last executing test programs: 5.210391764s ago: executing program 1 (id=2): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002500000008000300", @ANYRES32=r2, @ANYBLOB="080026006c0900000a0006000802110000000000080035"], 0x44}}, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0) 4.55167187s ago: executing program 4 (id=5): io_setup(0x8, &(0x7f0000000540)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x791, r1, &(0x7f0000000240)="01", 0x1, 0x400}]) 4.208193448s ago: executing program 4 (id=6): pipe(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000890}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000007c0)) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffb]}, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f00001c0000/0x4000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mount$fuse(0x0, 0x0, 0x0, 0x80b2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) 4.104539851s ago: executing program 3 (id=4): r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8a16, 0x3a10, 0x3, 0x31d}, &(0x7f0000000500)=0x0, &(0x7f0000000580)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000240)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f0000000240)={0x0, 0x1e6c, 0x0, 0x2, 0x69}, 0x1) 4.078599332s ago: executing program 0 (id=1): ppoll(0x0, 0x0, 0x0, &(0x7f00000004c0)={[0x6]}, 0x8) 3.838932788s ago: executing program 3 (id=7): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @local}) 3.791945019s ago: executing program 4 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x2c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_STATUS_MASK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44010}, 0x20000000) 3.646625922s ago: executing program 4 (id=10): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) unshare(0x24060400) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000005c0)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.646494252s ago: executing program 2 (id=11): syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @empty, @multicast1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, 0x0) 3.558289084s ago: executing program 2 (id=12): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="5c05cf", 0x3}], 0x1}, 0x810) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 3.449287607s ago: executing program 2 (id=13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) 3.102307445s ago: executing program 0 (id=14): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040480b03100001000000010902390002010080fa0904000000ff0000000904010000ff0000000904010103ff0000000705010240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) madvise(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2.517955909s ago: executing program 2 (id=15): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) landlock_restrict_self(r1, 0x9) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r1, 0x5) landlock_restrict_self(r1, 0xa) landlock_restrict_self(r0, 0xe) landlock_restrict_self(r0, 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 2.10650453s ago: executing program 1 (id=16): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x4, 0x6, 0x185e34f6}}, 0x28) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) capget(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000741000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00007dc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006de000/0x3000)=nil, &(0x7f00004d3000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xb, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) write$binfmt_elf64(r3, 0x0, 0xfffffe3e) pipe2(0x0, 0x0) 1.730626248s ago: executing program 1 (id=17): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04"], 0x12) 1.062807825s ago: executing program 2 (id=18): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7fff, 0x41, &(0x7f0000000980)='$', 0x1, 0x0, 0x9, 0xffffffff, 0x5, 0x6, 0x0}) 1.062497825s ago: executing program 3 (id=19): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'macsec0\x00', 0x3}, 0x18) 994.150126ms ago: executing program 2 (id=20): syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f0100000000000000000009058103400000000009"], 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)) 959.246037ms ago: executing program 1 (id=21): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010860f04bd000000000000000500000a44000000090a01"], 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 877.686569ms ago: executing program 3 (id=22): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f00000001c0)=0x1, 0x4) 843.11693ms ago: executing program 3 (id=23): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac070000", @ANYRES16, @ANYBLOB="010000000000000000083900000008000300", @ANYRES32, @ANYBLOB="0c009900b90700002400000014005a8010000180050001000c00000004000200cc025a8048000080140003000a00ff0105000a0001000600ff7f01801c00010036604848180903120b1636016c0c6030180f48360403044814000500070003008d000200ff004900010080002800018014000500010003000101100008e3bb0e80ff0c00050004000000000005000600000000004000008005000600000000000500070000000000050006000200000005000600000000001400050004002e000600e90002006b040400040005000600000000000c0001800600010004160000b40003801400030009000004810009002a8be5000100000005000400000000001b00010002161b054804021603182030040209061b0c0b16481212000500010009000000050006000200000005000700000000000500070000000000500002006a083e3f4a442306501456021130334548111c73534115012f2833313a0e1034301e0d0f4137483840303a513d4a433f1b37323c280e484804181f264d2a5513344c064b452b12571156492008000100190648360400028090000080500002000a2b48094a070e4618433c4e303110181734463b0741392003204e52294c325623232905074d2d032b0d5005104a4919015730004e4e533931242229132933183b3c10542a56214e2009261e14000300400000010400807f0000070010589c1305000600010000001f0002000d5124090f0428011534444537154c104e44003b034e09024d404c007000028014000500020012090400020013000100000009000a0001001b0112010b12000005000600010000000500070002000000170001003602006c01362f06180048037e361b126c2418001400050008000800a4d8009504000100000032bf050004000200000005000400000000002000018006000100034800001400030081000480540000010200040081000200340001800500070000000000140002002325424d1c0b3e120b1d411c4420275314000300fc0009000a000900090003000400ea00e0015a807c0002801400030004000300018001008000020007000400050004000100000014000300400007000800ff07000801000a000700050004000200000010000100092416020b05160201606c050900010018181206240000000500040002000000140003000800080001000400020006000180050005000400020000000c00008005000400020000008c00028005000400020000002b0002004509411c53223e2c190b40382a4148394e11004e1249301d101729340f1a1d4f084340402a11340014000500f0000300070081000500600807000d0005000600020000000b0002004f390b4007031a000500070001000000190001000102360302046c60243002216c60063024063018770000000500040002000000c80001801400030004000b000a0000800600000065250600140005000d0005008400ffff00080000060000801400030002000000ff000000ff030100010000000500060000000000140003000b000400ff0108000500ea00310e000450000200200f544f1c211c482e1e2e1c464c4f19215435361a4b3e76034f322e283936091f4b3b3c171b294b1f1a3b38380514011a0a01364554054d264b39341131463a3d305720264c5a2c5051230e1c0002001336401e4207080c111518004834303a05393a060a54462800015a80880001800500040002000000140003003102c83a0600feff170c0010050004000500060000000000130001006c360530240b00300b020c7424240500050004000200000005000600010000003b00020040072d0422105353461827111710110243013c5029262121113f384f334f2a46411749192602290d172146021e481003533a131f4d380e002c000180090002004211304e3e00000014000500bd1b0500d4c1fdff06006e00010400800500060000000000480002801400030001010100ff7f070000047f00feff03001400030009000700ce00ff7f03000800f7ff05000f000100024818600530096044161200050004000000000004000100c4015a809c000180140005000000008007000500010002000800000014000500040001800001faffca0d0104010005002000020031081f08472045451f290445033e2244130c0b3a213a541d533b3014170001001b3016004860123636016c482418650b246c240014000500f700a509050007000700020007000500050006000000000005000700010000001400050006000600060008006fe288000500200088000180140005000800090010000e00ffff0700d58e0700050007000100000014000300080007000f0008000400c4009805ff0714000500ff7f090001000d0007000b0007000800140005000000001004000300ff7fff03060080002a000200132d150b085133481f3723033a372a3c3037510a1842120443483533570e45362b1d2e31503100009c000080"], 0x7ac}, 0x1, 0x0, 0x0, 0x20004810}, 0x10) mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x1) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffeb9, &(0x7f0000000340)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x10, 0x2, 0x13}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x6, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x4}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xffffe512}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 764.388251ms ago: executing program 4 (id=24): ppoll(0x0, 0x0, 0x0, &(0x7f00000004c0)={[0x6]}, 0x8) 681.660884ms ago: executing program 3 (id=25): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x6, 0x1}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="015ee0003c"], 0x20) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100), 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r4 