last executing test programs: 7.488512441s ago: executing program 3 (id=90): syz_usb_connect(0x2, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="fa", 0x1}, {&(0x7f0000000080)="ea", 0x1}], 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae000034aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a9eee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"}) 6.354418391s ago: executing program 2 (id=97): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x8001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40186f40, &(0x7f0000000180)={0x8, 0x0, 0xe3f, 0x1, '\x00', 0x10003}) 6.242342651s ago: executing program 1 (id=99): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x8, 0x40}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xb}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x10000000, 0x2, 0x77}}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 5.846368361s ago: executing program 2 (id=101): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='0\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='dummy_udc.0\n', 0xc) 5.828018961s ago: executing program 1 (id=102): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, 0x0) syz_usb_disconnect(0xffffffffffffffff) readv(r1, &(0x7f0000000800), 0x0) futex(0x0, 0x207, 0x4, 0x0, 0x0, 0x1) 5.704312771s ago: executing program 2 (id=103): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240088c5}, 0x80) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 5.607388271s ago: executing program 2 (id=105): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80a00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(r3, &(0x7f0000000c80)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r2, 0x0) fchdir(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x2007ffb) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) close(0xffffffffffffffff) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) 4.722580541s ago: executing program 3 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0xc0104d08, 0x0) 4.722411791s ago: executing program 1 (id=108): syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240000007058402400000070502024000000705880240000007050602400000"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\x00', &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) 4.600138291s ago: executing program 2 (id=111): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000240)={0x20, 0x0, 0x4, "00024142"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000300)="abcd") pread64(r1, &(0x7f0000000100)=""/2, 0x2, 0xd000) 4.423918711s ago: executing program 3 (id=113): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2003, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.321677031s ago: executing program 0 (id=115): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000040)={0xb6, 0x0, 0x30d40}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d05, 0x0, 0x1}]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000200)=0x3) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000300)={0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000200)) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000300)={0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.237144681s ago: executing program 3 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=12544 wIndex=0 wLength=0\x00', 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r1, &(0x7f0000000180), 0x1000) 4.15987589s ago: executing program 3 (id=118): r0 = syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff000705810240000007058202400000070583024000000705840240000007058502400000070586024000000705870240000007050102400000070502024000000705030240000007050402400000070505024000000705060240000007050702400000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='devtmpfs\x00', &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000200)="01020304") syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000200)="01020304") syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000200)="01020304") 2.051363121s ago: executing program 4 (id=122): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) write(r0, 0x0, 0x12) 2.01578489s ago: executing program 0 (id=123): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000000) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 1.88654929s ago: executing program 4 (id=124): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x6}}}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001780)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xb}}]}}]}, 0x40}}, 0x4004415) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 1.87830602s ago: executing program 1 (id=125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x8, 0x40}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x10000000, 0x2, 0x77}}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 1.77976133s ago: executing program 4 (id=126): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@newtaction={0x50, 0x30, 0xa20, 0x70bd26, 0x25dfdbfd, {}, [{0x3c, 0x1, [@m_ipt={0x38, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0xd, 0x6, "3d0155179af52c2183"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x50}}, 0x40c1) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000004c0)=""/67, 0x43}, {&(0x7f0000000540)=""/172, 0x1d}], 0x2}, 0xd}], 0x1, 0x10, 0x0) 1.64876358s ago: executing program 0 (id=127): mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x2000002, 0x4000932, 0xffffffffffffffff, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93f8b25eabafa3997fcf0068bfdf4b6db2997a52846a38dac5a545e912cd6b4ced1fedd92c1fa0afab1c4ee981049fde0806bb84989a69b540d6910ca212cb9b5e65f99979c194938a9b13f2f5adf765d69aca3eb5a439537d7333352252c8b35a6361182331ce07c70ec53d713563d033d0de532272a01e00"/139, 0xf111973a6f6ab58}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b0800000000000000fa6303d4808d2b4955ecd0cfe25cd6425819161e305a8f387300895f1a75f5b7116d1e3ad0345ed0fc", 0x2}], 0x1}}], 0x3, 0x60cd894) 1.5368771s ago: executing program 1 (id=128): r0 = io_uring_setup(0xbcd, &(0x7f00000006c0)={0x0, 0x4513, 0x8, 0x2, 0x15c}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000c80)={0x0}, 0x1) 1.44998554s ago: executing program 4 (id=129): r0 = timerfd_create(0x8, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/101, 0x65}], 0x1) timerfd_settime(r0, 0x1, &(0x7f00000020c0)={{}, {0x0, 0x989680}}, 0x0) 1.33455049s ago: executing program 1 (id=130): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000380)={"1b00", 0x0, 0x5, 0x2, 0x0, 0x0, "f759e10000001000000000fc6300", '\x00', "0300", "e859ad13", ["8bada940edff000a00", "c2fed6000000006906528640", "000000ff0000000000000020", "0000000000000000000100"]}) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000480)={0xd, 0xfffffffffffffffa, 0xf, 0x0, 0x0, 0x0, "01e60000000000000034dbca9fe6083a", 0x0, 0x0, 0x0, 0xc4}) 1.33434599s ago: executing program 0 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=0 wIndex=0 wLength=0\x00', 0x36) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r1, &(0x7f0000000180), 0x1000) 1.29834207s ago: executing program 0 (id=132): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80a00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(r2, &(0x7f0000000c80)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) r5 = fsmount(r1, 0x1, 0x2) fchdir(r5) ftruncate(0xffffffffffffffff, 0x2007ffb) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) close(0xffffffffffffffff) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) 1.2591561s ago: executing program 4 (id=133): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x9c, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 522.42309ms ago: executing program 4 (id=134): dup(0xffffffffffffffff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000280)={0x4, 0x6}, 0x2) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) close_range(r0, 0xffffffffffffffff, 0x0) 522.24769ms ago: executing program 2 (id=135): mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000080)='-1\x00', 0x3) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 122.1877ms ago: executing program 3 (id=136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 0s ago: executing program 0 (id=137): r0 = fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='syz\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='dax\x00', &(0x7f00000000e0)='always\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./virtfs_dir\x00', 0x777) move_mount(0xffffffffffffff9c, &(0x7f00000001c0)='./virtfs_dir\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./virtfs_dir\x00', 0x0) mount(&(0x7f0000000240)=@filename='syz\x00', &(0x7f0000000280)='./virtfs_dir\x00', &(0x7f00000002c0)='virtiofs\x00', 0x0, &(0x7f0000000300)='dax\x00') mount(&(0x7f0000000340)=@filename='syz\x00', &(0x7f0000000380)='./virtfs_dir\x00', &(0x7f00000003c0)='virtiofs\x00', 0x0, &(0x7f0000000400)='dax=always\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.130' (ED25519) to the list of known hosts. [ 59.785946][ T4173] cgroup: Unknown subsys name 'net' [ 59.891091][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.308172][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.708986][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 62.743467][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 62.772591][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 62.826780][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 62.871680][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 62.888616][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.896493][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.904811][ T4194] device bridge_slave_0 entered promiscuous mode [ 62.930839][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.938145][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.946763][ T4194] device bridge_slave_1 entered promiscuous mode [ 62.999196][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.006414][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.014886][ T4187] device bridge_slave_0 entered promiscuous mode [ 63.028626][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.036567][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.044924][ T4187] device bridge_slave_1 entered promiscuous mode [ 63.070917][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.078116][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.086493][ T4188] device bridge_slave_0 entered promiscuous mode [ 63.099697][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.107342][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.115445][ T4188] device bridge_slave_1 entered promiscuous mode [ 63.125120][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.170964][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.180348][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.187552][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.196130][ T4186] device bridge_slave_0 entered promiscuous mode [ 63.210161][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.217424][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.225551][ T4186] device bridge_slave_1 entered promiscuous mode [ 63.234421][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.245473][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.257348][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.273129][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.280215][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.288240][ T4185] device bridge_slave_0 entered promiscuous mode [ 63.303061][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.330152][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.337295][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.345767][ T4185] device bridge_slave_1 entered promiscuous mode [ 63.374601][ T4194] team0: Port device team_slave_0 added [ 63.382396][ T4188] team0: Port device team_slave_0 added [ 63.396531][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.408185][ T4187] team0: Port device team_slave_0 added [ 63.415218][ T4188] team0: Port device team_slave_1 added [ 63.422272][ T4194] team0: Port device team_slave_1 added [ 63.429511][ T4187] team0: Port device team_slave_1 added [ 63.443947][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.478249][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.506685][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.513780][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.540182][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.553467][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.575423][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.582677][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.608997][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.620897][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.628724][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.655071][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.666974][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.674163][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.700279][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.718750][ T4186] team0: Port device team_slave_0 added [ 63.738298][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.745347][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.771405][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.783268][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.790223][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.816463][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.834411][ T4186] team0: Port device team_slave_1 added [ 63.842647][ T4185] team0: Port device team_slave_0 added [ 63.869771][ T4185] team0: Port device team_slave_1 added [ 63.891880][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.902155][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.928270][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.943587][ T4188] device hsr_slave_0 entered promiscuous mode [ 63.950262][ T4188] device hsr_slave_1 entered promiscuous mode [ 63.976999][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.984337][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.010422][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.047162][ T4194] device hsr_slave_0 entered promiscuous mode [ 64.053888][ T4194] device hsr_slave_1 entered promiscuous mode [ 64.060533][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.068773][ T4194] Cannot create hsr debugfs directory [ 64.090946][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.098073][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.124126][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.139345][ T4187] device hsr_slave_0 entered promiscuous mode [ 64.146448][ T4187] device hsr_slave_1 entered promiscuous mode [ 64.153461][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.161040][ T4187] Cannot create hsr debugfs directory [ 64.195523][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.202777][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.228803][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.283143][ T4185] device hsr_slave_0 entered promiscuous mode [ 64.289868][ T4185] device hsr_slave_1 entered promiscuous mode [ 64.296938][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.304596][ T4185] Cannot create hsr debugfs directory [ 64.370211][ T4186] device hsr_slave_0 entered promiscuous mode [ 64.377486][ T4186] device hsr_slave_1 entered promiscuous mode [ 64.384498][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.392077][ T4186] Cannot create hsr debugfs directory [ 64.402930][ T4192] Bluetooth: hci4: command 0x0409 tx timeout [ 64.402930][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 64.404430][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 64.421600][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 64.482371][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 64.652701][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.663205][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.683277][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.692862][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.742156][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.763485][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.778285][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.791464][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.828641][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.850245][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.860169][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.897971][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.921821][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.958903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.969289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.980843][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.002259][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.044232][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.058202][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.066603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.075704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.086498][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.093877][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.103246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.111936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.120941][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.128084][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.139205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.148053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.161277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.170939][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.186596][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.196883][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.213062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.221954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.231402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.240133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.249030][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.259204][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.270018][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.279417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.289312][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.314070][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.325027][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.338737][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.349682][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.358751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.368432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.377213][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.384318][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.392241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.400664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.410036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.418689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.428497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.436734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.446590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.456563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.466110][