last executing test programs: 40.534527853s ago: executing program 0 (id=51): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r2, r1, 0x0, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 40.2669773s ago: executing program 0 (id=54): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 38.041523655s ago: executing program 0 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000440)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f00000004c0)='+p', 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000006840)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4c8d0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006980)={&(0x7f0000007100)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140", @ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x24000070) 37.368606933s ago: executing program 0 (id=73): r0 = syz_open_dev$loop(&(0x7f0000000600), 0x5, 0x86100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000680)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r2 = syz_open_dev$loop(&(0x7f00000007c0), 0x8f, 0x40240) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000800), 0x40000001ed602, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000840)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0xffff, 0x5, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd10309000000aca7ca64c6a4b4e00d9683dda9af01000016deff12969fc317035c3f60000000fa00000000004000000e00", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebfb08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd00600", [0xde, 0x8000]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 37.125130538s ago: executing program 0 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x17f) mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000180)={0x8004000, 0x0, 0x0, 0xfffffffffffffffd, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 37.016361598s ago: executing program 1 (id=76): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) 36.857222175s ago: executing program 0 (id=77): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x22102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl(r0, 0x404c4701, &(0x7f0000000080)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) 36.781193393s ago: executing program 1 (id=78): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2], 0x650) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 36.681985143s ago: executing program 1 (id=79): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000140)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000003c0)={0x40, 0x14, 0x4, "ca210b51"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) 34.810212652s ago: executing program 2 (id=86): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000000)=0xffffffffffffffff, 0x12) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x10002, 0x0) 34.668365156s ago: executing program 2 (id=87): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x93, 0x1, 0x0, [{@broadcast}, {}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000400)}}, {{0x0, 0x0, 0x0}}], 0x3, 0xc080) write$FUSE_WRITE(r0, &(0x7f0000003800)={0x18, 0x0, 0x0, {0x120}}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 34.206612583s ago: executing program 2 (id=89): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180100000000000e000000000000a8ac850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea3}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 34.029565241s ago: executing program 1 (id=90): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5524, &(0x7f00000108c0)="$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") symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000540)='./bus\x00') listxattr(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) 33.782220366s ago: executing program 2 (id=92): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) shutdown(r0, 0x0) 32.830045472s ago: executing program 1 (id=95): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4080) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r0, &(0x7f0000010940)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000010980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000010a00)=[{&(0x7f0000010a40)="49d3", 0x2}], 0x1}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/6, 0x6}], 0x1}, 0x162) 32.716439933s ago: executing program 2 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mmap$IORING_OFF_SQ_RING(0x0, 0x101, 0x3000008, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone3(&(0x7f0000000e40)={0x800000, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) 32.375089168s ago: executing program 2 (id=98): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001800)=0x14) sendmsg$nl_route(r0, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f80)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000002040)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r2, @ANYBLOB="0800020096"], 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x440b0) 31.439440553s ago: executing program 1 (id=100): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80000) close(r2) 30.852805462s ago: executing program 32 (id=100): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80000) close(r2) 21.321365115s ago: executing program 33 (id=77): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x22102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl(r0, 0x404c4701, &(0x7f0000000080)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) 21.283453179s ago: executing program 3 (id=103): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000480)={0x80042, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000000)={&(0x7f0000000500)=@name={0x1e, 0x2, 0x0, {{0x42, 0x6}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) 21.049554433s ago: executing program 3 (id=104): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) shutdown(r0, 0x0) 19.922445526s ago: executing program 3 (id=105): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r2, 0x400, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 19.682889951s ago: executing program 3 (id=106): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x401, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) bind$can_raw(r0, &(0x7f0000000080), 0x10) 19.161316514s ago: executing program 3 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mmap$IORING_OFF_SQ_RING(0x0, 0x101, 0x3000008, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone3(&(0x7f0000000e40)={0x800000, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18.635087517s ago: executing program 3 (id=108): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='$e', 0x2, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/210, 0xd2}], 0x1) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000180)=""/23, 0x17}], 0x1}, 0x800}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16.92295744s ago: executing program 34 (id=98): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001800)=0x14) sendmsg$nl_route(r0, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f80)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000002040)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r2, @ANYBLOB="0800020096"], 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x440b0) 14.964966038s ago: executing program 4 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000440)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f00000004c0)='+p', 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000006840)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4c8d0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006980)={&(0x7f0000007100)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140", @ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x24000070) 14.085537267s ago: executing program 4 (id=113): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180100000000000e000000000000a8ac850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea3}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 13.66162145s ago: executing program 4 (id=114): timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x11}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 10.684096161s ago: executing program 4 (id=115): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x249}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x80000002, r1}, 0x38) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008b9000/0x400000)=nil) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, 