last executing test programs: 10.383669472s ago: executing program 2 (id=87): r0 = syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f010008000000000000000424020009058103109b75c11309"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x3, 0x66, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54, 0x1, 0x1, 0x3, 0x30, 0x9, [{{0x9, 0x4, 0x0, 0xe3, 0x2, 0x2, 0x6, 0x0, 0x7, {{0xa, 0x24, 0x6, 0x0, 0x0, "579203cf38"}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8, 0x6, 0x9}, [@country_functional={0x6, 0x24, 0x7, 0x0, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x1, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xd, 0x0, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0xf8, 0x97}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x2, 0x8f, 0xff, 0x10}, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x2, &(0x7f00000002c0)=@string={0x2}}, {0x0, 0x0}]}) 7.199706659s ago: executing program 0 (id=103): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x40, 0x25}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.998178641s ago: executing program 2 (id=105): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x20000) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000001c0)={&(0x7f0000000000)="c945390000", 0x5}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 5.79592689s ago: executing program 3 (id=110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010026bc700000dbdf250b"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) 5.740966532s ago: executing program 3 (id=112): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001d00070f2dbd70000300000007000000", @ANYRES32=r1], 0x24}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x67f, 0x64, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.703838587s ago: executing program 3 (id=117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) 4.693230818s ago: executing program 3 (id=118): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000040)={0x1f, @fixed}, 0x8) 4.424022219s ago: executing program 1 (id=120): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r0, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='u', 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1000"], 0x10}, 0x0, 0x8400, 0x1}) r1 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x21, 0x0, 0x0) 3.740706228s ago: executing program 1 (id=121): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) socket(0x10, 0x2, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_io_uring_setup(0x5e3, &(0x7f00000003c0)={0x0, 0x898, 0x1000, 0x1, 0x398}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.681786371s ago: executing program 3 (id=122): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000006d40)={0x200a}) close_range(r0, 0xffffffffffffffff, 0x0) 3.568039276s ago: executing program 3 (id=123): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 3.533276147s ago: executing program 1 (id=124): r0 = epoll_create1(0x80000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x2001}) 3.500883229s ago: executing program 1 (id=125): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000017340005800c0001007061796c6f6164002400028008000340000000920500024000000002080004400000008308000140000000110800034000000002080002"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a3000000000050004000000000014000780"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x24004090) 3.432138462s ago: executing program 1 (id=126): prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) 2.469716063s ago: executing program 0 (id=128): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d07}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0xcc}, {0x804, 0x2, 0x1, 0x45, 0x7, 0x1, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x40000001, 0x3, 0x38, 0x3, 0x84, 0x7, 0x6, 0x0, 0x8, 0x3, 0x4, 0x8, 0x24ab}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x88800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x6, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x2, 0x2, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.420008156s ago: executing program 2 (id=129): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) syz_open_dev$loop(0x0, 0x8, 0x204000) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$unix(r2, &(0x7f0000000300)={&(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x4011}, 0x4010) bind$netlink(r4, &(0x7f0000000480)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r5, &(0x7f0000001300)={0x2020}, 0x2020) 2.398716147s ago: executing program 4 (id=130): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000280)) 2.221189004s ago: executing program 4 (id=131): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 2.072042041s ago: executing program 0 (id=132): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x28, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}}, 0x40000) 1.792426613s ago: executing program 4 (id=133): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x150, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) 1.361460841s ago: executing program 1 (id=134): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000274c0340ab0560000611000000010902120001000d00000904"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 1.292045014s ago: executing program 0 (id=135): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x200010, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',dfltuid=', @ANYRESHEX]) 1.288495204s ago: executing program 2 (id=136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[], 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x68, 0x95, 0x18, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x20, 0x1, 0x4}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x7, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.134223321s ago: executing program 0 (id=137): r0 = socket$key(0xf, 0x3, 0x2) fchdir(r0) 1.012137516s ago: executing program 4 (id=138): get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x4000001ff, &(0x7f0000feb000/0x13000)=nil, 0x2) 1.011878106s ago: executing program 0 (id=139): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x4082172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xb) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xfffff000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x50) personality(0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 1.011712456s ago: executing program 4 (id=140): r0 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 999.083197ms ago: executing program 2 (id=141): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0x0, 0x80, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x1) 921.49406ms ago: executing program 4 (id=142): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 0s ago: executing program 2 (id=143): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000c40)={0x2c, &(0x7f0000000a00)={0x40, 0x15, 0x6, "82d7a9fb5638"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. [ 57.081946][ T4171] cgroup: Unknown subsys name 'net' [ 57.279759][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.764948][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.259180][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 60.321677][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 60.375708][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 60.391800][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 60.415755][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 60.464484][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.472189][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.480491][ T4181] device bridge_slave_0 entered promiscuous mode [ 60.493064][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.500630][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.508769][ T4181] device bridge_slave_1 entered promiscuous mode [ 60.581558][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.594568][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.615125][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.622289][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.630773][ T4189] device bridge_slave_0 entered promiscuous mode [ 60.662537][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.669802][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.677811][ T4189] device bridge_slave_1 entered promiscuous mode [ 60.696185][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.703257][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.711668][ T4191] device bridge_slave_0 entered promiscuous mode [ 60.743294][ T4181] team0: Port device team_slave_0 added [ 60.749509][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.756783][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.764955][ T4191] device bridge_slave_1 entered promiscuous mode [ 60.772481][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.782103][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.790414][ T4187] device bridge_slave_0 entered promiscuous mode [ 60.814110][ T4181] team0: Port device team_slave_1 added [ 60.819959][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.827079][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.835249][ T4182] device bridge_slave_0 entered promiscuous mode [ 60.851115][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.858419][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.866899][ T4187] device bridge_slave_1 entered promiscuous mode [ 60.875959][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.893201][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.900496][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.908794][ T4182] device bridge_slave_1 entered promiscuous mode [ 60.939005][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.971601][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.983818][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.008255][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.015366][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.042464][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.056560][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.068121][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.093727][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.105174][ T4191] team0: Port device team_slave_0 added [ 61.113123][ T4189] team0: Port device team_slave_0 added [ 61.119651][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.126752][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.152879][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.174094][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.190281][ T4191] team0: Port device team_slave_1 added [ 61.205111][ T4189] team0: Port device team_slave_1 added [ 61.234924][ T4182] team0: Port device team_slave_0 added [ 61.255880][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.262838][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.289111][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.301685][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.308784][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.335036][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.347810][ T4182] team0: Port device team_slave_1 added [ 61.356999][ T4187] team0: Port device team_slave_0 added [ 61.388921][ T4187] team0: Port device team_slave_1 added [ 61.409031][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.416259][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.442297][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.478194][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.485251][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.511279][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.523116][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.530224][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.556731][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.570652][ T4181] device hsr_slave_0 entered promiscuous mode [ 61.577825][ T4181] device hsr_slave_1 entered promiscuous mode [ 61.593113][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.600210][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.626631][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.638333][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.645488][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.671479][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.703177][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.710229][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.736301][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.775964][ T4191] device hsr_slave_0 entered promiscuous mode [ 61.782650][ T4191] device hsr_slave_1 entered promiscuous mode [ 61.789223][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.797465][ T4191] Cannot create hsr debugfs directory [ 61.823332][ T4189] device hsr_slave_0 entered promiscuous mode [ 61.830304][ T4189] device hsr_slave_1 entered promiscuous mode [ 61.837014][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.844941][ T4189] Cannot create hsr debugfs directory [ 61.864686][ T4187] device hsr_slave_0 entered promiscuous mode [ 61.871329][ T4187] device hsr_slave_1 entered promiscuous mode [ 61.878410][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.886183][ T4187] Cannot create hsr debugfs directory [ 61.934354][ T4182] device hsr_slave_0 entered promiscuous mode [ 61.941045][ T4182] device hsr_slave_1 entered promiscuous mode [ 61.947893][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.954638][ T2238] Bluetooth: hci2: command 0x0409 tx timeout [ 61.961908][ T2238] Bluetooth: hci1: command 0x0409 tx timeout [ 61.961997][ T4184] Bluetooth: hci4: command 0x0409 tx timeout [ 61.969952][ T2238] Bluetooth: hci0: command 0x0409 tx timeout [ 61.974219][ T4182] Cannot create hsr debugfs directory [ 61.985463][ T4184] Bluetooth: hci3: command 0x0409 tx timeout [ 62.267346][ T4181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.279953][ T4181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.299443][ T4181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.309034][ T4181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.354652][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.370069][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.382678][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.395904][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.469544][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.478488][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.502706][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.511569][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.522085][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.562814][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.572225][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.584336][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.625067][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.634061][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.642980][ T4209] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.650246][ T4209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.658963][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.672560][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.681472][ T4209] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.688586][ T4209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.698133][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.707161][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.718476][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.733005][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.741962][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.756477][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.785531][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.814958][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.828028][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.837858][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.865824][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.875207][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.883196][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.898453][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.913945][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.923023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.933006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.950466][ T4181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.961548][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.980755][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.989635][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.004439][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.014193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.022930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.032127][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.040856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.066322][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.084980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.093179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.108711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.118931][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.126314][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.136041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.170024][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.184083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.192666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.202375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.218885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.230225][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.237333][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.246282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.276326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.286757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.296398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.309875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.318610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.327110][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.334224][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.342086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.350143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.367056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.376577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.404280][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.429605][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.440645][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.452779][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.460495][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.468122][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.477138][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.486728][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.495422][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.504327][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.511400][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.519260][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.528068][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.536494][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.545161][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.556311][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.565406][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.574090][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.581910][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.599870][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.608501][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.622012][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.633253][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.655544][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.678785][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.688725][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.699826][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.737231][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.753772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.762510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.774339][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.781423][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.790391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.799212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.808430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.817723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.826647][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.833731][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.841874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.855326][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.870347][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.886344][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.895604][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.929579][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.938612][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.952966][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.961338][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.969863][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.981281][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.994791][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.003149][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.013193][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.022141][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.043970][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.053970][ T4237] Bluetooth: hci3: command 0x041b tx timeout [ 64.062372][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.071361][ T4237] Bluetooth: hci0: command 0x041b tx timeout [ 64.078758][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.087312][ T4237] Bluetooth: hci4: command 0x041b tx timeout [ 64.090422][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.100445][ T4237] Bluetooth: hci1: command 0x041b tx timeout [ 64.100460][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.116158][ T4237] Bluetooth: hci2: command 0x041b tx timeout [ 64.122352][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.132764][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.148437][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.155568][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.163985][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.172706][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.181459][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.189957][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.199246][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.208244][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.217629][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.226730][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.244238][ T4181] device veth0_vlan entered promiscuous mode [ 64.262236][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.280936][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.291769][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.307124][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.319585][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.331372][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.347738][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.370329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.379566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.398920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.409425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.423899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.432717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.458699][ T4181] device veth1_vlan entered promiscuous mode [ 64.484736][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.492461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.506441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.527490][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.592708][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.602978][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.612553][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.622576][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.635184][ T4181] device veth0_macvtap entered promiscuous mode [ 64.660151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.668732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.686023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.699243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.706838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.715488][ T4181] device veth1_macvtap entered promiscuous mode [ 64.740745][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.755435][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.771970][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.780709][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.801482][ T4191] device veth0_vlan entered promiscuous mode [ 64.817418][ T4182] device veth0_vlan entered promiscuous mode [ 64.835325][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.843172][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.851061][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.859585][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.868512][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.876554][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.890402][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.899743][ T4191] device veth1_vlan entered promiscuous mode [ 64.917768][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.925942][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.935312][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.944243][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.952854][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.968438][ T4182] device veth1_vlan entered promiscuous mode [ 64.978949][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.005817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.015905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.025161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.034279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.042864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.050725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.068833][ T4181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.079166][ T4181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.088283][ T4181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.097341][ T4181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.117680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.127122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.139107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.154895][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.171488][ T4182] device veth0_macvtap entered promiscuous mode [ 65.186777][ T4182] device veth1_macvtap entered promiscuous mode [ 65.195838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.204852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.212538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.221890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.230505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.248515][ T4191] device veth0_macvtap entered promiscuous mode [ 65.263094][ T4189] device veth0_vlan entered promiscuous mode [ 65.280374][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.291133][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.303014][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.316523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.326372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.335762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.347497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.357923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.367608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.380513][ T4191] device veth1_macvtap entered promiscuous mode [ 65.399130][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.410029][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.421198][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.437546][ T4189] device veth1_vlan entered promiscuous mode [ 65.449932][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.463066][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.473191][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.488272][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.499388][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.506983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.515994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.525293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.534376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.542979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.551907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.565328][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.576014][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.585553][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.594408][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.631299][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.644194][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.654458][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.665132][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.677073][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.694431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.702624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.711397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.724368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.732978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.741311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.762113][ T4187] device veth0_vlan entered promiscuous mode [ 65.774828][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.785061][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.794868][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.804782][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.840023][ T4187] device veth1_vlan entered promiscuous mode [ 65.863360][ T4189] device veth0_macvtap entered promiscuous mode [ 65.880048][ T4189] device veth1_macvtap entered promiscuous mode [ 65.889032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.899614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.908508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.917623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.926490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.953114][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.962788][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.996893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.005651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.018567][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.029125][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.039423][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.050182][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.060207][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.070849][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.082470][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.109371][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.120646][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.131171][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 