last executing test programs: 28.053204164s ago: executing program 1 (id=93): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000a40)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1000, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000001100)={0x4, 0x0, 0x0, 0x1e0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r1}, [@crypt={0x0, 0x1000, 0x0, 0xa8, 'crypt\x00', {'capi:xts(aes)-random', 0x20, @fixed='0123456789abcdef0123456789abcdef01234567', 0x20, '4096', 0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '1024'}, ' 2 sector_size:4096 iv_large_sectors'}}]}) 27.79863108s ago: executing program 1 (id=99): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) fallocate(r1, 0x0, 0x0, 0x1000f4) sendfile(r1, r1, 0x0, 0x40000000800) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) 27.559998085s ago: executing program 1 (id=102): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x82702) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000001c0)="27fa57", 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000140)={r1}) 27.372990914s ago: executing program 1 (id=106): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x21a70d1, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='\x00', 0x9801) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(r0, &(0x7f0000000540)='./file0\x00', 0x89901) mount_setattr(r0, &(0x7f0000000580)='.\x00', 0x9000, &(0x7f00000005c0)={0x0, 0x0, 0x80000, {r1}}, 0x20) 26.897399482s ago: executing program 1 (id=108): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)) 26.480473225s ago: executing program 1 (id=117): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000029c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000002a00)={0x9}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000002a40)={[{0x1, 0xc000, 0x4, 0xfb, 0x1, 0x8, 0x3, 0xa, 0x2, 0x6, 0x12, 0x5, 0x40}, {0x8, 0x2, 0x1, 0x4d, 0x7, 0x0, 0x44, 0x20, 0x9, 0xc, 0x6, 0x6f, 0x20e}, {0x0, 0x5, 0x38, 0x4, 0x84, 0x7, 0x3, 0x50, 0xc, 0x2, 0x7, 0x8, 0x20024a9}], 0xdfffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000002ac0)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002b00)={[0x60000000001, 0xd4, 0x801, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x3, 0x206, 0xf, 0x5, 0x8000000000000006, 0x3, 0x48000000000, 0x6, 0xf73c], 0x80a0000, 0x40}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 26.328194861s ago: executing program 32 (id=117): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000029c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000002a00)={0x9}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000002a40)={[{0x1, 0xc000, 0x4, 0xfb, 0x1, 0x8, 0x3, 0xa, 0x2, 0x6, 0x12, 0x5, 0x40}, {0x8, 0x2, 0x1, 0x4d, 0x7, 0x0, 0x44, 0x20, 0x9, 0xc, 0x6, 0x6f, 0x20e}, {0x0, 0x5, 0x38, 0x4, 0x84, 0x7, 0x3, 0x50, 0xc, 0x2, 0x7, 0x8, 0x20024a9}], 0xdfffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000002ac0)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002b00)={[0x60000000001, 0xd4, 0x801, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x3, 0x206, 0xf, 0x5, 0x8000000000000006, 0x3, 0x48000000000, 0x6, 0xf73c], 0x80a0000, 0x40}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.926356374s ago: executing program 3 (id=293): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x221, 0x70bd27, 0x255fdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}}, 0x90) 10.886366478s ago: executing program 3 (id=295): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="020320001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff000000000000000000000000000000000200010000000000000002fd01000080030005000000000002004e21ffffffff0000000000000000010018"], 0x98}}, 0x0) 10.777074199s ago: executing program 3 (id=297): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r1, 0x221, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}]}, 0x24}}, 0x90) 10.589097778s ago: executing program 3 (id=299): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x88000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x22081, 0x0) write(r0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000440), 0x88, &(0x7f0000002540)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 10.411153056s ago: executing program 3 (id=300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000000c0)={0x1000200001ee0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) get_mempolicy(0x0, 0x0, 0x400000001fc, &(0x7f0000001000/0x3000)=nil, 0x3) chdir(&(0x7f0000000240)='./file0\x00') 10.013889077s ago: executing program 3 (id=303): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000940)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000980)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000a00)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000a80)="51289c001e00cca9072e1f21dc867f59d038a0f9dc5b491af28acb49ed57cb078a3854ba6868de75dc4dd4d6a6a2d4a93d08d65b9b9d4c1909c16ea574ed6c7f963425e749ef6246edeed157020743116d90c2b00900859863e1c07ab839fb7830ecd04df21f1356b0ad0d9b157d22bcf0", 0x9d0aeebe0bd281d3, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000b00)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 9.755813044s ago: executing program 33 (id=303): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000940)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000980)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000a00)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000a80)="51289c001e00cca9072e1f21dc867f59d038a0f9dc5b491af28acb49ed57cb078a3854ba6868de75dc4dd4d6a6a2d4a93d08d65b9b9d4c1909c16ea574ed6c7f963425e749ef6246edeed157020743116d90c2b00900859863e1c07ab839fb7830ecd04df21f1356b0ad0d9b157d22bcf0", 0x9d0aeebe0bd281d3, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000b00)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 8.333039409s ago: executing program 2 (id=322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x5, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 8.197086103s ago: executing program 2 (id=325): r0 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host16=0xc0c, 0x3}}, @nested_vmlaunch={0x12f, 0x18}], 0x80}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.868038187s ago: executing program 2 (id=328): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ec0), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f00)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x19}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x0, 0x1}}]}}]}, 0x44}}, 0x4084) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xde, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6c84, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000001280)={'syzkaller0\x00', 0x1}) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000012c0)='syzkaller0\x00', 0xb) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000001300)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2.557162629s ago: executing program 4 (id=363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000000002000a0020000000000a0100000000000000000002000a000900010073797a300000000060000000120a0100000000000000000002000a000900010073797a30000000000900020073797a30000000000800030000000009280004800500020006000000060003001f9000000800040088130000050005"], 0xbc}}, 0x0) 2.339519641s ago: executing program 4 (id=366): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000480)) 2.339342871s ago: executing program 0 (id=367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="780000000206010100000000000000000a00000005000400020000000900020073797a32000000002c00078008000640000000da08001340000007ff0800134000001000050015000c00000008001240000000050500050002000000050001000600000011000300686173683a6e65742c6e6574"], 0x78}, 0x1, 0x0, 0x0, 0x80820}, 0x80) 2.292529486s ago: executing program 4 (id=368): syz_usb_connect(0x1, 0x3d, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000b40)=[{&(0x7f0000000b80)="90", 0x1}, {&(0x7f0000000bc0)="d6", 0x1}], 0x2) 2.15829765s ago: executing program 0 (id=369): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 2.05679226s ago: executing program 2 (id=370): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 2.037317072s ago: executing program 0 (id=371): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)='/', 0x1, 0x20, &(0x7f00000000c0)={0x11, 0x1c, r1, 0x1, 0x0, 0x6, @random="3bebeccaf79e"}, 0x14) 1.901618426s ago: executing program 0 (id=372): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x69b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r8], 0x54}}, 0x0) 1.691183138s ago: executing program 5 (id=373): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40010000100001"], 0x140}}, 0x0) 1.671336209s ago: executing program 5 (id=374): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x405, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 1.428361694s ago: executing program 2 (id=375): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='27', 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a0000000500010006000000110003"], 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.333298484s ago: executing program 5 (id=376): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000002140)='./security\x00', &(0x7f0000002180)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000021c0)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000002200)='m', 0x1) 1.232334374s ago: executing program 0 (id=377): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x179) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000380)='7', 0x1) keyctl$set_reqkey_keyring(0xe, 0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) 1.122401706s ago: executing program 5 (id=378): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0xf48, 0x0, 0xfffffe3f, 0x10000, 0x0, "4d0000000001000000fbd98ec08100", 0xfff, 0x800}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x56, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @period={0x5d, 0x5, 0xc, 0x7, 0x7ff, {0x0, 0x6, 0x4, 0x7ff}, 0x0, 0x0}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) 181.212942ms ago: executing program 4 (id=379): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x5c, 0x41, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3c, 0x1, 0x0, 0x0, @binary="00112233445566748899aabb86dd2c00001c00002b0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e2b0d"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 120.969558ms ago: executing program 5 (id=380): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000001940)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4}}, 0x48) 94.88521ms ago: executing program 4 (id=381): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newsa={0x15c, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0xfffd, 0x4e22, 0x0, 0x0, 0x180, 0x0, 0x2f}, {@in6=@empty, 0x0, 0x33}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x1000000000, 0xfffffffffffffffc, 0xfffffffffffff801, 0x2, 0x0, 0x4000000, 0xffffffff, 0xff}, {0x0, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x5}, 0x70bd28, 0x2, 0xa, 0x1}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8400004}}, @algo_auth={0x48, 0x1, {{'nhpoly1305-avx2\x00'}}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x15c}}, 0x0) 1.79016ms ago: executing program 0 (id=382): ioctl(0xffffffffffffffff, 0x5, &(0x7f0000000280)="6230f4f1f5e3e4a39d1c7dd21c05e51074dda568e3e5d424fac40280f584df96290da2411703633dcca1") syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043ef50d5d"], 0xf8) 1.52859ms ago: executing program 2 (id=383): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_INPUT2(r0, 0x0, 0x1a) write$UHID_CREATE2(r0, &(0x7f0000000380)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x24, 0x3, 0x46d, 0xc082, 0x0, 0x0, "0600ff0901a10185107508950609018102090191028511750895130901810209019102c0"}}, 0x13c) write$UHID_INPUT2(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c000000070010"], 0xd) 1.45178ms ago: executing program 5 (id=384): r0 = syz_open_dev$video(&(0x7f0000000240), 0x7, 0x40) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000c80)={0x1, 0x20323159, 0x140, 0xef, 0x4, @discrete={0x100, 0x4}}) 0s ago: executing program 4 (id=385): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000800)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000840)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000880)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x2, 0x0, 0xe7}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.179' (ED25519) to the list of known hosts. [ 63.356188][ T4176] cgroup: Unknown subsys name 'net' [ 63.462040][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.920208][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.621704][ T4189] rdma_rxe: rxe_register_device failed with error -23 [ 66.622564][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.631079][ T4189] rdma_rxe: failed to add rxe_eth0 [ 66.640843][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.650913][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.660511][ T4194] rdma_rxe: rxe_register_device failed with error -23 [ 66.669500][ T4195] rdma_rxe: rxe_register_device failed with error -23 [ 66.700635][ T4194] rdma_rxe: failed to add rxe_eth0 [ 66.717861][ T4201] rdma_rxe: rxe_register_device failed with error -23 [ 66.742176][ T4195] rdma_rxe: failed to add rxe_eth0 [ 66.769983][ T4201] rdma_rxe: failed to add rxe_eth0 [ 66.930258][ T1337] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.927363][ T4188] infiniband rxe0: set active [ 66.941870][ T4188] infiniband rxe0: added rxe_eth0 [ 67.043432][ T4188] RDS/IB: rxe0: added [ 67.048223][ T4188] smc: adding ib device rxe0 with port count 1 [ 67.070362][ T4188] smc: ib device rxe0 port 1 has pnetid [ 67.093338][ T1112] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.115389][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.175455][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 67.267681][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.354293][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 67.410463][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 67.438054][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 67.461002][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.511016][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.520583][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.534980][ T4189] device bridge_slave_0 entered promiscuous mode [ 67.606106][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.614990][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.627341][ T4189] device bridge_slave_1 entered promiscuous mode [ 