last executing test programs: 5.594470716s ago: executing program 1 (id=98): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x78bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 4.614944787s ago: executing program 4 (id=105): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)=[0x0], 0x1}) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.log\x00', 0x400, 0x18) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000300)=[@mss={0x2, 0x5}, @window={0x3, 0x7, 0x1000}, @mss={0x2, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x39be}, @window={0x3, 0xe, 0xffff}], 0x6) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000100)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000140)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0), 0x3, r3}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000340)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000001c0)={0x600, 0x1, &(0x7f00000002c0)=[r3], &(0x7f0000000280)=[0x3], &(0x7f0000000200)=[r4, r4, r5], &(0x7f0000000300), 0x0, 0x1}) 4.19144607s ago: executing program 4 (id=107): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000001600)={&(0x7f0000001640)=@xdp={0x2c, 0x8, r1, 0x109}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000040)="6b46afbe0e1232", 0x7}], 0x1}, 0x20000885) 4.124235727s ago: executing program 2 (id=108): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xb, 0x1, 0x0, 0x2}}) 4.09546789s ago: executing program 2 (id=109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000128290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 3.860226464s ago: executing program 2 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d) write(r0, &(0x7f0000000300)='1', 0x1) 3.741498916s ago: executing program 4 (id=114): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) read$char_usb(r1, &(0x7f00000002c0)=""/74, 0x49) 3.518338619s ago: executing program 2 (id=116): syz_usb_connect(0x3, 0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000000000000000705e37e1b"], 0x0) syz_open_dev$evdev(&(0x7f0000000300), 0x4, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000940)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 3.147590287s ago: executing program 1 (id=121): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002180)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002200)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r3, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x80000) memfd_create(0x0, 0x0) 1.938080181s ago: executing program 4 (id=130): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xb, 0x1, 0x0, 0x2}}) 1.936602751s ago: executing program 2 (id=131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a010400000000000000000a0000000900010073797a31000000000900020073797a320000000014000480100001800c000100636f756e746572406c000000060a010400000000000000010a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd090002"], 0x15c}}, 0x0) 1.880270627s ago: executing program 1 (id=132): setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000340)={0x2, 0x4e1d, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x40}, 0x0) 1.468793459s ago: executing program 1 (id=133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtclass={0x34, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4, 0x1}, {0x4, 0x1}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.454229051s ago: executing program 4 (id=134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000128290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.392301497s ago: executing program 3 (id=135): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='X', 0x34000, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) 1.254319841s ago: executing program 1 (id=137): socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) r1 = gettid() tkill(r1, 0xb) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000006c0), 0x20600, 0x0) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000700)={0x40000012}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) read$FUSE(r2, &(0x7f0000000e40)={0x2020}, 0xfffffecf) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000002e80)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 1.226639384s ago: executing program 4 (id=138): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000800)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000840)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000880)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000a80)={0x0, 0x1f, &(0x7f0000000ac0)={&(0x7f0000000b00)="a0", 0x1a000}}, 0xfe) 1.137634663s ago: executing program 3 (id=139): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='mtd0\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f00000004c0)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt/fillfile\x00', 0x42, 0x9f) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 996.319228ms ago: executing program 2 (id=141): r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b46064744d831761c6a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960081aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d57", 0x2b2, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000900), 0x400, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) close_range(r1, 0xffffffffffffffff, 0x0) mount$9p_unix(0x0, 0x0, 0x0, 0x80, &(0x7f0000000b00)={'trans=unix,', {[{@access_user}]}}) 884.900989ms ago: executing program 3 (id=143): setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000340)={0x2, 0x4e1d, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x40}, 0x0) 790.260959ms ago: executing program 3 (id=145): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000280), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000300)={0x0, 0x0, 0x1, r2}, 0xc) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="33330000000100112233445586dd6000000000003b4020010db8000000000000000000000001ff0e"], 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000400)=0xb, 0x4) 568.271621ms ago: executing program 1 (id=148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000011c0)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001200), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001240)={'syzkaller0\x00', 0x6101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001280), 0x326d00, 0x0) close(r2) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000012c0)={'syzkaller0\x00', @link_local}) writev(r1, &(0x7f0000001300)=[{&(0x7f0000001380)='9\x00\x00\x00', 0x4}], 0x1) 467.810452ms ago: executing program 3 (id=151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtfilter={0x60, 0x2c, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffff}, {0xffff, 0x3}, {0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xffffffff}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "22d2b6b4d255581f0300000600"}]}}, @TCA_RATE={0x6, 0x5, {0xe, 0xc0}}, @TCA_RATE={0x6, 0x5, {0x8d, 0x4}}]}, 0x60}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280"], 0x74}}, 0x24005000) socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000040)=0xffdffffc, 0x4) bind$inet6(r4, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x23e, @empty}, 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, &(0x7f0000000080)) ioctl$sock_bt_hci(r3, 0x400448cb, &(0x7f0000000cc0)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c0000000c0a0103000000000000"], 0xe0}}, 0x0) 272.315672ms ago: executing program 3 (id=153): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x9, 0x84, 0x3e, 0x9}, 'syz1\x00', 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000240), 0x72, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 272.082732ms ago: executing program 0 (id=154): prlimit64(0x0, 0x7, &(0x7f0000000200), 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 230.582806ms ago: executing program 0 (id=155): setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000340)={0x2, 0x4e1d, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x40}, 0x0) 190.2161ms ago: executing program 0 (id=156): r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xb, 0x1, 0x0, 0x2}}) 107.952429ms ago: executing program 0 (id=157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 58.766544ms ago: executing program 0 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/node/node0/reclaim\x00', 0x2201, 0x40) write(r0, &(0x7f0000000100)='10', 0x2) 0s ago: executing program 0 (id=159): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_mreq(r0, 0x88, 0xe, 0x0, &(0x7f0000000600)=0xfffffffffffffddd) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x100000d, 0x12, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./tracing\x00', 0x1ff) write$FUSE_INTERRUPT(r2, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x41, 0x2) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, 0x0) mount(0x0, &(0x7f0000000700)='./tracing\x00', &(0x7f0000000740)='tracefs\x00', 0x0, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xf5e8d0b131c6a560) r3 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f00000007c0)='p:s/p ./file0:0', 0xf) write(0xffffffffffffffff, &(0x7f0000000840)='1', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. [ 62.648829][ T4261] cgroup: Unknown subsys name 'net' [ 62.751779][ T4261] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.049280][ T4261] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.458475][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.483373][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.492518][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.493203][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.500987][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.515679][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.516451][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.524389][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.531684][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.538383][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.545162][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.552454][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.558823][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.566357][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.580495][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.580768][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.588055][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.595382][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.604874][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.616186][ T4289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.616471][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.630449][ T4291] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.631379][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.645838][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.653376][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 65.660493][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.668002][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.708970][ T4291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.713234][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.724193][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.784954][ T4276] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.785682][ T4275] rdma_rxe: rxe_register_device failed with error -23 [ 65.799535][ T4275] rdma_rxe: failed to add rxe_eth0 [ 65.800553][ T4286] rdma_rxe: rxe_register_device failed with error -23 [ 65.817123][ T4274] rdma_rxe: rxe_register_device failed with error -23 [ 65.824026][ T4274] rdma_rxe: failed to add rxe_eth0 [ 65.845393][ T4283] rdma_rxe: rxe_register_device failed with error -23 [ 65.852305][ T4283] rdma_rxe: failed to add rxe_eth0 [ 65.861648][ T4276] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.872400][ T4276] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.879532][ T4286] rdma_rxe: failed to add rxe_eth0 [ 66.069347][ T4276] infiniband rxe0: set active [ 66.075058][ T4276] infiniband rxe0: added rxe_eth0 [ 66.097804][ T14] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.128542][ T4276] RDS/IB: rxe0: added [ 66.133173][ T4276] smc: adding ib device rxe0 with port count 1 [ 66.139889][ T4276] smc: ib device rxe0 port 1 has pnetid [ 66.149102][ T14] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.176803][ T4276] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.317416][ T4276] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.413994][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 66.468227][ T4276] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.497458][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 66.583541][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 66.599925][ T4286] chnl_net:caif_netlink_parms(): no params data found [ 66.638313][ T4276] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.809449][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.825671][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.834347][ T4275] device bridge_slave_0 entered promiscuous mode [ 66.858784][ T4276] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.873428][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.883835][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.906621][ T4275] device bridge_slave_1 entered promiscuous mode [ 67.006611][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.013902][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.026443][ T4283] device bridge_slave_0 entered promiscuous mode [ 67.058416][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.076526][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.084293][ T4283] device bridge_slave_1 entered promiscuous mode [ 67.122419][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.137034][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.144156][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.152637][ T4286] device bridge_slave_0 entered promiscuous mode [ 67.170056][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.177274][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.184956][ T4274] device bridge_slave_0 entered promiscuous mode [ 67.193122][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.200356][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.208229][ T4274] device bridge_slave_1 entered promiscuous mode [ 67.216309][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.236409][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.243627][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.252063][ T4286] device bridge_slave_1 entered promiscuous mode [ 67.272775][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.296820][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.330679][ T4275] team0: Port device team_slave_0 added [ 67.350915][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.369958][ T4286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.383041][ T4275] team0: Port device team_slave_1 added [ 67.398217][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.409616][ T4286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.440016][ T4283] team0: Port device team_slave_0 added [ 67.483713][ T4283] team0: Port device team_slave_1 added [ 67.498991][ T4274] team0: Port device team_slave_0 added [ 67.507412][ T4286] team0: Port device team_slave_0 added [ 67.515229][ T4274] team0: Port device team_slave_1 added [ 67.528113][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.535067][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.561044][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.590627][ T4286] team0: Port device team_slave_1 added [ 67.602832][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.610074][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.642800][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.662864][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.670473][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.696421][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.708101][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 67.708111][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 67.722918][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.729983][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.756038][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.772881][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.780092][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.806396][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 67.806570][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.812599][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 67.829468][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 67.833616][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.843776][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.875009][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.910046][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.917739][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.944073][ T4286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.957401][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.964371][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.997393][ T4286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.047934][ T4283] device hsr_slave_0 entered promiscuous mode [ 68.054834][ T4283] device hsr_slave_1 entered promiscuous mode [ 68.068235][ T4275] device hsr_slave_0 entered promiscuous mode [ 68.074848][ T4275] device hsr_slave_1 entered promiscuous mode [ 68.081512][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.089559][ T4275] Cannot create hsr debugfs directory [ 68.099136][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 68.120122][ T4274] device hsr_slave_0 entered promiscuous mode [ 68.127221][ T4274] device hsr_slave_1 entered promiscuous mode [ 68.134028][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.142054][ T4274] Cannot create hsr debugfs directory [ 68.242975][ T4286] device hsr_slave_0 entered promiscuous mode [ 68.249916][ T4286] device hsr_slave_1 entered promiscuous mode [ 68.258202][ T4286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.265951][ T4286] Cannot create hsr debugfs directory [ 68.360837][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.368288][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.376728][ T4276] device bridge_slave_0 entered promiscuous mode [ 68.406831][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.413994][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.422003][ T4276] device bridge_slave_1 entered promiscuous mode [ 68.496041][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.528351][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.597597][ T4276] team0: Port device team_slave_0 added [ 68.619162][ T4276] team0: Port device team_slave_1 added [ 68.673275][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.680346][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.708452][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.720801][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.730869][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.757564][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.801602][ T4276] device hsr_slave_0 entered promiscuous mode [ 68.808530][ T4276] device hsr_slave_1 entered promiscuous mode [ 68.815584][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.823186][ T4276] Cannot create hsr debugfs directory [ 68.848857][ T4275] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.861642][ T4275] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.880601][ T4275] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.906805][ T4275] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.986688][ T4283] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.999421][ T4283] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.009464][ T4283] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.020327][ T4283] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.097007][ T4274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.126198][ T4274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.154126][ T4274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.163514][ T4274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.226971][ T4286] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.247490][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.269867][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.279450][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.292524][ T4286] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.306843][ T4286] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.327022][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.339444][ T4286] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.372236][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.382584][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.392709][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.400075][ T4306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.410551][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.421287][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.429885][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.437019][ T4306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.444775][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.454506][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.469756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.484530][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.529282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.543465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.552487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.561755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.577740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.613935][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.623050][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.633386][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.646002][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.662549][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.678561][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.696872][ T4276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.708716][ T4276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.729176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.747116][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.762688][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.785506][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 69.793223][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.795852][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 69.812444][ T4276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.823327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.838804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.850607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.863041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.871268][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 69.871300][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 69.875862][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 69.886834][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.896871][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.923830][ T4276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.935186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.953748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.973752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.983309][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.990524][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.005864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.014826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.032321][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.039481][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.048024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.057062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.065589][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.072693][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.080578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.090095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.114496][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.123394][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.132861][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.158129][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.182789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.193107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.202171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.210785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.219272][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.228279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.236908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.246989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.255599][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.264193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.273280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.281575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.299003][ T4286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.316110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.324665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.338333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.348180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.357854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.367446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.380088][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.404831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.413921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.469312][ T4286] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.482475][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.496491][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.524848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.533572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.611447][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.637963][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.654583][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.661773][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.670741][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.679744][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.688434][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.695598][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.704071][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.712819][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.721600][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.731727][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.739870][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.755077][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.774554][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.794705][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.831760][ T4283] device veth0_vlan entered promiscuous mode [ 70.853639][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.869709][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.889265][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.920861][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.931189][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.939295][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.965467][ T4283] device veth1_vlan entered promiscuous mode [ 70.983586][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.993297][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.002751][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.012108][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.021641][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.030692][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.039880][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.048801][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.055986][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.070474][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.087470][ T4286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.100692][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.128439][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.138041][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.147927][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.156164][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.164544][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.173227][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.182020][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.191343][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.198502][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.207072][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.214780][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.224153][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.239392][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.270318][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 71.278970][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.288590][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.297958][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.307047][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.328266][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.345506][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 71.356580][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.366554][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.389071][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.396088][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.418230][ T4283] device veth0_macvtap entered promiscuous mode [ 71.429526][ T4283] device veth1_macvtap entered promiscuous mode [ 71.437812][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.456456][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.464759][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.478107][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.487461][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.496201][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.504686][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.513660][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.527533][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.539760][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.551637][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.578836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.594463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.643082][ T4274] device veth0_vlan entered promiscuous mode [ 