last executing test programs: 34.382437619s ago: executing program 0 (id=360): socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003540)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x900, @local, 0x1}, 0x1c, &(0x7f0000001700)=[{&(0x7f00000001c0)='n', 0x1}], 0x1}}], 0x1, 0x488c4) 34.090150046s ago: executing program 0 (id=362): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x12000c1, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x5, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), 0xffffffffffffffff) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={r1, 0xf9}, 0x0, &(0x7f00000008c0)="b0f5ec01e02085467da6d8b2b2a69c0000000000000001aa0eedaa25e8466819395b8df98f3c90a03be929d2802703139af648e4340010000000000000e5eae2a670b23de93f4ded4ee5fba0a399dc0261ed3873f96a1f226ee2f5565445addb60b9ebe4fbae3ba1766c6e60a1ab912f33b89ca00e15a3dfd7271fc5c002524246b4324f18ef93334460294600006ad1663023ebca4b1406d7c5075f3f8c22e15bdf58d71739d0edae95b429343d972ed515dc4e78ecabdce2a9d0ab4af97b3f86b2166b6b2ae9df90c6bada7239804e9614ac09a8a75d23b22b83d8b8086b9d4de0afcc6ec72222cd97d3dd52d97d6239f31b41e83efc4126", 0x0) 33.747957965s ago: executing program 0 (id=366): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) semop(0x0, &(0x7f00000000c0)=[{0x4, 0x0, 0x800}, {0x4, 0xfff7}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) close_range(r0, r1, 0x0) semctl$GETZCNT(0x0, 0x3, 0xf, 0x0) capset(&(0x7f0000000080)={0x20080522}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffffffffffc, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000), 0x0, 0x100004, 0x10026, 0x3, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 33.486246171s ago: executing program 0 (id=371): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) 33.294200846s ago: executing program 0 (id=375): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1, 0x20000}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x10, 0x4) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000380)="b924", 0x2) 32.467077146s ago: executing program 0 (id=386): connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x35, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x1, 0x2, 0x0, @multicast1, @loopback}, "2200354f0000000104000001e1010203c0a801"}}}}, 0x0) 32.193308913s ago: executing program 32 (id=386): connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x35, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x1, 0x2, 0x0, @multicast1, @loopback}, "2200354f0000000104000001e1010203c0a801"}}}}, 0x0) 10.149679189s ago: executing program 2 (id=594): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x0, 0x800) 10.075160551s ago: executing program 2 (id=595): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_connect$printer(0x8, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x1b0, 0x8, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x3, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x4, 0x8, 0x9}}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x40, &(0x7f00000006c0)=ANY=[], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000e00)={0x1c, &(0x7f0000000680)={0x40, 0x10, 0x2, "a72f"}, 0x0, 0x0}) syz_usb_ep_write(r1, 0x81, 0xffffffffffffffac, &(0x7f0000000000)="9001000000000000") r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) read$char_usb(r2, &(0x7f0000000900)=""/183, 0xb7) 8.829080651s ago: executing program 4 (id=604): openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_SREGS2(r0, 0x8140aecc, &(0x7f0000000100)) 8.642930836s ago: executing program 4 (id=605): syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 7.868480035s ago: executing program 3 (id=610): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) socket$inet6(0x10, 0x2, 0x4) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) write$tun(r2, 0x0, 0x8a) write(r2, &(0x7f0000000240)='c\t', 0x2) write(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) 7.581683602s ago: executing program 3 (id=611): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xae4a, 0x5) 7.450456245s ago: executing program 3 (id=612): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r1 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_disconnect(r1) 7.079241755s ago: executing program 4 (id=613): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES16], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 6.430636601s ago: executing program 2 (id=614): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x64, 0x46, 0xa5, 0x10, 0xb05, 0x171d, 0x1a45, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xcb, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0xca, 0xb, 0x0, 0xb0, 0x68, 0xb5}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB]}) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 6.147181018s ago: executing program 5 (id=615): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) write(r3, &(0x7f00000002c0)="fe", 0xfdef) read$watch_queue(r2, &(0x7f0000000780)=""/221, 0xfdef) sendmsg$NFNL_MSG_CTHELPER_GET(r4, 0x0, 0x0) 5.474333355s ago: executing program 4 (id=616): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e040031000022000001090224000100000000090400000103000000092100000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x1, 0x4a, &(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000001200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="200b98000000c96a6401cba6760d815fc0bc7719039576f54c397a725b0bad1019a008d3bfaf784d70d159fdd8bf0b69bf7adc21dbd01e25f976d2d72b9ff5af28071c7e9b3fd15cb04bc1f565a92e9bb5225a8850c0209c00666486cce5de49a22ed54e944581d84d8a36b11a07d18b06a733"], 0x0, 0x0}) 5.213758971s ago: executing program 5 (id=618): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0xff, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 4.959658207s ago: executing program 5 (id=619): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000080)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xc, 0x4) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 4.706877703s ago: executing program 1 (id=621): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setns(0xc9, 0x0) socket$inet6(0x10, 0x2, 0x4) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) write$tun(r1, 0x0, 0x8a) write(r1, &(0x7f0000000240)='c\t', 0x2) write(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) 4.692663924s ago: executing program 1 (id=622): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='GPL\x00', &(0x7f0000000400)='&\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xc) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000340)) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000300)=0x1, 0x12) syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x6c842, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000b80000/0x3000)=nil, 0x0}, 0x68) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x96f, 0x1f280, 0x0, 0x399}) io_uring_enter(r4, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 4.628112905s ago: executing program 1 (id=623): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000080)="aefcbc", 0x3) 4.249457035s ago: executing program 2 (id=624): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xfc, 0x2f, 0x62, 0x40, 0x9c4, 0x11, 0x638, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0xf0, 0xe8, 0x2, 0xb5, 0x1c, 0x80, 0x3, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xff, 0x10, 0x3}}, {{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x2, 0x81}}]}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$rtl8150(r0, &(0x7f00000003c0)={0x14, &(0x7f0000000240)={0x20, 0x5, 0xc, {0xc, 0x9, "61d7da220946316084e3"}}, 0x0}, 0x0) 4.03016428s ago: executing program 5 (id=625): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000340)={0x20, 0x16, 0x3, "428acb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.022255341s ago: executing program 3 (id=626): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0xf93f000, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001040)={0x14, 0x0, 0x0}, &(0x7f0000001340)={0x44, &(0x7f0000001080)={0x40, 0x7, 0xf0, "eb0d758881a3b5a941c0f8021b7c0a433c1d152f30d0ae179062c976cb20a672621428678e3329ccce41c01f1e4d1d1d0140624bf430a5cd66cb98a06a7591c377f671270a5af1129d4d5f7c6c8c8676e08e16ad232a72d7c153e94920a000162192179cf23f8cc4c79891b210a43df2057ad73cf658974b5c1de6a7d3e46b88dc99ca281ae2e64635533590cb7be95ee08548b209252f3ad58731edaeb7c5d23fe6c01f4f9ea8b31ae1b477bd15e2c9be0c42802bda1ccd8ece65a77131048d99e7f3ae066cbd13b6a7cff09e57da06ca6a35522cf54cec79971ce848756524eaf62cdda3f812c742c8a0f3c3cb583c"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0xa4}, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x12}, &(0x7f0000001200)={0x20, 0x81, 0x3, "9e5628"}, &(0x7f0000001240)={0x20, 0x82, 0x2, "dede"}, &(0x7f0000001280)={0x20, 0x83, 0x1, "16"}, &(0x7f00000012c0)={0x20, 0x84, 0x1, "f9"}, &(0x7f0000001300)={0x20, 0x85, 0x3, "4dbe0a"}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.62687883s ago: executing program 4 (id=627): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, 0x0, 0x0) 2.586677696s ago: executing program 5 (id=628): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) write(r3, &(0x7f00000002c0)="fe", 0xfdef) read$watch_queue(r2, &(0x7f0000000780)=""/221, 0xfdef) sendmsg$NFNL_MSG_CTHELPER_GET(r4, 0x0, 0x0) 1.665705308s ago: executing program 5 (id=629): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7f) read$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000400)=""/186, 0x110) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x0) 1.142783552s ago: executing program 2 (id=630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xc, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x4000003, 0x7, 0x10, 0x4, 0x17, 0x0, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 970.394146ms ago: executing program 1 (id=631): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b00000000000119078000000000000000000004e206714907801000000000000007b4b143b7461fd77"], 0x0) r1 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 735.717322ms ago: executing program 1 (id=632): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setns(0xc9, 0x0) socket$inet6(0x10, 0x2, 0x4) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) write$tun(r1, 0x0, 0x8a) write(r1, &(0x7f0000000240)='c\t', 0x2) write(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) 674.703863ms ago: executing program 3 (id=633): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='GPL\x00', &(0x7f0000000400)='&\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xc) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000340)) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000300)=0x1, 0x12) syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x6c842, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000b80000/0x3000)=nil, 0x0}, 0x68) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x96f, 0x1f280, 0x0, 0x399}) io_uring_enter(r4, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 590.753755ms ago: executing program 2 (id=634): syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100107010340b804020240000102030109021b000101fbb00c090400410001000001001905010220000000"], 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f00000007c0)="0bcde56ca9a62cbf", 0x8) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r3, 0x80084504, 0xfffffffffffffffd) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) 472.699318ms ago: executing program 1 (id=635): r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f0100080000000000000004"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r2, 0x5452, &(0x7f0000000040)={0x2, 0xfffffefd, 0x0, 0x4, 0x36, 0x80000000}) 417.14009ms ago: executing program 3 (id=636): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000080)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xc, 0x4) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 0s ago: executing program 4 (id=637): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.237' (ED25519) to the list of known hosts. syzkaller login: [ 77.984885][ T4260] cgroup: Unknown subsys name 'net' [ 78.121078][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.706033][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 81.219132][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.227208][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.235413][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.245228][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.252800][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.260554][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.268159][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.276429][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.277716][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.284900][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.297967][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.298640][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.308737][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.312565][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.325106][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.327812][ T4290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.336720][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.341463][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.355446][ T4290] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.358052][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.362702][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.371547][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.380022][ T4290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.385127][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.398127][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.399986][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.412588][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.454920][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.493940][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.501535][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.853050][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 81.956103][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 81.991522][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 82.108702][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 82.126661][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 82.160090][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.167485][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.177477][ T4275] device bridge_slave_0 entered promiscuous mode [ 82.190315][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.197666][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.206024][ T4275] device bridge_slave_1 entered promiscuous mode [ 82.264752][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.271890][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.283317][ T4284] device bridge_slave_0 entered promiscuous mode [ 82.291301][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.298652][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.307375][ T4274] device bridge_slave_0 entered promiscuous mode [ 82.327893][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.337744][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.345894][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.354615][ T4284] device bridge_slave_1 entered promiscuous mode [ 82.361604][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.368821][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.377067][ T4274] device bridge_slave_1 entered promiscuous mode [ 82.395009][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.446346][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.480722][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.492534][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.501880][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.509401][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.517739][ T4273] device bridge_slave_0 entered promiscuous mode [ 82.530939][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.542434][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.550538][ T4273] device bridge_slave_1 entered promiscuous mode [ 82.564756][ T4275] team0: Port device team_slave_0 added [ 82.586034][ T4275] team0: Port device team_slave_1 added [ 82.593605][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.652326][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.659684][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.671643][ T4276] device bridge_slave_0 entered promiscuous mode [ 82.681339][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.693003][ T4284] team0: Port device team_slave_0 added [ 82.703618][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.710599][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.736840][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.751326][ T4274] team0: Port device team_slave_0 added [ 82.757685][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.769156][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.777224][ T4276] device bridge_slave_1 entered promiscuous mode [ 82.789537][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.800387][ T4284] team0: Port device team_slave_1 added [ 