last executing test programs: 13.453245742s ago: executing program 0 (id=125): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000000500)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002540)="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", 0x2000, &(0x7f0000004540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004600)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004640)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x3, 0xfffffff8, 0x0, 0x0, 0x20, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000046c0)='./file0\x00', 0x40242, 0x1) close(r0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004740)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f00000001c0)) 13.182869358s ago: executing program 0 (id=130): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="100029bd7000ffdb"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 12.989754063s ago: executing program 3 (id=135): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 12.894050986s ago: executing program 4 (id=136): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000004c0)={0x0, 0x0, 0x20}, 0xc) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)='b', 0x1194}], 0x1) 12.874850546s ago: executing program 3 (id=137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x2, 0x0, [{0x400000b0, 0x0, 0x1}, {0x400000b1, 0x0, 0x401}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.654043211s ago: executing program 3 (id=140): socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) sigaltstack(0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x3, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0x20f400, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000bfd000/0x400000)=nil, r1, 0x4, 0x4000010, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x652c82) socket(0xa, 0x2400000001, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x2002, 0x0) close(r4) setsockopt(r3, 0x0, 0x482, &(0x7f0000000240)="110000007f0000014e200000000000006d6800000000000000000000000000001000"/44, 0x2c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) connect$inet6(r7, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000380)=@gettclass={0x24, 0x2a, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x3, 0x1}, {0xffff, 0xe}, {0xfff3, 0x10}}, ["", "", "", "", "", ""]}, 0x24}}, 0x20000000) 12.595093883s ago: executing program 0 (id=141): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f00000003c0)='7', 0x1) keyctl$read(0xb, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 11.759140064s ago: executing program 4 (id=142): r0 = socket(0x2b, 0x80801, 0x1) bind$unix(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000003d40)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f000001ce00)=0x40003) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r5, 0x100000000) 11.643376137s ago: executing program 2 (id=144): fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x104, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000814000780080012400000000505001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a000000050001000700ff01000000000000ac75d749b3a47836a7edce6f7a3f6ed82c38a14736ab557b6011da34bffab0482edfd435fa0f3d02a2e10627e2df4c6aec11dab62c274723d0ad4d48177461beda2cb0ef77257a"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) 11.630787097s ago: executing program 0 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000240)={@random="038e71e43634", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "82379f", 0x64, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x0, "bf1cfabf7539096072a6844022656c6d6333947b5581b2391df068591fd8bbbe", "6f05283b3552cebb33293161ba16d651", {"8b53915865a224f1d88adb6d6a81689e", "f915937a90b71c36f2017befbaa04350"}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006911160000000000851000000200000085000000a000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x94) socket$pppoe(0x18, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mount$9p_unix(0x0, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x0, 0x100000, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=unix,access=client,nodevmap,uid<', @ANYRESDEC=0x0, @ANYBLOB="075c7dcb8ff9a108112c636f6e746578743d5fd77361646d5f752c7365636c616c2c61707072616973652c0000005530cecb54e1dcb7278b48dc2b524568aa538fc99738a5c323a819eaa0361759196efdb121a787b6fc98d2d752391303cfd4282b8a8ff035630efc0ae303be99a25461e0c132a6e41348ed196d"]) openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) 10.395766848s ago: executing program 3 (id=147): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r2, &(0x7f0000000300), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000480)={[{@errors_remount}, {@usrquota}, {@bh}, {@jqfmt_vfsv0}, {@init_itable_val={'init_itable', 0x3d, 0xae2}}, {@minixdf}, {@usrjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@test_dummy_encryption}, {@dioread_lock}, {@block_validity}, {}]}, 0x3, 0x474, &(0x7f0000000740)="$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") syz_open_dev$dvb_frontend(0x0, 0x8000003, 0x717ac2) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000140)='ns/time\x00') creat(&(0x7f0000000000)='./file0\x00', 0x60) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000200), 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) sendmsg(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000663000/0x2000)=nil, 0x2000, 0x200000e, 0x80010, r4, 0x0) fdatasync(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 8.33271057s ago: executing program 1 (id=148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000080)=0x1) 8.182182624s ago: executing program 4 (id=149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munlockall() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4004000) bpf$BPF_PROG_DETACH(0x8, 0x0, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 8.140036905s ago: executing program 2 (id=150): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000e00)=ANY=[]) 7.192644509s ago: executing program 1 (id=151): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./trace\x00', 0x1ff) mount(&(0x7f0000000340)=@filename='tracefs\x00', &(0x7f0000000380)='./trace\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./trace/trace\x00', 0x0, 0x0) read(r4, &(0x7f00000004c0), 0x1000) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') getdents64(r5, &(0x7f0000000780)=""/4098, 0x1002) 7.164795189s ago: executing program 3 (id=152): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x18, &(0x7f00000005c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000006c0)={0x20, 0x6, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$alg(0x26, 0x5, 0x0) close(0x3) writev(r1, &(0x7f0000000a40)=[{&(0x7f0000000a80)='*', 0x1}], 0x1) 7.015965233s ago: executing program 2 (id=153): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x5c}, [@ldst={0x6, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0xffffffffffffffc2) mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x176) mount(0x0, 0x0, &(0x7f0000000100)='configfs\x00', 0x10040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r1, &(0x7f0000002b80)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r4 = fsopen(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0xa90a}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) bind$can_j1939(r3, &(0x7f00000007c0)={0x1d, 0x0, 0x1, {0x1, 0xff, 0x1}, 0xfd}, 0x18) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)='7', 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0) setgroups(0x0, 0x0) write$proc_mixer(r0, &(0x7f0000000080)=ANY=[], 0x1001) 5.843365693s ago: executing program 1 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_marker\x00', 0x1, 0x1a) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r0, &(0x7f0000000680)=""/16384, 0x4000) 5.811699834s ago: executing program 4 (id=155): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f00000001c0)={0x20, 0xe, 0xf, "cf0d416510d44a33a84085a068b520"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x4, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.896067067s ago: executing program 1 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x60081, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000340)=0x81a) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000480)=0x15) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 4.052937378s ago: executing program 1 (id=157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() getsockopt$inet_buf(0xffffffffffffffff, 0x118, 0x1, 0x0, &(0x7f00000003c0)=0xf) sched_setscheduler(r0, 0x2, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000240)={@random="038e71e43634", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "82379f", 0x64, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x0, "bf1cfabf7539096072a6844022656c6d6333947b5581b2391df068591fd8bbbe", "6f05283b3552cebb33293161ba16d651", {"8b53915865a224f1d88adb6d6a81689e", "f915937a90b71c36f2017befbaa04350"}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006911160000000000851000000200000085000000a000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x94) socket$pppoe(0x18, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mount$9p_unix(0x0, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x0, 0x100000, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=unix,access=client,nodevmap,uid<', @ANYRESDEC=0x0, @ANYBLOB="075c7dcb8ff9a108112c636f6e746578743d5fd77361646d5f752c7365636c616c2c61707072616973652c0000005530cecb54e1dcb7278b48dc2b524568aa538fc99738a5c323a819eaa0361759196efdb121a787b6fc98d2d752391303cfd4282b8a8ff035630efc0ae303be99a25461e0c132a6e41348ed196d"]) openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) 4.039717478s ago: executing program 2 (id=158): socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x2, &(0x7f0000000600)=@raw=[@generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @generic={0x95}], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@map=r5, r6, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000006c0)={r5, &(0x7f0000000700), &(0x7f0000000740)=@tcp=r4}, 0x20) sendto(r4, &(0x7f0000000780)='{', 0x1, 0x8000, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000007c0)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x34, r8, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x34}}, 0x0) 3.756069585s ago: executing program 0 (id=159): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x6a) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 2.991332884s ago: executing program 1 (id=160): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) alarm(0x670) alarm(0x0) 2.534250936s ago: executing program 2 (id=161): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) mount(&(0x7f0000000140)=@filename='./trace\x00', &(0x7f0000000040)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x840, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001f0)='./trace/trace_marker\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a11, 0x20a3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) ppoll(&(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_read_part_table(0x104b, &(0x7f0000002100)="$eJzsz8ENAiEUBNBhNxg9aSPai1ercXu0DmMHGFa2BfXw3oHAkD+E8FNT2pzWWkpyGNk+S07r7pyU2pPlMaVlXi/H0g/X+uqza8FlTD9LelnSSnIvt09aU3fbi5v5+MWPAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAfewcAAP//MO8RqQ==") 1.59421999s ago: executing program 2 (id=162): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='./trace\x00', &(0x7f0000000040)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x840, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001f0)='./trace/trace_marker\x00', 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a11, 0x20a3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_read_part_table(0x104b, &(0x7f0000002100)="$eJzsz8ENAiEUBNBhNxg9aSPai1ercXu0DmMHGFa2BfXw3oHAkD+E8FNT2pzWWkpyGNk+S07r7pyU2pPlMaVlXi/H0g/X+uqza8FlTD9LelnSSnIvt09aU3fbi5v5+MWPAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAfewcAAP//MO8RqQ==") 1.56589765s ago: executing program 4 (id=163): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40a801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x63) readlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000ac0)="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", 0x21b) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000004c0)={0x1d, r3}, 0x10) sendmmsg$sock(r2, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="0100000003000000640000000000000000000000000000000000000001000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}], 0x1, 0x4000) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, 0x0, &(0x7f0000000640)) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r5, 0x0) 711.124472ms ago: executing program 0 (id=164): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000010c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001100)=[@text32={0x20, &(0x7f0000001140)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001180)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 24.368629ms ago: executing program 4 (id=165): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='./dev/sda1\x00', &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000500)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)=0x4091) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000600)=0x100) 0s ago: executing program 3 (id=166): syz_open_dev$I2C(0x0, 0x4, 0x800) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./file2\x00', 0x207) openat$dir(0xffffffffffffff9c, &(0x7f0000000b40)='./file0/file1\x00', 