66.137684][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 66.142005][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.144489][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 66.161930][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.172002][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.182716][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.194765][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.202216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.204422][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 66.216633][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 66.218221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.231617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.240501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.263376][ T4187] device veth0_macvtap entered promiscuous mode [ 66.277775][ T4187] device veth1_macvtap entered promiscuous mode [ 66.287067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.294841][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.298989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.302959][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.311764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.327971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.336740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.356034][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.366357][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.375986][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.385205][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.425373][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.452346][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.468672][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.481784][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.498846][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.509806][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.523071][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.533776][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.543857][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.554523][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.567427][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.585565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.603336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.613179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.631050][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.661010][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.673113][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.694616][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.704719][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.716176][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.727931][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.739106][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.764236][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.792881][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.806546][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.820783][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.829343][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.856685][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.871726][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.881009][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.890028][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.909069][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.911888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.925759][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.943116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.963710][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.989361][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.001918][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.013076][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.045451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.055160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.130959][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.148493][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.169969][ T374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.212055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.213755][ T374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.267913][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.379742][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.406561][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.449180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.600080][ T4305] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 67.889061][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 67.991479][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 68.169326][ T4302] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 68.199444][ T4311] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.204483][ T4237] Bluetooth: hci3: command 0x0419 tx timeout [ 68.240243][ T4237] Bluetooth: hci0: command 0x0419 tx timeout [ 68.280176][ T4237] Bluetooth: hci4: command 0x0419 tx timeout [ 68.315004][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 68.321259][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 68.667118][ T4224] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 68.913180][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 69.073786][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.117782][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 69.153871][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.234076][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.313804][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.322802][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 69.332608][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 69.390749][ T4224] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.853662][ T4224] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 69.862622][ T4224] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 69.893589][ T4224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.911304][ T4224] usb 1-1: config 0 descriptor?? [ 69.958806][ T4224] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 69.969005][ T4224] dvb-usb: bulk message failed: -22 (3/0) [ 69.998684][ T4224] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 70.023906][ T4224] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 70.031156][ T4224] usb 1-1: media controller created [ 70.057097][ T4224] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 70.058900][ T4318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.174106][ T4224] dvb-usb: bulk message failed: -22 (6/0) [ 70.182037][ T4224] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 70.240675][ T4321] dvb-usb: bulk message failed: -22 (2/0) [ 70.278980][ T4224] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 71.040256][ T4224] dvb-usb: schedule remote query interval to 150 msecs. [ 71.059925][ T4224] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 71.121611][ T4347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 71.170649][ T4224] usb 1-1: USB disconnect, device number 2 [ 71.177372][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.183961][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.188632][ T4347] device team1 entered promiscuous mode [ 71.215791][ T4336] process 'syz.2.12' launched '/dev/fd/-1' with NULL argv: empty string added [ 71.243009][ T4347] 8021q: adding VLAN 0 to HW filter on device team1 [ 71.305900][ T4224] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 72.783639][ T2303] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 72.850326][ T4391] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 72.933627][ T4287] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.884773][ T2303] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.913788][ T2303] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 73.929939][ T2303] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 73.943682][ T2303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.981024][ T2303] usb 2-1: config 0 descriptor?? [ 74.075314][ T2303] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 74.095094][ T2303] dvb-usb: bulk message failed: -22 (3/0) [ 74.116368][ T4287] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 74.119135][ T2303] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 74.138313][ T4287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.167267][ T2303] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 74.173606][ T4287] usb 4-1: Product: syz [ 74.193296][ T2303] usb 2-1: media controller created [ 74.214600][ T2303] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 74.219715][ T4287] usb 4-1: Manufacturer: syz [ 74.227340][ T2303] dvb-usb: bulk message failed: -22 (6/0) [ 74.235385][ T2303] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 74.242110][ T4287] usb 4-1: SerialNumber: syz [ 74.334515][ T2303] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 74.337312][ T4378] dvb-usb: bulk message failed: -22 (2/0) [ 74.350878][ T2303] dvb-usb: schedule remote query interval to 150 msecs. [ 74.392147][ T2303] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 74.478622][ T2303] usb 2-1: USB disconnect, device number 2 [ 74.544088][ T4394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.913949][ T4287] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 75.177764][ T2303] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 76.913033][ T4287] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): timeout on completion of LiteReset [ 76.947991][ T4287] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 77.582514][ T4287] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 77.622621][ T4287] lan78xx: probe of 4-1:1.0 failed with error -110 [ 77.749851][ T4287] usb 4-1: USB disconnect, device number 2 [ 79.883011][ T4461] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.196699][ T4473] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 80.473836][ T4287] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.813721][ T4287] usb 3-1: Using ep0 maxpacket: 8 [ 80.953761][ T4287] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 81.415025][ T23] cfg80211: failed to load regulatory.db [ 81.951976][ T4287] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 81.968050][ T4287] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 81.986604][ T4287] usb 3-1: Product: syz [ 81.990833][ T4287] usb 3-1: Manufacturer: syz [ 82.012059][ T4287] usb 3-1: SerialNumber: syz [ 82.293638][ T4287] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 82.301938][ T4287] usb 3-1: Handspring Visor / Palm OS: port 240, is for unknown use [ 82.313343][ T4287] usb 3-1: Handspring Visor / Palm OS: port 66, is for unknown use [ 82.326559][ T4287] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 82.556001][ T4287] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 82.564856][ T4287] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 82.578669][ T4287] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 82.589845][ T4287] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 82.601172][ T4287] usb 3-1: USB disconnect, device number 2 [ 82.666024][ T4287] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 82.773657][ T4184] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.982484][ T4287] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 83.446846][ T4287] visor 3-1:1.0: device disconnected [ 83.454105][ T4184] usb 5-1: Using ep0 maxpacket: 32 [ 83.593966][ T4184] usb 5-1: config 2 has an invalid interface number: 215 but max is 0 [ 83.625531][ T4184] usb 5-1: config 2 has no interface number 0 [ 83.983841][ T4184] usb 5-1: New USB device found, idVendor=15b8, idProduct=6002, bcdDevice=fe.b6 [ 84.004329][ T4184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.059088][ T4184] usb 5-1: Product: syz [ 84.089796][ T4184] usb 5-1: Manufacturer: syz [ 84.132473][ T4184] usb 5-1: SerialNumber: syz [ 84.455743][ T4184] gspca_main: vc032x-2.14.0 probing 15b8:6002 [ 84.497780][ T4184] gspca_vc032x: reg_r err -71 [ 84.502556][ T4184] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.516593][ T4184] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.522070][ T4184] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.528202][ T4184] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.534083][ T4184] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.539387][ T4184] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.545514][ T4184] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.578317][ T4184] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.599817][ T4184] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.623687][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.628295][ T4184] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.646252][ T4184] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.646266][ T4184] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.646276][ T4184] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.646285][ T4184] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.646294][ T4184] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.646303][ T4184] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.646312][ T4184] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.646321][ T4184] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.646330][ T4184] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.646339][ T4184] gspca_vc032x: Unknown sensor... [ 84.646401][ T4184] vc032x: probe of 5-1:2.215 failed with error -22 [ 84.711344][ T4184] usb 5-1: USB disconnect, device number 2 [ 85.063875][ T2303] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 85.163671][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.177771][ T26] audit: type=1326 audit(1764481677.079:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6d14c749 code=0x7ffc0000 [ 85.213373][ T23] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 85.249266][ T26] audit: type=1326 audit(1764481677.109:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe6d14af90 code=0x7ffc0000 [ 85.311419][ T26] audit: type=1326 audit(1764481677.109:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6d14c749 code=0x7ffc0000 [ 85.407952][ T26] audit: type=1326 audit(1764481677.109:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fbe6d14c749 code=0x7ffc0000 [ 85.437311][ T26] audit: type=1326 audit(1764481677.109:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6d14c749 code=0x7ffc0000 [ 85.579290][ T26] audit: type=1326 audit(1764481677.109:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6d14c749 code=0x7ffc0000 [ 86.773612][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.782808][ T2303] usb 4-1: config 0 has an invalid interface number: 53 but max is 0 [ 86.865025][ T2303] usb 4-1: config 0 has no interface number 0 [ 86.883700][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.893656][ T23] usb 3-1: Product: syz [ 86.898132][ T23] usb 3-1: Manufacturer: syz [ 86.922182][ T23] usb 3-1: SerialNumber: syz [ 87.084096][ T2303] usb 4-1: New USB device found, idVendor=10d2, idProduct=7186, bcdDevice=23.a0 [ 87.103568][ T2303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.112822][ T2303] usb 4-1: Product: syz [ 87.123350][ T2303] usb 4-1: Manufacturer: syz [ 87.129736][ T2303] usb 4-1: SerialNumber: syz [ 87.186365][ T2303] usb 4-1: config 0 descriptor?? [ 87.294909][ T4553] udc-core: couldn't find an available UDC or it's busy [ 87.333916][ T4553] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 