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.473261][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.490332][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.506858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.541848][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.560834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.569003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.578950][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.588267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.599138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.608848][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.615960][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.630422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.640417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.651417][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.658538][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.666845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.706503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.721027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.737131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.750374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.765709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.777481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.787062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.797425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.806465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.816294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.825554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.833819][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.859694][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.891730][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.900314][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.913859][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.929542][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.938335][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.947007][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.955638][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.964211][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.971623][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.980489][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.997361][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.017013][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.083321][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.095881][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.123773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.142032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.158406][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.173731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.181846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.208278][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.231248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.240813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.257022][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.264156][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.274786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.288190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.299888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.312034][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.319238][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.334467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.359002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.373360][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.380524][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.432208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.440205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.454644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.463796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.471205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.480361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.488700][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 66.493015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.496241][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 66.507480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.518126][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 66.518870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.528099][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 66.534369][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.545763][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.554000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.562657][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 66.563359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.578852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.597936][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.620880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.639024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.650241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.661280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.671699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.680731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.689707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.699057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.707934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.715728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.723656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.732391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.748308][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.763900][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.784375][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.795398][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.807191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.820698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.830253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.846171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.858483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.930767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.940155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.956156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.975040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.988053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.004842][ T4188] device veth0_vlan entered promiscuous mode [ 67.019545][ T4188] device veth1_vlan entered promiscuous mode [ 67.029105][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.045468][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.059004][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.067767][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.075870][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.100860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.112340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.121476][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.133472][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.157984][ T4185] device veth0_vlan entered promiscuous mode [ 67.169627][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.178847][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.193246][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.201933][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.216229][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.241487][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.255565][ T4188] device veth0_macvtap entered promiscuous mode [ 67.274972][ T4194] device veth0_vlan entered promiscuous mode [ 67.281616][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.291661][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.301420][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.310107][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.321982][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.330822][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.339210][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.348108][ T4185] device veth1_vlan entered promiscuous mode [ 67.357762][ T4188] device veth1_macvtap entered promiscuous mode [ 67.377281][ T4194] device veth1_vlan entered promiscuous mode [ 67.414436][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.423620][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.431746][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.440483][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.449564][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.458514][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.468200][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.480253][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.488043][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.501322][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.524807][ T4187] device veth0_vlan entered promiscuous mode [ 67.535857][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.545011][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.554878][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.564025][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.575442][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.583672][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.591315][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.600231][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.613437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.621904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.635861][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.647598][ T4187] device veth1_vlan entered promiscuous mode [ 67.656027][ T4194] device veth0_macvtap entered promiscuous mode [ 67.666570][ T4185] device veth0_macvtap entered promiscuous mode [ 67.674968][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.684436][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.692788][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.700992][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.710961][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.722902][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.731728][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.740991][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.751330][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.774675][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.786858][ T4185] device veth1_macvtap entered promiscuous mode [ 67.801537][ T4194] device veth1_macvtap entered promiscuous mode [ 67.827558][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.836957][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.846291][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.854839][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.864735][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.884694][ T4187] device veth0_macvtap entered promiscuous mode [ 67.904414][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.913295][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.922035][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.944580][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.955809][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.970918][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.980177][ T4187] device veth1_macvtap entered promiscuous mode [ 67.998426][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.008346][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.025926][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.037167][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.048506][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.056325][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.067751][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.077931][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.089264][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.100730][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.122552][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.131231][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.149737][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.158499][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.168774][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.177635][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.186286][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.195118][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.210514][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.221967][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.234556][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.245244][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.255731][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.267016][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.278073][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.286987][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.298451][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.309412][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.319874][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.331376][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.340483][ T4186] device veth0_vlan entered promiscuous mode [ 68.368621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.377457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.386687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.395855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.407212][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.419040][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.429003][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.440584][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.450539][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.461189][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.473193][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.482456][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.491260][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.500853][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.509821][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.527451][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.536642][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.545936][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.554793][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.563556][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 68.563653][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 68.563767][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 68.563850][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 68.596155][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.605358][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.616391][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.625414][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.634576][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.643420][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 68.650445][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.677452][ T4186] device veth1_vlan entered promiscuous mode [ 68.687942][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.698694][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.742591][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.750596][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.761305][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.769277][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.779797][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.827664][ T4186] device veth0_macvtap entered promiscuous mode [ 68.857412][ T4186] device veth1_macvtap entered promiscuous mode [ 68.906158][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.914869][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.928335][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.940146][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.947920][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.952732][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.961035][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.976675][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.987182][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.997853][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.010991][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.021504][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.033206][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.051185][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.069291][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.077933][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.086577][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.094802][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.104465][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.116313][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.129525][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.141739][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.153716][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.164170][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.174644][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.185024][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.195899][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.206790][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.217967][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.230614][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.250444][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.267584][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.278414][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.305297][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.315280][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.324813][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.337488][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.358392][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.382438][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.406222][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.418104][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.427493][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.451243][ T4266] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 69.488273][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.498758][ T4266] CIFS: Attempting to mount \\127.0.0.1\share [ 69.516551][ T4266] CIFS: VFS: Error connecting to socket. Aborting operation. [ 69.532962][ T4266] CIFS: VFS: cifs_mount failed w/return code = -111 [ 69.534199][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.559537][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.587043][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.625860][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.692163][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.724577][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.753065][ T4270] size and base must be multiples of 4 kiB [ 69.758962][ T4270] CPU: 1 PID: 4270 