0x20400, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x1b, 0x3, &(0x7f0000000e00)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x34270, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="043ef50d5df8"], 0xf8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. syzkaller login: [ 62.275243][ T4172] cgroup: Unknown subsys name 'net' [ 62.413583][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.940344][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.132321][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.141215][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.163673][ T4186] rdma_rxe: rxe_register_device failed with error -23 [ 65.171467][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.178492][ T4187] rdma_rxe: rxe_register_device failed with error -23 [ 65.185830][ T4187] rdma_rxe: failed to add rxe_eth0 [ 65.195914][ T4191] rdma_rxe: rxe_register_device failed with error -23 [ 65.203345][ T4193] rdma_rxe: rxe_register_device failed with error -23 [ 65.210899][ T4193] rdma_rxe: failed to add rxe_eth0 [ 65.227266][ T4191] rdma_rxe: failed to add rxe_eth0 [ 65.237755][ T4186] rdma_rxe: failed to add rxe_eth0 [ 65.394845][ T4199] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.378072][ T4185] infiniband rxe0: set active [ 65.406245][ T4185] infiniband rxe0: added rxe_eth0 [ 65.481785][ T4185] RDS/IB: rxe0: added [ 65.486550][ T4185] smc: adding ib device rxe0 with port count 1 [ 65.494180][ T4185] smc: ib device rxe0 port 1 has pnetid [ 65.515286][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.559015][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.607539][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 65.692293][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 65.727360][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 65.816928][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.860714][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 65.972504][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.984923][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.994159][ T4186] device bridge_slave_0 entered promiscuous mode [ 66.008307][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.024788][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.037512][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.061301][ T4193] device bridge_slave_0 entered promiscuous mode [ 66.098155][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.105262][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.128318][ T4191] device bridge_slave_0 entered promiscuous mode [ 66.147440][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.154551][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.183284][ T4186] device bridge_slave_1 entered promiscuous mode [ 66.206980][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.214326][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.222540][ T4193] device bridge_slave_1 entered promiscuous mode [ 66.229789][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.236880][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.245364][ T4191] device bridge_slave_1 entered promiscuous mode [ 66.265833][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.272825][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.308862][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.354802][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.389168][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.426691][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.443637][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.476798][ T4191] team0: Port device team_slave_0 added [ 66.503872][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.514387][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.514649][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.529365][ T4187] device bridge_slave_0 entered promiscuous mode [ 66.538174][ T4191] team0: Port device team_slave_1 added [ 66.572394][ T4193] team0: Port device team_slave_0 added [ 66.587859][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.594965][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.613178][ T4187] device bridge_slave_1 entered promiscuous mode [ 66.634851][ T4186] team0: Port device team_slave_0 added [ 66.656731][ T4193] team0: Port device team_slave_1 added [ 66.685877][ T4186] team0: Port device team_slave_1 added [ 66.701432][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.708718][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.751367][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.802944][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.818218][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.834112][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.861074][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.873248][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.880404][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.911518][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.926276][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.938091][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.964332][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.988458][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.025971][ T4191] device hsr_slave_0 entered promiscuous mode [ 67.033502][ T4191] device hsr_slave_1 entered promiscuous mode [ 67.042294][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.050091][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.076764][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.094905][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.102023][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.128403][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.139282][ T4199] Bluetooth: hci4: command 0x0409 tx timeout [ 67.139282][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 67.159753][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.167187][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 67.173295][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 67.179478][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 67.203539][ T4187] team0: Port device team_slave_0 added [ 67.245595][ T4186] device hsr_slave_0 entered promiscuous mode [ 67.252632][ T4186] device hsr_slave_1 entered promiscuous mode [ 67.260048][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.267988][ T4186] Cannot create hsr debugfs directory [ 67.273777][ T3851] infiniband rxe0: set active [ 67.281271][ T4187] team0: Port device team_slave_1 added [ 67.319617][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.354864][ T4193] device hsr_slave_0 entered promiscuous mode [ 67.362112][ T4193] device hsr_slave_1 entered promiscuous mode [ 67.369498][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.377352][ T4193] Cannot create hsr debugfs directory [ 67.402023][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.409216][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.436024][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.472573][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.479646][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.505795][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.591767][ T4187] device hsr_slave_0 entered promiscuous mode [ 67.599567][ T4187] device hsr_slave_1 entered promiscuous mode [ 67.606705][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.614806][ T4187] Cannot create hsr debugfs directory [ 67.643447][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 67.804690][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.811979][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.820696][ T4185] device bridge_slave_0 entered promiscuous mode [ 67.853820][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.861205][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.870209][ T4185] device bridge_slave_1 entered promiscuous mode [ 67.928506][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.940957][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.989042][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.001990][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.013196][ T4185] team0: Port device team_slave_0 added [ 68.019840][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.029940][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.048362][ T4185] team0: Port device team_slave_1 added [ 68.084723][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.091902][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.118784][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.137928][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.144913][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.171191][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.192941][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.211594][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.232894][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.253322][ T4185] device hsr_slave_0 entered promiscuous mode [ 68.260575][ T4185] device hsr_slave_1 entered promiscuous mode [ 68.267601][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.275182][ T4185] Cannot create hsr debugfs directory [ 68.282524][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.380589][ T4193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.390713][ T4193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.404265][ T4193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.469212][ T4193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.504927][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.526797][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.544075][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.561632][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.580251][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.620536][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.640917][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.656815][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.669920][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.708435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.718013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.727465][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.734785][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.743819][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.754600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.763200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.773525][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.784312][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.799883][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.814844][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.824327][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.833661][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.840821][ T4268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.863388][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.874674][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.884309][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.895820][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.906035][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.919063][ T893] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.926172][ T893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.978375][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.990225][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.999393][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.011922][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.021300][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.031400][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.040614][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.050433][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.059232][ T893] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.066397][ T893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.074657][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.084677][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.102320][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.123566][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.132749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.143882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.154285][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.164264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.174537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.192594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.202096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.211764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.219873][ T4270] Bluetooth: hci1: command 0x041b tx timeout [ 69.226045][ T4270] Bluetooth: hci0: command 0x041b tx timeout [ 69.233420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.241546][ T4270] Bluetooth: hci2: command 0x041b tx timeout [ 69.247719][ T4270] Bluetooth: hci3: command 0x041b tx timeout [ 69.253918][ T4270] Bluetooth: hci4: command 0x041b tx timeout [ 