71.662004][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.676189][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.696668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.715953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.739138][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.753529][ T4274] device veth1_vlan entered promiscuous mode [ 71.780902][ T4275] device veth0_vlan entered promiscuous mode [ 71.802506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.821529][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.831170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.846046][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.854314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.863413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.871831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.879335][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 71.879370][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 71.898685][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.926811][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 71.937412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 71.945981][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 71.952029][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 71.958779][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 71.975696][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.984024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.994324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.006327][ T4283] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.016226][ T4283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.024960][ T4283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.034226][ T4283] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.058700][ T4275] device veth1_vlan entered promiscuous mode [ 72.086255][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.103150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.121458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.133829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.150083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.160421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.179014][ T4274] device veth0_macvtap entered promiscuous mode [ 72.201627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.213564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.229440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.237898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.258024][ T4274] device veth1_macvtap entered promiscuous mode [ 72.294362][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.328688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 72.339966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 72.350079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.358600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.376114][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.407114][ T4275] device veth0_macvtap entered promiscuous mode [ 72.428957][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.449744][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.463305][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.490704][ T4275] device veth1_macvtap entered promiscuous mode [ 72.501329][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.509945][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.518443][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.528279][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.541982][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.553042][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.564894][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.595878][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.611450][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.621565][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.638566][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.657783][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.670551][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.680975][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.691051][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.698976][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.710462][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.737058][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.745048][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.758310][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.803566][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.813133][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.825219][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.841024][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.869290][ T4276] device veth0_vlan entered promiscuous mode [ 72.876391][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.887665][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.898594][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.909883][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.920940][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.935915][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.943749][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.969827][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.983442][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.993234][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.002214][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.012034][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.024783][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.033646][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.063081][ T4276] device veth1_vlan entered promiscuous mode [ 73.071225][ T4286] device veth0_vlan entered promiscuous mode [ 73.090984][ T4286] device veth1_vlan entered promiscuous mode [ 73.104740][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.116102][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.126839][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.137844][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.150218][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.188181][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.198283][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.207370][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.216609][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.225214][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.244637][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.256490][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.265185][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.276959][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.296876][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.306577][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.356437][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 73.364586][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 73.390931][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 73.399409][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.408427][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.439333][ T4381] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 73.462140][ T4381] team0: Device hsr_slave_1 failed to register rx_handler [ 73.515102][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 73.531737][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.541844][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.564580][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.581170][ T4276] device veth0_macvtap entered promiscuous mode [ 73.588030][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.612494][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.622093][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.631995][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.642810][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.664311][ T4286] device veth0_macvtap entered promiscuous mode [ 73.678198][ T4276] device veth1_macvtap entered promiscuous mode [ 73.712879][ T4286] device veth1_macvtap entered promiscuous mode [ 73.775038][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.814491][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.832490][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.843316][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.853983][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.864846][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.879602][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.925974][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.934307][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.945030][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.953125][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 73.953161][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 73.967152][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.006122][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.015123][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.028010][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 74.034075][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 74.040480][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 74.048589][ T4391] 9pnet: Could not find request transport: xen [ 74.071648][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.086739][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.113948][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.124569][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.142306][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.152890][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.154525][ T4396] use of bytesused == 0 is deprecated and will be removed in the future, [ 74.164665][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.178383][ T4396] use the actual size instead. [ 