last executing test programs: 19.256243543s ago: executing program 1 (id=274): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) setns(0xc9, 0x0) r3 = socket(0x2a, 0x2, 0x9) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/fscaps', 0x0, 0x95) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x800c5012, 0x0) writev(r3, &(0x7f0000000640)=[{&(0x7f0000000080)='k', 0x1}, {0x0}, {0x0}], 0x3) 16.644851518s ago: executing program 1 (id=278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffffd0, 0x0, 0x1, 0x0, 0x0, 0x44820}, 0x8000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0xfeffff, 0x8, 0x0, &(0x7f0000000700)="c45c57ce395de5b2", 0x0, 0xf0}, 0x50) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000000)='fuse\x00', 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) eventfd2(0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) dup(r5) socket$inet(0x2, 0x6, 0x8e) 16.644304438s ago: executing program 4 (id=279): syz_open_dev$vim2m(0x0, 0x7, 0x2) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a42500010203010902bd0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402df032402"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 15.448600944s ago: executing program 1 (id=280): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./sec/tomoyo/domain_policy\x00', 0x1ef) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 14.115916322s ago: executing program 0 (id=288): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x12000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @ioapic={0xb000, 0xb8, 0x80000000, 0x5e30, 0x0, [{0x1, 0x57, 0x6, '\x00', 0x12}, {0xf, 0x2, 0xf, '\x00', 0xc}, {0x7, 0x6, 0x40}, {0x91, 0x79, 0xff}, {0x7, 0x1, 0x1, '\x00', 0x2}, {0x8, 0x4, 0x1, '\x00', 0x7}, {0x0, 0x7, 0x8, '\x00', 0xb}, {0x0, 0x4, 0xa4, '\x00', 0x7}, {0x50, 0x5, 0xd7, '\x00', 0xb2}, {0xd5, 0xe, 0x6, '\x00', 0x8}, {0xd7, 0x1, 0x8, '\x00', 0x4}, {0x1, 0x1, 0x2, '\x00', 0x5}, {0x3f, 0x3, 0xc, '\x00', 0x4}, {0x9, 0x1, 0x1, '\x00', 0x1}, {0x1, 0x1, 0x8, '\x00', 0x1}, {0xb, 0x4, 0x8, '\x00', 0x1}, {0x6, 0x4, 0x7, '\x00', 0x2}, {0x3, 0x8, 0x2, '\x00', 0x80}, {0x5, 0x5, 0x3, '\x00', 0x6}, {0x90, 0x1, 0x3e, '\x00', 0xf7}, {0x7, 0x14, 0x4, '\x00', 0xf}, {0x6, 0xd, 0x9, '\x00', 0x3}, {0x6, 0x1, 0x1}, {0x9, 0xff, 0x1, '\x00', 0x5}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.594492123s ago: executing program 4 (id=289): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x44, 0x1, 0x70bd28, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x12, 0x1, 0x0, 0x1, [@generic="c78c42412853ec1e921ede6c3965"]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 13.483758135s ago: executing program 4 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffffd0, 0x0, 0x1, 0x0, 0x0, 0x44820}, 0x8000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0xfeffff, 0x8, 0x0, &(0x7f0000000700)="c45c57ce395de5b2", 0x0, 0xf0}, 0x50) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000000)='fuse\x00', 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) eventfd2(0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) dup(r5) socket$inet(0x2, 0x6, 0x8e) 12.195808952s ago: executing program 0 (id=291): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) 12.160785743s ago: executing program 4 (id=292): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$bind(0x0, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x2108cff, 0x0) 10.714081803s ago: executing program 3 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) add_key$user(&(0x7f0000000340), 0x0, &(0x7f0000000500)="b383134a92977de17e7ae6e91c3b32d2ce0d73596b87aeb5c47f2d3ad8d4fac1166073a0a08f9067d32376305399da113f17ceb0750adfe41abea29d662f154a76f0b88e386cf992416eb0dc83dd52e4dd8fac37a2c8986d0a7f57c616eb6764090f7ade62d94048cf89dc59494ef686586c48b48e1a0e31942da55b5d78cc868180b08e2bb67dbb75", 0x89, 0xfffffffffffffffd) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYRESDEC], 0x58}}, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) syz_usb_connect$uac3(0x0, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ba0d001040000102030109028d000301635006080b00ff010130020904000000010130000a24010a2900010000000c240b070105"], 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ed) r8 = open$dir(&(0x7f0000000180)='./config/nullb/nullb1/submit_queues\x00', 0x20000, 0xf0) readv(r8, &(0x7f00000017c0)=[{&(0x7f0000001880)=""/255, 0xff}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b50a0000000000007910480000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 9.827199892s ago: executing program 0 (id=295): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 9.687773815s ago: executing program 1 (id=296): r0 = socket$nl_route(0x10, 0x3, 0x0) fanotify_init(0x200, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pipe2$watch_queue(0x0, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, 0x0, 0xc580, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x3, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$EVIOCGSW(r1, 0x8040451b, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) r7 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000040)={0x7, @win={{0xde, 0x2, 0x6, 0x9}, 0x7, 0x4, &(0x7f00000001c0)={{0xffffff07, 0x5, 0x7, 0x8}, &(0x7f0000000180)={{0xb, 0x7, 0xe, 0x6}}}, 0x5, &(0x7f00000002c0), 0x3}}) sendfile(r2, r1, 0x0, 0x23b) r8 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80) ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @string=0x0}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vxcan1\x00', &(0x7f0000000000)=@ethtool_channels={0x11, 0x2, 0x0, 0x8c80, 0x0, 0x3, 0x100000, 0x0, 0x7}}) socket(0xa, 0x5, 0x0) 8.611163008s ago: executing program 0 (id=297): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x203, 0xa, [0x101]}}}}, 0x17) 8.02861335s ago: executing program 2 (id=298): inotify_init1(0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300), 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000008000003c0812800b0af1d1bde01b37010000000000000000000000000000000000000100"/55], 0x5c}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f00000000c0)=0x81) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001dc0)='ns/net\x00') ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f00000005c0)=""/143, 0x8f}, {&(0x7f0000000000)=""/13, 0xf}], 0xd) 7.048134861s ago: executing program 2 (id=299): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000000c0)=0x8000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r4, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000440)={@cgroup=r5, r5, 0x2f, 0x18, 0x4, @void, @value, @void, @void, r6}, 0x20) 7.009992312s ago: executing program 3 (id=300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)={[&(0x7f0000000700)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) 5.823769797s ago: executing program 3 (id=301): syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0x7) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) r0 = socket$rxrpc(0x21, 0x2, 0xa) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) io_setup(0x40a, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0xf0}]) syslog(0x2, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001640)=[{{&(0x7f0000000680)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8000000) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) readv(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000340)=""/129, 0x81}], 0x1) readv(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x1405, 0x1, 0x70bd26, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) 5.285278808s ago: executing program 2 (id=302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffffd0, 0x0, 0x1, 0x0, 0x0, 0x44820}, 0x8000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0xfeffff, 0x8, 0x0, &(0x7f0000000700)="c45c57ce395de5b2", 0x0, 0xf0}, 0x50) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000000)='fuse\x00', 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) eventfd2(0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) dup(r5) socket$inet(0x2, 0x6, 0x8e) 5.271807258s ago: executing program 4 (id=303): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2800) r4 = socket(0x1f, 0x5, 0x8) bind(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x80000001, @private1, 0x3}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10}, 0x94) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000000040)={0x2, 0xfe}, 0x2) shutdown(r5, 0x2) setreuid(0x0, 0xee00) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.095915353s ago: executing program 4 (id=304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f0000000380)={[0x200000000673]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='select \n', 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(r1, &(0x7f0000000100)='file read \\-tc/passwd task.uid=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) 3.007009316s ago: executing program 2 (id=305): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) 2.956349557s ago: executing program 0 (id=306): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./sec/tomoyo/domain_policy\x00', 0x1ef) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.455949048s ago: executing program 1 (id=307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000400)) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)={[&(0x7f0000000700)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) 1.307787772s ago: executing program 1 (id=308): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00009800"/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) setresgid(0xffffffffffffffff, 0xee01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000001c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000200)=0x1) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) 267.814694ms ago: executing program 2 (id=309): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000200)={0x14, 0x11, 0x1, {0x8, 0x1, 0x6}}, 0x14) 174.642136ms ago: executing program 2 (id=310): inotify_init1(0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300), 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000008000003c0812800b0af1d1bde01b37010000000000000000000000000000000000000100"/55], 0x5c}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f00000000c0)=0x81) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001dc0)='ns/net\x00') ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f00000005c0)=""/143, 0x8f}, {&(0x7f0000000000)=""/13, 0xf}], 0xd) 174.396076ms ago: executing program 3 (id=311): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000001c0)=""/171, &(0x7f0000000280)=0xab) 