last executing test programs: 14.350555845s ago: executing program 1 (id=204): syz_read_part_table(0x5e3, &(0x7f0000000000)="$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") syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0xc, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x0, 0x3, 0xf3, 0x6}}}}}}}}]}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) 12.194738683s ago: executing program 1 (id=215): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 11.98554178s ago: executing program 1 (id=216): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000280)={0xf0f022}) r1 = fsopen(0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xe}}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xfffffffe, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0xfffffffd}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) syz_emit_vhci(0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x6) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r2, 0x0, 0x0, 0x9, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000080)={0x1, 0x1, 0x6, 0x3, 'syz1\x00', 0x2}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101343) sched_setscheduler(0x0, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @vbi={0x6, 0x7, 0x6, 0x0, [0x1, 0x3ae], [0x8, 0xfd], 0x1}}) 11.35457124s ago: executing program 1 (id=226): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x50c, &(0x7f0000001640)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) 11.153115266s ago: executing program 1 (id=229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c0007800800064000"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.612527563s ago: executing program 1 (id=239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.529505896s ago: executing program 32 (id=239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.622498282s ago: executing program 4 (id=304): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket(0x2000000000000021, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x1, 0x0) userfaultfd(0x801) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0xa, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.602679913s ago: executing program 4 (id=306): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) userfaultfd(0x801) 5.462575637s ago: executing program 4 (id=307): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x5, 0x330, 0x80000005, 0xdb}, 0x9c) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x42, @loopback, 0x8000}}, 0xabb6, 0x67, 0xa4f, 0xc4, 0xa, 0x0, 0xa9}, 0x9c) 5.462370117s ago: executing program 2 (id=308): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x2, 0xffffffff, 0x0, 0xfea}, 0x43e, 0x0, 0x8, 0x7, 0x200, 0x4, 0x2, 0x0, 0x8, 0x51, {0x8, 0x6, 0x3, 0x6, 0x4, 0xe}}}}]}, 0x78}}, 0x20008001) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.197111146s ago: executing program 5 (id=243): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 5.192207526s ago: executing program 2 (id=319): syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xfd}}}}}}}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000000c0)={0x170001, 0x10a000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB="da3ab93d2f946ac7e65fb0321da67132027d1085968f8c7aa43e3ba3852bb6f4811b18d33e11f33eb2ece2d81225dc1848b675912cd55664486dfcdb7dcb330bdeac9bbed71b2303cd579e4cf49cab7388be739946818c46d8e8f163cdeda7d26f09458a5aa89c9271b72fb1fce15d5e8f68ed21bf75d7148fd723439e5be07605fff009a9b01cacbc736dc20705f3b77eaf37b6079e7865f7", @ANYRES8, @ANYRES16, @ANYRES16, @ANYRES16, @ANYRES32=r0, @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80e40, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndmidi(&(0x7f0000000080), 0x8, 0x1000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000080)=0x20) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000040)) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x2}, 'syz1\x00', 0x1a}) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)) 5.191473386s ago: executing program 4 (id=320): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)={0xc, 0x0, '\x00', [@padn]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x40080) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 4.592343314s ago: executing program 0 (id=322): r0 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create(0x7) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x1) pwritev2(r2, &(0x7f0000000cc0), 0x0, 0xfff, 0xc, 0x4) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000340)={0x18, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4044005}, 0x20000) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x44) 2.018515257s ago: executing program 4 (id=312): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x64, 0x0, 0x0, 0x804c040}, 0x0) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000001}}, [0x1, 0xffffffff, 0xb, 0x7, 0x3, 0x1, 0xb3, 0x4, 0x1a4, 0xffffffffffffffc0, 0x0, 0x8000, 0xffffffffffff0000, 0x7, 0x9]}, &(0x7f00000004c0)=0xfc) 1.961731478s ago: executing program 5 (id=313): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000300)=""/237, 0xed}], 0x1, 0x5, 0x4) 1.885532581s ago: executing program 0 (id=315): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket(0x2000000000000021, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x1, 0x0) userfaultfd(0x801) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0xa, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.885233591s ago: executing program 2 (id=316): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f0000000040)={0x80, 0x1, {0x1, 0x0, 0x9, 0x2}}) tkill(r0, 0x7) 1.841822592s ago: executing program 0 (id=317): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) shmdt(0x0) 1.830338742s ago: executing program 3 (id=321): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x240000d4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x1410, 0x1280, 0x150, 0x150, 0x0, 0xf8010000, 0x1348, 0x238, 0x238, 0x1348, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x1218, 0x1280, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup.net/syz0\x00', 0x1000000, {0x8}}}, @common=@inet=@sctp={{0x144}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0x6, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [], 'batadv_slave_0\x00', 'gre0\x00', {}, {}, 0x87}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x146c) close_range(r0, 0xffffffffffffffff, 0x0) 1.761018735s ago: executing program 0 (id=323): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}}}}}}}, 0x0) 1.760838315s ago: executing program 3 (id=324): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 1.646607238s ago: executing program 2 (id=325): ftruncate(0xffffffffffffffff, 0x5) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r1, &(0x7f0000000300)=""/143, 0x8f, 0x60) 1.646371298s ago: executing program 0 (id=326): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000010) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) read$char_usb(r6, &(0x7f00000002c0)=""/151, 0x97) close_range(r0, 0xffffffffffffffff, 0x0) 1.60798345s ago: executing program 2 (id=327): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@_ha_fsid={[0x3ff, 0x5]}, {0x18, 0x3, 0x353c, 0x9}}, 0x10000, &(0x7f00000000c0), &(0x7f0000000100)=0x1bfd}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x2, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xfffffffb, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x6, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x40000002, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x801, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x400, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x7, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x2, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x3, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x1ff, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x3, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x62, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x8, 0xfffff3f6, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x0, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0x80000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x7, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0xc, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x2, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x400, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0x40, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb6, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x0, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008400"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x2007, 0x2, 0x1000, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x0, 0xffffffff, 0x1, 0x8, 0x1, 0x100, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x86, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x29, 0x0, &(0x7f0000000240)) 366.309299ms ago: executing program 4 (id=328): creat(&(0x7f00000003c0)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) ftruncate(r1, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 322.52642ms ago: executing program 3 (id=329): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 276.002352ms ago: executing program 2 (id=330): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2c, &(0x7f0000000140)=0xfb78, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1) 260.708152ms ago: executing program 0 (id=331): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 82.428758ms ago: executing program 3 (id=332): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002d000b00000000000000000005"], 0x28}}, 0x20008000) 59.871779ms ago: executing program 3 (id=333): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r0) r3 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, r2, &(0x7f0000000100)={r1, r2}) 0s ago: executing program 3 (id=334): syz_open_dev$sndctrl(0x0, 0x0, 0x400) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 33.568005][ T3854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.577632][ T3854] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts. syzkaller login: [ 55.592345][ T4176] cgroup: Unknown subsys name 'net' [ 55.725314][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.289962][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.693595][ T4202] chnl_net:caif_netlink_parms(): no params data found [ 58.733629][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 58.835921][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 58.881475][ T4202] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.888587][ T4202] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.898625][ T4202] device bridge_slave_0 entered promiscuous mode [ 58.907011][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.914308][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.922204][ T4197] device bridge_slave_0 entered promiscuous mode [ 58.935606][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.942750][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.950861][ T4197] device bridge_slave_1 entered promiscuous mode [ 58.969227][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.976382][ T4202] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.984671][ T4202] device bridge_slave_1 entered promiscuous mode [ 59.015461][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 59.028337][ T4202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.057280][ T4202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.075788][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.088042][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.124523][ T4204] chnl_net:caif_netlink_parms(): no params data found [ 59.160681][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.167845][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.175899][ T4190] device bridge_slave_0 entered promiscuous mode [ 59.187598][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.195012][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.203099][ T4190] device bridge_slave_1 entered promiscuous mode [ 59.212579][ T4202] team0: Port device team_slave_0 added [ 59.226765][ T4197] team0: Port device team_slave_0 added [ 59.241567][ T4197] team0: Port device team_slave_1 added [ 59.253625][ T4202] team0: Port device team_slave_1 added [ 59.312942][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.322788][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.330266][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.356404][ T4202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.368539][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.375552][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.401632][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.417382][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.424636][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.432951][ T4189] device bridge_slave_0 entered promiscuous mode [ 59.442927][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.452755][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.460172][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.486448][ T4202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.497881][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.505130][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.531288][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.548646][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.556006][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.564085][ T4189] device bridge_slave_1 entered promiscuous mode [ 59.626343][ T4190] team0: Port device team_slave_0 added [ 59.634329][ T4190] team0: Port device team_slave_1 added [ 59.641912][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.654220][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.664363][ T4204] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.671569][ T4204] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.679279][ T4204] device bridge_slave_0 entered promiscuous mode [ 59.711689][ T4197] device hsr_slave_0 entered promiscuous mode [ 59.718389][ T4197] device hsr_slave_1 entered promiscuous mode [ 59.743358][ T4204] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.750756][ T4204] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.758907][ T4204] device bridge_slave_1 entered promiscuous mode [ 59.792498][ T4189] team0: Port device team_slave_0 added [ 59.812431][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.819404][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.845590][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.861830][ T4202] device hsr_slave_0 entered promiscuous mode [ 59.868724][ T4202] device hsr_slave_1 entered promiscuous mode [ 59.876668][ T4202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.884829][ T4202] Cannot create hsr debugfs directory [ 59.892139][ T4189] team0: Port device team_slave_1 added [ 59.907845][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.915191][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.941941][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.974831][ T4204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.021759][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.028737][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.055090][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.067795][ T4204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.093054][ T4190] device hsr_slave_0 entered promiscuous mode [ 60.100151][ T4190] device hsr_slave_1 entered promiscuous mode [ 60.106583][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.114246][ T4190] Cannot create hsr debugfs directory [ 60.120216][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.127170][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.153372][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.201851][ T4204] team0: Port device team_slave_0 added [ 60.239234][ T4204] team0: Port device team_slave_1 added [ 60.314202][ T4204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.321355][ T4204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.347555][ T4204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.364977][ T4204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.372019][ T4204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.398026][ T4204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.409306][ T3521] Bluetooth: hci0: command 0x0409 tx timeout [ 60.420273][ T3521] Bluetooth: hci2: command 0x0409 tx timeout [ 60.426395][ T3521] Bluetooth: hci1: command 0x0409 tx timeout [ 60.440496][ T4189] device hsr_slave_0 entered promiscuous mode [ 60.447550][ T4189] device hsr_slave_1 entered promiscuous mode [ 60.454290][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.462369][ T4189] Cannot create hsr debugfs directory [ 60.482313][ T4178] Bluetooth: hci3: command 0x0409 tx timeout [ 60.531921][ T4204] device hsr_slave_0 entered promiscuous mode [ 60.538617][ T4204] device hsr_slave_1 entered promiscuous mode [ 60.545702][ T4204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.553452][ T4204] Cannot create hsr debugfs directory [ 60.559845][ T3521] Bluetooth: hci4: command 0x0409 tx timeout [ 60.605029][ T4197] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.636121][ T4197] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.667429][ T4197] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.677100][ T4197] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.744949][ T4202] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.772048][ T4202] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.794892][ T4202] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.814159][ T4202] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.864812][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.874148][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.887064][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.918153][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.992864][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.003439][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.029001][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.038852][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.082534][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.108863][ T4204] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.125804][ T4202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.133798][ T4204] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.145913][ T4204] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.158978][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.169026][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.191065][ T4202] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.198171][ T4204] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.221968][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.236443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.245899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.262302][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.279307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.288131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.333781][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.346664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.356907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.369434][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.376683][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.385525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.395969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.405015][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.412140][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.420725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.429322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.439223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.448131][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.455414][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.465026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.473770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.482281][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.489341][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.497194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.506675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.515870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.524663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.534392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.543231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.552159][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.559199][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.572868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.581300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.589204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.597353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.605948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.637823][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.648138][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.659357][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.673798][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.685331][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.694646][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.703749][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.712983][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.720151][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.731331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.741826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.763613][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.783085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.795531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.804667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.814929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.823409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.832313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.841192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.857890][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.882715][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.892730][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.902923][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.912651][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.922275][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.931053][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.939094][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.946995][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.960032][ T4204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.968929][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.984503][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.008714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.022033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.031452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.039460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.060904][ T4204] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.096371][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.105625][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.114917][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.127894][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.138149][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.145327][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.157400][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.167651][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.182887][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.190072][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.200473][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.209060][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.217817][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.226575][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.235620][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.247543][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.267270][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.279968][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.288538][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.295654][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.304244][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.314176][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.323283][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.334441][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.343372][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.352255][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.389055][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.397992][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.417400][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.428327][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.442278][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.456331][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.465636][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.472784][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.481023][ T4236] Bluetooth: hci1: command 0x041b tx timeout [ 62.487532][ T4236] Bluetooth: hci2: command 0x041b tx timeout [ 62.494112][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 62.497406][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.510142][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.523685][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.534287][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.543896][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.556916][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.565157][ T4236] Bluetooth: hci3: command 0x041b tx timeout [ 62.567981][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.607022][ T4202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.616665][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.627379][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.636827][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.640445][ T3521] Bluetooth: hci4: command 0x041b tx timeout [ 62.648440][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.664918][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.675070][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.738973][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.748890][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.759771][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.768386][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.784700][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.795114][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.804162][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.812178][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.820094][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.828767][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.842467][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.856228][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.873896][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.882713][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.900065][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.907969][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.950798][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.960971][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.977406][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.986689][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.996562][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.004809][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.017676][ T4197] device veth0_vlan entered promiscuous mode [ 63.044299][ T4202] device veth0_vlan entered promiscuous mode [ 63.061278][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.068384][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.078539][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.087496][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.096749][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.105996][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.114211][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.131900][ T4190] device veth0_vlan entered promiscuous mode [ 63.151009][ T4197] device veth1_vlan entered promiscuous mode [ 63.161855][ T4202] device veth1_vlan entered promiscuous mode [ 63.184839][ T4190] device veth1_vlan entered promiscuous mode [ 63.246883][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.261092][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.269447][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.302408][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.311221][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.319314][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.328139][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.337057][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.347308][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.356145][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.377062][ T4202] device veth0_macvtap entered promiscuous mode [ 63.391973][ T4197] device veth0_macvtap entered promiscuous mode [ 63.409290][ T4197] device veth1_macvtap entered promiscuous mode [ 63.428781][ T4202] device veth1_macvtap entered promiscuous mode [ 63.468447][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.480915][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.490151][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.498161][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.506508][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.514956][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.523862][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.534166][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.542812][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.557141][ T4190] device veth0_macvtap entered promiscuous mode [ 63.572807][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.584273][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.594588][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.604651][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.613958][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.622222][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.632761][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.644274][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.658882][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.670744][ T4197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.685259][ T4197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.695382][ T4197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.704427][ T4197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.717688][ T4190] device veth1_macvtap entered promiscuous mode [ 63.728189][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.736768][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.745980][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.758080][ T4204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.790646][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.803029][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.813296][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.824058][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.836322][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.845850][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.856868][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.868306][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.878174][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.887425][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.896191][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.906081][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.916556][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.925945][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.962114][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.973559][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.983880][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.998607][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.012236][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.032494][ T4202] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.042326][ T4202] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.051426][ T4202] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.062453][ T4202] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.078311][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.087823][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.100128][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.108465][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.125533][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.142101][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.151998][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.162527][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.181309][ T4189] device veth0_vlan entered promiscuous mode [ 64.198577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.210252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.265181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.277542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.292564][ T4189] device veth1_vlan entered promiscuous mode [ 64.318889][ T4204] device veth0_vlan entered promiscuous mode [ 64.331946][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.340944][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.349125][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.359185][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.367788][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.387845][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.403148][ T4204] device veth1_vlan entered promiscuous mode [ 64.407005][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.434865][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.443301][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.453610][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.532052][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.532832][ T4204] device veth0_macvtap entered promiscuous mode [ 64.548696][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.552449][ T4189] device veth0_macvtap entered promiscuous mode [ 64.563332][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 64.570030][ T4268] Bluetooth: hci2: command 0x040f tx timeout [ 64.578102][ T4268] Bluetooth: hci1: command 0x040f tx timeout [ 64.579485][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.595380][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.603692][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.612652][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.621871][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.630889][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.639520][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.647650][ T4268] Bluetooth: hci3: command 0x040f tx timeout [ 64.648419][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.673133][ T764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.680497][ T4189] device veth1_macvtap entered promiscuous mode [ 64.689500][ T764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.696104][ T4204] device veth1_macvtap entered promiscuous mode [ 64.720464][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.728562][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.736510][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 64.746253][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.780468][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.788427][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.821504][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.842937][ T4204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.855110][ T4204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.865523][ T4204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.876221][ T4204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.886602][ T4204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.897976][ T4204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.913724][ T4204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.927892][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.938684][ T764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.941547][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.952220][ T764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.958053][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.975695][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.985912][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.997629][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.007627][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.018244][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.035071][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.046678][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.057641][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.068005][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.078912][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.089051][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.101007][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.113101][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.130101][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.138168][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.152767][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.162249][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.171661][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.180899][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.190385][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.203399][ T4204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.223215][ T4204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.233605][ T4204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.244799][ T4204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.256087][ T4204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.266972][ T4204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.288220][ T4204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.309437][ T4204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.321645][ T4204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.343064][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.352828][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.364021][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.373127][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.392602][ T764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.401173][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.410120][ T764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.412183][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.427368][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.438292][ T4204] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.449420][ T4204] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.471101][ T4204] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.489959][ T4204] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.835559][ T4287] device veth1_to_hsr entered promiscuous mode [ 65.863030][ T4287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 66.002745][ T4287] device hsr_slave_1 left promiscuous mode [ 66.015210][ T3086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.035891][ T3086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.054134][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.061893][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.075353][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.095901][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.147538][ T4300] Zero length message leads to an empty skb [ 66.154052][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.169171][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.178978][ T764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.210925][ T764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.215273][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.238989][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.325354][ T4306] device syzkaller0 entered promiscuous mode [ 66.640558][ T4268] Bluetooth: hci1: command 0x0419 tx timeout [ 66.652344][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 66.667529][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 66.719982][ T4268] Bluetooth: hci3: command 0x0419 tx timeout [ 66.800460][ T4236] Bluetooth: hci4: command 0x0419 tx timeout [ 67.440720][ T4191] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.514542][ T4350] netlink: 88 bytes leftover after parsing attributes in process `syz.3.31'. [ 67.535324][ T4352] loop2: detected capacity change from 0 to 128 [ 67.643362][ T4354] attempt to access beyond end of device [ 67.643362][ T4354] loop2: rw=2049, want=657, limit=128 [ 67.664390][ T4357] loop0: detected capacity change from 0 to 512 [ 67.725814][ T4191] usb 2-1: Using ep0 maxpacket: 8 [ 67.736167][ T4352] attempt to access beyond end of device [ 67.736167][ T4352] loop2: rw=524288, want=369, limit=128 [ 67.759124][ T4352] attempt to access beyond end of device [ 67.759124][ T4352] loop2: rw=0, want=153, limit=128 [ 67.771945][ T4352] attempt to access beyond end of device [ 67.771945][ T4352] loop2: rw=0, want=153, limit=128 [ 67.784719][ T4352] attempt to access beyond end of device [ 67.784719][ T4352] loop2: rw=0, want=153, limit=128 [ 67.795818][ T4352] attempt to access beyond end of device [ 67.795818][ T4352] loop2: rw=0, want=153, limit=128 [ 67.797103][ T4357] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.33: iget: bad i_size value: 38620345925642 [ 67.806944][ T4352] attempt to access beyond end of device [ 67.806944][ T4352] loop2: rw=0, want=153, limit=128 [ 67.830361][ T4352] attempt to access beyond end of device [ 67.830361][ T4352] loop2: rw=0, want=153, limit=128 [ 67.841709][ T4352] attempt to access beyond end of device [ 67.841709][ T4352] loop2: rw=0, want=153, limit=128 [ 67.852555][ T4352] attempt to access beyond end of device [ 67.852555][ T4352] loop2: rw=0, want=153, limit=128 [ 67.870010][ T4191] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 67.881246][ T4191] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.926540][ T4191] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 67.945128][ T4363] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 67.950874][ T4357] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.33: couldn't read orphan inode 15 (err -117) [ 67.969211][ T4191] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 67.986455][ T4357] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.006892][ T4191] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.031367][ T4191] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 68.045881][ T4191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.125841][ T4357] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.33: bg 0: block 5: invalid block bitmap [ 68.208262][ T4357] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28 [ 68.248129][ T4370] netlink: 72 bytes leftover after parsing attributes in process `syz.3.39'. [ 68.248385][ T4357] EXT4-fs (loop0): This should not happen!! Data will be lost [ 68.248385][ T4357] [ 68.275162][ T4357] EXT4-fs (loop0): Total free blocks count 0 [ 68.295823][ T4357] EXT4-fs (loop0): Free/Dirty block details [ 68.305943][ T4357] EXT4-fs (loop0): free_blocks=0 [ 68.323216][ T4357] EXT4-fs (loop0): dirty_blocks=444 [ 68.337066][ T4357] EXT4-fs (loop0): Block reservation details [ 68.344821][ T4357] EXT4-fs (loop0): i_reserved_data_blocks=444 [ 68.349773][ T4191] usb 2-1: usb_control_msg returned -32 [ 68.366931][ T4191] usbtmc 2-1:16.0: can't read capabilities [ 68.461569][ T3086] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 16 with max blocks 428 with error 28 [ 68.518932][ T3086] EXT4-fs (loop0): This should not happen!! Data will be lost [ 68.518932][ T3086] [ 68.590215][ T4378] device syzkaller0 entered promiscuous mode [ 68.760881][ T4390] loop2: detected capacity change from 0 to 64 [ 69.060344][ T4411] loop2: detected capacity change from 0 to 128 [ 69.075029][ T4411] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 69.093157][ T4411] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 69.160291][ T4409] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 69.328812][ T4268] usb 2-1: USB disconnect, device number 2 [ 69.367026][ T4417] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (48421) [ 69.397230][ T4417] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 69.691429][ T4191] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.796554][ T4433] syz.0.63 uses obsolete (PF_INET,SOCK_PACKET) [ 69.811974][ T4433] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.915038][ T4433] device macvlan2 entered promiscuous mode [ 69.928639][ T4439] loop1: detected capacity change from 0 to 1024 [ 70.098635][ T26] audit: type=1326 