0x800000}) 9.333262707s ago: executing program 4 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mmap$IORING_OFF_SQ_RING(0x0, 0x101, 0x3000008, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone3(&(0x7f0000000e40)={0x800000, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.346869462s ago: executing program 35 (id=108): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='$e', 0x2, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/210, 0xd2}], 0x1) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000180)=""/23, 0x17}], 0x1}, 0x800}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.951437232s ago: executing program 4 (id=118): openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/power/reserved_size', 0x80802, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 1.152136294s ago: executing program 5 (id=102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x34000}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x89, 0x9, 0x2, 0xd}}], 0x38, 0x4008000}, 0x28008841) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4) 747.649695ms ago: executing program 5 (id=119): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f00000009c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f0000001240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000012c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000003300)={0x50, 0x0, r2, {0x7, 0x27, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f0000003380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f00000053c0)={0x10, 0xffffffffffffffda, r3}, 0x10) open_by_handle_at(r1, &(0x7f0000007580)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) 479.868671ms ago: executing program 5 (id=120): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0x1, 0xe766}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x2e, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote}, {{0x4e27, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffd, 0x0, 0x57}}}}}}, 0x0) 317.533648ms ago: executing program 5 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x4) mount(0x0, &(0x7f00000002c0)='./gadget\x00', &(0x7f0000000300)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x3bee3f9f87c5003e, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 0s ago: executing program 5 (id=122): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000023c0), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x22e9058, 0x0, 0x1, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0x81900) r2 = open_tree(r1, &(0x7f0000000100)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x1214040, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts. [ 84.396224][ T5770] cgroup: Unknown subsys name 'net' [ 84.513126][ T5770] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.222286][ T5770] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.974281][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.991707][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.003628][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.012421][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.020991][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.032045][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.069836][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.082443][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.091473][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.147802][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.156263][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.158322][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.165755][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.177537][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.178023][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.194527][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.202309][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.211357][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.218985][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.225774][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.234155][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.234770][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.248691][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.250165][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.271909][ T5782] (null): rxe_set_mtu: Set mtu to 1024 [ 88.279149][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.294757][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.302953][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.374136][ T5787] (null): rxe_set_mtu: Set mtu to 1024 [ 88.380478][ T5787] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.392735][ T5786] (null): rxe_set_mtu: Set mtu to 1024 [ 88.400305][ T5791] (null): rxe_set_mtu: Set mtu to 1024 [ 88.413315][ T5791] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.423738][ T5786] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.649456][ T5782] infiniband rxe0: set active [ 88.656060][ T5782] infiniband rxe0: added rxe_eth0 [ 88.687796][ T175] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.717508][ T5782] RDS/IB: rxe0: added [ 88.722156][ T5782] smc: adding ib device rxe0 with port count 1 [ 88.732804][ T5782] smc: ib device rxe0 port 1 has pnetid [ 88.742324][ T175] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.768210][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.029171][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 89.057374][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.191612][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 89.237675][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 89.403959][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.411788][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.434917][ T5787] bridge_slave_0: entered allmulticast mode [ 89.442675][ T5787] bridge_slave_0: entered promiscuous mode [ 89.510174][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.517241][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.528109][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.546625][ T5787] bridge_slave_1: entered allmulticast mode [ 89.567719][ T5787] bridge_slave_1: entered promiscuous mode [ 89.815815][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.828435][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.837259][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.844990][ T5786] bridge_slave_0: entered allmulticast mode [ 89.852748][ T5786] bridge_slave_0: entered promiscuous mode [ 89.862628][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.877034][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.890270][ T5791] bridge_slave_0: entered allmulticast mode [ 89.897989][ T5791] bridge_slave_0: entered promiscuous mode [ 89.908839][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.919055][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.926565][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.933888][ T5786] bridge_slave_1: entered allmulticast mode [ 89.940984][ T5786] bridge_slave_1: entered promiscuous mode [ 89.956856][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.968107][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.978239][ T5791] bridge_slave_1: entered allmulticast mode [ 89.995494][ T5791] bridge_slave_1: entered promiscuous mode [ 90.039569][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.077389][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.114686][ T5795] Bluetooth: hci0: command tx timeout [ 90.141674][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.160082][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.200376][ T5787] team0: Port device team_slave_0 added [ 90.211201][ T5787] team0: Port device team_slave_1 added [ 90.222608][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.265296][ T5791] team0: Port device team_slave_0 added [ 90.306783][ T5786] team0: Port device team_slave_0 added [ 90.314700][ T5791] team0: Port device team_slave_1 added [ 90.322516][ T5786] team0: Port device team_slave_1 added [ 90.343834][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.350841][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.373953][ T5795] Bluetooth: hci2: command tx timeout [ 90.382382][ T52] Bluetooth: hci1: command tx timeout [ 90.383309][ T5795] Bluetooth: hci3: command tx timeout [ 