last executing test programs: 2.752971766s ago: executing program 4 (id=5): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r1, 0x701, 0x70bd2b, 0xfffffffe, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}}, 0x20000040) 2.633900218s ago: executing program 4 (id=9): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x9, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}, @cpuid={0x64, 0x18, {0x0, 0x6}}, @wr_crn={0x67, 0x20, {0x3, 0x3}}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0xb8}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.384988734s ago: executing program 2 (id=3): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000bc0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000f80)={0x4, 0x0, 0x0, 0x198, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r1}, [@striped={0x0, 0x48, 0x0, 0x60, 'striped\x00', {0x1, 0x20, '32', [{0x20, {@ram_num={'1:', 0x0}, 0x20, '4096'}}]}}]}) 2.273733565s ago: executing program 2 (id=14): mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f0000272000/0x3000)=nil, 0x3000, 0x16) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 2.216919321s ago: executing program 4 (id=15): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x38, r2, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x38}, 0x1, 0x0, 0x0, 0xf040}, 0x0) 2.146550578s ago: executing program 4 (id=16): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000f40)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000fc0)='X', 0x34000, 0x0, &(0x7f0000001000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001040)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0xf401, 0x0, 0x54, 0x4, 0x73}, 0x9c) 2.03872879s ago: executing program 4 (id=17): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x24000004) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, 0x0, &(0x7f0000000440)='GPL\x00', 0x4}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x3c7) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="00220f00"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000740), 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x800, 0x0, 0x0) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f0000000780)={0x3, 0x0, 0x0, 0xfff, 0x7, 0x9}) 1.25851654s ago: executing program 3 (id=21): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24000080) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x5c, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.229498903s ago: executing program 2 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x8000005}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 1.017065335s ago: executing program 2 (id=23): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x34}, 0x94) 1.016920225s ago: executing program 3 (id=24): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/comedi4\x00', 0x2, 0x0) ppoll(&(0x7f0000001400)=[{r0, 0x2}], 0x1, 0x0, 0x0, 0x0) 837.082324ms ago: executing program 0 (id=27): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f0000019380)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f00000193c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000019400)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffa, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000019500), 0x800001d, 0x1c) 788.154069ms ago: executing program 0 (id=28): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32, @ANYBLOB="d506330080"], 0x6f4}}, 0x0) 754.714182ms ago: executing program 0 (id=29): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56549, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xfff3}, {0xc, 0x9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 632.053715ms ago: executing program 0 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x173) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) llistxattr(&(0x7f0000000000)='./proc/thread-self/fail-nth\x00', &(0x7f0000000040)=""/6, 0x6) 621.934336ms ago: executing program 0 (id=31): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@acquire={0x16c, 0x17, 0x1, 0x70bd27, 0x25dfdbfe, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0xff}, @in6=@local, {@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x100, 0x4e20, 0x0, 0x2, 0xe0, 0x20, 0x3b}, {{@in6=@mcast2, @in=@broadcast, 0x4e21, 0x9, 0x4e22, 0x83, 0xa, 0x40, 0x0, 0xc}, {0x7f, 0xec2b, 0x5, 0xa, 0xd5, 0x6, 0x6, 0xb}, {0x7, 0xa0, 0x200000000009, 0x200000000000000}, 0xba, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x3, 0x1, 0x200, 0x70bd29}, [@tmpl={0x44, 0x5, [{{@in6=@mcast2, 0x4d5, 0x3c}, 0x8, @in6=@mcast2, 0x3d04, 0x5, 0x2, 0xcb, 0x580c, 0x3, 0x2}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) 529.940846ms ago: executing program 0 (id=32): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_vhci(&(0x7f0000000ac0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "991a1f"}}}, 0xd) 229.013147ms ago: executing program 2 (id=33): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f0000000100)="0bcde56ca9a62cbf", 0x8) syz_usb_disconnect(r1) 228.875496ms ago: executing program 1 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./gadget\x00', &(0x7f0000000640)='gadgetfs\x00', 0x0, 0x0) 208.400259ms ago: executing program 1 (id=35): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$int_in(r1, 0x5452, &(0x7f0000000400)=0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4008045}, 0x1) 185.028491ms ago: executing program 1 (id=36): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b551d77f9565b777f41282e", 0xd8}], 0x1}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{&(0x7f0000000200)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)='C', 0x1}], 0x1}}], 0x1, 0x0) 121.070908ms ago: executing program 3 (id=37): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="190000000800aaaaaaaaaa110103", 0xe) 120.775798ms ago: executing program 1 (id=38): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@ipv4_newrule={0x24, 0x20, 0x1, 0x2000000, 0x20000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x1753}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 120.662858ms ago: executing program 3 (id=39): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x501e, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f00000000c0)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) readv(r0, &(0x7f0000001940)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/250, 0xfa}], 0x2) 82.169962ms ago: executing program 1 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xa6) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r0, &(0x7f0000000480)='cpu.stat\x00', 0xea, 0x0) 73.401273ms