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000002700010000000000000000000a0001000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x40000) syz_clone(0x800080, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="a2126a019884dc446cc2") io_uring_setup(0x68e4, 0x0) mq_open(0x0, 0x8c2, 0x30, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) 610.958085ms ago: executing program 1 (id=26): rt_sigtimedwait(&(0x7f00000000c0)={[0xe]}, 0x0, 0x0, 0x8) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0xe) 0s ago: executing program 0 (id=27): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r2 = syz_usb_connect(0x5, 0x2d, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(0x0, 0x5, 0x40) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000000)={0xfe, 0x1f, 0x0, 0xc0, "d57ba4b0cef17e817d96b58200bd40ed0000240ec7dc1d0000000000004f24b3"}) socket$inet(0x2, 0x4000000000000001, 0x0) fsopen(0x0, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) unshare(0x2040400) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x73f8, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. syzkaller login: [ 75.089988][ T4260] cgroup: Unknown subsys name 'net' [ 75.194531][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.767070][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 78.299574][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.307984][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.321511][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.334537][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.359364][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.367479][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.369715][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.378712][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.385331][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.397036][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.398772][ T4290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.407615][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.418670][ T4290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.422783][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.429395][ T4290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.434223][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.447123][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.455086][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.456161][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.464218][ T4290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.470601][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.477344][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.483724][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.496738][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.499357][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.507399][ T4290] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.512301][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.524369][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.532442][ T4290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.540378][ T4290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.112026][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 79.144221][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 79.169163][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 79.274614][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 79.328499][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 79.343578][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.351527][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.360287][ T4281] device bridge_slave_0 entered promiscuous mode [ 79.376241][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.383683][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.392111][ T4281] device bridge_slave_1 entered promiscuous mode [ 79.421656][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.429242][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.438039][ T4284] device bridge_slave_0 entered promiscuous mode [ 79.452326][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.459530][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.468217][ T4284] device bridge_slave_1 entered promiscuous mode [ 79.519787][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.527222][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.535165][ T4273] device bridge_slave_0 entered promiscuous mode [ 79.544391][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.580104][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.587579][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.595612][ T4273] device bridge_slave_1 entered promiscuous mode [ 79.604291][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.618257][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.665656][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.675115][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.686235][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.694141][ T4280] device bridge_slave_0 entered promiscuous mode [ 79.728398][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.735586][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.744381][ T4280] device bridge_slave_1 entered promiscuous mode [ 79.754119][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.769851][ T4281] team0: Port device team_slave_0 added [ 79.775917][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.783913][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.792581][ T4274] device bridge_slave_0 entered promiscuous mode [ 79.816902][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.827454][ T4281] team0: Port device team_slave_1 added [ 79.840480][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.851396][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.859627][ T4274] device bridge_slave_1 entered promiscuous mode [ 79.884222][ T4284] team0: Port device team_slave_0 added [ 79.905617][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.927366][ T4284] team0: Port device team_slave_1 added [ 79.935802][ T4273] team0: Port device team_slave_0 added [ 79.946472][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.953536][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.980223][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.999384][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.007125][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.033641][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.054229][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.068041][ T4273] team0: Port device team_slave_1 added [ 80.092088][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.132180][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.150783][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.157820][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.184355][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.203527][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.212876][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.239614][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.257869][ T4280] team0: Port device team_slave_0 added [ 80.272654][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.279763][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.315647][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.357527][ T4280] team0: Port device team_slave_1 added [ 80.373637][ T4274] team0: Port device team_slave_0 added [ 80.381003][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.388649][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.415351][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.431714][ T4281] device hsr_slave_0 entered promiscuous mode [ 80.438883][ T4281] device hsr_slave_1 entered promiscuous mode [ 80.456288][ T4284] device hsr_slave_0 entered promiscuous mode [ 80.463862][ T4284] device hsr_slave_1 entered promiscuous mode [ 80.470742][ T4284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.479021][ T4284] Cannot create hsr debugfs directory [ 80.485687][ T4274] team0: Port device team_slave_1 added [ 80.523340][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.530408][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.557094][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.590813][ T4273] device hsr_slave_0 entered promiscuous mode [ 80.598033][ T4273] device hsr_slave_1 entered promiscuous mode [ 80.604778][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.612557][ T4273] Cannot create hsr debugfs directory [ 80.622159][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.629024][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 80.629378][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 80.635344][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 80.648126][ T4275] Bluetooth: hci2: command 0x0409 tx timeout [ 80.654798][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.681451][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.706422][ T4275] Bluetooth: hci1: command 0x0409 tx timeout [ 80.734387][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.741651][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.768029][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.780918][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.788123][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.814107][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.907891][ T4280] device hsr_slave_0 entered promiscuous mode [ 80.915249][ T4280] device hsr_slave_1 entered promiscuous mode [ 80.922220][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.929904][ T4280] Cannot create hsr debugfs directory [ 80.978593][ T4274] device hsr_slave_0 entered promiscuous mode [ 80.985430][ T4274] device hsr_slave_1 entered promiscuous mode [ 80.992668][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.000358][ T4274] Cannot create hsr debugfs directory [ 81.275443][ T4284] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.300815][ T4284] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.310794][ T4284] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.322193][ T4284] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.391743][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.412242][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.428383][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.438992][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.483392][ T4280] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.497694][ T4280] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.531943][ T4280] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.558904][ T4280] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.599372][ T4274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.611101][ T4274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.624195][ T4274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.645983][ T4274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.667368][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.735871][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.751696][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.780098][ T4281] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.790443][ T4281] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.801957][ T4281] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.814222][ T4281] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.844982][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.880346][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.889728][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.899434][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.906804][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.940714][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.951896][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.964664][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.973813][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.982977][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.990164][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.000544][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.009739][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.019154][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.029538][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.039120][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.092709][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.101950][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.111992][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.120882][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.135675][ T4284] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.147122][ T4284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.162859][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.175480][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.185658][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.195725][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.204675][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.213554][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.242291][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.262016][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.279628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.301025][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.308258][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.318036][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.327172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.335793][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.342980][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.352731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.385819][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.409525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.419251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.441830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.452890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.485559][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.495628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.505855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.518022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.527672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.535690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.544775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.554815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.574576][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.589168][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.613081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.621719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.632254][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.646822][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.663519][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.677244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.686900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.695518][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.702750][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.710428][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 82.713106][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 82.716779][ T4275] Bluetooth: hci3: command 0x041b tx timeout [ 82.716811][ T4275] Bluetooth: hci2: command 0x041b tx timeout [ 82.738193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.747392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.755978][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.763234][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.786832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.787045][ T49] Bluetooth: hci1: command 0x041b tx timeout [ 82.809268][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.819030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.828238][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.835441][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.861376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.870264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.880709][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.903640][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.928103][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.935282][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.983972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.009708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.020322][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.032630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.042065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.051327][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.063445][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.073557][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.102954][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.117621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.127335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.142452][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.153769][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.168505][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.177330][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.185990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.204687][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.227732][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.264165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.278540][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.298504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.326362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.333956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.362601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.377794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.392920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.403458][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.410683][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.434387][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.453904][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.487499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.502690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.537830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.559185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.582364][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.608225][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.623349][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.632642][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.639851][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.649181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.669776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.716530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.725490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.756695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.764251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.823577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.846679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.872979][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.908630][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.927348][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.958033][ T4281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.996304][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.044212][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.077580][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.099891][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.120783][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.135537][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.179174][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.197341][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.282077][ T4273] device veth0_vlan entered promiscuous mode [ 84.301392][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.325455][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.362039][ T4273] device veth1_vlan entered promiscuous mode [ 84.391614][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.405370][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.433351][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.471897][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.480540][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.530574][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.580371][ T4273] device veth0_macvtap entered promiscuous mode [ 84.589317][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.599167][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.609052][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.619257][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.628603][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.636613][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.645436][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.672494][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.683812][ T4273] device veth1_macvtap entered promiscuous mode [ 84.694161][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.707424][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.722882][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.754727][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.786312][ T49] Bluetooth: hci0: command 0x040f tx timeout [ 84.792394][ T49] Bluetooth: hci4: command 0x040f tx timeout [ 84.798888][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 84.798910][ T4275] Bluetooth: hci2: command 0x040f tx timeout [ 84.821978][ T4284] device veth0_vlan entered promiscuous mode [ 84.844717][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.854214][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.868404][ T4275] Bluetooth: hci1: command 0x040f tx timeout [ 84.878093][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.892904][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.909922][ T4284] device veth1_vlan entered promiscuous mode [ 84.924635][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.943353][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.952206][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.961315][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.971547][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.981497][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.010883][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.042173][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.053902][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.063729][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.073255][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.081295][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.092192][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.101211][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.110926][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.120964][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.137973][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.148266][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.159888][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.168843][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.178292][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.191562][ T4280] device veth0_vlan entered promiscuous mode [ 85.202464][ T4284] device veth0_macvtap entered promiscuous mode [ 85.213037][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.223539][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.232059][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.240907][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.249588][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.276491][ T4274] device veth0_vlan entered promiscuous mode [ 85.292923][ T4284] device veth1_macvtap entered promiscuous mode [ 85.302130][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.310900][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.319217][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.329089][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.351041][ T4274] device veth1_vlan entered promiscuous mode [ 85.383502][ T4280] device veth1_vlan entered promiscuous mode [ 85.438918][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.453468][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.473010][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.503241][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.518707][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.528015][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.537294][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.545915][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.555218][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.571130][ T4281] device veth0_vlan entered promiscuous mode [ 85.585094][ T4274] device veth0_macvtap entered promiscuous mode [ 85.608988][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.622089][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.630595][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.640596][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.651460][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.663372][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.678888][ T4281] device veth1_vlan entered promiscuous mode [ 85.694020][ T4274] device veth1_macvtap entered promiscuous mode [ 85.708910][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.721166][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.737922][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.751613][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.760811][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.769805][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.782309][ T4284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.791780][ T4284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.800866][ T4284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.810216][ T4284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.823960][ T4280] device veth0_macvtap entered promiscuous mode [ 85.849513][ T4280] device veth1_macvtap entered promiscuous mode [ 85.861174][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.874716][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.890584][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.900633][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.910431][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.918765][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.942111][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.959999][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.971550][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.983992][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.997768][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.015248][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.026209][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.038711][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.049456][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.061792][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.073087][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.082364][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.093606][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.103692][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.130832][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.141259][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.154386][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.163629][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.184548][ T4281] device veth0_macvtap entered promiscuous mode [ 86.210610][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.220308][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.231870][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.243076][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.253348][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.264469][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.274576][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.285229][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.297571][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.327309][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.335521][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.344135][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.353038][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.367703][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.376702][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.399109][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.411280][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.421664][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.432506][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.443059][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.454031][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.466513][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.474697][ T4281] device veth1_macvtap entered promiscuous mode [ 86.522076][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.539128][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.548695][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.557351][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.565987][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.577863][ T4280] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.587210][ T4280] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.595964][ T4280] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.605258][ T4280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.623068][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.636322][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.646445][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.666943][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.687116][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.699585][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.711656][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.722557][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.734665][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.765842][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.803433][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.849902][ T4360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 86.867780][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 86.873921][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 86.877352][ T49] Bluetooth: hci0: command 0x0419 tx timeout [ 86.880278][ T4275] Bluetooth: hci2: command 0x0419 tx timeout [ 86.905649][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.930963][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.942256][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.954259][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.956917][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 86.965688][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.999600][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.020365][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.040985][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.065251][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.106589][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.106884][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.125161][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.144467][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.195449][ T4281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.224887][ T4281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.236438][ T4262] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.253000][ T4281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.263875][ T4281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.284833][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.343479][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.362158][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.416463][ T4262] usb 2-1: device descriptor read/64, error -71 [ 87.457650][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.498130][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.513565][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.547259][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.590276][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.627287][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.635178][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.656487][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.667559][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.686233][ T4262] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.705182][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.719846][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.741958][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.795497][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.812611][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.833473][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.856332][ T4262] usb 2-1: device descriptor read/64, error -71 [ 87.898737][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.984995][ T4262] usb usb2-port1: attempt power cycle [ 88.362317][ T4378] device syzkaller0 entered promiscuous mode [ 88.426182][ T4262] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 88.467678][ T4262] usb 2-1: device descriptor read/8, error -71 [ 88.484371][ T4378] device syzkaller0 left promiscuous mode [ 88.610115][ T4389] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.673890][ T4321] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.758645][ T4262] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 88.803317][ T4262] usb 2-1: device descriptor read/8, error -71 [ 88.866990][ T4321] usb 5-1: Using ep0 maxpacket: 8 [ 88.880599][ T4321] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 88.900039][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.935322][ T4321] usb 5-1: config 0 descriptor?? [ 88.943121][ T4262] usb usb2-port1: unable to enumerate USB device [ 88.974845][ T4321] usb 5-1: probing VID:PID(0424:012C) [ 88.992423][ T4321] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 89.000014][ T4321] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 89.006852][ T4321] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 89.013469][ T4321] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 89.020400][ T4321] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 89.216223][ T4355] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 89.365869][ T4321] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 89.414804][ T4355] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.436764][ T4355] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 89.455261][ T4355] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 89.466434][ T4355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.577736][ T4321] usb 5-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 89.906715][ T4355] dvb_ttusb_budget: ttusb_init_controller: error [ 89.922668][ T4355] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 90.145405][ T26] audit: type=1326 audit(1791116565.560:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4397 comm="syz.1.16" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd559d9e159 code=0x7ffc0000 [ 90.190916][ T26] audit: type=1326 audit(1791116565.560:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4397 comm="syz.1.16" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd559d9e159 code=0x7ffc0000 [ 90.225115][ T4355] DVB: Unable to find symbol stv0299_attach() [ 90.298716][ T26] audit: type=1326 audit(1791116565.590:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4397 comm="syz.1.16" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd559d9e159 code=0x7ffc0000 [ 90.369424][ T26] audit: type=1326 audit(1791116565.590:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4397 comm="syz.1.16" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd559d9e159 code=0x7ffc0000 [ 90.415074][ T26] audit: type=1326 audit(1791116565.590:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4397 comm="syz.1.16" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd559d9e159 code=0x7ffc0000 [ 90.426487][ T4355] DVB: Unable to find symbol tda8083_attach() [ 90.455006][ T4355] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 90.455694][ T4275] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 90.485110][ T26] audit: type=1326 audit(1791116565.590:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4397 comm="syz.1.16" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd559d9e159 