174.157085ms ago: executing program 0 (id=312): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) pidfd_send_signal(r6, 0x3b, &(0x7f0000000580)={0x20000030, 0x10, 0x6}, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0c02, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'caif0\x00', 0x1}) ioctl$TUNSETDEBUG(r7, 0x400454c9, 0xffffffffffffffff) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000002100)=0x40) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080)={0x1, 0xa7db}, 0x8) 91.914028ms ago: executing program 3 (id=313): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$bind(0x0, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x2108cff, 0x0) 0s ago: executing program 3 (id=314): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000080)={0x40, 0x7, 0x6, "e7d6151b921b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.103' (ED25519) to the list of known hosts. [ 57.276617][ T4171] cgroup: Unknown subsys name 'net' [ 57.419640][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.786829][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.259403][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 60.283446][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 60.305369][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 60.378942][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 60.401595][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 60.507629][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.515950][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.524741][ T4188] device bridge_slave_0 entered promiscuous mode [ 60.541462][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.548667][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.557203][ T4188] device bridge_slave_1 entered promiscuous mode [ 60.565872][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.572973][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.581093][ T4186] device bridge_slave_0 entered promiscuous mode [ 60.600272][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.607886][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.617275][ T4184] device bridge_slave_0 entered promiscuous mode [ 60.634627][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.642169][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.650426][ T4186] device bridge_slave_1 entered promiscuous mode [ 60.665596][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.673058][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.681854][ T4184] device bridge_slave_1 entered promiscuous mode [ 60.703031][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.711083][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.719760][ T4185] device bridge_slave_0 entered promiscuous mode [ 60.740477][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.761035][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.769418][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.777655][ T4185] device bridge_slave_1 entered promiscuous mode [ 60.794306][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.805402][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.825393][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.837283][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.853480][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.876448][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.883974][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.891791][ T4187] device bridge_slave_0 entered promiscuous mode [ 60.914522][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.936390][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.945621][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.954438][ T4187] device bridge_slave_1 entered promiscuous mode [ 60.964582][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.991884][ T4188] team0: Port device team_slave_0 added [ 61.000651][ T4186] team0: Port device team_slave_0 added [ 61.017039][ T4184] team0: Port device team_slave_0 added [ 61.037992][ T4188] team0: Port device team_slave_1 added [ 61.046652][ T4186] team0: Port device team_slave_1 added [ 61.061603][ T4184] team0: Port device team_slave_1 added [ 61.077828][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.090189][ T4185] team0: Port device team_slave_0 added [ 61.114883][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.133534][ T4185] team0: Port device team_slave_1 added [ 61.146606][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.154163][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.180340][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.192668][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.200046][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.226942][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.252981][ T4187] team0: Port device team_slave_0 added [ 61.259568][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.266966][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.293348][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.305707][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.312700][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.339088][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.356697][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.363733][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.389832][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.409677][ T4187] team0: Port device team_slave_1 added [ 61.415992][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.422992][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.449319][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.468349][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.476216][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.502192][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.519865][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.527467][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.553809][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.596263][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.603264][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.630191][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.664822][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.671790][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.698452][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.712920][ T4188] device hsr_slave_0 entered promiscuous mode [ 61.720219][ T4188] device hsr_slave_1 entered promiscuous mode [ 61.734406][ T4186] device hsr_slave_0 entered promiscuous mode [ 61.741461][ T4186] device hsr_slave_1 entered promiscuous mode [ 61.750629][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.759762][ T4186] Cannot create hsr debugfs directory [ 61.794572][ T4185] device hsr_slave_0 entered promiscuous mode [ 61.801552][ T4185] device hsr_slave_1 entered promiscuous mode [ 61.808389][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.816665][ T4185] Cannot create hsr debugfs directory [ 61.845158][ T4187] device hsr_slave_0 entered promiscuous mode [ 61.852047][ T4187] device hsr_slave_1 entered promiscuous mode [ 61.859102][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.866912][ T4187] Cannot create hsr debugfs directory [ 61.876252][ T4184] device hsr_slave_0 entered promiscuous mode [ 61.883342][ T4184] device hsr_slave_1 entered promiscuous mode [ 61.891802][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.899940][ T4184] Cannot create hsr debugfs directory [ 61.944167][ T4173] Bluetooth: hci4: command 0x0409 tx timeout [ 61.944167][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 61.945003][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 61.950863][ T4173] Bluetooth: hci0: command 0x0409 tx timeout [ 61.962274][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 62.239040][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.252039][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.263960][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.274549][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.320022][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.330283][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.341459][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.351243][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.402584][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.444916][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.454174][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.464381][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.503154][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.517254][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.527084][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.549987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.559354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.572227][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.587275][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.600769][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.640520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.650538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.660353][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.667613][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.676518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.702836][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.719683][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.727480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.736917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.745910][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.752960][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.760626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.772956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.782494][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.792558][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.803478][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.816601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.827456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.848106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.860891][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.891843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.901359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.909916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.918646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