last executing test programs: 11.967910264s ago: executing program 4 (id=331): bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000700)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000740)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000780), 0x0, 0x0) read$msr(r3, &(0x7f00000007c0)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 10.356140594s ago: executing program 3 (id=337): ioperm(0x4, 0x8, 0x5) prctl$PR_CAPBSET_DROP(0x18, 0x100000000001c) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r3, &(0x7f0000000340)=""/102392, 0x18ff8) syz_open_dev$usbfs(&(0x7f0000019340), 0x76, 0x10d201) 8.0875406s ago: executing program 3 (id=345): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) r3 = userfaultfd(0x80001) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r4, 0x8008976) r5 = syz_open_dev$sndpcmc(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, 0x0) dup2(r4, r3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing\x00', 0x1ff) mount$cgroup(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000240), 0x210000, 0x0) 7.125713864s ago: executing program 1 (id=348): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x74, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x52961}, [@IFLA_PORT_SELF={0x0, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x0, 0x2, 'geneve0\x00'}, @IFLA_PORT_PROFILE={0x0, 0x2, '\\{+%}\x00'}, @IFLA_PORT_VF={0x0, 0x1, 0x7}, @IFLA_PORT_REQUEST, @IFLA_PORT_REQUEST={0x0, 0x6, 0x3}]}, @IFLA_IFNAME={0x0, 0x3, 'veth0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x48000}, 0x80) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x80) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000380)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r6, &(0x7f0000000440)=""/102392, 0x18ff8) r7 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, r7, 0x0) inotify_add_watch(r2, &(0x7f00000002c0)='./file0/../file0\x00', 0x22000080) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, 0x0) 7.118806744s ago: executing program 4 (id=349): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000000600)=""/102392, 0x18ff8) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x17) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x42) io_setup(0x7, &(0x7f00000001c0)=0x0) io_submit(r6, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x10, &(0x7f0000000340)=0x2, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x20008045, &(0x7f0000000380)={0xa, 0x2, 0x401, @empty}, 0x1c) close(r5) r8 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r8}}) 6.020213341s ago: executing program 2 (id=351): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x5, 0x0) 6.003412291s ago: executing program 4 (id=352): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000002c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) getcwd(0x0, 0x0) 5.328238048s ago: executing program 1 (id=354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}, 0x1, 0x0, 0x0, 0x8840}, 0x4000090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0xffffffffffffff52, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000906050f0a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 5.25572828s ago: executing program 0 (id=355): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'vlan0\x00', &(0x7f0000000200)=@ethtool_link_settings={0x4c, 0x0, 0x65, 0xe1, 0x3d, 0x3, 0x3, 0x6, 0xee, 0x3, [0x4a0331b, 0x5, 0xd7, 0x8, 0x6, 0x1, 0xfffffffc, 0x6260]}}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x29, 0x0, 0x0) pipe2(0x0, 0x80080) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0x2, 0x80802, 0x0) getsockopt$inet_opts(r2, 0x0, 0x1a, 0x0, &(0x7f00000005c0)) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0'}, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0xa, 0xff6, &(0x7f0000001cc0)=""/4086, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 5.118412373s ago: executing program 1 (id=356): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x7, 0x7ffc0001}]}) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) 4.85694558s ago: executing program 1 (id=357): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_setup_io_uring(0x7bb3, 0x0, &(0x7f0000001f00), 0x0, 0x0) capset(0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(r0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r4, &(0x7f00000091c0)=""/16384, 0x4000) 4.159146727s ago: executing program 3 (id=358): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x20d42, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x101081, 0x20) 4.0307333s ago: executing program 0 (id=359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(r1, 0x400caed0, &(0x7f00000001c0)="02") 3.964614492s ago: executing program 3 (id=360): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x2000c814) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="68020000010501010000000000000000050000065402010000000000810000006400010405001f0073797a31000000000000000000000000000000000000000000000000000000003de49a697763c1d26b44090a94b4a1ae83a34cf498713925ae23432d7089339a787f7f7d5a7e01474465a1d8aa14418d6e38fff5c65bb86a04b08afd3de1b339f7ff080000000000010000807f00090002000000080000004001"], 0x268}, 0x1, 0x0, 0x0, 0x20044080}, 0x44) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x2000c050) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="440000001000010400000000000000000000000000000000000000000000000024", 0x21}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000018"], 0xfe33) 3.215160731s ago: executing program 1 (id=361): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x8533e000) gettimeofday(0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000001f40)=""/102392, 0x18ff8) bind$bt_hci(r0, &(0x7f000001af40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f000001af80)="2e000300010000", 0x7) 3.138455512s ago: executing program 0 (id=362): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAGE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000884) 3.138301192s ago: executing program 3 (id=363): syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030614030204003b24040402090402"], 0x0) 3.130110302s ago: executing program 2 (id=364): r0 = socket$kcm(0x2, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000c00)={r0}) 2.551465227s ago: executing program 4 (id=365): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x1, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r1) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010023010000340200000700000008000100", @ANYRES32], 0x1c}}, 0x0) 2.451212869s ago: executing program 0 (id=366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) 2.183029826s ago: executing program 1 (id=367): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue1\x00', 0x100}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x882) write$sndseq(r1, &(0x7f00000003c0)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 1.19634767s ago: executing program 2 (id=368): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x100040, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) 1.134374962s ago: executing program 0 (id=369): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, 0x0) r2 = dup(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000300)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000003380)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f000001c380)=0x410000002) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f000001c3c0)={@my=0x1}) connect$vsock_stream(0xffffffffffffffff, &(0x7f000001c400)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$TIOCL_SETSEL(r2, 0x541c, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) pread64(r1, &(0x7f00000000c0)=""/237, 0xed, 0x4eb) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/3, 0x3}], 0x1, 0x7fff, 0x5) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcd, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.134100892s ago: executing program 4 (id=370): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000002bc0)=0x10, 0x4) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000340)=0x8000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r2 = syz_create_resource$futex(&(0x7f0000000280)=0x1) futex(r2, 0x6, 0x1, 0x0, r2, 0x1) 668.921273ms ago: executing program 0 (id=371): r0 = epoll_create(0x3) syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x2000000}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 454.757409ms ago: executing program 2 (id=372): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e23, 0x5, @remote}, {0xa, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0xffffffffffffffff, 0x2}}, 0x48) 234.384514ms ago: executing program 2 (id=373): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c003780"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0) 100.438698ms ago: executing program 3 (id=374): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) rmdir(&(0x7f0000000140)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00') 355.2µs ago: executing program 2 (id=375): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000006c0)=0xef) 0s ago: executing program 4 (id=376): move_pages(0x0, 0x1efe, &(0x7f0000000740), 0x0, &(0x7f0000000780), 0x0) syz_emit_vhci(&(0x7f0000001ac0)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts. [ 50.282815][ T4173] cgroup: Unknown subsys name 'net' [ 50.408781][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.638342][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.007267][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 53.025215][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 