code=0x7ffc0000 [ 90.511355][ T26] audit: type=1326 audit(1791116565.590:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4397 comm="syz.1.16" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd559d9e159 code=0x7ffc0000 [ 90.545759][ T26] audit: type=1326 audit(1791116565.590:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4397 comm="syz.1.16" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd559d9e159 code=0x7ffc0000 [ 90.570431][ T26] audit: type=1326 audit(1791116565.590:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4397 comm="syz.1.16" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fd559d9e159 code=0x7ffc0000 [ 90.595730][ T26] audit: type=1326 audit(1791116565.590:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4397 comm="syz.1.16" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd559d9e159 code=0x7ffc0000 [ 90.952225][ T4407] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 91.156493][ T4321] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 91.164677][ T4319] usb 5-1: USB disconnect, device number 2 [ 91.180173][ T4321] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 91.251798][ T4413] netlink: 48 bytes leftover after parsing attributes in process `syz.1.21'. [ 91.267573][ T4319] USB vub300 remote SDIO host controller[0] now disconnected [ 91.363865][ T4262] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.398449][ T4423] sctp: [Deprecated]: syz.3.25 (pid 4423) Use of int in max_burst socket option deprecated. [ 91.398449][ T4423] Use struct sctp_assoc_value instead [ 91.472988][ T4426] netlink: 60 bytes leftover after parsing attributes in process `syz.3.25'. [ 91.483521][ T4426] unsupported nlmsg_type 40 [ 91.566285][ T4262] usb 3-1: Using ep0 maxpacket: 16 [ 91.574259][ T4262] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.589590][ T4262] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.602259][ T4262] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 91.621022][ T4262] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.631253][ T4262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 91.639707][ T4262] usb 3-1: SerialNumber: syz [ 91.659719][ T4262] hub 3-1:1.0: bad descriptor, ignoring hub [ 91.667978][ T4262] hub: probe of 3-1:1.0 failed with error -5 [ 91.676880][ T4262] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 91.758847][ T14] cfg80211: failed to load regulatory.db [ 91.776232][ T2170] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.954441][ T14] usb 1-1: USB disconnect, device number 2 [ 91.956842][ T2170] usb 4-1: Using ep0 maxpacket: 32 [ 91.972650][ T2170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.984879][ T2170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.008999][ T2170] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 92.037718][ T2170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.057249][ T2170] usb 4-1: config 0 descriptor?? [ 92.071680][ T2170] hub 4-1:0.0: USB hub found [ 92.226364][ C1] [ 92.228768][ C1] ================================ [ 92.233917][ C1] WARNING: inconsistent lock state [ 92.239070][ C1] syzkaller #0 Not tainted [ 92.243522][ C1] -------------------------------- [ 92.248660][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 92.255536][ C1] syz.4.24/4419 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 92.261732][ C1] ffff88807ca70648 ((work_completion)(&(&host->detect)->work)){+.?.}-{0:0}, at: __flush_work+0x109/0xac0 [ 92.273043][ C1] {SOFTIRQ-ON-W} state was registered at: [ 92.278797][ C1] lock_acquire+0x1bc/0x4a0 [ 92.283464][ C1] process_one_work+0x7ec/0x1160 [ 92.288536][ C1] worker_thread+0xaf5/0x12a0 [ 92.293346][ C1] kthread+0x29d/0x330 [ 92.297541][ C1] ret_from_fork+0x1f/0x30 [ 92.302104][ C1] irq event stamp: 16440 [ 92.306373][ C1] hardirqs last enabled at (16440): [] __cancel_work_timer+0x36a/0x560 [ 92.316309][ C1] hardirqs last disabled at (16439): [] try_to_grab_pending+0xfa/0x890 [ 92.326166][ C1] softirqs last enabled at (16340): [] __irq_exit_rcu+0x13b/0x230 [ 92.335669][ C1] softirqs last disabled at (16369): [] __irq_exit_rcu+0x13b/0x230 [ 92.345168][ C1] [ 92.345168][ C1] other info that might help us debug this: [ 92.353264][ C1] Possible unsafe locking scenario: [ 92.353264][ C1] [ 92.360769][ C1] CPU0 [ 92.364081][ C1] ---- [ 92.367409][ C1] lock((work_completion)(&(&host->detect)->work)); [ 92.374140][ C1] [ 92.377625][ C1] lock((work_completion)(&(&host->detect)->work)); [ 92.384530][ C1] [ 92.384530][ C1] *** DEADLOCK *** [ 92.384530][ C1] [ 92.392717][ C1] 4 locks held by syz.4.24/4419: [ 92.397684][ C1] #0: ffff88802ffc1f58 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x177/0x970 [ 92.406836][ C1] #1: ffff88801e280678 (ptlock_ptr(page)#2){+.+.}-{2:2}, at: unmap_page_range+0x99a/0x25b0 [ 92.417027][ C1] #2: ffffffff8cb2d8a0 (rcu_read_lock){....}-{1:2}, at: page_ext_get+0x1e/0x2a0 [ 92.426248][ C1] #3: ffffc900001e0bc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xcf/0x670 [ 92.436757][ C1] [ 92.436757][ C1] stack backtrace: [ 92.442706][ C1] CPU: 1 PID: 4419 Comm: syz.4.24 Not tainted syzkaller #0 [ 92.449940][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.460066][ C1] Call Trace: [ 92.463385][ C1] [ 92.466267][ C1] dump_stack_lvl+0x188/0x24e [ 92.471011][ C1] ? show_regs_print_info+0x12/0x12 [ 92.476274][ C1] ? unwind_get_return_address+0x49/0x80 [ 92.481969][ C1] valid_state+0x13b/0x1d0 [ 92.486467][ C1] mark_lock_irq+0xa9/0x900 [ 92.491046][ C1] ? stack_trace_save+0xa6/0xf0 [ 92.495950][ C1] ? save_trace+0xbb0/0xbb0 [ 92.500509][ C1] ? save_trace+0x5a/0xbb0 [ 92.504985][ C1] mark_lock+0x208/0x320 [ 92.509280][ C1] __lock_acquire+0xdf3/0x7ea0 [ 92.514111][ C1] ? verify_lock_unused+0x140/0x140 [ 92.519359][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 92.524446][ C1] ? debug_object_assert_init+0x1ed/0x300 [ 92.530207][ C1] lock_acquire+0x1bc/0x4a0 [ 92.534772][ C1] ? __flush_work+0x109/0xac0 [ 92.539504][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 92.544756][ C1] ? read_lock_is_recursive+0x10/0x10 [ 92.550184][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 92.556117][ C1] ? _raw_spin_unlock+0x40/0x40 [ 92.561008][ C1] ? slab_free_freelist_hook+0x133/0x1b0 [ 92.566694][ C1] ? kobject_put+0x25c/0x450 [ 92.571360][ C1] ? vub300_inactivity_timer_expired+0x190/0x3e0 [ 92.577765][ C1] ? call_timer_fn+0x1ac/0x670 [ 92.582573][ C1] ? __flush_work+0x109/0xac0 [ 92.587323][ C1] __flush_work+0x122/0xac0 [ 92.591864][ C1] ? __flush_work+0x109/0xac0 [ 92.596584][ C1] ? flush_work+0x20/0x20 [ 92.600973][ C1] ? __timer_delete+0x6c/0x220 [ 92.605776][ C1] ? mark_lock+0x94/0x320 [ 92.610155][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 92.616194][ C1] ? mod_delayed_work_on+0x1b0/0x1b0 [ 92.621611][ C1] ? lock_chain_count+0x20/0x20 [ 92.626517][ C1] ? kasan_quarantine_put+0xd4/0x210 [ 92.631850][ C1] ? __cancel_work_timer+0x36a/0x560 [ 92.637180][ C1] __cancel_work_timer+0x3f4/0x560 [ 92.642332][ C1] ? cancel_work_sync+0x20/0x20 [ 92.647219][ C1] ? kobject_put+0x25c/0x450 [ 92.651865][ C1] ? __kmem_cache_free+0xb6/0x200 [ 92.656974][ C1] ? kobject_put+0x41d/0x450 [ 92.661645][ C1] mmc_free_host+0x15/0x40 [ 92.666120][ C1] call_timer_fn+0x1ac/0x670 [ 92.670766][ C1] ? kref_get+0x70/0x70 [ 92.674974][ C1] ? call_timer_fn+0xcf/0x670 [ 92.679699][ C1] ? __run_timers+0x810/0x810 [ 92.684429][ C1] ? kref_get+0x70/0x70 [ 92.688648][ C1] __run_timers+0x56c/0x810 [ 92.693206][ C1] ? detach_timer+0x350/0x350 [ 92.697956][ C1] ? lock_chain_count+0x20/0x20 [ 92.702866][ C1] run_timer_softirq+0x63/0xf0 [ 92.707695][ C1] handle_softirqs+0x291/0x910 [ 92.712515][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 92.717502][ C1] ? do_softirq+0x210/0x210 [ 92.722054][ C1] ? hrtimer_interrupt+0x775/0x980 [ 92.727216][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 92.732466][ C1] __irq_exit_rcu+0x13b/0x230 [ 92.737196][ C1] ? irq_exit_rcu+0x20/0x20 [ 92.741757][ C1] irq_exit_rcu+0x5/0x20 [ 92.746045][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 92.751777][ C1] [ 92.754764][ C1] [ 92.757739][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 92.763769][ C1] RIP: 0010:page_table_check_clear+0x241/0x6b0 [ 92.769983][ C1] Code: 04 00 00 00 e8 e0 b0 f5 ff 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 ff 00 00 00 41 8b 2c 24 <31> ff 89 ee e8 e6 57 a4 ff 85 ed 0f 85 8d 01 00 00 49 8d 7c 24 04 [ 92.789645][ C1] RSP: 0018:ffffc90004977790 EFLAGS: 00000246 [ 92.795770][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 92.803789][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801c0e67b8 [ 92.811807][ C1] RBP: 0000000000000000 R08: ffff88801c0e67bb R09: 1ffff1100381ccf7 [ 92.819824][ C1] R10: dffffc0000000000 R11: ffffed100381ccf8 R12: ffff88801c0e67b8 [ 92.827852][ C1] R13: 0000000000000000 R14: ffff88801c0e6778 R15: 1ffffffff1987344 [ 92.835882][ C1] unmap_page_range+0x1905/0x25b0 [ 92.840985][ C1] unmap_vmas+0x260/0x390 [ 92.845412][ C1] ? unmap_vmas+0x1bd/0x390 [ 92.849979][ C1] ? unmap_page_range+0x25b0/0x25b0 [ 92.855237][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 92.860337][ C1] exit_mmap+0x20d/0x970 [ 92.864665][ C1] ? vm_brk+0x20/0x20 [ 92.868704][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 92.874392][ C1] ? exit_mm+0x23d/0x350 [ 92.878702][ C1] ? uprobe_clear_state+0x274/0x290 [ 92.883983][ C1] __mmput+0x118/0x3a0 [ 92.888099][ C1] exit_mm+0x24d/0x350 [ 92.892221][ C1] ? sysctl_delayacct+0x220/0x220 [ 92.897299][ C1] ? do_exit+0x2570/0x2570 [ 92.901782][ C1] ? tty_audit_exit+0x149/0x1f0 [ 92.906710][ C1] do_exit+0x958/0x2570 [ 92.910928][ C1] ? lock_chain_count+0x20/0x20 [ 92.915926][ C1] ? preempt_schedule_common+0xa5/0xd0 [ 92.921441][ C1] ? put_task_struct+0x80/0x80 [ 92.926260][ C1] ? preempt_schedule+0xbc/0xd0 [ 92.931168][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 92.936864][ C1] do_group_exit+0x229/0x2e0 [ 92.941539][ C1] __x64_sys_exit_group+0x3b/0x40 [ 92.946883][ C1] do_syscall_64+0x4c/0xa0 [ 92.951347][ C1] ? clear_bhb_loop+0x60/0xb0 [ 92.956081][ C1] ? clear_bhb_loop+0x60/0xb0 [ 92.960814][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.966758][ C1] RIP: 0033:0x7f593e19e159 [ 92.971218][ C1] Code: Unable to access opcode bytes at 0x7f593e19e12f. [ 92.978275][ C1] RSP: 002b:00007ffd3ab22f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 92.986752][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f593e19e159 [ 92.994764][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.002796][ C1] RBP: 00007ffd3ab22ffc R08: 0000000000000006 R09: 00000000000927c0 [ 93.010824][ C1] R10: 00000000003ffca0 R11: 0000000000000246 R12: 0000000000000004 [ 93.018843][ C1] R13: 00000000000927c0 R14: 00000000000161e1 R15: 00007ffd3ab23050 [ 93.026871][ C1] [ 93.030028][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:3013 [ 93.039130][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4419, name: syz.4.24 [ 93.048039][ C1] preempt_count: 101, expected: 0 [ 93.053105][ C1] RCU nest depth: 1, expected: 0 [ 93.058115][ C1] INFO: lockdep is turned off. [ 93.062912][ C1] Preemption disabled at: [ 93.062923][ C1] [<0000000000000000>] 0x0 [ 93.071788][ C1] CPU: 1 PID: 4419 Comm: syz.4.24 Not tainted syzkaller #0 [ 93.079026][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.089121][ C1] Call Trace: [ 93.092444][ C1] [ 93.095332][ C1] dump_stack_lvl+0x188/0x24e [ 93.100071][ C1] ? show_regs_print_info+0x12/0x12 [ 93.105341][ C1] ? load_image+0x410/0x410 [ 93.109910][ C1] __might_resched+0x489/0x5f0 [ 93.114742][ C1] ? __might_sleep+0xd0/0xd0 [ 93.119388][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 93.124498][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 93.130440][ C1] ? _raw_spin_unlock+0x40/0x40 [ 93.135336][ C1] ? slab_free_freelist_hook+0x133/0x1b0 [ 93.141024][ C1] ? kobject_put+0x25c/0x450 [ 93.145672][ C1] ? vub300_inactivity_timer_expired+0x190/0x3e0 [ 93.152055][ C1] ? call_timer_fn+0x1ac/0x670 [ 93.156863][ C1] ? __flush_work+0x109/0xac0 [ 93.161589][ C1] __flush_work+0x142/0xac0 [ 93.166135][ C1] ? flush_work+0x20/0x20 [ 93.170506][ C1] ? __timer_delete+0x6c/0x220 [ 93.175336][ C1] ? mark_lock+0x94/0x320 [ 93.179720][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 93.185767][ C1] ? mod_delayed_work_on+0x1b0/0x1b0 [ 93.191098][ C1] ? lock_chain_count+0x20/0x20 [ 93.196003][ C1] ? kasan_quarantine_put+0xd4/0x210 [ 93.201342][ C1] ? __cancel_work_timer+0x36a/0x560 [ 93.206679][ C1] __cancel_work_timer+0x3f4/0x560 [ 93.211836][ C1] ? cancel_work_sync+0x20/0x20 [ 93.216766][ C1] ? kobject_put+0x25c/0x450 [ 93.221418][ C1] ? __kmem_cache_free+0xb6/0x200 [ 93.226491][ C1] ? kobject_put+0x41d/0x450 [ 93.231155][ C1] mmc_free_host+0x15/0x40 [ 93.235623][ C1] call_timer_fn+0x1ac/0x670 [ 93.240282][ C1] ? kref_get+0x70/0x70 [ 93.244495][ C1] ? call_timer_fn+0xcf/0x670 [ 93.249250][ C1] ? __run_timers+0x810/0x810 [ 93.253978][ C1] ? kref_get+0x70/0x70 [ 93.258185][ C1] __run_timers+0x56c/0x810 [ 93.262751][ C1] ? detach_timer+0x350/0x350 [ 93.267496][ C1] ? lock_chain_count+0x20/0x20 [ 93.272401][ C1] run_timer_softirq+0x63/0xf0 [ 93.277231][ C1] handle_softirqs+0x291/0x910 [ 93.282044][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 93.287031][ C1] ? do_softirq+0x210/0x210 [ 93.291591][ C1] ? hrtimer_interrupt+0x775/0x980 [ 93.296841][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 93.302089][ C1] __irq_exit_rcu+0x13b/0x230 [ 93.306821][ C1] ? irq_exit_rcu+0x20/0x20 [ 93.311457][ C1] irq_exit_rcu+0x5/0x20 [ 93.315785][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 93.321513][ C1] [ 93.324534][ C1] [ 93.327517][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 93.333559][ C1] RIP: 0010:page_table_check_clear+0x241/0x6b0 [ 93.339783][ C1] Code: 04 00 00 00 e8 e0 b0 f5 ff 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 ff 00 00 00 41 8b 2c 24 <31> ff 89 ee e8 e6 57 a4 ff 85 ed 0f 85 8d 01 00 00 49 8d 7c 24 04 [ 93.359444][ C1] RSP: 0018:ffffc90004977790 EFLAGS: 00000246 [ 93.365574][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 93.373593][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801c0e67b8 [ 93.381611][ C1] RBP: 0000000000000000 R08: ffff88801c0e67bb R09: 1ffff1100381ccf7 [ 93.389625][ C1] R10: dffffc0000000000 R11: ffffed100381ccf8 R12: ffff88801c0e67b8 [ 93.397645][ C1] R13: 0000000000000000 R14: ffff88801c0e6778 R15: 1ffffffff1987344 [ 93.405676][ C1] unmap_page_range+0x1905/0x25b0 [ 93.410776][ C1] unmap_vmas+0x260/0x390 [ 93.415168][ C1] ? unmap_vmas+0x1bd/0x390 [ 93.419749][ C1] ? unmap_page_range+0x25b0/0x25b0 [ 93.425007][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 93.430098][ C1] exit_mmap+0x20d/0x970 [ 93.434398][ C1] ? vm_brk+0x20/0x20 [ 93.438427][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 93.444118][ C1] ? exit_mm+0x23d/0x350 [ 93.448429][ C1] ? uprobe_clear_state+0x274/0x290 [ 93.453685][ C1] __mmput+0x118/0x3a0 [ 93.457822][ C1] exit_mm+0x24d/0x350 [ 93.461950][ C1] ? sysctl_delayacct+0x220/0x220 [ 93.467053][ C1] ? do_exit+0x2570/0x2570 [ 93.471526][ C1] ? tty_audit_exit+0x149/0x1f0 [ 93.476437][ C1] do_exit+0x958/0x2570 [ 93.480638][ C1] ? lock_chain_count+0x20/0x20 [ 93.485550][ C1] ? preempt_schedule_common+0xa5/0xd0 [ 93.491061][ C1] ? put_task_struct+0x80/0x80 [ 93.495882][ C1] ? preempt_schedule+0xbc/0xd0 [ 93.500796][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 93.506483][ C1] do_group_exit+0x229/0x2e0 [ 93.511142][ C1] __x64_sys_exit_group+0x3b/0x40 [ 93.516244][ C1] do_syscall_64+0x4c/0xa0 [ 93.520709][ C1] ? clear_bhb_loop+0x60/0xb0 [ 93.525436][ C1] ? clear_bhb_loop+0x60/0xb0 [ 93.530167][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.536111][ C1] RIP: 0033:0x7f593e19e159 [ 93.540573][ C1] Code: Unable to access opcode bytes at 0x7f593e19e12f. [ 93.547639][ C1] RSP: 002b:00007ffd3ab22f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 93.556102][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f593e19e159 [ 93.564119][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.572139][ C1] RBP: 00007ffd3ab22ffc R08: 0000000000000006 R09: 00000000000927c0 [ 93.580156][ C1] R10: 00000000003ffca0 R11: 0000000000000246 R12: 0000000000000004 [ 93.588177][ C1] R13: 00000000000927c0 R14: 00000000000161e1 R15: 00007ffd3ab23050 [ 93.596206][ C1] [ 93.599335][ C1] ODEBUG: object ffffc900001e09a0 is NOT on stack ffffc90004970000, but annotated. [ 93.609121][ C1] ------------[ cut here ]------------ [ 93.614648][ C1] WARNING: CPU: 1 PID: 4419 at lib/debugobjects.c:558 __debug_object_init+0x18e/0x440 [ 93.624254][ C1] Modules linked in: [ 93.628192][ C1] CPU: 1 PID: 4419 Comm: syz.4.24 Tainted: G W syzkaller #0 [ 93.636915][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.647119][ C1] RIP: 0010:__debug_object_init+0x18e/0x440 [ 93.653085][ C1] Code: 24 04 74 2f 41 ff c6 44 89 35 be 2b df 12 48 c7 c1 80 76 df 8a 48 c7 c7 e0 76 df 8a 84 c0 48 0f 45 f9 48 89 de e8 32 6c 0d 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 93.672740][ C1] RSP: 0018:ffffc900001e0908 EFLAGS: 00010046 [ 93.678861][ C1] RAX: 0000000000000050 RBX: ffffc900001e09a0 RCX: 11890c7d2bc61300 [ 93.686895][ C1] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 93.694921][ C1] RBP: dffffc0000000000 R08: ffffc900001e0587 R09: 1ffff9200003c0b0 [ 93.702936][ C1] R10: dffffc0000000000 R11: fffff5200003c0b1 R12: ffff88802aef1e20 [ 93.710955][ C1] R13: ffff88807d4fd230 R14: 0000000000000001 R15: ffffffff8a8d31c0 [ 93.718982][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 93.727961][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.734616][ C1] CR2: 000000110c45ca3a CR3: 000000002e24c000 CR4: 00000000003506e0 [ 93.742639][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.750654][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 93.758683][ C1] Call Trace: [ 93.762003][ C1] [ 93.764900][ C1] __synchronize_srcu+0x227/0x350 [ 93.769986][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 93.775766][ C1] ? _raw_spin_unlock+0x40/0x40 [ 93.780671][ C1] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 93.786276][ C1] ? synchronize_srcu+0x18f/0x1b0 [ 93.791366][ C1] wakeup_source_unregister+0x112/0x190 [ 93.796973][ C1] mmc_host_classdev_release+0x43/0xf0 [ 93.802492][ C1] ? mmc_free_host+0x40/0x40 [ 93.807140][ C1] device_release+0x92/0x1c0 [ 93.811776][ C1] kobject_put+0x217/0x450 [ 93.816277][ C1] call_timer_fn+0x1ac/0x670 [ 93.820920][ C1] ? kref_get+0x70/0x70 [ 93.825134][ C1] ? call_timer_fn+0xcf/0x670 [ 93.829859][ C1] ? __run_timers+0x810/0x810 [ 93.834620][ C1] ? kref_get+0x70/0x70 [ 93.838838][ C1] __run_timers+0x56c/0x810 [ 93.843398][ C1] ? detach_timer+0x350/0x350 [ 93.848150][ C1] ? lock_chain_count+0x20/0x20 [ 93.853080][ C1] run_timer_softirq+0x63/0xf0 [ 93.857884][ C1] handle_softirqs+0x291/0x910 [ 93.862692][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 93.867604][ C1] ? do_softirq+0x210/0x210 [ 93.872144][ C1] ? hrtimer_interrupt+0x775/0x980 [ 93.877317][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 93.882576][ C1] __irq_exit_rcu+0x13b/0x230 [ 93.887304][ C1] ? irq_exit_rcu+0x20/0x20 [ 93.891857][ C1] irq_exit_rcu+0x5/0x20 [ 93.896140][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 93.901824][ C1] [ 93.904806][ C1] [ 93.907775][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 93.913798][ C1] RIP: 0010:page_table_check_clear+0x241/0x6b0 [ 93.920010][ C1] Code: 04 00 00 00 e8 e0 b0 f5 ff 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 ff 00 00 00 41 8b 2c 24 <31> ff 89 ee e8 e6 57 a4 ff 85 ed 0f 85 8d 01 00 00 49 8d 7c 24 04 [ 93.939694][ C1] RSP: 0018:ffffc90004977790 EFLAGS: 00000246 [ 93.945814][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 93.951197][ T4435] input: syz0 as /devices/virtual/input/input5 [ 93.953808][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801c0e67b8 [ 93.953826][ C1] RBP: 0000000000000000 R08: ffff88801c0e67bb R09: 1ffff1100381ccf7 [ 93.976023][ C1] R10: dffffc0000000000 R11: ffffed100381ccf8 R12: ffff88801c0e67b8 [ 93.984046][ C1] R13: 0000000000000000 R14: ffff88801c0e6778 R15: 1ffffffff1987344 [ 93.992081][ C1] unmap_page_range+0x1905/0x25b0 [ 93.997185][ C1] unmap_vmas+0x260/0x390 [ 94.001569][ C1] ? unmap_vmas+0x1bd/0x390 [ 94.006140][ C1] ? unmap_page_range+0x25b0/0x25b0 [ 94.011420][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 94.016497][ C1] exit_mmap+0x20d/0x970 [ 94.020794][ C1] ? vm_brk+0x20/0x20 [ 94.024832][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 94.030519][ C1] ? exit_mm+0x23d/0x350 [ 94.034851][ C1] ? uprobe_clear_state+0x274/0x290 [ 94.040111][ C1] __mmput+0x118/0x3a0 [ 94.044228][ C1] exit_mm+0x24d/0x350 [ 94.048372][ C1] ? sysctl_delayacct+0x220/0x220 [ 94.053460][ C1] ? do_exit+0x2570/0x2570 [ 94.057938][ C1] ? tty_audit_exit+0x149/0x1f0 [ 94.062842][ C1] do_exit+0x958/0x2570 [ 94.067053][ C1] ? lock_chain_count+0x20/0x20 [ 94.071972][ C1] ? preempt_schedule_common+0xa5/0xd0 [ 94.077482][ C1] ? put_task_struct+0x80/0x80 [ 94.082305][ C1] ? preempt_schedule+0xbc/0xd0 [ 94.087207][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 94.092997][ C1] do_group_exit+0x229/0x2e0 [ 94.097665][ C1] __x64_sys_exit_group+0x3b/0x40 [ 94.102767][ C1] do_syscall_64+0x4c/0xa0 [ 94.107237][ C1] ? clear_bhb_loop+0x60/0xb0 [ 94.111973][ C1] ? clear_bhb_loop+0x60/0xb0 [ 94.116742][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.122690][ C1] RIP: 0033:0x7f593e19e159 [ 94.127150][ C1] Code: Unable to access opcode bytes at 0x7f593e19e12f. [ 94.134198][ C1] RSP: 002b:00007ffd3ab22f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 94.142667][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f593e19e159 [ 94.150694][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.158708][ C1] RBP: 00007ffd3ab22ffc R08: 0000000000000006 R09: 00000000000927c0 [ 94.166731][ C1] R10: 00000000003ffca0 R11: 0000000000000246 R12: 0000000000000004 [ 94.174764][ C1] R13: 00000000000927c0 R14: 00000000000161e1 R15: 00007ffd3ab23050 [ 94.182794][ C1] [ 94.185855][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.193176][ C1] CPU: 1 PID: 4419 Comm: syz.4.24 Tainted: G W syzkaller #0 [ 94.201891][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 94.211993][ C1] Call Trace: [ 94.215303][ C1] [ 94.218179][ C1] dump_stack_lvl+0x188/0x24e [ 94.222905][ C1] ? memcpy+0x3c/0x60 [ 94.226949][ C1] ? show_regs_print_info+0x12/0x12 [ 94.232203][ C1] ? load_image+0x410/0x410 [ 94.236787][ C1] panic+0x2d3/0x710 [ 94.240739][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 94.245325][ C1] __warn+0x2f8/0x4f0 [ 94.249357][ C1] ? __debug_object_init+0x18e/0x440 [ 94.254682][ C1] ? __debug_object_init+0x18e/0x440 [ 94.260051][ C1] report_bug+0x2ba/0x4f0 [ 94.264441][ C1] ? __debug_object_init+0x18e/0x440 [ 94.269801][ C1] handle_bug+0x3a/0x70 [ 94.273996][ C1] exc_invalid_op+0x16/0x40 [ 94.278528][ C1] asm_exc_invalid_op+0x16/0x20 [ 94.283407][ C1] RIP: 0010:__debug_object_init+0x18e/0x440 [ 94.289328][ C1] Code: 24 04 74 2f 41 ff c6 44 89 35 be 2b df 12 48 c7 c1 80 76 df 8a 48 c7 c7 e0 76 df 8a 84 c0 48 0f 45 f9 48 89 de e8 32 6c 0d 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 94.308959][ C1] RSP: 0018:ffffc900001e0908 EFLAGS: 00010046 [ 94.315306][ C1] RAX: 0000000000000050 RBX: ffffc900001e09a0 RCX: 11890c7d2bc61300 [ 94.323307][ C1] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 94.331310][ C1] RBP: dffffc0000000000 R08: ffffc900001e0587 R09: 1ffff9200003c0b0 [ 94.339303][ C1] R10: dffffc0000000000 R11: fffff5200003c0b1 R12: ffff88802aef1e20 [ 94.347302][ C1] R13: ffff88807d4fd230 R14: 0000000000000001 R15: ffffffff8a8d31c0 [ 94.355333][ C1] ? __debug_object_init+0x18e/0x440 [ 94.360685][ C1] __synchronize_srcu+0x227/0x350 [ 94.365751][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 94.371516][ C1] ? _raw_spin_unlock+0x40/0x40 [ 94.376407][ C1] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 94.381994][ C1] ? synchronize_srcu+0x18f/0x1b0 [ 94.387050][ C1] wakeup_source_unregister+0x112/0x190 [ 94.392643][ C1] mmc_host_classdev_release+0x43/0xf0 [ 94.398145][ C1] ? mmc_free_host+0x40/0x40 [ 94.402766][ C1] device_release+0x92/0x1c0 [ 94.407382][ C1] kobject_put+0x217/0x450 [ 94.411841][ C1] call_timer_fn+0x1ac/0x670 [ 94.416461][ C1] ? kref_get+0x70/0x70 [ 94.420641][ C1] ? call_timer_fn+0xcf/0x670 [ 94.425345][ C1] ? __run_timers+0x810/0x810 [ 94.430048][ C1] ? kref_get+0x70/0x70 [ 94.434241][ C1] __run_timers+0x56c/0x810 [ 94.438767][ C1] ? detach_timer+0x350/0x350 [ 94.443467][ C1] ? lock_chain_count+0x20/0x20 [ 94.448343][ C1] run_timer_softirq+0x63/0xf0 [ 94.453134][ C1] handle_softirqs+0x291/0x910 [ 94.457934][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 94.462816][ C1] ? do_softirq+0x210/0x210 [ 94.467345][ C1] ? hrtimer_interrupt+0x775/0x980 [ 94.472502][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 94.477730][ C1] __irq_exit_rcu+0x13b/0x230 [ 94.482436][ C1] ? irq_exit_rcu+0x20/0x20 [ 94.486967][ C1] irq_exit_rcu+0x5/0x20 [ 94.491240][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 94.496920][ C1] [ 94.499876][ C1] [ 94.502824][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 94.508829][ C1] RIP: 0010:page_table_check_clear+0x241/0x6b0 [ 94.515017][ C1] Code: 04 00 00 00 e8 e0 b0 f5 ff 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 ff 00 00 00 41 8b 2c 24 <31> ff 89 ee e8 e6 57 a4 ff 85 ed 0f 85 8d 01 00 00 49 8d 7c 24 04 [ 94.534645][ C1] RSP: 0018:ffffc90004977790 EFLAGS: 00000246 [ 94.540738][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 94.548740][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801c0e67b8 [ 94.556822][ C1] RBP: 0000000000000000 R08: ffff88801c0e67bb R09: 1ffff1100381ccf7 [ 94.564826][ C1] R10: dffffc0000000000 R11: ffffed100381ccf8 R12: ffff88801c0e67b8 [ 94.572813][ C1] R13: 0000000000000000 R14: ffff88801c0e6778 R15: 1ffffffff1987344 [ 94.580818][ C1] unmap_page_range+0x1905/0x25b0 [ 94.585890][ C1] unmap_vmas+0x260/0x390 [ 94.590250][ C1] ? unmap_vmas+0x1bd/0x390 [ 94.594779][ C1] ? unmap_page_range+0x25b0/0x25b0 [ 94.600007][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 94.605063][ C1] exit_mmap+0x20d/0x970 [ 94.609345][ C1] ? vm_brk+0x20/0x20 [ 94.613346][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 94.619041][ C1] ? exit_mm+0x23d/0x350 [ 94.623330][ C1] ? uprobe_clear_state+0x274/0x290 [ 94.628559][ C1] __mmput+0x118/0x3a0 [ 94.632671][ C1] exit_mm+0x24d/0x350 [ 94.636770][ C1] ? sysctl_delayacct+0x220/0x220 [ 94.641827][ C1] ? do_exit+0x2570/0x2570 [ 94.646277][ C1] ? tty_audit_exit+0x149/0x1f0 [ 94.651157][ C1] do_exit+0x958/0x2570 [ 94.655342][ C1] ? lock_chain_count+0x20/0x20 [ 94.660264][ C1] ? preempt_schedule_common+0xa5/0xd0 [ 94.665762][ C1] ? put_task_struct+0x80/0x80 [ 94.670544][ C1] ? preempt_schedule+0xbc/0xd0 [ 94.675411][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 94.681068][ C1] do_group_exit+0x229/0x2e0 [ 94.685690][ C1] __x64_sys_exit_group+0x3b/0x40 [ 94.690741][ C1] do_syscall_64+0x4c/0xa0 [ 94.695179][ C1] ? clear_bhb_loop+0x60/0xb0 [ 94.699878][ C1] ? clear_bhb_loop+0x60/0xb0 [ 94.704586][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.710502][ C1] RIP: 0033:0x7f593e19e159 [ 94.714931][ C1] Code: Unable to access opcode bytes at 0x7f593e19e12f. [ 94.721964][ C1] RSP: 002b:00007ffd3ab22f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 94.730393][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f593e19e159 [ 94.738380][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.746373][ C1] RBP: 00007ffd3ab22ffc R08: 0000000000000006 R09: 00000000000927c0 [ 94.754361][ C1] R10: 00000000003ffca0 R11: 0000000000000246 R12: 0000000000000004 [ 94.762369][ C1] R13: 00000000000927c0 R14: 00000000000161e1 R15: 00007ffd3ab23050 [ 94.770371][ C1] [ 94.773980][ C1] Kernel Offset: disabled [ 94.778328][ C1] Rebooting in 86400 seconds..