.942470][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.954204][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.973560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.982895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.998718][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.005862][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.021136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.030473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.039829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.048362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.057316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.065958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.076760][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.083862][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.091528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.100221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.120139][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.139019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.150266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.166450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.180189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.200517][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.220264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.229448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.238319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.248184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.255945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.271214][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.287417][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.295952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.304892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.312712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.321935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.331565][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.338676][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.346894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.356940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.365670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.376831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.385347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.399328][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.418931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.427269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.435704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.446141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.455704][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.462772][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.470611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.509412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.518982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.528623][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.535741][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.551536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.560273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.569532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.578221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.587043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.597385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.605895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.621683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.630912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.639971][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.647095][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.660534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.669376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.692657][ T4184] device veth0_vlan entered promiscuous mode [ 63.718520][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.734405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.743151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.751614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.761270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.770111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.778713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.788440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.797555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.806156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.815644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.825192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.832945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.840987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.852009][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.878003][ T4184] device veth1_vlan entered promiscuous mode [ 63.892176][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.904553][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.923146][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.935715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.945014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.954736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.963235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.972091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.981205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.990116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.998857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.007246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.013939][ T4229] Bluetooth: hci3: command 0x041b tx timeout [ 64.014652][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 64.024029][ T4229] Bluetooth: hci0: command 0x041b tx timeout [ 64.027154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.036996][ T4229] Bluetooth: hci1: command 0x041b tx timeout [ 64.040881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.047859][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 64.058025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.077662][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.089541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.098320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.109373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.118012][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.125116][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.182654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.191323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.201002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.210819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.221157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.233610][ T4184] device veth0_macvtap entered promiscuous mode [ 64.263010][ T4184] device veth1_macvtap entered promiscuous mode [ 64.274403][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.282436][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.290831][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.300150][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.309374][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.316466][ T4246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.326077][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.341328][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.380595][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.389682][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.406769][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.418690][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.426448][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.435556][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.444263][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.452697][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.461396][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.470549][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.478912][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.487530][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.496680][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.505300][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.513150][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.525513][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.535678][ T4185] device veth0_vlan entered promiscuous mode [ 64.553588][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.575717][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.598946][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.608145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.618143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.626865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.635749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.645167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.652561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.665384][ T4185] device veth1_vlan entered promiscuous mode [ 64.676883][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.689170][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.700712][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.713000][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.802737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.824966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.840785][ T4185] device veth0_macvtap entered promiscuous mode [ 64.883926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.892708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.905570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.914966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.926220][ T4185] device veth1_macvtap entered promiscuous mode [ 64.933159][ T4188] device veth0_vlan entered promiscuous mode [ 64.958798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.968123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.978832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.986791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.994858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.003393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.017160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.025115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.044703][ T4188] device veth1_vlan entered promiscuous mode [ 