -22 [ 132.877735][ T4307] usb 1-1: USB disconnect, device number 15 [ 133.908295][ T5491] device syzkaller0 entered promiscuous mode [ 133.965639][ T1335] usbhid 2-1:0.0: can't add hid device: -71 [ 133.972079][ T1335] usbhid: probe of 2-1:0.0 failed with error -71 [ 133.995677][ T5493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.361'. [ 134.002000][ T1335] usb 2-1: USB disconnect, device number 13 [ 134.296076][ T4265] af_packet: tpacket_rcv: packet too big, clamped from 38 to 4294967286. macoff=82 [ 134.551638][ T5505] fuse: Unknown parameter 'user_id00000000000000000000' [ 137.018575][ T146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 137.028283][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 137.035729][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 137.045785][ T146] Workqueue: hci3 hci_rx_work [ 137.050474][ T146] Call Trace: [ 137.053780][ T146] [ 137.056701][ T146] dump_stack_lvl+0x188/0x250 [ 137.061361][ T146] ? show_regs_print_info+0x20/0x20 [ 137.066548][ T146] ? load_image+0x400/0x400 [ 137.071035][ T146] sysfs_create_dir_ns+0x26a/0x290 [ 137.076127][ T146] ? sysfs_warn_dup+0xa0/0xa0 [ 137.080898][ T146] ? process_one_work+0x85f/0x1010 [ 137.086013][ T146] ? do_raw_spin_unlock+0x11d/0x230 [ 137.091233][ T146] kobject_add_internal+0x6e0/0xd90 [ 137.096456][ T146] kobject_add+0x160/0x230 [ 137.100897][ T146] ? kobject_init+0x1d0/0x1d0 [ 137.105593][ T146] ? klist_children_get+0x50/0x50 [ 137.110642][ T146] ? get_device_parent+0x121/0x3f0 [ 137.115778][ T146] device_add+0x483/0xfb0 [ 137.120140][ T146] hci_conn_add_sysfs+0xd1/0x1e0 [ 137.125067][ T146] le_conn_complete_evt+0xc48/0x15c0 [ 137.130355][ T146] ? cs_le_create_conn+0x5e0/0x5e0 [ 137.135462][ T146] ? __mutex_trylock_common+0x155/0x260 [ 137.141004][ T146] hci_le_meta_evt+0x285/0x3c90 [ 137.145836][ T146] ? hci_event_packet+0x37b/0x1370 [ 137.150924][ T146] ? __lock_acquire+0x7d10/0x7d10 [ 137.155930][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 137.161975][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 137.167599][ T146] ? mark_lock+0x94/0x320 [ 137.171937][ T146] ? mutex_unlock+0x10/0x10 [ 137.176420][ T146] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 137.182382][ T146] ? lock_chain_count+0x20/0x20 [ 137.187214][ T146] ? __rwlock_init+0x140/0x140 [ 137.191966][ T146] hci_event_packet+0xe48/0x1370 [ 137.197022][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 137.202205][ T146] ? rcu_lock_release+0x20/0x20 [ 137.207038][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 137.212304][ T146] hci_rx_work+0x255/0xa10 [ 137.216705][ T146] process_one_work+0x85f/0x1010 [ 137.221641][ T146] ? worker_detach_from_pool+0x240/0x240 [ 137.227260][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 137.232556][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 137.237560][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 137.243085][ T146] ? wq_worker_running+0x97/0x170 [ 137.248234][ T146] worker_thread+0xaa6/0x1290 [ 137.252920][ T146] kthread+0x436/0x520 [ 137.256974][ T146] ? rcu_lock_release+0x20/0x20 [ 137.261909][ T146] ? kthread_blkcg+0xd0/0xd0 [ 137.266483][ T146] ret_from_fork+0x1f/0x30 [ 137.270888][ T146] [ 137.276040][ T146] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 137.290046][ T146] Bluetooth: hci3: failed to register connection device [ 139.332646][ T23] Bluetooth: hci3: command 0x2016 tx timeout [ 140.785550][ T4225] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 141.016205][ T5591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 141.053104][ T5591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.055575][ T4225] usb 3-1: Using ep0 maxpacket: 32 [ 141.188422][ T5591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.275568][ T4225] usb 3-1: unable to get BOS descriptor or descriptor too short [ 141.395601][ T4225] usb 3-1: config 4 has an invalid interface number: 159 but max is 0 [ 141.425871][ T4225] usb 3-1: config 4 has no interface number 0 [ 141.473035][ T4225] usb 3-1: config 4 interface 159 has no altsetting 0 [ 141.695988][ T4225] usb 3-1: New USB device found, idVendor=238b, idProduct=e0cb, bcdDevice= 7.46 [ 141.723559][ T4225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.765572][ T4225] usb 3-1: Product: syz [ 141.775157][ T4225] usb 3-1: Manufacturer: syz [ 141.804439][ T4225] usb 3-1: SerialNumber: syz [ 141.913583][ T5609] tipc: Enabled bearer , priority 0 [ 141.995552][ T5609] tipc: Resetting bearer [ 142.022417][ T5608] tipc: Disabling bearer [ 143.818921][ T4227] tipc: Node number set to 1662035701 [ 143.825967][ T4225] usb 3-1: bad CDC descriptors [ 143.864349][ T4225] usb 3-1: bad CDC descriptors [ 143.897902][ T4225] usb 3-1: USB disconnect, device number 17 [ 144.237271][ T5635] device syzkaller0 entered promiscuous mode [ 144.295554][ T4227] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 144.325517][ T1335] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 144.655703][ T4227] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 144.672145][ T4227] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.698803][ T4227] usb 4-1: config 0 has no interfaces? [ 144.711287][ T4227] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 144.742732][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.764723][ T4227] usb 4-1: config 0 descriptor?? [ 145.110917][ T4257] usb 4-1: USB disconnect, device number 12 [ 146.225611][ T1335] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.355630][ T1335] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 146.383865][ T1335] usb 1-1: can't read configurations, error -71 [ 146.758574][ T5673] device syzkaller0 entered promiscuous mode [ 146.985507][ T4257] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 147.865691][ T4257] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 147.881884][ T4257] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 147.905727][ T4257] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 147.915281][ T4257] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 148.085759][ T4257] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 148.142268][ T4257] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 148.191928][ T4257] usb 4-1: Product: syz [ 148.213034][ T4257] usb 4-1: Manufacturer: syz [ 148.255836][ T5671] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 148.276625][ T4257] cdc_wdm 4-1:1.0: skipping garbage [ 148.288879][ T4257] cdc_wdm 4-1:1.0: skipping garbage [ 148.313344][ T4257] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 148.492184][ T4257] usb 4-1: USB disconnect, device number 13 [ 148.547451][ T5712] device syzkaller0 entered promiscuous mode [ 149.894999][ T1107] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 151.015557][ T1107] usb 3-1: unable to get BOS descriptor or descriptor too short [ 151.175594][ T1107] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 151.283494][ T1107] usb 3-1: can't read configurations, error -71 [ 151.329641][ T5731] tipc: Enabled bearer , priority 0 [ 151.387947][ T5731] tipc: Resetting bearer [ 151.428723][ T5730] tipc: Disabling bearer [ 151.593022][ T5744] device syzkaller0 entered promiscuous mode [ 155.126817][ T5781] tipc: Enabling of bearer rejected, failed to enable media [ 155.575629][ T4227] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 156.835781][ T1110] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 157.505683][ T1110] usb 3-1: Using ep0 maxpacket: 16 [ 157.525698][ T4227] usb 5-1: unable to get BOS descriptor or descriptor too short [ 157.635818][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.667432][ T1110] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 