audit(1781034771.636:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.0.68" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f85c4be59 code=0x7ffc0000 [ 70.123375][ T4191] usb 3-1: config 1 has an invalid descriptor of length 168, skipping remainder of the config [ 70.146042][ T4191] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 9121, setting to 1024 [ 70.166256][ T4191] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 70.174896][ T26] audit: type=1326 audit(1781034771.646:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.0.68" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f85c4be59 code=0x7ffc0000 [ 70.198651][ T4191] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.211827][ T26] audit: type=1326 audit(1781034771.676:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.0.68" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f1f85c4be59 code=0x7ffc0000 [ 70.259790][ T26] audit: type=1326 audit(1781034771.676:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.0.68" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f85c4be59 code=0x7ffc0000 [ 70.291627][ T26] audit: type=1326 audit(1781034771.676:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.0.68" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f85c4be59 code=0x7ffc0000 [ 70.439780][ T4191] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 70.448989][ T4191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.457541][ T4191] usb 3-1: Product: syz [ 70.461876][ T4191] usb 3-1: Manufacturer: syz [ 70.466633][ T4191] usb 3-1: SerialNumber: syz [ 70.541505][ T4191] cdc_subset: probe of 3-1:1.0 failed with error -22 [ 70.557832][ T4191] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 70.589193][ T4191] cdc_ncm 3-1:1.0: bind() failure [ 70.638345][ T4466] loop4: detected capacity change from 0 to 128 [ 70.646142][ T4468] loop1: detected capacity change from 0 to 128 [ 70.653274][ T4191] cdc_subset: probe of 3-1:1.1 failed with error -22 [ 70.670136][ T4191] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 70.678555][ T4191] cdc_ncm 3-1:1.1: bind() failure [ 70.754067][ T4234] usb 3-1: USB disconnect, device number 2 [ 70.772452][ T4466] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.783786][ T4466] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.370393][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.377271][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.109670][ T4268] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.233525][ T4519] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.241863][ T4519] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.369820][ T4268] usb 5-1: Using ep0 maxpacket: 32 [ 73.491410][ T4268] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 73.502709][ T4268] usb 5-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 73.513633][ T4268] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 73.680076][ T4268] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 73.696422][ T4268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.704520][ T4268] usb 5-1: Product: syz [ 73.708705][ T4268] usb 5-1: Manufacturer: syz [ 73.713604][ T4268] usb 5-1: SerialNumber: syz [ 73.723555][ T4519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.760757][ T4519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.762223][ T4268] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 73.783711][ T4268] imon 5-1:155.0: unable to initialize intf0, err -19 [ 73.792190][ T4268] imon:imon_probe: failed to initialize context! [ 73.799514][ T4268] imon 5-1:155.0: unable to register, err -19 [ 74.143409][ T4519] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.152654][ T4519] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.163802][ T4519] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.172801][ T4519] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.288496][ T4519] device macvlan2 left promiscuous mode [ 74.298886][ T4522] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.308291][ T4522] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.315602][ T4522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.477515][ T4551] netlink: 32 bytes leftover after parsing attributes in process `syz.2.108'. [ 74.525074][ T4553] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 74.543043][ T4553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 74.603056][ T4555] batman_adv: batadv0: Adding interface: dummy0 [ 74.611316][ T4555] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.637477][ T4555] batman_adv: batadv0: Interface activated: dummy0 [ 74.648693][ T4553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.684243][ T4555] batadv0: mtu less than device minimum [ 74.717823][ T4555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.730979][ T4555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.743657][ T4558] loop1: detected capacity change from 0 to 1024 [ 74.743832][ T4555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.762929][ T4555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.774653][ T4558] ======================================================= [ 74.774653][ T4558] WARNING: The mand mount option has been deprecated and [ 74.774653][ T4558] and is ignored by this kernel. Remove the mand [ 74.774653][ T4558] option from the mount to silence this warning. [ 74.774653][ T4558] ======================================================= [ 74.775506][ T4555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.809629][ C0] vkms_vblank_simulate: vblank timer overrun [ 74.828540][ T4555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.841328][ T4555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.854193][ T4555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.915635][ T4558] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 74.929123][ T4560] tmpfs: Unknown parameter 'usrquota' [ 74.956761][ T4560] overlayfs: failed to clone upperpath [ 74.989523][ T4558] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,nouid32,noblock_validity,delalloc,journal_dev=0x0000000000000007,nouid32,nomblk_io_submit,noinit_itable,usrquota,,errors=continue. Quota mode: writeback. [ 75.012334][ T4558] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.038811][ T4558] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: comm syz.1.111: lblock 0 mapped to illegal pblock 0 (length 1) [ 75.064287][ T4558] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 75.078341][ T4558] EXT4-fs (loop1): This should not happen!! Data will be lost [ 75.078341][ T4558] [ 75.087523][ T4195] Bluetooth: Wrong link type (-71) [ 75.209834][ T4572] loop2: detected capacity change from 0 to 16 [ 75.293510][ T4572] erofs: (device loop2): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms 2 [ 75.449063][ T4586] loop2: detected capacity change from 0 to 512 [ 75.475040][ T4586] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.122: inode has both inline data and extents flags [ 75.488985][ T4586] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.122: couldn't read orphan inode 15 (err -117) [ 75.501475][ T4586] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 75.591511][ T4591] tipc: Enabling of bearer rejected, failed to enable media [ 75.654397][ T4593] fuse: Bad value for 'fd' [ 75.744716][ T4595] loop2: detected capacity change from 0 to 4096 [ 75.778462][ T4595] ntfs3: loop2: Failed to load $MFT. [ 76.256406][ T4617] loop2: detected capacity change from 0 to 512 [ 76.384930][ T4617] EXT4-fs (loop2): Test dummy encryption mode enabled [ 76.389828][ T4234] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 76.397850][ T4617] EXT4-fs (loop2): Ignoring removed orlov option [ 76.408821][ T4617] EXT4-fs (loop2): Ignoring removed oldalloc option [ 76.424277][ T4617] EXT4-fs (loop2): Test dummy encryption mode enabled [ 76.437970][ T4617] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,orlov,oldalloc,delalloc,prjquota,dax=never,barrier=0x000000000000000b,errors=remount-ro,resuid=0x0000000000000000,test_dummy_encryption,min_batch_time=0x0000000000000001,auto_da_alloc,user_xattr,nouid32. Quota mode: writeback. [ 76.467364][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.493269][ T4178] usb 5-1: USB disconnect, device number 2 [ 76.629779][ T4234] usb 2-1: Using ep0 maxpacket: 8 [ 76.693107][ T4633] binder: 4632:4633 ioctl c0306201 0 returned -14 [ 76.731111][ T4633] binder: 4632:4633 ioctl 40106437 0 returned -22 [ 76.753625][ T4234] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 76.784457][ T4234] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.829282][ T4234] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.847663][ T4195] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 76.857606][ T4195] CPU: 0 PID: 4195 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 76.860661][ T4234] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.865179][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 76.865223][ T4195] Workqueue: hci1 hci_rx_work [ 76.889894][ T4195] Call Trace: [ 76.893285][ T4195] [ 76.896241][ T4195] dump_stack_lvl+0x188/0x250 [ 76.900959][ T4195] ? show_regs_print_info+0x20/0x20 [ 76.906207][ T4195] ? load_image+0x400/0x400 [ 76.910752][ T4195] sysfs_create_dir_ns+0x26a/0x290 [ 76.915874][ T4195] ? sysfs_warn_dup+0xa0/0xa0 [ 76.920554][ T4195] ? process_one_work+0x85f/0x1010 [ 76.925700][ T4195] ? do_raw_spin_unlock+0x11d/0x230 [ 76.930905][ T4195] kobject_add_internal+0x6e0/0xd90 [ 76.936206][ T4195] kobject_add+0x160/0x230 [ 76.940631][ T4195] ? kobject_init+0x1d0/0x1d0 [ 76.945323][ T4195] ? klist_children_get+0x50/0x50 [ 76.950349][ T4195] ? get_device_parent+0x121/0x3f0 [ 76.955463][ T4195] device_add+0x48c/0x1000 [ 76.959889][ T4195] hci_conn_add_sysfs+0xd1/0x1e0 [ 76.964862][ T4195] le_conn_complete_evt+0xc4b/0x15c0 [ 76.970160][ T4195] ? cs_le_create_conn+0x5e0/0x5e0 [ 76.975297][ T4195] ? __mutex_trylock_common+0x155/0x260 [ 76.980869][ T4195] hci_le_meta_evt+0x285/0x3cb0 [ 76.985725][ T4195] ? hci_event_packet+0x37e/0x1370 [ 76.990962][ T4195] ? __lock_acquire+0x7d10/0x7d10 [ 76.995995][ T4195] ? hci_remote_host_features_evt+0x290/0x290 [ 77.002075][ T4195] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 77.007798][ T4195] ? mark_lock+0x94/0x320 [ 77.012215][ T4195] ? mutex_unlock+0x10/0x10 [ 77.016719][ T4195] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 77.022709][ T4195] ? lock_chain_count+0x20/0x20 [ 77.027608][ T4195] ? __rwlock_init+0x140/0x140 [ 77.032377][ T4195] hci_event_packet+0xe4b/0x1370 [ 77.037315][ T4195] ? lockdep_hardirqs_on+0x94/0x140 [ 77.042518][ T4195] ? rcu_lock_release+0x20/0x20 [ 77.047398][ T4195] ? hci_send_to_monitor+0x9c/0x4a0 [ 77.052602][ T4195] hci_rx_work+0x255/0xa10 [ 77.057032][ T4195] process_one_work+0x85f/0x1010 [ 77.061981][ T4195] ? worker_detach_from_pool+0x240/0x240 [ 77.067615][ T4195] ? lockdep_hardirqs_off+0x70/0x100 [ 77.072903][ T4195] ? _raw_spin_lock_irq+0xb7/0xf0 [ 77.077930][ T4195] ? _raw_spin_lock_irqsave+0x100/0x100 [ 77.083479][ T4195] ? wq_worker_running+0x97/0x170 [ 77.088508][ T4195] worker_thread+0xaa6/0x1290 [ 77.093209][ T4195] kthread+0x436/0x520 [ 77.097278][ T4195] ? rcu_lock_release+0x20/0x20 [ 77.102125][ T4195] ? kthread_blkcg+0xd0/0xd0 [ 77.106719][ T4195] ret_from_fork+0x1f/0x30 [ 77.111148][ T4195] [ 77.114230][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.124645][ T4195] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 77.136526][ T4234] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.137935][ T4195] Bluetooth: hci1: failed to register connection device [ 77.223162][ T4234] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 77.289664][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.649736][ T4234] usb 2-1: usb_control_msg returned -32 [ 77.655378][ T4234] usbtmc 2-1:16.0: can't read capabilities [ 78.499779][ T4665] usbtmc 2-1:16.0: control status returned 0 [ 78.719903][ T7] usb 2-1: USB disconnect, device number 3 [ 79.280829][ T4696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 79.315588][ T26] audit: type=1326 audit(1781034780.846:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4697 comm="syz.1.157" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf25685e59 code=0x7ffc0000 [ 79.371651][ T26] audit: type=1326 audit(1781034780.886:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4697 comm="syz.1.157" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf25685e59 code=0x7ffc0000 [ 79.396611][ T4672] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.404748][ T4672] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.436484][ T26] audit: type=1326 audit(1781034780.886:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4697 comm="syz.1.157" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf25685e59 code=0x7ffc0000 [ 79.501165][ T26] audit: type=1326 audit(1781034780.886:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4697 comm="syz.1.157" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7faf25685e59 code=0x7ffc0000 [ 79.559480][ T26] audit: type=1326 audit(1781034780.886:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4697 comm="syz.1.157" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf25685e59 code=0x7ffc0000 [ 79.598796][ T26] audit: type=1326 audit(1781034780.886:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4697 comm="syz.1.157" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faf25685e59 code=0x7ffc0000 [ 79.632534][ T26] audit: type=1326 audit(1781034780.886:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4697 comm="syz.1.157" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faf25685e59 code=0x7ffc0000 [ 79.875640][ T4707] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.221246][ T4672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.303786][ T4672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.941177][ T4672] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.957565][ T4672] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.968282][ T4672] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.983428][ T4672] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.165951][ T4695] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 81.283708][ T4696] net_ratelimit: 11 callbacks suppressed [ 81.283728][ T4696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.324783][ T26] audit: type=1326 audit(1781034782.866:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.162" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ebfe6e59 code=0x7ffc0000 [ 81.358704][ T4713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.161'. [ 81.394275][ T26] audit: type=1326 audit(1781034782.896:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.162" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ebfe6e59 code=0x7ffc0000 [ 81.429274][ T26] audit: type=1326 audit(1781034782.896:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.162" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4ebf881d9 code=0x7ffc0000 [ 81.602048][ T23] cfg80211: failed to load regulatory.db [ 81.959729][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 81.999681][ T4178] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.239781][ T4178] usb 3-1: Using ep0 maxpacket: 8 [ 82.359748][ T4178] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 82.368073][ T4178] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.378337][ T4178] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.388205][ T4178] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.398556][ T4178] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.418637][ T4178] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 82.427795][ T4178] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.439670][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.489898][ T23] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 82.506831][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.517864][ T23] usb 2-1: Product: syz [ 82.526761][ T23] usb 2-1: Manufacturer: syz [ 82.534422][ T23] usb 2-1: SerialNumber: syz [ 82.591454][ T23] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 82.720201][ T4178] usb 3-1: usb_control_msg returned -32 [ 82.729720][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 82.730357][ T4178] usbtmc 3-1:16.0: can't read capabilities [ 82.889037][ T7] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 82.897864][ T7] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 82.908267][ T7] usb 5-1: config 179 has no interface number 0 [ 82.914940][ T7] usb 5-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 82.928232][ T7] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 82.937399][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.139924][ T4748] usbtmc 3-1:16.0: control status returned 0 [ 83.192435][ T23] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 83.345995][ T4191] usb 3-1: USB disconnect, device number 3 [ 83.490545][ T4759] netlink: 380 bytes leftover after parsing attributes in process `syz.0.180'. [ 83.704699][ T4178] usb 2-1: USB disconnect, device number 4 [ 83.741541][ T4236] usb 5-1: USB disconnect, device number 3 [ 83.967804][ T4775] loop2: detected capacity change from 0 to 1764 [ 84.090936][ T4780] loop2: detected capacity change from 0 to 512 [ 84.104810][ T4780] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 84.116134][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.123712][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.177592][ T4780] EXT4-fs (loop2): 1 truncate cleaned up [ 84.197820][ T4780] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,errors=remount-ro,. Quota mode: none. [ 84.486723][ T23] usb 2-1: Service connection timeout for: 256 [ 84.493433][ T23] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 84.503892][ T23] ath9k_htc: Failed to initialize the device [ 84.511655][ T4178] usb 2-1: ath9k_htc: USB layer deinitialized [ 84.841120][ T4764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.917376][ T4764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.405384][ T4764] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.414768][ T4764] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.423834][ T4764] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.432794][ T4764] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.672390][ T4804] binder_alloc: 4798: pid 4798 spamming oneway? 2 buffers allocated for a total size of 5120 [ 85.909737][ T4234] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.169662][ T4234] usb 5-1: Using ep0 maxpacket: 16 [ 86.218503][ T4823] loop1: detected capacity change from 0 to 2048 [ 86.283589][ T4266] loop1: p1 < > p4 [ 86.283589][ T4266] p4: [ 86.299960][ T4234] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.325544][ T4234] usb 5-1: config 0 interface 0 has no altsetting 0 [ 86.327412][ T4266] loop1: p4 size 722688 extends beyond EOD, truncated [ 86.342467][ T4234] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 86.356159][ T4266] loop1: p6 start 262464109 is beyond EOD, truncated [ 86.362777][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.376327][ T4266] loop1: p7 size 2304 extends beyond EOD, truncated [ 86.398225][ T4234] usb 5-1: config 0 descriptor?? [ 86.407044][ T4826] loop2: detected capacity change from 0 to 4096 [ 86.474301][ T4823] loop1: p1 < > p4 [ 86.474301][ T4823] p4: [ 86.480103][ T4826] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 86.498445][ T4826] ntfs3: loop2: Failed to load $Extend. [ 86.582770][ T4823] loop1: p4 size 722688 extends beyond EOD, truncated [ 86.608614][ T4823] loop1: p6 start 262464109 is beyond EOD, truncated [ 86.658827][ T4823] loop1: p7 size 2304 extends beyond EOD, truncated [ 87.099427][ T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 87.683334][ T4202] ntfs3: loop2: ntfs_sync_fs r=9 failed, -22. [ 87.702302][ T4202] ntfs3: loop2: ntfs_evict_inode r=9 failed, -22. [ 87.719757][ T4234] usbhid 5-1:0.0: can't add hid device: -71 [ 87.726938][ T4234] usbhid: probe of 5-1:0.0 failed with error -71 [ 87.770705][ T4234] usb 5-1: USB disconnect, device number 4 [ 87.779982][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 87.859663][ T13] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 87.910890][ T13] usb 2-1: can't read configurations, error -71 [ 88.579682][ T4231] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 88.950007][ T4231] usb 5-1: config 171 has an invalid interface number: 109 but max is 0 [ 88.958752][ T4231] usb 5-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 88.979770][ T4231] usb 5-1: config 171 has no interface number 0 [ 88.986089][ T4231] usb 5-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 89.022409][ T4231] usb 5-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 89.115678][ T4887] loop1: detected capacity change from 0 to 512 [ 89.190039][ T4231] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 89.199945][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.207974][ T4231] usb 5-1: Product: syz [ 89.213083][ T4231] usb 5-1: Manufacturer: syz [ 89.217753][ T4231] usb 5-1: SerialNumber: syz [ 89.222288][ T4887] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.256346][ T4887] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.267218][ T4860] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 89.302578][ T4887] fs-verity (loop1, inode 15): Unrecognized descriptor size: 0 bytes [ 89.316559][ T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 89.363364][ T4197] VFS: Lookup of 'ÿÿ' in ext4 loop1 would have caused loop [ 89.372922][ T4197] VFS: Lookup of 'ÿÿ' in ext4 loop1 would have caused loop [ 89.492367][ T4860] udc-core: couldn't find an available UDC or it's busy [ 89.509996][ T4860] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 89.519930][ T4231] ath6kl: Failed to submit usb control message: -71 [ 89.527852][ T4231] ath6kl: unable to send the bmi data to the device: -71 [ 89.535711][ T4231] ath6kl: Unable to send get target info: -71 [ 89.579867][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 89.610825][ T4909] fuse: Bad value for 'fd' [ 89.631906][ T4231] ath6kl: Failed to init ath6kl core: -71 [ 89.646334][ T4231] ath6kl_usb: probe of 5-1:171.109 failed with error -71 [ 89.652364][ T4911] fuse: Bad value for 'fd' [ 89.678943][ T4231] usb 5-1: USB disconnect, device number 5 [ 89.729773][ T13] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.752714][ T13] usb 3-1: config 0 interface 0 has no altsetting 0 [ 89.759398][ T13] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 89.789085][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.795616][ T4917] device hsr0 entered promiscuous mode [ 89.808771][ T4917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'. [ 89.836413][ T13] usb 3-1: config 0 descriptor?? [ 