67.668906][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.693492][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.700708][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.712639][ T4201] device bridge_slave_0 entered promiscuous mode [ 67.738213][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.750162][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.759835][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.767417][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.778300][ T4201] device bridge_slave_1 entered promiscuous mode [ 67.835612][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.843133][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.851417][ T4195] device bridge_slave_0 entered promiscuous mode [ 67.886353][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.897609][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.905880][ T4195] device bridge_slave_1 entered promiscuous mode [ 67.922029][ T4189] team0: Port device team_slave_0 added [ 67.929993][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.942611][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.949713][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.958481][ T4194] device bridge_slave_0 entered promiscuous mode [ 67.967643][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.975144][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.983510][ T4194] device bridge_slave_1 entered promiscuous mode [ 68.005562][ T4189] team0: Port device team_slave_1 added [ 68.020131][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.030030][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.053480][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.071252][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.095963][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.124955][ T4201] team0: Port device team_slave_0 added [ 68.156550][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.168317][ T4201] team0: Port device team_slave_1 added [ 68.188269][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.201916][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.241315][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.273433][ T4195] team0: Port device team_slave_0 added [ 68.285383][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.294839][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.326523][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.360712][ T4195] team0: Port device team_slave_1 added [ 68.390533][ T4194] team0: Port device team_slave_0 added [ 68.397837][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.408065][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.437610][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.470862][ T4194] team0: Port device team_slave_1 added [ 68.482763][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.489928][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.516661][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.539995][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.547171][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.573622][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.590183][ T1112] Bluetooth: hci2: command 0x0409 tx timeout [ 68.591989][ T1337] Bluetooth: hci4: command 0x0409 tx timeout [ 68.598605][ T1112] Bluetooth: hci0: command 0x0409 tx timeout [ 68.611916][ T1337] Bluetooth: hci1: command 0x0409 tx timeout [ 68.642057][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.642370][ T1112] Bluetooth: hci3: command 0x0409 tx timeout [ 68.649235][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.681279][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.738943][ T4189] device hsr_slave_0 entered promiscuous mode [ 68.746811][ T4189] device hsr_slave_1 entered promiscuous mode [ 68.754659][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.761657][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.788124][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.842786][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.849820][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.877940][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.894247][ T4201] device hsr_slave_0 entered promiscuous mode [ 68.901169][ T4201] device hsr_slave_1 entered promiscuous mode [ 68.908093][ T4201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.916060][ T4201] Cannot create hsr debugfs directory [ 68.964155][ T4195] device hsr_slave_0 entered promiscuous mode [ 68.971729][ T4195] device hsr_slave_1 entered promiscuous mode [ 68.978666][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.986572][ T4195] Cannot create hsr debugfs directory [ 69.069584][ T3854] infiniband rxe0: set active [ 69.089458][ T1337] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.111547][ T4194] device hsr_slave_0 entered promiscuous mode [ 69.124369][ T4194] device hsr_slave_1 entered promiscuous mode [ 69.131118][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.142802][ T4194] Cannot create hsr debugfs directory [ 69.169741][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 69.397904][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.407471][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.416210][ T4188] device bridge_slave_0 entered promiscuous mode [ 69.440482][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.447813][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.456818][ T4188] device bridge_slave_1 entered promiscuous mode [ 69.490176][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.505702][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.548351][ T4188] team0: Port device team_slave_0 added [ 69.556920][ T4188] team0: Port device team_slave_1 added [ 69.569216][ T4201] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.593776][ T4201] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.604760][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.612058][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.638160][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.652412][ T4201] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.669404][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.676718][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.704210][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.719939][ T4201] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.762204][ T4188] device hsr_slave_0 entered promiscuous mode [ 69.769162][ T4188] device hsr_slave_1 entered promiscuous mode [ 69.776349][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.785096][ T4188] Cannot create hsr debugfs directory [ 69.825903][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.835441][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.853714][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.889174][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.943130][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.953735][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.985483][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.001942][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.107337][ T4195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.137123][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.146639][ T4195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.157536][ T4195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.168763][ T4195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.201699][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.211467][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.220864][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.242579][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.267045][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.276382][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.286119][ T1446] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.293570][ T1446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.302868][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.313306][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.321685][ T1446] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.328805][ T1446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.336692][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.352337][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.371416][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.379275][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.389863][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.400073][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.408946][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.416070][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.427828][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.455710][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.472229][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.488810][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.498010][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.508126][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.515267][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.526272][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.552596][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.559514][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.570672][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.586113][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.595905][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.604401][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.613342][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.622650][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.632569][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.645727][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.654071][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.662400][ T4265] Bluetooth: hci0: command 0x041b tx timeout [ 70.668523][ T4265] Bluetooth: hci1: command 0x041b tx timeout [ 70.675769][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.684097][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 70.688562][ T1446] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.690405][ T4265] Bluetooth: hci2: command 0x041b tx timeout [ 70.697260][ T1446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.714814][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.739190][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.748584][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.752613][ T4267] Bluetooth: hci3: command 0x041b tx timeout [ 70.765182][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.776478][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.785188][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.795024][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.804522][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.813439][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.823361][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.832943][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.841450][ T1446] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.848609][ T1446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.856671][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.890884][ T4201] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.902587][ T4201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.935214][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.944412][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.954894][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.965255][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.975703][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.985616][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.994937][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.004141][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.013651][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.034539][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.047104][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.068305][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.085476][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.102015][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.134973][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.154656][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.171502][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.181380][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.198755][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.230358][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.239441][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.255484][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.269384][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.281496][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.296860][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.308943][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.322384][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.328931][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.343129][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.432243][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.442815][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.462410][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.492184][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.499309][ T307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.509065][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.518173][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.527632][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.534785][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.581604][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.594968][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.608685][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.620583][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.634281][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.644444][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.654490][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.664245][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.673789][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.681851][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.690702][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.706141][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.731563][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.740157][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.770293][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.781442][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.796102][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.807191][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.816422][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.824466][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.832081][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.840495][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.850307][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.858998][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.868960][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.879492][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.893033][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.902732][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.914568][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.924210][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.933166][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.940235][ T307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.962277][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.978906][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.997909][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.023362][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.044097][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.051240][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.074518][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.092607][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.116147][ T4201] device veth0_vlan entered promiscuous mode [ 72.133590][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.152477][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.160726][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.171344][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.180825][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.190566][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.201203][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.213586][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.225889][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.240644][ T4201] device veth1_vlan entered promiscuous mode [ 72.277663][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.287846][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.304720][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.318375][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.329910][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.342359][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.351075][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.367041][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.384663][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.394122][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.424340][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.440859][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.453038][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.466275][ T4194] device veth0_vlan entered promiscuous mode [ 72.486293][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.498804][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.526726][ T4201] device veth0_macvtap entered promiscuous mode [ 72.549664][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.579998][ T4201] device veth1_macvtap entered promiscuous mode [ 72.592204][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.601052][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.609829][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.619292][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.659368][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.671049][ T4194] device veth1_vlan entered promiscuous mode [ 72.692182][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.701580][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.718165][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.736417][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.752399][ T4264] Bluetooth: hci2: command 0x040f tx timeout [ 72.763985][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.776590][ T4264] Bluetooth: hci4: command 0x040f tx timeout [ 72.783574][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.791672][ T4264] Bluetooth: hci1: command 0x040f tx timeout [ 72.804765][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.812503][ T4264] Bluetooth: hci0: command 0x040f tx timeout [ 72.819486][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.828923][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.834056][ T4265] Bluetooth: hci3: command 0x040f tx timeout [ 72.845637][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.855417][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.868212][ T4189] device veth0_vlan entered promiscuous mode [ 72.882212][ T4189] device veth1_vlan entered promiscuous mode [ 72.894638][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.905121][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.914541][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.925448][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.940735][ T4201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.950644][ T4201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.959875][ T4201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.969609][ T4201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.040443][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.051380][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.059243][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.071409][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.088677][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.100012][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.109433][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.126650][ T4189] device veth0_macvtap entered promiscuous mode [ 73.141474][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.154677][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.165730][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.187163][ T4195] device veth0_vlan entered promiscuous mode [ 73.197995][ T4194] device veth0_macvtap entered promiscuous mode [ 73.211975][ T4194] device veth1_macvtap entered promiscuous mode [ 73.219719][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.228498][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.245038][ T4189] device veth1_macvtap entered promiscuous mode [ 73.277567][ T4195] device veth1_vlan entered promiscuous mode [ 73.288836][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.300003][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.346333][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.360160][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.370345][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.375190][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.395657][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.410237][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.421689][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.432089][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.442993][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.454855][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.475436][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.487496][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.497881][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.508562][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.517742][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.530261][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.541415][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.556821][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.568366][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.580360][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.590769][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.602801][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.616905][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.636399][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.646680][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.656065][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.665429][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.676315][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.685474][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.695306][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.704985][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.713681][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.723450][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.733398][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.741401][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.755301][ T4188] device veth0_vlan entered promiscuous mode [ 73.767094][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.776434][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.786638][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.795903][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.814672][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.823943][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.850075][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.871976][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.893781][ T4195] device veth0_macvtap entered promiscuous mode [ 73.910150][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.930277][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.940481][ T4188] device veth1_vlan entered promiscuous mode [ 73.951582][ T4195] device veth1_macvtap entered promiscuous mode [ 74.037356][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.051156][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.067866][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.078859][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.089562][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.100671][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.114636][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.127134][ T1446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.138921][ T1446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.156742][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.169786][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.180414][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.206184][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.223941][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.238320][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.260271][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.272638][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.284587][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.295359][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.307394][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.318382][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.330799][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.349496][ T4188] device veth0_macvtap entered promiscuous mode [ 74.361512][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.372591][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.381535][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.391589][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.401016][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.416302][ T4195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.426019][ T4195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.435924][ T4195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.444944][ T4195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.477023][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.488047][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.501533][ T4188] device veth1_macvtap entered promiscuous mode [ 74.525332][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.533701][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.569810][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.578458][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.600795][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.611340][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.622674][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.640374][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.666356][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.700272][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.711028][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.722692][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.732760][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.744017][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.756530][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.767427][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.791106][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.814740][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.823922][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.833000][ T1337] Bluetooth: hci0: command 0x0419 tx timeout [ 74.839482][ T1337] Bluetooth: hci1: command 0x0419 tx timeout [ 74.845960][ T1337] Bluetooth: hci4: command 0x0419 tx timeout [ 74.852673][ T1337] Bluetooth: hci2: command 0x0419 tx timeout [ 74.873146][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.890453][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.900689][ T1446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.920589][ T1337] Bluetooth: hci3: command 0x0419 tx timeout [ 74.923444][ T1446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.935036][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.950671][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.961018][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.972060][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.982447][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.994695][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.007810][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.033416][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.046146][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.076554][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.100868][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.123079][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.133227][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.143410][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.198693][ T4311] netlink: 'syz.4.5': attribute type 24 has an invalid length. [ 75.217153][ T4311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 75.242595][ T4311] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 75.289423][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.301604][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.365942][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.586134][ T4322] fuse: Unknown parameter '000000000000000000000060x00000000000000080000000000000000000000000000000000000000' [ 75.633673][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.775168][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.256566][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.349902][ T307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.386884][ T307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.427404][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.445558][ T4330] Zero length message leads to an empty skb [ 77.374105][ T4339] loop0: detected capacity change from 0 to 256 [ 78.938404][ T23] Bluetooth: hci4: command 0x0405 tx timeout [ 79.127599][ T1112] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.997326][ T4387] device syzkaller0 entered promiscuous mode [ 81.054646][ T4387] 0: reclassify loop, rule prio 0, protocol 800 [ 82.076277][ T4416] fuse: Unknown parameter '000000000000000000000060x00000000000000080000000000000000000000000000000000000000' [ 83.081757][ C0] sched: RT throttling activated [ 83.357069][ T4421] loop0: detected capacity change from 0 to 1024 [ 83.364968][ T4424] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 83.422713][ T4424] Cannot find add_set index 0 as target [ 83.769472][ T4424] Set syz1 is full, maxelem 2076 reached [ 83.943137][ T4421] ======================================================= [ 83.943137][ T4421] WARNING: The mand mount option has been deprecated and [ 83.943137][ T4421] and is ignored by this kernel. Remove the mand [ 83.943137][ T4421] option from the mount to silence this warning. [ 83.943137][ T4421] ======================================================= [ 84.054237][ T4421] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 84.061639][ T4421] EXT4-fs (loop0): Ignoring removed oldalloc option [ 84.598193][ T4447] loop1: detected capacity change from 0 to 256 [ 84.718555][ T4421] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,nodioread_nolock,oldalloc,dioread_lock,delalloc,grpjquota=,,errors=continue. Quota mode: none. [ 84.989964][ T4421] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.831358][ T4468] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.24: bg 0: block 112: padding at end of block bitmap is not set [ 85.957117][ T4469] ip6tnl0 speed is unknown, defaulting to 1000 [ 85.976311][ T4469] ip6tnl0 speed is unknown, defaulting to 1000 [ 85.986640][ T4469] ip6tnl0 speed is unknown, defaulting to 1000 [ 86.534969][ T4469] infiniband syz0: set active [ 86.539718][ T4469] infiniband syz0: added ip6tnl0 [ 86.550103][ T4469] infiniband syz0: Couldn't open port 1 [ 86.601091][ T4469] RDS/IB: syz0: added [ 86.605222][ T4469] smc: adding ib device syz0 with port count 1 [ 86.611412][ T4469] smc: ib device syz0 port 1 has pnetid [ 86.618133][ T4469] ip6tnl0 speed is unknown, defaulting to 1000 [ 86.721682][ T4469] ip6tnl0 speed is unknown, defaulting to 1000 [ 86.824979][ T4469] ip6tnl0 speed is unknown, defaulting to 1000 [ 86.928247][ T4469] ip6tnl0 speed is unknown, defaulting to 1000 [ 87.032040][ T4469] ip6tnl0 speed is unknown, defaulting to 1000 [ 87.074248][ T1112] ip6tnl0 speed is unknown, defaulting to 1000 [ 87.103776][ T13] cfg80211: failed to load regulatory.db [ 87.285292][ T4468] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 67 with max blocks 64 with error 28 [ 87.297957][ T4468] EXT4-fs (loop0): This should not happen!! Data will be lost [ 87.297957][ T4468] [ 87.307689][ T4468] EXT4-fs (loop0): Total free blocks count 0 [ 87.313737][ T4468] EXT4-fs (loop0): Free/Dirty block details [ 87.319709][ T4468] EXT4-fs (loop0): free_blocks=0 [ 87.324778][ T4468] EXT4-fs (loop0): dirty_blocks=80 [ 87.329922][ T4468] EXT4-fs (loop0): Block reservation details [ 87.335961][ T4468] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 87.354212][ T4297] ip6tnl0 speed is unknown, defaulting to 1000 [ 87.459989][ T4470] Cannot find map_set index 2 as target [ 87.574015][ T4481] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.802015][ T4493] Cannot find add_set index 0 as target [ 87.926895][ T4496] Cannot find add_set index 0 as target [ 88.002783][ T4500] device syzkaller0 entered promiscuous mode [ 88.600375][ T4496] Set syz1 is full, maxelem 2076 reached [ 89.225999][ T4519] loop4: detected capacity change from 0 to 256 [ 89.567476][ T4528] device-mapper: ioctl: Geometry exceeds range limits. [ 89.591416][ T4528] loop3: detected capacity change from 0 to 1024 [ 90.320266][ T4528] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.346203][ T4528] netlink: 'syz.3.50': attribute type 7 has an invalid length. [ 90.441825][ T4540] syz.1.51 uses obsolete (PF_INET,SOCK_PACKET) [ 90.571156][ T4547] loop4: detected capacity change from 0 to 256 [ 91.359136][ T4558] rdma_rxe: rxe_register_device failed with error -23 [ 91.366178][ T4558] rdma_rxe: failed to add ip6tnl0 [ 91.694488][ T4559] loop3: detected capacity change from 0 to 1024 [ 91.809248][ T4559] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.952141][ T4573] device syzkaller0 entered promiscuous mode [ 91.962865][ T4573] 0: reclassify loop, rule prio 0, protocol 800 [ 92.623354][ T4600] smc: net device macvlan0 applied user defined pnetid SYZ1 [ 92.757543][ T4604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.76'. [ 93.077067][ T4621] program syz.4.82 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.221036][ T4632] device-mapper: table: 248:1: zero-length target [ 93.242009][ T4632] device-mapper: ioctl: error adding target to table [ 93.551526][ T4647] device-mapper: table: 248:2: crypt: Error decoding and setting key [ 93.567636][ T4657] batman_adv: Cannot find parent device [ 93.589542][ T4647] device-mapper: ioctl: error adding target to table [ 93.604145][ T4657] batman_adv: batadv0: Adding interface: gretap1 [ 93.623353][ T4657] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.648692][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.707074][ T26] audit: type=1800 audit(1793528344.020:2): pid=4669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.99" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 93.726961][ T4657] batman_adv: batadv0: Interface activated: gretap1 [ 93.770957][ T4675] netlink: 'syz.2.100': attribute type 1 has an invalid length. [ 93.797260][ T4675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.100'. [ 93.822342][ T4675] device vlan0 entered promiscuous mode [ 93.977002][ T4681] jffs2: notice: (4681) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 94.133191][ T4696] FAULT_INJECTION: forcing a failure. [ 94.133191][ T4696] name failslab, interval 1, probability 0, space 0, times 1 [ 94.171909][ T4696] CPU: 0 PID: 4696 Comm: syz.0.104 Not tainted syzkaller #0 [ 94.179272][ T4696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 94.189419][ T4696] Call Trace: [ 94.192740][ T4696] [ 94.193301][ T4699] device syzkaller0 entered promiscuous mode [ 94.195698][ T4696] dump_stack_lvl+0x188/0x250 [ 94.206658][ T4696] ? show_regs_print_info+0x20/0x20 [ 94.212142][ T4696] ? load_image+0x410/0x410 [ 94.216734][ T4696] ? __lock_acquire+0x7d40/0x7d40 [ 94.221820][ T4696] should_fail+0x383/0x4b0 [ 94.226303][ T4696] should_failslab+0x5/0x20 [ 94.230983][ T4696] slab_pre_alloc_hook+0x51/0xc0 [ 94.235972][ T4696] __kmalloc+0x6b/0x340 [ 94.240171][ T4696] ? nla_strdup+0x94/0x130 [ 94.244634][ T4696] nla_strdup+0x94/0x130 [ 94.248931][ T4696] nf_tables_newtable+0x42f/0x1680 [ 94.254082][ T4696] ? mutex_unlock+0x10/0x10 [ 94.258641][ T4696] nfnetlink_rcv+0x1117/0x2450 [ 94.263486][ T4696] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 94.269120][ T4696] ? rcu_lock_release+0x5/0x20 [ 94.273953][ T4696] ? __lock_acquire+0x7d40/0x7d40 [ 94.278292][ T4699] tipc: Started in network mode [ 94.279033][ T4696] netlink_unicast+0x804/0x9e0 [ 94.288906][ T4696] netlink_sendmsg+0x8ba/0xbe0 [ 94.293724][ T4696] ? netlink_getsockopt+0x570/0x570 [ 94.298969][ T4696] ? aa_sock_msg_perm+0x94/0x150 [ 94.300863][ T4699] tipc: Node identity ea7b0ec0460a, cluster identity 4711 [ 94.303949][ T4696] ? apparmor_socket_sendmsg+0x88/0x230 [ 94.303978][ T4696] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 94.304004][ T4696] ? security_socket_sendmsg+0x7c/0xa0 [ 94.304030][ T4696] ? netlink_getsockopt+0x570/0x570 [ 94.333026][ T4696] ____sys_sendmsg+0x5be/0x8f0 [ 94.338036][ T4696] ? __sys_sendmsg_sock+0x30/0x30 [ 94.343138][ T4696] ? import_iovec+0x6f/0xa0 [ 94.345345][ T4699] tipc: Enabled bearer , priority 0 [ 94.347707][ T4696] ___sys_sendmsg+0x236/0x2e0 [ 94.347751][ T4696] ? __sys_sendmsg+0x290/0x290 [ 94.363993][ T4696] __se_sys_sendmsg+0x1b7/0x2a0 [ 94.368933][ T4696] ? __x64_sys_sendmsg+0x80/0x80 [ 94.373927][ T4696] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 94.379978][ T4696] ? lockdep_hardirqs_on+0x94/0x140 [ 94.385235][ T4696] do_syscall_64+0x4c/0xa0 [ 94.389695][ T4696] ? clear_bhb_loop+0x30/0x80 [ 94.394410][ T4696] ? clear_bhb_loop+0x30/0x80 [ 94.399153][ T4696] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.405099][ T4696] RIP: 0033:0x7fb9a2dca559 [ 94.409566][ T4696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.429226][ T4696] RSP: 002b:00007fb9a1021028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.437711][ T4696] RAX: ffffffffffffffda RBX: 00007fb9a3050fa0 RCX: 00007fb9a2dca559 [ 94.445740][ T4696] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 94.453759][ T4696] RBP: 00007fb9a2e61b50 R08: 0000000000000000 R09: 0000000000000000 [ 94.461768][ T4696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.469780][ T4696] R13: 00007fb9a3051038 R14: 00007fb9a3050fa0 R15: 00007ffedfce86b8 [ 94.477811][ T4696] [ 94.483437][ T4694] tipc: Resetting bearer [ 94.534936][ T4694] tipc: Disabling bearer [ 94.551065][ T4704] 9pnet_virtio: no channels available for device syz [ 94.773234][ T4715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.110'. [ 94.955574][ T4722] 9pnet_virtio: no channels available for device syz [ 95.087646][ T4334] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.238463][ T4334] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.261909][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.331905][ T4318] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.374269][ T4334] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.471016][ T4334] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.495194][ T4747] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.658046][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 95.714387][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 95.732034][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 95.743674][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.761046][ T4747] ip6tnl0 speed is unknown, defaulting to 1000 [ 95.768080][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.778419][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 95.798757][ T4318] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.821828][ T4318] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.842167][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.867119][ T4318] usb 3-1: config 0 descriptor?? [ 96.004481][ T7] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 96.021919][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.040241][ T7] usb 5-1: Product: syz [ 96.044829][ T7] usb 5-1: Manufacturer: syz [ 96.050734][ T7] usb 5-1: SerialNumber: syz [ 96.066411][ T7] usb 5-1: config 0 descriptor?? [ 96.250993][ T4747] chnl_net:caif_netlink_parms(): no params data found [ 96.364064][ T4318] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 96.377933][ T7] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 96.409426][ T4318] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 96.432467][ T4318] plantronics 0003:047F:FFFF.0001: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 96.515536][ T4747] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.540194][ T4781] netlink: 36 bytes leftover after parsing attributes in process `syz.0.123'. [ 96.562180][ T4509] usb 3-1: USB disconnect, device number 2 [ 96.586754][ T4747] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.620754][ T4747] device bridge_slave_0 entered promiscuous mode [ 96.682542][ T4747] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.709052][ T4747] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.727514][ T4779] fido_id[4779]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 96.743800][ T4728] usb 5-1: Couldn't submit interrupt_out_urb -90 [ 96.754085][ T4747] device bridge_slave_1 entered promiscuous mode [ 96.768097][ T4318] usb 5-1: USB disconnect, device number 2 [ 96.863542][ T4747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.931611][ T4747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.009642][ T4747] team0: Port device team_slave_0 added [ 97.019705][ T4747] team0: Port device team_slave_1 added [ 97.060329][ T4747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.078079][ T4747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.129182][ T4747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.240871][ T4747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.281883][ T4747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.421812][ T4747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.461853][ T4268] Bluetooth: hci3: command 0x0409 tx timeout [ 97.514254][ T4852] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 97.818366][ T4747] device hsr_slave_0 entered promiscuous mode [ 97.832153][ T4747] device hsr_slave_1 entered promiscuous mode [ 97.845959][ T4747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.868005][ T4747] Cannot create hsr debugfs directory [ 97.950144][ T4866] device-mapper: table: 248:3: flakey: Unrecognised flakey feature requested [ 97.971279][ T4866] device-mapper: ioctl: error adding target to table [ 98.501366][ T4747] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.531308][ T4747] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.564102][ T4904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.146'. [ 98.569906][ T4907] netlink: 'syz.2.145': attribute type 2 has an invalid length. [ 98.600638][ T4907] netlink: 