90.394269][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.407918][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.415007][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.441109][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.489094][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.496172][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.523102][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.542259][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.549394][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.575596][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.602771][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.610234][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.636514][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.697429][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.713344][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.742437][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.782418][ T5787] hsr_slave_0: entered promiscuous mode [ 90.789033][ T5787] hsr_slave_1: entered promiscuous mode [ 90.857267][ T5791] hsr_slave_0: entered promiscuous mode [ 90.865967][ T5791] hsr_slave_1: entered promiscuous mode [ 90.872238][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.880618][ T5791] Cannot create hsr debugfs directory [ 90.915074][ T5786] hsr_slave_0: entered promiscuous mode [ 90.921945][ T5786] hsr_slave_1: entered promiscuous mode [ 90.928779][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.936702][ T5786] Cannot create hsr debugfs directory [ 91.388234][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 91.415898][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.439383][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.452148][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.467629][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.588192][ T5791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.599464][ T5791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.609857][ T5791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.644794][ T5791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.656228][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.664624][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.671886][ T5782] bridge_slave_0: entered allmulticast mode [ 91.680089][ T5782] bridge_slave_0: entered promiscuous mode [ 91.689602][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.697368][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.705059][ T5782] bridge_slave_1: entered allmulticast mode [ 91.712724][ T5782] bridge_slave_1: entered promiscuous mode [ 91.755280][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.771344][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.863872][ T5782] team0: Port device team_slave_0 added [ 91.886605][ T5782] team0: Port device team_slave_1 added [ 91.892626][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.920985][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.932528][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.957516][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.966267][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.993269][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.012665][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.027336][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.035015][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.061630][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.161186][ T5782] hsr_slave_0: entered promiscuous mode [ 92.167837][ T5782] hsr_slave_1: entered promiscuous mode [ 92.174967][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.182561][ T5782] Cannot create hsr debugfs directory [ 92.193698][ T5096] Bluetooth: hci0: command tx timeout [ 92.322223][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.374593][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.433415][ T5096] Bluetooth: hci3: command tx timeout [ 92.433552][ T5795] Bluetooth: hci1: command tx timeout [ 92.439900][ T52] Bluetooth: hci2: command tx timeout [ 92.468522][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.475990][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.511031][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.518749][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.539784][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.555232][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.594982][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.601993][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.614717][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.654966][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.697568][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.710443][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.736205][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.743469][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.772607][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.779879][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.821964][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.829341][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.840595][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.847853][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.142819][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.199752][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.227539][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.276540][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.283833][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.302397][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.309641][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.420628][ T5787] veth0_vlan: entered promiscuous mode [ 93.475890][ T5787] veth1_vlan: entered promiscuous mode [ 93.596516][ T5787] veth0_macvtap: entered promiscuous mode [ 93.627799][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.659663][ T5787] veth1_macvtap: entered promiscuous mode [ 93.680467][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.735860][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.786672][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.813180][ T5786] veth0_vlan: entered promiscuous mode [ 93.846421][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.857700][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.867722][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.876958][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.920286][ T5786] veth1_vlan: entered promiscuous mode [ 93.938956][ T5791] veth0_vlan: entered promiscuous mode [ 93.991452][ T5791] veth1_vlan: entered promiscuous mode [ 94.003325][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.072854][ T5786] veth0_macvtap: entered promiscuous mode [ 94.106215][ T5791] veth0_macvtap: entered promiscuous mode [ 94.141514][ T5786] veth1_macvtap: entered promiscuous mode [ 94.149418][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.163738][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.180824][ T5791] veth1_macvtap: entered promiscuous mode [ 94.237433][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.249964][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.261952][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.273445][ T52] Bluetooth: hci0: command tx timeout [ 94.305691][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.317349][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.330052][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.342011][ T1338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.354020][ T1338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.369400][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.380139][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.391059][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.402635][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.422007][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.444543][ T5782] veth0_vlan: entered promiscuous mode [ 94.457593][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.468609][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.478930][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.490126][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.501793][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.510630][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.519922][ T52] Bluetooth: hci1: command tx timeout [ 94.523406][ T5096] Bluetooth: hci2: command tx timeout [ 94.527446][ T52] Bluetooth: hci3: command tx timeout [ 94.536587][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.545613][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.555142][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.582781][ T5791] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.600914][ T5791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.609739][ T5791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.619915][ T5791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.658701][ T5782] veth1_vlan: entered promiscuous mode [ 94.733669][ T5787] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.810157][ T5782] veth0_macvtap: entered promiscuous mode [ 94.824419][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.832315][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.850124][ T5782] veth1_macvtap: entered promiscuous mode [ 94.928976][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.954492][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.970875][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.988355][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.005431][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.016188][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.030263][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.040990][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.058480][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.068548][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.078959][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.107336][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.119399][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.132655][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.144944][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.155190][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.166010][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.178152][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.191534][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.201051][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.209996][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.219830][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.318843][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.362609][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.463315][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.492772][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.541784][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.556508][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.833617][ T5890] process 'syz.2.6' launched './file0' with NULL argv: empty string added [ 95.971697][ T5892] futex_wake_op: syz.0.7 tries to shift op by 144; fix this program [ 96.353911][ T52] Bluetooth: hci0: command tx timeout [ 96.489590][ T5910] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5911] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[5910] [ 96.601838][ T52] Bluetooth: hci3: command tx timeout [ 96.601862][ T5795] Bluetooth: hci2: command tx timeout [ 96.608713][ T52] Bluetooth: hci1: command tx timeout [ 96.682394][ T5920] syz.3.13[5920]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 96.706210][ T5920] loop3: detected capacity change from 0 to 512 [ 96.769340][ T5920] FAT-fs (loop3): error, corrupted file size (i_pos 51, 8960) [ 96.777381][ T5920] FAT-fs (loop3): Filesystem has been set read-only [ 96.785166][ T5920] FAT-fs (loop3): error, corrupted file size (i_pos 51, 8960) [ 97.098247][ T5927] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.158710][ T27] cfg80211: failed to load regulatory.db [ 97.450183][ T5929] loop1: detected capacity change from 0 to 8192 [ 97.493534][ T5929] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 97.581838][ T5929] ntfs3: loop1: ino=b, mi_enum_attr [ 97.591862][ T5929] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 97.632027][ T5929] ntfs3: loop1: Failed to load $Extend (-2). [ 97.657552][ T5929] ntfs3: loop1: Failed to initialize $Extend. [ 97.981038][ T5951] loop3: detected capacity change from 0 to 512 [ 97.992684][ T5951] ======================================================= [ 97.992684][ T5951] WARNING: The mand mount option has been deprecated and [ 97.992684][ T5951] and is ignored by this kernel. Remove the mand [ 97.992684][ T5951] option from the mount to silence this warning. [ 97.992684][ T5951] ======================================================= [ 98.075443][ T5951] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 98.201534][ T5954] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.748680][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.31'. [ 98.797019][ T5965] erspan1: entered allmulticast mode [ 99.569539][ T5980] loop2: detected capacity change from 0 to 128 [ 99.652474][ T5980] syz.2.38: attempt to access beyond end of device [ 99.652474][ T5980] loop2: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 99.778130][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.983096][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 99.998742][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.023081][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 100.032395][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.064573][ T8] usb 2-1: config 0 descriptor?? [ 100.095056][ T8] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 100.437971][ T27] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.105361][ T6015] netlink: 24 bytes leftover after parsing attributes in process `syz.3.48'. [ 101.627760][ T5852] usb 2-1: USB disconnect, device number 2 [ 102.900104][ T6072] loop2: detected capacity change from 0 to 8192 [ 102.947357][ T6072] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 103.018054][ T6072] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 103.064693][ T6072] REISERFS (device loop2): using ordered data mode [ 103.071282][ T6072] reiserfs: using flush barriers [ 103.150459][ T6072] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 103.200904][ T6072] REISERFS (device loop2): checking transaction log (loop2) [ 103.239877][ T6072] REISERFS (device loop2): Using r5 hash to sort names [ 103.259640][ T6072] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 103.482581][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.68'. [ 103.502523][ T6088] netlink: 20 bytes leftover after parsing attributes in process `syz.3.68'. [ 104.085210][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.093136][ T175] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.199004][ T6090] Set syz1 is full, maxelem 6117 reached [ 104.278322][ T23] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 104.293344][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.304183][ T175] usb 3-1: config 0 has no interfaces? [ 104.309733][ T175] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.311987][ T23] usb 4-1: Product: syz [ 104.335728][ T23] usb 4-1: Manufacturer: syz [ 104.340021][ T175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.340376][ T23] usb 4-1: SerialNumber: syz [ 104.378740][ T175] usb 3-1: config 0 descriptor?? [ 104.594398][ T23] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 104.629803][ T23] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 104.924611][ T6108] x86/PAT: syz.0.75:6108 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 105.343089][ T175] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.470649][ T23] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71 [ 105.494493][ T23] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 105.512673][ T23] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 105.531406][ T23] lan78xx: probe of 4-1:1.0 failed with error -71 [ 105.556706][ T23] usb 4-1: USB disconnect, device number 2 [ 105.573288][ T175] usb 2-1: Using ep0 maxpacket: 32 [ 105.586904][ T175] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 105.598034][ T175] usb 2-1: config 0 has no interface number 0 [ 105.618080][ T175] usb 2-1: config 0 interface 184 has no altsetting 0 [ 105.655244][ T175] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 105.683326][ T175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.691419][ T175] usb 2-1: Product: syz [ 105.703044][ T175] usb 2-1: Manufacturer: syz [ 105.707790][ T175] usb 2-1: SerialNumber: syz [ 105.741804][ T175] usb 2-1: config 0 descriptor?? [ 105.757593][ T175] smsc75xx v1.0.0 [ 106.380161][ T175] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 106.394320][ T175] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 106.805595][ T5852] usb 3-1: USB disconnect, device number 2 [ 107.018285][ T175] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 107.057485][ T175] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 107.085917][ T175] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 107.101175][ T175] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 107.113632][ T6129] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.130403][ T175] usb 2-1: USB disconnect, device number 3 [ 107.205358][ T6129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.274854][ T6132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.803065][ T6139] netlink: 'syz.3.91': attribute type 1 has an invalid length. [ 108.347889][ T6137] loop1: detected capacity change from 0 to 40427 [ 108.372932][ T6137] F2FS-fs (loop1): invalid crc value [ 108.408651][ T6137] F2FS-fs (loop1): Found nat_bits in checkpoint [ 108.532534][ T6137] F2FS-fs (loop1): Start checkpoint disabled! [ 108.580932][ T6137] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 108.833327][ T5782] syz-executor: attempt to access beyond end of device [ 108.833327][ T5782] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 108.856731][ T5782] syz-executor: attempt to access beyond end of device [ 108.856731][ T5782] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 109.043511][ T60] kworker/u4:4: attempt to access beyond end of device [ 109.043511][ T60] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 109.066003][ T60] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 109.077630][ T60] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 109.084911][ T60] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 109.545587][ T34] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.689460][ T34] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.909133][ T34] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.089529][ T34] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.985347][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.995698][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.003584][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.012103][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.020996][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 112.029634][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.331685][ T6170] rxe_eth0 speed is unknown, defaulting to 1000 [ 113.349773][ T34] hsr_slave_0: left promiscuous mode [ 113.383695][ T34] hsr_slave_1: left promiscuous mode [ 113.406543][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.437913][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.477411][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.493490][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.513778][ T34] bridge_slave_1: left allmulticast mode [ 113.519502][ T34] bridge_slave_1: left promiscuous mode [ 113.544728][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.595828][ T34] bridge_slave_0: left allmulticast mode [ 113.601561][ T34] bridge_slave_0: left promiscuous mode [ 113.624582][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.690127][ T34] veth1_macvtap: left promiscuous mode [ 113.697996][ T34] veth0_macvtap: left promiscuous mode [ 113.713716][ T34] veth1_vlan: left promiscuous mode [ 113.719428][ T34] veth0_vlan: left promiscuous mode [ 114.113178][ T5795] Bluetooth: hci0: command tx timeout [ 115.120157][ T34] team0 (unregistering): Port device team_slave_1 removed [ 115.201933][ T34] team0 (unregistering): Port device team_slave_0 removed [ 115.291846][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.410417][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.147729][ T34] bond0 (unregistering): Released all slaves [ 116.193166][ T5795] Bluetooth: hci0: command tx timeout [ 116.557623][ T6170] chnl_net:caif_netlink_parms(): no params data found [ 116.858336][ T6170] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.913810][ T6170] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.921145][ T6170] bridge_slave_0: entered allmulticast mode [ 116.969125][ T6170] bridge_slave_0: entered promiscuous mode [ 117.023795][ T6170] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.031023][ T6170] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.073475][ T6170] bridge_slave_1: entered allmulticast mode [ 117.081039][ T6170] bridge_slave_1: entered promiscuous mode [ 117.189657][ T6170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.225808][ T6170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.330360][ T6170] team0: Port device team_slave_0 added [ 117.364425][ T6170] team0: Port device team_slave_1 added [ 117.458701][ T6170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.482511][ T6170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.560256][ T6170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.614226][ T6170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.621248][ T6170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.683093][ T6170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.866311][ T6170] hsr_slave_0: entered promiscuous mode [ 117.893583][ T6170] hsr_slave_1: entered promiscuous mode [ 117.913677][ T6170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.921349][ T6170] Cannot create hsr debugfs directory [ 118.277477][ T5795] Bluetooth: hci0: command tx timeout [ 118.569383][ T6170] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.617150][ T6170] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.636876][ T6170] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.667789][ T6170] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.908098][ T6170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.963944][ T6170] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.981498][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.988777][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.068557][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.075829][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.688647][ T6170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.354432][ T5795] Bluetooth: hci0: command tx timeout [ 120.523598][ T6170] veth0_vlan: entered promiscuous mode [ 120.584409][ T6170] veth1_vlan: entered promiscuous mode [ 120.710204][ T6170] veth0_macvtap: entered promiscuous mode [ 120.747575][ T6170] veth1_macvtap: entered promiscuous mode [ 120.825692][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.869784][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.895372][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.927593][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.954173][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.980555][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.018288][ T6170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.061117][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.099401][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.125079][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.152838][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.203122][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.233009][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.274736][ T6170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.399518][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 121.412503][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 121.429402][ T6170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.438414][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 121.453636][ T6170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.463312][ T6170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.472929][ T6170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.475712][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 121.493320][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 121.501582][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 121.742482][ T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.836184][ T6258] rxe_eth0 speed is unknown, defaulting to 1000 [ 121.944264][ T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.109202][ T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.249435][ T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.305000][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.314736][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.389649][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.423507][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.389779][ T6258] chnl_net:caif_netlink_parms(): no params data found [ 123.553577][ T5795] Bluetooth: hci1: command tx timeout [ 123.913232][ T5852] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 124.127351][ T6258] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.141593][ T5852] usb 5-1: config 0 has no interfaces? [ 124.163494][ T5852] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.188044][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.203233][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.213636][ T6258] bridge_slave_0: entered allmulticast mode [ 124.230088][ T6258] bridge_slave_0: entered promiscuous mode [ 124.239650][ T5852] usb 5-1: config 0 descriptor?? [ 124.264562][ T6258] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.271754][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.312325][ T6258] bridge_slave_1: entered allmulticast mode [ 124.326091][ T6258] bridge_slave_1: entered promiscuous mode [ 124.586064][ T6258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.661692][ T6258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.887726][ T6258] team0: Port device team_slave_0 added [ 124.941336][ T6258] team0: Port device team_slave_1 added [ 125.163558][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.170582][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.273044][ T6258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.295739][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.302736][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.373718][ T6258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.622305][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 125.638842][ T5096] Bluetooth: hci1: command tx timeout [ 125.649952][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 125.673421][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 125.703579][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.721448][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 125.733467][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 125.908471][ T6258] hsr_slave_0: entered promiscuous mode [ 125.932823][ T6258] hsr_slave_1: entered promiscuous mode [ 125.941852][ T6258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.967810][ T6258] Cannot create hsr debugfs directory [ 126.005052][ T34] hsr_slave_0: left promiscuous mode [ 126.023266][ T34] hsr_slave_1: left promiscuous mode [ 126.029708][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.046954][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.064003][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.071620][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.086173][ T34] bridge_slave_1: left allmulticast mode [ 126.091999][ T34] bridge_slave_1: left promiscuous mode [ 126.101832][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.116029][ T34] bridge_slave_0: left allmulticast mode [ 126.128424][ T34] bridge_slave_0: left promiscuous mode [ 126.137558][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.184916][ T34] veth1_macvtap: left promiscuous mode [ 126.190608][ T34] veth0_macvtap: left promiscuous mode [ 126.204420][ T34] veth1_vlan: left promiscuous mode [ 126.211651][ T34] veth0_vlan: left promiscuous mode [ 126.636447][ T9] usb 5-1: USB disconnect, device number 2 [ 127.452000][ T6335] Set syz1 is full, maxelem 6117 reached [ 127.692739][ T34] team0 (unregistering): Port device team_slave_1 removed [ 127.726494][ T5795] Bluetooth: hci1: command tx timeout [ 127.792287][ T34] team0 (unregistering): Port device team_slave_0 removed [ 127.800239][ T5795] Bluetooth: hci3: command tx timeout [ 127.896686][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.005480][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.745479][ T34] bond0 (unregistering): Released all slaves [ 128.892948][ T6319] rxe_eth0 speed is unknown, defaulting to 1000 [ 129.793354][ T5795] Bluetooth: hci1: command tx timeout [ 129.850378][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.872025][ T6258] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 129.874240][ T5795] Bluetooth: hci3: command tx timeout [ 129.899128][ T6258] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 129.978226][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.003698][ T6258] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 130.057567][ T6258] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 130.188143][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.390710][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.808679][ T6319] chnl_net:caif_netlink_parms(): no params data found [ 131.196145][ T6258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.305204][ T6319] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.324348][ T6319] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.343656][ T6319] bridge_slave_0: entered allmulticast mode [ 131.353894][ T6319] bridge_slave_0: entered promiscuous mode [ 131.428714][ T6319] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.446550][ T6319] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.463259][ T6319] bridge_slave_1: entered allmulticast mode [ 131.477797][ T6319] bridge_slave_1: entered promiscuous mode [ 131.712673][ T6319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.763486][ T6258] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.822457][ T6319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.920899][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.928177][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.956715][ T5795] Bluetooth: hci3: command tx timeout [ 131.974808][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.982253][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.238624][ T6319] team0: Port device team_slave_0 added [ 132.267788][ T6319] team0: Port device team_slave_1 added [ 132.484933][ T6319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.491966][ T6319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.573042][ T6319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.703907][ T6319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.732899][ T6319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.765814][ T6319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.859254][ T6258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.004333][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.011125][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.097325][ T6319] hsr_slave_0: entered promiscuous mode [ 133.131207][ T6319] hsr_slave_1: entered promiscuous mode [ 133.163185][ T6319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.170820][ T6319] Cannot create hsr debugfs directory [ 133.645106][ T50] hsr_slave_0: left promiscuous mode [ 133.674250][ T50] hsr_slave_1: left promiscuous mode [ 133.703421][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.710945][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.750406][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.774340][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.793266][ T50] bridge_slave_1: left allmulticast mode [ 133.798988][ T50] bridge_slave_1: left promiscuous mode [ 133.823557][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.856003][ T50] bridge_slave_0: left allmulticast mode [ 133.861724][ T50] bridge_slave_0: left promiscuous mode [ 133.884776][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.950932][ T50] veth1_macvtap: left promiscuous mode [ 133.963093][ T50] veth0_macvtap: left promiscuous mode [ 133.968812][ T50] veth1_vlan: left promiscuous mode [ 133.984224][ T50] veth0_vlan: left promiscuous mode [ 134.034038][ T5795] Bluetooth: hci3: command tx timeout [ 135.518072][ T50] team0 (unregistering): Port device team_slave_1 removed [ 135.622585][ T50] team0 (unregistering): Port device team_slave_0 removed [ 135.733071][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.835738][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.626863][ T50] bond0 (unregistering): Released all slaves [ 136.970084][ T6258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.222370][ T6319] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 137.312337][ T6319] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 137.365677][ T6319] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 137.406762][ T6319] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 137.699206][ T6319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.742762][ T6319] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.799287][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.806618][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.872898][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.880206][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.164860][ T6258] veth0_vlan: entered promiscuous mode [ 138.201106][ T6258] veth1_vlan: entered promiscuous mode [ 138.405854][ T6258] veth0_macvtap: entered promiscuous mode [ 138.457656][ T6258] veth1_macvtap: entered promiscuous mode [ 138.578584][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.620335][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.653192][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.683191][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.720184][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.781630][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.813801][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.833440][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.863129][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.900005][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.951558][ T6258] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.989155][ T6258] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.006399][ T6258] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.034591][ T6258] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.098059][ T6319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.548456][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 139.575714][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 139.591566][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 139.602605][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 139.611783][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 139.620422][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.758681][ T147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.854815][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.862726][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.981226][ T147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.067608][ T6432] rxe_eth0 speed is unknown, defaulting to 1000 [ 140.100862][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.128735][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.186352][ T147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.287268][ T147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.597233][ T6319] veth0_vlan: entered promiscuous mode [ 140.850102][ T6319] veth1_vlan: entered promiscuous mode [ 141.435374][ T6465] gadgetfs: bound to dummy_udc driver [ 141.451885][ T6319] veth0_macvtap: entered promiscuous mode [ 141.606323][ T6319] veth1_macvtap: entered promiscuous mode [ 141.645093][ T5852] gadgetfs: suspended from state 2 [ 141.681721][ T6258] ================================================================== [ 141.689864][ T6258] BUG: KASAN: slab-use-after-free in __mutex_lock+0xfc/0xc80 [ 141.697316][ T6258] Read of size 8 at addr ffff88805de86460 by task syz-executor/6258 [ 141.705419][ T6258] [ 141.707805][ T6258] CPU: 1 PID: 6258 Comm: syz-executor Not tainted syzkaller #0 [ 141.715396][ T6258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 141.725506][ T6258] Call Trace: [ 141.728825][ T6258] [ 141.731787][ T6258] dump_stack_lvl+0x18c/0x250 [ 141.736520][ T6258] ? __lock_acquire+0x7eb0/0x7eb0 [ 141.741607][ T6258] ? show_regs_print_info+0x20/0x20 [ 141.747128][ T6258] ? load_image+0x420/0x420 [ 141.751678][ T6258] ? __virt_addr_valid+0x10c/0x380 [ 141.756839][ T6258] ? __virt_addr_valid+0x10c/0x380 [ 141.762008][ T6258] ? __virt_addr_valid+0x10c/0x380 [ 141.767177][ T6258] print_report+0xa8/0x210 [ 141.771657][ T6258] ? __mutex_lock+0xfc/0xc80 [ 141.776301][ T6258] kasan_report+0x117/0x150 [ 141.780851][ T6258] ? tomoyo_check_open_permission+0x384/0x460 [ 141.786970][ T6258] ? __mutex_lock+0xfc/0xc80 [ 141.791616][ T6258] __mutex_lock+0xfc/0xc80 [ 141.796085][ T6258] ? end_current_label_crit_section+0x170/0x170 [ 141.802442][ T6258] ? ep_open+0x4e/0x270 [ 141.806658][ T6258] ? mutex_lock_nested+0x20/0x20 [ 141.811657][ T6258] ? apparmor_file_open+0x5ab/0x760 [ 141.816918][ T6258] ? apparmor_inode_getattr+0x2c0/0x2c0 [ 141.822519][ T6258] ? __rwlock_init+0x150/0x150 [ 141.827344][ T6258] ep_open+0x4e/0x270 [ 141.831380][ T6258] ? do_dentry_open+0x86f/0x14b0 [ 141.836369][ T6258] do_dentry_open+0x880/0x14b0 [ 141.841189][ T6258] ? ep_ioctl+0x1c0/0x1c0 [ 141.845589][ T6258] path_openat+0x284f/0x3270 [ 141.850239][ T6258] ? do_sys_openat2+0xda/0x1d0 [ 141.855188][ T6258] ? __x64_sys_openat+0x139/0x160 [ 141.860275][ T6258] ? verify_lock_unused+0x140/0x140 [ 141.866691][ T6258] ? do_filp_open+0x430/0x430 [ 141.871455][ T6258] do_filp_open+0x1f2/0x430 [ 141.876016][ T6258] ? vfs_tmpfile+0x620/0x620 [ 141.880667][ T6258] ? _raw_spin_unlock+0x28/0x40 [ 141.885566][ T6258] ? alloc_fd+0x590/0x640 [ 141.889953][ T6258] do_sys_openat2+0x134/0x1d0 [ 141.894681][ T6258] ? do_sys_open+0xe0/0xe0 [ 141.899146][ T6258] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 141.905180][ T6258] ? fsnotify_link_count+0xf0/0xf0 [ 141.910392][ T6258] ? lock_chain_count+0x20/0x20 [ 141.915419][ T6258] __x64_sys_openat+0x139/0x160 [ 141.920335][ T6258] do_syscall_64+0x55/0xb0 [ 141.924990][ T6258] ? clear_bhb_loop+0x40/0x90 [ 141.929725][ T6258] ? clear_bhb_loop+0x40/0x90 [ 141.934463][ T6258] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.940422][ T6258] RIP: 0033:0x7f0791f5fd8e [ 141.944891][ T6258] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 141.964544][ T6258] RSP: 002b:00007ffe9ca80078 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 141.973065][ T6258] RAX: ffffffffffffffda RBX: 000055556de77500 RCX: 00007f0791f5fd8e [ 141.981132][ T6258] RDX: 0000000000000000 RSI: 00007ffe9ca801e0 RDI: ffffffffffffff9c [ 141.989155][ T6258] RBP: 00007ffe9ca801e0 R08: 0000000000000000 R09: 0000000000000000 [ 141.997220][ T6258] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe9ca812d0 [ 142.005236][ T6258] R13: 00007f0792035f63 R14: 000055556de774e8 R15: 0000000000000006 [ 142.013266][ T6258] [ 142.016316][ T6258] [ 142.018673][ T6258] Allocated by task 6465: [ 142.023030][ T6258] kasan_set_track+0x4e/0x70 [ 142.027674][ T6258] __kasan_kmalloc+0x8f/0xa0 [ 142.032315][ T6258] gadgetfs_bind+0x25f/0x830 [ 142.036963][ T6258] gadget_bind_driver+0x2b3/0x770 [ 142.042029][ T6258] really_probe+0x24a/0xae0 [ 142.046590][ T6258] __driver_probe_device+0x1f5/0x390 [ 142.051920][ T6258] driver_probe_device+0x4f/0x420 [ 142.056987][ T6258] __driver_attach+0x444/0x6d0 [ 142.061806][ T6258] bus_for_each_dev+0x235/0x2b0 [ 142.066708][ T6258] bus_add_driver+0x340/0x630 [ 142.071429][ T6258] driver_register+0x23a/0x310 [ 142.076244][ T6258] usb_gadget_register_driver_owner+0xf9/0x270 [ 142.082443][ T6258] dev_config+0xe49/0x1260 [ 142.086910][ T6258] vfs_write+0x299/0x9a0 [ 142.091210][ T6258] ksys_write+0x151/0x260 [ 142.095587][ T6258] do_syscall_64+0x55/0xb0 [ 142.100049][ T6258] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.105988][ T6258] [ 142.108345][ T6258] Freed by task 5852: [ 142.112352][ T6258] kasan_set_track+0x4e/0x70 [ 142.116989][ T6258] kasan_save_free_info+0x28/0x40 [ 142.122073][ T6258] ____kasan_slab_free+0x126/0x1f0 [ 142.127294][ T6258] slab_free_freelist_hook+0x154/0x240 [ 142.132806][ T6258] __kmem_cache_free+0xba/0x1f0 [ 142.137702][ T6258] destroy_ep_files+0x282/0x330 [ 142.142613][ T6258] gadgetfs_unbind+0x109/0x2b0 [ 142.147430][ T6258] gadget_unbind_driver+0x1bf/0x3e0 [ 142.152681][ T6258] device_release_driver_internal+0x408/0x6f0 [ 142.158799][ T6258] driver_detach+0x1f3/0x2d0 [ 142.163442][ T6258] bus_remove_driver+0x221/0x2f0 [ 142.168433][ T6258] usb_gadget_unregister_driver+0x4e/0x70 [ 142.174212][ T6258] dev_release+0x86/0x200 [ 142.178599][ T6258] __fput+0x221/0x940 [ 142.182671][ T6258] delayed_fput+0x58/0x80 [ 142.187046][ T6258] process_scheduled_works+0xa60/0x1600 [ 142.192681][ T6258] worker_thread+0xa5e/0xfe0 [ 142.197314][ T6258] kthread+0x2fa/0x390 [ 142.201420][ T6258] ret_from_fork+0x48/0x80 [ 142.205972][ T6258] ret_from_fork_asm+0x11/0x20 [ 142.210791][ T6258] [ 142.213147][ T6258] Last potentially related work creation: [ 142.218984][ T6258] kasan_save_stack+0x3e/0x60 [ 142.223756][ T6258] __kasan_record_aux_stack+0xaf/0xc0 [ 142.229215][ T6258] kvfree_call_rcu+0xee/0x780 [ 142.233985][ T6258] drop_sysctl_table+0x394/0x540 [ 142.238974][ T6258] drop_sysctl_table+0x3ab/0x540 [ 142.243956][ T6258] unregister_sysctl_table+0x41/0x60 [ 142.249287][ T6258] inetdev_event+0x77c/0x1610 [ 142.254006][ T6258] notifier_call_chain+0x18f/0x380 [ 142.259168][ T6258] unregister_netdevice_many_notify+0x1037/0x1910 [ 142.265712][ T6258] unregister_netdevice_queue+0x2e9/0x330 [ 142.271476][ T6258] nsim_destroy+0x4d/0x180 [ 142.275947][ T6258] __nsim_dev_port_del+0x14d/0x1b0 [ 142.281141][ T6258] nsim_dev_reload_destroy+0x283/0x480 [ 142.286660][ T6258] nsim_dev_reload_down+0x8a/0xc0 [ 142.291732][ T6258] devlink_reload+0x150/0x600 [ 142.296449][ T6258] devlink_pernet_pre_exit+0x197/0x360 [ 142.301945][ T6258] cleanup_net+0x581/0xb00 [ 142.306402][ T6258] process_scheduled_works+0xa60/0x1600 [ 142.311995][ T6258] worker_thread+0xa5e/0xfe0 [ 142.316629][ T6258] kthread+0x2fa/0x390 [ 142.320742][ T6258] ret_from_fork+0x48/0x80 [ 142.325212][ T6258] ret_from_fork_asm+0x11/0x20 [ 142.330022][ T6258] [ 142.332378][ T6258] The buggy address belongs to the object at ffff88805de86400 [ 142.332378][ T6258] which belongs to the cache kmalloc-512 of size 512 [ 142.346467][ T6258] The buggy address is located 96 bytes inside of [ 142.346467][ T6258] freed 512-byte region [ffff88805de86400, ffff88805de86600) [ 142.360228][ T6258] [ 142.362586][ T6258] The buggy address belongs to the physical page: [ 142.369043][ T6258] page:ffffea000177a100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5de84 [ 142.379235][ T6258] head:ffffea000177a100 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 142.388208][ T6258] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 142.396221][ T6258] page_type: 0xffffffff() [ 142.400597][ T6258] raw: 00fff00000000840 ffff888018c41c80 ffffea00017ab800 dead000000000002 [ 142.409219][ T6258] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 142.417839][ T6258] page dumped because: kasan: bad access detected [ 142.424289][ T6258] page_owner tracks the page as allocated [ 142.430052][ T6258] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5791, tgid 5791 (syz-executor), ts 92005731831, free_ts 30140826076 [ 142.451465][ T6258] post_alloc_hook+0x1c1/0x200 [ 142.456283][ T6258] get_page_from_freelist+0x2181/0x22a0 [ 142.461874][ T6258] __alloc_pages+0x1f0/0x460 [ 142.466504][ T6258] alloc_slab_page+0x5d/0x180 [ 142.471230][ T6258] new_slab+0x87/0x2d0 [ 142.475329][ T6258] ___slab_alloc+0xc5c/0x12f0 [ 142.480044][ T6258] __kmem_cache_alloc_node+0x122/0x260 [ 142.485549][ T6258] __kmalloc+0xa7/0x240 [ 142.489752][ T6258] fib6_info_alloc+0x30/0xf0 [ 142.494383][ T6258] ip6_route_info_create+0x455/0x1260 [ 142.499839][ T6258] ip6_route_add+0x28/0x160 [ 142.504430][ T6258] addrconf_add_dev+0x29c/0x3b0 [ 142.509322][ T6258] inet6_addr_add+0x25d/0xb30 [ 142.514036][ T6258] inet6_rtm_newaddr+0x6fd/0x9d0 [ 142.519024][ T6258] rtnetlink_rcv_msg+0x843/0xf90 [ 142.524015][ T6258] netlink_rcv_skb+0x235/0x4c0 [ 142.528835][ T6258] page last free stack trace: [ 142.533567][ T6258] free_unref_page_prepare+0x7d7/0x8f0 [ 142.539080][ T6258] free_unref_page+0x32/0x2e0 [ 142.543798][ T6258] free_contig_range+0xa1/0x150 [ 142.548699][ T6258] destroy_args+0x7d/0x840 [ 142.553162][ T6258] debug_vm_pgtable+0x411/0x440 [ 142.558066][ T6258] do_one_initcall+0x242/0x790 [ 142.562875][ T6258] do_initcall_level+0x13d/0x1f0 [ 142.567877][ T6258] do_initcalls+0x69/0xd0 [ 142.572263][ T6258] kernel_init_freeable+0x3d9/0x560 [ 142.577606][ T6258] kernel_init+0x1d/0x1c0 [ 142.581984][ T6258] ret_from_fork+0x48/0x80 [ 142.586449][ T6258] ret_from_fork_asm+0x11/0x20 [ 142.591260][ T6258] [ 142.593608][ T6258] Memory state around the buggy address: [ 142.599276][ T6258] ffff88805de86300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 142.607377][ T6258] ffff88805de86380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 142.615478][ T6258] >ffff88805de86400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.623618][ T6258] ^ [ 142.630850][ T6258] ffff88805de86480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.638956][ T6258] ffff88805de86500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.647051][ T6258] ================================================================== [ 142.661984][ T27] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 142.673183][ T5795] Bluetooth: hci2: command tx timeout [ 142.693133][ T6258] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 142.700402][ T6258] CPU: 0 PID: 6258 Comm: syz-executor Not tainted syzkaller #0 [ 142.707991][ T6258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 142.718084][ T6258] Call Trace: [ 142.721404][ T6258] [ 142.724365][ T6258] dump_stack_lvl+0x18c/0x250 [ 142.729092][ T6258] ? show_regs_print_info+0x20/0x20 [ 142.734339][ T6258] ? load_image+0x420/0x420 [ 142.738892][ T6258] panic+0x2ca/0x720 [ 142.742828][ T6258] ? bpf_jit_dump+0xd0/0xd0 [ 142.747378][ T6258] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 142.753399][ T6258] ? _raw_spin_unlock+0x40/0x40 [ 142.758310][ T6258] ? print_memory_metadata+0x314/0x400 [ 142.763832][ T6258] ? __mutex_lock+0xfc/0xc80 [ 142.768611][ T6258] check_panic_on_warn+0x84/0xa0 [ 142.773621][ T6258] ? __mutex_lock+0xfc/0xc80 [ 142.778271][ T6258] end_report+0x6f/0x130 [ 142.782557][ T6258] kasan_report+0x128/0x150 [ 142.787109][ T6258] ? tomoyo_check_open_permission+0x384/0x460 [ 142.793221][ T6258] ? __mutex_lock+0xfc/0xc80 [ 142.797862][ T6258] __mutex_lock+0xfc/0xc80 [ 142.802331][ T6258] ? end_current_label_crit_section+0x170/0x170 [ 142.808633][ T6258] ? ep_open+0x4e/0x270 [ 142.812857][ T6258] ? mutex_lock_nested+0x20/0x20 [ 142.817856][ T6258] ? apparmor_file_open+0x5ab/0x760 [ 142.823109][ T6258] ? apparmor_inode_getattr+0x2c0/0x2c0 [ 142.828712][ T6258] ? __rwlock_init+0x150/0x150 [ 142.833533][ T6258] ep_open+0x4e/0x270 [ 142.837564][ T6258] ? do_dentry_open+0x86f/0x14b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 142.842555][ T6258] do_dentry_open+0x880/0x14b0 [ 142.847377][ T6258] ? ep_ioctl+0x1c0/0x1c0 [ 142.851759][ T6258] path_openat+0x284f/0x3270 [ 142.856411][ T6258] ? do_sys_openat2+0xda/0x1d0 [ 142.861229][ T6258] ? __x64_sys_openat+0x139/0x160 [ 142.866300][ T6258] ? verify_lock_unused+0x140/0x140 [ 142.871553][ T6258] ? do_filp_open+0x430/0x430 [ 142.876289][ T6258] do_filp_open+0x1f2/0x430 [ 142.880840][ T6258] ? vfs_tmpfile+0x620/0x620 [ 142.885482][ T6258] ? _raw_spin_unlock+0x28/0x40 [ 142.890376][ T6258] ? alloc_fd+0x590/0x640 [ 142.894756][ T6258] do_sys_openat2+0x134/0x1d0 [ 142.899487][ T6258] ? do_sys_open+0xe0/0xe0 [ 142.903948][ T6258] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 142.909969][ T6258] ? fsnotify_link_count+0xf0/0xf0 [ 142.915123][ T6258] ? lock_chain_count+0x20/0x20 [ 142.920108][ T6258] __x64_sys_openat+0x139/0x160 [ 142.925011][ T6258] do_syscall_64+0x55/0xb0 [ 142.929561][ T6258] ? clear_bhb_loop+0x40/0x90 [ 142.934284][ T6258] ? clear_bhb_loop+0x40/0x90 [ 142.939012][ T6258] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.944945][ T6258] RIP: 0033:0x7f0791f5fd8e [ 142.949399][ T6258] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 142.969045][ T6258] RSP: 002b:00007ffe9ca80078 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 142.977509][ T6258] RAX: ffffffffffffffda RBX: 000055556de77500 RCX: 00007f0791f5fd8e [ 142.985519][ T6258] RDX: 0000000000000000 RSI: 00007ffe9ca801e0 RDI: ffffffffffffff9c [ 142.993535][ T6258] RBP: 00007ffe9ca801e0 R08: 0000000000000000 R09: 0000000000000000 [ 143.001557][ T6258] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe9ca812d0 [ 143.009571][ T6258] R13: 00007f0792035f63 R14: 000055556de774e8 R15: 0000000000000006 [ 143.017599][ T6258] [ 143.021334][ T6258] Kernel Offset: disabled [ 143.025683][ T6258] Rebooting in 86400 seconds..