157.695573][ T4227] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 157.703253][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.712068][ T4227] usb 5-1: can't read configurations, error -71 [ 157.734872][ T1110] usb 3-1: config 0 descriptor?? [ 157.815827][ T5825] fuse: Unknown parameter '0x0000000000000004' [ 158.279498][ T1110] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 160.703538][ T5848] tipc: Enabling of bearer rejected, failed to enable media [ 160.845508][ T1107] usb 3-1: USB disconnect, device number 20 [ 160.865612][ T4307] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 161.930930][ T5876] fuse: Unknown parameter '0x0000000000000004' [ 163.334061][ T1107] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 164.815614][ T1107] usb 3-1: unable to get BOS descriptor or descriptor too short [ 164.985578][ T1107] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 164.995669][ T1107] usb 3-1: can't read configurations, error -71 [ 165.876597][ T5903] syz.4.484 (5903): drop_caches: 2 [ 166.450139][ T5885] syz.1.479 (5885): drop_caches: 2 [ 167.473492][ T1110] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 168.945667][ T1110] usb 1-1: Using ep0 maxpacket: 16 [ 169.050436][ T5942] fuse: Unknown parameter '0x0000000000000004' [ 169.101177][ T1110] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 169.565900][ T1110] usb 1-1: string descriptor 0 read error: -71 [ 169.573425][ T1110] usb 1-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice= 0.40 [ 169.634518][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.736388][ T1110] usb 1-1: can't set config #1, error -71 [ 169.772085][ T1110] usb 1-1: USB disconnect, device number 18 [ 169.822285][ T5963] capability: warning: `syz.3.498' uses 32-bit capabilities (legacy support in use) [ 169.892422][ T5959] kvm [5958]: vcpu0, guest rIP: 0x11c disabled perfctr wrmsr: 0xc2 data 0x60000000000 [ 169.940611][ T5959] kvm [5958]: vcpu0, guest rIP: 0x11c disabled perfctr wrmsr: 0xc2 data 0x60100000000 [ 170.009207][ T5959] kvm [5958]: vcpu0, guest rIP: 0x11c disabled perfctr wrmsr: 0xc2 data 0x60200000000 [ 170.051081][ T5959] kvm [5958]: vcpu0, guest rIP: 0x11c disabled perfctr wrmsr: 0xc2 data 0x60300000000 [ 170.142735][ T5959] kvm [5958]: vcpu0, guest rIP: 0x11c disabled perfctr wrmsr: 0xc2 data 0x60400000000 [ 170.152676][ T5959] kvm [5958]: vcpu0, guest rIP: 0x11c disabled perfctr wrmsr: 0xc2 data 0x60500000000 [ 170.224373][ T5959] kvm [5958]: vcpu0, guest rIP: 0x11c disabled perfctr wrmsr: 0xc2 data 0x60600000000 [ 170.234179][ T5959] kvm [5958]: vcpu0, guest rIP: 0x11c disabled perfctr wrmsr: 0xc2 data 0x60700000000 [ 171.570345][ T5959] kvm [5958]: vcpu0, guest rIP: 0x11c disabled perfctr wrmsr: 0xc2 data 0x60800000000 [ 171.615026][ T5959] kvm [5958]: vcpu0, guest rIP: 0x11c disabled perfctr wrmsr: 0xc2 data 0x60900000000 [ 171.651821][ T146] ================================================================== [ 171.660183][ T146] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x1324/0x3c90 [ 171.668017][ T146] Read of size 1 at addr ffff888075e46c0a by task kworker/u5:0/146 [ 171.675891][ T146] [ 171.678196][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 171.685631][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.695694][ T146] Workqueue: hci2 hci_rx_work [ 171.700376][ T146] Call Trace: [ 171.703728][ T146] [ 171.706648][ T146] dump_stack_lvl+0x188/0x250 [ 171.711493][ T146] ? show_regs_print_info+0x20/0x20 [ 171.716689][ T146] ? load_image+0x400/0x400 [ 171.721179][ T146] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 171.726630][ T146] ? mutex_lock_io_nested+0x60/0x60 [ 171.731824][ T146] print_address_description+0x60/0x2d0 [ 171.737357][ T146] ? hci_le_meta_evt+0x1324/0x3c90 [ 171.742458][ T146] kasan_report+0xdf/0x130 [ 