65.065160][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.077612][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.089425][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.112547][ T4187] device veth0_vlan entered promiscuous mode [ 65.124854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.132887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.143461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.152262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.161074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.169351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.178727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.188432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.205750][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.218878][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.230523][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.242460][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.266161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.274781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.285900][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.295916][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.305481][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.314516][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.327121][ T4187] device veth1_vlan entered promiscuous mode [ 65.345606][ T4188] device veth0_macvtap entered promiscuous mode [ 65.361716][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.368429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.371564][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.390434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.399208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.409156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.426608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.435092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.456919][ T4188] device veth1_macvtap entered promiscuous mode [ 65.498340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.511544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.520773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.531536][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.541809][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.568375][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.582068][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.593233][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.603106][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.615730][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.625769][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.637394][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.648945][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.658615][ T4187] device veth0_macvtap entered promiscuous mode [ 65.678705][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.688494][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.699452][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.724094][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.737398][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.747283][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.758732][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.769717][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.783116][ T4187] device veth1_macvtap entered promiscuous mode [ 65.790248][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.800297][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.807837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.823126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.840198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.841744][ T4196] Bluetooth: unknown link type 128 [ 65.849483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.866281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.143653][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.173669][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.203656][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.353659][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.403657][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.453657][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.473692][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 66.483688][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 66.493689][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 66.503693][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 67.055697][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 67.076902][ T4186] device veth0_vlan entered promiscuous mode [ 67.085447][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 67.099607][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.112490][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 67.122085][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.122322][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 67.136498][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.138212][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 67.145871][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.162537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.170661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.230770][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.248659][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.261202][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.271802][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.281811][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.292382][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.305933][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.349757][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.360890][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.377487][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.390543][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.406626][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.419646][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.437327][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.450512][ T4186] device veth1_vlan entered promiscuous mode [ 67.468558][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.480590][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.493079][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.504570][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.542884][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.551987][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.565042][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.577538][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.618283][ T302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.635319][ T302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.656645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.742274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.755268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.767035][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.779312][ T4186] device veth0_macvtap entered promiscuous mode [ 67.789580][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.828090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.842086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.068288][ T4186] device veth1_macvtap entered promiscuous mode [ 68.132810][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.165476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.184247][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.272459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.392808][ T4246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.472007][ T4246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.581406][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.728739][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.745101][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.755579][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.767218][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.777400][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.788013][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.799866][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.811052][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.817181][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 68.827721][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.869746][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.888310][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.912406][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.947175][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.068887][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.210022][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.341013][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.449366][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.566651][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 69.577530][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.602571][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 69.658459][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 69.695527][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.706798][ T4230] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.748078][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 69.807243][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 69.838256][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.925940][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.944395][ T4296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 69.959153][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.967578][ T4230] usb 2-1: Using ep0 maxpacket: 16 [ 70.000038][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.038286][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.094919][ T4230] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.210069][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.229099][ T4230] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.277751][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.349071][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.416100][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.455110][ T4230] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 70.487324][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.524728][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.569778][ T4230] usb 