Comm: syz.3.4 Not tainted syzkaller #0 [ 69.766099][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 69.776205][ T4270] Call Trace: [ 69.779505][ T4270] [ 69.782494][ T4270] dump_stack_lvl+0x188/0x250 [ 69.787238][ T4270] ? show_regs_print_info+0x20/0x20 [ 69.792487][ T4270] ? load_image+0x410/0x410 [ 69.797061][ T4270] ? __might_fault+0xb3/0x110 [ 69.801773][ T4270] mtrr_del+0x81/0xb0 [ 69.805808][ T4270] mtrr_ioctl+0x998/0x1140 [ 69.810260][ T4270] ? mtrr_close+0x1f0/0x1f0 [ 69.814815][ T4270] ? mtrr_close+0x1f0/0x1f0 [ 69.819354][ T4270] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 69.824857][ T4270] ? proc_reg_poll+0x280/0x280 [ 69.829653][ T4270] __se_sys_ioctl+0xfa/0x170 [ 69.834269][ T4270] do_syscall_64+0x4c/0xa0 [ 69.838708][ T4270] ? clear_bhb_loop+0x30/0x80 [ 69.843421][ T4270] ? clear_bhb_loop+0x30/0x80 [ 69.848128][ T4270] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.854069][ T4270] RIP: 0033:0x7f45f2d9ae99 [ 69.858528][ T4270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.878173][ T4270] RSP: 002b:00007f45f0ff3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.886637][ T4270] RAX: ffffffffffffffda RBX: 00007f45f3022fa0 RCX: 00007f45f2d9ae99 [ 69.894641][ T4270] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000003 [ 69.902644][ T4270] RBP: 00007f45f2e30eaf R08: 0000000000000000 R09: 0000000000000000 [ 69.910641][ T4270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.916418][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.918636][ T4270] R13: 00007f45f3023038 R14: 00007f45f3022fa0 R15: 00007ffda5a4bb68 [ 69.934498][ T4270] [ 69.974652][ T4272] libceph: Failed to parse secret: -22 [ 69.981334][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.042571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.100745][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.114182][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.147073][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.166955][ T4275] scsi_dev_info_list_add_str: bad dev info string 'vendor;model' 'fl' '(null)' [ 70.437509][ T4287] file system registered [ 70.500496][ T4287] read descriptors [ 70.621027][ T4187] ffs_data_put(): freeing [ 70.642830][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 70.652361][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 70.669044][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 70.685611][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 70.728026][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 70.778663][ T4300] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15'. [ 70.814476][ T4300] Zero length message leads to an empty skb [ 70.826908][ T4301] device syzkaller0 entered promiscuous mode [ 71.206350][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.206515][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.231422][ T4316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'. [ 71.278775][ T4316] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 71.320128][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.340272][ T4316] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 71.692493][ T1108] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.863907][ T1108] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 71.888730][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.905443][ T1108] usb 4-1: Product: syz [ 71.919951][ T1108] usb 4-1: Manufacturer: syz [ 71.926079][ T1108] usb 4-1: SerialNumber: syz [ 71.995794][ T1108] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 72.021460][ T1108] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 87 [ 72.049492][ T1108] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 72.068194][ T1108] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 72.077571][ T4332] MTRR 1 not used [ 72.098565][ T1108] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 82 [ 72.134061][ T1108] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 72.157618][ T1108] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 72.186426][ T1108] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 85 [ 72.228299][ T1108] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 5 [ 72.263366][ T1108] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 72.322807][ T1108] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 83 [ 72.344407][ T1108] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 72.362322][ T1108] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 3 [ 72.369950][ T1108] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 4 [ 72.408713][ T1108] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 86 [ 72.525778][ T4346] using random self ethernet address [ 72.609917][ T4346] using random host ethernet address [ 73.233065][ T1108] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 73.267677][ T1108] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 73.293609][ T1108] usb 4-1: USB disconnect, device number 2 [ 73.333267][ T1108] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 73.356231][ T1108] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 73.368906][ T1108] keyspan 4-1:1.0: device disconnected [ 73.510980][ T4366] autofs4:pid:4366:autofs_fill_super: called with bogus options [ 73.589082][ T4362] device tunl0 entered promiscuous mode [ 73.617423][ T4362] netlink: 'syz.2.34': attribute type 4 has an invalid length. [ 73.646791][ T4362] netlink: 9 bytes leftover after parsing attributes in process `syz.2.34'. [ 73.882255][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.933590][ T4376] loop3: detected capacity change from 0 to 32768 [ 74.011957][ T4376] loop3: p1 p2 p3 < p5 p6 p7 > [ 74.031312][ T4376] loop3: p2 size 16775168 extends beyond EOD, truncated [ 74.052251][ T23] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 74.065852][ T4376] loop3: p5 start 4294970168 is beyond EOD, truncated [ 74.122397][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 74.282426][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 74.429432][ T4383] ODEBUG: Out of memory. ODEBUG disabled [ 74.502432][ T23] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 74.511475][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 74.513400][ T23] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD4, skipping [ 74.531425][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 74.546616][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 74.556638][ T7] usb 2-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 74.571766][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 74.572423][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.593257][ T4386] udevd[4386]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 74.599825][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.615002][ T7] usb 2-1: Product: syz [ 74.620208][ T7] usb 2-1: Manufacturer: syz [ 74.625416][ T7] usb 2-1: SerialNumber: syz [ 74.782411][ T23] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 74.796182][ T23] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3 [ 74.813288][ T23] usb 3-1: Manufacturer: syz [ 74.822821][ T23] usb 3-1: SerialNumber: syz [ 74.849901][ T23] usb 3-1: config 0 descriptor?? [ 74.882545][ T4374] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 74.998850][ T7] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 75.103151][ T7] usb 2-1: unit 37 not found! [ 75.110492][ T7] usb 2-1: unit 0 not found! [ 75.355736][ T1108] usb 3-1: USB disconnect, device number 2 [ 75.856485][ T7] usb 2-1: USB disconnect, device number 2 [ 76.685816][ T26] audit: type=1800 audit(1785177794.089:2): pid=4399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.48" name="c_ssize" dev="configfs" ino=33300 res=0 errno=0 [ 76.825194][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.085389][ T4424] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 77.092167][ T4424] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 77.152918][ T4424] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 77.159329][ T4424] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 77.199289][ T4429] Config c/1 of g1 needs at least one function. [ 77.233591][ T4429] udc dummy_udc.0: failed to start g1: -22 [ 77.337560][ T4424] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 77.344058][ T4424] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 77.483911][ T4424] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 77.490390][ T4424] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 77.547202][ T4438] No source specified [ 77.610468][ T4424] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 77.617092][ T4424] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 77.957852][ T4440] read descriptors [ 79.319391][ T4187] ffs_data_put(): freeing [ 79.332829][ T4197] Bluetooth: Wrong link type (-22) [ 79.481644][ T4450] intel_xhci_usb_sw: probe of pcspkr failed with error -22 [ 79.974982][ T4468] FAULT_INJECTION: forcing a failure. [ 79.974982][ T4468] name failslab, interval 1, probability 1, space 0, times 1 [ 79.976645][ T3558] FAULT_INJECTION: forcing a failure. [ 79.976645][ T3558] name failslab, interval 1, probability 1, space 0, times 1 [ 80.001034][ T23] FAULT_INJECTION: forcing a failure. [ 80.001034][ T23] name failslab, interval 1, probability 1, space 0, times 1 [ 80.014084][ T23] CPU: 1 PID: 23 Comm: kworker/1:1 Not tainted syzkaller #0 [ 80.021415][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 80.031493][ T23] Workqueue: events nsim_dev_trap_report_work [ 80.037591][ T23] Call Trace: [ 80.040889][ T23] [ 80.043835][ T23] dump_stack_lvl+0x188/0x250 [ 80.048557][ T23] ? show_regs_print_info+0x20/0x20 [ 80.053808][ T23] ? load_image+0x410/0x410 [ 80.058207][ T4228] FAULT_INJECTION: forcing a failure. [ 80.058207][ T4228] name failslab, interval 1, probability 1, space 0, times 1 [ 80.058353][ T23] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 80.076936][ T23] ? prandom_u32+0x217/0x250 [ 80.081562][ T23] should_fail+0x383/0x4b0 [ 80.086006][ T23] should_failslab+0x5/0x20 [ 80.090556][ T23] slab_pre_alloc_hook+0x51/0xc0 [ 80.095515][ T23] kmem_cache_alloc_node+0x47/0x2c0 [ 80.100770][ T23] ? __alloc_skb+0xf4/0x750 [ 80.105300][ T23] __alloc_skb+0xf4/0x750 [ 80.109661][ T23] nsim_dev_trap_report_work+0x25c/0xab0 [ 80.115324][ T23] process_one_work+0x867/0xff0 [ 80.120210][ T23] ? worker_detach_from_pool+0x240/0x240 [ 80.125854][ T23] ? lockdep_hardirqs_off+0x70/0x100 [ 80.131195][ T23] ? _raw_spin_lock_irq+0xb7/0xf0 [ 80.136238][ T23] ? _raw_spin_lock_irqsave+0x100/0x100 [ 80.141810][ T23] ? wq_worker_running+0x97/0x170 [ 80.146853][ T23] worker_thread+0xad7/0x12a0 [ 80.151578][ T23] kthread+0x42e/0x520 [ 80.155655][ T23] ? rcu_lock_release+0x20/0x20 [ 80.160520][ T23] ? kthread_blkcg+0xd0/0xd0 [ 80.165131][ T23] ret_from_fork+0x1f/0x30 [ 80.169567][ T23] [ 80.172593][ T4228] CPU: 0 PID: 4228 Comm: kworker/0:3 Not tainted syzkaller #0 [ 80.180081][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 80.190167][ T4228] Workqueue: events nsim_dev_trap_report_work [ 80.196271][ T4228] Call Trace: [ 80.199568][ T4228] [ 80.202535][ T4228] dump_stack_lvl+0x188/0x250 [ 80.207244][ T4228] ? show_regs_print_info+0x20/0x20 [ 80.212472][ T4228] ? load_image+0x410/0x410 [ 80.217001][ T4228] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 80.223009][ T4228] ? prandom_u32+0x217/0x250 [ 80.227715][ T4228] should_fail+0x383/0x4b0 [ 80.232200][ T4228] should_failslab+0x5/0x20 [ 80.236734][ T4228] slab_pre_alloc_hook+0x51/0xc0 [ 80.241864][ T4228] kmem_cache_alloc_node+0x47/0x2c0 [ 80.247085][ T4228] ? __alloc_skb+0xf4/0x750 [ 80.251619][ T4228] __alloc_skb+0xf4/0x750 [ 80.255993][ T4228] nsim_dev_trap_report_work+0x25c/0xab0 [ 80.261693][ T4228] process_one_work+0x867/0xff0 [ 80.266585][ T4228] ? worker_detach_from_pool+0x240/0x240 [ 80.272279][ T4228] ? lockdep_hardirqs_off+0x70/0x100 [ 80.277591][ T4228] ? _raw_spin_lock_irq+0xb7/0xf0 [ 80.282643][ T4228] ? _raw_spin_lock_irqsave+0x100/0x100 [ 80.288209][ T4228] ? wq_worker_running+0x97/0x170 [ 80.293263][ T4228] worker_thread+0xad7/0x12a0 [ 80.297979][ T4228] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 80.303913][ T4228] kthread+0x42e/0x520 [ 80.308030][ T4228] ? rcu_lock_release+0x20/0x20 [ 80.312900][ T4228] ? kthread_blkcg+0xd0/0xd0 [ 80.317504][ T4228] ret_from_fork+0x1f/0x30 [ 80.321946][ T4228] [ 80.331627][ T4468] CPU: 1 PID: 4468 Comm: syz.1.68 Not tainted syzkaller #0 [ 80.338885][ T4468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 80.348970][ T4468] Call Trace: [ 80.352281][ T4468] [ 80.355238][ T4468] dump_stack_lvl+0x188/0x250 [ 80.359949][ T4468] ? show_regs_print_info+0x20/0x20 [ 80.365190][ T4468] ? load_image+0x410/0x410 [ 80.369733][ T4468] ? prandom_u32+0x217/0x250 [ 80.374351][ T4468] should_fail+0x383/0x4b0 [ 80.378844][ T4468] ? fops_size_t_wo_open+0x30/0x30 [ 80.383993][ T4468] ? debugfs_atomic_t_get+0x80/0x80 [ 80.389226][ T4468] should_failslab+0x5/0x20 [ 80.393752][ T4468] slab_pre_alloc_hook+0x51/0xc0 [ 80.398738][ T4468] ? fops_size_t_wo_open+0x30/0x30 [ 80.403892][ T4468] kmem_cache_alloc_trace+0x47/0x290 [ 80.409192][ T4468] ? simple_attr_open+0x5e/0x180 [ 80.414281][ T4468] ? fops_size_t_wo_open+0x30/0x30 [ 80.419418][ T4468] ? debugfs_atomic_t_get+0x80/0x80 [ 80.424639][ T4468] ? fops_atomic_t_open+0x40/0x40 [ 80.429681][ T4468] simple_attr_open+0x5e/0x180 [ 80.434476][ T4468] ? fops_size_t_wo_open+0x30/0x30 [ 80.439636][ T4468] open_proxy_open+0x2ec/0x4b0 [ 80.444433][ T4468] ? debugfs_file_put+0xb0/0xb0 [ 80.449312][ T4468] do_dentry_open+0x7f7/0xf90 [ 80.454034][ T4468] ? vfs_open+0x2b/0x80 [ 80.458240][ T4468] path_openat+0x2718/0x2fb0 [ 80.460131][ T4474] MPTCP: addr_signal error, add_addr=1, echo=0 [ 80.462879][ T4468] ? __kasan_slab_alloc+0xa9/0xc0 [ 80.462912][ T4468] ? do_filp_open+0x400/0x400 [ 80.462949][ T4468] do_filp_open+0x1df/0x400 [ 80.483702][ T4468] ? vfs_tmpfile+0x300/0x300 [ 80.488339][ T4468] ? _raw_spin_unlock+0x24/0x40 [ 80.493226][ T4468] ? alloc_fd+0x59e/0x650 [ 80.497593][ T4468] do_sys_openat2+0x14b/0x500 [ 80.502298][ T4468] ? __lock_acquire+0x7b50/0x7b50 [ 80.507353][ T4468] ? do_sys_open+0xe0/0xe0 [ 80.511808][ T4468] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 80.517840][ T4468] ? lock_chain_count+0x20/0x20 [ 80.522736][ T4468] __x64_sys_openat+0x135/0x160 [ 80.527617][ T4468] do_syscall_64+0x4c/0xa0 [ 80.532062][ T4468] ? clear_bhb_loop+0x30/0x80 [ 80.536767][ T4468] ? clear_bhb_loop+0x30/0x80 [ 80.541498][ T4468] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.547418][ T4468] RIP: 0033:0x7fca805ece99 [ 80.551859][ T4468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.571594][ T4468] RSP: 002b:00007fca7e845028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 80.580041][ T4468] RAX: ffffffffffffffda RBX: 00007fca80874fa0 RCX: 00007fca805ece99 [ 80.588049][ T4468] RDX: 0000000000000001 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 80.596047][ T4468] RBP: 00007fca80682eaf R08: 0000000000000000 R09: 0000000000000000 [ 80.604062][ T4468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.612066][ T4468] R13: 00007fca80875038 R14: 00007fca80874fa0 R15: 00007ffe5d662cf8 [ 80.620080][ T4468] [ 80.624941][ T3558] CPU: 1 PID: 3558 Comm: udevd Not tainted syzkaller #0 [ 80.631918][ T3558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 80.642001][ T3558] Call Trace: [ 80.645405][ T3558] [ 80.648372][ T3558] dump_stack_lvl+0x188/0x250 [ 80.653093][ T3558] ? show_regs_print_info+0x20/0x20 [ 80.658322][ T3558] ? load_image+0x410/0x410 [ 80.662859][ T3558] ? prandom_u32+0x217/0x250 [ 80.667498][ T3558] should_fail+0x383/0x4b0 [ 80.671944][ T3558] should_failslab+0x5/0x20 [ 80.676482][ T3558] slab_pre_alloc_hook+0x51/0xc0 [ 80.681471][ T3558] ? getname_flags+0xb7/0x4f0 [ 80.686188][ T3558] kmem_cache_alloc+0x3d/0x280 [ 80.690987][ T3558] getname_flags+0xb7/0x4f0 [ 80.695532][ T3558] user_path_at_empty+0x2a/0x190 [ 80.700496][ T3558] do_readlinkat+0xd9/0x490 [ 80.705052][ T3558] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 80.711084][ T3558] ? cp_new_stat+0x540/0x540 [ 80.715697][ T3558] ? lock_chain_count+0x20/0x20 [ 80.720575][ T3558] __x64_sys_readlink+0x7b/0x90 [ 80.725459][ T3558] do_syscall_64+0x4c/0xa0 [ 80.729899][ T3558] ? clear_bhb_loop+0x30/0x80 [ 80.734595][ T3558] ? clear_bhb_loop+0x30/0x80 [ 80.739306][ T3558] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.745222][ T3558] RIP: 0033:0x7f1f4f5d53a7 [ 80.749659][ T3558] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 80.769280][ T3558] RSP: 002b:00007ffc001d9db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 80.777719][ T3558] RAX: ffffffffffffffda RBX: 00007ffc001da290 RCX: 00007f1f4f5d53a7 [ 80.785735][ T3558] RDX: 0000000000000400 RSI: 00007ffc001d9dc0 RDI: 00007ffc001da290 [ 80.793717][ T3558] RBP: 00007ffc001d9dc0 R08: 00c0feff00000000 R09: 0000000000000000 [ 80.801958][ T3558] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000400 [ 80.809935][ T3558] R13: 000055ad7e693100 R14: 0000000000000000 R15: 00007ffc001dacb0 [ 80.817934][ T3558] [ 80.884940][ T4414] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.893059][ T4414] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.095711][ T4231] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 81.490109][ T4231] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 81.806001][ T4481] ceph: No mds server is up or the cluster is laggy [ 81.989737][ T4495] netlink: 'syz.1.79': attribute type 1 has an invalid length. [ 81.998027][ T4495] netlink: 'syz.1.79': attribute type 2 has an invalid length. [ 82.071547][ T4414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.112614][ T4414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.642674][ T4414] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.651616][ T4414] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.696684][ T4414] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.705914][ T4414] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.884868][ T4414] syz.4.52 (4414) used greatest stack depth: 20192 bytes left [ 82.924540][ T4503] device syzkaller0 entered promiscuous mode [ 83.043010][ T4228] Bluetooth: hci0: command 0x0401 tx timeout [ 84.202310][ T4550] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.262312][ T21] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 84.327885][ T4558] ubi8: attaching mtd0 [ 84.364303][ T4558] ubi8: scanning is finished [ 84.369023][ T4558] ubi8: empty MTD device detected [ 84.545146][ T4558] ubi8: attached mtd0 (name "mtdram test device", size 0 MiB) [ 84.559945][ T4565] device syzkaller0 entered promiscuous mode [ 84.560448][ T4558] ubi8: PEB size: 4096 bytes (4 KiB), LEB size: 385 bytes [ 84.578988][ T4558] ubi8: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 84.587532][ T4558] ubi8: VID header offset: 3647 (aligned 3647), data offset: 3711 [ 84.616139][ T4558] ubi8: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 84.639631][ T4558] ubi8: user volume: 0, internal volumes: 1, max. volumes count: 2 [ 84.658500][ T4558] ubi8: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 308368237 [ 84.672144][ T21] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 84.689853][ T21] usb 4-1: config 0 has no interface number 0 [ 84.696167][ T21] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 84.712515][ T4558] ubi8: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 84.727593][ T21] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 84.740365][ T4567] ubi8: background thread "ubi_bgt8d" started, PID 4567 [ 84.756514][ T21] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 84.775217][ T21] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 84.786938][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.822210][ T21] usb 4-1: config 0 descriptor?? [ 84.852659][ T4538] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 84.897939][ T21] ldusb 4-1:0.55: Interrupt in endpoint not found [ 84.936280][ T4571] udc dummy_udc.0: failed to start g1: -19 [ 85.111234][ T4233] usb 4-1: USB disconnect, device number 3 [ 85.523624][ T4556] syz.4.95 (4556): drop_caches: 2 [ 86.257638][ T4598] device syzkaller0 entered promiscuous mode [ 86.311800][ T4600] read descriptors [ 86.312641][ T21] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 86.345748][ T26] audit: type=1800 audit(1785177803.749:3): pid=4602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.113" name="dummy_udc" dev="gadgetfs" ino=32288 res=0 errno=0 [ 86.409530][ T4194] ffs_data_put(): freeing [ 86.422265][ T4501] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.573954][ T1111] cfg80211: failed to load regulatory.db [ 86.682380][ T21] usb 2-1: not running at top speed; connect to a high speed hub [ 86.802494][ T21] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 86.812950][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.874235][ T21] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 86.902282][ T4233] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 87.002240][ T4501] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 87.282658][ T4233] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 87.317046][ T4233] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 87.376401][ T4233] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 87.445659][ T4233] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 87.508279][ T4233] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 87.566796][ T4233] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 87.628859][ T4233] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 87.700845][ T4233] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 87.760352][ T4233] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 87.820891][ T4233] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 87.879770][ T4233] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 87.940090][ T4233] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 87.998634][ T4233] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 88.063303][ T4233] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 88.282666][ T4233] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 88.343163][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.404243][ T4233] usb 4-1: Product: syz [ 88.431505][ T4233] usb 4-1: Manufacturer: syz [ 88.458886][ T4233] usb 4-1: SerialNumber: syz [ 88.499580][ T4501] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.508189][ T21] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 88.516674][ T4501] usb 3-1: Product: syz [ 88.521836][ T4501] usb 3-1: Manufacturer: syz [ 88.526827][ T4501] usb 3-1: SerialNumber: syz [ 88.542671][ T21] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 88.562919][ T21] usb 2-1: USB disconnect, device number 3 [ 88.572488][ T4613] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 88.580822][ T4613] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 88.599119][ T21] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 88.626999][ T21] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 88.652296][ T4613] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 88.662486][ T21] keyspan 2-1:1.0: device disconnected [ 88.696994][ T4613] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 88.739429][ T4613] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 88.762283][ T4613] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 88.783208][ T4613] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 88.811137][ T4501] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 88.831198][ T4626] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.123'. [ 88.832498][ T4613] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 88.918879][ T4613] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 88.961907][ T4613] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 88.980952][ T4613] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 89.015648][ T4613] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 89.031866][ T4613] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 89.049182][ T4613] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 89.076835][ T4636] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.097148][ T4233] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 89.139154][ T4233] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 89.164080][ T4233] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 89.224009][ T4229] usb 3-1: USB disconnect, device number 3 [ 89.299493][ T4229] usblp0: removed [ 89.662331][ T4233] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 89.710710][ T4264] usb 4-1: USB disconnect, device number 4 [ 90.101537][ T4264] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 90.323401][ T4264] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 90.498784][ T4264] keyspan 4-1:1.0: device disconnected [ 90.754255][ T4662] ================================================================== [ 90.762595][ T4662] BUG: KASAN: use-after-free in __nft_trace_packet+0x135/0x150 [ 90.770224][ T4662] Read of size 2 at addr ffff88802acc7e40 by task syz.3.136/4662 [ 90.777964][ T4662] [ 90.780309][ T4662] CPU: 1 PID: 4662 Comm: syz.3.136 Not tainted syzkaller #0 [ 90.787623][ T4662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 90.797703][ T4662] Call Trace: [ 90.801043][ T4662] [ 90.803993][ T4662] dump_stack_lvl+0x188/0x250 [ 90.808705][ T4662] ? show_regs_print_info+0x20/0x20 [ 90.813926][ T4662] ? _printk+0xda/0x130 [ 90.818119][ T4662] ? __nft_trace_packet+0x135/0x150 [ 90.823347][ T4662] ? load_image+0x410/0x410 [ 90.827895][ T4662] print_address_description+0x60/0x2d0 [ 90.833474][ T4662] ? __nft_trace_packet+0x135/0x150 [ 90.838746][ T4662] kasan_report+0xdf/0x130 [ 90.843198][ T4662] ? __nft_trace_packet+0x135/0x150 [ 90.848433][ T4662] __nft_trace_packet+0x135/0x150 [ 90.853490][ T4662] nft_do_chain+0x1299/0x14d0 [ 90.858208][ T4662] ? ipt_do_table+0x130b/0x1510 [ 90.863137][ T4662] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 90.869115][ T4662] ? nf_nat_inet_fn+0x8a0/0xad0 [ 90.874021][ T4662] nft_do_chain_inet+0x25c/0x340 [ 90.878999][ T4662] ? nft_do_chain_arp+0xf0/0xf0 [ 90.883890][ T4662] ? nf_nat_ipv4_local_in+0x229/0x5d0 [ 90.889297][ T4662] ? nft_do_chain_arp+0xf0/0xf0 [ 90.894175][ T4662] nf_hook_slow+0xb9/0x200 [ 90.898626][ T4662] ? NF_HOOK+0x390/0x390 [ 90.902917][ T4662] NF_HOOK+0x1f2/0x390 [ 90.907016][ T4662] ? NF_HOOK+0x390/0x390 [ 90.911298][ T4662] ? ip_local_deliver+0x180/0x180 [ 90.916387][ T4662] ? NF_HOOK+0x390/0x390 [ 90.920669][ T4662] ? ip_local_deliver+0x107/0x180 [ 90.925730][ T4662] ? ip_rcv_core+0xb30/0xb30 [ 90.928027][ T4665] virtio-fs: tag not found [ 90.930354][ T4662] NF_HOOK+0x303/0x390 [ 90.939392][ T4662] ? ip_rcv_core+0xb30/0xb30 [ 90.944012][ T4662] ? ip_local_deliver+0x180/0x180 [ 90.949066][ T4662] ? sock_wfree+0x18c/0x1f0 [ 90.953610][ T4662] ? ip_rcv_core+0xb30/0xb30 [ 90.957199][ T4665] virtiofs: Unexpected value for 'dax' [ 90.958236][ T4662] ? ip_rcv_core+0x6a0/0xb30 [ 90.958271][ T4662] ? ip_local_deliver_finish+0x320/0x320 [ 90.973993][ T4662] ? ip_local_deliver_finish+0x320/0x320 [ 90.979676][ T4662] __netif_receive_skb+0xcc/0x290 [ 90.984727][ T4662] ? ktime_get_with_offset+0x2d7/0x320 [ 90.990226][ T4662] netif_receive_skb+0x19e/0x700 [ 90.995191][ T4662] ? __bpf_trace_softirq+0x10/0x10 [ 91.000333][ T4662] ? netif_receive_skb_core+0x210/0x210 [ 91.005331][ T4233] usb 2-1: config 0 has no interfaces? [ 91.005922][ T4662] tun_rx_batched+0x606/0x760 [ 91.016096][ T4662] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 91.022108][ T4662] ? local_bh_enable+0x20/0x20 [ 91.026901][ T4662] ? __local_bh_enable_ip+0x136/0x1c0 [ 91.027492][ T4233] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.032292][ T4662] ? read_lock_is_recursive+0x10/0x10 [ 91.032321][ T4662] ? __local_bh_enable_ip+0x136/0x1c0 [ 91.032341][ T4662] ? _local_bh_enable+0xa0/0xa0 [ 91.032359][ T4662] ? skb_set_owner_w+0x213/0x340 [ 91.061943][ T4662] tun_get_user+0x25bf/0x3b60 [ 91.065102][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.066660][ T4662] ? tun_ring_recv+0xc90/0xc90 [ 91.079460][ T4662] ? rcu_lock_release+0x5/0x20 [ 91.084244][ T4662] ? __lock_acquire+0x7b50/0x7b50 [ 91.089316][ T4662] tun_chr_write_iter+0x112/0x1e0 [ 91.094377][ T4662] vfs_write+0x748/0xd70 [ 91.098660][ T4662] ? file_end_write+0x250/0x250 [ 91.103559][ T4662] ? __fget_files+0x402/0x470 [ 91.108286][ T4662] ? __fdget_pos+0x1e2/0x370 [ 91.112898][ T4662] ? ksys_write+0x70/0x260 [ 91.115530][ T4233] usb 2-1: config 0 descriptor?? [ 91.117329][ T4662] ksys_write+0x153/0x260 [ 91.117355][ T4662] ? __ia32_sys_read+0x80/0x80 [ 91.131435][ T4662] ? lockdep_hardirqs_on+0x94/0x140 [ 91.136655][ T4662] do_syscall_64+0x4c/0xa0 [ 91.141089][ T4662] ? clear_bhb_loop+0x30/0x80 [ 91.145808][ T4662] ? clear_bhb_loop+0x30/0x80 [ 91.150517][ T4662] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.156432][ T4662] RIP: 0033:0x7f45f2d5b6ce [ 91.160878][ T4662] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 91.180511][ T4662] RSP: 002b:00007f45f0ff2fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 91.188972][ T4662] RAX: ffffffffffffffda RBX: 00007f45f0ff36c0 RCX: 00007f45f2d5b6ce [ 91.196971][ T4662] RDX: 