89.877283][ T4917] device hsr_slave_0 left promiscuous mode [ 89.889445][ T4917] device hsr_slave_1 left promiscuous mode [ 89.912725][ T4917] device hsr0 left promiscuous mode [ 90.137730][ T4931] loop4: detected capacity change from 0 to 16 [ 90.194846][ T4931] erofs: (device loop4): mounted with root inode @ nid 36. [ 90.410414][ T13] usbhid 3-1:0.0: can't add hid device: -71 [ 90.416553][ T13] usbhid: probe of 3-1:0.0 failed with error -71 [ 90.423280][ T4932] chnl_net:caif_netlink_parms(): no params data found [ 90.460109][ T13] usb 3-1: USB disconnect, device number 4 [ 90.735783][ T4932] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.755706][ T4932] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.786061][ T4932] device bridge_slave_0 entered promiscuous mode [ 90.805554][ T4932] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.839973][ T4932] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.849145][ T4932] device bridge_slave_1 entered promiscuous mode [ 90.880335][ T4932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.893577][ T4932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.980347][ T4932] team0: Port device team_slave_0 added [ 90.988624][ T4932] team0: Port device team_slave_1 added [ 91.049871][ T4932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.084137][ T4932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.164387][ T26] kauditd_printk_skb: 673 callbacks suppressed [ 91.164402][ T26] audit: type=1326 audit(1781034792.706:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz.3.261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951ee75e59 code=0x7ffc0000 [ 91.169735][ T4932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.174539][ T26] audit: type=1326 audit(1781034792.716:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz.3.261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951ee75e59 code=0x7ffc0000 [ 91.200729][ T4970] pit: kvm: requested 31009 ns i8254 timer period limited to 200000 ns [ 91.273906][ T4932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.281583][ T4932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.427320][ T4932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.665395][ T4932] device hsr_slave_0 entered promiscuous mode [ 91.678477][ T4932] device hsr_slave_1 entered promiscuous mode [ 91.697906][ T4932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.710984][ T4932] Cannot create hsr debugfs directory [ 91.767407][ T4984] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.776726][ T4984] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.785569][ T4984] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.794491][ T4984] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.176773][ T4932] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.188019][ T4932] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.201132][ T4932] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.211672][ T4932] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.239754][ T4191] Bluetooth: hci2: command 0x0409 tx timeout [ 92.290499][ T4233] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 92.308342][ T4932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.334480][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.344051][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.357468][ T4932] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.373682][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.387027][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.400738][ T4497] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.407855][ T4497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.424598][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.436352][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.451545][ T4497] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.458704][ T4497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.470222][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.489749][ T4236] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 92.523282][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.532784][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.543418][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.553446][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.563049][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.573518][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.584360][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.599186][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.609352][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.624610][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.639618][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.658887][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.686867][ T4233] usb 3-1: config 171 has an invalid interface number: 109 but max is 0 [ 92.699803][ T4233] usb 3-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 92.725136][ T4233] usb 3-1: config 171 has no interface number 0 [ 92.729693][ T4236] usb 5-1: Using ep0 maxpacket: 8 [ 92.743472][ T4233] usb 3-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 92.760160][ T4233] usb 3-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 92.860178][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.868519][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.892778][ T4932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.946725][ T4233] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 92.968310][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.992744][ T4233] usb 3-1: Product: syz [ 92.996967][ T4233] usb 3-1: Manufacturer: syz [ 93.008679][ T4233] usb 3-1: SerialNumber: syz [ 93.019854][ T4236] usb 5-1: unable to get BOS descriptor or descriptor too short [ 93.030142][ T4997] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 93.270200][ T4236] usb 5-1: config 7 has an invalid interface number: 62 but max is 0 [ 93.281737][ T4236] usb 5-1: config 7 has no interface number 0 [ 93.288067][ T4236] usb 5-1: config 7 interface 62 has no altsetting 0 [ 93.470757][ T4236] usb 5-1: New USB device found, idVendor=22b8, idProduct=2d92, bcdDevice=6d.7c [ 93.554702][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.593227][ T4997] udc-core: couldn't find an available UDC or it's busy [ 93.769748][ T4236] usb 5-1: Product: syz [ 93.774108][ T4997] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 93.786915][ T4236] usb 5-1: Manufacturer: syz [ 93.809933][ T4236] usb 5-1: SerialNumber: syz [ 93.899724][ T4233] ath6kl: Failed to submit usb control message: -71 [ 93.906533][ T4233] ath6kl: unable to send the bmi data to the device: -71 [ 93.923859][ T4233] ath6kl: Unable to send get target info: -71 [ 94.000118][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.010565][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.037486][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.056893][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.068311][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.083116][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.097737][ T4932] device veth0_vlan entered promiscuous mode [ 94.106133][ T5010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.279'. [ 94.118251][ T5010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.145549][ T4932] device veth1_vlan entered promiscuous mode [ 94.153434][ T5058] udc-core: couldn't find an available UDC or it's busy [ 94.171474][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.175142][ T5058] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 94.183602][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.195833][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.206910][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.226437][ T4932] device veth0_macvtap entered promiscuous mode [ 94.244652][ T4932] device veth1_macvtap entered promiscuous mode [ 94.266026][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.280894][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.291570][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.302393][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.321519][ T4236] usb 5-1: USB disconnect, device number 6 [ 94.330443][ T4191] Bluetooth: hci2: command 0x041b tx timeout [ 94.331623][ T4932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.400436][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.420089][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.438004][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.451566][ T4195] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 94.461473][ T4195] CPU: 0 PID: 4195 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 94.469227][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 94.474736][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.479304][ T4195] Workqueue: hci1 hci_rx_work [ 94.492066][ T4195] Call Trace: [ 94.495372][ T4195] [ 94.498326][ T4195] dump_stack_lvl+0x188/0x250 [ 94.503040][ T4195] ? show_regs_print_info+0x20/0x20 [ 94.508278][ T4195] ? load_image+0x400/0x400 [ 94.512829][ T4195] sysfs_create_dir_ns+0x26a/0x290 [ 94.517967][ T4195] ? sysfs_warn_dup+0xa0/0xa0 [ 94.522652][ T4195] ? process_one_work+0x85f/0x1010 [ 94.527921][ T4195] ? do_raw_spin_unlock+0x11d/0x230 [ 94.533138][ T4195] kobject_add_internal+0x6e0/0xd90 [ 94.538346][ T4195] kobject_add+0x160/0x230 [ 94.542777][ T4195] ? kobject_init+0x1d0/0x1d0 [ 94.547484][ T4195] ? klist_children_get+0x50/0x50 [ 94.552508][ T4195] ? get_device_parent+0x121/0x3f0 [ 94.557619][ T4195] device_add+0x48c/0x1000 [ 94.562056][ T4195] hci_conn_add_sysfs+0xd1/0x1e0 [ 94.567031][ T4195] le_conn_complete_evt+0xc4b/0x15c0 [ 94.572377][ T4195] ? cs_le_create_conn+0x5e0/0x5e0 [ 94.577517][ T4195] ? __mutex_trylock_common+0x155/0x260 [ 94.583079][ T4195] hci_le_meta_evt+0x285/0x3cb0 [ 94.588035][ T4195] ? hci_event_packet+0x37e/0x1370 [ 94.593183][ T4195] ? __lock_acquire+0x7d10/0x7d10 [ 94.598244][ T4195] ? hci_remote_host_features_evt+0x290/0x290 [ 94.604416][ T4195] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 94.610189][ T4195] ? mark_lock+0x94/0x320 [ 94.614539][ T4195] ? mutex_unlock+0x10/0x10 [ 94.619145][ T4195] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 94.625351][ T4195] ? lock_chain_count+0x20/0x20 [ 94.630223][ T4195] ? __rwlock_init+0x140/0x140 [ 94.635017][ T4195] hci_event_packet+0xe4b/0x1370 [ 94.640233][ T4195] ? lockdep_hardirqs_on+0x94/0x140 [ 94.645739][ T4195] ? rcu_lock_release+0x20/0x20 [ 94.650614][ T4195] ? hci_send_to_monitor+0x9c/0x4a0 [ 94.656074][ T4195] hci_rx_work+0x255/0xa10 [ 94.660624][ T4195] process_one_work+0x85f/0x1010 [ 94.665590][ T4195] ? worker_detach_from_pool+0x240/0x240 [ 94.671228][ T4195] ? lockdep_hardirqs_off+0x70/0x100 [ 94.676634][ T4195] ? _raw_spin_lock_irq+0xb7/0xf0 [ 94.681672][ T4195] ? _raw_spin_lock_irqsave+0x100/0x100 [ 94.687246][ T4195] ? wq_worker_running+0x97/0x170 [ 94.692365][ T4195] worker_thread+0xaa6/0x1290 [ 94.697172][ T4195] kthread+0x436/0x520 [ 94.701257][ T4195] ? rcu_lock_release+0x20/0x20 [ 94.706133][ T4195] ? kthread_blkcg+0xd0/0xd0 [ 94.710734][ T4195] ret_from_fork+0x1f/0x30 [ 94.715185][ T4195] [ 94.721765][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.737375][ T4195] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 