2-1: Product: syz [ 70.605585][ T4230] usb 2-1: Manufacturer: syz [ 70.641847][ T4230] usb 2-1: SerialNumber: syz [ 70.817579][ T4302] Bluetooth: hci5: command 0x1003 tx timeout [ 70.837006][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 72.117648][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.124439][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.185884][ T4232] Bluetooth: hci0: command 0x0409 tx timeout [ 72.234052][ T4230] usb 2-1: 0:2 : does not exist [ 72.380721][ T4230] usb 2-1: USB disconnect, device number 2 [ 72.398363][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.422075][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.442147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.469090][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.492847][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.504823][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.700120][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 73.230206][ T4230] Bluetooth: hci5: command 0x1001 tx timeout [ 74.378001][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 74.678653][ T4324] syz.0.14 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 74.768199][ T4326] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.933735][ T4336] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.812350][ T23] Bluetooth: hci5: command 0x1009 tx timeout [ 78.833338][ T4302] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 79.689649][ T4358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23'. [ 81.708258][ T4358] syz.0.23 (4358) used greatest stack depth: 21104 bytes left [ 85.736360][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 85.746414][ T4196] CPU: 1 PID: 4196 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 85.754006][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.764187][ T4196] Workqueue: hci3 hci_rx_work [ 85.768953][ T4196] Call Trace: [ 85.772253][ T4196] [ 85.775195][ T4196] dump_stack_lvl+0x188/0x250 [ 85.779904][ T4196] ? show_regs_print_info+0x20/0x20 [ 85.785129][ T4196] ? load_image+0x410/0x410 [ 85.789671][ T4196] sysfs_create_dir_ns+0x26a/0x290 [ 85.794812][ T4196] ? sysfs_warn_dup+0xa0/0xa0 [ 85.799510][ T4196] ? kthread+0x42e/0x520 [ 85.803779][ T4196] ? do_raw_spin_unlock+0x11d/0x230 [ 85.809005][ T4196] kobject_add_internal+0x5ba/0xcd0 [ 85.814234][ T4196] kobject_add+0x160/0x230 [ 85.818676][ T4196] ? kobject_init+0x1c0/0x1c0 [ 85.823808][ T4196] ? __raw_spin_lock_init+0x41/0x100 [ 85.829112][ T4196] ? klist_children_get+0x50/0x50 [ 85.834158][ T4196] ? get_device_parent+0x121/0x3e0 [ 85.839290][ T4196] device_add+0x470/0x1050 [ 85.843727][ T4196] ? device_initialize+0x2a5/0x4d0 [ 85.848861][ T4196] hci_conn_add_sysfs+0xd1/0x1e0 [ 85.853827][ T4196] le_conn_complete_evt+0xc55/0x14d0 [ 85.859147][ T4196] ? cs_le_create_conn+0x5e0/0x5e0 [ 85.864293][ T4196] ? __mutex_trylock_common+0x15c/0x260 [ 85.869880][ T4196] hci_le_meta_evt+0x285/0x3ca0 [ 85.874755][ T4196] ? hci_event_packet+0x363/0x1310 [ 85.879887][ T4196] ? __lock_acquire+0x7d40/0x7d40 [ 85.884955][ T4196] ? hci_remote_host_features_evt+0x240/0x240 [ 85.891065][ T4196] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 85.896734][ T4196] ? mark_lock+0x94/0x320 [ 85.901088][ T4196] ? mutex_unlock+0x10/0x10 [ 85.905613][ T4196] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 85.911626][ T4196] ? lock_chain_count+0x20/0x20 [ 85.916502][ T4196] ? __rwlock_init+0x140/0x140 [ 85.921289][ T4196] hci_event_packet+0xe0b/0x1310 [ 85.926256][ T4196] ? _raw_spin_unlock+0x40/0x40 [ 85.931125][ T4196] ? rcu_lock_release+0x20/0x20 [ 85.936000][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 85.941215][ T4196] hci_rx_work+0x255/0xa10 [ 85.945665][ T4196] process_one_work+0x867/0xff0 [ 85.950563][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 85.956213][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 85.961525][ T4196] ? _raw_spin_lock_irq+0xb7/0xf0 [ 85.966570][ T4196] ? _raw_spin_lock_irqsave+0x100/0x100 [ 85.972146][ T4196] ? wq_worker_running+0x97/0x170 [ 85.977199][ T4196] worker_thread+0xad7/0x12a0 [ 85.981936][ T4196] kthread+0x42e/0x520 [ 85.986031][ T4196] ? rcu_lock_release+0x20/0x20 [ 85.990907][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 85.995523][ T4196] ret_from_fork+0x1f/0x30 [ 85.999979][ T4196] [ 86.018963][ T4196] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 86.032849][ T4196] Bluetooth: hci3: failed to register connection device [ 86.591661][ T21] cfg80211: failed to load regulatory.db [ 90.613325][ T4398] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.622549][ T4398] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.076494][ T4398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.115762][ T4452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.49'. [ 93.166216][ T4398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.459638][ T4398] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.469219][ T4398] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.478492][ T4398] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.487457][ T4398] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.628315][ T4398] syz.3.36 (4398) used greatest stack depth: 20944 bytes left [ 95.707630][ T4472] FAULT_INJECTION: forcing a failure. [ 95.707630][ T4472] name fail_futex, interval 1, probability 0, space 0, times 1 [ 95.737415][ T4472] CPU: 0 PID: 4472 Comm: syz.2.54 Not tainted syzkaller #0 [ 95.745244][ T4472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.756788][ T4472] Call Trace: [ 95.760235][ T4472] [ 95.763688][ T4472] dump_stack_lvl+0x188/0x250 [ 95.768452][ T4472] ? show_regs_print_info+0x20/0x20 [ 95.773823][ T4472] ? load_image+0x410/0x410 [ 95.778375][ T4472] should_fail+0x383/0x4b0 [ 95.786845][ T4472] get_futex_key+0x1a1/0x12d0 [ 95.791769][ T4472] ? __lock_acquire+0x13b3/0x7d40 [ 95.796823][ T4472] ? futex_wait_restart+0x250/0x250 [ 95.802306][ T4472] futex_wake+0x101/0x540 [ 95.806666][ T4472] ? futex_wait+0x680/0x680 [ 95.811732][ T4472] ? verify_lock_unused+0x140/0x140 [ 95.816936][ T4472] ? verify_lock_unused+0x140/0x140 [ 95.822274][ T4472] do_futex+0xd83/0x12b0 [ 95.826526][ T4472] ? vfs_write+0xaa6/0xd70 [ 95.830947][ T4472] ? futex_exit_release+0x1c0/0x1c0 [ 95.836141][ T4472] ? __context_tracking_exit+0x4c/0x80 [ 95.841644][ T4472] __se_sys_futex+0x389/0x420 [ 95.846364][ T4472] ? __x64_sys_futex+0xf0/0xf0 [ 95.851164][ T4472] ? __x64_sys_futex+0x1d/0xf0 [ 95.855962][ T4472] do_syscall_64+0x4c/0xa0 [ 95.860690][ T4472] ? clear_bhb_loop+0x30/0x80 [ 95.865364][ T4472] ? clear_bhb_loop+0x30/0x80 [ 95.870221][ T4472] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.876294][ T4472] RIP: 0033:0x7fce21f48159 [ 95.880974][ T4472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.901451][ T4472] RSP: 002b:00007fce201a00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 95.910292][ T4472] RAX: ffffffffffffffda RBX: 00007fce221cffa8 RCX: 00007fce21f48159 [ 95.918345][ T4472] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fce221cffac [ 95.926410][ T4472] RBP: 00007fce221cffa0 R08: 00287fb9d3b88a1d R09: 0000000000000000 [ 95.935727][ T4472] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000000 [ 95.944597][ T4472] R13: 00007fce221d0038 R14: 00007ffe9d2a5890 R15: 00007ffe9d2a5978 [ 95.955291][ T4472] [ 98.082619][ T4510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.64'. [ 100.058314][ T4506] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.066320][ T4506] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.512834][ T4437] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.572826][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 100.584198][ T4196] CPU: 1 PID: 4196 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 100.591923][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.602425][ T4196] Workqueue: hci3 hci_rx_work [ 100.607625][ T4196] Call Trace: [ 100.611519][ T4196] [ 100.615208][ T4196] dump_stack_lvl+0x188/0x250 [ 100.620513][ T4196] ? show_regs_print_info+0x20/0x20 [ 100.625713][ T4196] ? load_image+0x410/0x410 [ 100.630400][ T4196] sysfs_create_dir_ns+0x26a/0x290 [ 100.635878][ T4196] ? sysfs_warn_dup+0xa0/0xa0 [ 100.640942][ T4196] ? kthread+0x42e/0x520 [ 100.645675][ T4196] ? do_raw_spin_unlock+0x11d/0x230 [ 100.650919][ T4196] kobject_add_internal+0x5ba/0xcd0 [ 100.656210][ T4196] kobject_add+0x160/0x230 [ 100.660767][ T4196] ? kobject_init+0x1c0/0x1c0 [ 100.665475][ T4196] ? __raw_spin_lock_init+0x41/0x100 [ 100.671269][ T4196] ? klist_children_get+0x50/0x50 [ 100.676513][ T4196] ? get_device_parent+0x121/0x3e0 [ 100.681690][ T4196] device_add+0x470/0x1050 [ 100.686153][ T4196] ? device_initialize+0x2a5/0x4d0 [ 100.691876][ T4196] hci_conn_add_sysfs+0xd1/0x1e0 [ 100.697444][ T4196] le_conn_complete_evt+0xc55/0x14d0 [ 100.702996][ T4196] ? cs_le_create_conn+0x5e0/0x5e0 [ 100.708666][ T4196] ? __mutex_trylock_common+0x15c/0x260 [ 100.714294][ T4196] hci_le_meta_evt+0x285/0x3ca0 [ 100.719281][ T4196] ? hci_event_packet+0x363/0x1310 [ 100.724402][ T4196] ? __lock_acquire+0x7d40/0x7d40 [ 100.729617][ T4196] ? hci_remote_host_features_evt+0x240/0x240 [ 100.736040][ T4196] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 100.741691][ T4196] ? mark_lock+0x94/0x320 [ 100.746026][ T4196] ? mutex_unlock+0x10/0x10 [ 100.750693][ T4196] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 100.757030][ T4196] ? lock_chain_count+0x20/0x20 [ 100.762847][ T4196] ? __rwlock_init+0x140/0x140 [ 100.769899][ T4196] hci_event_packet+0xe0b/0x1310 [ 100.775138][ T4196] ? _raw_spin_unlock+0x40/0x40 [ 100.780122][ T4196] ? rcu_lock_release+0x20/0x20 [ 100.785000][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 100.790216][ T4196] hci_rx_work+0x255/0xa10 [ 100.794670][ T4196] process_one_work+0x867/0xff0 [ 100.799539][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 100.805209][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 100.810684][ T4196] ? _raw_spin_lock_irq+0xb7/0xf0 [ 100.815732][ T4196] ? _raw_spin_lock_irqsave+0x100/0x100 [ 100.821682][ T4196] ? wq_worker_running+0x97/0x170 [ 100.826957][ T4196] worker_thread+0xad7/0x12a0 [ 100.831696][ T4196] kthread+0x42e/0x520 [ 100.835895][ T4196] ? rcu_lock_release+0x20/0x20 [ 100.840761][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 100.845383][ T4196] ret_from_fork+0x1f/0x30 [ 100.849865][ T4196] [ 100.857663][ T4196] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 100.872243][ T4196] Bluetooth: hci3: failed to register connection