224 bytes leftover after parsing attributes in process `syz.2.145'. [ 98.656194][ T4904] device bond1 entered promiscuous mode [ 98.672566][ T4915] loop5: detected capacity change from 0 to 4095 [ 98.688132][ T4904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.707459][ C1] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 98.719697][ T4747] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.730695][ T4747] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.737581][ C1] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.749035][ C1] Buffer I/O error on dev loop5, logical block 480, async page read [ 98.757170][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.775307][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.786295][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 98.800331][ T4917] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.981150][ T4910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.999294][ T4910] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 99.040543][ T4910] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 99.224357][ T4334] device hsr_slave_0 left promiscuous mode [ 99.330711][ T4334] device hsr_slave_1 left promiscuous mode [ 99.461194][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.563964][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.696320][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.720925][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.747497][ T4334] device bridge_slave_1 left promiscuous mode [ 99.766582][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.821149][ T4334] device bridge_slave_0 left promiscuous mode [ 99.834267][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.861288][ T4334] device veth1_macvtap left promiscuous mode [ 99.875542][ T4334] device veth0_macvtap left promiscuous mode [ 99.889302][ T4509] Bluetooth: hci3: command 0x041b tx timeout [ 99.894205][ T4334] device veth1_vlan left promiscuous mode [ 99.909750][ T4334] device veth0_vlan left promiscuous mode [ 100.226926][ T4334] team0 (unregistering): Port device team_slave_1 removed [ 100.250380][ T4334] team0 (unregistering): Port device team_slave_0 removed [ 100.266040][ T4334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.285473][ T4334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.367008][ T4334] bond0 (unregistering): Released all slaves [ 100.436813][ T4940] FAULT_INJECTION: forcing a failure. [ 100.436813][ T4940] name failslab, interval 1, probability 0, space 0, times 0 [ 100.451870][ T4940] CPU: 1 PID: 4940 Comm: syz.2.152 Not tainted syzkaller #0 [ 100.459360][ T4940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 100.469458][ T4940] Call Trace: [ 100.472779][ T4940] [ 100.475742][ T4940] dump_stack_lvl+0x188/0x250 [ 100.480470][ T4940] ? show_regs_print_info+0x20/0x20 [ 100.485716][ T4940] ? load_image+0x410/0x410 [ 100.490274][ T4940] ? __might_sleep+0xf0/0xf0 [ 100.494905][ T4940] ? __lock_acquire+0x7d40/0x7d40 [ 100.499981][ T4940] ? memcpy+0x3c/0x60 [ 100.504028][ T4940] should_fail+0x383/0x4b0 [ 100.508481][ T4940] should_failslab+0x5/0x20 [ 100.513010][ T4940] slab_pre_alloc_hook+0x51/0xc0 [ 100.518343][ T4940] kmem_cache_alloc_trace+0x47/0x290 [ 100.523671][ T4940] ? device_add+0xb2/0x1050 [ 100.528225][ T4940] device_add+0xb2/0x1050 [ 100.532595][ T4940] ? device_initialize+0x2a5/0x4d0 [ 100.537751][ T4940] netdev_register_kobject+0x184/0x320 [ 100.543268][ T4940] register_netdevice+0x10e8/0x1720 [ 100.548522][ T4940] ? netif_stacked_transfer_operstate+0x200/0x200 [ 100.554981][ T4940] ? rcu_is_watching+0x11/0xa0 [ 100.559792][ T4940] ? kfree+0x4a/0x2a0 [ 100.563817][ T4940] slip_open+0xbae/0xe40 [ 100.568113][ T4940] ? pptp_ppp_ioctl+0x170/0x170 [ 100.572999][ T4940] ? up_write+0x1b6/0x410 [ 100.577373][ T4940] tty_set_ldisc+0x358/0x660 [ 100.582005][ T4940] tty_ioctl+0xa8b/0xc30 [ 100.586310][ T4940] ? tty_get_icount+0xa0/0xa0 [ 100.591048][ T4940] __se_sys_ioctl+0xfa/0x170 [ 100.595695][ T4940] do_syscall_64+0x4c/0xa0 [ 100.600147][ T4940] ? clear_bhb_loop+0x30/0x80 [ 100.604865][ T4940] ? clear_bhb_loop+0x30/0x80 [ 100.609591][ T4940] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.615524][ T4940] RIP: 0033:0x7f1aa20a9559 [ 100.619973][ T4940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.639621][ T4940] RSP: 002b:00007f1aa0300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.648081][ T4940] RAX: ffffffffffffffda RBX: 00007f1aa232ffa0 RCX: 00007f1aa20a9559 [ 100.656090][ T4940] RDX: 0000200000000480 RSI: 0000000000005423 RDI: 0000000000000003 [ 100.664099][ T4940] RBP: 00007f1aa2140b50 R08: 0000000000000000 R09: 0000000000000000 [ 100.672104][ T4940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.680119][ T4940] R13: 00007f1aa2330038 R14: 00007f1aa232ffa0 R15: 00007ffc5bf76cd8 [ 100.688140][ T4940] [ 100.871510][ T4747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.919427][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.943364][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.970050][ T4747] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.002205][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.018664][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.034452][ T26] audit: type=1800 audit(1793528351.350:3): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.158" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 101.058023][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.065197][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.102267][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.141529][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.175324][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.182511][ T4337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.240860][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.254517][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.274213][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.296092][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.314020][ T4972] FAULT_INJECTION: forcing a failure. [ 101.314020][ T4972] name failslab, interval 1, probability 0, space 0, times 0 [ 101.330483][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.353027][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.361169][ T4972] CPU: 1 PID: 4972 Comm: syz.2.164 Not tainted syzkaller #0 [ 101.369122][ T4972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 101.379216][ T4972] Call Trace: [ 101.382535][ T4972] [ 101.385512][ T4972] dump_stack_lvl+0x188/0x250 [ 101.390283][ T4972] ? show_regs_print_info+0x20/0x20 [ 101.395533][ T4972] ? load_image+0x410/0x410 [ 101.400102][ T4972] ? __lock_acquire+0x7d40/0x7d40 [ 101.405183][ T4972] should_fail+0x383/0x4b0 [ 101.409651][ T4972] should_failslab+0x5/0x20 [ 101.414195][ T4972] slab_pre_alloc_hook+0x51/0xc0 [ 101.419426][ T4972] ? __anon_vma_prepare+0x66/0x430 [ 101.424606][ T4972] kmem_cache_alloc+0x3d/0x280 [ 101.429421][ T4972] __anon_vma_prepare+0x66/0x430 [ 101.434410][ T4972] wp_page_copy+0x13db/0x2090 [ 101.439133][ T4972] ? __lock_acquire+0x7d40/0x7d40 [ 101.444206][ T4972] ? insert_page_into_pte_locked+0x470/0x470 [ 101.450326][ T4972] ? _raw_spin_unlock+0x24/0x40 [ 101.455220][ T4972] ? do_wp_page+0x965/0xb30 [ 101.459776][ T4972] handle_mm_fault+0x1fbd/0x4440 [ 101.464781][ T4972] ? get_page+0xe0/0xe0 [ 101.469004][ T4972] ? vmacache_find+0x238/0x590 [ 101.473900][ T4972] ? find_vma+0xd2/0x230 [ 101.478189][ T4972] do_user_addr_fault+0x494/0xc90 [ 101.483269][ T4972] exc_page_fault+0x60/0x100 [ 101.487898][ T4972] ? __might_fault+0xb7/0x110 [ 101.492614][ T4972] asm_exc_page_fault+0x22/0x30 [ 101.497511][ T4972] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 101.503707][ T4972] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 101.523536][ T4972] RSP: 0018:ffffc900030ffdd8 EFLAGS: 00050297 [ 101.529664][ T4972] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000000000000 [ 101.537759][ T4972] RDX: 0000000000000000 RSI: ffffffff8a2b3e00 RDI: ffffffff8a7a5100 [ 101.546028][ T4972] RBP: ffffc900030ffe90 R08: ffffffff8e6d322f R09: 1ffffffff1cda645 [ 101.554045][ T4972] R10: dffffc0000000000 R11: fffffbfff1cda646 R12: ffff88807abcbf40 [ 101.562053][ T4972] R13: 00000000ffffffff R14: 0000000000000000 R15: 1ffff9200061ffc0 [ 101.570080][ T4972] rawv6_getsockopt+0x3b5/0x560 [ 101.575089][ T4972] ? rawv6_setsockopt+0x660/0x660 [ 101.580166][ T4972] ? aa_sock_opt_perm+0x74/0x100 [ 101.585141][ T4972] ? sock_common_getsockopt+0x29/0xa0 [ 101.590559][ T4972] ? sock_recv_errqueue+0x580/0x580 [ 101.595812][ T4972] __sys_getsockopt+0x1b0/0x230 [ 101.600706][ T4972] __x64_sys_getsockopt+0xb1/0xc0 [ 101.605774][ T4972] do_syscall_64+0x4c/0xa0 [ 101.610235][ T4972] ? clear_bhb_loop+0x30/0x80 [ 101.614954][ T4972] ? clear_bhb_loop+0x30/0x80 [ 101.619674][ T4972] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.625604][ T4972] RIP: 0033:0x7f1aa20a9559 [ 101.630058][ T4972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.649712][ T4972] RSP: 002b:00007f1aa0300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 101.658175][ T4972] RAX: ffffffffffffffda RBX: 00007f1aa232ffa0 RCX: 00007f1aa20a9559 [ 101.666188][ T4972] RDX: 0000000000000024 RSI: 0000000000000029 RDI: 0000000000000003 [ 101.674197][ T4972] RBP: 00007f1aa2140b50 R08: 0000000000000000 R09: 0000000000000000 [ 101.682205][ T4972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.690227][ T4972] R13: 00007f1aa2330038 R14: 00007f1aa232ffa0 R15: 00007ffc5bf76cd8 [ 101.698254][ T4972] [ 101.719874][ T4747] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.781930][ T4747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.824163][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.853566][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.880525][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.906545][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.927947][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.942210][ T1112] Bluetooth: hci3: command 0x040f tx timeout [ 101.949540][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.982603][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.232762][ T5006] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 102.272170][ T5006] device-mapper: table: 248:4: raid: Bogus data_offset value [ 102.325432][ T5006] device-mapper: ioctl: error adding target to table [ 102.419877][ T5015] comedi comedi3: No hardware detected at I/O base 0x100 [ 102.629856][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.705838][ T5023] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.722102][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.832099][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.881349][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.904826][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.955047][ T4747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.177999][ T7] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 103.192063][ T23] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 103.222876][ T23] usb 4-1: config 1 has no interface number 0 [ 103.294667][ T5054] program syz.0.186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.337103][ T7] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 103.392089][ T23] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 103.431880][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.461028][ T23] usb 4-1: Product: syz [ 103.484141][ T23] usb 4-1: Manufacturer: syz [ 103.488816][ T23] usb 4-1: SerialNumber: syz [ 103.562079][ T7] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 103.571215][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.621012][ T7] usb 5-1: Product: syz [ 103.632817][ T7] usb 5-1: Manufacturer: syz [ 103.647752][ T7] usb 5-1: SerialNumber: syz [ 103.703784][ T7] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 103.726063][ T7] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 103.741720][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.761085][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.767389][ T7] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 103.855822][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.865514][ T23] usb 4-1: 3:1 : does not exist [ 103.870707][ T23] usb 4-1: 3:2 : does not exist [ 103.893618][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.912530][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.955384][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.966120][ T23] usb 4-1: USB disconnect, device number 2 [ 103.983790][ T4747] device veth0_vlan entered promiscuous mode [ 104.039692][ T4747] device veth1_vlan entered promiscuous mode [ 104.074749][ T4268] Bluetooth: hci3: command 0x0419 tx timeout [ 104.192382][ T4193] Bluetooth: Unexpected continuation frame (len 4) [ 104.199652][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.219517][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.246015][ T4747] device veth0_macvtap entered promiscuous mode [ 104.287515][ T4747] device veth1_macvtap entered promiscuous mode [ 104.296155][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.361217][ T5089] input: syz0 as /devices/virtual/input/input6 [ 104.370978][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.420956][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.460084][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.490517][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.521777][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.548589][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.578944][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.611133][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.639838][ T4747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.657470][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.688055][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.718009][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.761596][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.802562][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.824386][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.840262][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.857676][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.868010][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.890617][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.911001][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.931958][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.956381][ T4747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.988942][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.004881][ T5021] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 105.025268][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.055022][ T4747] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.072551][ T5021] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 105.079099][ T4747] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.106540][ T5021] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 105.125056][ T4747] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.146073][ T4747] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.172536][ T5021] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 105.231523][ T7] usb 5-1: USB disconnect, device number 3 [ 105.238056][ T7] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 105.270234][ T7] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 105.285870][ T7] ti_usb_3410_5052 5-1:2.0: device disconnected [ 105.480574][ T4838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.496546][ T4838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.537590][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.582162][ T4841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.590131][ T4841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.612050][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.925323][ T5124] block nbd3: shutting down sockets [ 106.082036][ T4268] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 106.091123][ T4374] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.331954][ T4268] usb 6-1: Using ep0 maxpacket: 8 [ 106.444032][ T5161] input: syz0 as /devices/virtual/input/input7 [ 106.452053][ T4268] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 106.460194][ T4268] usb 6-1: config 0 has no interface number 0 [ 106.498386][ T4268] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 106.513518][ T4374] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 106.532361][ T4268] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 106.537115][ T4374] usb 1-1: config 0 has no interface number 0 [ 106.556698][ T4268] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 106.561102][ T4374] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.587173][ T4268] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 106.608055][ T4268] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.634198][ T4268] usb 6-1: config 0 descriptor?? [ 106.689840][ T4268] ldusb 6-1:0.55: Interrupt in endpoint not found [ 106.822088][ T4374] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 106.835959][ T4374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.860588][ T5181] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.868912][ T4374] usb 1-1: Product: syz [ 106.894872][ T4374] usb 1-1: Manufacturer: syz [ 106.901646][ T5177] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.914275][ T4374] usb 1-1: SerialNumber: syz [ 106.924180][ T21] usb 6-1: USB disconnect, device number 2 [ 106.946560][ T4374] usb 1-1: config 0 descriptor?? [ 107.004616][ T5184] device syzkaller0 entered promiscuous mode [ 107.017438][ T4374] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 107.029173][ T5184] tipc: Enabled bearer , priority 0 [ 107.071080][ T5184] tipc: Resetting bearer [ 107.101492][ T5183] tipc: Resetting bearer [ 107.126134][ T5183] tipc: Disabling bearer [ 107.230592][ T1112] usb 1-1: USB disconnect, device number 2 [ 107.237632][ T5122] yurex 1-1:0.50: yurex_write - failed to send bulk msg, error -19 [ 107.257087][ T1112] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 107.359987][ T5204] xt_nfacct: accounting object `' does not exist [ 107.378069][ T5203] ubi0: attaching mtd0 [ 107.395614][ T5203] ubi0: scanning is finished [ 107.437548][ T5203] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 107.656264][ T5203] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 107.769712][ T5230] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 107.889979][ T5236] FAULT_INJECTION: forcing a failure. [ 107.889979][ T5236] name failslab, interval 1, probability 0, space 0, times 0 [ 107.932013][ T5236] CPU: 1 PID: 5236 Comm: syz.3.239 Not tainted syzkaller #0 [ 107.939381][ T5236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 107.949471][ T5236] Call Trace: [ 107.952787][ T5236] [ 107.955757][ T5236] dump_stack_lvl+0x188/0x250 [ 107.960498][ T5236] ? show_regs_print_info+0x20/0x20 [ 107.965754][ T5236] ? load_image+0x410/0x410 [ 107.970340][ T5236] ? __might_sleep+0xf0/0xf0 [ 107.974974][ T5236] ? __lock_acquire+0x7d40/0x7d40 [ 107.980093][ T5236] should_fail+0x383/0x4b0 [ 107.984563][ T5236] should_failslab+0x5/0x20 [ 107.989106][ T5236] slab_pre_alloc_hook+0x51/0xc0 [ 107.994121][ T5236] __kmalloc+0x6b/0x340 [ 107.998312][ T5236] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 108.004070][ T5236] tomoyo_realpath_from_path+0xed/0x5e0 [ 108.005797][ T4374] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.009663][ T5236] tomoyo_check_open_permission+0x1eb/0x410 [ 108.023081][ T5236] ? tomoyo_check_path_number_acl+0x280/0x280 [ 108.029223][ T5236] ? __lock_acquire+0x7d40/0x7d40 [ 108.034286][ T5236] ? __rwlock_init+0x140/0x140 [ 108.039087][ T5236] ? preempt_count_add+0x8d/0x190 [ 108.044153][ T5236] ? hook_file_open+0xf1/0x230 [ 108.048955][ T5236] ? tomoyo_file_open+0xe9/0x170 [ 108.053973][ T5236] security_file_open+0x5e/0xa0 [ 108.058869][ T5236] do_dentry_open+0x321/0xf90 [ 108.063587][ T5236] ? vfs_open+0x2b/0x80 [ 108.067807][ T5236] path_openat+0x2718/0x2fb0 [ 108.072476][ T5236] ? do_filp_open+0x400/0x400 [ 108.077218][ T5236] do_filp_open+0x1df/0x400 [ 108.081771][ T5236] ? vfs_tmpfile+0x300/0x300 [ 108.086412][ T5236] ? noop_direct_IO+0x10/0x10 [ 108.091143][ T5236] ? _raw_spin_unlock+0x24/0x40 [ 108.096037][ T5236] ? alloc_fd+0x59e/0x650 [ 108.100417][ T5236] do_sys_openat2+0x14b/0x500 [ 108.105227][ T5236] ? __lock_acquire+0x7d40/0x7d40 [ 108.110293][ T5236] ? do_sys_open+0xe0/0xe0 [ 108.114745][ T5236] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 108.120773][ T5236] ? lock_chain_count+0x20/0x20 [ 108.125679][ T5236] __x64_sys_openat+0x135/0x160 [ 108.130574][ T5236] do_syscall_64+0x4c/0xa0 [ 108.135048][ T5236] ? clear_bhb_loop+0x30/0x80 [ 108.139769][ T5236] ? clear_bhb_loop+0x30/0x80 [ 108.144493][ T5236] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.150426][ T5236] RIP: 0033:0x7f7ededd0d8e [ 108.154882][ T5236] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 108.174562][ T5236] RSP: 002b:00007f7edd066ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 108.183035][ T5236] RAX: ffffffffffffffda RBX: 00007f7edd0676c0 RCX: 00007f7ededd0d8e [ 108.191131][ T5236] RDX: 0000000000000002 RSI: 00007f7edd066f90 RDI: ffffffffffffff9c [ 108.199172][ T5236] RBP: 00007f7edeea7b50 R08: 0000000000000000 R09: 0000000000000000 [ 108.207195][ T5236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.215206][ T5236] R13: 00007f7edf097038 R14: 00007f7edf096fa0 R15: 00007ffcda0c1cc8 [ 108.223242][ T5236] [ 108.244682][ T5236] ERROR: Out of memory at tomoyo_realpath_from_path. [ 108.305891][ T5243] tmpfs: Unknown parameter 'casefold' [ 108.385611][ T5248] ip_tables: iptables: counters copy to user failed while replacing table [ 108.400998][ T5250] SET target dimension over the limit! [ 108.471984][ T4374] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 108.480051][ T4374] usb 5-1: config 1 has no interface number 0 [ 108.584227][ T5260] netlink: 36 bytes leftover after parsing attributes in process `syz.2.248'. [ 108.692734][ T4374] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 108.706236][ T5269] FAULT_INJECTION: forcing a failure. [ 108.706236][ T5269] name failslab, interval 1, probability 0, space 0, times 0 [ 108.711999][ T4374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.737779][ T4374] usb 5-1: Product: syz [ 108.747926][ T4374] usb 5-1: Manufacturer: syz [ 108.757911][ T5269] CPU: 0 PID: 5269 Comm: syz.0.253 Not tainted syzkaller #0 [ 108.765263][ T5269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.775350][ T5269] Call Trace: [ 108.778659][ T5269] [ 108.781632][ T5269] dump_stack_lvl+0x188/0x250 [ 108.786600][ T5269] ? show_regs_print_info+0x20/0x20 [ 108.791830][ T5269] ? load_image+0x410/0x410 [ 108.796363][ T5269] ? __lock_acquire+0x7d40/0x7d40 [ 108.801419][ T5269] should_fail+0x383/0x4b0 [ 108.805864][ T5269] should_failslab+0x5/0x20 [ 108.810390][ T5269] slab_pre_alloc_hook+0x51/0xc0 [ 108.815351][ T5269] kmem_cache_alloc_trace+0x47/0x290 [ 108.820671][ T5269] ? __list_lru_init+0x535/0xac0 [ 108.825635][ T5269] __list_lru_init+0x535/0xac0 [ 108.830434][ T5269] alloc_super+0x7b6/0x970 [ 108.834871][ T5269] ? kill_mtd_super+0x60/0x60 [ 108.839595][ T5269] sget_fc+0x2d4/0x6f0 [ 108.843686][ T5269] ? mtd_test_super+0x1d0/0x1d0 [ 108.848565][ T5269] ? jffs2_reconfigure+0x310/0x310 [ 108.853698][ T5269] mtd_get_sb+0x5a/0x2b0 [ 108.857982][ T5269] ? mtd_get_sb_by_nr+0x7c/0xa0 [ 108.862855][ T5269] get_tree_mtd+0x5e2/0x760 [ 108.867415][ T5269] ? jffs2_reconfigure+0x310/0x310 [ 108.872561][ T5269] ? mtd_proc_show+0x270/0x270 [ 108.877358][ T5269] ? apparmor_capable+0x12c/0x190 [ 108.882520][ T5269] ? bpf_lsm_capable+0x5/0x10 [ 108.887211][ T5269] ? security_capable+0x85/0xb0 [ 108.892108][ T5269] vfs_get_tree+0x88/0x270 [ 108.896551][ T5269] do_new_mount+0x247/0xa50 [ 108.901089][ T5269] __se_sys_mount+0x2e3/0x3d0 [ 108.905793][ T5269] ? __x64_sys_mount+0xc0/0xc0 [ 108.910586][ T5269] ? lockdep_hardirqs_on+0x94/0x140 [ 108.915805][ T5269] ? __x64_sys_mount+0x1c/0xc0 [ 108.920597][ T5269] do_syscall_64+0x4c/0xa0 [ 108.925032][ T5269] ? clear_bhb_loop+0x30/0x80 [ 108.929739][ T5269] ? clear_bhb_loop+0x30/0x80 [ 108.934434][ T5269] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.940352][ T5269] RIP: 0033:0x7fb9a2dca559 [ 108.944897][ T5269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.964526][ T5269] RSP: 002b:00007fb9a1021028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 108.972966][ T5269] RAX: ffffffffffffffda RBX: 00007fb9a3050fa0 RCX: 00007fb9a2dca559 [ 108.980992][ T5269] RDX: 0000200000000980 RSI: 0000200000000940 RDI: 0000200000000900 [ 108.989071][ T5269] RBP: 00007fb9a2e61b50 R08: 0000000000000000 R09: 0000000000000000 [ 108.997059][ T5269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.005050][ T5269] R13: 00007fb9a3051038 R14: 00007fb9a3050fa0 R15: 00007ffedfce86b8 [ 109.013061][ T5269] [ 109.016170][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.048740][ T4374] usb 5-1: SerialNumber: syz [ 109.062940][ T4193] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 109.392277][ T4374] usb 5-1: 3:0 : does not exist [ 109.401875][ T4374] usb 5-1: 3:0 : does not exist [ 109.468492][ T4374] usb 5-1: USB disconnect, device number 4 [ 109.509567][ T5307] Bluetooth: hci0: unsupported parameter 5135 [ 109.529561][ T5307] Bluetooth: hci0: unsupported parameter 8192 [ 109.537129][ T5307] Bluetooth: hci0: unsupported parameter 5135 [ 109.544215][ T5309] 9pnet_virtio: no channels available for device syz [ 109.584265][ T5307] Bluetooth: hci0: unsupported parameter 8192 [ 109.740341][ T5324] tipc: Started in network mode [ 109.752293][ T5324] tipc: Node identity a2c99336c49a, cluster identity 4711 [ 109.760194][ T5324] tipc: Enabled bearer , priority 0 [ 109.771649][ T5324] syzkaller0: MTU too low for tipc bearer [ 109.780769][ T5324] tipc: Disabling bearer [ 109.794837][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.831828][ T1112] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 110.027161][ T5334] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 110.192139][ T1112] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.230435][ T1112] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.252235][ T1112] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 110.301824][ T1112] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.368170][ T1112] usb 6-1: config 0 descriptor?? [ 110.373804][ T5356] device-mapper: ioctl: The device has no table. [ 110.434439][ T5349] device-mapper: thin: Data device (ram5) discard unsupported: Disabling discard passdown. [ 110.764339][ T5376] kvm: pic: non byte read [ 110.769592][ T5376] kvm: pic: non byte read [ 110.804931][ T5376] kvm: pic: non byte read [ 110.809865][ T5376] kvm: pic: single mode not supported [ 110.809993][ T5376] kvm: pic: non byte read [ 110.852181][ T5376] kvm: pic: single mode not supported [ 110.852441][ T5376] kvm: pic: level sensitive irq not supported [ 110.858209][ T5376] kvm: pic: non byte read [ 110.890671][ T1112] savu 0003:1E7D:2D5A.