ago: executing program 3 (id=41): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000040)={'pcmmio\x00', [0x100, 0x400004, 0xfffffffc, 0x2, 0x44, 0xf3, 0x79, 0x4, 0x80008, 0x5, 0x0, 0x64, 0xea, 0x1, 0x80006, 0xfd, 0x6, 0x7fffffff, 0x3, 0x7fffffff, 0xfffffd7f, 0xca9d, 0xdc, 0x20001e58, 0x8, 0xf39c, 0x8003, 0x1539b804, 0x5, 0x1, 0x80000000]}) 148.25µs ago: executing program 3 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='test,0x8000000000000000,0x1000', 0x1e) 0s ago: executing program 1 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x180) mknod$loop(&(0x7f0000000800)='./file0\x00', 0x6000, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x1a2) write(r0, &(0x7f0000000100)='27', 0x2) mount(&(0x7f00000001c0)=@filename='mtd0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='jffs2\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts. [ 51.767874][ T4175] cgroup: Unknown subsys name 'net' [ 51.942959][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.143221][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.238965][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.239159][ T4195] rdma_rxe: rxe_register_device failed with error -23 [ 54.246482][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.260935][ T4188] rdma_rxe: rxe_register_device failed with error -23 [ 54.263758][ T4187] rdma_rxe: rxe_register_device failed with error -23 [ 54.270737][ T4200] rdma_rxe: rxe_register_device failed with error -23 [ 54.275459][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.285496][ T4188] rdma_rxe: failed to add rxe_eth0 [ 54.293640][ T4187] rdma_rxe: failed to add rxe_eth0 [ 54.308174][ T4195] rdma_rxe: failed to add rxe_eth0 [ 54.314900][ T4200] rdma_rxe: failed to add rxe_eth0 [ 54.422967][ T13] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.422094][ T4190] infiniband rxe0: set active [ 54.442956][ T4190] infiniband rxe0: added rxe_eth0 [ 54.500571][ T4190] RDS/IB: rxe0: added [ 54.505082][ T4190] smc: adding ib device rxe0 with port count 1 [ 54.511702][ T4190] smc: ib device rxe0 port 1 has pnetid [ 54.527674][ T13] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.546601][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.681225][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 54.700122][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.711097][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 54.743185][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 54.760935][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 54.885172][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 55.001510][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.009708][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.018252][ T4200] device bridge_slave_0 entered promiscuous mode [ 55.040076][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.047158][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.056675][ T4188] device bridge_slave_0 entered promiscuous mode [ 55.069981][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.077064][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.085138][ T4200] device bridge_slave_1 entered promiscuous mode [ 55.092974][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 55.103045][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.112700][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.124109][ T4188] device bridge_slave_1 entered promiscuous mode [ 55.132608][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.141145][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.150520][ T4187] device bridge_slave_0 entered promiscuous mode [ 55.171960][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.182962][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.192316][ T4195] device bridge_slave_0 entered promiscuous mode [ 55.212794][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.224811][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.245478][ T4187] device bridge_slave_1 entered promiscuous mode [ 55.263251][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.272360][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.283734][ T4195] device bridge_slave_1 entered promiscuous mode [ 55.307028][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 55.326241][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.347519][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.375675][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.430339][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.441671][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.457807][ T4200] team0: Port device team_slave_0 added [ 55.468750][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.485950][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.506345][ T4200] team0: Port device team_slave_1 added [ 55.524770][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.553298][ T4188] team0: Port device team_slave_0 added [ 55.564264][ T1111] rxe_eth0 speed is unknown, defaulting to 1000 [ 55.582028][ T4187] team0: Port device team_slave_0 added [ 55.597681][ T4188] team0: Port device team_slave_1 added [ 55.611055][ T4187] team0: Port device team_slave_1 added [ 55.623453][ T4195] team0: Port device team_slave_0 added [ 55.632825][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.640176][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.666743][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.679078][ T3853] infiniband rxe0: set active [ 55.684340][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.691616][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.718274][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.734122][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.741240][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.767452][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.780851][ T4195] team0: Port device team_slave_1 added [ 55.786981][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.793970][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.820093][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.857278][ T4188] device hsr_slave_0 entered promiscuous mode [ 55.858022][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 55.870539][ T4188] device hsr_slave_1 entered promiscuous mode [ 