device [ 100.973985][ T4437] usb 3-1: Using ep0 maxpacket: 16 [ 101.010088][ T4506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.026954][ T4506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.341363][ T4506] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.352256][ T4506] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.365294][ T4506] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.375647][ T4506] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.556520][ T4437] usb 3-1: unable to get BOS descriptor or descriptor too short [ 102.684103][ T4437] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 102.804361][ T4437] usb 3-1: can't read configurations, error -71 [ 103.345289][ T4437] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.549396][ T4560] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.557146][ T4560] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.593750][ T4437] usb 3-1: Using ep0 maxpacket: 8 [ 103.669921][ T4569] FAULT_INJECTION: forcing a failure. [ 103.669921][ T4569] name failslab, interval 1, probability 0, space 0, times 1 [ 103.683684][ T4569] CPU: 1 PID: 4569 Comm: syz.4.77 Not tainted syzkaller #0 [ 103.690925][ T4569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.701101][ T4569] Call Trace: [ 103.704400][ T4569] [ 103.707458][ T4569] dump_stack_lvl+0x188/0x250 [ 103.712145][ T4569] ? show_regs_print_info+0x20/0x20 [ 103.717435][ T4569] ? load_image+0x410/0x410 [ 103.722132][ T4569] should_fail+0x383/0x4b0 [ 103.726576][ T4569] should_failslab+0x5/0x20 [ 103.731127][ T4569] slab_pre_alloc_hook+0x51/0xc0 [ 103.736102][ T4569] kmem_cache_alloc_trace+0x47/0x290 [ 103.741457][ T4569] ? l2cap_chan_create+0x4c/0x730 [ 103.746501][ T4569] l2cap_chan_create+0x4c/0x730 [ 103.751389][ T4569] l2cap_sock_create+0x185/0x2a0 [ 103.756359][ T4569] bt_sock_create+0x155/0x220 [ 103.761062][ T4569] __sock_create+0x473/0x910 [ 103.765757][ T4569] __sys_socket+0xe2/0x170 [ 103.770188][ T4569] __x64_sys_socket+0x76/0x80 [ 103.774877][ T4569] do_syscall_64+0x4c/0xa0 [ 103.779423][ T4569] ? clear_bhb_loop+0x30/0x80 [ 103.784106][ T4569] ? clear_bhb_loop+0x30/0x80 [ 103.788954][ T4569] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.794877][ T4569] RIP: 0033:0x7f9ecf05c159 [ 103.799291][ T4569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.819009][ T4569] RSP: 002b:00007f9ecd2b3fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 103.827532][ T4569] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f9ecf05c159 [ 103.835518][ T4569] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001f [ 103.843480][ T4569] RBP: 00007f9ecf0f306b R08: 0000000000000000 R09: 0000000000000000 [ 103.851449][ T4569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.859419][ T4569] R13: 00007f9ecf2e4038 R14: 00007f9ecf2e3fa0 R15: 00007ffc6f5266b8 [ 103.867406][ T4569] [ 103.903833][ T4437] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 103.912090][ T4437] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.932625][ T4437] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 103.951465][ T4437] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.951939][ T4575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.78'. [ 103.961854][ T4437] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.002105][ T4437] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 104.012199][ T4437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.030367][ T26] audit: type=1326 audit(1791168166.228:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.3.79" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9658062159 code=0x0 [ 104.284310][ T4437] usb 3-1: usb_control_msg returned -32 [ 105.661795][ T4437] usbtmc 3-1:16.0: can't read capabilities [ 106.032106][ T4437] usb 3-1: USB disconnect, device number 3 [ 106.983758][ T4302] Bluetooth: hci3: command 0x0406 tx timeout [ 107.116134][ T4560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.159863][ T4594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'. [ 107.172464][ T4596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.86'. [ 107.213005][ T4560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.080876][ T4608] 9pnet_virtio: no channels available for device syz [ 109.095852][ T4608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.87'. [ 109.295338][ T4560] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.329502][ T4560] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.391063][ T4560] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.446409][ T4560] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.844711][ T4612] FAULT_INJECTION: forcing a failure. [ 109.844711][ T4612] name failslab, interval 1, probability 0, space 0, times 0 [ 109.858531][ T4612] CPU: 0 PID: 4612 Comm: syz.3.91 Not tainted syzkaller #0 [ 109.865776][ T4612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.876042][ T4612] Call Trace: [ 109.879455][ T4612] [ 109.882523][ T4612] dump_stack_lvl+0x188/0x250 [ 109.887925][ T4612] ? show_regs_print_info+0x20/0x20 [ 109.893140][ T4612] ? load_image+0x410/0x410 [ 109.897651][ T4612] ? __lock_acquire+0x7d40/0x7d40 [ 109.902684][ T4612] ? do_raw_spin_unlock+0x11d/0x230 [ 109.907899][ T4612] should_fail+0x383/0x4b0 [ 109.912467][ T4612] should_failslab+0x5/0x20 [ 109.916986][ T4612] slab_pre_alloc_hook+0x51/0xc0 [ 109.922246][ T4612] ? getname_flags+0xb7/0x4f0 [ 109.926933][ T4612] kmem_cache_alloc+0x3d/0x280 [ 109.931713][ T4612] getname_flags+0xb7/0x4f0 [ 109.936618][ T4612] do_sys_openat2+0xdd/0x500 [ 109.941326][ T4612] ? __lock_acquire+0x7d40/0x7d40 [ 109.946378][ T4612] ? do_sys_open+0xe0/0xe0 [ 109.950816][ T4612] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 109.957016][ T4612] ? lock_chain_count+0x20/0x20 [ 109.962035][ T4612] __x64_sys_openat+0x135/0x160 [ 109.967238][ T4612] do_syscall_64+0x4c/0xa0 [ 109.971695][ T4612] ? clear_bhb_loop+0x30/0x80 [ 109.976363][ T4612] ? clear_bhb_loop+0x30/0x80 [ 109.981317][ T4612] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.987356][ T4612] RIP: 0033:0x7f965802298e [ 109.991768][ T4612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 110.011520][ T4612] RSP: 002b:00007f96562b7ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.020207][ T4612] RAX: ffffffffffffffda RBX: 00007f96562ba6c0 RCX: 00007f965802298e [ 110.028352][ T4612] RDX: 0000000000000002 RSI: 00007f96580f840a RDI: ffffffffffffff9c [ 110.036420][ T4612] RBP: 00007f96580f906b R08: 0000000000000000 R09: 0000000000000000 [ 110.044398][ T4612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 110.052546][ T4612] R13: 0000200000000100 R14: 0000000000000000 R15: 00007fff85bb87e8 [ 110.060803][ T4612] [ 114.313930][ T4639] ======================================================= [ 114.313930][ T4639] WARNING: The mand mount option has been deprecated and [ 114.313930][ T4639] and is ignored by this kernel. Remove the mand [ 114.313930][ T4639] option from the mount to silence this warning. [ 114.313930][ T4639] ======================================================= [ 114.843637][ C0] sched: RT throttling activated [ 116.017004][ T1107] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.575980][ T1107] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 116.601102][ T1107] usb 1-1: config 0 has no interface number 0 [ 116.618192][ T1107] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.794496][ T1107] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 116.807965][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.825809][ T1107] usb 1-1: Product: syz [ 116.835476][ T1107] usb 1-1: Manufacturer: syz [ 116.845413][ T1107] usb 1-1: SerialNumber: syz [ 116.872796][ T1107] usb 1-1: config 0 descriptor?? [ 118.212003][ T1107] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 118.260894][ T1107] usb 1-1: USB disconnect, device number 2 [ 118.372349][ T1107] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 120.365089][ T4686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.111'. [ 123.179910][ T4706] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 126.753743][ T4237] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 126.867570][ T4742] ptp ptp0: new virtual clock ptp1 [ 126.872969][ T4742] ptp ptp0: guarantee physical clock free running [ 127.253789][ T4237] usb 5-1: Using ep0 maxpacket: 8 [ 127.374061][ T4237] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.411721][ T4237] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 127.688869][ T4237] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 127.738972][ T4237] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 127.793975][ T4237] usb 5-1: Product: syz [ 127.849427][ T4237] usb 5-1: Manufacturer: syz [ 127.893705][ T4237] usb 5-1: SerialNumber: syz [ 128.362031][ T4237] usb 5-1: config 0 descriptor?? [ 128.773864][ T4237] usb 5-1: can't set config #0, error -71 [ 128.784062][ T4237] usb 5-1: USB disconnect, device number 2 [ 132.656960][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.666145][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.061010][ T4790] syz.2.140 (4790) used greatest stack depth: 20144 bytes left [ 138.636568][ T4439] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 139.256627][ T4439] usb 1-1: Using ep0 maxpacket: 16 [ 139.264268][ T4821] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x7973 instead [ 139.275097][ T4821] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000050: 0x0003 instead [ 139.285598][ T4821] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000054: 0x0003 instead [ 139.296125][ T4821] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000058: 0x001e instead [ 139.306492][ T4821] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000005c: 0x387a instead [ 139.316989][ T4821] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000060: 0x0400 instead [ 139.328753][ T4821] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000064: 0xf9dc instead [ 139.339273][ T4821] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000068: 0x000d instead [ 139.349773][ T4821] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000006c: 0x8b48 instead [ 139.360255][ T4821] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000070: 0x0003 instead [ 139.370736][ T4821] jffs2: Further such events for this erase block will not be printed [ 139.379508][ T4821] jffs2: Empty flash at 0x00000420 ends at 0x00000424 [ 139.386761][ T4821] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 139.396343][ T4821] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 