94.738182][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.751610][ T4195] Bluetooth: hci1: failed to register connection device [ 94.768578][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.783023][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.835314][ T4932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.899917][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.918740][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.945593][ T4932] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.969636][ T4932] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.002221][ T4932] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.045954][ T4932] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.200370][ T4499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.208617][ T4499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.222744][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.241717][ T3086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.250563][ T3086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.258905][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.351205][ T5093] netlink: 'syz.5.243': attribute type 5 has an invalid length. [ 95.389114][ T5093] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.397996][ T5093] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.407237][ T5093] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.416142][ T5093] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.445907][ T5094] input: syz1 as /devices/virtual/input/input5 [ 95.453157][ T5094] input: failed to attach handler leds to device input5, error: -6 [ 95.850583][ T4233] ath6kl: Failed to init ath6kl core: -71 [ 97.522282][ T26] audit: type=1326 audit(1781034799.066:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5105 comm="syz.3.310" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f951ee75e59 code=0x0 [ 97.934672][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 98.319650][ T4233] ath6kl_usb: probe of 3-1:171.109 failed with error -71 [ 98.331413][ T4233] usb 3-1: USB disconnect, device number 5 [ 98.363107][ T5093] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.372200][ T5093] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.381646][ T5093] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.390707][ T5093] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.508981][ T5112] overlayfs: missing 'workdir' [ 98.593453][ T5115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.314'. [ 98.913686][ T4231] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 99.569733][ T4231] usb 6-1: Using ep0 maxpacket: 32 [ 99.730748][ T4231] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.201517][ T4231] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.211782][ T4231] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 100.221941][ T4231] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.232276][ T4231] usb 6-1: config 0 descriptor?? [ 100.243349][ T4178] Bluetooth: hci2: command 0x0419 tx timeout [ 100.396397][ T5171] netlink: 20 bytes leftover after parsing attributes in process `syz.3.332'. [ 100.516674][ T4195] ================================================================== [ 100.525160][ T4195] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x1333/0x3cb0 [ 100.533010][ T4195] Read of size 1 at addr ffff8880779c9c0a by task kworker/u5:2/4195 [ 100.541022][ T4195] [ 100.543378][ T4195] CPU: 1 PID: 4195 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 100.550949][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 100.561207][ T4195] Workqueue: hci4 hci_rx_work [ 100.565969][ T4195] Call Trace: [ 100.569275][ T4195] [ 100.572230][ T4195] dump_stack_lvl+0x188/0x250 [ 100.576938][ T4195] ? show_regs_print_info+0x20/0x20 [ 100.582363][ T4195] ? load_image+0x400/0x400 [ 100.586893][ T4195] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 100.592471][ T4195] ? mutex_lock_io_nested+0x60/0x60 [ 100.598158][ T4195] print_address_description+0x60/0x2d0 [ 100.603744][ T4195] ? hci_le_meta_evt+0x1333/0x3cb0 [ 100.608892][ T4195] kasan_report+0xdf/0x130 [ 100.613346][ T4195] ? hci_le_meta_evt+0x1333/0x3cb0 [ 100.618504][ T4195] hci_le_meta_evt+0x1333/0x3cb0 [ 100.623600][ T4195] ? hci_remote_host_features_evt+0x290/0x290 [ 100.629701][ T4195] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 100.635553][ T4195] ? mark_lock+0x94/0x320 [ 100.639924][ T4195] ? mutex_unlock+0x10/0x10 [ 100.644468][ T4195] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 100.650502][ T4195] ? lock_chain_count+0x20/0x20 [ 100.655568][ T4195] ? __rwlock_init+0x140/0x140 [ 100.660380][ T4195] hci_event_packet+0xe4b/0x1370 [ 100.665353][ T4195] ? lockdep_hardirqs_on+0x94/0x140 [ 100.670794][ T4195] ? rcu_lock_release+0x20/0x20 [ 100.675682][ T4195] ? hci_send_to_monitor+0x9c/0x4a0 [ 100.680911][ T4195] hci_rx_work+0x255/0xa10 [ 100.685467][ T4195] process_one_work+0x85f/0x1010 [ 100.690476][ T4195] ? worker_detach_from_pool+0x240/0x240 [ 100.696194][ T4195] ? lockdep_hardirqs_off+0x70/0x100 [ 100.701520][ T4195] ? _raw_spin_lock_irq+0xb7/0xf0 [ 100.706583][ T4195] ? _raw_spin_lock_irqsave+0x100/0x100 [ 100.712169][ T4195] ? wq_worker_running+0x97/0x170 [ 100.717317][ T4195] worker_thread+0xaa6/0x1290 [ 100.722070][ T4195] kthread+0x436/0x520 [ 100.726170][ T4195] ? rcu_lock_release+0x20/0x20 [ 100.731045][ T4195] ? kthread_blkcg+0xd0/0xd0 [ 100.735668][ T4195] ret_from_fork+0x1f/0x30 [ 100.740146][ T4195] [ 100.743365][ T4195] [ 100.745707][ T4195] Allocated by task 5176: [ 100.750052][ T4195] __kasan_kmalloc+0xb5/0xf0 [ 100.754683][ T4195] __alloc_skb+0x22c/0x750 [ 100.759133][ T4195] vhci_write+0xbc/0x450 [ 100.763415][ T4195] vfs_write+0x745/0xd60 [ 100.767693][ T4195] ksys_write+0x152/0x260 [ 100.772063][ T4195] do_syscall_64+0x4c/0xa0 [ 100.776513][ T4195] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.782429][ T4195] [ 100.784776][ T4195] The buggy address belongs to the object at ffff8880779c9800 [ 100.784776][ T4195] which belongs to the cache kmalloc-1k of size 1024 [ 100.798850][ T4195] The buggy address is located 10 bytes to the right of [ 100.798850][ T4195] 1024-byte region [ffff8880779c9800, ffff8880779c9c00) [ 100.812672][ T4195] The buggy address belongs to the page: [ 100.818417][ T4195] page:ffffea0001de7200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x779c8 [ 100.828600][ T4195] head:ffffea0001de7200 order:3 compound_mapcount:0 compound_pincount:0 [ 100.837043][ T4195] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 100.845196][ T4195] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41dc0 [ 100.853912][ T4195] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 100.862948][ T4195] page dumped because: kasan: bad access detected [ 100.869366][ T4195] page_owner tracks the page as allocated [ 100.875078][ T4195] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3947, ts 34103351060, free_ts 33766630166 [ 100.894178][ T4195] get_page_from_freelist+0x1bbd/0x1ca0 [ 100.899733][ T4195] __alloc_pages+0x1ee/0x480 [ 100.904325][ T4195] new_slab+0xc0/0x4b0 [ 100.908403][ T4195] ___slab_alloc+0x80a/0xdd0 [ 100.912998][ T4195] __kmalloc+0x1cd/0x330 [ 100.917239][ T4195] load_elf_phdrs+0x132/0x230 [ 100.922020][ T4195] load_elf_binary+0x962/0x28e0 [ 100.926873][ T4195] bprm_execve+0xaee/0x1840 [ 100.931375][ T4195] do_execveat_common+0x51e/0x6d0 [ 100.936408][ T4195] __x64_sys_execve+0x8e/0xa0 [ 100.941082][ T4195] do_syscall_64+0x4c/0xa0 [ 100.945498][ T4195] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.951389][ T4195] page last free stack trace: [ 100.956058][ T4195] free_unref_page_prepare+0x637/0x6c0 [ 100.961516][ T4195] free_unref_page+0x8f/0x2a0 [ 100.966201][ T4195] __unfreeze_partials+0x1a5/0x200 [ 100.971345][ T4195] put_cpu_partial+0x12d/0x190 [ 100.976113][ T4195] qlist_free_all+0x35/0x90 [ 100.980613][ T4195] kasan_quarantine_reduce+0x150/0x160 [ 100.986072][ T4195] __kasan_slab_alloc+0x2f/0xd0 [ 100.990960][ T4195] slab_post_alloc_hook+0x4c/0x380 [ 100.996116][ T4195] kmem_cache_alloc+0x100/0x290 [ 101.000986][ T4195] vm_area_alloc+0x20/0xe0 [ 101.005451][ T4195] do_brk_flags+0x5fc/0xa70 [ 101.009989][ T4195] __se_sys_brk+0x554/0x710 [ 101.014521][ T4195] do_syscall_64+0x4c/0xa0 [ 101.018944][ T4195] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.024844][ T4195] [ 101.027179][ T4195] Memory state around the buggy address: [ 101.032803][ T4195] ffff8880779c9b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 101.040861][ T4195] ffff8880779c9b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 101.048934][ T4195] >ffff8880779c9c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 101.056989][ T4195] ^ [ 101.061317][ T4195] ffff8880779c9c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 101.069735][ T4195] ffff8880779c9d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 101.077888][ T4195] ================================================================== [ 101.085942][ T4195] Disabling lock debugging due to kernel taint [ 101.099600][ T4195] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 101.106838][ T4195] CPU: 1 PID: 4195 Comm: kworker/u5:2 Tainted: G B syzkaller #0 [ 101.115804][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.125878][ T4195] Workqueue: hci4 hci_rx_work [ 101.130608][ T4195] Call Trace: [ 101.133914][ T4195] [ 101.136867][ T4195] dump_stack_lvl+0x188/0x250 [ 101.141659][ T4195] ? show_regs_print_info+0x20/0x20 [ 101.146888][ T4195] ? load_image+0x400/0x400 [ 101.151418][ T4195] panic+0x2e5/0x810 [ 101.155346][ T4195] ? bpf_jit_dump+0xd0/0xd0 [ 101.159881][ T4195] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 101.165885][ T4195] ? _raw_spin_unlock+0x40/0x40 [ 101.170758][ T4195] ? hci_le_meta_evt+0x1333/0x3cb0 [ 101.175893][ T4195] check_panic_on_warn+0x80/0xa0 [ 101.180856][ T4195] ? hci_le_meta_evt+0x1333/0x3cb0 [ 101.185988][ T4195] end_report+0x6d/0xf0 [ 101.190201][ T4195] kasan_report+0x102/0x130 [ 101.194734][ T4195] ? hci_le_meta_evt+0x1333/0x3cb0 [ 101.199873][ T4195] hci_le_meta_evt+0x1333/0x3cb0 [ 101.204843][ T4195] ? hci_remote_host_features_evt+0x290/0x290 [ 101.210937][ T4195] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 101.216594][ T4195] ? mark_lock+0x94/0x320 [ 101.220953][ T4195] ? mutex_unlock+0x10/0x10 [ 101.225485][ T4195] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 101.231492][ T4195] ? lock_chain_count+0x20/0x20 [ 101.236380][ T4195] ? __rwlock_init+0x140/0x140 [ 101.241171][ T4195] hci_event_packet+0xe4b/0x1370 [ 101.246127][ T4195] ? lockdep_hardirqs_on+0x94/0x140 [ 101.251351][ T4195] ? rcu_lock_release+0x20/0x20 [ 101.256226][ T4195] ? hci_send_to_monitor+0x9c/0x4a0 [ 101.261453][ T4195] hci_rx_work+0x255/0xa10 [ 101.265905][ T4195] process_one_work+0x85f/0x1010 [ 101.270873][ T4195] ? worker_detach_from_pool+0x240/0x240 [ 101.276529][ T4195] ? lockdep_hardirqs_off+0x70/0x100 [ 101.281847][ T4195] ? _raw_spin_lock_irq+0xb7/0xf0 [ 101.286906][ T4195] ? _raw_spin_lock_irqsave+0x100/0x100 [ 101.292486][ T4195] ? wq_worker_running+0x97/0x170 [ 101.297565][ T4195] worker_thread+0xaa6/0x1290 [ 101.302274][ T4195] kthread+0x436/0x520 [ 101.306365][ T4195] ? rcu_lock_release+0x20/0x20 [ 101.311238][ T4195] ? kthread_blkcg+0xd0/0xd0 [ 101.315887][ T4195] ret_from_fork+0x1f/0x30 [ 101.320343][ T4195] [ 101.323467][ T4195] Kernel Offset: disabled [ 101.327795][ T4195] Rebooting in 86400 seconds..