last executing test programs: 59.412582088s ago: executing program 0 (id=222): read(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x7fffffff}]}}]}, 0x60}}, 0x44080) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 59.004321739s ago: executing program 0 (id=224): r0 = syz_open_dev$swradio(&(0x7f0000000200), 0x1, 0x2) pread64(r0, &(0x7f0000000240)=""/72, 0x48, 0x0) 58.758075114s ago: executing program 0 (id=226): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x1a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000a80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000c00)={r2, 0x1, r0, 0x4}) 57.382967463s ago: executing program 0 (id=233): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1fd) symlink(&(0x7f00000002c0)='.\x00', &(0x7f0000000300)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000600)='./bus\x00') mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dummy\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='p:m_group/_yevent ./dummy:0x2', 0x1d) 56.810991911s ago: executing program 0 (id=236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000cc0)={0x12, 0x5}) 55.683002086s ago: executing program 0 (id=245): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r0, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000003c0)={@local, @local, @void, {@ipv6}}, 0x0) 55.552195939s ago: executing program 32 (id=245): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r0, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000003c0)={@local, @local, @void, {@ipv6}}, 0x0) 14.783008471s ago: executing program 1 (id=388): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) fgetxattr(r0, &(0x7f0000000c40)=ANY=[], 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(r1, &(0x7f0000000200)=""/145, 0x91) msync(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0) add_key(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 12.740387788s ago: executing program 1 (id=395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(r0, 0x5, &(0x7f0000000140)={0x2, 0x2, 0xfd8b, 0x2}) 12.552909357s ago: executing program 1 (id=396): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c740f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000009400), 0x48840, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) r2 = openat(0xffffffffffffff9c, &(0x7f0000009440)='./file1\x00', 0xc4842, 0x1ff) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000009480), 0x6200, 0x0) sendfile(r2, r3, 0x0, 0x20fffe82) 12.1294972s ago: executing program 4 (id=400): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x40080, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102) writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$erofs(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x200800c, &(0x7f00000006c0)=ANY=[], 0x0, 0x24d, &(0x7f0000000700)="$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") mount$overlay(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x0, &(0x7f0000000ac0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000000b40)=""/4096, 0xc00) 10.721258373s ago: executing program 4 (id=401): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe00010000000800"], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 10.486989406s ago: executing program 1 (id=402): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x2c, 0x24, 0x601, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x14b102) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) bpf$ITER_CREATE(0xb, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000600), 0x2, 0x20100) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f0000000640)={0x0, 0x200, 0x3, '\x00', &(0x7f0000000680)=0x2}) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0xc80, 0x55007}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x4c}}, 0x20000000) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$pppoe(0x18, 0x1, 0x0) fsetxattr(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='user.('], 0x0, 0x0, 0x2) 10.446911791s ago: executing program 4 (id=404): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) io_setup(0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x401, &(0x7f0000000540)=ANY=[@ANYRES16=0x0], 0xfd, 0x2d9, &(0x7f0000000580)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000880)='.