139.884115][ T4439] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.928690][ T4439] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 140.273958][ T4439] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 140.304025][ T4439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.312223][ T4439] usb 1-1: Product: syz [ 140.335991][ T4439] usb 1-1: Manufacturer: syz [ 140.359967][ T4439] usb 1-1: SerialNumber: syz [ 140.519518][ T4826] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 140.880103][ T4439] usb 1-1: USB disconnect, device number 3 [ 145.875581][ T4864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.161'. [ 145.919030][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.161'. [ 148.176878][ T4237] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 148.439788][ T4237] usb 5-1: Using ep0 maxpacket: 8 [ 148.584040][ T4237] usb 5-1: unable to get BOS descriptor or descriptor too short [ 148.594743][ T4237] usb 5-1: no configurations [ 148.624122][ T4237] usb 5-1: can't read configurations, error -22 [ 154.388308][ T4927] Zero length message leads to an empty skb [ 154.532110][ T4929] kAFS: unparsable volume name [ 154.538300][ T4929] netlink: 'syz.0.173': attribute type 1 has an invalid length. [ 158.445312][ T4968] FAULT_INJECTION: forcing a failure. [ 158.445312][ T4968] name failslab, interval 1, probability 0, space 0, times 0 [ 158.458614][ T4968] CPU: 0 PID: 4968 Comm: syz.2.190 Not tainted syzkaller #0 [ 158.465939][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.476019][ T4968] Call Trace: [ 158.479319][ T4968] [ 158.482274][ T4968] dump_stack_lvl+0x188/0x250 [ 158.486983][ T4968] ? show_regs_print_info+0x20/0x20 [ 158.492219][ T4968] ? load_image+0x410/0x410 [ 158.496767][ T4968] ? __lock_acquire+0x7d40/0x7d40 [ 158.501834][ T4968] should_fail+0x383/0x4b0 [ 158.506295][ T4968] should_failslab+0x5/0x20 [ 158.510833][ T4968] slab_pre_alloc_hook+0x51/0xc0 [ 158.515806][ T4968] __kmalloc+0x6b/0x340 [ 158.519980][ T4968] ? kvm_set_irq_routing+0xf6/0xc00 [ 158.525293][ T4968] kvm_set_irq_routing+0xf6/0xc00 [ 158.530335][ T4968] ? kvm_ioapic_init+0x855/0xeb0 [ 158.535470][ T4968] kvm_arch_vm_ioctl+0x133d/0x1530 [ 158.540610][ T4968] ? kvm_arch_pm_notifier+0x2c0/0x2c0 [ 158.546084][ T4968] ? __lock_acquire+0x7d40/0x7d40 [ 158.551224][ T4968] ? unwind_next_frame+0x11ec/0x1cf0 [ 158.556550][ T4968] ? is_bpf_text_address+0x254/0x270 [ 158.561952][ T4968] ? __kernel_text_address+0x9a/0x100 [ 158.567349][ T4968] ? unwind_get_return_address+0x49/0x80 [ 158.573009][ T4968] ? stack_trace_save+0xf0/0xf0 [ 158.577893][ T4968] ? arch_stack_walk+0xf2/0x140 [ 158.582780][ T4968] ? kfree+0xef/0x2a0 [ 158.586781][ T4968] ? stack_trace_save+0xa6/0xf0 [ 158.591742][ T4968] ? stack_trace_snprint+0xe0/0xe0 [ 158.596871][ T4968] ? slab_free_freelist_hook+0xec/0x170 [ 158.602443][ T4968] ? security_file_ioctl+0x6c/0xa0 [ 158.607567][ T4968] ? __se_sys_ioctl+0x48/0x170 [ 158.612839][ T4968] ? do_syscall_64+0x4c/0xa0 [ 158.617815][ T4968] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.623997][ T4968] ? kfree+0xef/0x2a0 [ 158.627981][ T4968] ? kasan_set_track+0x62/0x70 [ 158.632744][ T4968] ? kasan_set_track+0x4b/0x70 [ 158.637507][ T4968] ? kasan_set_free_info+0x1f/0x40 [ 158.642626][ T4968] ? ____kasan_slab_free+0xd5/0x110 [ 158.647827][ T4968] ? slab_free_freelist_hook+0xec/0x170 [ 158.653422][ T4968] ? kfree+0xef/0x2a0 [ 158.657422][ T4968] ? tomoyo_path_number_perm+0x55c/0x6b0 [ 158.663064][ T4968] ? security_file_ioctl+0x6c/0xa0 [ 158.668213][ T4968] ? __se_sys_ioctl+0x48/0x170 [ 158.672975][ T4968] ? do_syscall_64+0x4c/0xa0 [ 158.677603][ T4968] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.683735][ T4968] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 158.689764][ T4968] ? lock_chain_count+0x20/0x20 [ 158.694664][ T4968] ? do_vfs_ioctl+0x1d5e/0x1f40 [ 158.699520][ T4968] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 158.705305][ T4968] ? rcu_lock_release+0x5/0x20 [ 158.710292][ T4968] kvm_vm_ioctl+0x78d/0xb00 [ 158.714835][ T4968] ? kvm_device_release+0x1e0/0x1e0 [ 158.720048][ T4968] ? kfree+0xef/0x2a0 [ 158.724153][ T4968] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 158.729829][ T4968] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 158.735332][ T4968] ? bpf_lsm_file_ioctl+0x5/0x10 [ 158.740264][ T4968] ? security_file_ioctl+0x7c/0xa0 [ 158.745372][ T4968] ? kvm_device_release+0x1e0/0x1e0 [ 158.750568][ T4968] __se_sys_ioctl+0xfa/0x170 [ 158.755155][ T4968] do_syscall_64+0x4c/0xa0 [ 158.759570][ T4968] ? clear_bhb_loop+0x30/0x80 [ 158.764251][ T4968] ? clear_bhb_loop+0x30/0x80 [ 158.768941][ T4968] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.774928][ T4968] RIP: 0033:0x7fce21f48159 [ 158.779379][ T4968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.799123][ T4968] RSP: 002b:00007fce201a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.807552][ T4968] RAX: ffffffffffffffda RBX: 00007fce221cffa0 RCX: 00007fce21f48159 [ 158.815530][ T4968] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000004 [ 158.823517][ T4968] RBP: 00007fce21fdf06b R08: 0000000000000000 R09: 0000000000000000 [ 158.831504][ T4968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.839603][ T4968] R13: 00007fce221d0038 R14: 00007fce221cffa0 R15: 00007ffe9d2a5978 [ 158.847594][ T4968] [ 160.831882][ T5012] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 162.833755][ T1107] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 163.887808][ T5043] kAFS: unparsable volume name [ 164.541566][ T1107] usb 1-1: Using ep0 maxpacket: 32 [ 164.964212][ T1107] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 164.985640][ T5052] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 166.889905][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.901594][ T1107] usb 1-1: Product: syz [ 166.905925][ T1107] usb 1-1: Manufacturer: syz [ 166.910609][ T1107] usb 1-1: SerialNumber: syz [ 166.919476][ T1107] usb 1-1: config 0 descriptor?? [ 166.943886][ T1107] usb 1-1: can't set config #0, error -71 [ 166.961987][ T1107] usb 1-1: USB disconnect, device number 4 [ 171.510681][ T5094] dlm: no local IP address has been set [ 171.553948][ T5094] dlm: cannot start dlm midcomms -107 [ 172.509995][ T5094] ucma_write: process 132 (syz.0.221) changed security contexts after opening file descriptor, this is not allowed. [ 174.583834][ T5111] FAULT_INJECTION: forcing a failure. [ 174.583834][ T5111] name failslab, interval 1, probability 0, space 0, times 0 [ 174.664511][ T5111] CPU: 0 PID: 5111 Comm: syz.1.226 Not tainted syzkaller #0 [ 174.671854][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.681919][ T5111] Call Trace: [ 174.685200][ T5111] [ 174.688132][ T5111] dump_stack_lvl+0x188/0x250 [ 174.692825][ T5111] ? show_regs_print_info+0x20/0x20 [ 174.698037][ T5111] ? load_image+0x410/0x410 [ 174.702545][ T5111] ? __might_sleep+0xf0/0xf0 [ 174.707142][ T5111] ? __lock_acquire+0x7d40/0x7d40 [ 174.712184][ T5111] should_fail+0x383/0x4b0 [ 174.716613][ T5111] should_failslab+0x5/0x20 [ 174.721120][ T5111] slab_pre_alloc_hook+0x51/0xc0 [ 174.726073][ T5111] ? copy_fs_struct+0x4b/0x270 [ 174.730846][ T5111] kmem_cache_alloc+0x3d/0x280 [ 174.735617][ T5111] copy_fs_struct+0x4b/0x270 [ 174.740220][ T5111] copy_fs+0x6c/0x140 [ 174.744209][ T5111] copy_process+0x1691/0x3e70 [ 174.748912][ T5111] ? __pidfd_prepare+0x140/0x140 [ 174.753864][ T5111] ? verify_lock_unused+0x140/0x140 [ 174.759074][ T5111] kernel_clone+0x23f/0x990 [ 174.763587][ T5111] ? create_io_thread+0x180/0x180 [ 174.768630][ T5111] __x64_sys_clone+0x19a/0x210 [ 174.773443][ T5111] ? __ia32_sys_vfork+0x130/0x130 [ 174.778484][ T5111] ? lockdep_hardirqs_on+0x94/0x140 [ 174.783711][ T5111] do_syscall_64+0x4c/0xa0 [ 174.788130][ T5111] ? clear_bhb_loop+0x30/0x80 [ 174.792821][ T5111] ? clear_bhb_loop+0x30/0x80 [ 174.797509][ T5111] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.803411][ T5111] RIP: 0033:0x7fddd9c60159 [ 174.807840][ T5111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.827450][ T5111] RSP: 002b:00007fddd7eb7fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 174.835884][ T5111] RAX: ffffffffffffffda RBX: 00007fddd9ee7fa0 RCX: 00007fddd9c60159 [ 174.843877][ T5111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100011 [ 174.851983][ T5111] RBP: 00007fddd9cf706b R08: 0000000000000000 R09: 0000000000000000 [ 174.859965][ T5111] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 174.868022][ T5111] R13: 00007fddd9ee8038 R14: 00007fddd9ee7fa0 R15: 00007fffad744338 [ 174.876024][ T5111] [ 176.424589][ T5139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.236'. [ 177.110597][ T5137] netlink: 17 bytes leftover after parsing attributes in process `syz.4.235'. [ 180.366330][ T5161] netlink: 20 bytes leftover after parsing attributes in process `syz.3.242'. [ 181.914593][ T4173] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 182.097533][ T5181] mmap: syz.0.247 (5181) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 182.413831][ T4173] usb 3-1: Using ep0 maxpacket: 8 [ 182.554669][ T4173] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 182.554790][ T4173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.564703][ T4173] usb 3-1: config 0 descriptor?? [ 182.606045][ T4173] usb 3-1: probing VID:PID(0424:012C) [ 182.607793][ T4173] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 182.607817][ T4173] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 182.607834][ T4173] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 182.607852][ T4173] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 182.607873][ T4173] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 183.053954][ T4173] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 183.264666][ T4173] usb 3-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 184.429639][ T21] usb 3-1: USB disconnect, device number 4 [ 184.435898][ T4173] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 185.642104][ T21] USB vub300 remote SDIO host controller[0] now disconnected [ 185.943852][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 186.042807][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 186.332744][ T5227] tmpfs: Unknown parameter 'grpquota' [ 187.422236][ T4237] Bluetooth: hci4: command 0x0406 tx timeout [ 187.475398][ T4237] Bluetooth: hci2: command 0x0406 tx timeout [ 190.640426][ T5264] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 190.687904][ T5264] cramfs: wrong magic [ 