55.896057][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.903371][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.929403][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.961326][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.968444][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.994613][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.006195][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.013508][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.039515][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.073515][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.080701][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.107391][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.131560][ T4200] device hsr_slave_0 entered promiscuous mode [ 56.138485][ T4200] device hsr_slave_1 entered promiscuous mode [ 56.144943][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.152747][ T4200] Cannot create hsr debugfs directory [ 56.190136][ T4187] device hsr_slave_0 entered promiscuous mode [ 56.197013][ T4187] device hsr_slave_1 entered promiscuous mode [ 56.204326][ T4189] Bluetooth: hci3: command 0x0409 tx timeout [ 56.208126][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 56.211039][ T4189] Bluetooth: hci2: command 0x0409 tx timeout [ 56.216613][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 56.229468][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.237006][ T4187] Cannot create hsr debugfs directory [ 56.286231][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 56.305997][ T4195] device hsr_slave_0 entered promiscuous mode [ 56.312730][ T4195] device hsr_slave_1 entered promiscuous mode [ 56.321012][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.328642][ T4195] Cannot create hsr debugfs directory [ 56.439527][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 56.580756][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.587962][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.595651][ T4190] device bridge_slave_0 entered promiscuous mode [ 56.604587][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.611817][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.620433][ T4190] device bridge_slave_1 entered promiscuous mode [ 56.656380][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.668226][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.679993][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.693512][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.707336][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.725906][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.736843][ T4190] team0: Port device team_slave_0 added [ 56.745053][ T4190] team0: Port device team_slave_1 added [ 56.771230][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.778438][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.804434][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.816466][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.823520][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.849920][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.883663][ T4200] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.894796][ T4200] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.903994][ T4200] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.913850][ T4200] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.957453][ T4190] device hsr_slave_0 entered promiscuous mode [ 56.965213][ T4190] device hsr_slave_1 entered promiscuous mode [ 56.972221][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.980054][ T4190] Cannot create hsr debugfs directory [ 57.030087][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.043890][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.053258][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.071085][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.166040][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.183800][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.193649][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.202650][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.221626][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.262174][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.295898][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.308444][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.322295][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.331486][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.342527][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.350440][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.371194][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.381951][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.396567][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.420070][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.429355][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.438366][ T1266] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.445581][ T1266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.454393][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.463495][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.472362][ T1266] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.479451][ T1266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.487321][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.496234][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.504991][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.512093][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.519661][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.529148][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.537552][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.544656][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.552246][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.561056][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.569726][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.577699][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.585769][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.596248][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.619777][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.651816][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.660834][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.670432][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.682366][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.691280][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.700514][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.709334][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.717634][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.726399][