171.746867][ T146] ? hci_le_meta_evt+0x1324/0x3c90 [ 171.751970][ T146] hci_le_meta_evt+0x1324/0x3c90 [ 171.756910][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 171.763086][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 171.768710][ T146] ? mark_lock+0x94/0x320 [ 171.773029][ T146] ? mutex_unlock+0x10/0x10 [ 171.777525][ T146] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 171.783503][ T146] ? lock_chain_count+0x20/0x20 [ 171.788345][ T146] ? __rwlock_init+0x140/0x140 [ 171.793098][ T146] hci_event_packet+0xe48/0x1370 [ 171.798023][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 171.803216][ T146] ? rcu_lock_release+0x20/0x20 [ 171.808058][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 171.813247][ T146] hci_rx_work+0x255/0xa10 [ 171.817668][ T146] process_one_work+0x85f/0x1010 [ 171.822782][ T146] ? worker_detach_from_pool+0x240/0x240 [ 171.828406][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 171.833686][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 171.838703][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 171.844241][ T146] ? wq_worker_running+0x97/0x170 [ 171.849258][ T146] worker_thread+0xaa6/0x1290 [ 171.853961][ T146] kthread+0x436/0x520 [ 171.858017][ T146] ? rcu_lock_release+0x20/0x20 [ 171.862863][ T146] ? kthread_blkcg+0xd0/0xd0 [ 171.867443][ T146] ret_from_fork+0x1f/0x30 [ 171.871859][ T146] [ 171.874864][ T146] [ 171.877174][ T146] Allocated by task 5991: [ 171.881482][ T146] __kasan_kmalloc+0xb5/0xf0 [ 171.886058][ T146] __alloc_skb+0x22c/0x750 [ 171.890462][ T146] vhci_write+0xbc/0x450 [ 171.894698][ T146] vfs_write+0x745/0xd60 [ 171.898929][ T146] ksys_write+0x152/0x260 [ 171.903329][ T146] do_syscall_64+0x4c/0xa0 [ 171.907744][ T146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 171.913632][ T146] [ 171.915944][ T146] The buggy address belongs to the object at ffff888075e46800 [ 171.915944][ T146] which belongs to the cache kmalloc-1k of size 1024 [ 171.930069][ T146] The buggy address is located 10 bytes to the right of [ 171.930069][ T146] 1024-byte region [ffff888075e46800, ffff888075e46c00) [ 171.943849][ T146] The buggy address belongs to the page: [ 171.949464][ T146] page:ffffea0001d79000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888075e45800 pfn:0x75e40 [ 171.961035][ T146] head:ffffea0001d79000 order:3 compound_mapcount:0 compound_pincount:0 [ 171.969357][ T146] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 171.977350][ T146] raw: 00fff00000010200 ffffea00008f4e00 0000000200000002 ffff888016c41dc0 [ 171.986116][ T146] raw: ffff888075e45800 000000008010000f 00000001ffffffff 0000000000000000 [ 171.994682][ T146] page dumped because: kasan: bad access detected [ 172.001093][ T146] page_owner tracks the page as allocated [ 172.006790][ T146] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4191, ts 55873212410, free_ts 55817233658 [ 172.026017][ T146] get_page_from_freelist+0x1bbd/0x1ca0 [ 172.031567][ T146] __alloc_pages+0x1ee/0x480 [ 172.036159][ T146] new_slab+0xc0/0x4b0 [ 172.040214][ T146] ___slab_alloc+0x80a/0xdd0 [ 172.044786][ T146] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 172.050588][ T146] __alloc_skb+0x22c/0x750 [ 172.054998][ T146] rtmsg_fib+0xe7/0x4b0 [ 172.059145][ T146] fib_table_insert+0xd36/0x1bb0 [ 172.064069][ T146] fib_magic+0x2e1/0x3c0 [ 172.068298][ T146] fib_add_ifaddr+0x140/0x5e0 [ 172.072960][ T146] fib_inetaddr_event+0x13c/0x1c0 [ 172.077974][ T146] blocking_notifier_call_chain+0x103/0x1b0 [ 172.083854][ T146] __inet_insert_ifa+0x9f7/0xbe0 [ 172.088791][ T146] inet_rtm_newaddr+0x99a/0x1890 [ 172.093801][ T146] rtnetlink_rcv_msg+0x844/0xf30 [ 172.098726][ T146] netlink_rcv_skb+0x1f5/0x440 [ 172.103474][ T146] page last free stack trace: [ 172.108130][ T146] free_unref_page_prepare+0x637/0x6c0 [ 172.113575][ T146] free_unref_page+0x8f/0x2a0 [ 172.118259][ T146] __unfreeze_partials+0x1a5/0x200 [ 172.123354][ T146] put_cpu_partial+0x12d/0x190 [ 172.128101][ T146] qlist_free_all+0x35/0x90 [ 172.132586][ T146] kasan_quarantine_reduce+0x150/0x160 [ 172.138031][ T146] __kasan_slab_alloc+0x2f/0xd0 [ 172.142874][ T146] slab_post_alloc_hook+0x4c/0x380 [ 172.147967][ T146] __kmalloc+0x127/0x330 [ 172.152192][ T146] fib6_info_alloc+0x2e/0xe0 [ 172.156851][ T146] ip6_route_info_create+0x44f/0x1210 [ 172.162390][ T146] ip6_route_add+0x24/0x130 [ 172.166881][ T146] addrconf_add_dev+0x295/0x3c0 [ 172.171719][ T146] addrconf_init_auto_addrs+0x6a0/0xb00 [ 172.177363][ T146] addrconf_notify+0xa6b/0xf00 [ 172.182125][ T146] raw_notifier_call_chain+0xcb/0x160 [ 172.187489][ T146] [ 172.189810][ T146] Memory state around the buggy address: [ 172.195423][ T146] ffff888075e46b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 172.203470][ T146] ffff888075e46b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 172.211521][ T146] >ffff888075e46c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 172.219654][ T146] ^ [ 172.223963][ T146] ffff888075e46c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 172.232006][ T146] ffff888075e46d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 172.240223][ T146] ================================================================== [ 172.248275][ T146] Disabling lock debugging due to kernel taint [ 172.263485][ T146] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 172.270699][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Tainted: G B syzkaller #0 [ 172.279557][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.289671][ T146] Workqueue: hci2 hci_rx_work [ 172.294364][ T146] Call Trace: [ 172.297654][ T146] [ 172.300579][ T146] dump_stack_lvl+0x188/0x250 [ 172.305252][ T146] ? show_regs_print_info+0x20/0x20 [ 172.310446][ T146] ? load_image+0x400/0x400 [ 172.314967][ T146] panic+0x2e5/0x810 [ 172.318861][ T146] ? bpf_jit_dump+0xd0/0xd0 [ 172.323368][ T146] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 172.329365][ T146] ? _raw_spin_unlock+0x40/0x40 [ 172.334225][ T146] ? hci_le_meta_evt+0x1324/0x3c90 [ 172.339340][ T146] check_panic_on_warn+0x80/0xa0 [ 172.344290][ T146] ? hci_le_meta_evt+0x1324/0x3c90 [ 172.349414][ T146] end_report+0x6d/0xf0 [ 172.353578][ T146] kasan_report+0x102/0x130 [ 172.358068][ T146] ? hci_le_meta_evt+0x1324/0x3c90 [ 172.363163][ T146] hci_le_meta_evt+0x1324/0x3c90 [ 172.368087][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 172.374139][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 172.379788][ T146] ? mark_lock+0x94/0x320 [ 172.384120][ T146] ? mutex_unlock+0x10/0x10 [ 172.388611][ T146] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 172.394608][ T146] ? lock_chain_count+0x20/0x20 [ 172.399468][ T146] ? __rwlock_init+0x140/0x140 [ 172.404300][ T146] hci_event_packet+0xe48/0x1370 [ 172.409217][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 172.414399][ T146] ? rcu_lock_release+0x20/0x20 [ 172.419228][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 172.424413][ T146] hci_rx_work+0x255/0xa10 [ 172.428836][ T146] process_one_work+0x85f/0x1010 [ 172.433860][ T146] ? worker_detach_from_pool+0x240/0x240 [ 172.439469][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 172.444734][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 172.449740][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 172.455266][ T146] ? wq_worker_running+0x97/0x170 [ 172.460269][ T146] worker_thread+0xaa6/0x1290 [ 172.464930][ T146] kthread+0x436/0x520 [ 172.468978][ T146] ? rcu_lock_release+0x20/0x20 [ 172.473812][ T146] ? kthread_blkcg+0xd0/0xd0 [ 172.478471][ T146] ret_from_fork+0x1f/0x30 [ 172.482874][ T146] [ 172.486195][ T146] Kernel Offset: disabled [ 172.490513][ T146] Rebooting in 86400 seconds..