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 110.908126][ T5376] kvm: pic: level sensitive irq not supported [ 110.908208][ T5376] kvm: pic: non byte read [ 110.932673][ T5376] kvm: pic: non byte read [ 110.937443][ T5376] kvm: pic: non byte read [ 110.972278][ T5376] kvm: pic: non byte read [ 111.143006][ T1112] usb 6-1: USB disconnect, device number 3 [ 111.172837][ T5384] fido_id[5384]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 111.177061][ T5387] ip_tables: iptables: counters copy to user failed while replacing table [ 111.247686][ T5388] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 111.434877][ T4194] syz-executor (4194) used greatest stack depth: 21072 bytes left [ 111.474830][ T4838] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.563920][ T4838] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.669468][ T4838] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.824635][ T4838] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.959931][ T5403] Cannot find add_set index 0 as target [ 112.148314][ T4838] tipc: Left network mode [ 112.407285][ T4838] rdma_rxe: ignoring netdev event = 10 for ip6tnl0 [ 112.421057][ T4838] infiniband syz0: set down [ 112.468234][ T4836] smc: removing ib device syz0 [ 112.496080][ T1337] ip6tnl0 speed is unknown, defaulting to 1000 [ 112.532423][ T5409] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.611816][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.706282][ T5431] dlm: dev_write: no op 0 74000000000000 [ 112.876677][ T5435] autofs4:pid:5435:autofs_fill_super: called with bogus options [ 113.032209][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 113.060603][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 113.091180][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 113.151929][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 113.362045][ T13] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 113.441851][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.470026][ T5409] chnl_net:caif_netlink_parms(): no params data found [ 113.525244][ T13] usb 1-1: Product: syz [ 113.529568][ T13] usb 1-1: Manufacturer: syz [ 113.566471][ T13] usb 1-1: SerialNumber: syz [ 113.600667][ T13] usb 1-1: config 0 descriptor?? [ 113.654924][ T5469] xt_hashlimit: size too large, truncated to 1048576 [ 113.718814][ T5409] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.791874][ T5409] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.810376][ T5409] device bridge_slave_0 entered promiscuous mode [ 113.832321][ T5409] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.839428][ T5409] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.875137][ T5409] device bridge_slave_1 entered promiscuous mode [ 113.882335][ T13] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 114.023994][ T5409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.083639][ T13] usb 1-1: USB disconnect, device number 3 [ 114.139263][ T5409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.277386][ T5409] team0: Port device team_slave_0 added [ 114.306668][ T5409] team0: Port device team_slave_1 added [ 114.363427][ T5409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.378328][ T5409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.404326][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.451402][ T5409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.743917][ T1112] Bluetooth: hci2: command 0x0409 tx timeout [ 115.876596][ T5409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.894000][ T5409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.919976][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.954451][ T5409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.005615][ T5494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 116.022298][ T5494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.151493][ T5494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.211834][ T1112] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 116.281499][ T5409] device hsr_slave_0 entered promiscuous mode [ 116.298091][ T5409] device hsr_slave_1 entered promiscuous mode [ 116.310384][ T5409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.326269][ T5409] Cannot create hsr debugfs directory [ 116.497578][ T5527] process 'syz.4.341' launched './file0' with NULL argv: empty string added [ 116.543584][ T4838] batman_adv: batadv0: Interface deactivated: gretap1 [ 116.612537][ T4838] batman_adv: batadv0: Removing interface: gretap1 [ 116.622104][ T1112] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 116.643278][ T1112] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 116.683786][ T1112] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 116.719854][ T1112] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.803734][ T1112] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 116.822368][ T1112] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 116.880635][ T5538] FAULT_INJECTION: forcing a failure. [ 116.880635][ T5538] name fail_futex, interval 1, probability 0, space 0, times 1 [ 116.917402][ T5409] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 116.937889][ T5538] CPU: 0 PID: 5538 Comm: syz.0.344 Not tainted syzkaller #0 [ 116.945238][ T5538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 116.955344][ T5538] Call Trace: [ 116.958660][ T5538] [ 116.961628][ T5538] dump_stack_lvl+0x188/0x250 [ 116.966362][ T5538] ? unwind_get_return_address+0x49/0x80 [ 116.972040][ T5538] ? stack_trace_save+0xf0/0xf0 [ 116.976952][ T5538] ? show_regs_print_info+0x20/0x20 [ 116.982188][ T5538] ? load_image+0x410/0x410 [ 116.986730][ T5538] ? kmem_cache_free+0x8f/0x210 [ 116.991616][ T5538] ? stack_trace_save+0xa6/0xf0 [ 116.996503][ T5538] ? stack_trace_snprint+0xe0/0xe0 [ 117.001663][ T5538] should_fail+0x383/0x4b0 [ 117.006126][ T5538] get_futex_key+0x1a0/0x1200 [ 117.010849][ T5538] ? __lock_acquire+0x13b3/0x7d40 [ 117.015914][ T5538] ? futex_wait_restart+0x250/0x250 [ 117.021162][ T5538] futex_wake+0x101/0x540 [ 117.025534][ T5538] ? futex_wait+0x680/0x680 [ 117.030080][ T5538] ? verify_lock_unused+0x140/0x140 [ 117.035312][ T5538] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 117.041332][ T5538] ? verify_lock_unused+0x140/0x140 [ 117.046586][ T5538] do_futex+0xd83/0x12b0 [ 117.050898][ T5538] ? kasan_quarantine_put+0xd4/0x210 [ 117.056222][ T5538] ? lockdep_hardirqs_on+0x94/0x140 [ 117.061474][ T5538] ? futex_exit_release+0x1c0/0x1c0 [ 117.066721][ T5538] ? __context_tracking_exit+0x4c/0x80 [ 117.072254][ T5538] __se_sys_futex+0x389/0x420 [ 117.076978][ T5538] ? __x64_sys_futex+0xf0/0xf0 [ 117.081786][ T5538] ? __x64_sys_futex+0x1d/0xf0 [ 117.086593][ T5538] do_syscall_64+0x4c/0xa0 [ 117.091039][ T5538] ? clear_bhb_loop+0x30/0x80 [ 117.095755][ T5538] ? clear_bhb_loop+0x30/0x80 [ 117.100474][ T5538] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.106398][ T5538] RIP: 0033:0x7fb9a2dca559 [ 117.113540][ T5538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.133298][ T5538] RSP: 002b:00007fb9a10210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 117.141755][ T5538] RAX: ffffffffffffffda RBX: 00007fb9a3050fa8 RCX: 00007fb9a2dca559 [ 117.149765][ T5538] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb9a3050fac [ 117.157778][ T5538] RBP: 00007fb9a3050fa0 R08: 0030a94d78be7110 R09: 0000000000000000 [ 117.165786][ T5538] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 117.173808][ T5538] R13: 00007fb9a3051038 R14: 00007ffedfce85d0 R15: 00007ffedfce86b8 [ 117.181833][ T5538] [ 117.184948][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.209708][ T5409] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 117.264030][ T5409] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 117.282017][ T5502] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 117.302185][ T5502] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 117.352063][ T5502] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 117.352312][ T5409] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 117.369359][ T4280] usb 6-1: USB disconnect, device number 4 [ 117.379839][ T4280] SPCP8x5 ttyUSB0: failed to set control lines: -19 [ 117.397079][ T4280] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 117.412567][ T4280] spcp8x5 6-1:1.0: device disconnected [ 117.436436][ T5550] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 117.637918][ T5409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.678891][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.692334][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.711554][ T5409] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.723758][ T4838] device hsr_slave_0 left promiscuous mode [ 117.740582][ T4838] device hsr_slave_1 left promiscuous mode [ 117.747878][ T4838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.767826][ T4838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.778426][ T4838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.782668][ T1112] Bluetooth: hci2: command 0x041b tx timeout [ 117.789091][ T4838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.800172][ T4838] device bridge_slave_1 left promiscuous mode [ 117.808298][ T4838] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.817750][ T4838] device bridge_slave_0 left promiscuous mode [ 117.824430][ T4838] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.841347][ T4838] device veth1_macvtap left promiscuous mode [ 117.850267][ T4838] device veth0_macvtap left promiscuous mode [ 117.863080][ T4838] device veth1_vlan left promiscuous mode [ 117.869092][ T4838] device veth0_vlan left promiscuous mode [ 118.001024][ T5559] device-mapper: table: 248:6: raid: write_mostly option is only valid for RAID1 [ 118.041919][ T5559] device-mapper: ioctl: error adding target to table [ 118.599765][ T4838] team0 (unregistering): Port device team_slave_1 removed [ 118.687655][ T4838] team0 (unregistering): Port device team_slave_0 removed [ 118.743226][ T4838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.778552][ T4838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.833359][ T5585] program syz.0.361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.930976][ T5589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'. [ 118.959367][ T5589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'. [ 119.042425][ T4838] bond0 (unregistering): Released all slaves [ 119.129116][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.146792][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.168748][ T4841] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.175908][ T4841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.213574][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.226768][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.238962][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.258225][ T4841] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.265450][ T4841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.302912][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.338703][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.375648][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.400821][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.453612][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.477744][ T4318] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 119.499400][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.515528][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.536298][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.557201][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.578710][ T5409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.601395][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.614847][ T5606] netlink: 28 bytes leftover after parsing attributes in process `syz.2.370'. [ 119.631651][ T5606] netlink: 28 bytes leftover after parsing attributes in process `syz.2.370'. [ 119.659808][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.675844][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.748379][ T5623] netlink: 80 bytes leftover after parsing attributes in process `syz.5.373'. [ 119.776092][ T5615] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.864292][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 119.894231][ T4318] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 119.903207][ T4318] usb 5-1: config 0 has no interface number 0 [ 119.909641][ T4318] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 119.920910][ T4318] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 119.932321][ T4318] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 119.944436][ T4318] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 119.967851][ T4318] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 119.975985][ T5621] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 119.987923][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.001966][ T4836] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 120.016159][ T4318] usb 5-1: config 0 descriptor?? [ 120.034813][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 120.082995][ T5600] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 120.112946][ T5600] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 120.125682][ T4318] ldusb 5-1:0.55: Interrupt in endpoint not found [ 120.151969][ T26] audit: type=1807 audit(1793528370.460:4): UNKNOWN=m res=0 [ 120.159373][ T26] audit: type=1802 audit(1793528370.470:5): pid=5637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.376" res=0 errno=0 [ 120.167917][ T5636] ima: policy update failed [ 120.178996][ T4841] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 120.252087][ T26] audit: type=1802 audit(1793528370.560:6): pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.376" res=0 errno=0 [ 120.283405][ T5634] FAULT_INJECTION: forcing a failure. [ 120.283405][ T5634] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 120.328226][ T5634] CPU: 1 PID: 5634 Comm: syz.2.375 Not tainted syzkaller #0 [ 120.335586][ T5634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 120.345678][ T5634] Call Trace: [ 120.348995][ T5634] [ 120.351991][ T5634] dump_stack_lvl+0x188/0x250 [ 120.356726][ T5634] ? show_regs_print_info+0x20/0x20 [ 120.361973][ T5634] ? load_image+0x410/0x410 [ 120.366549][ T5634] ? __lock_acquire+0x7d40/0x7d40 [ 120.371716][ T5634] should_fail+0x383/0x4b0 [ 120.376204][ T5634] prepare_alloc_pages+0x1e3/0x5b0 [ 120.381382][ T5634] __alloc_pages+0x11b/0x480 [ 120.386026][ T5634] ? unwind_get_return_address+0x49/0x80 [ 120.391705][ T5634] ? zone_statistics+0x170/0x170 [ 120.396702][ T5634] ? alloc_pages+0x452/0x560 [ 120.401513][ T5634] stack_depot_save+0x356/0x460 [ 120.402494][ T5409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.406407][ T5634] ? kfree+0xef/0x2a0 [ 120.417200][ T5634] kasan_set_track+0x62/0x70 [ 120.422162][ T5634] ? kasan_set_track+0x4b/0x70 [ 120.426974][ T5634] ? kasan_set_free_info+0x1f/0x40 [ 120.432131][ T5634] ? ____kasan_slab_free+0xd5/0x110 [ 120.437388][ T5634] ? slab_free_freelist_hook+0xec/0x170 [ 120.442994][ T5634] ? kfree+0xef/0x2a0 [ 120.444525][ T13] usb 5-1: USB disconnect, device number 5 [ 120.447014][ T5634] ? call_usermodehelper_exec+0x183/0x520 [ 120.458766][ T5634] ? __request_module+0x40b/0x980 [ 120.463832][ T5634] ? load_settype+0x3a/0xb0 [ 120.468390][ T5634] ? ip_set_create+0x485/0x1820 [ 120.473292][ T5634] ? nfnetlink_rcv_msg+0xbf7/0x1180 [ 120.478529][ T5634] ? netlink_rcv_skb+0x1e9/0x430 [ 120.483515][ T5634] ? nfnetlink_rcv+0x2b4/0x2450 [ 120.488445][ T5634] ? netlink_unicast+0x804/0x9e0 [ 120.493418][ T5634] ? netlink_sendmsg+0x8ba/0xbe0 [ 120.498588][ T5634] ? ____sys_sendmsg+0x5be/0x8f0 [ 120.503572][ T5634] ? ___sys_sendmsg+0x236/0x2e0 [ 120.508465][ T5634] ? __se_sys_sendmsg+0x1b7/0x2a0 [ 120.513621][ T5634] ? do_syscall_64+0x4c/0xa0 [ 120.518258][ T5634] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.524432][ T5634] kasan_set_free_info+0x1f/0x40 [ 120.529418][ T5634] ____kasan_slab_free+0xd5/0x110 [ 120.534510][ T5634] slab_free_freelist_hook+0xec/0x170 [ 120.539925][ T5634] ? call_usermodehelper_exec+0x183/0x520 [ 120.545713][ T5634] kfree+0xef/0x2a0 [ 120.549565][ T5634] ? __request_module+0x980/0x980 [ 120.554725][ T5634] call_usermodehelper_exec+0x183/0x520 [ 120.560413][ T5634] ? call_usermodehelper_exec_work+0x220/0x220 [ 120.566661][ T5634] ? __request_module+0x980/0x980 [ 120.570046][ T5641] FAULT_INJECTION: forcing a failure. [ 120.570046][ T5641] name fail_futex, interval 1, probability 0, space 0, times 0 [ 120.571740][ T5634] __request_module+0x40b/0x980 [ 120.571766][ T5634] ? ____sys_sendmsg+0x5be/0x8f0 [ 