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.735011][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.744131][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.752502][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.761899][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.770371][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.778452][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.802283][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.812159][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.824692][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.836278][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.851202][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.866927][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.875533][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.884891][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.893403][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.903315][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.917869][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.936354][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.947793][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.969476][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.025455][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.035028][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.045830][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.052972][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.061495][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.071329][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.079997][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.087055][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.096746][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.105602][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.114402][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.123090][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.130252][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.139697][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.148389][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.156736][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.163809][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.171530][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.200608][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.221660][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.249943][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.261305][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.271698][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.282923][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.285033][ T4189] Bluetooth: hci1: command 0x041b tx timeout [ 58.293250][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.297191][ T4189] Bluetooth: hci2: command 0x041b tx timeout [ 58.306100][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.316698][ T4189] Bluetooth: hci0: command 0x041b tx timeout [ 58.320480][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.325496][ T4189] Bluetooth: hci3: command 0x041b tx timeout [ 58.334977][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.347648][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.356096][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.358208][ T4189] Bluetooth: hci4: command 0x041b tx timeout [ 58.367159][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.378234][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.396662][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.415966][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.424539][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.434171][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.443047][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.453822][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.462384][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.473772][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.482178][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.490620][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.498426][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.513034][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.527040][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.540195][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.549934][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.557425][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.583668][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.597812][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.607122][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.621139][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.628261][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.638292][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.645777][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.654413][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.697583][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.707579][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.723203][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.730370][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.744577][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.754021][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.763337][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.773234][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.784225][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.793494][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.804701][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.824627][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.835157][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.859309][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.871682][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.881934][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.899321][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.918414][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.932485][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.943559][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.952588][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.961299][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.969618][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.977073][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.996067][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.006438][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.043584][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.054064][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.063365][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.073849][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.089066][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.096848][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.112372][ T4200] device veth0_vlan entered promiscuous mode [ 59.124684][ T4188] device veth0_vlan entered promiscuous mode [ 59.133151][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.153067][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.173816][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.198702][ T4200] device veth1_vlan entered promiscuous mode [ 59.208110][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.225511][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.233907][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.254357][ T4188] device veth1_vlan entered promiscuous mode [ 59.283506][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.297449][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.306585][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.315886][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.325406][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.334652][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.365460][ T4195] device veth0_vlan entered promiscuous mode [ 59.372979][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.382345][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.391454][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.407838][ T4200] device veth0_macvtap entered promiscuous mode [ 59.423366][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.431487][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.440342][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.447741][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.455519][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.465857][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.474625][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.488196][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.498752][ T4200] device veth1_macvtap entered promiscuous mode [ 59.515757][ T4188] device veth0_macvtap entered promiscuous mode [ 59.526157][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.535348][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.543886][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.552646][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.562318][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.571200][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.579181][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.586825][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.599203][ T4195] device veth1_vlan entered promiscuous mode [ 59.611308][ T4188] device veth1_macvtap entered promiscuous mode [ 59.619843][ T4187] device veth0_vlan entered promiscuous mode [ 59.646603][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.654880][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.663952][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.672965][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.682434][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.695622][ T4187] device veth1_vlan entered promiscuous mode [ 59.706890][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.718600][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.730659][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.742605][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.768714][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.777391][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.790755][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.801350][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.810409][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.819357][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.829501][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.840061][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.851061][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.862457][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.871808][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.880809][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.890348][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.910274][ T4195] device veth0_macvtap entered promiscuous mode [ 59.918731][ T4200] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.927431][ T4200] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.937684][ T4200] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.946653][ T4200] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.957707][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.968102][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.976592][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.999703][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.009220][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.036290][ T4195] device veth1_macvtap entered promiscuous mode [ 60.077280][ T4187] device veth0_macvtap entered promiscuous mode [ 60.089387][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.097587][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.107700][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.116304][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.125501][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.134366][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.142423][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.150604][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.190657][ T4187] device veth1_macvtap entered promiscuous mode [ 60.198391][ T4190] device veth0_vlan entered promiscuous mode [ 60.210224][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.223613][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.234055][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.244748][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.256283][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.274902][ T4190] device veth1_vlan entered promiscuous mode [ 60.283053][ T302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.293794][ T302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.302771][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.313318][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.322097][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.331391][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.342070][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.351905][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.360089][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 60.366426][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 60.370714][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.383365][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 60.389753][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 60.390200][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.407064][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.418141][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.429711][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.442531][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.452540][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.455774][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 60.461642][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.477705][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.491348][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.501162][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.541625][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.554850][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.566278][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.576952][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.586868][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.600569][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.611527][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.634842][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.643840][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.660225][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.674072][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.685971][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.696687][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.707106][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.717834][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.729453][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.741779][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.750806][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.760116][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.769148][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.788923][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.793596][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.804827][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.824031][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.834835][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.842566][ T4190] device veth0_macvtap entered promiscuous mode [ 60.851771][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.872632][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.880923][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.891632][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.900164][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.914039][ T4190] device veth1_macvtap entered promiscuous mode [ 60.946168][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.957350][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.013366][ T302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.025253][ T302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.029286][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.050253][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.063304][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.073977][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.085120][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.095871][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.105790][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.116391][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.129930][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.140471][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.149964][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.166437][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.174696][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.183585][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.197893][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.216591][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.229991][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.242975][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.253467][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.263863][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.274527][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.284757][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.295742][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.307128][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.331641][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.344695][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.348247][ T4189] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 61.362225][ T302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.363382][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.380635][ T302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.386191][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.396726][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.406689][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.427254][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.454539][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.480439][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.506012][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.548548][ T302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.575571][ T302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.578063][ T4189] usb 2-1: device descriptor read/64, error -71 [ 61.585414][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.650366][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.677156][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.703341][ T302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.704425][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.717702][ T302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.724934][ T4316] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8'. [ 