69.255894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.270092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.278342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.306599][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.318023][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.332938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.342772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.359329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.367578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.375619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.387813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.409809][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.427822][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.446233][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.455869][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.465375][ T893] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.472522][ T893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.483005][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.504213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.527821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.543748][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.550940][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.574647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.598976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.608055][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.615143][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.635387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.644420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.653558][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.660725][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.675537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.732683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.743354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.751487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.759790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.769335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.779480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.789240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.798701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.808763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.818338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.827337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.845398][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.858622][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.872112][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.887911][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.899725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.909051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.919122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.929794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.938467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.951601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.960647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.995081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.003554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.011747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.023990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.032948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.042369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.051448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.062210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.070911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.080151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.093475][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.113875][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.132358][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.142326][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.175305][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.195124][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.221095][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.236235][ T893] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.243401][ T893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.254426][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.271804][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.284140][ T893] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.291297][ T893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.301891][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.311476][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.321042][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.338107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.347580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.356337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.371538][ T4191] device veth0_vlan entered promiscuous mode [ 70.397379][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.419648][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.442540][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.458617][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.481694][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.496936][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.506128][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.516016][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.545099][ T4191] device veth1_vlan entered promiscuous mode [ 70.552955][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.576634][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.587904][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.595855][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.604776][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.615332][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.625438][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.635670][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.645255][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.653440][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.690605][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.708448][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.716844][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.731750][ T4186] device veth0_vlan entered promiscuous mode [ 70.745803][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.770002][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.779063][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.786934][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.801474][ T4186] device veth1_vlan entered promiscuous mode [ 70.828050][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.851747][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.868634][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.885227][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.894371][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.945571][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.954160][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.963148][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.981714][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.993937][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.004553][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.013749][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.022921][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.031729][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.041612][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.050690][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.068861][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.079065][ T4187] device veth0_vlan entered promiscuous mode [ 71.092756][ T4191] device veth0_macvtap entered promiscuous mode [ 71.107378][ T4193] device veth0_vlan entered promiscuous mode [ 71.116794][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.129454][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.138219][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.153984][ T4187] device veth1_vlan entered promiscuous mode [ 71.171325][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.182585][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.193005][ T4186] device veth0_macvtap entered promiscuous mode [ 71.212297][ T4191] device veth1_macvtap entered promiscuous mode [ 71.223650][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.230408][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.252384][ T4186] device veth1_macvtap entered promiscuous mode [ 71.262279][ T4193] device veth1_vlan entered promiscuous mode [ 71.288123][ T4187] device veth0_macvtap entered promiscuous mode [ 71.306104][ T4264] Bluetooth: hci4: command 0x040f tx timeout [ 71.313937][ T4264] Bluetooth: hci3: command 0x040f tx timeout [ 71.320570][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.328117][ T4264] Bluetooth: hci2: command 0x040f tx timeout [ 71.338522][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.347728][ T4264] Bluetooth: hci0: command 0x040f tx timeout [ 71.353851][ T4264] Bluetooth: hci1: command 0x040f tx timeout [ 71.364748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.380572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.392801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.403941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.413013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.422700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.431618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.441686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.451179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.460702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.474307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.483424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.494916][ T4187] device veth1_macvtap entered promiscuous mode [ 71.506045][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.515772][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.524589][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.533601][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.548172][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.559724][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.572700][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.595290][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.613142][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.624360][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.640895][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.655026][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.686629][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.695871][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.705423][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.718253][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.727784][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.737435][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.748149][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.760002][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.771339][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.782949][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.793108][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.803844][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.828560][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.850737][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.863780][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.873279][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.884842][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.897364][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.906114][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.917173][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.925941][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.945292][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.955558][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.965646][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.974903][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.055246][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.065693][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.094200][ T4193] device veth0_macvtap entered promiscuous mode [ 72.120930][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.132484][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.141806][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.165802][ T4193] device veth1_macvtap entered promiscuous mode [ 72.206647][ T893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.215754][ T893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.256017][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.266058][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.278753][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.286624][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.301235][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.315271][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.317808][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.332105][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.341826][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.350864][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.361775][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.370024][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.378969][ T4185] device veth0_vlan entered promiscuous mode [ 72.396268][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.409589][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.422046][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.433341][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.443501][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.455396][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.468276][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.487615][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.499490][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.514938][ T4185] device veth1_vlan entered promiscuous mode [ 72.521546][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.531496][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.544071][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.552820][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.568956][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.580862][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.592499][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.608451][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.620366][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.631075][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.643577][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.685407][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.694796][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.718546][ T893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.722222][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.735494][ T893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.751346][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.763703][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.776014][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.809337][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.820954][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.851651][ T893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.896311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.912708][ T893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.924750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.935133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.970601][ T4185] device veth0_macvtap entered promiscuous mode [ 72.999500][ T4185] device veth1_macvtap entered promiscuous mode [ 73.031598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.064378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.074745][ T4270] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 73.120537][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.122505][ T4270] wiimote 0005:057E:0306.0001: New device registered [ 73.156107][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.174861][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.185647][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.204083][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.233207][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.243495][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.260778][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.274040][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.296459][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.329939][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.353030][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.373297][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.385055][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.396194][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 73.403049][ T4264] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 73.412197][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.423553][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 73.429751][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 73.436392][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.449047][ T4270] Bluetooth: hci3: command 0x0419 tx timeout [ 73.454382][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.455372][ T4270] Bluetooth: hci4: command 0x0419 tx timeout [ 73.483713][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.488130][ T4299] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.510621][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.523256][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.532658][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.543862][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.566429][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.574582][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.588842][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.598923][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.608914][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.619427][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.628638][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.706152][ T893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.715741][ T893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.761131][ T4305] wiimote 0005:057E:0306.0001: Unhandled report 32 size 1 [ 73.772199][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.786579][ T4305] wiimote 0005:057E:0306.0001: Event data for report 0 was too short (2 vs 1) [ 73.828993][ T4303] wiimote 0005:057E:0306.0001: Device removed [ 73.865188][ T893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.877276][ T4264] usb 3-1: no configurations [ 73.882139][ T4264] usb 3-1: can't read configurations, error -22 [ 73.898916][ T4322] FAULT_INJECTION: forcing a failure. [ 73.898916][ T4322] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 73.913022][ T893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.920882][ T4322] CPU: 1 PID: 4322 Comm: syz.0.7 Not tainted syzkaller #0 [ 73.928034][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.938133][ T4322] Call Trace: [ 73.941438][ T4322] [ 73.944408][ T4322] dump_stack_lvl+0x188/0x250 [ 73.949139][ T4322] ? show_regs_print_info+0x20/0x20 [ 73.954382][ T4322] ? load_image+0x410/0x410 [ 73.958925][ T4322] ? __lock_acquire+0x7d40/0x7d40 [ 73.964013][ T4322] should_fail+0x383/0x4b0 [ 73.968479][ T4322] prepare_alloc_pages+0x1e3/0x5b0 [ 73.973648][ T4322] __alloc_pages+0x11b/0x480 [ 73.978290][ T4322] ? zone_statistics+0x170/0x170 [ 73.978649][ T4299] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 73.983311][ T4322] ? __rwlock_init+0x140/0x140 [ 73.983359][ T4322] ? alloc_pages+0x452/0x560 [ 74.002435][ T4322] __get_free_pages+0x8/0x30 [ 74.007159][ T4322] kasan_populate_vmalloc_pte+0x21/0xc0 [ 74.012761][ T4322] __apply_to_page_range+0x987/0xd10 [ 74.018103][ T4322] ? kasan_populate_vmalloc+0x70/0x70 [ 74.022337][ T4299] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 74.023523][ T4322] alloc_vmap_area+0x19e8/0x1b30 [ 74.038160][ T4322] ? vm_map_ram+0xba0/0xba0 [ 74.042724][ T4322] __get_vm_area_node+0x14f/0x2d0 [ 74.047790][ T4322] __vmalloc_node_range+0xef/0x8b0 [ 74.052934][ T4322] ? dvb_dvr_open+0x1cb/0x5a0 [ 74.057653][ T4322] ? read_lock_is_recursive+0x10/0x10 [ 74.063156][ T4322] ? mutex_lock_io_nested+0x60/0x60 [ 74.068417][ T4322] ? dvb_dvr_open+0x1cb/0x5a0 [ 74.073140][ T4322] vmalloc+0x75/0x80 [ 74.077084][ T4322] ? dvb_dvr_open+0x1cb/0x5a0 [ 74.078600][ T4299] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.081791][ T4322] dvb_dvr_open+0x1cb/0x5a0 [ 74.099083][ T4322] ? dvb_dvr_ioctl+0x30/0x30 [ 74.103721][ T4322] dvb_device_open+0x269/0x360 [ 74.108526][ T4322] chrdev_open+0x585/0x5f0 [ 74.112984][ T4322] ? cd_forget+0x160/0x160 [ 74.117445][ T4322] ? fsnotify_perm+0x3a7/0x560 [ 74.122244][ T4322] ? cd_forget+0x160/0x160 [ 74.126709][ T4322] do_dentry_open+0x7f7/0xf90 [ 74.131439][ T4322] ? vfs_open+0x2b/0x80 [ 74.135642][ T4322] path_openat+0x2718/0x2fb0 [ 74.140306][ T4322] ? __kasan_slab_alloc+0xa9/0xc0 [ 74.145373][ T4322] ? do_filp_open+0x400/0x400 [ 74.150112][ T4322] do_filp_open+0x1df/0x400 [ 74.154665][ T4322] ? vfs_tmpfile+0x300/0x300 [ 74.159321][ T4322] ? _raw_spin_unlock+0x24/0x40 [ 74.164232][ T4322] ? alloc_fd+0x59e/0x650 [ 74.168603][ T4322] do_sys_openat2+0x14b/0x500 [ 74.173312][ T4322] ? __lock_acquire+0x7d40/0x7d40 [ 74.178375][ T4322] ? do_sys_open+0xe0/0xe0 [ 74.182835][ T4322] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 74.188776][ T4271] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1) [ 74.197527][ T4322] ? lock_chain_count+0x20/0x20 [ 74.197566][ T4322] __x64_sys_openat+0x135/0x160 [ 74.197595][ T4322] do_syscall_64+0x4c/0xa0 [ 74.211854][ T4322] ? clear_bhb_loop+0x30/0x80 [ 74.216567][ T4322] ? clear_bhb_loop+0x30/0x80 [ 74.221288][ T4322] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.227233][ T4322] RIP: 0033:0x7f31d2ad6d8e [ 74.231686][ T4322] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 74.251325][ T4322] RSP: 002b:00007f31d0d6db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 74.259817][ T4322] RAX: ffffffffffffffda RBX: 00007f31d0d6e6c0 RCX: 00007f31d2ad6d8e [ 74.267828][ T4322] RDX: 0000000000020000 RSI: 00007f31d0d6dc00 RDI: ffffffffffffff9c [ 74.275876][ T4322] RBP: 00007f31d0d6dc00 R08: 0000000000000000 R09: 0000000000000000 [ 74.283896][ T4322] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 74.291904][ T4322] R13: 00007f31d2d9e038 R14: 00007f31d2d9dfa0 R15: 00007ffcb2eb3818 [ 74.299934][ T4322] [ 74.326616][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.333790][ T4271] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input6 [ 74.365856][ T4322] syz.0.7: vmalloc error: size 1925120, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 74.387605][ T4299] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 74.395262][ T4268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.405276][ T4268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.413745][ T4322] CPU: 1 PID: 4322 Comm: syz.0.7 Not tainted syzkaller #0 [ 74.416613][ T4299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 74.420895][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.420910][ T4322] Call Trace: [ 74.420920][ T4322] [ 74.420929][ T4322] dump_stack_lvl+0x188/0x250 [ 74.420956][ T4322] ? rcu_lock_release+0x5/0x20 [ 74.420979][ T4322] ? show_regs_print_info+0x20/0x20 [ 74.421000][ T4322] ? load_image+0x410/0x410 [ 74.421034][ T4322] warn_alloc+0x245/0x320 [ 74.421066][ T4322] ? zone_watermark_ok_safe+0x250/0x250 [ 74.421091][ T4322] ? __get_vm_area_node+0x164/0x2d0 [ 74.421114][ T4322] ? kfree+0xef/0x2a0 [ 74.421152][ T4322] __vmalloc_node_range+0x2b1/0x8b0 [ 74.421177][ T4322] ? read_lock_is_recursive+0x10/0x10 [ 74.480184][ T4299] usb 4-1: Product: syz [ 74.483834][ T4322] ? mutex_lock_io_nested+0x60/0x60 [ 74.483868][ T4322] ? dvb_dvr_open+0x1cb/0x5a0 [ 74.508515][ T4322] vmalloc+0x75/0x80 [ 74.510786][ T4299] usb 4-1: Manufacturer: syz [ 74.512452][ T4322] ? dvb_dvr_open+0x1cb/0x5a0 [ 74.521751][ T4322] dvb_dvr_open+0x1cb/0x5a0 [ 74.526296][ T4322] ? dvb_dvr_ioctl+0x30/0x30 [ 74.530926][ T4322] dvb_device_open+0x269/0x360 [ 74.534784][ T4299] usb 4-1: SerialNumber: syz [ 74.535730][ T4322] chrdev_open+0x585/0x5f0 [ 74.544770][ T4322] ? cd_forget+0x160/0x160 [ 74.549238][ T4322] ? fsnotify_perm+0x3a7/0x560 [ 74.554051][ T4322] ? cd_forget+0x160/0x160 [ 74.558669][ T4322] do_dentry_open+0x7f7/0xf90 [ 74.563422][ T4322] ? vfs_open+0x2b/0x80 [ 74.567625][ T4322] path_openat+0x2718/0x2fb0 [ 74.572311][ T4322] ? __kasan_slab_alloc+0xa9/0xc0 [ 74.577420][ T4322] ? do_filp_open+0x400/0x400 [ 74.582274][ T4322] do_filp_open+0x1df/0x400 [ 74.586859][ T4322] ? vfs_tmpfile+0x300/0x300 [ 74.591528][ T4322] ? _raw_spin_unlock+0x24/0x40 [ 74.596453][ T4322] ? alloc_fd+0x59e/0x650 [ 74.600836][ T4322] do_sys_openat2+0x14b/0x500 [ 74.605553][ T4322] ? __lock_acquire+0x7d40/0x7d40 [ 74.610624][ T4322] ? do_sys_open+0xe0/0xe0 [ 74.615083][ T4322] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 74.621143][ T4322] ? lock_chain_count+0x20/0x20 [ 74.626047][ T4322] __x64_sys_openat+0x135/0x160 [ 74.630953][ T4322] do_syscall_64+0x4c/0xa0 [ 74.635414][ T4322] ? clear_bhb_loop+0x30/0x80 [ 74.640131][ T4322] ? clear_bhb_loop+0x30/0x80 [ 74.644856][ T4322] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.650786][ T4322] RIP: 0033:0x7f31d2ad6d8e [ 74.655238][ T4322] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 74.674877][ T4322] RSP: 002b:00007f31d0d6db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 74.683336][ T4322] RAX: ffffffffffffffda RBX: 00007f31d0d6e6c0 RCX: 00007f31d2ad6d8e [ 74.691361][ T4322] RDX: 0000000000020000 RSI: 00007f31d0d6dc00 RDI: ffffffffffffff9c [ 74.695367][ T4271] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input7 [ 74.699368][ T4322] RBP: 00007f31d0d6dc00 R08: 0000000000000000 R09: 0000000000000000 [ 74.699386][ T4322] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 74.699399][ T4322] R13: 00007f31d2d9e038 R14: 00007f31d2d9dfa0 R15: 00007ffcb2eb3818 [ 74.699447][ T4322] [ 74.724347][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.797118][ T4271] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input5 [ 74.876459][ T4322] Mem-Info: [ 74.906205][ T4322] active_anon:270 inactive_anon:5622 isolated_anon:0 [ 74.906205][ T4322] active_file:4084 inactive_file:38091 isolated_file:0 [ 74.906205][ T4322] unevictable:768 dirty:2923 writeback:0 [ 74.906205][ T4322] slab_reclaimable:20351 slab_unreclaimable:93309 [ 74.906205][ T4322] mapped:30456 shmem:1638 pagetables:635 bounce:0 [ 74.906205][ T4322] kernel_misc_reclaimable:0 [ 74.906205][ T4322] free:1390188 free_pcp:7551 free_cma:0 [ 74.958965][ T4322] Node 0 active_anon:1048kB inactive_anon:21976kB active_file:16136kB inactive_file:152664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122124kB dirty:11972kB writeback:0kB shmem:4472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10388kB pagetables:2540kB all_unreclaimable? no [ 75.015552][ T4299] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 75.065954][ T4322] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:20kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 75.106184][ T4322] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 75.143089][ T4322] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 75.155790][ T4322] Node 0 DMA32 free:1630792kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1048kB inactive_anon:22076kB active_file:21436kB inactive_file:147964kB unevictable:1536kB writepending:12244kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:17376kB local_pcp:5604kB free_cma:0kB [ 75.196187][ T4322] lowmem_reserve[]: 0 0 0 0 0 [ 75.201169][ T4322] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 75.246247][ T4322] lowmem_reserve[]: 0 0 0 0 0 [ 75.256419][ T4322] Node 1 Normal free:3912580kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:20kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:13608kB local_pcp:8244kB free_cma:0kB [ 75.323134][ T4269] usb 4-1: USB disconnect, device number 2 [ 75.347248][ T4322] lowmem_reserve[]: 0 0 0 0 0 [ 75.352139][ T4322] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 75.353610][ T4269] usblp0: removed [ 75.393055][ T4322] Node 0 DMA32: 5*4kB (M) 5*8kB (UME) 3*16kB (M) 3*32kB (UME) 5*64kB (UME) 6*128kB (UME) 5*256kB (UME) 4*512kB (ME) 3*1024kB (ME) 2*2048kB (UM) 395*4096kB (M) = 1629708kB [ 75.443772][ T4322] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 75.469427][ T4322] Node 1 Normal: 83*4kB (UME) 30*8kB (UME) 22*16kB (UME) 60*32kB (UME) 31*64kB (UME) 16*128kB (UME) 5*256kB (U) 2*512kB (U) 0*1024kB 2*2048kB (UM) 952*4096kB (M) = 3912668kB [ 75.511236][ T4322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 75.521767][ T4322] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 75.531549][ T4322] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 75.542764][ T4322] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 75.552492][ T4322] 42695 total pagecache pages [ 75.557435][ T4322] 0 pages in swap cache [ 75.561726][ T4322] Swap cache stats: add 0, delete 0, find 0/0 [ 75.568350][ T4322] Free swap = 124996kB [ 75.572537][ T4322] Total swap = 124996kB [ 75.576731][ T4322] 2097051 pages RAM [ 75.580953][ T4322] 0 pages HighMem/MovableOnly [ 75.586218][ T4322] 415313 pages reserved [ 75.590522][ T4322] 0 pages cma reserved [ 76.906795][ T4357] device syzkaller0 entered promiscuous mode [ 76.922016][ T4267] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.159667][ T1110] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.297803][ T4267] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 77.320026][ T4267] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 77.356350][ T4267] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 77.374485][ T4267] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 77.386169][ T4267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.428359][ T4347] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.435752][ T4347] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.471364][ T4267] pl2303 4-1:1.0: pl2303 converter detected [ 77.509246][ T4367] ftl_cs: FTL header not found. [ 77.532020][ T4267] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 77.567268][ T1110] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.617763][ T1110] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.655453][ T4367] block2mtd: mtd1: [/dev/zram0] erase_size = 4KiB [4096] [ 77.817338][ T1110] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 77.832231][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.843419][ T4347] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 77.857690][ T4347] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 77.866320][ T4383] ip_tables: iptables: counters copy to user failed while replacing table [ 77.872621][ T1110] usb 1-1: Product: syz [ 77.872645][ T1110] usb 1-1: Manufacturer: syz [ 77.872661][ T1110] usb 1-1: SerialNumber: syz [ 77.878110][ T4347] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 77.897405][ T4347] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 77.922688][ T4347] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 78.197323][ T4346] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 78.277130][ T4346] pl2303 ttyUSB0: error sending break = -32 [ 78.309933][ T1110] usb 4-1: USB disconnect, device number 3 [ 78.354264][ T1110] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 78.375772][ T4264] usb 1-1: USB disconnect, device number 2 [ 78.386822][ T1110] pl2303 4-1:1.0: device disconnected [ 78.736258][ T1110] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.955744][ T4432] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.989192][ T4203] block nbd1: Receive control failed (result -32) [ 78.989685][ T4394] block nbd1: shutting down sockets [ 79.054726][ T4440] device syzkaller0 entered promiscuous mode [ 79.177251][ T4264] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.577263][ T4264] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 79.586085][ T4264] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.600764][ T4438] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.633636][ T4264] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 79.643076][ T4264] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.767422][ T4264] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 79.776641][ T4264] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 79.785160][ T4264] usb 5-1: Product: syz [ 79.789960][ T4264] usb 5-1: Manufacturer: syz [ 79.848877][ T4264] cdc_wdm 5-1:1.0: skipping garbage [ 79.860499][ T4264] cdc_wdm 5-1:1.0: skipping garbage [ 79.905858][ T4264] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 79.918315][ T4264] cdc_wdm 5-1:1.0: Unknown control protocol [ 80.100710][ T4199] usb 5-1: USB disconnect, device number 2 [ 80.164106][ T4488] page:ffffea0004600000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 80.167682][ T1110] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.198200][ T4488] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 80.216710][ T4488] raw: 017ff00000001000 ffffea0004600008 ffffea0004600008 0000000000000000 [ 80.239746][ T4488] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 80.254352][ T4488] page dumped because: unmovable page [ 80.260475][ T4488] page_owner info is not present (never set?) [ 80.420478][ T4500] jffs2: notice: (4500) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 80.447230][ T1110] usb 1-1: Using ep0 maxpacket: 8 [ 80.555048][ T4511] ip_tables: iptables: counters copy to user failed while replacing table [ 80.577343][ T1110] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.597347][ T1110] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 80.613816][ T1110] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.664809][ T1110] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 80.702582][ T1110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.768358][ T1110] hub 1-1:1.0: bad descriptor, ignoring hub [ 80.779826][ T1110] hub: probe of 1-1:1.0 failed with error -5 [ 80.791766][ T1110] cdc_wdm 1-1:1.0: skipping garbage [ 80.810703][ T1110] cdc_wdm 1-1:1.0: skipping garbage [ 80.839362][ T1110] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 80.855557][ T1110] cdc_wdm 1-1:1.0: Unknown control protocol [ 80.973277][ T4271] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.057280][ T4264] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.257044][ T4535] FAULT_INJECTION: forcing a failure. [ 81.257044][ T4535] name failslab, interval 1, probability 0, space 0, times 1 [ 81.272827][ T4271] usb 2-1: Using ep0 maxpacket: 16 [ 81.297161][ T4535] CPU: 1 PID: 4535 Comm: syz.2.47 Not tainted syzkaller #0 [ 81.304432][ T4535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.314523][ T4535] Call Trace: [ 81.317869][ T4535] [ 81.320858][ T4535] dump_stack_lvl+0x188/0x250 [ 81.325584][ T4535] ? show_regs_print_info+0x20/0x20 [ 81.330833][ T4535] ? load_image+0x410/0x410 [ 81.335380][ T4535] ? __lock_acquire+0x7d40/0x7d40 [ 81.340456][ T4535] should_fail+0x383/0x4b0 [ 81.344921][ T4535] should_failslab+0x5/0x20 [ 81.349458][ T4535] slab_pre_alloc_hook+0x51/0xc0 [ 81.354428][ T4535] __kmalloc_node+0x6d/0x3a0 [ 81.359051][ T4535] ? crypto_create_tfm_node+0x72/0x340 [ 81.364656][ T4535] crypto_create_tfm_node+0x72/0x340 [ 81.369988][ T4535] crypto_spawn_tfm2+0x58/0x90 [ 81.374824][ T4535] pkcs1pad_init_tfm+0x44/0x120 [ 81.379749][ T4535] crypto_create_tfm_node+0xfa/0x340 [ 81.385099][ T4535] crypto_alloc_tfm_node+0x177/0x360 [ 81.390448][ T4535] public_key_verify_signature+0x27b/0xd40 [ 81.396312][ T4535] ? __kasan_kmalloc+0xaf/0xe0 [ 81.401118][ T4535] ? asymmetric_key_generate_id+0x52/0xd0 [ 81.406881][ T4535] ? x509_cert_parse+0x53a/0x7a0 [ 81.411859][ T4535] ? x509_key_preparse+0x60/0x5d0 [ 81.417021][ T4535] ? asymmetric_key_preparse+0xa5/0x140 [ 81.422622][ T4535] ? key_create_or_update+0x432/0xa40 [ 81.428029][ T4535] ? __se_sys_add_key+0x34b/0x410 [ 81.433090][ T4535] ? do_syscall_64+0x4c/0xa0 [ 81.437727][ T4535] ? public_key_free+0x80/0x80 [ 81.442559][ T4535] ? asymmetric_key_id_same+0x63/0xe0 [ 81.447975][ T4535] x509_check_for_self_signed+0x317/0x420 [ 81.453741][ T4535] x509_cert_parse+0x59c/0x7a0 [ 81.458551][ T4535] x509_key_preparse+0x60/0x5d0 [ 81.463452][ T4535] ? down_read+0x1aa/0x2e0 [ 81.467907][ T4535] asymmetric_key_preparse+0xa5/0x140 [ 81.473323][ T4535] key_create_or_update+0x432/0xa40 [ 81.478559][ T4535] ? security_key_permission+0x7c/0xa0 [ 81.484093][ T4535] ? key_type_put+0x20/0x20 [ 81.488647][ T4535] ? lookup_user_key_possessed+0x40/0x40 [ 81.494334][ T4535] ? __might_fault+0xb3/0x110 [ 81.499159][ T4535] __se_sys_add_key+0x34b/0x410 [ 81.504067][ T4535] ? __x64_sys_add_key+0xc0/0xc0 [ 81.509052][ T4535] ? lockdep_hardirqs_on+0x94/0x140 [ 81.514294][ T4535] ? __x64_sys_add_key+0x1c/0xc0 [ 81.519275][ T4535] do_syscall_64+0x4c/0xa0 [ 81.523741][ T4535] ? clear_bhb_loop+0x30/0x80 [ 81.528455][ T4535] ? clear_bhb_loop+0x30/0x80 [ 81.533170][ T4535] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.539156][ T4535] RIP: 0033:0x7f47f5662559 [ 81.543613][ T4535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.563256][ T4535] RSP: 002b:00007f47f38ba028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 81.567902][ T4271] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.571711][ T4535] RAX: ffffffffffffffda RBX: 00007f47f58e9fa0 RCX: 00007f47f5662559 [ 81.590589][ T4535] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 81.598631][ T4535] RBP: 00007f47f56f98b0 R08: 0000000035a46e3f R09: 0000000000000000 [ 81.600426][ T4271] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.606642][ T4535] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 81.606660][ T4535] R13: 00007f47f58ea038 R14: 00007f47f58e9fa0 R15: 00007ffe243e0f88 [ 81.606693][ T4535] [ 81.644038][ T4271] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.657512][ T4264] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.675484][ T4264] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 81.685299][ T4271] usb 2-1: config 0 interface 0 has no altsetting 0 [ 81.701737][ T4264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.715731][ T4271] usb 2-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 81.749018][ T4271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.779836][ T4264] metro_usb 5-1:1.0: Metrologic USB to Serial converter detected [ 81.790461][ T4271] usb 2-1: config 0 descriptor?? [ 81.805126][ T4264] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 82.026271][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 82.040793][ T13] usb 5-1: USB disconnect, device number 3 [ 82.051425][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 82.070572][ T13] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 82.086596][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 82.098206][ T13] metro_usb 5-1:1.0: device disconnected [ 82.112588][ T4551] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 82.181436][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 82.192673][ T4556] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.218025][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 82.243383][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 82.264162][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 82.297749][ T4271] input: HID 046d:c215 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046D:C215.0002/input/input8 [ 82.348306][ T4549] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 82.411535][ T4271] logitech 0003:046D:C215.0002: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.1-1/input0 [ 82.427980][ T4550] syz.2.50 (4550) used greatest stack depth: 20496 bytes left [ 82.505372][ T4199] usb 1-1: USB disconnect, device number 3 [ 82.588402][ T4271] usb 2-1: USB disconnect, device number 2 [ 82.613869][ T4558] fido_id[4558]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 82.652561][ T4560] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 