120.571790][ T5634] ? __lock_acquire+0x7d40/0x7d40 [ 120.571820][ T5634] ? umd_cleanup+0x110/0x110 [ 120.571852][ T5634] ? mutex_unlock+0x10/0x10 [ 120.571880][ T5634] ? __lock_acquire+0x7d40/0x7d40 [ 120.571908][ T5634] ? strlcpy+0x83/0xc0 [ 120.571940][ T5634] ? memcpy+0x3c/0x60 [ 120.571966][ T5634] load_settype+0x3a/0xb0 [ 120.571992][ T5634] ip_set_create+0x485/0x1820 [ 120.572032][ T5634] ? ip_set_protocol+0x5b0/0x5b0 [ 120.572090][ T5634] nfnetlink_rcv_msg+0xbf7/0x1180 [ 120.572141][ T5634] ? nfnetlink_bind+0x280/0x280 [ 120.572210][ T5634] netlink_rcv_skb+0x1e9/0x430 [ 120.572236][ T5634] ? nfnetlink_bind+0x280/0x280 [ 120.572259][ T5634] ? netlink_ack+0xb10/0xb10 [ 120.572286][ T5634] ? bpf_lsm_capable+0x5/0x10 [ 120.572307][ T5634] ? security_capable+0x85/0xb0 [ 120.670380][ T5634] nfnetlink_rcv+0x2b4/0x2450 [ 120.675115][ T5634] ? __local_bh_enable_ip+0x136/0x1c0 [ 120.680533][ T5634] ? lockdep_hardirqs_on+0x94/0x140 [ 120.685774][ T5634] ? __local_bh_enable_ip+0x136/0x1c0 [ 120.691195][ T5634] ? _local_bh_enable+0xa0/0xa0 [ 120.696101][ T5634] ? __dev_queue_xmit+0x1b64/0x2e50 [ 120.701383][ T5634] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 120.707001][ T5634] ? dev_queue_xmit+0x20/0x20 [ 120.711754][ T5634] ? __copy_skb_header+0x3ba/0x4f0 [ 120.716945][ T5634] ? memcpy+0x3c/0x60 [ 120.721001][ T5634] ? __copy_skb_header+0x3ba/0x4f0 [ 120.726167][ T5634] ? __skb_clone+0x446/0x6c0 [ 120.730809][ T5634] ? rcu_lock_release+0x5/0x20 [ 120.735617][ T5634] ? __lock_acquire+0x7d40/0x7d40 [ 120.740729][ T5634] netlink_unicast+0x804/0x9e0 [ 120.745581][ T5634] netlink_sendmsg+0x8ba/0xbe0 [ 120.750395][ T5634] ? netlink_getsockopt+0x570/0x570 [ 120.755632][ T5634] ? aa_sock_msg_perm+0x94/0x150 [ 120.760613][ T5634] ? apparmor_socket_sendmsg+0x88/0x230 [ 120.766196][ T5634] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 120.771518][ T5634] ? security_socket_sendmsg+0x7c/0xa0 [ 120.777020][ T5634] ? netlink_getsockopt+0x570/0x570 [ 120.782285][ T5634] ____sys_sendmsg+0x5be/0x8f0 [ 120.787101][ T5634] ? __sys_sendmsg_sock+0x30/0x30 [ 120.792173][ T5634] ? import_iovec+0x6f/0xa0 [ 120.796725][ T5634] ___sys_sendmsg+0x236/0x2e0 [ 120.801463][ T5634] ? __sys_sendmsg+0x290/0x290 [ 120.806297][ T5634] __se_sys_sendmsg+0x1b7/0x2a0 [ 120.811186][ T5634] ? __x64_sys_sendmsg+0x80/0x80 [ 120.816214][ T5634] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 120.822257][ T5634] ? lockdep_hardirqs_on+0x94/0x140 [ 120.827508][ T5634] do_syscall_64+0x4c/0xa0 [ 120.831973][ T5634] ? clear_bhb_loop+0x30/0x80 [ 120.836720][ T5634] ? clear_bhb_loop+0x30/0x80 [ 120.841471][ T5634] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.847405][ T5634] RIP: 0033:0x7f1aa20a9559 [ 120.851857][ T5634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.871501][ T5634] RSP: 002b:00007f1aa0300028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.879959][ T5634] RAX: ffffffffffffffda RBX: 00007f1aa232ffa0 RCX: 00007f1aa20a9559 [ 120.887977][ T5634] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 120.895989][ T5634] RBP: 00007f1aa2140b50 R08: 0000000000000000 R09: 0000000000000000 [ 120.904002][ T5634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.912094][ T5634] R13: 00007f1aa2330038 R14: 00007f1aa232ffa0 R15: 00007ffc5bf76cd8 [ 120.920126][ T5634] [ 120.925925][ T5641] CPU: 0 PID: 5641 Comm: syz.0.377 Not tainted syzkaller #0 [ 120.933272][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 120.942587][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.943360][ T5641] Call Trace: [ 120.943371][ T5641] [ 120.951299][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.953967][ T5641] dump_stack_lvl+0x188/0x250 [ 120.954002][ T5641] ? show_regs_print_info+0x20/0x20 [ 120.954028][ T5641] ? load_image+0x410/0x410 [ 120.954068][ T5641] should_fail+0x383/0x4b0 [ 120.983253][ T5641] get_futex_key+0x1a0/0x1200 [ 120.987977][ T5641] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 120.993999][ T5641] ? futex_wait_restart+0x250/0x250 [ 120.999348][ T5641] ? lock_chain_count+0x20/0x20 [ 121.004262][ T5641] futex_wait_setup+0x4b/0x520 [ 121.009075][ T5641] ? lockdep_hardirqs_on+0x94/0x140 [ 121.014336][ T5641] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 121.020277][ T5641] futex_wait+0x22f/0x680 [ 121.024653][ T5641] ? __lock_acquire+0x13b3/0x7d40 [ 121.029870][ T5641] ? do_futex+0x12b0/0x12b0 [ 121.034446][ T5641] ? verify_lock_unused+0x140/0x140 [ 121.039687][ T5641] ? verify_lock_unused+0x140/0x140 [ 121.044931][ T5641] do_futex+0xdc2/0x12b0 [ 121.049215][ T5641] ? keyctl_set_reqkey_keyring+0x150/0x1b0 [ 121.055073][ T5641] ? __se_sys_keyctl+0x162/0xa20 [ 121.060066][ T5641] ? futex_exit_release+0x1c0/0x1c0 [ 121.065311][ T5641] ? __context_tracking_exit+0x4c/0x80 [ 121.070817][ T5641] __se_sys_futex+0x389/0x420 [ 121.075539][ T5641] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 121.081572][ T5641] ? __x64_sys_futex+0xf0/0xf0 [ 121.086385][ T5641] ? __x64_sys_futex+0x1d/0xf0 [ 121.091194][ T5641] do_syscall_64+0x4c/0xa0 [ 121.095657][ T5641] ? clear_bhb_loop+0x30/0x80 [ 121.100374][ T5641] ? clear_bhb_loop+0x30/0x80 [ 121.105093][ T5641] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.111024][ T5641] RIP: 0033:0x7fb9a2dca559 [ 121.115477][ T5641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.135115][ T5641] RSP: 002b:00007fb9a10210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.143573][ T5641] RAX: ffffffffffffffda RBX: 00007fb9a3050fa8 RCX: 00007fb9a2dca559 [ 121.151582][ T5641] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb9a3050fa8 [ 121.159595][ T5641] RBP: 00007fb9a3050fa0 R08: 0000000000000000 R09: 0000000000000000 [ 121.167627][ T5641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.175724][ T5641] R13: 00007fb9a3051038 R14: 00007ffedfce85d0 R15: 00007ffedfce86b8 [ 121.183751][ T5641] [ 121.519123][ T4193] ================================================================== [ 121.527763][ T4193] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12ea/0x3ca0 [ 121.535623][ T4193] Read of size 1 at addr ffff88802569dc01 by task kworker/u5:2/4193 [ 121.543648][ T4193] [ 121.546012][ T4193] CPU: 1 PID: 4193 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 121.553598][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 121.563698][ T4193] Workqueue: hci0 hci_rx_work [ 121.568433][ T4193] Call Trace: [ 121.571752][ T4193] [ 121.574786][ T4193] dump_stack_lvl+0x188/0x250 [ 121.579605][ T4193] ? show_regs_print_info+0x20/0x20 [ 121.584862][ T4193] ? load_image+0x410/0x410 [ 121.589416][ T4193] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 121.594931][ T4193] print_address_description+0x60/0x2d0 [ 121.600548][ T4193] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 121.605704][ T4193] kasan_report+0xdf/0x130 [ 121.610183][ T4193] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 121.615353][ T4193] hci_le_meta_evt+0x12ea/0x3ca0 [ 121.620335][ T4193] ? hci_event_packet+0x363/0x1310 [ 121.625502][ T4193] ? __lock_acquire+0x7d40/0x7d40 [ 121.630704][ T4193] ? hci_remote_host_features_evt+0x240/0x240 [ 121.636856][ T4193] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 121.642574][ T4193] ? mark_lock+0x94/0x320 [ 121.646947][ T4193] ? mutex_unlock+0x10/0x10 [ 121.651493][ T4193] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 121.657538][ T4193] ? lock_chain_count+0x20/0x20 [ 121.662443][ T4193] ? __rwlock_init+0x140/0x140 [ 121.667253][ T4193] hci_event_packet+0xe0b/0x1310 [ 121.672278][ T4193] ? _raw_spin_unlock+0x40/0x40 [ 121.677436][ T4193] ? rcu_lock_release+0x20/0x20 [ 121.682345][ T4193] ? hci_send_to_monitor+0x9c/0x4a0 [ 121.687588][ T4193] hci_rx_work+0x255/0xa10 [ 121.692072][ T4193] process_one_work+0x867/0xff0 [ 121.696978][ T4193] ? worker_detach_from_pool+0x240/0x240 [ 121.702661][ T4193] ? lockdep_hardirqs_off+0x70/0x100 [ 121.707990][ T4193] ? _raw_spin_lock_irq+0xb7/0xf0 [ 121.713081][ T4193] ? _raw_spin_lock_irqsave+0x100/0x100 [ 121.718675][ T4193] ? wq_worker_running+0x97/0x170 [ 121.723785][ T4193] worker_thread+0xad7/0x12a0 [ 121.728535][ T4193] kthread+0x42e/0x520 [ 121.732643][ T4193] ? rcu_lock_release+0x20/0x20 [ 121.737537][ T4193] ? kthread_blkcg+0xd0/0xd0 [ 121.742171][ T4193] ret_from_fork+0x1f/0x30 [ 121.746640][ T4193] [ 121.749698][ T4193] [ 121.752052][ T4193] Allocated by task 5665: [ 121.756406][ T4193] __kasan_kmalloc+0xaf/0xe0 [ 121.761040][ T4193] __alloc_skb+0x22c/0x750 [ 121.765493][ T4193] vhci_write+0xbd/0x440 [ 121.769772][ T4193] vfs_write+0x748/0xd70 [ 121.774067][ T4193] ksys_write+0x153/0x260 [ 121.778438][ T4193] do_syscall_64+0x4c/0xa0 [ 121.782885][ T4193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.788816][ T4193] [ 121.791167][ T4193] The buggy address belongs to the object at ffff88802569d800 [ 121.791167][ T4193] which belongs to the cache kmalloc-1k of size 1024 [ 121.805336][ T4193] The buggy address is located 1 bytes to the right of [ 121.805336][ T4193] 1024-byte region [ffff88802569d800, ffff88802569dc00) [ 121.819107][ T4193] The buggy address belongs to the page: [ 121.824780][ T4193] page:ffffea000095a600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25698 [ 121.834968][ T4193] head:ffffea000095a600 order:3 compound_mapcount:0 compound_pincount:0 [ 121.843329][ T4193] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 121.851369][ T4193] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017841dc0 [ 121.860007][ T4193] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 121.868622][ T4193] page dumped because: kasan: bad access detected [ 121.875159][ T4193] page_owner tracks the page as allocated [ 121.880914][ T4193] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1112, ts 71169814227, free_ts 71083234110 [ 121.897974][ T4193] get_page_from_freelist+0x24f6/0x2670 [ 121.903571][ T4193] __alloc_pages+0x1ee/0x480 [ 121.908230][ T4193] new_slab+0xc0/0x4b0 [ 121.912334][ T4193] ___slab_alloc+0x807/0xdd0 [ 121.916958][ T4193] __kmalloc+0x11d/0x340 [ 121.921233][ T4193] ___neigh_create+0x6fa/0x2210 [ 121.926123][ T4193] ip6_finish_output2+0xacc/0x1640 [ 121.931272][ T4193] NF_HOOK+0x165/0x460 [ 121.935412][ T4193] mld_sendpack+0x6ee/0xc40 [ 121.939949][ T4193] mld_ifc_work+0x843/0xd60 [ 121.944484][ T4193] process_one_work+0x867/0xff0 [ 121.949372][ T4193] worker_thread+0xad7/0x12a0 [ 121.954107][ T4193] kthread+0x42e/0x520 [ 121.958216][ T4193] ret_from_fork+0x1f/0x30 [ 121.962676][ T4193] page last free stack trace: [ 121.967374][ T4193] free_unref_page_prepare+0x637/0x6c0 [ 121.972869][ T4193] free_unref_page+0x8f/0x2a0 [ 121.977581][ T4193] __unfreeze_partials+0x188/0x1e0 [ 121.982763][ T4193] put_cpu_partial+0x12d/0x190 [ 121.987561][ T4193] qlist_free_all+0x35/0x90 [ 121.992114][ T4193] kasan_quarantine_reduce+0x150/0x160 [ 121.997617][ T4193] __kasan_slab_alloc+0x2f/0xc0 [ 122.002513][ T4193] slab_post_alloc_hook+0x4c/0x380 [ 122.007656][ T4193] __kmalloc+0x189/0x340 [ 122.011927][ T4193] tomoyo_realpath_from_path+0xed/0x5e0 [ 122.017549][ T4193] tomoyo_path_perm+0x23f/0x5d0 [ 122.022466][ T4193] security_inode_getattr+0xcf/0x120 [ 122.027783][ T4193] vfs_getattr+0x26/0x3a0 [ 122.032153][ T4193] __x64_sys_newfstat+0x137/0x210 [ 122.037213][ T4193] do_syscall_64+0x4c/0xa0 [ 122.041665][ T4193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.047593][ T4193] [ 122.049952][ T4193] Memory state around the buggy address: [ 122.055605][ T4193] ffff88802569db00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 122.063727][ T4193] ffff88802569db80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 122.071821][ T4193] >ffff88802569dc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.079908][ T4193] ^ [ 122.084000][ T4193] ffff88802569dc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.092085][ T4193] ffff88802569dd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.100194][ T4193] ================================================================== [ 122.108290][ T4193] Disabling lock debugging due to kernel taint [ 122.118032][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 122.124194][ T4193] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 122.131417][ T4193] CPU: 1 PID: 4193 Comm: kworker/u5:2 Tainted: G B syzkaller #0 [ 122.140491][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 122.150853][ T4193] Workqueue: hci0 hci_rx_work [ 122.155740][ T4193] Call Trace: [ 122.159046][ T4193] [ 122.162007][ T4193] dump_stack_lvl+0x188/0x250 [ 122.166732][ T4193] ? show_regs_print_info+0x20/0x20 [ 122.171965][ T4193] ? load_image+0x410/0x410 [ 122.176512][ T4193] panic+0x2f8/0x850 [ 122.180440][ T4193] ? bpf_jit_dump+0xd0/0xd0 [ 122.184982][ T4193] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 122.190990][ T4193] ? _raw_spin_unlock+0x40/0x40 [ 122.195876][ T4193] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 122.201040][ T4193] check_panic_on_warn+0x80/0xa0 [ 122.206011][ T4193] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 122.211159][ T4193] end_report+0x6d/0xf0 [ 122.215352][ T4193] kasan_report+0x102/0x130 [ 122.219889][ T4193] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 122.225059][ T4193] hci_le_meta_evt+0x12ea/0x3ca0 [ 122.230045][ T4193] ? hci_event_packet+0x363/0x1310 [ 122.235195][ T4193] ? __lock_acquire+0x7d40/0x7d40 [ 122.240278][ T4193] ? hci_remote_host_features_evt+0x240/0x240 [ 122.246383][ T4193] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 122.252051][ T4193] ? mark_lock+0x94/0x320 [ 122.256410][ T4193] ? mutex_unlock+0x10/0x10 [ 122.260950][ T4193] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 122.266969][ T4193] ? lock_chain_count+0x20/0x20 [ 122.271853][ T4193] ? __rwlock_init+0x140/0x140 [ 122.276653][ T4193] hci_event_packet+0xe0b/0x1310 [ 122.281749][ T4193] ? _raw_spin_unlock+0x40/0x40 [ 122.286639][ T4193] ? rcu_lock_release+0x20/0x20 [ 122.291552][ T4193] ? hci_send_to_monitor+0x9c/0x4a0 [ 122.296782][ T4193] hci_rx_work+0x255/0xa10 [ 122.301262][ T4193] process_one_work+0x867/0xff0 [ 122.306165][ T4193] ? worker_detach_from_pool+0x240/0x240 [ 122.311868][ T4193] ? lockdep_hardirqs_off+0x70/0x100 [ 122.317220][ T4193] ? _raw_spin_lock_irq+0xb7/0xf0 [ 122.322292][ T4193] ? _raw_spin_lock_irqsave+0x100/0x100 [ 122.327873][ T4193] ? wq_worker_running+0x97/0x170 [ 122.332933][ T4193] worker_thread+0xad7/0x12a0 [ 122.337683][ T4193] kthread+0x42e/0x520 [ 122.341956][ T4193] ? rcu_lock_release+0x20/0x20 [ 122.346845][ T4193] ? kthread_blkcg+0xd0/0xd0 [ 122.351466][ T4193] ret_from_fork+0x1f/0x30 [ 122.355930][ T4193] [ 122.359124][ T4193] Kernel Offset: disabled [ 122.363467][ T4193] Rebooting in 86400 seconds..