0000000000000036 RSI: 0000200000000180 RDI: 00000000000000c8 [ 91.204977][ T4662] RBP: 00007f45f2e30eaf R08: 0000000000000000 R09: 0000000000000000 [ 91.212993][ T4662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.221004][ T4662] R13: 00007f45f3023038 R14: 00007f45f3022fa0 R15: 00007ffda5a4bb68 [ 91.229015][ T4662] [ 91.232179][ T4662] [ 91.234516][ T4662] Allocated by task 4662: [ 91.238861][ T4662] __kasan_slab_alloc+0x92/0xc0 [ 91.243754][ T4662] slab_post_alloc_hook+0x4c/0x380 [ 91.248899][ T4662] kmem_cache_alloc+0x15d/0x280 [ 91.253816][ T4662] __build_skb+0x26/0x2e0 [ 91.258173][ T4662] build_skb+0x1e/0x160 [ 91.262357][ T4662] __tun_build_skb+0x32/0x240 [ 91.267063][ T4662] tun_get_user+0x1a0e/0x3b60 [ 91.271760][ T4662] tun_chr_write_iter+0x112/0x1e0 [ 91.276821][ T4662] vfs_write+0x748/0xd70 [ 91.281097][ T4662] ksys_write+0x153/0x260 [ 91.285460][ T4662] do_syscall_64+0x4c/0xa0 [ 91.289908][ T4662] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.295826][ T4662] [ 91.298164][ T4662] Freed by task 4662: [ 91.302157][ T4662] kasan_set_track+0x4b/0x70 [ 91.306765][ T4662] kasan_set_free_info+0x1f/0x40 [ 91.311728][ T4662] ____kasan_slab_free+0xd5/0x110 [ 91.316784][ T4662] slab_free_freelist_hook+0xec/0x170 [ 91.322277][ T4662] kmem_cache_free+0x8f/0x210 [ 91.326977][ T4662] nft_synproxy_eval_v4+0x367/0x4e0 [ 91.332208][ T4662] nft_synproxy_do_eval+0x32e/0x550 [ 91.337564][ T4662] nft_do_chain+0x491/0x14d0 [ 91.342177][ T4662] nft_do_chain_inet+0x25c/0x340 [ 91.347146][ T4662] nf_hook_slow+0xb9/0x200 [ 91.351591][ T4662] NF_HOOK+0x1f2/0x390 [ 91.355683][ T4662] NF_HOOK+0x303/0x390 [ 91.359791][ T4662] __netif_receive_skb+0xcc/0x290 [ 91.364878][ T4662] netif_receive_skb+0x19e/0x700 [ 91.369844][ T4662] tun_rx_batched+0x606/0x760 [ 91.374543][ T4662] tun_get_user+0x25bf/0x3b60 [ 91.379240][ T4662] tun_chr_write_iter+0x112/0x1e0 [ 91.384374][ T4662] vfs_write+0x748/0xd70 [ 91.388639][ T4662] ksys_write+0x153/0x260 [ 91.392983][ T4662] do_syscall_64+0x4c/0xa0 [ 91.397416][ T4662] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.403318][ T4662] [ 91.405654][ T4662] The buggy address belongs to the object at ffff88802acc7dc0 [ 91.405654][ T4662] which belongs to the cache skbuff_head_cache of size 232 [ 91.420331][ T4662] The buggy address is located 128 bytes inside of [ 91.420331][ T4662] 232-byte region [ffff88802acc7dc0, ffff88802acc7ea8) [ 91.433617][ T4662] The buggy address belongs to the page: [ 91.439259][ T4662] page:ffffea0000ab31c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802acc7640 pfn:0x2acc7 [ 91.450724][ T4662] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 91.458287][ T4662] raw: 00fff00000000200 ffffea000175bf08 ffffea0001cfa7c8 ffff888144bf1140 [ 91.466886][ T4662] raw: ffff88802acc7640 00000000000c0006 00000001ffffffff 0000000000000000 [ 91.475558][ T4662] page dumped because: kasan: bad access detected [ 91.481989][ T4662] page_owner tracks the page as allocated [ 91.487717][ T4662] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 3558, ts 29057875973, free_ts 28976977270 [ 91.503812][ T4662] get_page_from_freelist+0x24f6/0x2670 [ 91.509373][ T4662] __alloc_pages+0x1ee/0x480 [ 91.513973][ T4662] new_slab+0xc0/0x4b0 [ 91.518069][ T4662] ___slab_alloc+0x807/0xdd0 [ 91.522676][ T4662] kmem_cache_alloc_node+0x118/0x2c0 [ 91.527975][ T4662] __alloc_skb+0xf4/0x750 [ 91.532335][ T4662] netlink_sendmsg+0x654/0xbe0 [ 91.537107][ T4662] ____sys_sendmsg+0x5be/0x8f0 [ 91.541884][ T4662] ___sys_sendmsg+0x236/0x2e0 [ 91.546599][ T4662] __se_sys_sendmsg+0x1b7/0x2a0 [ 91.551456][ T4662] do_syscall_64+0x4c/0xa0 [ 91.556022][ T4662] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.561922][ T4662] page last free stack trace: [ 91.566595][ T4662] free_unref_page_prepare+0x637/0x6c0 [ 91.572070][ T4662] free_unref_page+0x8f/0x2a0 [ 91.576760][ T4662] __unfreeze_partials+0x188/0x1e0 [ 91.581879][ T4662] put_cpu_partial+0x12d/0x190 [ 91.586656][ T4662] qlist_free_all+0x35/0x90 [ 91.591170][ T4662] kasan_quarantine_reduce+0x150/0x160 [ 91.596629][ T4662] __kasan_slab_alloc+0x2f/0xc0 [ 91.601487][ T4662] slab_post_alloc_hook+0x4c/0x380 [ 91.606602][ T4662] kmem_cache_alloc+0x15d/0x280 [ 91.611473][ T4662] getname_flags+0xb7/0x4f0 [ 91.615987][ T4662] do_sys_openat2+0xdd/0x500 [ 91.620585][ T4662] __x64_sys_openat+0x135/0x160 [ 91.625446][ T4662] do_syscall_64+0x4c/0xa0 [ 91.629895][ T4662] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.635803][ T4662] [ 91.638144][ T4662] Memory state around the buggy address: [ 91.643778][ T4662] ffff88802acc7d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 91.651853][ T4662] ffff88802acc7d80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 91.659919][ T4662] >ffff88802acc7e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.667983][ T4662] ^ [ 91.674142][ T4662] ffff88802acc7e80: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 91.682229][ T4662] ffff88802acc7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.690306][ T4662] ================================================================== [ 91.698374][ T4662] Disabling lock debugging due to kernel taint [ 91.704643][ T4662] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.711872][ T4662] CPU: 1 PID: 4662 Comm: syz.3.136 Tainted: G B syzkaller #0 [ 91.720564][ T4662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 91.730638][ T4662] Call Trace: [ 91.733959][ T4662] [ 91.736924][ T4662] dump_stack_lvl+0x188/0x250 [ 91.741633][ T4662] ? show_regs_print_info+0x20/0x20 [ 91.746867][ T4662] ? load_image+0x410/0x410 [ 91.751407][ T4662] panic+0x2f8/0x850 [ 91.755327][ T4662] ? bpf_jit_dump+0xd0/0xd0 [ 91.759949][ T4662] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 91.765875][ T4662] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 91.771799][ T4662] ? _raw_spin_unlock+0x40/0x40 [ 91.776679][ T4662] ? print_memory_metadata+0x314/0x400 [ 91.782156][ T4662] ? __nft_trace_packet+0x135/0x150 [ 91.787374][ T4662] check_panic_on_warn+0x80/0xa0 [ 91.792339][ T4662] ? __nft_trace_packet+0x135/0x150 [ 91.797577][ T4662] end_report+0x6d/0xf0 [ 91.801763][ T4662] kasan_report+0x102/0x130 [ 91.806288][ T4662] ? __nft_trace_packet+0x135/0x150 [ 91.811509][ T4662] __nft_trace_packet+0x135/0x150 [ 91.816558][ T4662] nft_do_chain+0x1299/0x14d0 [ 91.821265][ T4662] ? ipt_do_table+0x130b/0x1510 [ 91.826147][ T4662] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 91.832079][ T4662] ? nf_nat_inet_fn+0x8a0/0xad0 [ 91.836978][ T4662] nft_do_chain_inet+0x25c/0x340 [ 91.841955][ T4662] ? nft_do_chain_arp+0xf0/0xf0 [ 91.846864][ T4662] ? nf_nat_ipv4_local_in+0x229/0x5d0 [ 91.852265][ T4662] ? nft_do_chain_arp+0xf0/0xf0 [ 91.857140][ T4662] nf_hook_slow+0xb9/0x200 [ 91.861587][ T4662] ? NF_HOOK+0x390/0x390 [ 91.865894][ T4662] NF_HOOK+0x1f2/0x390 [ 91.870015][ T4662] ? NF_HOOK+0x390/0x390 [ 91.874291][ T4662] ? ip_local_deliver+0x180/0x180 [ 91.879534][ T4662] ? NF_HOOK+0x390/0x390 [ 91.883807][ T4662] ? ip_local_deliver+0x107/0x180 [ 91.888868][ T4662] ? ip_rcv_core+0xb30/0xb30 [ 91.893490][ T4662] NF_HOOK+0x303/0x390 [ 91.897586][ T4662] ? ip_rcv_core+0xb30/0xb30 [ 91.902205][ T4662] ? ip_local_deliver+0x180/0x180 [ 91.907251][ T4662] ? sock_wfree+0x18c/0x1f0 [ 91.911811][ T4662] ? ip_rcv_core+0xb30/0xb30 [ 91.916429][ T4662] ? ip_rcv_core+0x6a0/0xb30 [ 91.921049][ T4662] ? ip_local_deliver_finish+0x320/0x320 [ 91.926708][ T4662] ? ip_local_deliver_finish+0x320/0x320 [ 91.932373][ T4662] __netif_receive_skb+0xcc/0x290 [ 91.937422][ T4662] ? ktime_get_with_offset+0x2d7/0x320 [ 91.942913][ T4662] netif_receive_skb+0x19e/0x700 [ 91.947879][ T4662] ? __bpf_trace_softirq+0x10/0x10 [ 91.953016][ T4662] ? netif_receive_skb_core+0x210/0x210 [ 91.958597][ T4662] tun_rx_batched+0x606/0x760 [ 91.963318][ T4662] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 91.969344][ T4662] ? local_bh_enable+0x20/0x20 [ 91.974137][ T4662] ? __local_bh_enable_ip+0x136/0x1c0 [ 91.979536][ T4662] ? read_lock_is_recursive+0x10/0x10 [ 91.984960][ T4662] ? __local_bh_enable_ip+0x136/0x1c0 [ 91.990362][ T4662] ? _local_bh_enable+0xa0/0xa0 [ 91.995231][ T4662] ? skb_set_owner_w+0x213/0x340 [ 92.000205][ T4662] tun_get_user+0x25bf/0x3b60 [ 92.004912][ T4662] ? tun_ring_recv+0xc90/0xc90 [ 92.009702][ T4662] ? rcu_lock_release+0x5/0x20 [ 92.014489][ T4662] ? __lock_acquire+0x7b50/0x7b50 [ 92.019755][ T4662] tun_chr_write_iter+0x112/0x1e0 [ 92.024811][ T4662] vfs_write+0x748/0xd70 [ 92.029084][ T4662] ? file_end_write+0x250/0x250 [ 92.033962][ T4662] ? __fget_files+0x402/0x470 [ 92.038667][ T4662] ? __fdget_pos+0x1e2/0x370 [ 92.043284][ T4662] ? ksys_write+0x70/0x260 [ 92.047728][ T4662] ksys_write+0x153/0x260 [ 92.052084][ T4662] ? __ia32_sys_read+0x80/0x80 [ 92.056884][ T4662] ? lockdep_hardirqs_on+0x94/0x140 [ 92.062183][ T4662] do_syscall_64+0x4c/0xa0 [ 92.066629][ T4662] ? clear_bhb_loop+0x30/0x80 [ 92.071337][ T4662] ? clear_bhb_loop+0x30/0x80 [ 92.076037][ T4662] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.081973][ T4662] RIP: 0033:0x7f45f2d5b6ce [ 92.086404][ T4662] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 92.106038][ T4662] RSP: 002b:00007f45f0ff2fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 92.114477][ T4662] RAX: ffffffffffffffda RBX: 00007f45f0ff36c0 RCX: 00007f45f2d5b6ce [ 92.122493][ T4662] RDX: 0000000000000036 RSI: 0000200000000180 RDI: 00000000000000c8 [ 92.130520][ T4662] RBP: 00007f45f2e30eaf R08: 0000000000000000 R09: 0000000000000000 [ 92.138511][ T4662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.146493][ T4662] R13: 00007f45f3023038 R14: 00007f45f3022fa0 R15: 00007ffda5a4bb68 [ 92.154483][ T4662] [ 92.157786][ T4662] Kernel Offset: disabled [ 92.162121][ T4662] Rebooting in 86400 seconds..