82.816270][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.823250][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.849603][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.863667][ T4274] team0: Port device team_slave_1 added [ 82.906606][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.948273][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.969232][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.976497][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.003006][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.017027][ T4273] team0: Port device team_slave_0 added [ 83.023859][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.030858][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.063055][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.087765][ T4276] team0: Port device team_slave_0 added [ 83.094241][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.101230][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.131126][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.143955][ T4273] team0: Port device team_slave_1 added [ 83.150192][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.157725][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.183742][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.197221][ T4276] team0: Port device team_slave_1 added [ 83.245303][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.252318][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.278578][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.301420][ T4275] device hsr_slave_0 entered promiscuous mode [ 83.309421][ T4275] device hsr_slave_1 entered promiscuous mode [ 83.324523][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.331509][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.358370][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.375599][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.382586][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.408984][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.454319][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.461327][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.487664][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.504345][ T4274] device hsr_slave_0 entered promiscuous mode [ 83.511216][ T4274] device hsr_slave_1 entered promiscuous mode [ 83.518489][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.527138][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 83.527155][ T4277] Bluetooth: hci3: command 0x0409 tx timeout [ 83.536070][ T4274] Cannot create hsr debugfs directory [ 83.540209][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 83.545115][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 83.550982][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 83.601884][ T4284] device hsr_slave_0 entered promiscuous mode [ 83.617514][ T4284] device hsr_slave_1 entered promiscuous mode [ 83.625104][ T4284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.632714][ T4284] Cannot create hsr debugfs directory [ 83.647188][ T4276] device hsr_slave_0 entered promiscuous mode [ 83.654912][ T4276] device hsr_slave_1 entered promiscuous mode [ 83.662222][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.669891][ T4276] Cannot create hsr debugfs directory [ 83.737166][ T4273] device hsr_slave_0 entered promiscuous mode [ 83.745003][ T4273] device hsr_slave_1 entered promiscuous mode [ 83.751700][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.759461][ T4273] Cannot create hsr debugfs directory [ 84.106407][ T4275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.127316][ T4275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.140870][ T4275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.168430][ T4275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.186261][ T4276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.198278][ T4276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.210255][ T4276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.228445][ T4276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.284251][ T4273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.305926][ T4273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.319801][ T4273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.345778][ T4273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.406422][ T4274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.442944][ T4274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.452892][ T4274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.485972][ T4274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.539847][ T4284] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.565330][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.575655][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.586815][ T4284] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.596632][ T4284] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.619851][ T4284] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.635425][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.643083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.653556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.661382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.671525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.708303][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.723027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.732673][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.743242][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.750677][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.766002][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.779580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.812994][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.826390][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.835778][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.842879][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.851125][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.861163][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.870759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.879980][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.887164][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.902556][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.911334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.926668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.948590][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.961216][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.970328][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.979656][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.986841][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.995856][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.004901][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.013618][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.020790][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.038646][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.067867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.082052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.091172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.102022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.112081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.121185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.138561][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.145775][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.154603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.164338][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.208445][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.218385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.228081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.237981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.247133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.257308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.266335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.275362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.285086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.294514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.304308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.312762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.321482][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.330766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.339455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.349416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.358439][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.367359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.389013][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.398819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.409607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.418954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.428887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.439753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.449797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.479514][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.488833][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.547286][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.560939][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.571535][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.594251][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.603819][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 85.609888][ T4288] Bluetooth: hci0: command 0x041b tx timeout [ 85.616325][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 85.622368][ T4277] Bluetooth: hci3: command 0x041b tx timeout [ 85.623989][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 85.644098][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.669420][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.689243][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.735951][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.755516][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.779640][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.788268][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.819551][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.847900][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.863161][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.878192][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.885412][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.916338][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.949599][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.007314][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.026893][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.060958][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.086146][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.099593][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.110623][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.162688][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.190389][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.225049][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.234239][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.254515][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.270924][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.280882][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.304321][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.321607][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.342514][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.395481][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.415076][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.434157][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.441325][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.474592][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.493355][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.502622][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.509820][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.542920][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.618093][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.631709][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.646115][ T26] cfg80211: failed to load regulatory.db [ 86.664401][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.671953][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.679807][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.694040][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.701523][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.717597][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.730305][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.749884][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.762363][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.773625][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.782178][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.796242][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.813351][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.841353][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.856406][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.875068][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.894725][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.925221][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.014925][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.034713][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.084155][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.092660][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.126958][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.154304][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.163289][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.204884][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.238544][ T4275] device veth0_vlan entered promiscuous mode [ 87.301022][ T4275] device veth1_vlan entered promiscuous mode [ 87.333769][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.341936][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.365829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.388626][ T4276] device veth0_vlan entered promiscuous mode [ 87.402461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.415471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.443831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.479541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.487987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.527970][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.574341][ T4276] device veth1_vlan entered promiscuous mode [ 87.614858][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.631081][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.656079][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.675007][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.683499][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 87.689557][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 87.695811][ T4277] Bluetooth: hci3: command 0x040f tx timeout [ 87.695829][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 87.701872][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 87.737081][ T4275] device veth0_macvtap entered promiscuous mode [ 87.752865][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.790315][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.797984][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.826564][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.839230][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.854843][ T4275] device veth1_macvtap entered promiscuous mode [ 87.878510][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.915470][ T4276] device veth0_macvtap entered promiscuous mode [ 87.932444][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.944283][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.952400][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.962117][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.971389][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.981050][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.001514][ T4276] device veth1_macvtap entered promiscuous mode [ 88.021891][ T4274] device veth0_vlan entered promiscuous mode [ 88.034733][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.043147][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.058918][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.069252][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.078682][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.090662][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.120393][ T4274] device veth1_vlan entered promiscuous mode [ 