194.746529][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.753212][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.766286][ T5270] sctp: failed to load transform for md5: -4 [ 194.832046][ T5301] ip_tables: iptables: counters copy to user failed while replacing table [ 195.084647][ T4173] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 196.223965][ T4173] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 196.226375][ T5324] kvm: pic: non byte write [ 196.239075][ T4173] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 196.242075][ T5324] kvm: pic: level sensitive irq not supported [ 196.252899][ T5324] kvm: pic: level sensitive irq not supported [ 196.254110][ T4173] usb 5-1: config 220 has no interface number 2 [ 196.272635][ T4173] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 196.286462][ T4173] usb 5-1: config 220 interface 0 has no altsetting 0 [ 196.293415][ T4173] usb 5-1: config 220 interface 76 has no altsetting 0 [ 196.293736][ T1107] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 196.300818][ T4173] usb 5-1: config 220 interface 1 has no altsetting 0 [ 196.517567][ T4173] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 196.526950][ T4173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.539157][ T4173] usb 5-1: Product: syz [ 196.543448][ T4173] usb 5-1: Manufacturer: syz [ 196.548108][ T4173] usb 5-1: SerialNumber: syz [ 196.554695][ T1107] usb 4-1: Using ep0 maxpacket: 8 [ 196.633946][ T4173] usb 5-1: can't set config #220, error -71 [ 196.645296][ T4173] usb 5-1: USB disconnect, device number 5 [ 196.674322][ T1107] usb 4-1: config index 0 descriptor too short (expected 1060, got 36) [ 196.691084][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.713562][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.737178][ T1107] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.750596][ T1107] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 196.765558][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.788216][ T1107] usb 4-1: config 0 descriptor?? [ 198.672411][ T1107] sony 0003:1345:3008.0001: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 199.446807][ T1107] sony 0003:1345:3008.0001: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.3-1/input0 [ 199.579046][ T1107] sony 0003:1345:3008.0001: failed to claim input [ 199.974973][ T5344] trusted_key: encrypted_key: insufficient parameters specified [ 199.990338][ T1107] usb 4-1: USB disconnect, device number 2 [ 200.515574][ T5347] fido_id[5347]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 201.903795][ T1107] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 202.614326][ T1107] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 202.642523][ T1107] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.233888][ T1107] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 203.253930][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.533544][ T5368] process 'syz.3.300' launched './file0' with NULL argv: empty string added [ 204.496899][ T1107] usb 4-1: Product: syz [ 204.526218][ T1107] usb 4-1: can't set config #1, error -71 [ 204.532090][ T4198] Bluetooth: Wrong link type (-22) [ 204.547007][ T1107] usb 4-1: USB disconnect, device number 3 [ 210.973031][ T5425] ================================================================== [ 210.973120][ T5425] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1ba8/0x25d0 [ 210.973168][ T5425] Write of size 4 at addr ffffc90004481360 by task syz.0.312/5425 [ 210.973188][ T5425] [ 210.973199][ T5425] CPU: 1 PID: 5425 Comm: syz.0.312 Not tainted syzkaller #0 [ 210.973219][ T5425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.973233][ T5425] Call Trace: [ 210.973241][ T5425] [ 210.973251][ T5425] dump_stack_lvl+0x188/0x250 [ 210.973279][ T5425] ? show_regs_print_info+0x20/0x20 [ 210.973305][ T5425] ? load_image+0x410/0x410 [ 210.973323][ T5425] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 210.973357][ T5425] print_address_description+0x60/0x2d0 [ 210.973379][ T5425] ? sys_imageblit+0x1ba8/0x25d0 [ 210.973398][ T5425] kasan_report+0xdf/0x130 [ 210.973422][ T5425] ? sys_imageblit+0x1ba8/0x25d0 [ 210.973448][ T5425] sys_imageblit+0x1ba8/0x25d0 [ 210.973486][ T5425] ? sys_copyarea+0x2530/0x2530 [ 210.973517][ T5425] ? __flush_work+0x172/0x210 [ 210.973543][ T5425] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 210.973565][ T5425] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 210.973584][ T5425] soft_cursor+0x9fd/0xc30 [ 210.973606][ T5425] bit_cursor+0x16b5/0x1f40 [ 210.973640][ T5425] ? bit_clear_margins+0x550/0x550 [ 210.973678][ T5425] ? bit_clear_margins+0x550/0x550 [ 210.973704][ T5425] ? add_softcursor+0x28c/0x440 [ 210.973732][ T5425] con_flush_chars+0x1f6/0x270 [ 210.973757][ T5425] con_write+0x29/0x40 [ 210.973780][ T5425] n_tty_write+0xd19/0x1220 [ 210.973829][ T5425] ? n_tty_read+0x1a50/0x1a50 [ 210.973854][ T5425] ? wait_woken+0x1b0/0x1b0 [ 210.973883][ T5425] ? __virt_addr_valid+0x3c6/0x470 [ 210.973903][ T5425] ? __phys_addr_symbol+0x2b/0x70 [ 210.973920][ T5425] ? __check_object_size+0x30c/0x410 [ 210.973946][ T5425] file_tty_write+0x50c/0x8a0 [ 210.973973][ T5425] ? n_tty_read+0x1a50/0x1a50 [ 210.973997][ T5425] vfs_write+0x748/0xd70 [ 210.974026][ T5425] ? file_end_write+0x250/0x250 [ 210.974054][ T5425] ? __fget_files+0x402/0x470 [ 210.974083][ T5425] ? __fdget_pos+0x1e2/0x370 [ 210.974099][ T5425] ? ksys_write+0x70/0x260 [ 210.974121][ T5425] ksys_write+0x153/0x260 [ 210.974142][ T5425] ? __ia32_sys_read+0x80/0x80 [ 210.974166][ T5425] ? lockdep_hardirqs_on+0x94/0x140 [ 210.974191][ T5425] do_syscall_64+0x4c/0xa0 [ 210.974209][ T5425] ? clear_bhb_loop+0x30/0x80 [ 210.974228][ T5425] ? clear_bhb_loop+0x30/0x80 [ 210.974250][ T5425] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.974271][ T5425] RIP: 0033:0x7fa469b26159 [ 210.974292][ T5425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.974316][ T5425] RSP: 002b:00007fa467d3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 210.974345][ T5425] RAX: ffffffffffffffda RBX: 00007fa469dae180 RCX: 00007fa469b26159 [ 210.974361][ T5425] RDX: 0000000000001006 RSI: 0000200000002b40 RDI: 0000000000000004 [ 210.974375][ T5425] RBP: 00007fa469bbd06b R08: 0000000000000000 R09: 0000000000000000 [ 210.974395][ T5425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.974408][ T5425] R13: 00007fa469dae218 R14: 00007fa469dae180 R15: 00007ffecf62a178 [ 210.974441][ T5425] [ 210.974449][ T5425] [ 210.974454][ T5425] [ 210.974459][ T5425] Memory state around the buggy address: [ 210.974470][ T5425] ffffc90004481200: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 210.974484][ T5425] ffffc90004481280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 210.974497][ T5425] >ffffc90004481300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 210.974507][ T5425] ^ [ 210.974519][ T5425] ffffc90004481380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 210.974532][ T5425] ffffc90004481400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 210.974542][ T5425] ================================================================== [ 210.974550][ T5425] Disabling lock debugging due to kernel taint [ 210.974625][ T5425] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 210.974636][ T5425] CPU: 1 PID: 5425 Comm: syz.0.312 Tainted: G B syzkaller #0 [ 210.974653][ T5425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.974663][ T5425] Call Trace: [ 210.974669][ T5425] [ 210.974681][ T5425] dump_stack_lvl+0x188/0x250 [ 210.974701][ T5425] ? show_regs_print_info+0x20/0x20 [ 210.974720][ T5425] ? load_image+0x410/0x410 [ 210.974742][ T5425] panic+0x2f8/0x850 [ 210.974760][ T5425] ? bpf_jit_dump+0xd0/0xd0 [ 210.974777][ T5425] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 210.974796][ T5425] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 210.974815][ T5425] ? _raw_spin_unlock+0x40/0x40 [ 210.974834][ T5425] ? sys_imageblit+0x1ba8/0x25d0 [ 210.974852][ T5425] check_panic_on_warn+0x80/0xa0 [ 210.974870][ T5425] ? sys_imageblit+0x1ba8/0x25d0 [ 210.974887][ T5425] end_report+0x6d/0xf0 [ 210.974904][ T5425] kasan_report+0x102/0x130 [ 210.974922][ T5425] ? sys_imageblit+0x1ba8/0x25d0 [ 210.974941][ T5425] sys_imageblit+0x1ba8/0x25d0 [ 210.974963][ T5425] ? sys_copyarea+0x2530/0x2530 [ 210.974983][ T5425] ? __flush_work+0x172/0x210 [ 210.975001][ T5425] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 210.975019][ T5425] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 210.975038][ T5425] soft_cursor+0x9fd/0xc30 [ 210.975058][ T5425] bit_cursor+0x16b5/0x1f40 [ 210.975081][ T5425] ? bit_clear_margins+0x550/0x550 [ 210.975101][ T5425] ? bit_clear_margins+0x550/0x550 [ 210.975119][ T5425] ? add_softcursor+0x28c/0x440 [ 210.975137][ T5425] con_flush_chars+0x1f6/0x270 [ 210.975156][ T5425] con_write+0x29/0x40 [ 210.975173][ T5425] n_tty_write+0xd19/0x1220 [ 210.975199][ T5425] ? n_tty_read+0x1a50/0x1a50 [ 210.975218][ T5425] ? wait_woken+0x1b0/0x1b0 [ 210.975237][ T5425] ? __virt_addr_valid+0x3c6/0x470 [ 210.975253][ T5425] ? __phys_addr_symbol+0x2b/0x70 [ 210.975268][ T5425] ? __check_object_size+0x30c/0x410 [ 210.975287][ T5425] file_tty_write+0x50c/0x8a0 [ 210.975306][ T5425] ? n_tty_read+0x1a50/0x1a50 [ 210.975325][ T5425] vfs_write+0x748/0xd70 [ 210.975344][ T5425] ? file_end_write+0x250/0x250 [ 210.975362][ T5425] ? __fget_files+0x402/0x470 [ 210.975380][ T5425] ? __fdget_pos+0x1e2/0x370 [ 210.975396][ T5425] ? ksys_write+0x70/0x260 [ 210.975412][ T5425] ksys_write+0x153/0x260 [ 210.975428][ T5425] ? __ia32_sys_read+0x80/0x80 [ 210.975445][ T5425] ? lockdep_hardirqs_on+0x94/0x140 [ 210.975465][ T5425] do_syscall_64+0x4c/0xa0 [ 210.975482][ T5425] ? clear_bhb_loop+0x30/0x80 [ 210.975499][ T5425] ? clear_bhb_loop+0x30/0x80 [ 210.975517][ T5425] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.975535][ T5425] RIP: 0033:0x7fa469b26159 [ 210.975549][ T5425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.975561][ T5425] RSP: 002b:00007fa467d3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 210.975580][ T5425] RAX: ffffffffffffffda RBX: 00007fa469dae180 RCX: 00007fa469b26159 [ 210.975592][ T5425] RDX: 0000000000001006 RSI: 0000200000002b40 RDI: 0000000000000004 [ 210.975603][ T5425] RBP: 00007fa469bbd06b R08: 0000000000000000 R09: 0000000000000000 [ 210.975614][ T5425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.975624][ T5425] R13: 00007fa469dae218 R14: 00007fa469dae180 R15: 00007ffecf62a178 [ 210.975641][ T5425] [ 210.975747][ T5425] Kernel Offset: disabled [ 211.700892][ T5425] Rebooting in 86400 seconds..