53.058382][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 53.076753][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 53.161604][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 53.208508][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.216284][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.224361][ T4188] device bridge_slave_0 entered promiscuous mode [ 53.236823][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.243850][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.251977][ T4187] device bridge_slave_0 entered promiscuous mode [ 53.261927][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.269177][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.276840][ T4186] device bridge_slave_0 entered promiscuous mode [ 53.289915][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.297087][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.305026][ T4186] device bridge_slave_1 entered promiscuous mode [ 53.312438][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.319604][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.327398][ T4188] device bridge_slave_1 entered promiscuous mode [ 53.334432][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.341486][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.349173][ T4187] device bridge_slave_1 entered promiscuous mode [ 53.400634][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.407993][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.416054][ T4199] device bridge_slave_0 entered promiscuous mode [ 53.425017][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.441502][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.452035][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.464313][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.471396][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.479059][ T4199] device bridge_slave_1 entered promiscuous mode [ 53.487121][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.503324][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.514555][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.552413][ T4186] team0: Port device team_slave_0 added [ 53.572214][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.579370][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.587143][ T4193] device bridge_slave_0 entered promiscuous mode [ 53.601352][ T4186] team0: Port device team_slave_1 added [ 53.609690][ T4188] team0: Port device team_slave_0 added [ 53.618089][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.629476][ T4187] team0: Port device team_slave_0 added [ 53.635930][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.642980][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.650821][ T4193] device bridge_slave_1 entered promiscuous mode [ 53.668682][ T4188] team0: Port device team_slave_1 added [ 53.676056][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.686538][ T4187] team0: Port device team_slave_1 added [ 53.714717][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.733614][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.740878][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.766868][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.784897][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.795644][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.802583][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.828655][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.842767][ T4199] team0: Port device team_slave_0 added [ 53.850407][ T4199] team0: Port device team_slave_1 added [ 53.868129][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.875148][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.901100][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.912381][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.919593][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.945539][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.961761][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.968821][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.994985][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.028861][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.036083][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.062203][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.073622][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.080823][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.106869][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.124493][ T4193] team0: Port device team_slave_0 added [ 54.132200][ T4193] team0: Port device team_slave_1 added [ 54.145745][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.152863][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.178817][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.237374][ T4187] device hsr_slave_0 entered promiscuous mode [ 54.243886][ T4187] device hsr_slave_1 entered promiscuous mode [ 54.253280][ T4188] device hsr_slave_0 entered promiscuous mode [ 54.260044][ T4188] device hsr_slave_1 entered promiscuous mode [ 54.267161][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.275125][ T4188] Cannot create hsr debugfs directory [ 54.280941][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.288240][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.314335][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.326750][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.333702][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.359739][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.377072][ T4186] device hsr_slave_0 entered promiscuous mode [ 54.383682][ T4186] device hsr_slave_1 entered promiscuous mode [ 54.391013][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.398622][ T4186] Cannot create hsr debugfs directory [ 54.452415][ T4199] device hsr_slave_0 entered promiscuous mode [ 54.459477][ T4199] device hsr_slave_1 entered promiscuous mode [ 54.466111][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.473649][ T4199] Cannot create hsr debugfs directory [ 54.507412][ T4193] device hsr_slave_0 entered promiscuous mode [ 54.514515][ T4193] device hsr_slave_1 entered promiscuous mode [ 54.520948][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.528626][ T4193] Cannot create hsr debugfs directory [ 54.754907][ T4197] Bluetooth: hci3: command 0x0409 tx timeout [ 54.764319][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 54.770351][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 54.782355][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 54.788475][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 54.798698][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.811077][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.820842][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.830076][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.871804][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.884474][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.893456][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.914349][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.982448][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.990029][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.020415][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.030384][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.040304][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.047735][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.069508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.079111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.087188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.096163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.105429][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.112616][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.121219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.130213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.138975][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.146067][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.163608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.187608][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.203948][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.213876][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.234808][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.269140][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.282947][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.295055][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.306984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.316406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.325392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.333811][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.342270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.350844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.360398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.369056][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.377730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.386589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.398042][ T4199] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.409525][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.419941][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.441141][ T4199] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.478742][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.493144][ T4199] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.501927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.510750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.527929][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.546388][ T4199] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.560709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.569535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.578598][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.585675][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.593509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.602435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.611288][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.618373][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.626120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.637566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.655814][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.677894][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.687445][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.695530][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.702959][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.711571][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.720285][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.729845][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.738520][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.750650][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.760072][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.768548][ T1202] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.775635][ T1202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.805641][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.813562][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.822419][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.832342][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.841182][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.849668][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.858623][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.866910][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.875758][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.884007][ T1202] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.891072][ T1202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.901757][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.918482][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.942622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.973605][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.982754][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.997448][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.008694][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.021588][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.039823][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.049575][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.059294][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.068741][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.094643][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.103242][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.115680][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.124958][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.139679][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.151054][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.163845][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.171726][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.191063][ T4186] device veth0_vlan entered promiscuous mode [ 56.215817][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.223266][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.231095][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.242160][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.251152][ T1202] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.258255][ T1202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.267935][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.276804][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.285842][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.295862][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.304453][ T1202] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.311485][ T1202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.319333][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.328175][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.337101][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.345323][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.352893][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.364939][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.374967][ T4186] device veth1_vlan entered promiscuous mode [ 56.386237][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.403243][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.412500][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.426392][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.441443][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.460430][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.473317][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.502047][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.509761][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.519144][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.527689][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.536229][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.545478][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.553606][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.562039][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.569503][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.577398][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.586343][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.595633][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.603186][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.611259][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.629140][ T4188] device veth0_vlan entered promiscuous mode [ 56.638194][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.647196][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.656011][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.669531][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.682751][ T4188] device veth1_vlan entered promiscuous mode [ 56.698089][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.706597][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.714923][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.722978][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.733462][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.742911][ T1202] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.750008][ T1202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.759817][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.800143][ T4188] device veth0_macvtap entered promiscuous mode [ 56.810836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.822635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.834427][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 56.840450][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 56.844321][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 56.854518][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 56.859113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.860525][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 56.869500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.889048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.899496][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.906579][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.914643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.923314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.936572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.946412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.955395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.963683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.972937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.981153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.991461][ T4186] device veth0_macvtap entered promiscuous mode [ 57.003327][ T4188] device veth1_macvtap entered promiscuous mode [ 57.024866][ T4186] device veth1_macvtap entered promiscuous mode [ 