88.128695][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.138539][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.148324][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.158049][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.168308][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.183329][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.197988][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.208427][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.223480][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.281795][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.296571][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.309069][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.334268][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.342476][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.351891][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.362401][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.372465][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.382220][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.390861][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.401659][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.417935][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.429156][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.443862][ T4284] device veth0_vlan entered promiscuous mode [ 88.454367][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.464997][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.477224][ T4276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.487763][ T4276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.497327][ T4276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.506335][ T4276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.524156][ T4274] device veth0_macvtap entered promiscuous mode [ 88.560611][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.571923][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.581716][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.590922][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.600499][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.612484][ T4284] device veth1_vlan entered promiscuous mode [ 88.648585][ T4274] device veth1_macvtap entered promiscuous mode [ 88.691707][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.712331][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.723946][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.735001][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.748320][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.768802][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.780818][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.791746][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.802887][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.816055][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.836449][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.845814][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.855772][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.864499][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.873327][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.882690][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.893172][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.902623][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.911583][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.920483][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.929399][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.943340][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.954688][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.965398][ T4273] device veth0_vlan entered promiscuous mode [ 88.983966][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.992736][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.008563][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.018848][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.072723][ T4284] device veth0_macvtap entered promiscuous mode [ 89.089781][ T4273] device veth1_vlan entered promiscuous mode [ 89.114887][ T4284] device veth1_macvtap entered promiscuous mode [ 89.142688][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.146071][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.162438][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.172668][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.183695][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.194388][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.205743][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.216177][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.231181][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.242143][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.258633][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.277410][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.290772][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.306260][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.315278][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.325495][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.336663][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.348894][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.359732][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.371058][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.381987][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.393918][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.439440][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.459560][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.469590][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.479176][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.490049][ T4273] device veth0_macvtap entered promiscuous mode [ 89.516061][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.517808][ T4284] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.524896][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.545615][ T4284] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.554640][ T4284] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.568097][ T4284] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.583097][ T4273] device veth1_macvtap entered promiscuous mode [ 89.593203][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.596487][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.611057][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.620273][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.628680][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.637661][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.677461][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.689345][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.701190][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.711782][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.721752][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.732726][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.742647][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.753286][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.764047][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 89.770125][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 89.776818][ T49] Bluetooth: hci3: command 0x0419 tx timeout [ 89.777146][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 89.782931][ T49] Bluetooth: hci4: command 0x0419 tx timeout [ 89.800543][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.811630][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.821660][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.845030][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.852936][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.913364][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.924852][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.935018][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.945861][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.956984][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.967934][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.978376][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.989552][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.001696][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.014233][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.023041][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.041450][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.060856][ T4273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.071090][ T4273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.081787][ T4273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.091903][ T4273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.195463][ T4326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.223786][ T4326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.242251][ T4361] loop3: detected capacity change from 0 to 128 [ 90.264198][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.284774][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.326297][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.361466][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.422364][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.453426][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.472821][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.518426][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.538660][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.595898][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.640044][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.653238][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.680201][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.722552][ T4371] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.533121][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 91.610124][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 91.660564][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 91.716097][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 91.745456][ T4407] loop2: detected capacity change from 0 to 764 [ 91.766224][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 91.828704][ T4407] rock: directory entry would overflow storage [ 91.861309][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 91.870427][ T4407] rock: sig=0x4654, size=5, remaining=4 [ 91.929780][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 92.170588][ T4399] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 93.224015][ T4434] FAULT_INJECTION: forcing a failure. [ 93.224015][ T4434] name failslab, interval 1, probability 0, space 0, times 1 [ 93.259955][ T4434] CPU: 0 PID: 4434 Comm: syz.2.22 Not tainted syzkaller #0 [ 93.267234][ T4434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.277368][ T4434] Call Trace: [ 93.280684][ T4434] [ 93.283657][ T4434] dump_stack_lvl+0x188/0x24e [ 93.288391][ T4434] ? show_regs_print_info+0x12/0x12 [ 93.293665][ T4434] ? load_image+0x410/0x410 [ 93.298228][ T4434] ? __might_sleep+0xd0/0xd0 [ 93.302862][ T4434] ? __lock_acquire+0x7ea0/0x7ea0 [ 93.307947][ T4434] should_fail_ex+0x390/0x4c0 [ 93.312685][ T4434] should_failslab+0x5/0x20 [ 93.317228][ T4434] slab_pre_alloc_hook+0x59/0x300 [ 93.322290][ T4434] kmem_cache_alloc_lru+0x49/0x2e0 [ 93.327439][ T4434] ? hugetlbfs_alloc_inode+0xef/0x140 [ 93.332844][ T4434] hugetlbfs_alloc_inode+0xef/0x140 [ 93.338072][ T4434] ? hugetlbfs_fill_super+0x910/0x910 [ 93.343493][ T4434] new_inode_pseudo+0x5f/0x1c0 [ 93.348300][ T4434] new_inode+0x25/0x1d0 [ 93.352487][ T4434] ? resv_map_alloc+0x1c0/0x2b0 [ 93.357370][ T4434] hugetlbfs_get_inode+0x78/0x510 [ 93.362428][ T4434] ? _raw_spin_unlock+0x24/0x40 [ 93.367307][ T4434] ? alloc_fd+0x590/0x640 [ 93.371675][ T4434] hugetlb_file_setup+0x211/0x610 [ 93.376735][ T4434] __se_sys_memfd_create+0x20a/0x340 [ 93.382053][ T4434] do_syscall_64+0x4c/0xa0 [ 93.386513][ T4434] ? clear_bhb_loop+0x60/0xb0 [ 93.391223][ T4434] ? clear_bhb_loop+0x60/0xb0 [ 93.395932][ T4434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.401855][ T4434] RIP: 0033:0x7f721539e199 [ 93.406308][ T4434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.425936][ T4434] RSP: 002b:00007f72162b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 93.434469][ T4434] RAX: ffffffffffffffda RBX: 00007f7215625fa0 RCX: 00007f721539e199 [ 93.442626][ T4434] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000040 [ 93.450744][ T4434] RBP: 00007f72154358e0 R08: 0000000000000000 R09: 0000000000000000 [ 93.458771][ T4434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.466772][ T4434] R13: 00007f7215626038 R14: 00007f7215625fa0 R15: 00007ffd1dd0ee38 [ 93.474788][ T4434] [ 93.801455][ T4445] loop4: detected capacity change from 0 to 256 [ 93.822433][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.885244][ T4443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.918261][ T4445] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.962417][ T4446] netlink: 'syz.2.25': attribute type 13 has an invalid length. [ 94.076167][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.117103][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.144837][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.556972][ T4495] loop2: detected capacity change from 0 to 16 [ 95.641189][ T4495] erofs: (device loop2): mounted with root inode @ nid 36. [ 95.693721][ T27] audit: type=1800 audit(1791281028.688:2): pid=4495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.47" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 97.182320][ T4526] FAULT_INJECTION: forcing a failure. [ 97.182320][ T4526] name failslab, interval 1, probability 0, space 0, times 0 [ 97.196627][ T4526] CPU: 0 PID: 4526 Comm: syz.0.58 Not tainted syzkaller #0 [ 97.203906][ T4526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 97.214011][ T4526] Call Trace: [ 97.217365][ T4526] [ 97.220340][ T4526] dump_stack_lvl+0x188/0x24e [ 97.225070][ T4526] ? show_regs_print_info+0x12/0x12 [ 97.230495][ T4526] ? load_image+0x410/0x410 [ 97.235063][ T4526] ? __might_sleep+0xd0/0xd0 [ 97.239790][ T4526] ? __lock_acquire+0x7ea0/0x7ea0 [ 97.244912][ T4526] should_fail_ex+0x390/0x4c0 [ 97.249645][ T4526] should_failslab+0x5/0x20 [ 97.254177][ T4526] slab_pre_alloc_hook+0x59/0x300 [ 97.259685][ T4526] ? sctp_endpoint_new+0x11a/0xa00 [ 97.264845][ T4526] __kmem_cache_alloc_node+0x4f/0x270 [ 97.270258][ T4526] ? sctp_endpoint_new+0x11a/0xa00 [ 97.275432][ T4526] kmalloc_trace+0x26/0xe0 [ 97.279885][ T4526] sctp_endpoint_new+0x11a/0xa00 [ 97.284968][ T4526] sctp_init_sock+0x95b/0x11c0 [ 97.289784][ T4526] sctp_v6_init_sock+0x12/0x60 [ 97.294591][ T4526] inet6_create+0xdb3/0x11b0 [ 97.299222][ T4526] __sock_create+0x49a/0x940 [ 97.303848][ T4526] __sys_socket+0xc4/0x190 [ 97.308314][ T4526] __x64_sys_socket+0x76/0x80 [ 97.313041][ T4526] do_syscall_64+0x4c/0xa0 [ 97.317503][ T4526] ? clear_bhb_loop+0x60/0xb0 [ 97.322225][ T4526] ? clear_bhb_loop+0x60/0xb0 [ 97.326943][ T4526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.332877][ T4526] RIP: 0033:0x7f13b819e199 [ 97.337333][ T4526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.356987][ T4526] RSP: 002b:00007f13b90bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 97.365695][ T4526] RAX: ffffffffffffffda RBX: 00007f13b8425fa0 RCX: 00007f13b819e199 [ 97.373750][ T4526] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a [ 97.381835][ T4526] RBP: 00007f13b82358e0 R08: 0000000000000000 R09: 0000000000000000 [ 97.389847][ T4526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.397854][ T4526] R13: 00007f13b8426038 R14: 00007f13b8425fa0 R15: 00007ffc365370e8 [ 97.405951][ T4526] [ 97.565793][ T4534] Zero length message leads to an empty skb [ 98.068940][ T4558] kvm: pic: non byte write [ 98.206847][ T4565] loop0: detected capacity change from 0 to 512 [ 98.448409][ T4573] loop3: detected capacity change from 0 to 256 [ 98.497064][ T4573] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.179113][ T4605] loop0: detected capacity change from 0 to 1764 [ 99.222078][ T4605] isofs_fill_super: get root inode failed [ 101.778262][ T4689] FAULT_INJECTION: forcing a failure. [ 101.778262][ T4689] name failslab, interval 1, probability 0, space 0, times 0 [ 101.841353][ T4689] CPU: 0 PID: 4689 Comm: syz.2.126 Not tainted syzkaller #0 [ 101.848820][ T4689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.858925][ T4689] Call Trace: [ 101.862245][ T4689] [ 101.865207][ T4689] dump_stack_lvl+0x188/0x24e [ 101.869933][ T4689] ? show_regs_print_info+0x12/0x12 [ 101.875179][ T4689] ? load_image+0x410/0x410 [ 101.880091][ T4689] ? __might_sleep+0xd0/0xd0 [ 101.884758][ T4689] ? __lock_acquire+0x7ea0/0x7ea0 [ 101.889882][ T4689] should_fail_ex+0x390/0x4c0 [ 101.894626][ T4689] should_failslab+0x5/0x20 [ 101.899173][ T4689] slab_pre_alloc_hook+0x59/0x300 [ 101.904266][ T4689] ? sctp_endpoint_new+0x82/0xa00 [ 101.909340][ T4689] __kmem_cache_alloc_node+0x4f/0x270 [ 101.914778][ T4689] ? sctp_endpoint_new+0x82/0xa00 [ 101.919852][ T4689] kmalloc_trace+0x26/0xe0 [ 101.924312][ T4689] sctp_endpoint_new+0x82/0xa00 [ 101.929226][ T4689] ? __raw_spin_lock_init+0x41/0x100 [ 101.934652][ T4689] sctp_init_sock+0x95b/0x11c0 [ 101.939818][ T4689] sctp_v6_init_sock+0x12/0x60 [ 101.944642][ T4689] inet6_create+0xdb3/0x11b0 [ 101.949296][ T4689] __sock_create+0x49a/0x940 [ 101.953954][ T4689] __sys_socket+0xc4/0x190 [ 101.958425][ T4689] __x64_sys_socket+0x76/0x80 [ 101.963360][ T4689] do_syscall_64+0x4c/0xa0 [ 101.969550][ T4689] ? clear_bhb_loop+0x60/0xb0 [ 101.975745][ T4689] ? clear_bhb_loop+0x60/0xb0 [ 101.980662][ T4689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.986612][ T4689] RIP: 0033:0x7f721539e199 [ 101.991099][ T4689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.010933][ T4689] RSP: 002b:00007f72162b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 102.019416][ T4689] RAX: ffffffffffffffda RBX: 00007f7215625fa0 RCX: 00007f721539e199 [ 102.027437][ T4689] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a [ 102.035711][ T4689] RBP: 00007f72154358e0 R08: 0000000000000000 R09: 0000000000000000 [ 102.044076][ T4689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.052094][ T4689] R13: 00007f7215626038 R14: 00007f7215625fa0 R15: 00007ffd1dd0ee38 [ 102.060129][ T4689] [ 103.487682][ T4725] loop1: detected capacity change from 0 to 256 [ 103.509130][ T4725] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.740858][ T4710] device veth0 entered promiscuous mode [ 103.748631][ T4710] device veth0 left promiscuous mode [ 104.551692][ T4755] loop0: detected capacity change from 0 to 256 [ 104.613257][ T4755] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.787986][ T4757] netlink: 'syz.1.151': attribute type 1 has an invalid length. [ 104.843990][ T4757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.531704][ T4786] loop4: detected capacity change from 0 to 256 [ 105.554233][ T4781] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2367695244 (4735390488 ns) > initial count (3616245572 ns). Using initial count to start timer. [ 105.581609][ T4786] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.667876][ T4820] loop0: detected capacity change from 0 to 512 [ 106.682687][ T4822] loop1: detected capacity change from 0 to 256 [ 106.704511][ T4820] ======================================================= [ 106.704511][ T4820] WARNING: The mand mount option has been deprecated and [ 106.704511][ T4820] and is ignored by this kernel. Remove the mand [ 106.704511][ T4820] option from the mount to silence this warning. [ 106.704511][ T4820] ======================================================= [ 106.794606][ T4822] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.890264][ T27] audit: type=1800 audit(1791281039.888:3): pid=4820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.177" name="file1" dev="loop0" ino=1048636 res=0 errno=0 [ 107.467800][ T4841] netlink: 'syz.2.185': attribute type 1 has an invalid length. [ 107.509176][ T4841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.702649][ T4412] kworker/u4:8: attempt to access beyond end of device [ 107.702649][ T4412] loop0: rw=1, sector=5640, nr_sectors = 7784 limit=512 [ 107.760190][ T4412] kworker/u4:8: attempt to access beyond end of device [ 107.760190][ T4412] loop0: rw=1, sector=13424, nr_sectors = 8 limit=512 [ 108.008044][ T4853] loop1: detected capacity change from 0 to 256 [ 108.067469][ T4853] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.485430][ T4868] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2367695244 (4735390488 ns) > initial count (3616245572 ns). Using initial count to start timer. [ 108.805691][ T4874] loop2: detected capacity change from 0 to 512 [ 108.881541][ T27] audit: type=1800 audit(1791281041.878:4): pid=4874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.198" name="file1" dev="loop2" ino=1048638 res=0 errno=0 [ 109.506276][ T4890] loop1: detected capacity change from 0 to 256 [ 109.551405][ T4890] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.712224][ T4879] syz.2.198: attempt to access beyond end of device [ 109.712224][ T4879] loop2: rw=0, sector=432, nr_sectors = 128 limit=512 [ 109.984605][ T4412] kworker/u4:8: attempt to access beyond end of device [ 109.984605][ T4412] loop2: rw=1, sector=560, nr_sectors = 15904 limit=512 [ 110.606825][ T4920] trusted_key: encrypted_key: insufficient parameters specified [ 110.805157][ T4320] smpboot: CPU 1 is now offline [ 110.981398][ T4924] x86: Booting SMP configuration: [ 111.017910][ T4924] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 111.302838][ T4939] loop2: detected capacity change from 0 to 16 [ 111.361501][ T4939] erofs: (device loop2): mounted with root inode @ nid 36. [ 111.424763][ T4942] sd 0:0:1:0: device reset [ 111.478053][ T4939] overlayfs: failed to resolve './file0': -2 [ 112.253655][ T4322] smpboot: CPU 1 is now offline [ 112.306155][ T4971] x86: Booting SMP configuration: [ 112.343726][ T4971] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 112.957053][ T4994] syz.2.250 uses obsolete (PF_INET,SOCK_PACKET) [ 113.625853][ T5015] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.703896][ T5015] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.766467][ T5015] team0: Port device bridge_slave_1 added [ 115.375929][ T5062] fuse: Unknown parameter 'use00000000000000000000' [ 116.328642][ T5092] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 117.389819][ T5126] loop3: detected capacity change from 0 to 128 [ 118.349845][ T5159] FAULT_INJECTION: forcing a failure. [ 118.349845][ T5159] name failslab, interval 1, probability 0, space 0, times 0 [ 118.413806][ T5159] CPU: 0 PID: 5159 Comm: syz.2.314 Not tainted syzkaller #0 [ 118.421161][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.431240][ T5159] Call Trace: [ 118.434534][ T5159] [ 118.437474][ T5159] dump_stack_lvl+0x188/0x24e [ 118.442190][ T5159] ? show_regs_print_info+0x12/0x12 [ 118.447401][ T5159] ? load_image+0x410/0x410 [ 118.451926][ T5159] ? __might_sleep+0xd0/0xd0 [ 118.456529][ T5159] ? __lock_acquire+0x7ea0/0x7ea0 [ 118.461599][ T5159] should_fail_ex+0x390/0x4c0 [ 118.466317][ T5159] should_failslab+0x5/0x20 [ 118.470854][ T5159] slab_pre_alloc_hook+0x59/0x300 [ 118.475909][ T5159] ? vlan_init_net+0x61/0x190 [ 118.480625][ T5159] __kmem_cache_alloc_node+0x4f/0x270 [ 118.486034][ T5159] ? vlan_init_net+0x61/0x190 [ 118.490742][ T5159] kmalloc_trace+0x26/0xe0 [ 118.495193][ T5159] vlan_init_net+0x61/0x190 [ 118.499732][ T5159] ops_init+0x360/0x5e0 [ 118.503921][ T5159] setup_net+0x4f2/0xbd0 [ 118.508238][ T5159] ? copy_net_ns+0x5b0/0x5b0 [ 118.512870][ T5159] ? copy_net_ns+0x324/0x5b0 [ 118.517500][ T5159] ? down_read_killable+0x1cc/0x340 [ 118.522742][ T5159] copy_net_ns+0x33e/0x5b0 [ 118.527201][ T5159] create_new_namespaces+0x3ce/0x700 [ 118.532525][ T5159] unshare_nsproxy_namespaces+0x116/0x160 [ 118.538276][ T5159] ksys_unshare+0x4f6/0x8e0 [ 118.542825][ T5159] ? sighand_ctor+0x40/0x40 [ 118.547388][ T5159] ? lock_chain_count+0x20/0x20 [ 118.552283][ T5159] ? syscall_enter_from_user_mode+0x21/0x80 [ 118.558220][ T5159] __x64_sys_unshare+0x34/0x40 [ 118.563015][ T5159] do_syscall_64+0x4c/0xa0 [ 118.567487][ T5159] ? clear_bhb_loop+0x60/0xb0 [ 118.572209][ T5159] ? clear_bhb_loop+0x60/0xb0 [ 118.576921][ T5159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.582896][ T5159] RIP: 0033:0x7f721539e199 [ 118.587605][ T5159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.607243][ T5159] RSP: 002b:00007f72162b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 118.615699][ T5159] RAX: ffffffffffffffda RBX: 00007f7215625fa0 RCX: 00007f721539e199 [ 118.623720][ T5159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 118.631715][ T5159] RBP: 00007f72154358e0 R08: 0000000000000000 R09: 0000000000000000 [ 118.639737][ T5159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.650958][ T5159] R13: 00007f7215626038 R14: 00007f7215625fa0 R15: 00007ffd1dd0ee38 [ 118.658984][ T5159] [ 120.657574][ T5223] loop0: detected capacity change from 0 to 16 [ 120.707874][ T5223] erofs: (device loop0): mounted with root inode @ nid 36. [ 120.827722][ T5229] trusted_key: encrypted_key: insufficient parameters specified [ 120.946570][ T130] smpboot: CPU 1 is now offline [ 121.004867][ T5229] x86: Booting SMP configuration: [ 121.074441][ T5229] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 122.389839][ T5271] loop0: detected capacity change from 0 to 128 [ 123.250122][ T5295] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2367695244 (4735390488 ns) > initial count (3616245572 ns). Using initial count to start timer. [ 123.806127][ T5316] device vlan2 entered promiscuous mode [ 123.811764][ T5316] device bridge0 entered promiscuous mode [ 124.053154][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.132784][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.195953][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.319004][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.624458][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 124.666522][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.703782][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.779023][ T5338] fuse: Bad value for 'fd' [ 124.894508][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.904048][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.912684][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.920842][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.929286][ T49] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 124.936674][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 125.695711][ T5340] chnl_net:caif_netlink_parms(): no params data found [ 126.032664][ T5340] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.053580][ T5340] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.061893][ T5340] device bridge_slave_0 entered promiscuous mode [ 126.280682][ T5340] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.295060][ T5340] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.327635][ T5340] device bridge_slave_1 entered promiscuous mode [ 126.591008][ T5340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.624885][ T5397] tmpfs: Unknown parameter 'noswap' [ 126.686340][ T9] device hsr_slave_0 left promiscuous mode [ 126.693304][ T9] device hsr_slave_1 left promiscuous mode [ 126.707577][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.719008][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.732218][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.743275][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.757218][ T9] device bridge_slave_1 left promiscuous mode [ 126.768287][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.783152][ T9] device bridge_slave_0 left promiscuous mode [ 126.797723][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.842762][ T9] device veth1_macvtap left promiscuous mode [ 126.856245][ T9] device veth0_macvtap left promiscuous mode [ 126.862449][ T9] device veth1_vlan left promiscuous mode [ 126.878038][ T9] device veth0_vlan left promiscuous mode [ 126.963940][ T49] Bluetooth: hci2: command 0x0409 tx timeout [ 127.811775][ T9] team0 (unregistering): Port device team_slave_1 removed [ 127.880334][ T9] team0 (unregistering): Port device team_slave_0 removed [ 127.939612][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.013787][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.498077][ T9] bond0 (unregistering): Released all slaves [ 128.625988][ T5340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.752247][ T5340] team0: Port device team_slave_0 added [ 128.811310][ T5340] team0: Port device team_slave_1 added [ 128.904324][ T5340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.911367][ T5340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.989823][ T5340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.024479][ T5428] device syzkaller0 entered promiscuous mode [ 129.042789][ T5340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.044669][ T49] Bluetooth: hci2: command 0x041b tx timeout [ 129.098750][ T5340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.174343][ T5340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.422710][ T5340] device hsr_slave_0 entered promiscuous mode [ 129.479268][ T5340] device hsr_slave_1 entered promiscuous mode [ 129.499694][ T5340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.525013][ T5340] Cannot create hsr debugfs directory [ 129.793811][ T5448] FAULT_INJECTION: forcing a failure. [ 129.793811][ T5448] name fail_futex, interval 1, probability 0, space 0, times 1 [ 129.863849][ T5448] CPU: 0 PID: 5448 Comm: syz.2.423 Not tainted syzkaller #0 [ 129.871251][ T5448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.881387][ T5448] Call Trace: [ 129.884707][ T5448] [ 129.887763][ T5448] dump_stack_lvl+0x188/0x24e [ 129.892500][ T5448] ? show_regs_print_info+0x12/0x12 [ 129.897785][ T5448] ? load_image+0x410/0x410 [ 129.902357][ T5448] ? __lock_acquire+0x142d/0x7ea0 [ 129.907480][ T5448] should_fail_ex+0x390/0x4c0 [ 129.912216][ T5448] get_futex_key+0x1de/0x1000 [ 129.916944][ T5448] ? verify_lock_unused+0x140/0x140 [ 129.922203][ T5448] ? futex_setup_timer+0xc0/0xc0 [ 129.927187][ T5448] ? verify_lock_unused+0x140/0x140 [ 129.932462][ T5448] futex_wake+0x123/0x4f0 [ 129.936877][ T5448] ? futex_wake_mark+0x150/0x150 [ 129.941880][ T5448] do_futex+0x2e2/0x320 [ 129.946091][ T5448] ? __ia32_sys_get_robust_list+0x100/0x100 [ 129.952038][ T5448] ? __might_fault+0xc2/0x120 [ 129.956766][ T5448] mm_release+0x20a/0x330 [ 129.961144][ T5448] ? exit_robust_list+0x2ce/0x2f0 [ 129.966211][ T5448] ? exit_mm_release+0x30/0x30 [ 129.971031][ T5448] ? lockdep_hardirqs_on+0x94/0x140 [ 129.976329][ T5448] exit_mm+0xa0/0x350 [ 129.980376][ T5448] ? sysctl_delayacct+0x220/0x220 [ 129.985441][ T5448] ? do_exit+0x2570/0x2570 [ 129.989901][ T5448] ? tty_audit_exit+0x149/0x1f0 [ 129.994805][ T5448] do_exit+0x958/0x2570 [ 129.998999][ T5448] ? put_task_struct+0x80/0x80 [ 130.003796][ T5448] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 130.009811][ T5448] ? lock_chain_count+0x20/0x20 [ 130.014692][ T5448] ? _raw_spin_lock_irq+0xb7/0xf0 [ 130.019753][ T5448] do_group_exit+0x229/0x2e0 [ 130.024378][ T5448] ? lockdep_hardirqs_on+0x94/0x140 [ 130.029613][ T5448] get_signal+0x1259/0x1340 [ 130.034163][ T5448] arch_do_signal_or_restart+0xc4/0x1310 [ 130.039834][ T5448] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 130.045851][ T5448] ? do_futex+0x310/0x320 [ 130.050211][ T5448] ? get_sigframe_size+0x10/0x10 [ 130.055181][ T5448] ? __ia32_sys_get_robust_list+0x100/0x100 [ 130.061100][ T5448] ? exc_page_fault+0x88/0x100 [ 130.065906][ T5448] ? exit_to_user_mode_loop+0x3b/0x110 [ 130.071394][ T5448] exit_to_user_mode_loop+0x70/0x110 [ 130.076715][ T5448] exit_to_user_mode_prepare+0xee/0x180 [ 130.082295][ T5448] syscall_exit_to_user_mode+0x16/0x40 [ 130.087790][ T5448] do_syscall_64+0x58/0xa0 [ 130.092249][ T5448] ? clear_bhb_loop+0x60/0xb0 [ 130.096973][ T5448] ? clear_bhb_loop+0x60/0xb0 [ 130.101682][ T5448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.107622][ T5448] RIP: 0033:0x7f721539e199 [ 130.112057][ T5448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.131686][ T5448] RSP: 002b:00007f72162b70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.140124][ T5448] RAX: fffffffffffffe00 RBX: 00007f7215625fa8 RCX: 00007f721539e199 [ 130.148142][ T5448] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7215625fa8 [ 130.156138][ T5448] RBP: 00007f7215625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 130.164132][ T5448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.172121][ T5448] R13: 00007f7215626038 R14: 00007ffd1dd0ed50 R15: 00007ffd1dd0ee38 [ 130.180126][ T5448] [ 130.357351][ T5340] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 130.392163][ T5340] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 130.432153][ T5340] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 130.455420][ T5340] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 130.666919][ T5340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.690464][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.704316][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.737544][ T5340] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.758337][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 130.775143][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.793670][ T4412] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.801652][ T4412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.856065][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.866479][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.876632][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.890938][ T4412] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.898146][ T4412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.916311][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.950670][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.967528][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.983250][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 131.018910][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 131.049027][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 131.059493][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 131.074418][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 131.090537][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.123654][ T49] Bluetooth: hci2: command 0x040f tx timeout [ 131.142241][ T5340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.155679][ T5340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 131.178199][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 131.196015][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.448466][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.455238][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.989537][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.001872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.042455][ T5340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.301916][ T5511] loop3: detected capacity change from 0 to 128 [ 132.387885][ T5514] fuse: Unknown parameter '0x0000000000000004' [ 133.203669][ T49] Bluetooth: hci2: command 0x0419 tx timeout [ 133.210520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.225176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.294005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.312755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.341805][ T5340] device veth0_vlan entered promiscuous mode [ 133.350492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.394333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.425738][ T5340] device veth1_vlan entered promiscuous mode [ 133.520008][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 133.529626][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 133.557810][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.594789][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.621780][ T5340] device veth0_macvtap entered promiscuous mode [ 133.634535][ T5340] device veth1_macvtap entered promiscuous mode [ 133.693968][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.729062][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.751603][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.780803][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.808939][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.838765][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.868905][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.890282][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.931519][ T5340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.959497][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.973252][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.999676][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.015499][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.046222][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.076032][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.094300][ T5562] FAULT_INJECTION: forcing a failure. [ 134.094300][ T5562] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 134.108251][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.135805][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.157606][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.173425][ T5562] CPU: 0 PID: 5562 Comm: syz.3.452 Not tainted syzkaller #0 [ 134.180883][ T5562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 134.191002][ T5562] Call Trace: [ 134.195736][ T5562] [ 134.202621][ T5562] dump_stack_lvl+0x188/0x24e [ 134.207373][ T5562] ? show_regs_print_info+0x12/0x12 [ 134.212641][ T5562] ? load_image+0x410/0x410 [ 134.217219][ T5562] ? __lock_acquire+0x7ea0/0x7ea0 [ 134.221963][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.222296][ T5562] should_fail_ex+0x390/0x4c0 [ 134.237026][ T5562] _copy_from_user+0x2c/0x170 [ 134.241779][ T5562] __se_sys_mount+0x175/0x3d0 [ 134.246604][ T5562] ? __x64_sys_mount+0xc0/0xc0 [ 134.251441][ T5562] ? lockdep_hardirqs_on+0x94/0x140 [ 134.256858][ T5562] ? __x64_sys_mount+0x1c/0xc0 [ 134.261694][ T5562] do_syscall_64+0x4c/0xa0 [ 134.266231][ T5562] ? clear_bhb_loop+0x60/0xb0 [ 134.270977][ T5562] ? clear_bhb_loop+0x60/0xb0 [ 134.274271][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.275700][ T5562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.292164][ T5562] RIP: 0033:0x7fa57159e199 [ 134.296771][ T5562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.316598][ T5562] RSP: 002b:00007fa5723a1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 134.325150][ T5562] RAX: ffffffffffffffda RBX: 00007fa571825fa0 RCX: 00007fa57159e199 [ 134.333372][ T5562] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 [ 134.341387][ T5562] RBP: 00007fa5716358e0 R08: 0000200000000240 R09: 0000000000000000 [ 134.349418][ T5562] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 134.357417][ T5562] R13: 00007fa571826038 R14: 00007fa571825fa0 R15: 00007ffd6d7cf8d8 [ 134.365427][ T5562] [ 134.382346][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.394672][ T5340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.404155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.426692][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.450473][ T5340] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.465428][ T5340] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.481298][ T5340] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.497259][ T5340] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.515772][ T5567] device syzkaller0 entered promiscuous mode [ 134.556010][ T5567] 0: reclassify loop, rule prio 0, protocol 800 [ 134.788905][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.844089][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.861250][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.915057][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.923194][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.956956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.063757][ T5562] overlayfs: missing 'lowerdir' [ 135.347777][ T5589] FAULT_INJECTION: forcing a failure. [ 135.347777][ T5589] name failslab, interval 1, probability 0, space 0, times 0 [ 135.388564][ T5589] CPU: 0 PID: 5589 Comm: syz.2.459 Not tainted syzkaller #0 [ 135.395943][ T5589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 135.406085][ T5589] Call Trace: [ 135.409406][ T5589] [ 135.412376][ T5589] dump_stack_lvl+0x188/0x24e [ 135.417123][ T5589] ? show_regs_print_info+0x12/0x12 [ 135.422387][ T5589] ? load_image+0x410/0x410 [ 135.426966][ T5589] ? __might_sleep+0xd0/0xd0 [ 135.431615][ T5589] ? __lock_acquire+0x7ea0/0x7ea0 [ 135.436710][ T5589] should_fail_ex+0x390/0x4c0 [ 135.441489][ T5589] should_failslab+0x5/0x20 [ 135.446028][ T5589] slab_pre_alloc_hook+0x59/0x300 [ 135.451081][ T5589] ? __kasan_kmalloc_large+0x8b/0xd0 [ 135.456410][ T5589] ? io_ring_ctx_alloc+0x279/0xc85 [ 135.461575][ T5589] __kmem_cache_alloc_node+0x4f/0x270 [ 135.466981][ T5589] ? io_ring_ctx_alloc+0x279/0xc85 [ 135.472128][ T5589] kmalloc_trace+0x26/0xe0 [ 135.476573][ T5589] io_ring_ctx_alloc+0x279/0xc85 [ 135.481550][ T5589] io_uring_create+0x29f/0xd6c [ 135.486350][ T5589] ? __might_fault+0xc2/0x120 [ 135.491056][ T5589] ? __might_fault+0xa6/0x120 [ 135.495762][ T5589] __x64_sys_io_uring_setup+0x21b/0x230 [ 135.501423][ T5589] ? __ia32_sys_io_uring_enter+0xf0/0xf0 [ 135.507221][ T5589] ? lockdep_hardirqs_on+0x94/0x140 [ 135.512546][ T5589] do_syscall_64+0x4c/0xa0 [ 135.516987][ T5589] ? clear_bhb_loop+0x60/0xb0 [ 135.521695][ T5589] ? clear_bhb_loop+0x60/0xb0 [ 135.526405][ T5589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.532330][ T5589] RIP: 0033:0x7f721539e199 [ 135.536885][ T5589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.556522][ T5589] RSP: 002b:00007f72162b6fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 135.564968][ T5589] RAX: ffffffffffffffda RBX: 00002000000011c0 RCX: 00007f721539e199 [ 135.573053][ T5589] RDX: 0000200000001280 RSI: 00002000000011c0 RDI: 0000000000003806 [ 135.581137][ T5589] RBP: 00007f72154358e0 R08: 0000000000000000 R09: 0000000000000000 [ 135.589151][ T5589] R10: 00002000000012c0 R11: 0000000000000206 R12: 0000200000001280 [ 135.597175][ T5589] R13: 00002000000012c0 R14: 0000200000001240 R15: 00007ffd1dd0ee38 [ 135.605185][ T5589] [ 135.966795][ T5603] fuse: Unknown parameter 'fd0x0000000000000004' [ 136.271522][ T5618] netlink: 108 bytes leftover after parsing attributes in process `syz.1.469'. [ 136.309132][ T5618] netlink: 108 bytes leftover after parsing attributes in process `syz.1.469'. [ 136.318665][ T5622] FAULT_INJECTION: forcing a failure. [ 136.318665][ T5622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.352695][ T5622] CPU: 1 PID: 5622 Comm: syz.5.472 Not tainted syzkaller #0 [ 136.360071][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 136.370174][ T5622] Call Trace: [ 136.373495][ T5622] [ 136.376512][ T5622] dump_stack_lvl+0x188/0x24e [ 136.381260][ T5622] ? show_regs_print_info+0x12/0x12 [ 136.386521][ T5622] ? load_image+0x410/0x410 [ 136.391095][ T5622] ? __lock_acquire+0x7ea0/0x7ea0 [ 136.396176][ T5622] ? __kasan_slab_alloc+0x6b/0x80 [ 136.401254][ T5622] should_fail_ex+0x390/0x4c0 [ 136.406004][ T5622] strncpy_from_user+0x32/0x340 [ 136.410921][ T5622] getname_flags+0xf2/0x500 [ 136.415481][ T5622] user_path_at_empty+0x28/0x60 [ 136.420381][ T5622] __se_sys_mount+0x2a4/0x3d0 [ 136.425148][ T5622] ? __x64_sys_mount+0xc0/0xc0 [ 136.429969][ T5622] ? lockdep_hardirqs_on+0x94/0x140 [ 136.435253][ T5622] ? __x64_sys_mount+0x1c/0xc0 [ 136.440178][ T5622] do_syscall_64+0x4c/0xa0 [ 136.444649][ T5622] ? clear_bhb_loop+0x60/0xb0 [ 136.449375][ T5622] ? clear_bhb_loop+0x60/0xb0 [ 136.454099][ T5622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.460037][ T5622] RIP: 0033:0x7efd0159e199 [ 136.464507][ T5622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.484253][ T5622] RSP: 002b:00007efd02412028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 136.492725][ T5622] RAX: ffffffffffffffda RBX: 00007efd01825fa0 RCX: 00007efd0159e199 [ 136.500761][ T5622] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 [ 136.508791][ T5622] RBP: 00007efd016358e0 R08: 0000200000000240 R09: 0000000000000000 [ 136.516841][ T5622] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 136.524860][ T5622] R13: 00007efd01826038 R14: 00007efd01825fa0 R15: 00007ffc14e2e7b8 [ 136.532894][ T5622] [ 137.172414][ T5655] device team_slave_0 entered promiscuous mode [ 137.179028][ T5655] device team_slave_1 entered promiscuous mode [ 137.224396][ T5655] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 137.279839][ T5663] loop4: detected capacity change from 0 to 128 [ 137.723250][ T5680] netlink: 'syz.2.493': attribute type 13 has an invalid length. [ 137.788000][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 137.838746][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.874048][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.087148][ T5697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.499'. [ 138.294965][ T5706] loop3: detected capacity change from 0 to 16 [ 138.342236][ T5706] erofs: (device loop3): mounted with root inode @ nid 36. [ 139.026633][ T5727] loop4: detected capacity change from 0 to 8192 [ 139.078360][ T5727] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.096736][ T5741] raw_sendmsg: syz.2.513 forgot to set AF_INET. Fix it! [ 139.214151][ T5727] kvm: pic: non byte write [ 139.385744][ T5751] loop5: detected capacity change from 0 to 16 [ 139.408512][ T5751] erofs: (device loop5): mounted with root inode @ nid 36. [ 140.130730][ T5779] netlink: 'syz.3.526': attribute type 13 has an invalid length. [ 140.234843][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.306803][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.336075][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.470797][ T5797] loop1: detected capacity change from 0 to 16 [ 140.520176][ T5797] erofs: (device loop1): mounted with root inode @ nid 36. [ 140.718077][ T5805] overlayfs: missing 'lowerdir' [ 140.963085][ T5814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'. [ 141.366548][ T5835] loop2: detected capacity change from 0 to 16 [ 141.404850][ T5835] erofs: (device loop2): mounted with root inode @ nid 36. [ 141.434794][ T5835] overlayfs: failed to resolve './file1': -2 [ 141.567359][ T5842] netlink: 'syz.5.548': attribute type 13 has an invalid length. [ 141.659945][ T5842] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 141.696225][ T5842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.719468][ T5842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.317317][ T5872] trusted_key: encrypted_key: insufficient parameters specified [ 142.350369][ T5881] loop5: detected capacity change from 0 to 16 [ 142.424369][ T5881] erofs: (device loop5): mounted with root inode @ nid 36. [ 142.487554][ T5881] overlayfs: failed to resolve './file1': -2 [ 142.749710][ T5895] fuse: Bad value for 'group_id' [ 142.907828][ T5902] loop2: detected capacity change from 0 to 128 [ 142.983623][ T4344] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 143.039359][ T4324] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 143.169122][ T4320] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 143.183601][ T4344] usb 4-1: Using ep0 maxpacket: 16 [ 143.200359][ T4344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.242915][ T4344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.262106][ T4324] usb 6-1: not running at top speed; connect to a high speed hub [ 143.264794][ T4344] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 143.280543][ T4324] usb 6-1: config 1 has an invalid interface number: 1 but max is 0 [ 143.310965][ T4344] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 143.323584][ T4324] usb 6-1: config 1 has no interface number 0 [ 143.342845][ T4344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.351004][ T4324] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 143.351034][ T4324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.351054][ T4324] usb 6-1: Product: syz [ 143.351069][ T4324] usb 6-1: Manufacturer: syz [ 143.393602][ T4320] usb 5-1: Using ep0 maxpacket: 16 [ 143.401577][ T4320] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.408506][ T4324] usb 6-1: SerialNumber: syz [ 143.431768][ T4344] usb 4-1: config 0 descriptor?? [ 143.437600][ T5913] trusted_key: encrypted_key: insufficient parameters specified [ 143.448687][ T4320] usb 5-1: config 9 has an invalid interface number: 163 but max is 0 [ 143.468477][ T4320] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 143.471424][ T4324] usb 6-1: selecting invalid altsetting 1 [ 143.499239][ T4320] usb 5-1: config 9 has no interface number 0 [ 143.509402][ T4320] usb 5-1: config 9 interface 163 altsetting 193 endpoint 0xE has invalid wMaxPacketSize 0 [ 143.540686][ T4320] usb 5-1: config 9 interface 163 altsetting 193 bulk endpoint 0xE has invalid maxpacket 0 [ 143.567522][ T4320] usb 5-1: config 9 interface 163 altsetting 193 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 143.581230][ T4320] usb 5-1: config 9 interface 163 has no altsetting 0 [ 143.603253][ T4320] usb 5-1: string descriptor 0 read error: -22 [ 143.626098][ T4320] usb 5-1: New USB device found, idVendor=0bda, idProduct=d723, bcdDevice=d5.ae [ 143.656337][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.669890][ T4324] dvb_ttusb_budget: ttusb_init_controller: error [ 143.683769][ T4324] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 143.859538][ T130] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 143.870803][ T4324] DVB: Unable to find symbol cx22700_attach() [ 143.950982][ T4344] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0001/input/input5 [ 144.009562][ T4324] DVB: Unable to find symbol tda10046_attach() [ 144.019729][ T4324] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 144.045259][ T130] usb 3-1: config 0 has no interfaces? [ 144.051324][ T130] usb 3-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 144.084189][ T4324] usb 6-1: USB disconnect, device number 2 [ 144.105691][ T130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.120517][ T4344] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 144.134612][ T5927] loop1: detected capacity change from 0 to 16 [ 144.144553][ T5894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.167208][ T130] usb 3-1: config 0 descriptor?? [ 144.174784][ T5894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.183923][ T5927] erofs: (device loop1): mounted with root inode @ nid 36. [ 144.206831][ T5927] overlayfs: failed to resolve './file1': -2 [ 144.224945][ T4344] usb 4-1: USB disconnect, device number 2 [ 144.379588][ T5909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.402048][ T5909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.481313][ T4320] usb 3-1: USB disconnect, device number 2 [ 144.662609][ T5932] fido_id[5932]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 144.887769][ T5951] loop3: detected capacity change from 0 to 128 [ 145.053739][ T4320] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 145.084029][ T22] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 145.172929][ T5959] trusted_key: encrypted_key: insufficient parameters specified [ 145.238203][ T5963] loop1: detected capacity change from 0 to 16 [ 145.256203][ T4320] usb 3-1: unable to get BOS descriptor or descriptor too short [ 145.265996][ T5963] erofs: (device loop1): mounted with root inode @ nid 36. [ 145.283683][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 145.286836][ T4320] usb 