82.772327][ T4573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 82.780705][ T4570] loop5: detected capacity change from 0 to 4095 [ 82.818869][ T4574] device syzkaller0 entered promiscuous mode [ 82.852771][ C0] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 82.889836][ C0] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.901342][ C0] Buffer I/O error on dev loop5, logical block 480, async page read [ 82.958798][ C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 82.970687][ T4583] ip_tables: iptables: counters copy to user failed while replacing table [ 82.973439][ C0] blk_update_request: I/O error, dev loop5, sector 1240 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 82.991204][ C0] blk_update_request: I/O error, dev loop5, sector 2328 op 0x0:(READ) flags 0x80700 phys_seg 29 prio class 0 [ 83.007656][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.019515][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 83.087528][ T26] audit: type=1800 audit(1792057341.144:2): pid=4585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.64" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 83.159470][ T4589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.66'. [ 83.182216][ T4589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.66'. [ 83.215576][ T4587] device syzkaller0 entered promiscuous mode [ 83.438922][ T4604] jffs2: notice: (4604) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 83.552410][ T4598] jffs2: notice: (4598) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 83.677153][ T4199] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.850654][ T4627] FAULT_INJECTION: forcing a failure. [ 83.850654][ T4627] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 83.865458][ T4627] CPU: 0 PID: 4627 Comm: syz.0.78 Not tainted syzkaller #0 [ 83.872762][ T4627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.882961][ T4627] Call Trace: [ 83.886302][ T4627] [ 83.889275][ T4627] dump_stack_lvl+0x188/0x250 [ 83.894006][ T4627] ? show_regs_print_info+0x20/0x20 [ 83.899249][ T4627] ? load_image+0x410/0x410 [ 83.903823][ T4627] ? __lock_acquire+0x7d40/0x7d40 [ 83.908915][ T4627] ? mark_lock+0x94/0x320 [ 83.913301][ T4627] should_fail+0x383/0x4b0 [ 83.917778][ T4627] _copy_from_user+0x2e/0x170 [ 83.922518][ T4627] __copy_msghdr_from_user+0xc9/0x630 [ 83.928008][ T4627] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 83.933355][ T4627] ? rcu_is_watching+0x11/0xa0 [ 83.938162][ T4627] ? verify_lock_unused+0x140/0x140 [ 83.943405][ T4627] ? kfree+0x4a/0x2a0 [ 83.947440][ T4627] ___sys_sendmsg+0x19a/0x2e0 [ 83.952171][ T4627] ? __sys_sendmsg+0x290/0x290 [ 83.957010][ T4627] ? __might_fault+0xb3/0x110 [ 83.961737][ T4627] __sys_sendmmsg+0x2ba/0x500 [ 83.966487][ T4627] ? __ia32_sys_sendmsg+0x80/0x80 [ 83.971601][ T4627] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 83.977638][ T4627] ? lock_chain_count+0x20/0x20 [ 83.982547][ T4627] __x64_sys_sendmmsg+0x9c/0xb0 [ 83.987455][ T4627] do_syscall_64+0x4c/0xa0 [ 83.991914][ T4627] ? clear_bhb_loop+0x30/0x80 [ 83.996633][ T4627] ? clear_bhb_loop+0x30/0x80 [ 84.001368][ T4627] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.007324][ T4627] RIP: 0033:0x7f31d2b16559 [ 84.011777][ T4627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.031433][ T4627] RSP: 002b:00007f31d0d6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 84.039912][ T4627] RAX: ffffffffffffffda RBX: 00007f31d2d9dfa0 RCX: 00007f31d2b16559 [ 84.048075][ T4199] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 84.048079][ T4627] RDX: 000000000000003b RSI: 00002000000003c0 RDI: 0000000000000005 [ 84.048104][ T4199] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 84.057824][ T4627] RBP: 00007f31d2bad8b0 R08: 0000000000000000 R09: 0000000000000000 [ 84.057842][ T4627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.057856][ T4627] R13: 00007f31d2d9e038 R14: 00007f31d2d9dfa0 R15: 00007ffcb2eb3818 [ 84.057892][ T4627] [ 84.297323][ T4199] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 84.306442][ T4199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 84.334612][ T4199] usb 2-1: Product: syz [ 84.345405][ T4638] tipc: Started in network mode [ 84.352048][ T4199] usb 2-1: Manufacturer: syz [ 84.362394][ T4638] tipc: Node identity 1001001, cluster identity 4711 [ 84.408065][ T4638] tipc: Node number set to 16781313 [ 84.415557][ T4642] tipc: Enabled bearer , priority 0 [ 84.423860][ T4199] iuu_phoenix 2-1:1.0: iuu_phoenix converter detected [ 84.439984][ T4199] usb 2-1: iuu_phoenix converter now attached to ttyUSB0 [ 84.822372][ T4663] FAULT_INJECTION: forcing a failure. [ 84.822372][ T4663] name failslab, interval 1, probability 0, space 0, times 0 [ 84.841983][ T4663] CPU: 0 PID: 4663 Comm: syz.2.87 Not tainted syzkaller #0 [ 84.849265][ T4663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.859375][ T4663] Call Trace: [ 84.862687][ T4663] [ 84.865643][ T4663] dump_stack_lvl+0x188/0x250 [ 84.870371][ T4663] ? show_regs_print_info+0x20/0x20 [ 84.875612][ T4663] ? load_image+0x410/0x410 [ 84.880167][ T4663] ? __might_sleep+0xf0/0xf0 [ 84.884937][ T4663] ? __lock_acquire+0x7d40/0x7d40 [ 84.890023][ T4663] should_fail+0x383/0x4b0 [ 84.894502][ T4663] should_failslab+0x5/0x20 [ 84.899046][ T4663] slab_pre_alloc_hook+0x51/0xc0 [ 84.904028][ T4663] ? new_inode_pseudo+0x77/0x210 [ 84.909021][ T4663] kmem_cache_alloc+0x3d/0x280 [ 84.913830][ T4663] ? lookup_one_common+0x460/0x460 [ 84.918995][ T4663] new_inode_pseudo+0x77/0x210 [ 84.923802][ T4663] new_inode+0x25/0x1d0 [ 84.927998][ T4663] ? start_creating+0x1f5/0x310 [ 84.932909][ T4663] __debugfs_create_file+0x147/0x500 [ 84.938376][ T4663] kvm_dev_ioctl+0x1ad0/0x20a0 [ 84.943244][ T4663] ? hardware_enable_nolock+0x130/0x130 [ 84.948877][ T4663] ? bpf_lsm_file_ioctl+0x5/0x10 [ 84.953877][ T4663] ? security_file_ioctl+0x7c/0xa0 [ 84.959046][ T4663] ? hardware_enable_nolock+0x130/0x130 [ 84.964651][ T4663] __se_sys_ioctl+0xfa/0x170 [ 84.969289][ T4663] do_syscall_64+0x4c/0xa0 [ 84.973770][ T4663] ? clear_bhb_loop+0x30/0x80 [ 84.978511][ T4663] ? clear_bhb_loop+0x30/0x80 [ 84.983338][ T4663] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.989285][ T4663] RIP: 0033:0x7f47f5662559 [ 84.993749][ T4663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.013695][ T4663] RSP: 002b:00007f47f38ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.022158][ T4663] RAX: ffffffffffffffda RBX: 00007f47f58e9fa0 RCX: 00007f47f5662559 [ 85.030168][ T4663] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 85.038172][ T4663] RBP: 00007f47f56f98b0 R08: 0000000000000000 R09: 0000000000000000 [ 85.046181][ T4663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.054199][ T4663] R13: 00007f47f58ea038 R14: 00007f47f58e9fa0 R15: 00007ffe243e0f88 [ 85.062227][ T4663] [ 85.083132][ T4663] debugfs: out of free dentries, can not create file 'max_mmu_rmap_size' [ 85.124013][ T4670] CIFS: Attempting to mount \\127.0.0.1\share [ 85.139826][ T4652] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 85.157469][ T4652] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 85.181224][ T4672] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 85.366387][ T4670] CIFS: VFS: \\127.0.0.1 Invalid 0x0 dialect returned: not requested [ 85.411523][ T4670] CIFS: VFS: cifs_mount failed w/return code = -5 [ 85.582320][ T4692] device syzkaller0 entered promiscuous mode [ 85.607315][ T4692] 0: reclassify loop, rule prio 0, protocol 800 [ 85.817890][ T4602] iuu_phoenix ttyUSB0: iuu_open - failed submitting read urb, error -90 [ 85.827226][ T4199] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 85.842501][ T4267] usb 2-1: USB disconnect, device number 3 [ 85.871977][ T4267] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 85.900863][ T4267] iuu_phoenix 2-1:1.0: device disconnected [ 85.933504][ T4694] FAULT_INJECTION: forcing a failure. [ 85.933504][ T4694] name failslab, interval 1, probability 0, space 0, times 0 [ 85.959709][ T4694] CPU: 0 PID: 4694 Comm: syz.3.95 Not tainted syzkaller #0 [ 85.966991][ T4694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.977076][ T4694] Call Trace: [ 85.980392][ T4694] [ 85.983364][ T4694] dump_stack_lvl+0x188/0x250 [ 85.988093][ T4694] ? show_regs_print_info+0x20/0x20 [ 85.993347][ T4694] ? load_image+0x410/0x410 [ 85.997897][ T4694] ? __lock_acquire+0x7d40/0x7d40 [ 86.002978][ T4694] should_fail+0x383/0x4b0 [ 86.007450][ T4694] should_failslab+0x5/0x20 [ 86.012003][ T4694] slab_pre_alloc_hook+0x51/0xc0 [ 86.016997][ T4694] kmem_cache_alloc_trace+0x47/0x290 [ 86.022327][ T4694] ? vidtv_psi_sdt_table_init+0x52/0x2b0 [ 86.028124][ T4694] vidtv_psi_sdt_table_init+0x52/0x2b0 [ 86.033640][ T4694] vidtv_channel_si_init+0xce/0x15c0 [ 86.038985][ T4694] ? vidtv_channel_s302m_init+0x63a/0x830 [ 86.044778][ T4694] vidtv_mux_init+0x4ff/0x1950 [ 86.049607][ T4694] ? __mutex_lock_common+0x435/0x2400 [ 86.055048][ T4694] vidtv_start_feed+0x368/0x590 [ 86.059964][ T4694] ? vidtv_i2c_func+0x10/0x10 [ 86.064727][ T4694] ? vidtv_stop_feed+0x250/0x250 [ 86.069731][ T4694] ? _raw_spin_lock_irq+0xb7/0xf0 [ 86.074806][ T4694] ? _raw_spin_lock_irqsave+0x100/0x100 [ 86.077668][ T4199] usb 5-1: Using ep0 maxpacket: 8 [ 86.080398][ T4694] ? _raw_spin_unlock_irq+0x1f/0x40 [ 86.090704][ T4694] dmx_section_feed_start_filtering+0x4f3/0x680 [ 86.097016][ T4694] dvb_dmxdev_filter_start+0xc62/0x1060 [ 86.102631][ T4694] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 86.108141][ T4694] dvb_demux_do_ioctl+0x463/0x530 [ 86.113208][ T4694] dvb_usercopy+0x191/0x2b0 [ 86.117752][ T4694] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 86.123354][ T4694] ? dvb_generic_ioctl+0xb0/0xb0 [ 86.128372][ T4694] ? dvb_demux_poll+0x210/0x210 [ 86.133358][ T4694] dvb_demux_ioctl+0x25/0x30 [ 86.137989][ T4694] __se_sys_ioctl+0xfa/0x170 [ 86.142623][ T4694] do_syscall_64+0x4c/0xa0 [ 86.147090][ T4694] ? clear_bhb_loop+0x30/0x80 [ 86.151811][ T4694] ? clear_bhb_loop+0x30/0x80 [ 86.156554][ T4694] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.162495][ T4694] RIP: 0033:0x7f0839ed7559 [ 86.166970][ T4694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.186626][ T4694] RSP: 002b:00007f083812f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.195121][ T4694] RAX: ffffffffffffffda RBX: 00007f083a15efa0 RCX: 00007f0839ed7559 [ 86.203144][ T4694] RDX: 00002000000005c0 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 86.208010][ T4199] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 86.211153][ T4694] RBP: 00007f0839f6e8b0 R08: 0000000000000000 R09: 0000000000000000 [ 86.227688][ T4694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.235703][ T4694] R13: 00007f083a15f038 R14: 00007f083a15efa0 R15: 00007fff372efff8 [ 86.237408][ T4199] usb 5-1: config 179 has no interface number 0 [ 86.243744][ T4694] [ 86.268133][ T4199] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 86.310016][ T4199] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 86.341895][ T4199] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 86.370584][ T4199] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 86.391276][ T4199] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 86.404802][ T4199] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 86.417310][ T4199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.457449][ T4689] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 86.564094][ T4705] binder_alloc: 4704: binder_alloc_buf size 12344 failed, no address space [ 86.574524][ T4705] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 86.597837][ T1107] cfg80211: failed to load regulatory.db [ 86.607319][ T4264] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.673741][ T4709] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 86.752032][ T1110] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input10 [ 86.788025][ T4199] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.794487][ T4709] CacheFiles: Empty tag specified [ 86.977154][ T1107] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.999348][ T4264] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.010774][ T4264] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 87.022438][ T4264] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 87.035928][ T4199] usb 4-1: Using ep0 maxpacket: 8 [ 87.039447][ T4264] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 87.050823][ T4264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.087597][ T4267] usb 5-1: USB disconnect, device number 4 [ 87.107066][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 87.116258][ T4267] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 87.177389][ T4199] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 87.194162][ T4199] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 87.204281][ T4199] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.221319][ T4199] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.237101][ T1107] usb 2-1: Using ep0 maxpacket: 8 [ 87.247898][ T4199] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.261292][ T4199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.537354][ T4199] usb 4-1: GET_CAPABILITIES returned 0 [ 87.543028][ T4199] usbtmc 4-1:16.0: can't read capabilities [ 87.564076][ T4264] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 87.586647][ T4264] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 87.614103][ T4264] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 