57.040930][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.065574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.078796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.088090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.102029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.110567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.119367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.126998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.136807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.147418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.169576][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.179145][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.190206][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.202589][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.214979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.223972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.232894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.242899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.251548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.260107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.268650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.277510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.288824][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.305766][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.315677][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.325129][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.333811][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.346944][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.356058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.365403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.383871][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.392865][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.411042][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.421973][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.433061][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.442070][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.449805][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.458801][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.467673][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.477376][ T4193] device veth0_vlan entered promiscuous mode [ 57.489557][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.498176][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.514520][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.523225][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.533026][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.542079][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.557235][ T4193] device veth1_vlan entered promiscuous mode [ 57.606520][ T4187] device veth0_vlan entered promiscuous mode [ 57.630591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.647488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.656272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.664642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.689875][ T4187] device veth1_vlan entered promiscuous mode [ 57.715281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.723058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.733962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.743130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.750751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.765554][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.773919][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.796372][ T4193] device veth0_macvtap entered promiscuous mode [ 57.811159][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.836677][ T4193] device veth1_macvtap entered promiscuous mode [ 57.851323][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.862006][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.876935][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.885113][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.892996][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.901273][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.909527][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.918116][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.931095][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.935982][ T4187] device veth0_macvtap entered promiscuous mode [ 57.939619][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.979055][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.989917][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.999987][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.010631][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.021721][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.029548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.038252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.046626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.055936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.065936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.074734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.092567][ T4187] device veth1_macvtap entered promiscuous mode [ 58.102116][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.126684][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.136531][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.137442][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.156384][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.164784][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.174757][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.186394][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.198135][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.212145][ T4199] device veth0_vlan entered promiscuous mode [ 58.223931][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.234932][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.246245][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.256907][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.267083][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.278539][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.289729][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.298687][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.307333][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.315462][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.323815][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.332521][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.341625][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.349850][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.359206][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.368788][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.376681][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.386691][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.395867][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.406485][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.415371][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.434812][ T4199] device veth1_vlan entered promiscuous mode [ 58.444434][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.459638][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.470863][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.487280][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.497546][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.508245][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.520390][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.531074][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.541701][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.550609][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.561318][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.590620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.600096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.608938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.618809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.658479][ T4199] device veth0_macvtap entered promiscuous mode [ 58.678568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.700125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.765888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.913624][ T4199] device veth1_macvtap entered promiscuous mode [ 58.925557][ T1110] Bluetooth: hci2: command 0x040f tx timeout [ 58.932237][ T1110] Bluetooth: hci4: command 0x040f tx timeout [ 59.059765][ T4266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 59.182182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.335031][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.435433][ T1110] Bluetooth: hci0: command 0x040f tx timeout [ 59.441480][ T1110] Bluetooth: hci1: command 0x040f tx timeout [ 59.449430][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 59.459762][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.475566][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.500419][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.525070][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.575489][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.591038][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.601860][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.617178][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.630088][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.648942][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.661135][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.677321][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.689827][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.706395][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.720431][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.733226][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.748729][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.759471][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.776888][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.790868][ T4199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.802240][ T4199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.811323][ T4199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.820053][ T4199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.841388][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.849785][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.858857][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.867451][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.876891][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.610260][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 60.631161][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.639928][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.674075][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 60.684086][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 60.694053][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 60.704059][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 60.714058][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 60.724055][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 60.734054][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 60.744054][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 60.754054][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 60.764056][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.926329][ T4197] Bluetooth: hci4: command 0x0419 tx timeout [ 61.928390][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 61.947094][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 61.953135][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 61.961134][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 61.988280][ T1204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.014167][ T1204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.049482][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.058035][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.089231][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.097308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.126541][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.164166][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.201454][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.213002][ T4277] syz.1.7 (4277) used greatest stack depth: 18800 bytes left [ 62.228668][ T1204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.238209][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.251021][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.259974][ T1204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.276709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.293623][ T4287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 62.294967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.604607][ T4175] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 64.647894][ T4175] usb 5-1: not running at top speed; connect to a high speed hub [ 64.727680][ T4325] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET) [ 64.734397][ T4175] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.925332][ T4175] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 65.011588][ T4175] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 65.286381][ T4175] usb 5-1: Product: syz [ 65.316234][ T4175] usb 5-1: Manufacturer: syz [ 66.110109][ T4175] usb 5-1: can't set config #1, error -71 [ 66.211018][ T4344] process 'syz.4.20' launched './file0' with NULL argv: empty string added [ 66.305318][ T4175] usb 5-1: USB disconnect, device number 2 [ 66.734409][ T1107] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 66.940689][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.024408][ T1107] usb 2-1: Using ep0 maxpacket: 16 [ 67.144628][ T1107] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.180713][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.198585][ T1107] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 67.219094][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.396658][ T1107] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 67.427651][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.453647][ T1107] usb 2-1: Product: syz [ 67.476147][ T1107] usb 2-1: Manufacturer: syz [ 67.488299][ T1107] usb 2-1: SerialNumber: syz [ 68.454493][ T1107] usb 2-1: 0:2 : does not exist [ 68.477054][ T4377] FAULT_INJECTION: forcing a failure. [ 68.477054][ T4377] name failslab, interval 1, probability 0, space 0, times 1 [ 68.514166][ T4307] Bluetooth: hci5: Frame reassembly failed (-84) [ 68.520800][ T4381] Bluetooth: hci5: Frame reassembly failed (-84) [ 68.520955][ T4377] CPU: 1 PID: 4377 Comm: syz.0.34 Not tainted syzkaller #0 [ 68.534431][ T4377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 68.544507][ T4377] Call Trace: [ 68.547791][ T4377] [ 68.550727][ T4377] dump_stack_lvl+0x188/0x250 [ 68.555436][ T4377] ? show_regs_print_info+0x20/0x20 [ 68.560656][ T4377] ? load_image+0x410/0x410 [ 68.565170][ T4377] ? __might_sleep+0xf0/0xf0 [ 68.569770][ T4377] ? __lock_acquire+0x7d40/0x7d40 [ 68.574811][ T4377] should_fail+0x383/0x4b0 [ 68.579255][ T4377] should_failslab+0x5/0x20 [ 68.583763][ T4377] slab_pre_alloc_hook+0x51/0xc0 [ 68.588686][ T4377] kmem_cache_alloc_trace+0x47/0x290 [ 68.593954][ T4377] ? ntfs_init_fs_context+0x50/0x490 [ 68.599225][ T4377] ntfs_init_fs_context+0x50/0x490 [ 68.604321][ T4377] ? ntfs_discard+0x410/0x410 [ 68.608981][ T4377] alloc_fs_context+0x628/0x7d0 [ 68.613818][ T4377] __se_sys_fsopen+0x111/0x320 [ 68.618567][ T4377] do_syscall_64+0x4c/0xa0 [ 68.622966][ T4377] ? clear_bhb_loop+0x30/0x80 [ 68.627631][ T4377] ? clear_bhb_loop+0x30/0x80 [ 68.632322][ T4377] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.638234][ T4377] RIP: 0033:0x7fd81b0451d9 [ 68.642654][ T4377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.662245][ T4377] RSP: 002b:00007fd81929d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 68.670652][ T4377] RAX: ffffffffffffffda RBX: 00007fd81b2ccfa0 RCX: 00007fd81b0451d9 [ 68.678610][ T4377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000007c0 [ 68.686583][ T4377] RBP: 00007fd81b0dc888 R08: 0000000000000000 R09: 0000000000000000 [ 68.694556][ T4377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.702528][ T4377] R13: 00007fd81b2cd038 R14: 00007fd81b2ccfa0 R15: 00007ffc320909a8 [ 68.710503][ T4377] [ 68.738477][ T1107] usb 2-1: USB disconnect, device number 2 [ 68.842318][ T1204] Bluetooth: hci6: Frame reassembly failed (-84) [ 68.854853][ T4387] Bluetooth: hci6: Frame reassembly failed (-84) [ 68.977076][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.895029][ T4227] Bluetooth: hci5: command 0x1003 tx timeout [ 70.904276][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 70.914218][ T4194] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 71.168304][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.174903][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.492860][ T4228] Bluetooth: hci5: command 0x1001 tx timeout [ 73.534384][ T4194] Bluetooth: hci5: sending frame failed (-49) [ 75.236299][ T4443] syz.0.53 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 75.554487][ T1107] Bluetooth: hci5: command 0x1009 tx timeout [ 76.504721][ T4460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 77.493263][ T4457] netlink: 20 bytes leftover after parsing attributes in process `syz.1.58'. [ 79.918323][ T4494] Zero length message leads to an empty skb [ 80.950077][ T4511] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.403148][ T21] cfg80211: failed to load regulatory.db [ 81.484314][ T1107] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.651324][ T4518] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 82.724183][ T1107] usb 3-1: Using ep0 maxpacket: 16 [ 82.844278][ T1107] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.864292][ T1107] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.034209][ T1107] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 83.079769][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.105561][ T1107] usb 3-1: Product: syz [ 83.117405][ T1107] usb 3-1: Manufacturer: syz [ 83.133409][ T1107] usb 3-1: SerialNumber: syz [ 83.165986][ T4536] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.224442][ T1107] usb 3-1: can't set config #1, error -71 [ 83.232517][ T1107] usb 3-1: USB disconnect, device number 2 [ 83.593048][ T4552] netlink: 'syz.4.90': attribute type 14 has an invalid length. [ 85.881104][ T4577] ntfs3: loop2: try to read out of volume at offset 0x0 [ 87.833230][ T4228] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.010306][ T4228] usb 2-1: unable to read config index 0 descriptor/all [ 90.045651][ T4228] usb 2-1: can't read configurations, error -71 [ 92.379324][ T4228] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.794253][ T4228] usb 2-1: unable to read config index 0 descriptor/all [ 93.801256][ T4228] usb 2-1: can't read configurations, error -71 [ 93.824916][ T4228] usb usb2-port1: attempt power cycle [ 107.671050][ T4801] IPv6: NLM_F_CREATE should be specified when creating new route [ 107.877305][ T4813] netlink: 'syz.3.174': attribute type 2 has an invalid length. [ 108.554294][ T1325] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.804297][ T1325] usb 5-1: Using ep0 maxpacket: 32 [ 108.964176][ T1325] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 109.733494][ T1325] usb 5-1: config 0 has no interface number 0 [ 109.918240][ T4852] loop7: detected capacity change from 0 to 16384 [ 109.947431][ T1325] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 109.967950][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.003908][ T1325] usb 5-1: Product: syz [ 110.021286][ T1325] usb 5-1: Manufacturer: syz [ 110.034450][ T1325] usb 5-1: SerialNumber: syz [ 110.054536][ T1325] usb 5-1: config 0 descriptor?? [ 110.100683][ T1325] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 110.224999][ T4857] loop_set_status: loop7 () has still dirty pages (nrpages=608) [ 110.915862][ T1325] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 111.036873][ T1325] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 111.134161][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 111.152530][ T1325] usb 5-1: USB disconnect, device number 3 [ 111.218534][ T1325] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 111.300109][ T1325] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 111.354751][ T1325] quatech2 5-1:0.51: device disconnected [ 112.761196][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.764222][ T4228] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 112.964202][ T4353] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.036076][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 113.054234][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.088758][ T4925] tipc: Started in network mode [ 113.093939][ T4925] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 113.105215][ T4925] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 113.115112][ T4925] tipc: Enabled bearer , priority 10 [ 113.144336][ T4228] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.156883][ T4228] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.181110][ T4228] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 113.209312][ T13] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 113.220215][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.224797][ T4353] usb 3-1: Using ep0 maxpacket: 8 [ 113.237410][ T13] usb 4-1: config 0 has no interface number 0 [ 113.251019][ T13] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 113.269879][ T13] usb 4-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.314314][ T4228] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 113.323575][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 113.329451][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 113.337984][ T4228] usb 2-1: Product: syz [ 113.342424][ T4228] usb 2-1: Manufacturer: syz [ 113.351787][ T4939] binder: 4938:4939 ioctl 40285881 0 returned -22 [ 113.395897][ T4228] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 113.405862][ T4228] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 113.425368][ T4228] garmin_gps: probe of ttyUSB0 failed with error -8 [ 113.444502][ T21] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 113.458580][ T21] usb 1-1: config 179 has no interface number 0 [ 113.473083][ T21] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 113.487626][ T21] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 113.499337][ T21] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 113.512197][ T21] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 113.526022][ T4353] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 113.535833][ T21] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 113.550682][ T4353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.567043][ T4353] usb 3-1: Product: syz [ 113.571229][ T4353] usb 3-1: Manufacturer: syz [ 113.574271][ T13] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 113.575911][ T21] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 113.590154][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.594085][ T4353] usb 3-1: SerialNumber: syz [ 113.602242][ T13] usb 4-1: Product: syz [ 113.610761][ T13] usb 4-1: Manufacturer: syz [ 113.613260][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.620581][ T13] usb 4-1: SerialNumber: syz [ 113.695486][ T4353] usb 3-1: config 0 descriptor?? [ 113.725271][ T4913] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 113.866685][ T4353] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 113.936098][ T21] usb 2-1: USB disconnect, device number 6 [ 114.066436][ T21] garmin_gps 2-1:1.0: device disconnected [ 114.251420][ T4228] tipc: Node number set to 1 [ 114.390431][ T13] usb 4-1: config 0 descriptor?? [ 114.489962][ T4954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.187'. [ 114.854225][ T4353] gspca_sonixj: reg_w1 err -71 [ 114.860168][ T4353] sonixj: probe of 3-1:0.0 failed with error -71 [ 114.972843][ T4353] usb 3-1: USB disconnect, device number 3 [ 115.644331][ T13] usb 4-1: can't set config #0, error -71 [ 115.660252][ T13] usb 4-1: USB disconnect, device number 2 [ 115.877792][ T4964] netlink: 100 bytes leftover after parsing attributes in process `syz.4.207'. [ 116.799246][ T21] usb 1-1: USB disconnect, device number 2 [ 116.814082][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 120.824155][ T4230] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 121.469171][ T25] audit: type=1800 audit(1791704649.558:2): pid=5014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.213" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 121.544089][ T4230] usb 3-1: Using ep0 maxpacket: 16 [ 121.714874][ T4230] usb 3-1: unable to get BOS descriptor or descriptor too short [ 121.804439][ T4230] usb 3-1: config 127 has an invalid interface number: 187 but max is 0 [ 121.823044][ T4230] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 121.861654][ T4230] usb 3-1: config 127 has no interface number 0 [ 121.892669][ T4230] usb 3-1: config 127 interface 187 altsetting 9 has an invalid endpoint descriptor of length 5, skipping [ 121.923964][ T4230] usb 3-1: config 127 interface 187 has no altsetting 0 [ 123.604302][ T4230] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=96.eb [ 123.613373][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.636535][ T5038] using random self ethernet address [ 123.642138][ T5038] using random host ethernet address [ 123.659215][ T4230] usb 3-1: Product: syz [ 123.672768][ T4230] usb 3-1: Manufacturer: syz [ 123.714294][ T4230] usb 3-1: can't set config #127, error -71 [ 123.722205][ T4230] usb 3-1: USB disconnect, device number 4 [ 127.217635][ T5064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.243'. [ 127.254119][ T5064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.243'. [ 128.339263][ T5068] FAULT_INJECTION: forcing a failure. [ 128.339263][ T5068] name failslab, interval 1, probability 0, space 0, times 0 [ 128.364117][ T5068] CPU: 0 PID: 5068 Comm: syz.3.244 Not tainted syzkaller #0 [ 128.371432][ T5068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.381494][ T5068] Call Trace: [ 128.384773][ T5068] [ 128.387707][ T5068] dump_stack_lvl+0x188/0x250 [ 128.392390][ T5068] ? show_regs_print_info+0x20/0x20 [ 128.397596][ T5068] ? load_image+0x410/0x410 [ 128.402115][ T5068] ? __might_sleep+0xf0/0xf0 [ 128.406709][ T5068] ? __lock_acquire+0x7d40/0x7d40 [ 128.411749][ T5068] should_fail+0x383/0x4b0 [ 128.416182][ T5068] should_failslab+0x5/0x20 [ 128.420691][ T5068] slab_pre_alloc_hook+0x51/0xc0 [ 128.425636][ T5068] kmem_cache_alloc_trace+0x47/0x290 [ 128.430926][ T5068] ? __se_sys_fspick+0x264/0x410 [ 128.435870][ T5068] __se_sys_fspick+0x264/0x410 [ 128.440641][ T5068] ? __x64_sys_fspick+0x80/0x80 [ 128.445501][ T5068] ? lockdep_hardirqs_on+0x94/0x140 [ 128.450713][ T5068] do_syscall_64+0x4c/0xa0 [ 128.455134][ T5068] ? clear_bhb_loop+0x30/0x80 [ 128.459817][ T5068] ? clear_bhb_loop+0x30/0x80 [ 128.464503][ T5068] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.470400][ T5068] RIP: 0033:0x7fc670f9a1d9 [ 128.474822][ T5068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.494433][ T5068] RSP: 002b:00007fc66f1f2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 128.502851][ T5068] RAX: ffffffffffffffda RBX: 00007fc671221fa0 RCX: 00007fc670f9a1d9 [ 128.510829][ T5068] RDX: 0000000000000000 RSI: 0000200000000840 RDI: ffffffffffffff9c [ 128.518807][ T5068] RBP: 00007fc671031888 R08: 0000000000000000 R09: 0000000000000000 [ 128.526780][ T5068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.534748][ T5068] R13: 00007fc671222038 R14: 00007fc671221fa0 R15: 00007ffe133fd908 [ 128.542735][ T5068] [ 128.979231][ T4230] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 130.172866][ T5108] netlink: 312 bytes leftover after parsing attributes in process `syz.3.256'. [ 131.907362][ T5126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'. [ 132.353584][ T25] audit: type=1800 audit(1791704660.448:3): pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.263" name="file2" dev="sda1" ino=2049 res=0 errno=0 [ 132.374803][ T4230] usb 2-1: device descriptor read/all, error -71 [ 132.606172][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.612490][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.490365][ T5137] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 133.497146][ T5137] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 133.521729][ T5157] FAULT_INJECTION: forcing a failure. [ 133.521729][ T5157] name failslab, interval 1, probability 0, space 0, times 0 [ 133.540757][ T5157] CPU: 1 PID: 5157 Comm: syz.4.271 Not tainted syzkaller #0 [ 133.548065][ T5157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 133.558122][ T5157] Call Trace: [ 133.561402][ T5157] [ 133.564335][ T5157] dump_stack_lvl+0x188/0x250 [ 133.569022][ T5157] ? show_regs_print_info+0x20/0x20 [ 133.574230][ T5157] ? load_image+0x410/0x410 [ 133.578736][ T5157] ? __might_sleep+0xf0/0xf0 [ 133.583307][ T5157] ? __lock_acquire+0x7d40/0x7d40 [ 133.588311][ T5157] should_fail+0x383/0x4b0 [ 133.592717][ T5157] should_failslab+0x5/0x20 [ 133.597197][ T5157] slab_pre_alloc_hook+0x51/0xc0 [ 133.602113][ T5157] kmem_cache_alloc_trace+0x47/0x290 [ 133.607374][ T5157] ? __list_lru_init+0x535/0xac0 [ 133.612294][ T5157] __list_lru_init+0x535/0xac0 [ 133.617046][ T5157] alloc_super+0x787/0x970 [ 133.621441][ T5157] ? kernfs_get_tree+0x6b0/0x6b0 [ 133.626354][ T5157] sget_fc+0x2d4/0x6f0 [ 133.630398][ T5157] ? kernfs_test_super+0x100/0x100 [ 133.635489][ T5157] kernfs_get_tree+0x15c/0x6b0 [ 133.640231][ T5157] ? apparmor_capable+0x12c/0x190 [ 133.645245][ T5157] sysfs_get_tree+0x42/0x110 [ 133.649842][ T5157] vfs_get_tree+0x88/0x270 [ 133.654266][ T5157] vfs_fsconfig_locked+0x22f/0x400 [ 133.659381][ T5157] __se_sys_fsconfig+0x69e/0x7e0 [ 133.664323][ T5157] ? __x64_sys_fsconfig+0xc0/0xc0 [ 133.669331][ T5157] ? lockdep_hardirqs_on+0x94/0x140 [ 133.674509][ T5157] ? __x64_sys_fsconfig+0x1c/0xc0 [ 133.679511][ T5157] do_syscall_64+0x4c/0xa0 [ 133.683912][ T5157] ? clear_bhb_loop+0x30/0x80 [ 133.688567][ T5157] ? clear_bhb_loop+0x30/0x80 [ 133.693221][ T5157] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.699096][ T5157] RIP: 0033:0x7fd02a9fc1d9 [ 133.703489][ T5157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.723069][ T5157] RSP: 002b:00007fd028c54028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 133.731459][ T5157] RAX: ffffffffffffffda RBX: 00007fd02ac83fa0 RCX: 00007fd02a9fc1d9 [ 133.739407][ T5157] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 133.747355][ T5157] RBP: 00007fd02aa93888 R08: 0000000000000000 R09: 0000000000000000 [ 133.756004][ T5157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.763952][ T5157] R13: 00007fd02ac84038 R14: 00007fd02ac83fa0 R15: 00007ffc8aa918b8 [ 133.771909][ T5157] [ 133.798463][ T5161] ODEBUG: Out of memory. ODEBUG disabled [ 133.858346][ T5137] vhci_hcd vhci_hcd.0: Device attached [ 134.685886][ T1107] vhci_hcd: vhci_device speed not set [ 134.774161][ T1107] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 134.974304][ T5149] vhci_hcd: connection reset by peer [ 134.982822][ T9] vhci_hcd: stop threads [ 134.999425][ T9] vhci_hcd: release socket [ 135.004602][ T9] vhci_hcd: disconnect device [ 138.943188][ T4228] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 139.649702][ T4228] usb 3-1: Using ep0 maxpacket: 32 [ 140.114048][ T1107] vhci_hcd: vhci_device speed not set [ 140.364114][ T4228] usb 3-1: unable to read config index 0 descriptor/all [ 140.371202][ T4228] usb 3-1: can't read configurations, error -71 [ 140.477690][ T5250] FAULT_INJECTION: forcing a failure. [ 140.477690][ T5250] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 140.492974][ T5250] CPU: 0 PID: 5250 Comm: syz.4.303 Not tainted syzkaller #0 [ 140.500281][ T5250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 140.510336][ T5250] Call Trace: [ 140.513614][ T5250] [ 140.516546][ T5250] dump_stack_lvl+0x188/0x250 [ 140.521233][ T5250] ? show_regs_print_info+0x20/0x20 [ 140.526434][ T5250] ? load_image+0x410/0x410 [ 140.530946][ T5250] ? __lock_acquire+0x7d40/0x7d40 [ 140.535980][ T5250] should_fail+0x383/0x4b0 [ 140.540405][ T5250] _copy_to_user+0x2e/0x130 [ 140.544915][ T5250] msr_read+0x122/0x1b0 [ 140.549075][ T5250] ? msr_device_destroy+0x20/0x20 [ 140.554103][ T5250] ? common_file_perm+0x171/0x1c0 [ 140.559133][ T5250] ? fsnotify_perm+0x3a7/0x560 [ 140.563905][ T5250] ? msr_device_destroy+0x20/0x20 [ 140.568932][ T5250] vfs_read+0x2ff/0xd50 [ 140.573099][ T5250] ? __lock_acquire+0x7d40/0x7d40 [ 140.578135][ T5250] ? kernel_read+0x1e0/0x1e0 [ 140.582740][ T5250] ? __fget_files+0x402/0x470 [ 140.587422][ T5250] ? __fdget_pos+0x1e2/0x370 [ 140.592007][ T5250] ? ksys_read+0x70/0x260 [ 140.596341][ T5250] ksys_read+0x153/0x260 [ 140.600589][ T5250] ? vfs_write+0xd70/0xd70 [ 140.605008][ T5250] ? lockdep_hardirqs_on+0x94/0x140 [ 140.610213][ T5250] do_syscall_64+0x4c/0xa0 [ 140.614631][ T5250] ? clear_bhb_loop+0x30/0x80 [ 140.619308][ T5250] ? clear_bhb_loop+0x30/0x80 [ 140.623994][ T5250] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.629893][ T5250] RIP: 0033:0x7fd02a9fc1d9 [ 140.634308][ T5250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.653911][ T5250] RSP: 002b:00007fd028c54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.662328][ T5250] RAX: ffffffffffffffda RBX: 00007fd02ac83fa0 RCX: 00007fd02a9fc1d9 [ 140.670297][ T5250] RDX: 0000000000018ff8 RSI: 0000200000002580 RDI: 0000000000000004 [ 140.678271][ T5250] RBP: 00007fd02aa93888 R08: 0000000000000000 R09: 0000000000000000 [ 140.686245][ T5250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.694215][ T5250] R13: 00007fd02ac84038 R14: 00007fd02ac83fa0 R15: 00007ffc8aa918b8 [ 140.702200][ T5250] [ 142.197591][ T5269] netlink: 44 bytes leftover after parsing attributes in process `syz.2.309'. [ 142.736729][ T4268] kernel write not supported for file /input/event2 (pid: 4268 comm: kworker/1:8) [ 143.524404][ T25] audit: type=1800 audit(1791704671.618:4): pid=5300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.319" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 143.858799][ T25] audit: type=1800 audit(1791704671.918:5): pid=5305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.319" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 143.984298][ T4197] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 144.473141][ T5323] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 145.057633][ T4197] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 145.068906][ T4197] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 145.286037][ T4197] usb 4-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 145.323725][ T4197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.484444][ T5332] hub 5-0:1.0: USB hub found [ 145.491224][ T5332] hub 5-0:1.0: 1 port detected [ 146.047258][ T4197] usb 4-1: Product: syz [ 146.051461][ T4197] usb 4-1: Manufacturer: syz [ 146.061001][ T4197] usb 4-1: SerialNumber: syz [ 146.105506][ T4197] usb 4-1: can't set config #1, error -71 [ 146.124626][ T4197] usb 4-1: USB disconnect, device number 3 [ 151.187967][ T5386] netlink: 84 bytes leftover after parsing attributes in process `syz.1.348'. [ 151.206765][ T5388] netlink: 64 bytes leftover after parsing attributes in process `syz.0.350'. [ 151.260474][ T5388] netlink: 64 bytes leftover after parsing attributes in process `syz.0.350'. [ 151.287338][ T5388] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 152.206437][ T25] audit: type=1326 audit(1791704680.308:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5398 comm="syz.1.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc39891d9 code=0x7ffc0000 [ 152.270282][ T25] audit: type=1326 audit(1791704680.308:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5398 comm="syz.1.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc39891d9 code=0x7ffc0000 [ 152.357767][ T25] audit: type=1326 audit(1791704680.308:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5398 comm="syz.1.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc39891d9 code=0x7ffc0000 [ 152.385692][ T25] audit: type=1326 audit(1791704680.428:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5398 comm="syz.1.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6fc3949a0e code=0x7ffc0000 [ 153.134141][ T25] audit: type=1326 audit(1791704680.428:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5398 comm="syz.1.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6fc3949a0e code=0x7ffc0000 [ 153.209500][ T25] audit: type=1326 audit(1791704680.428:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5398 comm="syz.1.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6fc3949a0e code=0x7ffc0000 [ 153.348240][ T5413] netlink: 'syz.3.360': attribute type 1 has an invalid length. [ 154.068413][ T5413] netlink: 64539 bytes leftover after parsing attributes in process `syz.3.360'. [ 154.107681][ T25] audit: type=1326 audit(1791704680.428:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5398 comm="syz.1.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6fc3949a0e code=0x7ffc0000 [ 154.798981][ T25] audit: type=1326 audit(1791704680.428:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5398 comm="syz.1.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6fc3949a0e code=0x7ffc0000 [ 154.824384][ T4227] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 155.292305][ T5436] file system registered [ 156.025672][ T25] audit: type=1326 audit(1791704680.428:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5398 comm="syz.1.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6fc3949a0e code=0x7ffc0000 [ 156.070070][ T25] audit: type=1326 audit(1791704680.428:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5398 comm="syz.1.