3-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 145.302903][ T22] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 145.320793][ T4320] usb 3-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 145.328014][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.349165][ T4320] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 145.352467][ T22] usb 6-1: Product: syz [ 145.378813][ T22] usb 6-1: Manufacturer: syz [ 145.384069][ T22] usb 6-1: SerialNumber: syz [ 145.398223][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.405717][ T22] usb 6-1: config 0 descriptor?? [ 145.422072][ T4320] usb 3-1: Product: syz [ 145.429900][ T22] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 145.437096][ T4320] usb 3-1: Manufacturer: syz [ 145.442127][ T4320] usb 3-1: SerialNumber: syz [ 145.470320][ T22] usb 6-1: Detected FT-X [ 145.626350][ T22] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 145.667687][ T4320] ati_remote2 3-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 145.698016][ T4320] usb 3-1: USB disconnect, device number 3 [ 145.803655][ T130] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 145.836943][ T22] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 145.859020][ T22] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 145.887178][ T22] usb 6-1: USB disconnect, device number 3 [ 145.902233][ T22] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 145.917001][ T22] ftdi_sio 6-1:0.0: device disconnected [ 145.978494][ T4320] usb 5-1: USB disconnect, device number 2 [ 145.995224][ T130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.016502][ T130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.037416][ T130] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 146.053087][ T130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.063326][ T130] usb 2-1: config 0 descriptor?? [ 146.413551][ T4344] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 146.478227][ T130] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 146.485613][ T130] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 146.493937][ T130] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 146.501052][ T130] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 146.508797][ T130] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 146.516152][ T130] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 146.523073][ T130] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 146.534098][ T130] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 146.596928][ T5996] loop5: detected capacity change from 0 to 16 [ 146.615241][ T4344] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.626304][ T5996] erofs: (device loop5): mounted with root inode @ nid 36. [ 146.637025][ T4344] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.669059][ T4344] usb 4-1: config 0 interface 0 has no altsetting 0 [ 146.699383][ T4344] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 146.709127][ T14] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 146.728118][ T4344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.742972][ T4344] usb 4-1: config 0 descriptor?? [ 146.900104][ T14] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 146.924733][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.955025][ T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 146.974873][ T14] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.013802][ T130] usb 2-1: USB disconnect, device number 2 [ 147.025168][ T14] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 147.052489][ T14] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 147.071178][ T14] usb 3-1: Product: syz [ 147.079381][ T14] usb 3-1: Manufacturer: syz [ 147.121187][ T14] cdc_wdm 3-1:1.0: skipping garbage [ 147.133536][ T14] cdc_wdm 3-1:1.0: skipping garbage [ 147.161315][ T14] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 147.182863][ T14] cdc_wdm 3-1:1.0: Unknown control protocol [ 147.326403][ T4320] usb 3-1: USB disconnect, device number 4 [ 147.370076][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.389506][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.412695][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.431815][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.491407][ T4344] sony 0003:054C:0268.0003: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 147.558754][ T4344] sony 0003:054C:0268.0003: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.3-1/input0 [ 147.600680][ T4344] sony 0003:054C:0268.0003: failed to claim input [ 147.641879][ T4344] usb 4-1: USB disconnect, device number 3 [ 147.782028][ T6017] fido_id[6017]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 147.903574][ T4320] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 147.963457][ T4322] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 148.095382][ T4320] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 148.104300][ T4344] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 148.122071][ T4320] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.143163][ T4320] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 148.160481][ T4320] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.171712][ T4322] usb 2-1: Using ep0 maxpacket: 32 [ 148.180590][ T4322] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 148.193222][ T4322] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.207206][ T4322] usb 2-1: config 0 interface 0 has no altsetting 0 [ 148.214356][ T4322] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 148.223983][ T4320] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 148.234094][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.243602][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 148.252147][ T4320] usb 3-1: Product: syz [ 148.256455][ T4320] usb 3-1: Manufacturer: syz [ 148.263077][ T4322] usb 2-1: config 0 descriptor?? [ 148.298614][ T4320] cdc_wdm 3-1:1.0: skipping garbage [ 148.304374][ T4320] cdc_wdm 3-1:1.0: skipping garbage [ 148.312444][ T4344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 148.336308][ T4320] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 148.342337][ T4320] cdc_wdm 3-1:1.0: Unknown control protocol [ 148.358912][ T4344] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 148.392395][ T4344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 148.424062][ T4344] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 148.456613][ T4344] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 148.476127][ T4344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.493695][ T4344] usb 5-1: Product: syz [ 148.508253][ T4344] usb 5-1: Manufacturer: syz [ 148.518407][ T4344] usb 5-1: SerialNumber: syz [ 148.530910][ T4344] usb 5-1: config 0 descriptor?? [ 148.549494][ T4344] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 148.713579][ T22] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 148.771348][ T4344] scsi host1: usb-storage 5-1:0.0 [ 148.788941][ T4344] usb 5-1: USB disconnect, device number 3 [ 148.903636][ T22] usb 6-1: Using ep0 maxpacket: 8 [ 148.919502][ T22] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.939627][ T22] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.953221][ T22] usb 6-1: config 0 interface 0 has no altsetting 0 [ 148.960356][ T22] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 148.969951][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.987678][ T22] usb 6-1: config 0 descriptor?? [ 149.217943][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 149.224832][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 149.231417][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 149.238071][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 149.245486][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 149.252137][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 149.258579][ T4344] usb 3-1: USB disconnect, device number 5 [ 149.291773][ T4320] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 149.450354][ T22] input: HID 04e7:0030 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:04E7:0030.0005/input/input8 [ 149.484977][ T4320] usb 4-1: too many configurations: 13, using maximum allowed: 8 [ 149.501648][ T4320] usb 4-1: config 0 has no interfaces? [ 149.508934][ T4320] usb 4-1: config 0 has no interfaces? [ 149.516051][ T4320] usb 4-1: config 0 has no interfaces? [ 149.523340][ T4320] usb 4-1: config 0 has no interfaces? [ 149.531616][ T4320] usb 4-1: config 0 has no interfaces? [ 149.538911][ T4320] usb 4-1: config 0 has no interfaces? [ 149.545888][ T4320] usb 4-1: config 0 has no interfaces? [ 149.554755][ T4320] usb 4-1: config 0 has no interfaces? [ 149.564184][ T4320] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.574314][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.581699][ T22] elo 0003:04E7:0030.0005: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 04e7:0030] on usb-dummy_hcd.5-1/input0 [ 149.582370][ T4320] usb 4-1: Product: syz [ 149.604428][ T4320] usb 4-1: Manufacturer: syz [ 149.609160][ T4320] usb 4-1: SerialNumber: syz [ 149.625603][ T4320] usb 4-1: config 0 descriptor?? [ 149.643564][ T4344] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 149.714014][ T4320] usb 6-1: USB disconnect, device number 4 [ 149.811644][ T6048] fido_id[6048]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 149.831099][ T4344] usb 5-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 149.858472][ T4344] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 149.871378][ T4344] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 149.880104][ T4344] usb 5-1: Manufacturer: syz [ 149.885974][ T4344] usb 5-1: SerialNumber: syz [ 149.893857][ T14] usb 4-1: USB disconnect, device number 4 [ 150.110906][ T4344] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 150.127462][ T4344] usb 5-1: USB disconnect, device number 4 [ 150.288788][ T4322] hid-alps 0003:044E:120B.0004: failed to read command (-71) [ 150.296794][ T130] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 150.307392][ T4322] hid-alps 0003:044E:120B.0004: failed U1_PITCH_SENS_X (-71) [ 150.328106][ T4322] hid-alps 0003:044E:120B.0004: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.1-1/input0 [ 150.345478][ T4322] usb 2-1: USB disconnect, device number 3 [ 150.427469][ T6055] fido_id[6055]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 150.493518][ T130] usb 3-1: Using ep0 maxpacket: 16 [ 150.501785][ T130] usb 3-1: unable to get BOS descriptor or descriptor too short [ 150.512791][ T130] usb 3-1: config 203 has an invalid interface number: 202 but max is 0 [ 150.522617][ T130] usb 3-1: config 203 has no interface number 0 [ 150.530096][ T130] usb 3-1: config 203 interface 202 has no altsetting 0 [ 150.540479][ T130] usb 3-1: New USB device found, idVendor=0b05, idProduct=171d, bcdDevice=1a.45 [ 150.549853][ T14] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 150.557901][ T130] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.566623][ T130] usb 3-1: Product: syz [ 150.572060][ T130] usb 3-1: Manufacturer: syz [ 150.577073][ T130] usb 3-1: SerialNumber: syz [ 150.744992][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 150.756244][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 150.766625][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 150.778354][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 150.810955][ T130] usb 3-1: USB disconnect, device number 6 [ 150.844717][ T14] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 150.873479][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.902027][ T14] usb 4-1: Product: syz [ 150.912172][ T14] usb 4-1: Manufacturer: syz [ 150.932406][ T14] usb 4-1: SerialNumber: syz [ 150.946237][ T14] usb 4-1: config 0 descriptor?? [ 151.189449][ T14] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 151.243436][ T4344] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 151.274072][ T6071] netlink: 'syz.5.618': attribute type 13 has an invalid length. [ 151.296784][ T6071] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.316099][ T6071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.333979][ T6071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.363767][ T130] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 151.393441][ T14] usb 4-1: USB disconnect, device number 5 [ 151.433505][ T4344] usb 5-1: Using ep0 maxpacket: 16 [ 151.474935][ T4344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.494738][ T4344] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 151.504087][ T4344] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 151.513351][ T4344] usb 5-1: Manufacturer: syz [ 151.520724][ T4344] usb 5-1: config 0 descriptor?? [ 151.553528][ T130] usb 3-1: Using ep0 maxpacket: 16 [ 151.569053][ T130] usb 3-1: unable to get BOS descriptor or descriptor too short [ 151.584461][ T130] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 151.602345][ T130] usb 3-1: can't read configurations, error -71 [ 151.936473][ T4344] creative-sb0540 0003:041E:3100.0006: unknown main item tag 0x0 [ 151.944875][ T4344] creative-sb0540 0003:041E:3100.0006: unknown main item tag 0x0 [ 151.952651][ T4344] creative-sb0540 0003:041E:3100.0006: unknown main item tag 0x0 [ 151.961128][ T4344] creative-sb0540 0003:041E:3100.0006: unknown main item tag 0x0 [ 151.969075][ T4344] creative-sb0540 0003:041E:3100.0006: unknown main item tag 0x0 [ 151.977774][ T4344] creative-sb0540 0003:041E:3100.0006: No inputs registered, leaving [ 151.988889][ T4344] creative-sb0540 0003:041E:3100.0006: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 152.133649][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 152.150167][ T6065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.162531][ T6065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.172489][ T4344] usb 5-1: USB disconnect, device number 5 [ 152.323762][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 152.332753][ T14] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 152.371703][ T14] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 152.393874][ T14] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 152.413206][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 152.434549][ T14] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 152.456726][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 152.472459][ T14] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 152.482193][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.500881][ T14] usb 2-1: config 0 descriptor?? [ 152.506002][ T130] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 152.695565][ T130] usb 3-1: unable to get BOS descriptor or descriptor too short [ 152.714725][ T130] usb 3-1: not running at top speed; connect to a high speed hub [ 152.723594][ T4324] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 152.747428][ T14] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 152.762461][ T130] usb 3-1: config 114 has an invalid interface number: 240 but max is 0 [ 152.771170][ T4322] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 152.789766][ T14] usb 2-1: USB disconnect, device number 4 [ 152.796091][ T130] usb 3-1: config 114 has no interface number 0 [ 152.809468][ T130] usb 3-1: config 114 interface 240 altsetting 232 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 152.825312][ T14] usblp0: removed [ 152.842947][ T130] usb 3-1: config 114 interface 240 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 152.858490][ T130] usb 3-1: config 114 interface 240 has no altsetting 0 [ 152.872241][ T130] usb 3-1: string descriptor 0 read error: -22 [ 152.878834][ T130] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 152.889224][ T130] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.901168][ T6084] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 152.910896][ T130] ir_usb 3-1:114.240: required endpoints missing [ 152.933631][ T4324] usb 6-1: Using ep0 maxpacket: 16 [ 152.945514][ T4324] usb 6-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 152.955831][ T4324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.964518][ T4324] usb 6-1: Product: syz [ 152.967774][ T4322] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 152.968714][ T4324] usb 6-1: Manufacturer: syz [ 152.982892][ T4324] usb 6-1: SerialNumber: syz [ 152.990987][ T4324] usb 6-1: config 0 descriptor?? [ 152.998714][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.008065][ T4324] gspca_main: spca508-2.14.0 probing 041e:4018 [ 153.034456][ T4322] usb 4-1: config 0 descriptor?? [ 153.045114][ T4322] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 153.173670][ T4320] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 153.209664][ T4324] gspca_spca508: reg_read err -32 [ 153.215794][ T4324] gspca_spca508: reg_read err -32 [ 153.226359][ T4324] gspca_spca508: reg_read err -32 [ 153.232029][ T4324] gspca_spca508: reg_read err -32 [ 153.240456][ T6088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.250600][ T4324] gspca_spca508: reg_read err -32 [ 153.256809][ T6088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.271433][ T4324] gspca_spca508: reg write: error -71 [ 153.282475][ T4324] spca508: probe of 6-1:0.0 failed with error -71 [ 153.300970][ T4324] usb 6-1: USB disconnect, device number 5 [ 153.370286][ T4320] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 153.380495][ T4320] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 153.390363][ T14] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 153.398245][ T4320] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 153.407646][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.422423][ T4320] usb 5-1: probing VID:PID(0424:012C) [ 153.430311][ T4320] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 153.436949][ T4320] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 153.443816][ T4320] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 153.450267][ T4320] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 153.458102][ T4320] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 153.593589][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 153.602400][ T14] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 153.611249][ T14] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 153.620042][ T14] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 153.633149][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 153.643614][ T14] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 153.653831][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 153.670664][ T14] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 153.681336][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.694989][ T14] usb 2-1: config 0 descriptor?? [ 153.847203][ T4320] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 153.908820][ T14] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 154.057124][ T4320] usb 5-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 154.898414][ T4322] gspca_stv06xx: Photobit pb0100 sensor detected [ 155.053673][ T14] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 155.197985][ T4322] input: STV06xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 155.244228][ T14] usb 6-1: Using ep0 maxpacket: 32 [ 155.252023][ T14] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 155.297546][ T14] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 155.317106][ T4322] usb 4-1: USB disconnect, device number 6 [ 155.361627][ T14] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 155.391544][ T14] usb 6-1: Product: syz [ 155.408573][ T14] usb 6-1: Manufacturer: syz [ 155.426656][ T14] usb 6-1: SerialNumber: syz [ 155.453750][ T4344] usb 3-1: USB disconnect, device number 8 [ 155.472008][ T14] usb 6-1: config 0 descriptor?? [ 155.493886][ T6114] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 155.505379][ T14] hub 6-1:0.0: bad descriptor, ignoring hub [ 155.524766][ T14] hub: probe of 6-1:0.0 failed with error -5 [ 155.579960][ T4282] usb 2-1: USB disconnect, device number 5 [ 155.600814][ T4282] usblp0: removed [ 155.755404][ T4320] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-32 [ 155.822890][ T4320] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 155.864598][ T4322] usb 5-1: USB disconnect, device number 6 [ 155.871610][ T4320] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 155.972173][ T4322] USB vub300 remote SDIO host controller[0] now disconnected [ 156.203833][ T4282] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 156.283728][ T4320] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 156.405219][ T4282] usb 3-1: Using ep0 maxpacket: 16 [ 156.414836][ T4282] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.438292][ T4282] usb 3-1: config 0 interface 0 has no altsetting 0 [ 156.448680][ T4282] usb 3-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 156.458326][ T4282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.467079][ T4282] usb 3-1: Product: syz [ 156.471489][ T4282] usb 3-1: Manufacturer: syz [ 156.476997][ T127] usb 6-1: USB disconnect, device number 6 [ 156.479670][ T4282] usb 3-1: SerialNumber: syz [ 156.488689][ T4320] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.509126][ T4320] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.526804][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.536220][ T4282] usb 3-1: config 0 descriptor?? [ 156.545374][ T4320] usb 2-1: Product: syz [ 156.549998][ T4320] usb 2-1: Manufacturer: syz [ 156.555382][ T4320] usb 2-1: SerialNumber: syz [ 156.713618][ T4322] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 156.761334][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 156.787072][ T6143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.798550][ T4282] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 156.813577][ C1] [ 156.815956][ C1] ================================ [ 156.820261][ T6143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.821070][ C1] WARNING: inconsistent lock state [ 156.821099][ C1] syzkaller #0 Not tainted [ 156.838409][ C1] -------------------------------- [ 156.843543][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 156.850436][ C1] dhcpcd-run-hook/6161 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 156.857244][ C1] ffff8880783d0648 ((work_completion)(&(&host->detect)->work)){+.?.}-{0:0}, at: __flush_work+0x109/0xac0 [ 156.860675][ T4320] cdc_ether 2-1:1.0: skipping garbage [ 156.868502][ C1] {SOFTIRQ-ON-W} state was registered at: [ 156.868514][ C1] lock_acquire+0x1bc/0x4a0 [ 156.868543][ C1] process_one_work+0x7ec/0x1160 [ 156.868563][ C1] worker_thread+0xaf5/0x12a0 [ 156.868582][ C1] kthread+0x29d/0x330 [ 156.868596][ C1] ret_from_fork+0x1f/0x30 [ 156.903015][ C1] irq event stamp: 2686 [ 156.903565][ T4322] usb 5-1: Using ep0 maxpacket: 32 [ 156.907181][ C1] hardirqs last enabled at (2686): [] __cancel_work_timer+0x36a/0x560 [ 156.907212][ C1] hardirqs last disabled at (2685): [] try_to_grab_pending+0xfa/0x890 [ 156.931943][ C1] softirqs last enabled at (2286): [] fpu__restore_sig+0x4d0/0x12d0 [ 156.941622][ C1] softirqs last disabled at (2621): [] __irq_exit_rcu+0x13b/0x230 [ 156.949462][ T4282] imon:send_packet: packet tx failed (-71) [ 156.951063][ C1] [ 156.951063][ C1] other info that might help us debug this: [ 156.951071][ C1] Possible unsafe locking scenario: [ 156.951071][ C1] [ 156.951077][ C1] CPU0 [ 156.951080][ C1] ---- [ 156.951085][ C1] lock((work_completion)(&(&host->detect)->work) [ 156.973225][ T4322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.975758][ C1] ); [ 156.975765][ C1] [ 156.975769][ C1] lock((work_completion)(&(&host->detect)->work)); [ 156.975785][ C1] [ 156.975785][ C1] *** DEADLOCK *** [ 156.975785][ C1] [ 156.975790][ C1] 4 locks held by dhcpcd-run-hook/6161: [ 156.975802][ C1] #0: ffff8880795a1f58 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x177/0x970 [ 156.988118][ T4320] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 156.996608][ C1] #1: ffff888024d04d98 (ptlock_ptr(page)#2){+.+.}-{2:2}, at: unmap_page_range+0x99a/0x25b0 [ 156.996683][ C1] #2: ffffffff8cb2d8a0 (rcu_read_lock){....}-{1:2}, at: folio_memcg_lock+0x7d/0x320 [ 156.996735][ C1] #3: ffffc900001e0bc0 ((&vub300->inactivity_timer)){+.-.}-{0:0} [ 157.012259][ T4322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.017761][ C1] , at: call_timer_fn+0xcf/0x670 [ 157.017788][ C1] [ 157.017788][ C1] stack backtrace: [ 157.017795][ C1] CPU: 1 PID: 6161 Comm: dhcpcd-run-hook Not tainted syzkaller #0 [ 157.017815][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 157.017827][ C1] Call Trace: [ 157.017834][ C1] [ 157.017841][ C1] dump_stack_lvl+0x188/0x24e [ 157.025995][ T4282] imon 3-1:0.0: panel buttons/knobs setup failed [ 157.032523][ C1] ? show_regs_print_info+0x12/0x12 [ 157.075203][ T4320] usb 2-1: USB disconnect, device number 6 [ 157.076199][ C1] ? unwind_get_return_address+0x49/0x80 [ 157.081330][ T4322] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 157.087048][ C1] valid_state+0x13b/0x1d0 [ 157.087081][ C1] mark_lock_irq+0xa9/0x900 [ 157.087110][ C1] ? stack_trace_save+0xa6/0xf0 [ 157.087133][ C1] ? save_trace+0xbb0/0xbb0 [ 157.087164][ C1] ? save_trace+0x5a/0xbb0 [ 157.087195][ C1] mark_lock+0x208/0x320 [ 157.162302][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.166816][ C1] __lock_acquire+0xdf3/0x7ea0 [ 157.166863][ C1] ? verify_lock_unused+0x140/0x140 [ 157.166891][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 157.166923][ C1] ? debug_object_assert_init+0x1ed/0x300 [ 157.166947][ C1] lock_acquire+0x1bc/0x4a0 [ 157.209076][ C1] ? __flush_work+0x109/0xac0 [ 157.213802][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 157.219064][ C1] ? read_lock_is_recursive+0x10/0x10 [ 157.224488][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 157.230447][ C1] ? _raw_spin_unlock+0x40/0x40 [ 157.235344][ C1] ? slab_free_freelist_hook+0x133/0x1b0 [ 157.241035][ C1] ? kobject_put+0x25c/0x450 [ 157.245682][ C1] ? vub300_inactivity_timer_expired+0x190/0x3e0 [ 157.252064][ C1] ? call_timer_fn+0x1ac/0x670 [ 157.256877][ C1] ? __flush_work+0x109/0xac0 [ 157.261600][ C1] __flush_work+0x122/0xac0 [ 157.263805][ T4322] usb 5-1: config 0 descriptor?? [ 157.266134][ C1] ? __flush_work+0x109/0xac0 [ 157.266163][ C1] ? flush_work+0x20/0x20 [ 157.280169][ C1] ? __timer_delete+0x6c/0x220 [ 157.284979][ C1] ? mark_lock+0x94/0x320 [ 157.289382][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 157.295497][ C1] ? mod_delayed_work_on+0x1b0/0x1b0 [ 157.300839][ C1] ? lock_chain_count+0x20/0x20 [ 157.305745][ C1] ? kasan_quarantine_put+0xd4/0x210 [ 157.311077][ C1] ? __cancel_work_timer+0x36a/0x560 [ 157.316418][ C1] __cancel_work_timer+0x3f4/0x560 [ 157.319936][ T4322] hub 5-1:0.0: USB hub found [ 157.321561][ C1] ? cancel_work_sync+0x20/0x20 [ 157.331066][ C1] ? kobject_put+0x25c/0x450 [ 157.335776][ C1] ? __kmem_cache_free+0xb6/0x200 [ 157.340849][ C1] ? kobject_put+0x41d/0x450 [ 157.345486][ C1] mmc_free_host+0x15/0x40 [ 157.349956][ C1] call_timer_fn+0x1ac/0x670 [ 157.354599][ C1] ? kref_get+0x70/0x70 [ 157.358807][ C1] ? call_timer_fn+0xcf/0x670 [ 157.363551][ C1] ? __run_timers+0x810/0x810 [ 157.368273][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 157.373505][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 157.378754][ C1] ? kref_get+0x70/0x70 [ 157.382952][ C1] __run_timers+0x56c/0x810 [ 157.387493][ C1] ? detach_timer+0x350/0x350 [ 157.392202][ C1] ? lock_chain_count+0x20/0x20 [ 157.397094][ C1] run_timer_softirq+0x63/0xf0 [ 157.401904][ C1] handle_softirqs+0x291/0x910 [ 157.406702][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 157.411598][ C1] ? do_softirq+0x210/0x210 [ 157.416130][ C1] ? hrtimer_interrupt+0x775/0x980 [ 157.421283][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 157.426518][ C1] __irq_exit_rcu+0x13b/0x230 [ 157.431233][ C1] ? irq_exit_rcu+0x20/0x20 [ 157.435948][ C1] irq_exit_rcu+0x5/0x20 [ 157.440224][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 157.445903][ C1] [ 157.448870][ C1] [ 157.451832][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 157.457874][ C1] RIP: 0010:lock_acquire+0x226/0x4a0 [ 157.463212][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 ef 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 157.482855][ C1] RSP: 0018:ffffc9000c7d7580 EFLAGS: 00000206 [ 157.488993][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 767d271f86ec5300 [ 157.497006][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c2a20 RDI: ffffffff8adf6de0 [ 157.505028][ C1] RBP: ffffc9000c7d7688 R08: dffffc0000000000 R09: 1ffffffff2166648 [ 157.513036][ C1] R10: dffffc0000000000 R11: fffffbfff2166649 R12: 1ffff920018faebc [ 157.521059][ C1] R13: 0000000000000001 R14: 0000000000000246 R15: dffffc0000000000 [ 157.529094][ C1] ? read_lock_is_recursive+0x10/0x10 [ 157.534534][ C1] folio_memcg_lock+0x9e/0x320 [ 157.539349][ C1] ? folio_memcg_lock+0x7d/0x320 [ 157.544343][ C1] ? folio_memcg_lock+0x7d/0x320 [ 157.549326][ C1] ? mem_cgroup_get_oom_group+0x350/0x350 [ 157.555128][ C1] ? folio_mark_accessed+0x329/0x14e0 [ 157.556730][ T4322] hub 5-1:0.0: 1 port detected [ 157.560538][ C1] ? folio_activate_fn+0x1ff0/0x1ff0 [ 157.570658][ C1] page_remove_rmap+0x2e/0xef0 [ 157.575481][ C1] unmap_page_range+0x10db/0x25b0 [ 157.580589][ C1] unmap_vmas+0x260/0x390 [ 157.584969][ C1] ? unmap_vmas+0x1bd/0x390 [ 157.589526][ C1] ? unmap_page_range+0x25b0/0x25b0 [ 157.594785][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 157.599870][ C1] exit_mmap+0x20d/0x970 [ 157.604169][ C1] ? vm_brk+0x20/0x20 [ 157.607142][ T4320] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 157.608183][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 157.608219][ C1] ? exit_mm+0x23d/0x350 [ 157.625670][ C1] ? uprobe_clear_state+0x274/0x290 [ 157.630928][ C1] __mmput+0x118/0x3a0 [ 157.635034][ C1] exit_mm+0x24d/0x350 [ 157.639161][ C1] ? sysctl_delayacct+0x220/0x220 [ 157.644239][ C1] ? do_exit+0x2570/0x2570 [ 157.648717][ C1] ? tty_audit_exit+0x149/0x1f0 [ 157.653611][ C1] do_exit+0x958/0x2570 [ 157.657823][ C1] ? put_task_struct+0x80/0x80 [ 157.662632][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 157.668692][ C1] ? lock_chain_count+0x20/0x20 [ 157.673596][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 157.678677][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 157.684007][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 157.689250][ C1] do_group_exit+0x229/0x2e0 [ 157.693907][ C1] __x64_sys_exit_group+0x3b/0x40 [ 157.698983][ C1] do_syscall_64+0x4c/0xa0 [ 157.703448][ C1] ? clear_bhb_loop+0x60/0xb0 [ 157.708162][ C1] ? clear_bhb_loop+0x60/0xb0 [ 157.712885][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.718822][ C1] RIP: 0033:0x7f7b1d9466c5 [ 157.723295][ C1] Code: Unable to access opcode bytes at 0x7f7b1d94669b. [ 157.730341][ C1] RSP: 002b:00007ffc6c346e38 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 157.738801][ C1] RAX: ffffffffffffffda RBX: 00007ffc6c347104 RCX: 00007f7b1d9466c5 [ 157.746819][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 157.754835][ C1] RBP: 0000000000000003 R08: 00007ffc6c346f30 R09: 0000000000000002 [ 157.762878][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 157.770887][ C1] R13: 00007ffc6c347170 R14: 00007f7b1db4e000 R15: 0000558045feed98 [ 157.778914][ C1] [ 157.782017][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:3013 [ 157.791098][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6161, name: dhcpcd-run-hook [ 157.800785][ C1] preempt_count: 101, expected: 0 [ 157.804776][ T4320] usb 2-1: Using ep0 maxpacket: 8 [ 157.805853][ C1] RCU nest depth: 1, expected: 0 [ 157.815854][ C1] INFO: lockdep is turned off. [ 157.820640][ C1] Preemption disabled at: [ 157.820651][ C1] [<0000000000000000>] 0x0 [ 157.822182][ T4320] usb 2-1: config index 0 descriptor too short (expected 301, got 72) [ 157.825024][ C1] CPU: 1 PID: 6161 Comm: dhcpcd-run-hook Not tainted syzkaller #0 [ 157.825047][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 157.825059][ C1] Call Trace: [ 157.825065][ C1] [ 157.825072][ C1] dump_stack_lvl+0x188/0x24e [ 157.825100][ C1] ? show_regs_print_info+0x12/0x12 [ 157.825127][ C1] ? load_image+0x410/0x410 [ 157.842226][ T4320] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 157.845623][ C1] __might_resched+0x489/0x5f0 [ 157.845654][ C1] ? __might_sleep+0xd0/0xd0 [ 157.845672][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 157.845698][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 157.845719][ C1] ? _raw_spin_unlock+0x40/0x40 [ 157.845735][ C1] ? slab_free_freelist_hook+0x133/0x1b0 [ 157.845762][ C1] ? kobject_put+0x25c/0x450 [ 157.845789][ C1] ? vub300_inactivity_timer_expired+0x190/0x3e0 [ 157.902072][ T4320] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.906993][ C1] ? call_timer_fn+0x1ac/0x670 [ 157.907025][ C1] ? __flush_work+0x109/0xac0 [ 157.907045][ C1] __flush_work+0x142/0xac0 [ 157.907065][ C1] ? flush_work+0x20/0x20 [ 157.907084][ C1] ? __timer_delete+0x6c/0x220 [ 157.907105][ C1] ? mark_lock+0x94/0x320 [ 157.940996][ T4320] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.943043][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 157.943079][ C1] ? mod_delayed_work_on+0x1b0/0x1b0 [ 157.987456][ C1] ? lock_chain_count+0x20/0x20 [ 157.992362][ C1] ? kasan_quarantine_put+0xd4/0x210 [ 157.993779][ T4320] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 157.997677][ C1] ? __cancel_work_timer+0x36a/0x560 [ 157.997706][ C1] __cancel_work_timer+0x3f4/0x560 [ 158.018195][ C1] ? cancel_work_sync+0x20/0x20 [ 158.023089][ C1] ? kobject_put+0x25c/0x450 [ 158.027767][ C1] ? __kmem_cache_free+0xb6/0x200 [ 158.032834][ C1] ? kobject_put+0x41d/0x450 [ 158.033762][ T4282] rc_core: IR keymap rc-imon-pad not found [ 158.037463][ C1] mmc_free_host+0x15/0x40 [ 158.043275][ T4282] Registered IR keymap rc-empty [ 158.047691][ C1] call_timer_fn+0x1ac/0x670 [ 158.047715][ C1] ? kref_get+0x70/0x70 [ 158.047747][ C1] ? call_timer_fn+0xcf/0x670 [ 158.047766][ C1] ? __run_timers+0x810/0x810 [ 158.047787][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 158.047806][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 158.047834][ C1] ? kref_get+0x70/0x70 [ 158.047862][ C1] __run_timers+0x56c/0x810 [ 158.070610][ T4320] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.070866][ C1] ? detach_timer+0x350/0x350 [ 158.082667][ T4282] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 158.085436][ C1] ? lock_chain_count+0x20/0x20 [ 158.085473][ C1] run_timer_softirq+0x63/0xf0 [ 158.085494][ C1] handle_softirqs+0x291/0x910 [ 