87.636720][ T4727] Bluetooth: hci0: unsupported parameter 5134 [ 87.649060][ T4264] cxacru: probe of 1-1:1.0 failed with error -71 [ 87.656818][ T4727] Bluetooth: hci0: unsupported parameter 8192 [ 87.680167][ T4727] Bluetooth: hci0: unsupported parameter 5134 [ 87.686599][ T4264] usb 1-1: USB disconnect, device number 4 [ 87.693472][ T4727] Bluetooth: hci0: unsupported parameter 8192 [ 87.770451][ T4199] usb 4-1: USB disconnect, device number 4 [ 87.963924][ T4735] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 87.973549][ T4735] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 88.211178][ T4747] file system registered [ 89.117980][ T4752] FAULT_INJECTION: forcing a failure. [ 89.117980][ T4752] name failslab, interval 1, probability 0, space 0, times 0 [ 89.162210][ T4752] CPU: 0 PID: 4752 Comm: syz.0.111 Not tainted syzkaller #0 [ 89.169771][ T4752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.179863][ T4752] Call Trace: [ 89.183187][ T4752] [ 89.186158][ T4752] dump_stack_lvl+0x188/0x250 [ 89.190896][ T4752] ? show_regs_print_info+0x20/0x20 [ 89.196146][ T4752] ? load_image+0x410/0x410 [ 89.200699][ T4752] ? __might_sleep+0xf0/0xf0 [ 89.205329][ T4752] ? __lock_acquire+0x7d40/0x7d40 [ 89.210398][ T4752] ? __lock_acquire+0x7d40/0x7d40 [ 89.215578][ T4752] should_fail+0x383/0x4b0 [ 89.220037][ T4752] should_failslab+0x5/0x20 [ 89.224577][ T4752] slab_pre_alloc_hook+0x51/0xc0 [ 89.229563][ T4752] __kmalloc_node+0x6d/0x3a0 [ 89.234196][ T4752] ? kvmalloc_node+0x84/0x130 [ 89.238918][ T4752] kvmalloc_node+0x84/0x130 [ 89.243463][ T4752] map_update_elem+0x308/0x760 [ 89.248294][ T4752] __sys_bpf+0x46b/0x6f0 [ 89.252592][ T4752] ? bpf_link_show_fdinfo+0x380/0x380 [ 89.258033][ T4752] __x64_sys_bpf+0x78/0x90 [ 89.262500][ T4752] do_syscall_64+0x4c/0xa0 [ 89.266964][ T4752] ? clear_bhb_loop+0x30/0x80 [ 89.271687][ T4752] ? clear_bhb_loop+0x30/0x80 [ 89.276421][ T4752] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.282469][ T4752] RIP: 0033:0x7f31d2b16559 [ 89.286924][ T4752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.306571][ T4752] RSP: 002b:00007f31d0d6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.315161][ T4752] RAX: ffffffffffffffda RBX: 00007f31d2d9dfa0 RCX: 00007f31d2b16559 [ 89.323193][ T4752] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000002 [ 89.331302][ T4752] RBP: 00007f31d2bad8b0 R08: 0000000000000000 R09: 0000000000000000 [ 89.339329][ T4752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.347442][ T4752] R13: 00007f31d2d9e038 R14: 00007f31d2d9dfa0 R15: 00007ffcb2eb3818 [ 89.355476][ T4752] [ 89.548323][ T4772] FAULT_INJECTION: forcing a failure. [ 89.548323][ T4772] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 89.599158][ T4772] CPU: 0 PID: 4772 Comm: syz.2.118 Not tainted syzkaller #0 [ 89.606520][ T4772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.616700][ T4772] Call Trace: [ 89.620639][ T4772] [ 89.623612][ T4772] dump_stack_lvl+0x188/0x250 [ 89.628336][ T4772] ? show_regs_print_info+0x20/0x20 [ 89.633578][ T4772] ? load_image+0x410/0x410 [ 89.638132][ T4772] ? __lock_acquire+0x7d40/0x7d40 [ 89.643198][ T4772] ? rds_cong_from_addr+0x51/0x360 [ 89.648350][ T4772] ? rds_cong_get_maps+0x24/0xa0 [ 89.653369][ T4772] should_fail+0x383/0x4b0 [ 89.657850][ T4772] prepare_alloc_pages+0x1e3/0x5b0 [ 89.663024][ T4772] __alloc_pages+0x11b/0x480 [ 89.667666][ T4772] ? zone_statistics+0x170/0x170 [ 89.672677][ T4772] ? alloc_pages+0x452/0x560 [ 89.677411][ T4772] get_zeroed_page+0x13/0x30 [ 89.682048][ T4772] rds_cong_from_addr+0x10f/0x360 [ 89.687210][ T4772] ? rds_cong_get_maps+0x1b/0xa0 [ 89.692195][ T4772] rds_cong_get_maps+0x24/0xa0 [ 89.697007][ T4772] __rds_conn_create+0x91d/0x1ea0 [ 89.702099][ T4772] ? rds_conn_create+0x50/0x50 [ 89.706929][ T4772] rds_conn_create_outgoing+0x3f/0x50 [ 89.712354][ T4772] rds_sendmsg+0xf56/0x1d70 [ 89.717015][ T4772] ? rds_send_sndbuf_remove+0x230/0x230 [ 89.722609][ T4772] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 89.729073][ T4772] ? aa_sock_msg_perm+0x94/0x150 [ 89.734056][ T4772] ? apparmor_socket_sendmsg+0x88/0x230 [ 89.739654][ T4772] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 89.744992][ T4772] ? security_socket_sendmsg+0x7c/0xa0 [ 89.750502][ T4772] ? rds_send_sndbuf_remove+0x230/0x230 [ 89.756097][ T4772] ____sys_sendmsg+0x5be/0x8f0 [ 89.760918][ T4772] ? __sys_sendmsg_sock+0x30/0x30 [ 89.765997][ T4772] ? import_iovec+0x6f/0xa0 [ 89.770547][ T4772] ___sys_sendmsg+0x236/0x2e0 [ 89.775277][ T4772] ? __sys_sendmsg+0x290/0x290 [ 89.780130][ T4772] ? rds_bind+0x38d/0x870 [ 89.784519][ T4772] __se_sys_sendmsg+0x1b7/0x2a0 [ 89.789409][ T4772] ? __x64_sys_sendmsg+0x80/0x80 [ 89.794466][ T4772] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 89.800597][ T4772] ? lockdep_hardirqs_on+0x94/0x140 [ 89.805842][ T4772] do_syscall_64+0x4c/0xa0 [ 89.810372][ T4772] ? clear_bhb_loop+0x30/0x80 [ 89.815082][ T4772] ? clear_bhb_loop+0x30/0x80 [ 89.819802][ T4772] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.825920][ T4772] RIP: 0033:0x7f47f5662559 [ 89.830380][ T4772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.850037][ T4772] RSP: 002b:00007f47f38ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.858498][ T4772] RAX: ffffffffffffffda RBX: 00007f47f58e9fa0 RCX: 00007f47f5662559 [ 89.866519][ T4772] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 89.874626][ T4772] RBP: 00007f47f56f98b0 R08: 0000000000000000 R09: 0000000000000000 [ 89.882637][ T4772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.890855][ T4772] R13: 00007f47f58ea038 R14: 00007f47f58e9fa0 R15: 00007ffe243e0f88 [ 89.898889][ T4772] [ 89.917550][ T4775] FAULT_INJECTION: forcing a failure. [ 89.917550][ T4775] name failslab, interval 1, probability 0, space 0, times 0 [ 89.937313][ T1107] usb 2-1: unable to get BOS descriptor or descriptor too short [ 89.953944][ T4775] CPU: 0 PID: 4775 Comm: syz.3.119 Not tainted syzkaller #0 [ 89.961298][ T4775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.971390][ T4775] Call Trace: [ 89.974698][ T4775] [ 89.977660][ T4775] dump_stack_lvl+0x188/0x250 [ 89.982470][ T4775] ? show_regs_print_info+0x20/0x20 [ 89.987703][ T4775] ? load_image+0x410/0x410 [ 89.992241][ T4775] ? __lock_acquire+0x7d40/0x7d40 [ 89.997323][ T4775] should_fail+0x383/0x4b0 [ 90.001775][ T4775] should_failslab+0x5/0x20 [ 90.006411][ T4775] slab_pre_alloc_hook+0x51/0xc0 [ 90.011372][ T4775] ? security_inode_alloc+0x30/0x110 [ 90.016687][ T4775] kmem_cache_alloc+0x3d/0x280 [ 90.021579][ T4775] security_inode_alloc+0x30/0x110 [ 90.026713][ T4775] inode_init_always+0x8e5/0xc90 [ 90.031676][ T4775] new_inode_pseudo+0x8e/0x210 [ 90.036468][ T4775] sock_create_lite+0x87/0x500 [ 90.041249][ T4775] ? setup_net+0x39e/0xa10 [ 90.045681][ T4775] ? create_new_namespaces+0x3ce/0x700 [ 90.051164][ T4775] __netlink_kernel_create+0xfa/0x7d0 [ 90.056632][ T4775] ? netlink_set_err+0x3c0/0x3c0 [ 90.061614][ T4775] ? diag_net_init+0xa4/0x140 [ 90.066314][ T4775] diag_net_init+0xb9/0x140 [ 90.070838][ T4775] ? rcu_lock_release+0x20/0x20 [ 90.075728][ T4775] ? diag_net_exit+0x60/0x60 [ 90.080354][ T4775] ? sock_diag_rcv+0x40/0x40 [ 90.084965][ T4775] ? __raw_spin_lock_init+0x41/0x100 [ 90.090274][ T4775] ops_init+0x360/0x5f0 [ 90.094549][ T4775] setup_net+0x39e/0xa10 [ 90.098838][ T4775] ? copy_net_ns+0x5b0/0x5b0 [ 90.103448][ T4775] ? copy_net_ns+0x324/0x5b0 [ 90.108053][ T4775] ? down_read_killable+0x1ce/0x340 [ 90.113279][ T4775] copy_net_ns+0x33e/0x5b0 [ 90.117739][ T4775] create_new_namespaces+0x3ce/0x700 [ 90.123068][ T4775] unshare_nsproxy_namespaces+0x116/0x160 [ 90.128805][ T4775] ksys_unshare+0x4f6/0x8e0 [ 90.133321][ T4775] ? __lock_acquire+0x7d40/0x7d40 [ 90.138365][ T4775] ? sighand_ctor+0x40/0x40 [ 90.142927][ T4775] ? lock_chain_count+0x20/0x20 [ 90.147803][ T4775] ? syscall_enter_from_user_mode+0x21/0x70 [ 90.153720][ T4775] __x64_sys_unshare+0x34/0x40 [ 90.158503][ T4775] do_syscall_64+0x4c/0xa0 [ 90.162940][ T4775] ? clear_bhb_loop+0x30/0x80 [ 90.167641][ T4775] ? clear_bhb_loop+0x30/0x80 [ 90.172338][ T4775] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.178252][ T4775] RIP: 0033:0x7f0839ed7559 [ 90.182721][ T4775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.202343][ T4775] RSP: 002b:00007f083812f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 90.210778][ T4775] RAX: ffffffffffffffda RBX: 00007f083a15efa0 RCX: 00007f0839ed7559 [ 90.218765][ T4775] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 90.226750][ T4775] RBP: 00007f0839f6e8b0 R08: 0000000000000000 R09: 0000000000000000 [ 90.234731][ T4775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.242713][ T4775] R13: 00007f083a15f038 R14: 00007f083a15efa0 R15: 00007fff372efff8 [ 90.250715][ T4775] [ 90.298770][ T4779] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 90.325743][ T1107] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 90.335848][ T1107] usb 2-1: can't read configurations, error -71 [ 90.396780][ T4781] device syzkaller0 entered promiscuous mode [ 90.403683][ T4779] CIFS: Attempting to mount \\127.0.0.1\share [ 90.434145][ T4786] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 90.441717][ T4779] CIFS: VFS: \\127.0.0.1 Invalid dialect returned by server 0x0 [ 90.463663][ T4779] CIFS: VFS: cifs_mount failed w/return code = -5 [ 90.752097][ T26] audit: type=1804 audit(1792057348.814:3): pid=4794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.125" name="/newroot/24/file0" dev="fuse" ino=1 res=1 errno=0 [ 91.055237][ T4812] input: syz1 as /devices/virtual/input/input11 [ 91.370254][ T4833] loop2: detected capacity change from 0 to 512 [ 91.488562][ T4837] FAULT_INJECTION: forcing a failure. [ 91.488562][ T4837] name failslab, interval 1, probability 0, space 0, times 0 [ 91.504299][ T4833] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.517199][ T4837] CPU: 1 PID: 4837 Comm: syz.0.141 Not tainted syzkaller #0 [ 91.524657][ T4837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.526829][ T4833] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.534787][ T4837] Call Trace: [ 91.534800][ T4837] [ 91.534809][ T4837] dump_stack_lvl+0x188/0x250 [ 91.534840][ T4837] ? show_regs_print_info+0x20/0x20 [ 91.534862][ T4837] ? load_image+0x410/0x410 [ 91.534885][ T4837] ? __might_sleep+0xf0/0xf0 [ 91.570299][ T4837] ? __lock_acquire+0x7d40/0x7d40 [ 91.575378][ T4837] should_fail+0x383/0x4b0 [ 91.579850][ T4837] should_failslab+0x5/0x20 [ 91.584399][ T4837] slab_pre_alloc_hook+0x51/0xc0 [ 91.589379][ T4837] __kmalloc+0x6b/0x340 [ 91.593567][ T4837] ? sk_prot_alloc+0xe7/0x210 [ 91.598284][ T4837] sk_prot_alloc+0xe7/0x210 [ 91.602810][ T4837] ? sk_alloc+0x1d/0x310 [ 91.607329][ T4837] sk_alloc+0x2f/0x310 [ 91.611432][ T4837] __netlink_create+0x6c/0x290 [ 91.616229][ T4837] ? __lock_acquire+0x7d40/0x7d40 [ 91.621293][ T4837] netlink_create+0x3a7/0x510 [ 91.625996][ T4837] ? rtnetlink_rcv+0x20/0x20 [ 91.630604][ T4837] __sock_create+0x473/0x910 [ 91.635250][ T4837] __sys_socket+0xe2/0x170 [ 91.639735][ T4837] __x64_sys_socket+0x76/0x80 [ 91.644459][ T4837] do_syscall_64+0x4c/0xa0 [ 91.648885][ T4837] ? clear_bhb_loop+0x30/0x80 [ 91.653575][ T4837] ? clear_bhb_loop+0x30/0x80 [ 91.658262][ T4837] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.664162][ T4837] RIP: 0033:0x7f31d2b16559 [ 91.668579][ T4837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.688188][ T4837] RSP: 002b:00007f31d0d6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 91.696625][ T4837] RAX: ffffffffffffffda RBX: 00007f31d2d9dfa0 RCX: 00007f31d2b16559 [ 91.704636][ T4837] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 91.712635][ T4837] RBP: 00007f31d2bad8b0 R08: 0000000000000000 R09: 0000000000000000 [ 91.720632][ T4837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.728621][ T4837] R13: 00007f31d2d9e038 R14: 00007f31d2d9dfa0 R15: 00007ffcb2eb3818 [ 91.736647][ T4837] [ 91.829494][ T4843] Zero length message leads to an empty skb [ 91.849726][ T4843] fs-verity (loop2, inode 15): Unrecognized descriptor size: 0 bytes [ 92.807235][ T4855] Line length is too long: Should be less than 4094 [ 93.862545][ T4861] loop3: detected capacity change from 0 to 512 [ 93.990073][ T4861] EXT4-fs (loop3): Ignoring removed bh option [ 94.254643][ T4861] EXT4-fs (loop3): quotafile must be on filesystem root [ 96.094721][ T4870] loop4: detected capacity change from 0 to 32768 [ 96.868327][ T4870] ======================================================= [ 96.868327][ T4870] WARNING: The mand mount option has been deprecated and [ 96.868327][ T4870] and is ignored by this kernel. Remove the mand [ 96.868327][ T4870] option from the mount to silence this warning. [ 96.868327][ T4870] ======================================================= [ 97.021596][ T4870] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 98.204717][ T4894] FAULT_INJECTION: forcing a failure. [ 98.204717][ T4894] name fail_futex, interval 1, probability 0, space 0, times 1 [ 98.304234][ T4894] CPU: 1 PID: 4894 Comm: syz.2.153 Not tainted syzkaller #0 [ 98.311590][ T4894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.321704][ T4894] Call Trace: [ 98.325008][ T4894] [ 98.327989][ T4894] dump_stack_lvl+0x188/0x250 [ 98.332709][ T4894] ? show_regs_print_info+0x20/0x20 [ 98.337933][ T4894] ? load_image+0x410/0x410 [ 98.342467][ T4894] ? mark_lock+0x94/0x320 [ 98.346833][ T4894] ? __lock_acquire+0x12df/0x7d40 [ 98.351897][ T4894] should_fail+0x383/0x4b0 [ 98.356356][ T4894] get_futex_key+0x1a1/0x12d0 [ 98.361071][ T4894] ? __lock_acquire+0x13b3/0x7d40 [ 98.366135][ T4894] ? futex_wait_restart+0x250/0x250 [ 98.371374][ T4894] futex_wake+0x101/0x540 [ 98.375743][ T4894] ? futex_wait+0x680/0x680 [ 98.380273][ T4894] ? verify_lock_unused+0x140/0x140 [ 98.385501][ T4894] ? verify_lock_unused+0x140/0x140 [ 98.390734][ T4894] do_futex+0xd83/0x12b0 [ 98.395022][ T4894] ? __lock_acquire+0x7d40/0x7d40 [ 98.400110][ T4894] ? futex_exit_release+0x1c0/0x1c0 [ 98.405350][ T4894] ? __context_tracking_exit+0x4c/0x80 [ 98.410842][ T4894] __se_sys_futex+0x389/0x420 [ 98.415570][ T4894] ? __x64_sys_futex+0xf0/0xf0 [ 98.420370][ T4894] ? __x64_sys_futex+0x1d/0xf0 [ 98.425174][ T4894] do_syscall_64+0x4c/0xa0 [ 98.429620][ T4894] ? clear_bhb_loop+0x30/0x80 [ 98.434329][ T4894] ? clear_bhb_loop+0x30/0x80 [ 98.439041][ T4894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.444978][ T4894] RIP: 0033:0x7f47f5662559 [ 98.449422][ T4894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.469141][ T4894] RSP: 002b:00007f47f38780e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 98.477592][ T4894] RAX: ffffffffffffffda RBX: 00007f47f58ea188 RCX: 00007f47f5662559 [ 98.485594][ T4894] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f47f58ea18c [ 98.493591][ T4894] RBP: 00007f47f58ea180 R08: 00090f57f6d59786 R09: 0000000000000000 [ 98.501598][ T4894] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 98.509594][ T4894] R13: 00007f47f58ea218 R14: 00007ffe243e0ea0 R15: 00007ffe243e0f88 [ 98.517608][ T4894] [ 98.545174][ T4185] ocfs2: Unmounting device (7,4) on (node local) [ 98.667260][ T4267] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 98.907180][ T4267] usb 4-1: Using ep0 maxpacket: 32 [ 98.977239][ T21] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.067332][ T4267] usb 4-1: unable to get BOS descriptor or descriptor too short [ 99.147314][ T4267] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 99.155539][ T4267] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 99.381470][ T4267] usb 4-1: config 14 has no interface number 0 [ 99.403184][ T4267] usb 4-1: config 14 has no interface number 1 [ 99.420457][ T4267] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 99.451821][ T4267] usb 4-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 99.500598][ T4267] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 99.517556][ T21] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 99.537972][ T21] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 99.560660][ T4267] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.586771][ T21] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 99.623639][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.634064][ T4267] usb 4-1: config 14 interface 57 has no altsetting 0 [ 99.654770][ T4267] usb 4-1: config 14 interface 228 has no altsetting 0 [ 99.762394][ T21] usb 5-1: probing VID:PID(0424:012C) [ 99.785542][ T21] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 99.805994][ T21] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 99.827924][ T4267] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 99.842527][ T21] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 99.853571][ T4267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.963256][ T21] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 99.976061][ T4267] usb 4-1: Product: syz [ 99.981304][ T21] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 99.995776][ T4267] usb 4-1: Manufacturer: syz [ 100.022006][ T4267] usb 4-1: SerialNumber: syz [ 100.277329][ T21] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 100.497285][ T21] usb 5-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 100.689293][ T4267] legousbtower 4-1:14.57: interrupt endpoints not found [ 100.911217][ T4267] legousbtower 4-1:14.228: interrupt endpoints not found [ 101.845829][ T13] usb 5-1: USB disconnect, device number 5 [ 101.853061][ T21] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 101.909132][ T4924] loop2: detected capacity change from 0 to 8192 [ 102.459914][ T13] USB vub300 remote SDIO host controller[0] now disconnected [ 102.947175][ T21] usb 4-1: USB disconnect, device number 5 [ 104.236334][ T4935] loop2: detected capacity change from 0 to 8192 [ 104.276224][ T4203] Bluetooth: hci2: Unknown advertising packet type: 0xf8 [ 104.276514][ T4203] ================================================================== [ 104.292432][ T4203] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12ea/0x3ca0 [ 104.300267][ T4203] Read of size 1 at addr ffff88802bc30408 by task kworker/u5:7/4203 [ 104.308267][ T4203] [ 104.310597][ T4203] CPU: 0 PID: 4203 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 104.318152][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.328241][ T4203] Workqueue: hci2 hci_rx_work [ 104.332927][ T4203] Call Trace: [ 104.336335][ T4203] [ 104.339315][ T4203] dump_stack_lvl+0x188/0x250 [ 104.344207][ T4203] ? show_regs_print_info+0x20/0x20 [ 104.349432][ T4203] ? load_image+0x410/0x410 [ 104.353964][ T4203] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 104.359437][ T4203] print_address_description+0x60/0x2d0 [ 104.365000][ T4203] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 104.370155][ T4203] kasan_report+0xdf/0x130 [ 104.374601][ T4203] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 104.379738][ T4203] hci_le_meta_evt+0x12ea/0x3ca0 [ 104.384690][ T4203] ? hci_event_packet+0x363/0x1310 [ 104.389824][ T4203] ? __lock_acquire+0x7d40/0x7d40 [ 104.394905][ T4203] ? hci_remote_host_features_evt+0x240/0x240 [ 104.400999][ T4203] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 104.406636][ T4203] ? mark_lock+0x94/0x320 [ 104.410971][ T4203] ? mutex_unlock+0x10/0x10 [ 104.415515][ T4203] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 104.421834][ T4203] ? lock_chain_count+0x20/0x20 [ 104.426711][ T4203] ? __rwlock_init+0x140/0x140 [ 104.431596][ T4203] hci_event_packet+0xe0b/0x1310 [ 104.436595][ T4203] ? _raw_spin_unlock+0x40/0x40 [ 104.441476][ T4203] ? rcu_lock_release+0x20/0x20 [ 104.446353][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 104.451557][ T4203] hci_rx_work+0x255/0xa10 [ 104.455992][ T4203] process_one_work+0x867/0xff0 [ 104.460860][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 104.466508][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 104.471897][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 104.476962][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 104.482559][ T4203] ? wq_worker_running+0x97/0x170 [ 104.487610][ T4203] worker_thread+0xad7/0x12a0 [ 104.492325][ T4203] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 104.498242][ T4203] kthread+0x42e/0x520 [ 104.502350][ T4203] ? rcu_lock_release+0x20/0x20 [ 104.507217][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 104.511823][ T4203] ret_from_fork+0x1f/0x30 [ 104.516264][ T4203] [ 104.519291][ T4203] [ 104.521658][ T4203] Allocated by task 4942: [ 104.525997][ T4203] __kasan_kmalloc+0xaf/0xe0 [ 104.530649][ T4203] __alloc_skb+0x22c/0x750 [ 104.535099][ T4203] vhci_write+0xbd/0x440 [ 104.539394][ T4203] vfs_write+0x748/0xd70 [ 104.543646][ T4203] ksys_write+0x153/0x260 [ 104.548000][ T4203] do_syscall_64+0x4c/0xa0 [ 104.552431][ T4203] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.558335][ T4203] [ 104.560677][ T4203] The buggy address belongs to the object at ffff88802bc30000 [ 104.560677][ T4203] which belongs to the cache kmalloc-1k of size 1024 [ 104.574735][ T4203] The buggy address is located 8 bytes to the right of [ 104.574735][ T4203] 1024-byte region [ffff88802bc30000, ffff88802bc30400) [ 104.588613][ T4203] The buggy address belongs to the page: [ 104.594246][ T4203] page:ffffea0000af0c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bc30 [ 104.604399][ T4203] head:ffffea0000af0c00 order:3 compound_mapcount:0 compound_pincount:0 [ 104.612744][ T4203] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 104.620734][ T4203] raw: 00fff00000010200 ffffea0001de8000 0000000600000006 ffff888017841dc0 [ 104.629316][ T4203] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 104.637887][ T4203] page dumped because: kasan: bad access detected [ 104.644290][ T4203] page_owner tracks the page as allocated [ 104.650003][ T4203] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4267, ts 71769970194, free_ts 71704719488 [ 104.668495][ T4203] get_page_from_freelist+0x24f6/0x2670 [ 104.674048][ T4203] __alloc_pages+0x1ee/0x480 [ 104.678668][ T4203] new_slab+0xc0/0x4b0 [ 104.682758][ T4203] ___slab_alloc+0x807/0xdd0 [ 104.687345][ T4203] __kmalloc_node_track_caller+0x13d/0x3a0 [ 104.693161][ T4203] __alloc_skb+0x22c/0x750 [ 104.697773][ T4203] inet6_rt_notify+0xe0/0x290 [ 104.702533][ T4203] fib6_add+0x1e9a/0x3ee0 [ 104.706923][ T4203] ip6_ins_rt+0xd3/0x130 [ 104.711170][ T4203] __ipv6_ifa_notify+0x4e4/0xe60 [ 104.716137][ T4203] addrconf_dad_completed+0x186/0xc80 [ 104.721555][ T4203] addrconf_dad_work+0xc83/0x1530 [ 104.726581][ T4203] process_one_work+0x867/0xff0 [ 104.731437][ T4203] worker_thread+0xad7/0x12a0 [ 104.736146][ T4203] kthread+0x42e/0x520 [ 104.740244][ T4203] ret_from_fork+0x1f/0x30 [ 104.744679][ T4203] page last free stack trace: [ 104.749697][ T4203] free_unref_page_prepare+0x637/0x6c0 [ 104.755165][ T4203] free_unref_page+0x8f/0x2a0 [ 104.759853][ T4203] __unfreeze_partials+0x188/0x1e0 [ 104.764968][ T4203] put_cpu_partial+0x12d/0x190 [ 104.769730][ T4203] qlist_free_all+0x35/0x90 [ 104.774266][ T4203] kasan_quarantine_reduce+0x150/0x160 [ 104.779733][ T4203] __kasan_slab_alloc+0x2f/0xc0 [ 104.784593][ T4203] slab_post_alloc_hook+0x4c/0x380 [ 104.789709][ T4203] kmem_cache_alloc_node+0x184/0x2c0 [ 104.794989][ T4203] __alloc_skb+0xf4/0x750 [ 104.799320][ T4203] alloc_skb_with_frags+0xa7/0x720 [ 104.804430][ T4203] sock_alloc_send_pskb+0x87f/0x9a0 [ 104.809635][ T4203] unix_dgram_sendmsg+0x6f8/0x19c0 [ 104.814774][ T4203] __sys_sendto+0x46d/0x620 [ 104.819295][ T4203] __x64_sys_sendto+0xda/0xf0 [ 104.824005][ T4203] do_syscall_64+0x4c/0xa0 [ 104.828436][ T4203] [ 104.830775][ T4203] Memory state around the buggy address: [ 104.836426][ T4203] ffff88802bc30300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 104.844495][ T4203] ffff88802bc30380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 104.852555][ T4203] >ffff88802bc30400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.860620][ T4203] ^ [ 104.864966][ T4203] ffff88802bc30480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.873178][ T4203] ffff88802bc30500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.881262][ T4203] ================================================================== [ 104.889334][ T4203] Disabling lock debugging due to kernel taint [ 104.899444][ T4203] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 104.906683][ T4203] CPU: 0 PID: 4203 Comm: kworker/u5:7 Tainted: G B syzkaller #0 [ 104.915640][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.925726][ T4203] Workqueue: hci2 hci_rx_work [ 104.930441][ T4203] Call Trace: [ 104.933745][ T4203] [ 104.936698][ T4203] dump_stack_lvl+0x188/0x250 [ 104.941414][ T4203] ? show_regs_print_info+0x20/0x20 [ 104.946646][ T4203] ? load_image+0x410/0x410 [ 104.951167][ T4203] panic+0x2f8/0x850 [ 104.955278][ T4203] ? bpf_jit_dump+0xd0/0xd0 [ 104.959817][ T4203] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 104.965837][ T4203] ? _raw_spin_unlock+0x40/0x40 [ 104.970721][ T4203] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 104.975860][ T4203] check_panic_on_warn+0x80/0xa0 [ 104.980809][ T4203] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 104.985939][ T4203] end_report+0x6d/0xf0 [ 104.990126][ T4203] kasan_report+0x102/0x130 [ 104.994686][ T4203] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 104.999802][ T4203] hci_le_meta_evt+0x12ea/0x3ca0 [ 105.004741][ T4203] ? hci_event_packet+0x363/0x1310 [ 105.009862][ T4203] ? __lock_acquire+0x7d40/0x7d40 [ 105.014910][ T4203] ? hci_remote_host_features_evt+0x240/0x240 [ 105.020987][ T4203] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 105.026639][ T4203] ? mark_lock+0x94/0x320 [ 105.030972][ T4203] ? mutex_unlock+0x10/0x10 [ 105.035505][ T4203] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 105.041504][ T4203] ? lock_chain_count+0x20/0x20 [ 105.046365][ T4203] ? __rwlock_init+0x140/0x140 [ 105.051139][ T4203] hci_event_packet+0xe0b/0x1310 [ 105.056095][ T4203] ? _raw_spin_unlock+0x40/0x40 [ 105.060960][ T4203] ? rcu_lock_release+0x20/0x20 [ 105.065833][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 105.071038][ T4203] hci_rx_work+0x255/0xa10 [ 105.075485][ T4203] process_one_work+0x867/0xff0 [ 105.081304][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 105.086949][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 105.092283][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 105.097318][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 105.102980][ T4203] ? wq_worker_running+0x97/0x170 [ 105.108042][ T4203] worker_thread+0xad7/0x12a0 [ 105.112756][ T4203] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 105.118679][ T4203] kthread+0x42e/0x520 [ 105.122754][ T4203] ? rcu_lock_release+0x20/0x20 [ 105.127610][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 105.132200][ T4203] ret_from_fork+0x1f/0x30 [ 105.136622][ T4203] [ 105.139983][ T4203] Kernel Offset: disabled [ 105.144325][ T4203] Rebooting in 86400 seconds..