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6fc3949a0e code=0x7ffc0000 [ 156.364109][ T4227] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.590281][ T4227] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.660441][ T5439] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 156.804234][ T4227] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.841448][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.906815][ T4227] usb 4-1: Product: syz [ 156.925302][ T4227] usb 4-1: Manufacturer: syz [ 156.949617][ T4227] usb 4-1: SerialNumber: syz [ 157.090758][ T5452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 157.180568][ T5452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.373'. [ 157.234451][ T4227] usb 4-1: 0:2 : does not exist [ 157.239342][ T4227] usb 4-1: unit 9 not found! [ 157.276196][ T5455] unloading [ 157.309365][ T4227] usb 4-1: USB disconnect, device number 4 [ 157.338519][ T4201] Bluetooth: hci3: Unknown advertising packet type: 0xffff [ 157.338589][ T4201] Bluetooth: hci3: Unknown advertising packet type: 0x100 [ 157.346555][ T4201] ================================================================== [ 157.361915][ T4201] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x1291/0x3ca0 [ 157.369705][ T4201] Read of size 2 at addr ffff88801cd59400 by task kworker/u5:5/4201 [ 157.377659][ T4201] [ 157.379962][ T4201] CPU: 0 PID: 4201 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 157.387486][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 157.397543][ T4201] Workqueue: hci3 hci_rx_work [ 157.402231][ T4201] Call Trace: [ 157.405532][ T4201] [ 157.408444][ T4201] dump_stack_lvl+0x188/0x250 [ 157.413118][ T4201] ? show_regs_print_info+0x20/0x20 [ 157.418300][ T4201] ? load_image+0x410/0x410 [ 157.422784][ T4201] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 157.428232][ T4201] print_address_description+0x60/0x2d0 [ 157.433763][ T4201] ? hci_le_meta_evt+0x1291/0x3ca0 [ 157.438857][ T4201] kasan_report+0xdf/0x130 [ 157.443259][ T4201] ? hci_le_meta_evt+0x1291/0x3ca0 [ 157.448352][ T4201] hci_le_meta_evt+0x1291/0x3ca0 [ 157.453272][ T4201] ? hci_event_packet+0x363/0x1310 [ 157.458378][ T4201] ? __lock_acquire+0x7d40/0x7d40 [ 157.463397][ T4201] ? hci_remote_host_features_evt+0x240/0x240 [ 157.469445][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 157.475063][ T4201] ? mark_lock+0x94/0x320 [ 157.479390][ T4201] ? mutex_unlock+0x10/0x10 [ 157.483873][ T4201] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 157.489838][ T4201] ? lock_chain_count+0x20/0x20 [ 157.494682][ T4201] ? __rwlock_init+0x140/0x140 [ 157.499445][ T4201] hci_event_packet+0xe0b/0x1310 [ 157.504379][ T4201] ? _raw_spin_unlock+0x40/0x40 [ 157.509230][ T4201] ? rcu_lock_release+0x20/0x20 [ 157.514167][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 157.519348][ T4201] hci_rx_work+0x255/0xa10 [ 157.523755][ T4201] process_one_work+0x867/0xff0 [ 157.528595][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 157.534208][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 157.539477][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 157.544492][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 157.550040][ T4201] ? wq_worker_running+0x97/0x170 [ 157.555051][ T4201] worker_thread+0xad7/0x12a0 [ 157.559727][ T4201] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 157.565606][ T4201] kthread+0x42e/0x520 [ 157.569660][ T4201] ? rcu_lock_release+0x20/0x20 [ 157.574497][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 157.579069][ T4201] ret_from_fork+0x1f/0x30 [ 157.583473][ T4201] [ 157.586475][ T4201] [ 157.588778][ T4201] Allocated by task 5457: [ 157.593088][ T4201] __kasan_kmalloc+0xaf/0xe0 [ 157.597660][ T4201] __alloc_skb+0x22c/0x750 [ 157.602052][ T4201] vhci_write+0xbd/0x440 [ 157.606277][ T4201] vfs_write+0x748/0xd70 [ 157.610500][ T4201] ksys_write+0x153/0x260 [ 157.614807][ T4201] do_syscall_64+0x4c/0xa0 [ 157.619202][ T4201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.625075][ T4201] [ 157.627389][ T4201] The buggy address belongs to the object at ffff88801cd59000 [ 157.627389][ T4201] which belongs to the cache kmalloc-1k of size 1024 [ 157.641415][ T4201] The buggy address is located 0 bytes to the right of [ 157.641415][ T4201] 1024-byte region [ffff88801cd59000, ffff88801cd59400) [ 157.655119][ T4201] The buggy address belongs to the page: [ 157.660767][ T4201] page:ffffea0000735600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1cd58 [ 157.670894][ T4201] head:ffffea0000735600 order:3 compound_mapcount:0 compound_pincount:0 [ 157.679197][ T4201] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 157.687182][ T4201] raw: 00fff00000010200 ffffea00008c9200 0000000400000004 ffff888017841dc0 [ 157.695744][ T4201] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 157.704299][ T4201] page dumped because: kasan: bad access detected [ 157.710713][ T4201] page_owner tracks the page as allocated [ 157.716421][ T4201] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4193, ts 55786191658, free_ts 55675482273 [ 157.735496][ T4201] get_page_from_freelist+0x24f6/0x2670 [ 157.741025][ T4201] __alloc_pages+0x1ee/0x480 [ 157.745595][ T4201] new_slab+0xc0/0x4b0 [ 157.749639][ T4201] ___slab_alloc+0x807/0xdd0 [ 157.754204][ T4201] __kmalloc_node_track_caller+0x13d/0x3a0 [ 157.759991][ T4201] __alloc_skb+0x22c/0x750 [ 157.764393][ T4201] rtmsg_fib+0xd7/0x440 [ 157.768545][ T4201] fib_table_insert+0xd24/0x1b80 [ 157.773463][ T4201] fib_magic+0x2ca/0x3b0 [ 157.777688][ T4201] fib_add_ifaddr+0x135/0x5c0 [ 157.782341][ T4201] fib_inetaddr_event+0x13c/0x1c0 [ 157.787343][ T4201] blocking_notifier_call_chain+0x103/0x1b0 [ 157.793212][ T4201] __inet_insert_ifa+0x9ea/0xbd0 [ 157.798128][ T4201] inet_rtm_newaddr+0x9cc/0x18c0 [ 157.803046][ T4201] rtnetlink_rcv_msg+0x7f1/0xf10 [ 157.807969][ T4201] netlink_rcv_skb+0x1e9/0x430 [ 157.812711][ T4201] page last free stack trace: [ 157.817361][ T4201] free_unref_page_prepare+0x637/0x6c0 [ 157.822802][ T4201] free_unref_page+0x8f/0x2a0 [ 157.827466][ T4201] __unfreeze_partials+0x188/0x1e0 [ 157.832555][ T4201] put_cpu_partial+0x12d/0x190 [ 157.837293][ T4201] qlist_free_all+0x35/0x90 [ 157.841779][ T4201] kasan_quarantine_reduce+0x150/0x160 [ 157.847244][ T4201] __kasan_slab_alloc+0x2f/0xc0 [ 157.852074][ T4201] slab_post_alloc_hook+0x4c/0x380 [ 157.857168][ T4201] __kmalloc+0x189/0x340 [ 157.861407][ T4201] fib6_info_alloc+0x2e/0xe0 [ 157.866005][ T4201] ip6_route_info_create+0x455/0x1220 [ 157.871360][ T4201] ip6_route_add+0x24/0x130 [ 157.875854][ T4201] add_v4_addrs+0x930/0xcc0 [ 157.880338][ T4201] addrconf_init_auto_addrs+0x75f/0xab0 [ 157.885858][ T4201] addrconf_notify+0xa6b/0xf20 [ 157.890598][ T4201] raw_notifier_call_chain+0xcb/0x160 [ 157.895951][ T4201] [ 157.898254][ T4201] Memory state around the buggy address: [ 157.903877][ T4201] ffff88801cd59300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.911916][ T4201] ffff88801cd59380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.919953][ T4201] >ffff88801cd59400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.927987][ T4201] ^ [ 157.932027][ T4201] ffff88801cd59480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.940061][ T4201] ffff88801cd59500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.948117][ T4201] ================================================================== [ 157.956174][ T4201] Disabling lock debugging due to kernel taint [ 157.965687][ T4201] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 157.972900][ T4201] CPU: 0 PID: 4201 Comm: kworker/u5:5 Tainted: G B syzkaller #0 [ 157.981819][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 157.991873][ T4201] Workqueue: hci3 hci_rx_work [ 157.996535][ T4201] Call Trace: [ 157.999794][ T4201] [ 158.002703][ T4201] dump_stack_lvl+0x188/0x250 [ 158.007359][ T4201] ? show_regs_print_info+0x20/0x20 [ 158.012535][ T4201] ? load_image+0x410/0x410 [ 158.017030][ T4201] panic+0x2f8/0x850 [ 158.020902][ T4201] ? bpf_jit_dump+0xd0/0xd0 [ 158.025383][ T4201] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 158.031343][ T4201] ? _raw_spin_unlock+0x40/0x40 [ 158.036190][ T4201] ? hci_le_meta_evt+0x1291/0x3ca0 [ 158.041279][ T4201] check_panic_on_warn+0x80/0xa0 [ 158.046225][ T4201] ? hci_le_meta_evt+0x1291/0x3ca0 [ 158.051316][ T4201] end_report+0x6d/0xf0 [ 158.055450][ T4201] kasan_report+0x102/0x130 [ 158.059930][ T4201] ? hci_le_meta_evt+0x1291/0x3ca0 [ 158.065020][ T4201] hci_le_meta_evt+0x1291/0x3ca0 [ 158.069933][ T4201] ? hci_event_packet+0x363/0x1310 [ 158.075020][ T4201] ? __lock_acquire+0x7d40/0x7d40 [ 158.080023][ T4201] ? hci_remote_host_features_evt+0x240/0x240 [ 158.086067][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 158.091680][ T4201] ? mark_lock+0x94/0x320 [ 158.095985][ T4201] ? mutex_unlock+0x10/0x10 [ 158.100460][ T4201] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 158.106419][ T4201] ? lock_chain_count+0x20/0x20 [ 158.111249][ T4201] ? __rwlock_init+0x140/0x140 [ 158.116085][ T4201] hci_event_packet+0xe0b/0x1310 [ 158.121000][ T4201] ? _raw_spin_unlock+0x40/0x40 [ 158.125830][ T4201] ? rcu_lock_release+0x20/0x20 [ 158.130655][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 158.135829][ T4201] hci_rx_work+0x255/0xa10 [ 158.140223][ T4201] process_one_work+0x867/0xff0 [ 158.145054][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 158.150664][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 158.155924][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 158.160922][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 158.166439][ T4201] ? wq_worker_running+0x97/0x170 [ 158.171435][ T4201] worker_thread+0xad7/0x12a0 [ 158.176090][ T4201] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 158.181962][ T4201] kthread+0x42e/0x520 [ 158.186008][ T4201] ? rcu_lock_release+0x20/0x20 [ 158.190833][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 158.195399][ T4201] ret_from_fork+0x1f/0x30 [ 158.199804][ T4201] [ 158.203089][ T4201] Kernel Offset: disabled [ 158.207395][ T4201] Rebooting in 86400 seconds..