158.099608][ T4320] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 158.104359][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 158.104396][ C1] ? do_softirq+0x210/0x210 [ 158.104412][ C1] ? hrtimer_interrupt+0x775/0x980 [ 158.104438][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 158.104459][ C1] __irq_exit_rcu+0x13b/0x230 [ 158.104481][ C1] ? irq_exit_rcu+0x20/0x20 [ 158.111202][ T4282] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 158.120836][ C1] irq_exit_rcu+0x5/0x20 [ 158.120867][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 158.120897][ C1] [ 158.120904][ C1] [ 158.120910][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 158.120932][ C1] RIP: 0010:lock_acquire+0x226/0x4a0 [ 158.120962][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 ef 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 158.120979][ C1] RSP: 0018:ffffc9000c7d7580 EFLAGS: 00000206 [ 158.120999][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 767d271f86ec5300 [ 158.121013][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c2a20 RDI: ffffffff8adf6de0 [ 158.121026][ C1] RBP: ffffc9000c7d7688 R08: dffffc0000000000 R09: 1ffffffff2166648 [ 158.121042][ C1] R10: dffffc0000000000 R11: fffffbfff2166649 R12: 1ffff920018faebc [ 158.131278][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.135457][ C1] R13: 0000000000000001 R14: 0000000000000246 R15: dffffc0000000000 [ 158.135489][ C1] ? read_lock_is_recursive+0x10/0x10 [ 158.135528][ C1] folio_memcg_lock+0x9e/0x320 [ 158.150965][ T4282] imon:send_packet: packet tx failed (-71) [ 158.153930][ C1] ? folio_memcg_lock+0x7d/0x320 [ 158.153962][ C1] ? folio_memcg_lock+0x7d/0x320 [ 158.153986][ C1] ? mem_cgroup_get_oom_group+0x350/0x350 [ 158.154011][ C1] ? folio_mark_accessed+0x329/0x14e0 [ 158.225327][ T4282] imon 3-1:0.0: remote input dev register failed [ 158.229604][ C1] ? folio_activate_fn+0x1ff0/0x1ff0 [ 158.277762][ T4282] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 158.283806][ C1] page_remove_rmap+0x2e/0xef0 [ 158.283838][ C1] unmap_page_range+0x10db/0x25b0 [ 158.283880][ C1] unmap_vmas+0x260/0x390 [ 158.283908][ C1] ? unmap_vmas+0x1bd/0x390 [ 158.319981][ T4322] hub 5-1:0.0: activate --> -90 [ 158.320910][ C1] ? unmap_page_range+0x25b0/0x25b0 [ 158.320951][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 158.373567][ C1] exit_mmap+0x20d/0x970 [ 158.377873][ C1] ? vm_brk+0x20/0x20 [ 158.381907][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 158.387587][ C1] ? exit_mm+0x23d/0x350 [ 158.391902][ C1] ? uprobe_clear_state+0x274/0x290 [ 158.397204][ C1] __mmput+0x118/0x3a0 [ 158.398711][ T4320] usb 2-1: GET_CAPABILITIES returned 0 [ 158.401656][ C1] exit_mm+0x24d/0x350 [ 158.411280][ C1] ? sysctl_delayacct+0x220/0x220 [ 158.412548][ T4320] usbtmc 2-1:16.0: can't read capabilities [ 158.416339][ C1] ? do_exit+0x2570/0x2570 [ 158.416372][ C1] ? tty_audit_exit+0x149/0x1f0 [ 158.416397][ C1] do_exit+0x958/0x2570 [ 158.435776][ C1] ? put_task_struct+0x80/0x80 [ 158.440592][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 158.446640][ C1] ? lock_chain_count+0x20/0x20 [ 158.451543][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 158.456721][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 158.461958][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 158.467380][ C1] do_group_exit+0x229/0x2e0 [ 158.472025][ C1] __x64_sys_exit_group+0x3b/0x40 [ 158.477101][ C1] do_syscall_64+0x4c/0xa0 [ 158.481557][ C1] ? clear_bhb_loop+0x60/0xb0 [ 158.486278][ C1] ? clear_bhb_loop+0x60/0xb0 [ 158.491000][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.496942][ C1] RIP: 0033:0x7f7b1d9466c5 [ 158.501386][ C1] Code: Unable to access opcode bytes at 0x7f7b1d94669b. [ 158.508427][ C1] RSP: 002b:00007ffc6c346e38 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 158.516879][ C1] RAX: ffffffffffffffda RBX: 00007ffc6c347104 RCX: 00007f7b1d9466c5 [ 158.524888][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 158.532898][ C1] RBP: 0000000000000003 R08: 00007ffc6c346f30 R09: 0000000000000002 [ 158.540438][ T130] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 158.540893][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 158.549512][ T4320] usb 5-1: USB disconnect, device number 7 [ 158.555905][ C1] R13: 00007ffc6c347170 R14: 00007f7b1db4e000 R15: 0000558045feed98 [ 158.555930][ C1] [ 158.555997][ C1] ODEBUG: object ffffc900001e09a0 is NOT on stack ffffc9000c7d0000, but annotated. [ 158.557192][ C1] ------------[ cut here ]------------ [ 158.587682][ C1] WARNING: CPU: 1 PID: 6161 at lib/debugobjects.c:558 __debug_object_init+0x18e/0x440 [ 158.597300][ C1] Modules linked in: [ 158.601238][ C1] CPU: 1 PID: 6161 Comm: dhcpcd-run-hook Tainted: G W syzkaller #0 [ 158.610558][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 158.620653][ C1] RIP: 0010:__debug_object_init+0x18e/0x440 [ 158.626624][ C1] Code: 24 04 74 2f 41 ff c6 44 89 35 be 2b df 12 48 c7 c1 80 76 df 8a 48 c7 c7 e0 76 df 8a 84 c0 48 0f 45 f9 48 89 de e8 32 6c 0d 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 158.646282][ C1] RSP: 0018:ffffc900001e0908 EFLAGS: 00010046 [ 158.652402][ C1] RAX: 0000000000000050 RBX: ffffc900001e09a0 RCX: 767d271f86ec5300 [ 158.660413][ C1] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 158.668423][ C1] RBP: dffffc0000000000 R08: ffffffff8cb21a23 R09: 1ffffffff1964344 [ 158.676442][ C1] R10: dffffc0000000000 R11: fffffbfff1964345 R12: ffff8880274d9e20 [ 158.684455][ C1] R13: ffff88802c917738 R14: 0000000000000001 R15: ffffffff8a8d31c0 [ 158.692466][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 158.700351][ T4322] usb 2-1: USB disconnect, device number 7 [ 158.701417][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.701437][ C1] CR2: 00007f7b1da487d0 CR3: 000000004d415000 CR4: 00000000003506e0 [ 158.721861][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 158.729874][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 158.737884][ C1] Call Trace: [ 158.741206][ C1] [ 158.744087][ C1] __synchronize_srcu+0x227/0x350 [ 158.749255][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 158.755026][ C1] ? _raw_spin_unlock+0x40/0x40 [ 158.759915][ C1] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 158.765508][ C1] ? synchronize_srcu+0x18f/0x1b0 [ 158.770583][ C1] wakeup_source_unregister+0x112/0x190 [ 158.776199][ C1] mmc_host_classdev_release+0x43/0xf0 [ 158.781708][ C1] ? mmc_free_host+0x40/0x40 [ 158.786361][ C1] device_release+0x92/0x1c0 [ 158.790984][ C1] kobject_put+0x217/0x450 [ 158.795446][ C1] call_timer_fn+0x1ac/0x670 [ 158.800108][ C1] ? kref_get+0x70/0x70 [ 158.804309][ C1] ? call_timer_fn+0xcf/0x670 [ 158.809030][ C1] ? __run_timers+0x810/0x810 [ 158.813763][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 158.818998][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 158.824238][ C1] ? kref_get+0x70/0x70 [ 158.828440][ C1] __run_timers+0x56c/0x810 [ 158.832987][ C1] ? detach_timer+0x350/0x350 [ 158.837711][ C1] ? lock_chain_count+0x20/0x20 [ 158.842617][ C1] run_timer_softirq+0x63/0xf0 [ 158.847430][ C1] handle_softirqs+0x291/0x910 [ 158.852244][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 158.857141][ C1] ? do_softirq+0x210/0x210 [ 158.861679][ C1] ? hrtimer_interrupt+0x775/0x980 [ 158.866846][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 158.872093][ C1] __irq_exit_rcu+0x13b/0x230 [ 158.876802][ C1] ? irq_exit_rcu+0x20/0x20 [ 158.881346][ C1] irq_exit_rcu+0x5/0x20 [ 158.885631][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 158.891323][ C1] [ 158.894281][ C1] [ 158.897251][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 158.903284][ C1] RIP: 0010:lock_acquire+0x226/0x4a0 [ 158.908796][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 ef 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 158.928448][ C1] RSP: 0018:ffffc9000c7d7580 EFLAGS: 00000206 [ 158.934568][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 767d271f86ec5300 [ 158.942578][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c2a20 RDI: ffffffff8adf6de0 [ 158.950584][ C1] RBP: ffffc9000c7d7688 R08: dffffc0000000000 R09: 1ffffffff2166648 [ 158.958686][ C1] R10: dffffc0000000000 R11: fffffbfff2166649 R12: 1ffff920018faebc [ 158.966697][ C1] R13: 0000000000000001 R14: 0000000000000246 R15: dffffc0000000000 [ 158.974726][ C1] ? read_lock_is_recursive+0x10/0x10 [ 158.980160][ C1] folio_memcg_lock+0x9e/0x320 [ 158.984975][ C1] ? folio_memcg_lock+0x7d/0x320 [ 158.989963][ C1] ? folio_memcg_lock+0x7d/0x320 [ 158.994954][ C1] ? mem_cgroup_get_oom_group+0x350/0x350 [ 159.000721][ C1] ? folio_mark_accessed+0x329/0x14e0 [ 159.006142][ C1] ? folio_activate_fn+0x1ff0/0x1ff0 [ 159.011493][ C1] page_remove_rmap+0x2e/0xef0 [ 159.016333][ C1] unmap_page_range+0x10db/0x25b0 [ 159.021431][ C1] unmap_vmas+0x260/0x390 [ 159.025819][ C1] ? unmap_vmas+0x1bd/0x390 [ 159.030374][ C1] ? unmap_page_range+0x25b0/0x25b0 [ 159.035651][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 159.040729][ C1] exit_mmap+0x20d/0x970 [ 159.045041][ C1] ? vm_brk+0x20/0x20 [ 159.049084][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 159.054797][ C1] ? exit_mm+0x23d/0x350 [ 159.059092][ C1] ? uprobe_clear_state+0x274/0x290 [ 159.064344][ C1] __mmput+0x118/0x3a0 [ 159.068452][ C1] exit_mm+0x24d/0x350 [ 159.072604][ C1] ? sysctl_delayacct+0x220/0x220 [ 159.077684][ C1] ? do_exit+0x2570/0x2570 [ 159.082171][ C1] ? tty_audit_exit+0x149/0x1f0 [ 159.087086][ C1] do_exit+0x958/0x2570 [ 159.091296][ C1] ? put_task_struct+0x80/0x80 [ 159.096108][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 159.102144][ C1] ? lock_chain_count+0x20/0x20 [ 159.107053][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 159.112145][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 159.117402][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 159.122791][ C1] do_group_exit+0x229/0x2e0 [ 159.127445][ C1] __x64_sys_exit_group+0x3b/0x40 [ 159.132696][ C1] do_syscall_64+0x4c/0xa0 [ 159.137164][ C1] ? clear_bhb_loop+0x60/0xb0 [ 159.141895][ C1] ? clear_bhb_loop+0x60/0xb0 [ 159.146622][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.152557][ C1] RIP: 0033:0x7f7b1d9466c5 [ 159.157038][ C1] Code: Unable to access opcode bytes at 0x7f7b1d94669b. [ 159.164094][ C1] RSP: 002b:00007ffc6c346e38 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 159.172552][ C1] RAX: ffffffffffffffda RBX: 00007ffc6c347104 RCX: 00007f7b1d9466c5 [ 159.180654][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 159.188665][ C1] RBP: 0000000000000003 R08: 00007ffc6c346f30 R09: 0000000000000002 [ 159.196684][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 159.204698][ C1] R13: 00007ffc6c347170 R14: 00007f7b1db4e000 R15: 0000558045feed98 [ 159.212809][ C1] [ 159.215877][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 159.223185][ C1] CPU: 1 PID: 6161 Comm: dhcpcd-run-hook Tainted: G W syzkaller #0 [ 159.232501][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 159.242924][ C1] Call Trace: [ 159.246233][ C1] [ 159.249113][ C1] dump_stack_lvl+0x188/0x24e [ 159.253857][ C1] ? memcpy+0x3c/0x60 [ 159.257967][ C1] ? show_regs_print_info+0x12/0x12 [ 159.263242][ C1] ? load_image+0x410/0x410 [ 159.267806][ C1] panic+0x2d3/0x710 [ 159.271759][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 159.276400][ C1] __warn+0x2f8/0x4f0 [ 159.280461][ C1] ? __debug_object_init+0x18e/0x440 [ 159.285797][ C1] ? __debug_object_init+0x18e/0x440 [ 159.291131][ C1] report_bug+0x2ba/0x4f0 [ 159.295509][ C1] ? __debug_object_init+0x18e/0x440 [ 159.300838][ C1] handle_bug+0x3a/0x70 [ 159.305041][ C1] exc_invalid_op+0x16/0x40 [ 159.309641][ C1] asm_exc_invalid_op+0x16/0x20 [ 159.314535][ C1] RIP: 0010:__debug_object_init+0x18e/0x440 [ 159.320496][ C1] Code: 24 04 74 2f 41 ff c6 44 89 35 be 2b df 12 48 c7 c1 80 76 df 8a 48 c7 c7 e0 76 df 8a 84 c0 48 0f 45 f9 48 89 de e8 32 6c 0d 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 159.340137][ C1] RSP: 0018:ffffc900001e0908 EFLAGS: 00010046 [ 159.346574][ C1] RAX: 0000000000000050 RBX: ffffc900001e09a0 RCX: 767d271f86ec5300 [ 159.354567][ C1] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 159.362577][ C1] RBP: dffffc0000000000 R08: ffffffff8cb21a23 R09: 1ffffffff1964344 [ 159.370560][ C1] R10: dffffc0000000000 R11: fffffbfff1964345 R12: ffff8880274d9e20 [ 159.378633][ C1] R13: ffff88802c917738 R14: 0000000000000001 R15: ffffffff8a8d31c0 [ 159.386719][ C1] ? __debug_object_init+0x18e/0x440 [ 159.392031][ C1] __synchronize_srcu+0x227/0x350 [ 159.397119][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 159.402886][ C1] ? _raw_spin_unlock+0x40/0x40 [ 159.407752][ C1] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 159.413417][ C1] ? synchronize_srcu+0x18f/0x1b0 [ 159.418478][ C1] wakeup_source_unregister+0x112/0x190 [ 159.424079][ C1] mmc_host_classdev_release+0x43/0xf0 [ 159.429584][ C1] ? mmc_free_host+0x40/0x40 [ 159.434234][ C1] device_release+0x92/0x1c0 [ 159.438867][ C1] kobject_put+0x217/0x450 [ 159.443295][ C1] call_timer_fn+0x1ac/0x670 [ 159.447892][ C1] ? kref_get+0x70/0x70 [ 159.452081][ C1] ? call_timer_fn+0xcf/0x670 [ 159.456765][ C1] ? __run_timers+0x810/0x810 [ 159.461452][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 159.466672][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 159.471930][ C1] ? kref_get+0x70/0x70 [ 159.476130][ C1] __run_timers+0x56c/0x810 [ 159.480696][ C1] ? detach_timer+0x350/0x350 [ 159.485510][ C1] ? lock_chain_count+0x20/0x20 [ 159.490391][ C1] run_timer_softirq+0x63/0xf0 [ 159.495209][ C1] handle_softirqs+0x291/0x910 [ 159.500006][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 159.504874][ C1] ? do_softirq+0x210/0x210 [ 159.509408][ C1] ? hrtimer_interrupt+0x775/0x980 [ 159.514555][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 159.519786][ C1] __irq_exit_rcu+0x13b/0x230 [ 159.524481][ C1] ? irq_exit_rcu+0x20/0x20 [ 159.529099][ C1] irq_exit_rcu+0x5/0x20 [ 159.533364][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 159.539049][ C1] [ 159.541995][ C1] [ 159.544947][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 159.551156][ C1] RIP: 0010:lock_acquire+0x226/0x4a0 [ 159.556471][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 ef 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 159.576119][ C1] RSP: 0018:ffffc9000c7d7580 EFLAGS: 00000206 [ 159.582312][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 767d271f86ec5300 [ 159.590299][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c2a20 RDI: ffffffff8adf6de0 [ 159.598304][ C1] RBP: ffffc9000c7d7688 R08: dffffc0000000000 R09: 1ffffffff2166648 [ 159.606323][ C1] R10: dffffc0000000000 R11: fffffbfff2166649 R12: 1ffff920018faebc [ 159.614371][ C1] R13: 0000000000000001 R14: 0000000000000246 R15: dffffc0000000000 [ 159.622383][ C1] ? read_lock_is_recursive+0x10/0x10 [ 159.627781][ C1] folio_memcg_lock+0x9e/0x320 [ 159.632575][ C1] ? folio_memcg_lock+0x7d/0x320 [ 159.637546][ C1] ? folio_memcg_lock+0x7d/0x320 [ 159.642499][ C1] ? mem_cgroup_get_oom_group+0x350/0x350 [ 159.648241][ C1] ? folio_mark_accessed+0x329/0x14e0 [ 159.653657][ C1] ? folio_activate_fn+0x1ff0/0x1ff0 [ 159.658981][ C1] page_remove_rmap+0x2e/0xef0 [ 159.663771][ C1] unmap_page_range+0x10db/0x25b0 [ 159.668859][ C1] unmap_vmas+0x260/0x390 [ 159.673209][ C1] ? unmap_vmas+0x1bd/0x390 [ 159.677735][ C1] ? unmap_page_range+0x25b0/0x25b0 [ 159.682955][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 159.688002][ C1] exit_mmap+0x20d/0x970 [ 159.692294][ C1] ? vm_brk+0x20/0x20 [ 159.696305][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 159.701993][ C1] ? exit_mm+0x23d/0x350 [ 159.706286][ C1] ? uprobe_clear_state+0x274/0x290 [ 159.711567][ C1] __mmput+0x118/0x3a0 [ 159.715708][ C1] exit_mm+0x24d/0x350 [ 159.719837][ C1] ? sysctl_delayacct+0x220/0x220 [ 159.724898][ C1] ? do_exit+0x2570/0x2570 [ 159.729364][ C1] ? tty_audit_exit+0x149/0x1f0 [ 159.734246][ C1] do_exit+0x958/0x2570 [ 159.738468][ C1] ? put_task_struct+0x80/0x80 [ 159.743256][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 159.749286][ C1] ? lock_chain_count+0x20/0x20 [ 159.754173][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 159.759240][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 159.764463][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 159.769881][ C1] do_group_exit+0x229/0x2e0 [ 159.774513][ C1] __x64_sys_exit_group+0x3b/0x40 [ 159.779593][ C1] do_syscall_64+0x4c/0xa0 [ 159.784052][ C1] ? clear_bhb_loop+0x60/0xb0 [ 159.788780][ C1] ? clear_bhb_loop+0x60/0xb0 [ 159.793527][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.799464][ C1] RIP: 0033:0x7f7b1d9466c5 [ 159.803904][ C1] Code: Unable to access opcode bytes at 0x7f7b1d94669b. [ 159.810964][ C1] RSP: 002b:00007ffc6c346e38 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 159.819384][ C1] RAX: ffffffffffffffda RBX: 00007ffc6c347104 RCX: 00007f7b1d9466c5 [ 159.827391][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 159.835475][ C1] RBP: 0000000000000003 R08: 00007ffc6c346f30 R09: 0000000000000002 [ 159.843485][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 159.851498][ C1] R13: 00007ffc6c347170 R14: 00007f7b1db4e000 R15: 0000558045feed98 [ 159.859509][ C1] [ 159.863116][ C1] Kernel Offset: disabled [ 159.867481][ C1] Rebooting in 86400 seconds..