87.425664][ T23] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 87.453729][ T23] usb 3-1: USB disconnect, device number 3 [ 87.524911][ T2303] usblcd 4-1:0.53: USBLCD model not supported. [ 87.555994][ T2303] usb 4-1: USB disconnect, device number 3 [ 87.813573][ T4184] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.903612][ T4259] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 87.983634][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.073612][ T4184] usb 5-1: Using ep0 maxpacket: 8 [ 88.112152][ T4245] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.253596][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 88.263943][ T4184] usb 5-1: unable to get BOS descriptor or descriptor too short [ 88.343984][ T4184] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 88.352194][ T4184] usb 5-1: can't read configurations, error -71 [ 88.363890][ T4245] usb 2-1: Using ep0 maxpacket: 32 [ 88.423811][ T23] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 88.432130][ T23] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 88.443699][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.455507][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.463814][ T4259] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 88.465816][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 88.481126][ T4259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.486574][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 88.499702][ T4259] usb 1-1: Product: syz [ 88.504936][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33552, setting to 1024 [ 88.508794][ T4259] usb 1-1: Manufacturer: syz [ 88.526248][ T4259] usb 1-1: SerialNumber: syz [ 88.528049][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 88.541158][ T4245] usb 2-1: config 1 has an invalid interface number: 124 but max is 1 [ 88.542397][ T4259] usb 1-1: config 0 descriptor?? [ 88.553388][ T4245] usb 2-1: config 1 has an invalid interface descriptor of length 2, skipping [ 88.564261][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.572343][ T4245] usb 2-1: config 1 has an invalid interface number: 129 but max is 1 [ 88.595489][ T4245] usb 2-1: config 1 has no interface number 0 [ 88.602708][ T4245] usb 2-1: config 1 has no interface number 1 [ 88.616606][ T4245] usb 2-1: config 1 interface 124 altsetting 2 endpoint 0x7 has invalid wMaxPacketSize 0 [ 88.665676][ T4245] usb 2-1: config 1 interface 124 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 0 [ 88.707644][ T4245] usb 2-1: config 1 interface 124 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 88.735027][ T23] usb 3-1: can't set config #16, error -71 [ 88.758203][ T23] usb 3-1: USB disconnect, device number 4 [ 88.779128][ T4245] usb 2-1: config 1 interface 124 has no altsetting 0 [ 88.803796][ T4259] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 88.813630][ T4245] usb 2-1: config 1 interface 129 has no altsetting 0 [ 89.013717][ T4245] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=96.32 [ 89.033273][ T4245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.052508][ T4245] usb 2-1: Product: syz [ 89.071465][ T4245] usb 2-1: Manufacturer: syz [ 89.082628][ T4245] usb 2-1: SerialNumber: syz [ 89.137331][ T4625] netlink: 300 bytes leftover after parsing attributes in process `syz.4.114'. [ 89.193575][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 89.433924][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 89.494449][ T4245] hso 2-1:1.124: Not our interface [ 89.583691][ T4245] hso 2-1:1.129: Not our interface [ 89.622561][ T4245] usb 2-1: USB disconnect, device number 3 [ 89.983735][ T23] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 90.003013][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.012708][ T23] usb 3-1: Product: syz [ 90.019977][ T23] usb 3-1: Manufacturer: syz [ 90.030087][ T23] usb 3-1: SerialNumber: syz [ 90.039866][ T23] usb 3-1: config 0 descriptor?? [ 90.187494][ T23] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 90.974471][ T23] gspca_sonixj: reg_w1 err -110 [ 90.979478][ T23] sonixj: probe of 3-1:0.0 failed with error -110 [ 91.403684][ T2303] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.543937][ T4594] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.780393][ T2303] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 91.815931][ T2303] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.904110][ T4594] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.948123][ T4594] usb 2-1: config 0 interface 0 has no altsetting 0 [ 91.966724][ T2303] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.110881][ T2303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.261421][ T4184] usb 3-1: USB disconnect, device number 5 [ 92.322732][ T4594] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 92.333327][ T4594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.343332][ T2303] usb 4-1: config 0 descriptor?? [ 92.348542][ T4594] usb 2-1: Product: syz [ 92.352731][ T4594] usb 2-1: Manufacturer: syz [ 92.353687][ T4259] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 92.358197][ T4594] usb 2-1: SerialNumber: syz [ 92.383193][ T4594] usb 2-1: config 0 descriptor?? [ 92.390558][ T2303] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 92.579654][ T4594] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 92.589951][ T4259] usb 1-1: USB disconnect, device number 3 [ 92.602399][ T4594] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 92.633916][ T4594] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 92.667046][ T4594] usb 2-1: media controller created [ 93.347364][ T4594] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.505672][ T4594] DVB: Unable to find symbol tda10046_attach() [ 93.505688][ T4594] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 93.505703][ T4594] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 93.523709][ T4594] dvb_usb_m920x: probe of 2-1:0.0 failed with error -71 [ 93.527764][ T4594] usb 2-1: USB disconnect, device number 4 [ 93.983559][ T4594] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.023524][ T4259] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.293760][ T4259] usb 1-1: Using ep0 maxpacket: 32 [ 94.353866][ T4594] usb 2-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 94.366228][ T4594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.387000][ T4594] usb 2-1: config 0 descriptor?? [ 94.433885][ T4259] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 94.662533][ T4259] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 94.674067][ T4259] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 94.682275][ T4259] usb 1-1: Product: syz [ 94.693602][ T4259] usb 1-1: Manufacturer: syz [ 94.701470][ T4259] usb 1-1: SerialNumber: syz [ 94.714958][ T4197] ================================================================== [ 94.723202][ T4197] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12db/0x3b80 [ 94.731020][ T4197] Read of size 1 at addr ffff88807ed6ec01 by task kworker/u5:6/4197 [ 94.739012][ T4197] [ 94.741361][ T4197] CPU: 0 PID: 4197 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 94.748917][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 94.759063][ T4197] Workqueue: hci2 hci_rx_work [ 94.763750][ T4197] Call Trace: [ 94.767024][ T4197] [ 94.769959][ T4197] dump_stack_lvl+0x168/0x230 [ 94.774646][ T4197] ? show_regs_print_info+0x20/0x20 [ 94.779881][ T4197] ? load_image+0x3b0/0x3b0 [ 94.784405][ T4197] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 94.789784][ T4197] print_address_description+0x60/0x2d0 [ 94.795333][ T4197] ? hci_le_meta_evt+0x12db/0x3b80 [ 94.800458][ T4197] kasan_report+0xdf/0x130 [ 94.804897][ T4197] ? hci_le_meta_evt+0x12db/0x3b80 [ 94.810013][ T4197] hci_le_meta_evt+0x12db/0x3b80 [ 94.814957][ T4197] ? hci_event_packet+0x2a0/0x12f0 [ 94.820093][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 94.826190][ T4197] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 