61.745922][ T4318] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.753772][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.867984][ T4189] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 61.950149][ T4330] device-mapper: table: 248:0: striped: Target length not divisible by chunk size [ 61.987109][ T4330] device-mapper: ioctl: error adding target to table [ 62.058217][ T4189] usb 2-1: device descriptor read/64, error -71 [ 62.178254][ T4189] usb usb2-port1: attempt power cycle [ 62.488692][ T4268] Bluetooth: hci1: command 0x0419 tx timeout [ 62.495925][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 62.511236][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 62.527679][ T4268] Bluetooth: hci3: command 0x0419 tx timeout [ 62.558480][ T4268] Bluetooth: hci4: command 0x0419 tx timeout [ 62.588175][ T4189] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 62.638069][ T4302] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.688448][ T4189] usb 2-1: device descriptor read/8, error -71 [ 62.963455][ T4189] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 62.998938][ T4302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.017982][ T4302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.037583][ T4302] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.063844][ T4302] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.073764][ T4189] usb 2-1: device descriptor read/8, error -71 [ 63.099161][ T4302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.156778][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.170850][ T4302] usb 5-1: config 0 descriptor?? [ 63.198386][ T4361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 63.212009][ T4189] usb usb2-port1: unable to enumerate USB device [ 63.250316][ T4361] Zero length message leads to an empty skb [ 63.664234][ T4302] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 63.684842][ T4302] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 63.696795][ T4302] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 63.706791][ T4302] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 63.717889][ T4302] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 63.731656][ T4302] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 63.746417][ T4302] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 63.765098][ T4302] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 63.777584][ T4302] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 63.787517][ T4302] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 63.800574][ T4302] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 63.810494][ T4302] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 63.822548][ T4302] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 63.832924][ T4302] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 63.843879][ T4302] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 63.857701][ T4302] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 63.923162][ T4302] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 63.961260][ T4302] usb 5-1: USB disconnect, device number 2 [ 64.023413][ T4385] fido_id[4385]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 64.142407][ T4393] netlink: 'syz.1.36': attribute type 4 has an invalid length. [ 64.282074][ T4405] ioremap: invalid physical address 8000000000000000 [ 64.291186][ T4405] ------------[ cut here ]------------ [ 64.296677][ T4405] WARNING: CPU: 0 PID: 4405 at arch/x86/mm/ioremap.c:200 __ioremap_caller+0x4f8/0x620 [ 64.307132][ T4405] Modules linked in: [ 64.307498][ T4407] FAULT_INJECTION: forcing a failure. [ 64.307498][ T4407] name failslab, interval 1, probability 0, space 0, times 1 [ 64.311761][ T4405] CPU: 0 PID: 4405 Comm: syz.3.42 Not tainted syzkaller #0 [ 64.332849][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 64.333100][ T4407] CPU: 1 PID: 4407 Comm: syz.1.43 Not tainted syzkaller #0 [ 64.347578][ T4407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 64.355974][ T4405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 64.357652][ T4407] Call Trace: [ 64.357662][ T4407] [ 64.357671][ T4407] dump_stack_lvl+0x188/0x250 [ 64.378597][ T4407] ? show_regs_print_info+0x20/0x20 [ 64.381906][ T4405] RIP: 0010:__ioremap_caller+0x4f8/0x620 [ 64.383806][ T4407] ? load_image+0x410/0x410 [ 64.383833][ T4407] ? __lock_acquire+0x7d40/0x7d40 [ 64.390199][ T4405] Code: 85 ff 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 69 43 00 48 8b 74 24 60 48 c7 c7 20 bc 28 8a e8 c8 58 88 08 <0f> 0b eb 8d 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 ee 48 8b 7c [ 64.393940][ T4407] should_fail+0x383/0x4b0 [ 64.393969][ T4407] should_failslab+0x5/0x20 [ 64.393986][ T4407] slab_pre_alloc_hook+0x51/0xc0 [ 64.399130][ T4405] RSP: 0018:ffffc900033ef900 EFLAGS: 00010246 [ 64.418573][ T4407] kmem_cache_alloc_trace+0x47/0x290 [ 64.418595][ T4407] ? __list_lru_init+0x535/0xac0 [ 64.418617][ T4407] __list_lru_init+0x535/0xac0 [ 64.418647][ T4407] alloc_super+0x787/0x970 [ 64.423159][ T4405] [ 64.427516][ T4407] ? kill_mtd_super+0x60/0x60 [ 64.427540][ T4407] sget_fc+0x2d4/0x6f0 [ 64.427559][ T4407] ? mtd_test_super+0x1d0/0x1d0 [ 64.432585][ T4405] RAX: 0000000000000032 RBX: 1ffff9200067df00 RCX: 2e2a1cea84673f00 [ 64.438547][ T4407] ? jffs2_reconfigure+0x310/0x310 [ 64.438566][ T4407] mtd_get_sb+0x5a/0x2b0 [ 64.438585][ T4407] ? mtd_get_sb_by_nr+0x7c/0xa0 [ 64.438604][ T4407] get_tree_mtd+0x5e2/0x760 [ 64.438622][ T4407] ? jffs2_reconfigure+0x310/0x310 [ 64.438637][ T4407] ? mtd_proc_show+0x270/0x270 [ 64.438654][ T4407] ? apparmor_capable+0x12c/0x190 [ 64.438671][ T4407] ? bpf_lsm_capable+0x5/0x10 [ 64.438685][ T4407] ? security_capable+0x85/0xb0 [ 64.438702][ T4407] vfs_get_tree+0x88/0x270 [ 64.438721][ T4407] do_new_mount+0x247/0xa40 [ 64.438746][ T4407] __se_sys_mount+0x2e3/0x3d0 [ 64.438769][ T4407] ? __x64_sys_mount+0xc0/0xc0 [ 64.438788][ T4407] ? lockdep_hardirqs_on+0x94/0x140 [ 64.438806][ T4407] ? __x64_sys_mount+0x1c/0xc0 [ 64.438825][ T4407] do_syscall_64+0x4c/0xa0 [ 64.438840][ T4407] ? clear_bhb_loop+0x30/0x80 [ 64.438854][ T4407] ? clear_bhb_loop+0x30/0x80 [ 64.438870][ T4407] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.438896][ T4407] RIP: 0033:0x7f74f3016559 [ 64.438912][ T4407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.438924][ T4407] RSP: 002b:00007f74f126d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 64.438943][ T4407] RAX: ffffffffffffffda RBX: 00007f74f329cfa0 RCX: 00007f74f3016559 [ 64.438954][ T4407] RDX: 0000200000000280 RSI: 