74.182846][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.198418][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.210921][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.226091][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.236679][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.257547][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.271439][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.281542][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.296321][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.317171][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.328456][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.346941][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.360488][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.376950][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.405343][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.416745][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.428041][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.439505][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.458597][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.472113][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.486989][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.499680][ T4276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.509330][ T4276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.519925][ T4276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.529087][ T4276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.544280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.555004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.564242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.573282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.589616][ T4286] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.612951][ T4286] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.622585][ T4286] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.648295][ T4286] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.673128][ T4354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.691243][ T4411] tipc: Started in network mode [ 74.698820][ T4354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.700939][ T4411] tipc: Node identity ac1414aa, cluster identity 4711 [ 74.729488][ T4411] tipc: New replicast peer: 172.20.20.187 [ 74.749432][ T4411] tipc: Enabled bearer , priority 10 [ 74.812025][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.038994][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.065916][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.074845][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.108681][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.136794][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.162479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.188656][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.207173][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.231905][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.266029][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.292919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.354981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.389011][ T4424] FAULT_INJECTION: forcing a failure. [ 75.389011][ T4424] name failslab, interval 1, probability 0, space 0, times 1 [ 75.402194][ T4424] CPU: 0 PID: 4424 Comm: syz.2.19 Not tainted syzkaller #0 [ 75.409458][ T4424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 75.419521][ T4424] Call Trace: [ 75.422828][ T4424] [ 75.425749][ T4424] dump_stack_lvl+0x188/0x24e [ 75.430455][ T4424] ? show_regs_print_info+0x12/0x12 [ 75.435695][ T4424] ? load_image+0x410/0x410 [ 75.440245][ T4424] should_fail_ex+0x390/0x4c0 [ 75.444960][ T4424] should_failslab+0x5/0x20 [ 75.449494][ T4424] slab_pre_alloc_hook+0x59/0x300 [ 75.454561][ T4424] ? rfcomm_dlc_alloc+0x72/0x400 [ 75.459537][ T4424] __kmem_cache_alloc_node+0x4f/0x270 [ 75.464951][ T4424] ? rfcomm_dlc_alloc+0x72/0x400 [ 75.469930][ T4424] kmalloc_trace+0x26/0xe0 [ 75.474380][ T4424] rfcomm_dlc_alloc+0x72/0x400 [ 75.479191][ T4424] rfcomm_sock_alloc+0x23/0x200 [ 75.484083][ T4424] rfcomm_sock_create+0xbe/0x2c0 [ 75.489063][ T4424] bt_sock_create+0x155/0x220 [ 75.493775][ T4424] __sock_create+0x49a/0x940 [ 75.498411][ T4424] __sys_socket+0xc4/0x190 [ 75.502870][ T4424] __x64_sys_socket+0x76/0x80 [ 75.507590][ T4424] do_syscall_64+0x4c/0xa0 [ 75.512032][ T4424] ? clear_bhb_loop+0x60/0xb0 [ 75.516744][ T4424] ? clear_bhb_loop+0x60/0xb0 [ 75.521460][ T4424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 75.527393][ T4424] RIP: 0033:0x7f28d39a8f19 [ 75.531861][ T4424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.551504][ T4424] RSP: 002b:00007f28d47a1fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 75.559956][ T4424] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f28d39a8f19 [ 75.567954][ T4424] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 000000000000001f [ 75.575955][ T4424] RBP: 00007f28d3a37f6d R08: 0000000000000000 R09: 0000000000000000 [ 75.583955][ T4424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.591953][ T4424] R13: 00007f28d3c26038 R14: 00007f28d3c25fa0 R15: 00007ffe22ac4978 [ 75.599963][ T4424] [ 75.819244][ T4436] event trace: Could not enable event p [ 76.072248][ T4444] device-mapper: table: 248:0: ram5 too small for target: start=8191, len=3136, dev_size=8192 [ 76.115635][ T4444] device-mapper: core: Cannot calculate initial queue limits [ 76.133281][ T4444] device-mapper: ioctl: unable to set up device queue for new table. [ 76.612989][ T4471] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.580416][ T14] tipc: Node number set to 2886997162 [ 77.843333][ T4481] program syz.1.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.843624][ T4485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'. [ 78.022305][ T4492] FAULT_INJECTION: forcing a failure. [ 78.022305][ T4492] name failslab, interval 1, probability 0, space 0, times 0 [ 78.065907][ T4492] CPU: 1 PID: 4492 Comm: syz.3.33 Not tainted syzkaller #0 [ 78.073179][ T4492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 78.083267][ T4492] Call Trace: [ 78.086586][ T4492] [ 78.089532][ T4492] dump_stack_lvl+0x188/0x24e [ 78.094232][ T4492] ? show_regs_print_info+0x12/0x12 [ 78.099491][ T4492] ? load_image+0x410/0x410 [ 78.104028][ T4492] ? __lock_acquire+0x7ea0/0x7ea0 [ 78.109096][ T4492] should_fail_ex+0x390/0x4c0 [ 78.113805][ T4492] should_failslab+0x5/0x20 [ 78.118334][ T4492] slab_pre_alloc_hook+0x59/0x300 [ 78.123510][ T4492] ? fsnotify_alloc_group+0x70/0x3b0 [ 78.128817][ T4492] __kmem_cache_alloc_node+0x4f/0x270 [ 78.134207][ T4492] ? fsnotify_alloc_group+0x70/0x3b0 [ 78.139507][ T4492] kmalloc_trace+0x26/0xe0 [ 78.143923][ T4492] fsnotify_alloc_group+0x70/0x3b0 [ 78.149032][ T4492] __se_sys_fanotify_init+0x1ae/0x7b0 [ 78.154437][ T4492] ? syscall_enter_from_user_mode+0x21/0x80 [ 78.160362][ T4492] ? lockdep_hardirqs_on+0x94/0x140 [ 78.165592][ T4492] do_syscall_64+0x4c/0xa0 [ 78.170030][ T4492] ? clear_bhb_loop+0x60/0xb0 [ 78.174715][ T4492] ? clear_bhb_loop+0x60/0xb0 [ 78.179397][ T4492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.185296][ T4492] RIP: 0033:0x7fd33ffa8f19 [ 78.189705][ T4492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.209322][ T4492] RSP: 002b:00007fd340d9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 78.217746][ T4492] RAX: ffffffffffffffda RBX: 00007fd340225fa0 RCX: 00007fd33ffa8f19 [ 78.225730][ T4492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 78.233724][ T4492] RBP: 00007fd340037f6d R08: 0000000000000000 R09: 0000000000000000 [ 78.241711][ T4492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.249696][ T4492] R13: 00007fd340226038 R14: 00007fd340225fa0 R15: 00007ffc2dd64248 [ 78.257681][ T4492] [ 78.276316][ T128] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.567325][ T4494] FAULT_INJECTION: forcing a failure. [ 78.567325][ T4494] name failslab, interval 1, probability 0, space 0, times 0 [ 78.587853][ T4494] CPU: 1 PID: 4494 Comm: syz.0.34 Not tainted syzkaller #0 [ 78.595121][ T4494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 78.605204][ T4494] Call Trace: [ 78.608595][ T4494] [ 78.611548][ T4494] dump_stack_lvl+0x188/0x24e [ 78.616267][ T4494] ? show_regs_print_info+0x12/0x12 [ 78.621517][ T4494] ? load_image+0x410/0x410 [ 78.626099][ T4494] ? __might_sleep+0xd0/0xd0 [ 78.630725][ T4494] ? __lock_acquire+0x7ea0/0x7ea0 [ 78.635797][ T4494] should_fail_ex+0x390/0x4c0 [ 78.640527][ T4494] should_failslab+0x5/0x20 [ 78.645069][ T4494] slab_pre_alloc_hook+0x59/0x300 [ 78.650135][ T4494] kmem_cache_alloc+0x56/0x2f0 [ 78.654931][ T4494] ? __kernfs_new_node+0xe1/0x7f0 [ 78.659993][ T4494] __kernfs_new_node+0xe1/0x7f0 [ 78.664857][ T4494] ? __lock_acquire+0x7ea0/0x7ea0 [ 78.669892][ T4494] ? kernfs_new_node+0x250/0x250 [ 78.674856][ T4494] kernfs_new_node+0x148/0x250 [ 78.679628][ T4494] __kernfs_create_file+0x47/0x2e0 [ 78.684859][ T4494] sysfs_add_file_mode_ns+0x233/0x2f0 [ 78.690246][ T4494] internal_create_group+0x490/0xce0 [ 78.695538][ T4494] ? kernfs_add_one+0x14e/0x8f0 [ 78.700389][ T4494] ? __lock_acquire+0x7ea0/0x7ea0 [ 78.705416][ T4494] ? sysfs_create_group+0x20/0x20 [ 78.710453][ T4494] sysfs_create_groups+0x55/0x120 [ 78.715483][ T4494] device_add_attrs+0x129/0x830 [ 78.720338][ T4494] ? get_device_parent+0x3e0/0x3e0 [ 78.725490][ T4494] ? kernfs_create_link+0x186/0x200 [ 78.730697][ T4494] device_add+0x677/0x1050 [ 78.735118][ T4494] input_register_device+0xa53/0x12d0 [ 78.740536][ T4494] ? ps2_command+0xbc/0xd0 [ 78.744958][ T4494] atkbd_connect+0x6de/0x980 [ 78.749557][ T4494] ? atkbd_interrupt+0x1440/0x1440 [ 78.754674][ T4494] ? kernfs_create_link+0x186/0x200 [ 78.759878][ T4494] ? serio_uevent+0x3b0/0x3b0 [ 78.764554][ T4494] serio_driver_probe+0x76/0x90 [ 78.769409][ T4494] ? serio_uevent+0x3b0/0x3b0 [ 78.774085][ T4494] really_probe+0x24a/0xb40 [ 78.778588][ T4494] ? pm_runtime_barrier+0x147/0x1c0 [ 78.783789][ T4494] __driver_probe_device+0x1f5/0x390 [ 78.789076][ T4494] driver_probe_device+0x4f/0x420 [ 78.794104][ T4494] __device_attach_driver+0x2c6/0x510 [ 78.799502][ T4494] ? coredump_store+0x90/0x90 [ 78.804179][ T4494] bus_for_each_drv+0x184/0x210 [ 78.809031][ T4494] ? coredump_store+0x90/0x90 [ 78.813704][ T4494] ? subsys_find_device_by_id+0x360/0x360 [ 78.819426][ T4494] ? mutex_unlock+0x10/0x10 [ 78.823932][ T4494] __device_attach+0x2a7/0x480 [ 78.828696][ T4494] ? device_attach+0x20/0x20 [ 78.833288][ T4494] ? device_release_driver_internal+0x75a/0x7c0 [ 78.839530][ T4494] drvctl_store+0x8e2/0xae0 [ 78.844037][ T4494] ? sysfs_kf_write+0x183/0x2a0 [ 78.848891][ T4494] ? sysfs_kf_read+0x350/0x350 [ 78.853655][ T4494] kernfs_fop_write_iter+0x3a0/0x520 [ 78.858943][ T4494] vfs_write+0x482/0x9a0 [ 78.863187][ T4494] ? file_end_write+0x250/0x250 [ 78.868041][ T4494] ? __fget_files+0x3fc/0x460 [ 78.872726][ T4494] ? __fdget_pos+0x2ae/0x360 [ 78.877334][ T4494] ? ksys_write+0x70/0x260 [ 78.881748][ T4494] ksys_write+0x14d/0x260 [ 78.886075][ T4494] ? __ia32_sys_read+0x80/0x80 [ 78.890841][ T4494] ? lockdep_hardirqs_on+0x94/0x140 [ 78.896045][ T4494] do_syscall_64+0x4c/0xa0 [ 78.900462][ T4494] ? clear_bhb_loop+0x60/0xb0 [ 78.905140][ T4494] ? clear_bhb_loop+0x60/0xb0 [ 78.909822][ T4494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.915725][ T4494] RIP: 0033:0x7f51883a8f19 [ 78.920154][ T4494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.939762][ T4494] RSP: 002b:00007f518931f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.948179][ T4494] RAX: ffffffffffffffda RBX: 00007f5188625fa0 RCX: 00007f51883a8f19 [ 78.956144][ T4494] RDX: 0000000000000003 RSI: 0000200000000480 RDI: 0000000000000007 [ 78.964117][ T4494] RBP: 00007f5188437f6d R08: 0000000000000000 R09: 0000000000000000 [ 78.972082][ T4494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.980063][ T4494] R13: 00007f5188626038 R14: 00007f5188625fa0 R15: 00007ffe4b8a10c8 [ 78.988049][ T4494] [ 79.011333][ T4494] atkbd: probe of serio0 failed with error -12 [ 79.089123][ T4515] Bluetooth: MGMT ver 1.22 [ 79.261565][ T4523] tc action pedit offset must be on 32 bit boundaries [ 79.268760][ T4523] tc action pedit offset must be on 32 bit boundaries [ 79.275619][ T4523] tc action pedit offset must be on 32 bit boundaries [ 79.282412][ T4523] tc action pedit offset must be on 32 bit boundaries [ 79.289269][ T4523] tc action pedit offset must be on 32 bit boundaries [ 79.296109][ T4523] tc action pedit offset must be on 32 bit boundaries [ 79.302895][ T4523] tc action pedit offset must be on 32 bit boundaries [ 79.309747][ T4523] tc action pedit offset must be on 32 bit boundaries [ 79.316578][ T4523] tc action pedit offset must be on 32 bit boundaries [ 79.323360][ T4523] tc action pedit offset must be on 32 bit boundaries [ 79.330409][ T4523] 0: reclassify loop, rule prio 0, protocol 800 [ 80.025630][ T4287] Bluetooth: hci4: command 0x0405 tx timeout [ 80.859361][ T4604] syz.0.74 uses obsolete (PF_INET,SOCK_PACKET) [ 80.910380][ T4263] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.120936][ T4263] usb 5-1: Using ep0 maxpacket: 8 [ 81.145379][ T4280] Bluetooth: hci0: command 0x0c13 tx timeout [ 81.152015][ T4284] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 81.178754][ T4263] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 81.187900][ T4263] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.197977][ T4263] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.208274][ T4263] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.218572][ T4263] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.232225][ T4263] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.241604][ T4263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.463858][ T4263] usb 5-1: usb_control_msg returned -32 [ 81.471362][ T4263] usbtmc 5-1:16.0: can't read capabilities [ 81.910107][ T4643] bond0: (slave bond_slave_0): Releasing backup interface [ 82.029789][ T4263] usb 5-1: USB disconnect, device number 2 [ 82.041050][ T4641] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -71 [ 82.140172][ T4650] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 82.191578][ T4652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'. [ 82.569899][ T4660] Bluetooth: hci0: Invalid link address type 20 for 66:55:44:33:22:11 [ 84.006761][ T4616] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 84.160830][ T4677] FAULT_INJECTION: forcing a failure. [ 84.160830][ T4677] name failslab, interval 1, probability 0, space 0, times 0 [ 84.205364][ T4677] CPU: 0 PID: 4677 Comm: syz.3.95 Not tainted syzkaller #0 [ 84.212620][ T4677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 84.222691][ T4677] Call Trace: [ 84.225974][ T4677] [ 84.228900][ T4677] dump_stack_lvl+0x188/0x24e [ 84.233590][ T4677] ? show_regs_print_info+0x12/0x12 [ 84.238812][ T4677] ? load_image+0x410/0x410 [ 84.243337][ T4677] ? __might_sleep+0xd0/0xd0 [ 84.247940][ T4677] ? __lock_acquire+0x7ea0/0x7ea0 [ 84.252995][ T4677] should_fail_ex+0x390/0x4c0 [ 84.257700][ T4677] should_failslab+0x5/0x20 [ 84.262204][ T4677] slab_pre_alloc_hook+0x59/0x300 [ 84.267231][ T4677] ? mutex_lock_nested+0x10/0x10 [ 84.272164][ T4677] ? io_uring_alloc_task_context+0x18d/0x5cc [ 84.278144][ T4677] __kmem_cache_alloc_node+0x4f/0x270 [ 84.283519][ T4677] ? io_uring_alloc_task_context+0x18d/0x5cc [ 84.289499][ T4677] kmalloc_trace+0x26/0xe0 [ 84.293910][ T4677] io_uring_alloc_task_context+0x18d/0x5cc [ 84.299720][ T4677] ? io_uring_show_cred+0x4d9/0x4d9 [ 84.304921][ T4677] ? alloc_fd+0x590/0x640 [ 84.309283][ T4677] ? __lock_acquire+0x7ea0/0x7ea0 [ 84.314323][ T4677] ? __rwlock_init+0x140/0x140 [ 84.319094][ T4677] __io_uring_add_tctx_node+0x34b/0x4f0 [ 84.324641][ T4677] ? __io_uring_free+0x1f0/0x1f0 [ 84.329614][ T4677] ? alloc_fd+0x590/0x640 [ 84.333968][ T4677] io_uring_install_fd+0x32/0x70 [ 84.338911][ T4677] io_uring_create+0x8c8/0xd6c [ 84.343684][ T4677] __x64_sys_io_uring_setup+0x21b/0x230 [ 84.349235][ T4677] ? __ia32_sys_io_uring_enter+0xf0/0xf0 [ 84.354878][ T4677] ? __secure_computing+0x10d/0x2f0 [ 84.360091][ T4677] do_syscall_64+0x4c/0xa0 [ 84.364513][ T4677] ? clear_bhb_loop+0x60/0xb0 [ 84.369191][ T4677] ? clear_bhb_loop+0x60/0xb0 [ 84.373899][ T4677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.379820][ T4677] RIP: 0033:0x7fd33ffa8f19 [ 84.384259][ T4677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.403891][ T4677] RSP: 002b:00007fd340d9efb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 84.412336][ T4677] RAX: ffffffffffffffda RBX: 0000200000000280 RCX: 00007fd33ffa8f19 [ 84.420311][ T4677] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000007b6d [ 84.428301][ T4677] RBP: 00007fd340037f6d R08: 0000000000000000 R09: 0000000000000000 [ 84.436304][ T4677] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 84.444389][ T4677] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc2dd64248 [ 84.452378][ T4677] [ 84.455455][ C0] vkms_vblank_simulate: vblank timer overrun [ 84.482475][ T4684] lo speed is unknown, defaulting to 1000 [ 84.497887][ T4684] lo speed is unknown, defaulting to 1000 [ 84.506180][ T4684] lo speed is unknown, defaulting to 1000 [ 84.874709][ T4684] infiniband syz0: set active [ 84.880305][ T4345] lo speed is unknown, defaulting to 1000 [ 84.896668][ T4684] infiniband syz0: added lo [ 84.985676][ T4684] RDS/IB: syz0: added [ 84.999932][ T4684] smc: adding ib device syz0 with port count 1 [ 85.004105][ T4702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.104'. [ 85.018421][ T4684] smc: ib device syz0 port 1 has pnetid [ 85.034499][ T4345] lo speed is unknown, defaulting to 1000 [ 85.052742][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880568a4800: rx timeout, send abort [ 85.062941][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880568a4800: 0x2f002: (3) A timeout occurred and this is the connection abort to close the session. [ 85.073616][ T4684] lo speed is unknown, defaulting to 1000 [ 85.084459][ T4699] input: syz0 as /devices/virtual/input/input6 [ 85.113437][ T4699] FAULT_INJECTION: forcing a failure. [ 85.113437][ T4699] name failslab, interval 1, probability 0, space 0, times 0 [ 85.174071][ T4699] CPU: 0 PID: 4699 Comm: syz.3.102 Not tainted syzkaller #0 [ 85.181423][ T4699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 85.191484][ T4699] Call Trace: [ 85.194780][ T4699] [ 85.197713][ T4699] dump_stack_lvl+0x188/0x24e [ 85.202400][ T4699] ? show_regs_print_info+0x12/0x12 [ 85.207599][ T4699] ? load_image+0x410/0x410 [ 85.212102][ T4699] ? __might_sleep+0xd0/0xd0 [ 85.216712][ T4699] ? __lock_acquire+0x7ea0/0x7ea0 [ 85.221830][ T4699] should_fail_ex+0x390/0x4c0 [ 85.226537][ T4699] should_failslab+0x5/0x20 [ 85.231046][ T4699] slab_pre_alloc_hook+0x59/0x300 [ 85.236070][ T4699] ? __kernfs_new_node+0xa6/0x7f0 [ 85.241122][ T4699] ? rcu_is_watching+0x11/0xa0 [ 85.245918][ T4699] kmem_cache_alloc+0x56/0x2f0 [ 85.250690][ T4699] ? __kernfs_new_node+0xe1/0x7f0 [ 85.255738][ T4699] __kernfs_new_node+0xe1/0x7f0 [ 85.260587][ T4699] ? __lock_acquire+0x7ea0/0x7ea0 [ 85.265626][ T4699] ? kernfs_new_node+0x250/0x250 [ 85.270576][ T4699] ? sysfs_do_create_link_sd+0x75/0x110 [ 85.276128][ T4699] ? up_write+0x1b6/0x410 [ 85.280491][ T4699] ? __lock_acquire+0x7ea0/0x7ea0 [ 85.285521][ T4699] kernfs_new_node+0x148/0x250 [ 85.290291][ T4699] kernfs_create_link+0xa3/0x200 [ 85.295229][ T4699] sysfs_do_create_link_sd+0x83/0x110 [ 85.300612][ T4699] device_add+0x83b/0x1050 [ 85.305038][ T4699] cdev_device_add+0x19d/0x340 [ 85.309805][ T4699] evdev_connect+0x350/0x3f0 [ 85.314400][ T4699] input_register_device+0xd91/0x12d0 [ 85.319768][ T4699] ? input_ff_create+0x24e/0x2e0 [ 85.324707][ T4699] uinput_create_device+0x53e/0x680 [ 85.329909][ T4699] uinput_ioctl_handler+0x7a0/0x13d0 [ 85.335202][ T4699] ? uinput_release+0x50/0x50 [ 85.339891][ T4699] ? bpf_lsm_file_ioctl+0x5/0x10 [ 85.344860][ T4699] ? security_file_ioctl+0x7c/0xa0 [ 85.349994][ T4699] ? uinput_poll+0x120/0x120 [ 85.354589][ T4699] __se_sys_ioctl+0xfa/0x170 [ 85.359189][ T4699] do_syscall_64+0x4c/0xa0 [ 85.363612][ T4699] ? clear_bhb_loop+0x60/0xb0 [ 85.368294][ T4699] ? clear_bhb_loop+0x60/0xb0 [ 85.372973][ T4699] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.378870][ T4699] RIP: 0033:0x7fd33ffa8f19 [ 85.383282][ T4699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.403062][ T4699] RSP: 002b:00007fd340d9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.411478][ T4699] RAX: ffffffffffffffda RBX: 00007fd340225fa0 RCX: 00007fd33ffa8f19 [ 85.419488][ T4699] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 85.427452][ T4699] RBP: 00007fd340037f6d R08: 0000000000000000 R09: 0000000000000000 [ 85.435419][ T4699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.443388][ T4699] R13: 00007fd340226038 R14: 00007fd340225fa0 R15: 00007ffc2dd64248 [ 85.451370][ T4699] [ 85.454491][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.685503][ T4699] input: failed to attach handler evdev to device input6, error: -12 [ 85.701516][ T4684] lo speed is unknown, defaulting to 1000 [ 85.973394][ T4684] lo speed is unknown, defaulting to 1000 [ 86.073967][ T4726] hub 1-0:1.0: USB hub found [ 86.088128][ T4726] hub 1-0:1.0: 1 port detected [ 86.275501][ T4345] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.284058][ T4684] lo speed is unknown, defaulting to 1000 [ 86.298659][ T4733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 86.400861][ T4684] lo speed is unknown, defaulting to 1000 [ 86.475360][ T4345] usb 5-1: Using ep0 maxpacket: 8 [ 86.482504][ T4345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.504238][ T4345] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 86.523745][ T4345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.532269][ T128] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.542819][ T4345] usb 5-1: config 0 descriptor?? [ 86.647477][ T4746] random: crng reseeded on system resumption [ 86.735463][ T128] usb 3-1: Using ep0 maxpacket: 32 [ 86.752231][ T3049] cfg80211: failed to load regulatory.db [ 86.764894][ T4345] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 86.776766][ T128] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 86.784986][ T128] usb 3-1: config 0 has no interface number 0 [ 86.804537][ T128] usb 3-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 86.825721][ T128] usb 3-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 86.836829][ T128] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.854264][ T128] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 86.867714][ T128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.878875][ T128] usb 3-1: Product: syz [ 86.883095][ T128] usb 3-1: Manufacturer: syz [ 86.891182][ T128] usb 3-1: SerialNumber: syz [ 86.899108][ T128] usb 3-1: config 0 descriptor?? [ 86.908969][ T4731] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 86.922944][ T128] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input7 [ 87.162868][ T128] usb 3-1: USB disconnect, device number 2 [ 87.188863][ T14] usb 5-1: USB disconnect, device number 3 [ 87.410512][ T4761] FAULT_INJECTION: forcing a failure. [ 87.410512][ T4761] name fail_futex, interval 1, probability 0, space 0, times 1 [ 87.423881][ T4761] CPU: 1 PID: 4761 Comm: syz.0.127 Not tainted syzkaller #0 [ 87.431213][ T4761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 87.441278][ T4761] Call Trace: [ 87.444551][ T4761] [ 87.447489][ T4761] dump_stack_lvl+0x188/0x24e [ 87.452197][ T4761] ? verify_lock_unused+0x140/0x140 [ 87.457388][ T4761] ? show_regs_print_info+0x12/0x12 [ 87.462578][ T4761] ? load_image+0x410/0x410 [ 87.467085][ T4761] should_fail_ex+0x390/0x4c0 [ 87.471759][ T4761] get_futex_key+0x1a6/0xe70 [ 87.476356][ T4761] ? futex_setup_timer+0xc0/0xc0 [ 87.481320][ T4761] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 87.487294][ T4761] ? __lock_acquire+0x7ea0/0x7ea0 [ 87.492322][ T4761] ? lock_chain_count+0x20/0x20 [ 87.497162][ T4761] futex_wait_setup+0xb8/0x270 [ 87.501937][ T4761] ? futex_wait_multiple+0x970/0x970 [ 87.507244][ T4761] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 87.513132][ T4761] ? _raw_spin_unlock+0x40/0x40 [ 87.517992][ T4761] futex_wait+0x1cb/0x640 [ 87.522435][ T4761] ? futex_wait_setup+0x270/0x270 [ 87.527462][ T4761] ? lock_chain_count+0x20/0x20 [ 87.532312][ T4761] do_futex+0x310/0x320 [ 87.536457][ T4761] ? __ia32_sys_get_robust_list+0x100/0x100 [ 87.542334][ T4761] ? slab_free_freelist_hook+0x133/0x1b0 [ 87.547960][ T4761] __se_sys_futex+0x381/0x410 [ 87.552625][ T4761] ? __x64_sys_futex+0xf0/0xf0 [ 87.557377][ T4761] ? __x64_sys_futex+0x1d/0xf0 [ 87.562123][ T4761] do_syscall_64+0x4c/0xa0 [ 87.566540][ T4761] ? clear_bhb_loop+0x60/0xb0 [ 87.571232][ T4761] ? clear_bhb_loop+0x60/0xb0 [ 87.575925][ T4761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.581821][ T4761] RIP: 0033:0x7f51883a8f19 [ 87.586237][ T4761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.606033][ T4761] RSP: 002b:00007f518931f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 87.614459][ T4761] RAX: ffffffffffffffda RBX: 00007f5188625fa8 RCX: 00007f51883a8f19 [ 87.622465][ T4761] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5188625fa8 [ 87.630441][ T4761] RBP: 00007f5188625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 87.638589][ T4761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.646571][ T4761] R13: 00007f5188626038 R14: 00007ffe4b8a0fe0 R15: 00007ffe4b8a10c8 [ 87.654580][ T4761] [ 87.659037][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055f4e400: rx timeout, send abort [ 87.668406][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055f4e400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 87.831490][ T4764] ip_tables: iptables: counters copy to user failed while replacing table [ 87.863945][ T4766] FAULT_INJECTION: forcing a failure. [ 87.863945][ T4766] name failslab, interval 1, probability 0, space 0, times 0 [ 87.895556][ T4766] CPU: 1 PID: 4766 Comm: syz.0.129 Not tainted syzkaller #0 [ 87.902911][ T4766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 87.913025][ T4766] Call Trace: [ 87.916317][ T4766] [ 87.919256][ T4766] dump_stack_lvl+0x188/0x24e [ 87.923947][ T4766] ? show_regs_print_info+0x12/0x12 [ 87.929157][ T4766] ? load_image+0x410/0x410 [ 87.933671][ T4766] ? __might_sleep+0xd0/0xd0 [ 87.938270][ T4766] ? __lock_acquire+0x7ea0/0x7ea0 [ 87.943301][ T4766] should_fail_ex+0x390/0x4c0 [ 87.948010][ T4766] should_failslab+0x5/0x20 [ 87.952541][ T4766] slab_pre_alloc_hook+0x59/0x300 [ 87.957571][ T4766] ? __kernfs_new_node+0xa6/0x7f0 [ 87.962606][ T4766] __kmem_cache_alloc_node+0x4f/0x270 [ 87.967979][ T4766] ? number+0xc99/0xef0 [ 87.972136][ T4766] ? __kernfs_new_node+0xa6/0x7f0 [ 87.977159][ T4766] __kmalloc_node_track_caller+0xa0/0x240 [ 87.982909][ T4766] kstrdup_const+0x56/0x90 [ 87.987336][ T4766] __kernfs_new_node+0xa6/0x7f0 [ 87.992200][ T4766] ? kernfs_new_node+0x250/0x250 [ 87.997231][ T4766] ? sysfs_do_create_link_sd+0x75/0x110 [ 88.002782][ T4766] kernfs_new_node+0x148/0x250 [ 88.007579][ T4766] kernfs_create_link+0xa3/0x200 [ 88.012530][ T4766] sysfs_do_create_link_sd+0x83/0x110 [ 88.017918][ T4766] device_create_sys_dev_entry+0x11b/0x180 [ 88.023726][ T4766] ? device_add_attrs+0x830/0x830 [ 88.028749][ T4766] ? device_create_file+0xeb/0x1b0 [ 88.033862][ T4766] device_add+0xb24/0x1050 [ 88.038287][ T4766] device_add_disk+0x488/0x1020 [ 88.043145][ T4766] md_alloc+0x7f3/0xd00 [ 88.047304][ T4766] add_named_array+0x244/0x3b0 [ 88.052119][ T4766] ? get_ro+0x20/0x20 [ 88.056101][ T4766] ? kernfs_fop_write_iter+0x1d8/0x520 [ 88.061579][ T4766] ? read_lock_is_recursive+0x10/0x10 [ 88.066971][ T4766] param_attr_store+0x20a/0x300 [ 88.071838][ T4766] ? param_attr_show+0x170/0x170 [ 88.076778][ T4766] ? sysfs_kf_read+0x350/0x350 [ 88.081547][ T4766] module_attr_store+0x5b/0x80 [ 88.086311][ T4766] kernfs_fop_write_iter+0x3a0/0x520 [ 88.091687][ T4766] vfs_write+0x482/0x9a0 [ 88.095932][ T4766] ? file_end_write+0x250/0x250 [ 88.100800][ T4766] ? __fget_files+0x3fc/0x460 [ 88.105492][ T4766] ? __fdget_pos+0x2ae/0x360 [ 88.110078][ T4766] ? ksys_write+0x70/0x260 [ 88.114551][ T4766] ksys_write+0x14d/0x260 [ 88.118879][ T4766] ? __ia32_sys_read+0x80/0x80 [ 88.123753][ T4766] ? lockdep_hardirqs_on+0x94/0x140 [ 88.129056][ T4766] do_syscall_64+0x4c/0xa0 [ 88.133480][ T4766] ? clear_bhb_loop+0x60/0xb0 [ 88.138159][ T4766] ? clear_bhb_loop+0x60/0xb0 [ 88.142850][ T4766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.148744][ T4766] RIP: 0033:0x7f51883a8f19 [ 88.153183][ T4766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.172788][ T4766] RSP: 002b:00007f518931f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.181206][ T4766] RAX: ffffffffffffffda RBX: 00007f5188625fa0 RCX: 00007f51883a8f19 [ 88.189189][ T4766] RDX: 0000000000000008 RSI: 0000200000000240 RDI: 0000000000000004 [ 88.197593][ T4766] RBP: 00007f5188437f6d R08: 0000000000000000 R09: 0000000000000000 [ 88.205563][ T4766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.213790][ T4766] R13: 00007f5188626038 R14: 00007f5188625fa0 R15: 00007ffe4b8a10c8 [ 88.221777][ T4766] [ 88.663841][ T4792] jffs2: notice: (4792) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 89.042232][ T4810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.146'. [ 89.305143][ T4824] netlink: 72 bytes leftover after parsing attributes in process `syz.3.151'. [ 89.560805][ T4795] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 89.571190][ T4795] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 89.591473][ T4795] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 89.608497][ T4795] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 89.614696][ T4795] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 89.619835][ T4841] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 89.645396][ T4795] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 89.654989][ T4795] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 89.668030][ T4795] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 89.682942][ T4795] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 89.694014][ T4795] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.703713][ T4795] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.715048][ T4795] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.726096][ T4795] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 89.743064][ T3346] ================================================================== [ 89.743158][ T4795] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 89.751193][ T3346] BUG: KASAN: use-after-free in hci_chan_del+0x36/0x1a0 [ 89.751226][ T3346] Read of size 8 at addr ffff8880249ff918 by task krfcommd/3346 [ 89.751238][ T3346] [ 89.751244][ T3346] CPU: 0 PID: 3346 Comm: krfcommd Not tainted syzkaller #0 [ 89.751259][ T3346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 89.751267][ T3346] Call Trace: [ 89.751275][ T3346] [ 89.751281][ T3346] dump_stack_lvl+0x188/0x24e [ 89.751311][ T3346] ? read_lock_is_recursive+0x10/0x10 [ 89.751331][ T3346] ? show_regs_print_info+0x12/0x12 [ 89.751349][ T3346] ? load_image+0x410/0x410 [ 89.751365][ T3346] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 89.751385][ T3346] ? __virt_addr_valid+0x188/0x540 [ 89.751405][ T3346] ? __virt_addr_valid+0x467/0x540 [ 89.751423][ T3346] ? hci_chan_del+0x36/0x1a0 [ 89.751440][ T3346] print_report+0xa8/0x210 [ 89.751458][ T3346] kasan_report+0x10b/0x140 [ 89.846457][ T3346] ? hci_chan_del+0x36/0x1a0 [ 89.851048][ T3346] hci_chan_del+0x36/0x1a0 [ 89.855476][ T3346] l2cap_chan_put+0x1f5/0x300 [ 89.860151][ T3346] l2cap_sock_release+0x179/0x1e0 [ 89.865168][ T3346] sock_release+0x7b/0x140 [ 89.869582][ T3346] rfcomm_session_del+0x141/0x200 [ 89.874604][ T3346] rfcomm_run+0x46e1/0x5f10 [ 89.879108][ T3346] ? rfcomm_security_cfm+0x780/0x780 [ 89.884407][ T3346] ? mark_lock+0x94/0x320 [ 89.888823][ T3346] ? __lock_acquire+0x142d/0x7ea0 [ 89.894018][ T3346] ? mark_lock+0x94/0x320 [ 89.898339][ T3346] ? __lock_acquire+0x142d/0x7ea0 [ 89.903364][ T3346] ? mark_lock+0x94/0x320 [ 89.907706][ T3346] ? __lock_acquire+0x142d/0x7ea0 [ 89.912739][ T3346] ? verify_lock_unused+0x140/0x140 [ 89.917934][ T3346] ? finish_task_switch+0x25d/0x8e0 [ 89.923131][ T3346] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 89.929103][ T3346] ? read_lock_is_recursive+0x10/0x10 [ 89.934471][ T3346] ? lock_chain_count+0x20/0x20 [ 89.939317][ T3346] ? finish_task_switch+0x262/0x8e0 [ 89.944511][ T3346] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 89.950481][ T3346] ? __lock_acquire+0x7ea0/0x7ea0 [ 89.955498][ T3346] ? lock_chain_count+0x20/0x20 [ 89.960340][ T3346] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 89.966229][ T3346] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 89.972113][ T3346] ? wait_woken+0x1c0/0x1c0 [ 89.976635][ T3346] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 89.982519][ T3346] ? __kthread_parkme+0x71/0x1c0 [ 89.987449][ T3346] ? __kthread_parkme+0x15b/0x1c0 [ 89.992486][ T3346] kthread+0x29d/0x330 [ 89.996561][ T3346] ? rfcomm_security_cfm+0x780/0x780 [ 90.001846][ T3346] ? kthread_blkcg+0xd0/0xd0 [ 90.006426][ T3346] ret_from_fork+0x1f/0x30 [ 90.010839][ T3346] [ 90.013844][ T3346] [ 90.016157][ T3346] Allocated by task 4496: [ 90.020468][ T3346] kasan_set_track+0x4b/0x70 [ 90.025049][ T3346] __kasan_kmalloc+0x8e/0xa0 [ 90.029631][ T3346] hci_chan_create+0xc5/0x300 [ 90.034302][ T3346] l2cap_conn_add+0x5d/0x910 [ 90.038887][ T3346] l2cap_chan_connect+0x67b/0xeb0 [ 90.043916][ T3346] l2cap_sock_connect+0x576/0x750 [ 90.048948][ T3346] kernel_connect+0x13e/0x1c0 [ 90.053624][ T3346] rfcomm_dlc_open+0x648/0xb40 [ 90.058398][ T3346] rfcomm_sock_connect+0x2e9/0x600 [ 90.063764][ T3346] __sys_connect+0x3cb/0x450 [ 90.068341][ T3346] __x64_sys_connect+0x76/0x80 [ 90.073096][ T3346] do_syscall_64+0x4c/0xa0 [ 90.077513][ T3346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.083395][ T3346] [ 90.085711][ T3346] Freed by task 4795: [ 90.089675][ T3346] kasan_set_track+0x4b/0x70 [ 90.094256][ T3346] kasan_save_free_info+0x27/0x40 [ 90.099268][ T3346] ____kasan_slab_free+0x126/0x1f0 [ 90.104369][ T3346] slab_free_freelist_hook+0x133/0x1b0 [ 90.109819][ T3346] __kmem_cache_free+0xb6/0x200 [ 90.114662][ T3346] hci_conn_cleanup+0x171/0x750 [ 90.119506][ T3346] hci_conn_del+0x4df/0x6e0 [ 90.123997][ T3346] hci_abort_conn_sync+0xa73/0xce0 [ 90.129125][ T3346] hci_disconnect_all_sync+0x1b5/0x350 [ 90.134598][ T3346] hci_suspend_sync+0x416/0xe20 [ 90.139437][ T3346] hci_suspend_dev+0x199/0x320 [ 90.144202][ T3346] hci_suspend_notifier+0xc8/0x270 [ 90.149301][ T3346] notifier_call_chain_robust+0xe1/0x2c0 [ 90.154920][ T3346] blocking_notifier_call_chain_robust+0x66/0x90 [ 90.161236][ T3346] pm_notifier_call_chain_robust+0x28/0x60 [ 90.167048][ T3346] snapshot_open+0x19b/0x280 [ 90.171629][ T3346] misc_open+0x31f/0x390 [ 90.175859][ T3346] chrdev_open+0x585/0x5f0 [ 90.180267][ T3346] do_dentry_open+0x7dd/0x10b0 [ 90.185017][ T3346] path_openat+0x2674/0x2f10 [ 90.189595][ T3346] do_filp_open+0x1ee/0x420 [ 90.194087][ T3346] do_sys_openat2+0x14b/0x4f0 [ 90.198756][ T3346] __x64_sys_openat+0x135/0x160 [ 90.203618][ T3346] do_syscall_64+0x4c/0xa0 [ 90.208027][ T3346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.213911][ T3346] [ 90.216222][ T3346] The buggy address belongs to the object at ffff8880249ff900 [ 90.216222][ T3346] which belongs to the cache kmalloc-128 of size 128 [ 90.230265][ T3346] The buggy address is located 24 bytes inside of [ 90.230265][ T3346] 128-byte region [ffff8880249ff900, ffff8880249ff980) [ 90.243462][ T3346] [ 90.245774][ T3346] The buggy address belongs to the physical page: [ 90.252186][ T3346] page:ffffea0000927fc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x249ff [ 90.262348][ T3346] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 90.269894][ T3346] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff8880184418c0 [ 90.278466][ T3346] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 90.287053][ T3346] page dumped because: kasan: bad access detected [ 90.293476][ T3346] page_owner tracks the page as allocated [ 90.299208][ T3346] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4293, tgid 4293 (udevd), ts 77813854676, free_ts 77694960633 [ 90.316822][ T3346] post_alloc_hook+0x173/0x1a0 [ 90.321582][ T3346] get_page_from_freelist+0x206b/0x2180 [ 90.327122][ T3346] __alloc_pages+0x1ec/0x4f0 [ 90.331723][ T3346] alloc_slab_page+0x5d/0x180 [ 90.336395][ T3346] new_slab+0x87/0x2d0 [ 90.340453][ T3346] ___slab_alloc+0xbc5/0x1240 [ 90.345119][ T3346] __kmem_cache_alloc_node+0x126/0x270 [ 90.350587][ T3346] kmalloc_trace+0x26/0xe0 [ 90.354990][ T3346] kernfs_fop_open+0x78c/0xc60 [ 90.359749][ T3346] do_dentry_open+0x7dd/0x10b0 [ 90.364511][ T3346] path_openat+0x2674/0x2f10 [ 90.369096][ T3346] do_filp_open+0x1ee/0x420 [ 90.373589][ T3346] do_sys_openat2+0x14b/0x4f0 [ 90.378260][ T3346] __x64_sys_openat+0x135/0x160 [ 90.383101][ T3346] do_syscall_64+0x4c/0xa0 [ 90.387508][ T3346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.393509][ T3346] page last free stack trace: [ 90.398196][ T3346] free_unref_page_prepare+0x8e5/0x9e0 [ 90.403657][ T3346] free_unref_page_list+0xbb/0x8e0 [ 90.408767][ T3346] release_pages+0x20d1/0x2340 [ 90.413525][ T3346] tlb_flush_mmu+0x105/0x220 [ 90.418141][ T3346] tlb_finish_mmu+0xf0/0x220 [ 90.422754][ T3346] exit_mmap+0x388/0x970 [ 90.427001][ T3346] __mmput+0x118/0x3a0 [ 90.431065][ T3346] exit_mm+0x24d/0x350 [ 90.435127][ T3346] do_exit+0x958/0x2570 [ 90.439275][ T3346] do_group_exit+0x229/0x2e0 [ 90.443864][ T3346] get_signal+0x1259/0x1340 [ 90.448389][ T3346] arch_do_signal_or_restart+0xc4/0x1310 [ 90.454012][ T3346] exit_to_user_mode_loop+0x70/0x110 [ 90.459292][ T3346] exit_to_user_mode_prepare+0xee/0x180 [ 90.464827][ T3346] syscall_exit_to_user_mode+0x16/0x40 [ 90.470275][ T3346] do_syscall_64+0x58/0xa0 [ 90.474695][ T3346] [ 90.477012][ T3346] Memory state around the buggy address: [ 90.482649][ T3346] ffff8880249ff800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.490697][ T3346] ffff8880249ff880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 90.498754][ T3346] >ffff8880249ff900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.506799][ T3346] ^ [ 90.511637][ T3346] ffff8880249ff980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 90.519684][ T3346] ffff8880249ffa00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.527738][ T3346] ================================================================== [ 90.535872][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.543104][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055164400: rx timeout, send abort [ 90.552853][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055164400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 90.569947][ T4795] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 90.596047][ T3346] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 90.603287][ T3346] CPU: 0 PID: 3346 Comm: krfcommd Not tainted syzkaller #0 [ 90.610501][ T3346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 90.620570][ T3346] Call Trace: [ 90.623860][ T3346] [ 90.626801][ T3346] dump_stack_lvl+0x188/0x24e [ 90.631497][ T3346] ? memcpy+0x3c/0x60 [ 90.635497][ T3346] ? show_regs_print_info+0x12/0x12 [ 90.640723][ T3346] ? load_image+0x410/0x410 [ 90.645251][ T3346] panic+0x2d3/0x710 [ 90.649168][ T3346] ? bpf_jit_dump+0xd0/0xd0 [ 90.653695][ T3346] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 90.659703][ T3346] ? _raw_spin_unlock+0x40/0x40 [ 90.664589][ T3346] check_panic_on_warn+0x80/0xa0 [ 90.669637][ T3346] ? hci_chan_del+0x36/0x1a0 [ 90.674245][ T3346] end_report+0x66/0x110 [ 90.678512][ T3346] kasan_report+0x118/0x140 [ 90.683219][ T3346] ? hci_chan_del+0x36/0x1a0 [ 90.687830][ T3346] hci_chan_del+0x36/0x1a0 [ 90.692269][ T3346] l2cap_chan_put+0x1f5/0x300 [ 90.696972][ T3346] l2cap_sock_release+0x179/0x1e0 [ 90.702021][ T3346] sock_release+0x7b/0x140 [ 90.706454][ T3346] rfcomm_session_del+0x141/0x200 [ 90.711502][ T3346] rfcomm_run+0x46e1/0x5f10 [ 90.716035][ T3346] ? rfcomm_security_cfm+0x780/0x780 [ 90.721349][ T3346] ? mark_lock+0x94/0x320 [ 90.725700][ T3346] ? __lock_acquire+0x142d/0x7ea0 [ 90.730746][ T3346] ? mark_lock+0x94/0x320 [ 90.735097][ T3346] ? __lock_acquire+0x142d/0x7ea0 [ 90.740154][ T3346] ? mark_lock+0x94/0x320 [ 90.744509][ T3346] ? __lock_acquire+0x142d/0x7ea0 [ 90.749627][ T3346] ? verify_lock_unused+0x140/0x140 [ 90.754890][ T3346] ? finish_task_switch+0x25d/0x8e0 [ 90.760113][ T3346] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 90.766120][ T3346] ? read_lock_is_recursive+0x10/0x10 [ 90.771510][ T3346] ? lock_chain_count+0x20/0x20 [ 90.776366][ T3346] ? finish_task_switch+0x262/0x8e0 [ 90.781592][ T3346] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 90.787597][ T3346] ? __lock_acquire+0x7ea0/0x7ea0 [ 90.792639][ T3346] ? lock_chain_count+0x20/0x20 [ 90.797498][ T3346] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 90.803411][ T3346] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 90.810024][ T3346] ? wait_woken+0x1c0/0x1c0 [ 90.814624][ T3346] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 90.820518][ T3346] ? __kthread_parkme+0x71/0x1c0 [ 90.825462][ T3346] ? __kthread_parkme+0x15b/0x1c0 [ 90.825495][ T4284] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.836450][ T3346] kthread+0x29d/0x330 [ 90.840525][ T3346] ? rfcomm_security_cfm+0x780/0x780 [ 90.845905][ T3346] ? kthread_blkcg+0xd0/0xd0 [ 90.850515][ T3346] ret_from_fork+0x1f/0x30 [ 90.855281][ T3346] [ 90.858577][ T3346] Kernel Offset: disabled [ 90.862889][ T3346] Rebooting in 86400 seconds..