94.831858][ T4197] ? mark_lock+0x94/0x320 [ 94.836205][ T4197] ? mutex_unlock+0x10/0x10 [ 94.840711][ T4197] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 94.846696][ T4197] ? lock_chain_count+0x20/0x20 [ 94.851572][ T4197] ? __rwlock_init+0x140/0x140 [ 94.856334][ T4197] hci_event_packet+0xe05/0x12f0 [ 94.861272][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 94.866473][ T4197] ? rcu_lock_release+0x20/0x20 [ 94.871329][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 94.876527][ T4197] hci_rx_work+0x255/0xa10 [ 94.880953][ T4197] process_one_work+0x863/0x1000 [ 94.885899][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 94.891548][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 94.896857][ T4197] ? _raw_spin_lock_irq+0xab/0xe0 [ 94.901885][ T4197] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 94.907259][ T4197] ? wq_worker_running+0x97/0x170 [ 94.912289][ T4197] worker_thread+0xaa8/0x12a0 [ 94.916973][ T4197] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 94.922878][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 94.928101][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 94.933302][ T4197] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 94.939203][ T4197] kthread+0x436/0x520 [ 94.943269][ T4197] ? rcu_lock_release+0x20/0x20 [ 94.948117][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 94.952716][ T4197] ret_from_fork+0x1f/0x30 [ 94.957148][ T4197] [ 94.960173][ T4197] [ 94.962489][ T4197] Allocated by task 4683: [ 94.966806][ T4197] __kasan_kmalloc+0xb5/0xf0 [ 94.971392][ T4197] __alloc_skb+0x22c/0x750 [ 94.975807][ T4197] vhci_write+0xbc/0x450 [ 94.980048][ T4197] vfs_write+0x712/0xd00 [ 94.984289][ T4197] ksys_write+0x14d/0x250 [ 94.988615][ T4197] do_syscall_64+0x4c/0xa0 [ 94.993031][ T4197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.998924][ T4197] [ 95.001246][ T4197] The buggy address belongs to the object at ffff88807ed6e800 [ 95.001246][ T4197] which belongs to the cache kmalloc-1k of size 1024 [ 95.015293][ T4197] The buggy address is located 1 bytes to the right of [ 95.015293][ T4197] 1024-byte region [ffff88807ed6e800, ffff88807ed6ec00) [ 95.028996][ T4197] The buggy address belongs to the page: [ 95.034626][ T4197] page:ffffea0001fb5a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807ed68800 pfn:0x7ed68 [ 95.046075][ T4197] head:ffffea0001fb5a00 order:3 compound_mapcount:0 compound_pincount:0 [ 95.054392][ T4197] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 95.062372][ T4197] raw: 00fff00000010200 ffffea0001f91800 0000000700000007 ffff888016841dc0 [ 95.071068][ T4197] raw: ffff88807ed68800 0000000080100008 00000001ffffffff 0000000000000000 [ 95.079643][ T4197] page dumped because: kasan: bad access detected [ 95.086067][ T4197] page_owner tracks the page as allocated [ 95.091780][ T4197] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4295, ts 67791205361, free_ts 67770422781 [ 95.110316][ T4197] get_page_from_freelist+0x1b77/0x1c60 [ 95.115867][ T4197] __alloc_pages+0x1e1/0x470 [ 95.120453][ T4197] new_slab+0xc0/0x4b0 [ 95.124529][ T4197] ___slab_alloc+0x81e/0xdf0 [ 95.129133][ T4197] __kmalloc+0x1cd/0x330 [ 95.133391][ T4197] ieee802_11_parse_elems_crc+0xab/0x10c0 [ 95.139129][ T4197] ieee80211_ibss_rx_queued_mgmt+0x369/0x29c0 [ 95.145190][ T4197] ieee80211_iface_work+0x70e/0xc60 [ 95.150547][ T4197] process_one_work+0x863/0x1000 [ 95.155490][ T4197] worker_thread+0xaa8/0x12a0 [ 95.160165][ T4197] kthread+0x436/0x520 [ 95.164227][ T4197] ret_from_fork+0x1f/0x30 [ 95.168643][ T4197] page last free stack trace: [ 95.173307][ T4197] free_unref_page_prepare+0x637/0x6c0 [ 95.178769][ T4197] free_unref_page+0x94/0x280 [ 95.183454][ T4197] __unfreeze_partials+0x1a5/0x200 [ 95.188560][ T4197] put_cpu_partial+0x12d/0x190 [ 95.193317][ T4197] qlist_free_all+0x35/0x90 [ 95.197819][ T4197] kasan_quarantine_reduce+0x150/0x160 [ 95.203292][ T4197] __kasan_slab_alloc+0x2f/0xd0 [ 95.208153][ T4197] slab_post_alloc_hook+0x4c/0x380 [ 95.213279][ T4197] kmem_cache_alloc_node+0x12d/0x2d0 [ 95.218562][ T4197] __alloc_skb+0xf4/0x750 [ 95.222889][ T4197] mld_newpack+0x12a/0xb90 [ 95.227300][ T4197] add_grhead+0x5a/0x240 [ 95.231542][ T4197] add_grec+0x1341/0x15d0 [ 95.235886][ T4197] mld_send_initial_cr+0xed/0x240 [ 95.240907][ T4197] mld_dad_work+0x41/0x270 [ 95.245316][ T4197] process_one_work+0x863/0x1000 [ 95.250251][ T4197] [ 95.252578][ T4197] Memory state around the buggy address: [ 95.258220][ T4197] ffff88807ed6eb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 95.266273][ T4197] ffff88807ed6eb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 95.274353][ T4197] >ffff88807ed6ec00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 95.282422][ T4197] ^ [ 95.286483][ T4197] ffff88807ed6ec80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 95.294536][ T4197] ffff88807ed6ed00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 95.302592][ T4197] ================================================================== [ 95.310660][ T4197] Disabling lock debugging due to kernel taint [ 95.326645][ T4259] usb 1-1: config 0 descriptor?? [ 95.335011][ T4197] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 95.342234][ T4197] CPU: 1 PID: 4197 Comm: kworker/u5:6 Tainted: G B syzkaller #0 [ 95.344366][ T4695] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 95.351174][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.368150][ T4197] Workqueue: hci2 hci_rx_work [ 95.372828][ T4197] Call Trace: [ 95.376098][ T4197] [ 95.379021][ T4197] dump_stack_lvl+0x168/0x230 [ 95.383695][ T4197] ? show_regs_print_info+0x20/0x20 [ 95.388896][ T4197] ? load_image+0x3b0/0x3b0 [ 95.393401][ T4197] panic+0x2c9/0x7f0 [ 95.397313][ T4197] ? bpf_jit_dump+0xd0/0xd0 [ 95.401815][ T4197] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 95.407702][ T4197] ? _raw_spin_unlock+0x40/0x40 [ 95.412549][ T4197] ? hci_le_meta_evt+0x12db/0x3b80 [ 95.417676][ T4197] check_panic_on_warn+0x80/0xa0 [ 95.422608][ T4197] ? hci_le_meta_evt+0x12db/0x3b80 [ 95.427711][ T4197] end_report+0x6d/0xf0 [ 95.431863][ T4197] kasan_report+0x102/0x130 [ 95.436358][ T4197] ? hci_le_meta_evt+0x12db/0x3b80 [ 95.441461][ T4197] hci_le_meta_evt+0x12db/0x3b80 [ 95.446391][ T4197] ? hci_event_packet+0x2a0/0x12f0 [ 95.451522][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 95.457583][ T4197] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 95.463215][ T4197] ? mark_lock+0x94/0x320 [ 95.467541][ T4197] ? mutex_unlock+0x10/0x10 [ 95.472040][ T4197] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 95.478029][ T4197] ? lock_chain_count+0x20/0x20 [ 95.482874][ T4197] ? __rwlock_init+0x140/0x140 [ 95.487632][ T4197] hci_event_packet+0xe05/0x12f0 [ 95.492567][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 95.497758][ T4197] ? rcu_lock_release+0x20/0x20 [ 95.502608][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 95.507800][ T4197] hci_rx_work+0x255/0xa10 [ 95.512213][ T4197] process_one_work+0x863/0x1000 [ 95.517151][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 95.522775][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 95.528056][ T4197] ? _raw_spin_lock_irq+0xab/0xe0 [ 95.533070][ T4197] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 95.538434][ T4197] ? wq_worker_running+0x97/0x170 [ 95.543466][ T4197] worker_thread+0xaa8/0x12a0 [ 95.548134][ T4197] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 95.554033][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 95.559323][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 95.564514][ T4197] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 95.570398][ T4197] kthread+0x436/0x520 [ 95.574452][ T4197] ? rcu_lock_release+0x20/0x20 [ 95.579291][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 95.583874][ T4197] ret_from_fork+0x1f/0x30 [ 95.588286][ T4197] [ 95.591612][ T4197] Kernel Offset: disabled [ 95.595950][ T4197] Rebooting in 86400 seconds..