0000200000000200 RDI: 00002000000001c0 [ 64.438965][ T4407] RBP: 00007f74f30adb20 R08: 0000000000000000 R09: 0000000000000000 [ 64.438976][ T4407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.438986][ T4407] R13: 00007f74f329d038 R14: 00007f74f329cfa0 R15: 00007ffc51753d58 [ 64.439013][ T4407] [ 64.654508][ T4405] RDX: ffffc9000cbc1000 RSI: 0000000000004fc5 RDI: 0000000000004fc6 [ 64.664999][ T4405] RBP: ffffc900033efa10 R08: ffff8880b8e33d7f R09: 1ffff110171c67af [ 64.673280][ T4405] R10: dffffc0000000000 R11: ffffed10171c67b0 R12: 000000000000002e [ 64.684640][ T4405] R13: 8000000000000000 R14: 0000000000020000 R15: dffffc0000000000 [ 64.692739][ T4405] FS: 00007f4b84aa06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 64.702448][ T4405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.709129][ T4405] CR2: 00007f74f326d2f8 CR3: 000000005a858000 CR4: 00000000003506f0 [ 64.717106][ T4405] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.725325][ T4405] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.733577][ T4405] Call Trace: [ 64.736990][ T4405] [ 64.740103][ T4405] ? phram_setup+0x87c/0xdf0 [ 64.744727][ T4405] ? ioremap+0x30/0x30 [ 64.748907][ T4405] phram_setup+0x87c/0xdf0 [ 64.753354][ T4405] ? __mutex_lock_common+0x435/0x2400 [ 64.761829][ T4405] ? phram_param_call+0x70/0x70 [ 64.766706][ T4405] ? mutex_lock_io_nested+0x60/0x60 [ 64.771957][ T4405] ? read_lock_is_recursive+0x10/0x10 [ 64.777365][ T4405] param_attr_store+0x20a/0x300 [ 64.782297][ T4405] ? param_attr_show+0x170/0x170 [ 64.787241][ T4405] ? sysfs_kf_read+0x350/0x350 [ 64.792029][ T4405] module_attr_store+0x5b/0x80 [ 64.796798][ T4405] kernfs_fop_write_iter+0x3a8/0x500 [ 64.802867][ T4405] vfs_write+0x748/0xd70 [ 64.807151][ T4405] ? file_end_write+0x250/0x250 [ 64.812090][ T4405] ? mutex_lock_nested+0x17/0x20 [ 64.817035][ T4405] ? __fdget_pos+0x2bf/0x370 [ 64.821830][ T4405] ? ksys_write+0x70/0x260 [ 64.826265][ T4405] ksys_write+0x153/0x260 [ 64.830658][ T4405] ? __ia32_sys_read+0x80/0x80 [ 64.835454][ T4405] ? lockdep_hardirqs_on+0x94/0x140 [ 64.841407][ T4405] do_syscall_64+0x4c/0xa0 [ 64.846100][ T4405] ? clear_bhb_loop+0x30/0x80 [ 64.850944][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 64.856158][ T4405] ? clear_bhb_loop+0x30/0x80 [ 64.860962][ T4405] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.866864][ T4405] RIP: 0033:0x7f4b86849559 [ 64.872516][ T4405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.892441][ T4405] RSP: 002b:00007f4b84aa0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 64.901869][ T4405] RAX: ffffffffffffffda RBX: 00007f4b86acffa0 RCX: 00007f4b86849559 [ 64.909974][ T4405] RDX: 000000000000001e RSI: 0000200000000600 RDI: 0000000000000003 [ 64.918781][ T4405] RBP: 00007f4b868e0b20 R08: 0000000000000000 R09: 0000000000000000 [ 64.926774][ T4405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.934999][ T4405] R13: 00007f4b86ad0038 R14: 00007f4b86acffa0 R15: 00007ffd78d33778 [ 64.943071][ T4405] [ 64.946109][ T4405] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 64.953365][ T4405] CPU: 0 PID: 4405 Comm: syz.3.42 Not tainted syzkaller #0 [ 64.960549][ T4405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 64.970607][ T4405] Call Trace: [ 64.973884][ T4405] [ 64.976809][ T4405] dump_stack_lvl+0x188/0x250 [ 64.981478][ T4405] ? show_regs_print_info+0x20/0x20 [ 64.986680][ T4405] ? load_image+0x410/0x410 [ 64.991171][ T4405] panic+0x2f8/0x850 [ 64.995060][ T4405] ? bpf_jit_dump+0xd0/0xd0 [ 64.999581][ T4405] ? __ioremap_caller+0x4f8/0x620 [ 65.004700][ T4405] __warn+0x248/0x2b0 [ 65.008678][ T4405] ? __ioremap_caller+0x4f8/0x620 [ 65.013686][ T4405] report_bug+0x1b9/0x2e0 [ 65.018010][ T4405] handle_bug+0x3a/0x70 [ 65.022163][ T4405] exc_invalid_op+0x16/0x40 [ 65.026668][ T4405] asm_exc_invalid_op+0x16/0x20 [ 65.031517][ T4405] RIP: 0010:__ioremap_caller+0x4f8/0x620 [ 65.037134][ T4405] Code: 85 ff 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 69 43 00 48 8b 74 24 60 48 c7 c7 20 bc 28 8a e8 c8 58 88 08 <0f> 0b eb 8d 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 ee 48 8b 7c [ 65.056723][ T4405] RSP: 0018:ffffc900033ef900 EFLAGS: 00010246 [ 65.062800][ T4405] RAX: 0000000000000032 RBX: 1ffff9200067df00 RCX: 2e2a1cea84673f00 [ 65.070780][ T4405] RDX: ffffc9000cbc1000 RSI: 0000000000004fc5 RDI: 0000000000004fc6 [ 65.078745][ T4405] RBP: ffffc900033efa10 R08: ffff8880b8e33d7f R09: 1ffff110171c67af [ 65.086722][ T4405] R10: dffffc0000000000 R11: ffffed10171c67b0 R12: 000000000000002e [ 65.094687][ T4405] R13: 8000000000000000 R14: 0000000000020000 R15: dffffc0000000000 [ 65.102672][ T4405] ? phram_setup+0x87c/0xdf0 [ 65.107282][ T4405] ? ioremap+0x30/0x30 [ 65.111386][ T4405] phram_setup+0x87c/0xdf0 [ 65.115813][ T4405] ? __mutex_lock_common+0x435/0x2400 [ 65.121203][ T4405] ? phram_param_call+0x70/0x70 [ 65.126072][ T4405] ? mutex_lock_io_nested+0x60/0x60 [ 65.131262][ T4405] ? read_lock_is_recursive+0x10/0x10 [ 65.136623][ T4405] param_attr_store+0x20a/0x300 [ 65.141468][ T4405] ? param_attr_show+0x170/0x170 [ 65.146405][ T4405] ? sysfs_kf_read+0x350/0x350 [ 65.151235][ T4405] module_attr_store+0x5b/0x80 [ 65.155979][ T4405] kernfs_fop_write_iter+0x3a8/0x500 [ 65.161260][ T4405] vfs_write+0x748/0xd70 [ 65.165519][ T4405] ? file_end_write+0x250/0x250 [ 65.170373][ T4405] ? mutex_lock_nested+0x17/0x20 [ 65.175298][ T4405] ? __fdget_pos+0x2bf/0x370 [ 65.179874][ T4405] ? ksys_write+0x70/0x260 [ 65.184295][ T4405] ksys_write+0x153/0x260 [ 65.188621][ T4405] ? __ia32_sys_read+0x80/0x80 [ 65.193390][ T4405] ? lockdep_hardirqs_on+0x94/0x140 [ 65.198593][ T4405] do_syscall_64+0x4c/0xa0 [ 65.203020][ T4405] ? clear_bhb_loop+0x30/0x80 [ 65.207700][ T4405] ? clear_bhb_loop+0x30/0x80 [ 65.212391][ T4405] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.218274][ T4405] RIP: 0033:0x7f4b86849559 [ 65.222698][ T4405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.242315][ T4405] RSP: 002b:00007f4b84aa0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 65.250764][ T4405] RAX: ffffffffffffffda RBX: 00007f4b86acffa0 RCX: 00007f4b86849559 [ 65.258729][ T4405] RDX: 000000000000001e RSI: 0000200000000600 RDI: 0000000000000003 [ 65.266714][ T4405] RBP: 00007f4b868e0b20 R08: 0000000000000000 R09: 0000000000000000 [ 65.274679][ T4405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.282640][ T4405] R13: 00007f4b86ad0038 R14: 00007f4b86acffa0 R15: 00007ffd78d33778 [ 65.290633][ T4405] [ 65.293885][ T4405] Kernel Offset: disabled [ 65.298326][ T4405] Rebooting in 86400 seconds..