\x00', 0x8000, 0x1f7) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x641, 0x8000026, r4, 0x0) sendto$inet6(r3, &(0x7f00000003c0)='X', 0x14f8d, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x100, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000440)={0x1, [0x0]}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000004c0)={r6, 0xa9ac}, &(0x7f0000000500)=0x8) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f00000001c0)={'ipvlan0\x00', @random="0200ff7fffff"}) 9.554016381s ago: executing program 3 (id=405): syz_mount_image$ext4(&(0x7f0000100500)='ext4\x00', &(0x7f0000100540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f00001005c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@block_validity}, {@nodelalloc}, {@minixdf}, {@auto_da_alloc}]}, 0x1, 0xba6, &(0x7f0000100b80)="$eJzs3M1rXFUUAPDzXj7bRicVEeumEZEWxGlaSbFFsJWKGxeCboWGdFJCph8kkZo0i4n+A6KuBTeCWpQu7LobBbdutG4tLoQisVEQ0cibjyQ2M0naTvJq8vvBzbt3zpvcc/KYeffCTALYsQayH2nEvog4nUQU6o+nEdFd7fVGVGrnLczPjvwxPzuSxOLi678mkUTE7fnZkcbvSurHPfVBb0R891ISj7y7et7J6Znx4XK5NFEfH5o6d/HQ5PTMs2Pnhs+WzpbOHz76/NCRoaODx4baVuufP5249vuTr/xc+euzv6/89sEnSZyIvnpsZR3tMhADS3+TlTojYrjdk+Wko17PyjqTznWelG5yUgAAtJSuWMM9FoXoiOXFWyG+/j7X5AAAAIC2WOyIWAQAAAC2ucT+HwAAALa5xucAbs/PjjRavp9I2Fq3TkZEf63+hXqrRTqjUj32RldE7L6dxMqvtSa1p923gYi4+eOxL7MWm/Q95LVU5iLi8WbXP6nW31/9Fvfq+tOIGGzD/AN3jP9P9Z9ow/x51w/AznT9ZO1Gtvr+ly6tf6LJ/a+zyb3rXuR9/2us/xZWrf+W6+9osf57bYNzXP70o0utYln9L1x7+YtGy+bPjvdV1F24NRfxRGez+pOl+pMW9Z/e4ByFfy6VWsXyrn/x44gD0bz+hmTt/090aHSsXBqs/Ww6x9y3Q5+3mj/v+rPrv7tF/etd/4sbnOPNU6eutoqtX3/6S3fyRrXXXX/k7eGpqYnDEd3Jq6sfP7J2Lo1zGr8jq//gU2u//pvVn70nVOp/h2wvMFc/ZuN37pjzxSuXv1qr/mzvl+f1P3OP1/+9Dc7x9DfvH2wVW7n/zVo2/82kthcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIY0IvoiSYtL/TQtFiP2RMSjsTstX5icemb0wlvnz2SxiP7oSkfHyqXBiCjUxkk2PlztL4+P3DF+LiL2RsSHhV3VcXHkQvlM3sUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwZE9E9EWSFiMijYiFQpoWi3lnBQAAALRdf94JAAAAAJvO/h8AAAC2P/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANtne/ddvJBFROb6r2jLd9VhXrpkBmy3NOwEgNx15JwDkpjPvBIDc3OUe33IBtqFknXhvy0hP23MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MF1YN/1G0lEVI7vqrZMdz3W1fQZ+7cwO2AzpXknAOSmY61g59blAWw9L3HYuZrv8YGdJFkn3rt8TuW/kZ5NywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB09ftSVpMSLSaj9Ni8WIhyKiP7qS0bFyaTAiHo6IHwpdPdm4J++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvJ6Znx4XK5NKGjo5NvJ3kw0qh18n5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD5PTM+PD5XJpYjLvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC8TU7PjA+Xy6WJDXSu3s3JKzp51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DQAA//+LYA3r") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000101740)='memory.events.local\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000500), 0x651, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 8.564497031s ago: executing program 1 (id=408): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) r3 = io_uring_setup(0x42df, &(0x7f0000000000)={0x0, 0x3a2b, 0x2, 0x2, 0x13}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 8.538350814s ago: executing program 4 (id=409): prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x101000000000088}, 0x0) capset(&(0x7f0000000400)={0x19980330}, &(0x7f0000000440)={0x6, 0x6, 0x4, 0x0, 0x5, 0x2}) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 8.211674807s ago: executing program 4 (id=411): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40242, 0x31) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x8040480) modify_ldt$read(0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000640), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000740)={0x20004, r0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000007c0)={0x0, 0x0, r2}) close_range(r0, 0xffffffffffffffff, 0x2) 7.78624587s ago: executing program 4 (id=413): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000980)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 6.952738094s ago: executing program 5 (id=417): r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2) write$proc_mixer(r0, 0x0, 0x0) 5.930142578s ago: executing program 3 (id=419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000020000000900010073797a30000000004c000000120a01040000000000000000020000000900010073797a30000000000900020073797a300000000008000300000000031800048009000100736e6d70040000000500030011"], 0x94}}, 0x0) 5.843082797s ago: executing program 5 (id=420): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x143102) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000440)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) 3.678591597s ago: executing program 3 (id=422): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000480)={0x2b, 0x19, 0x7, 0xd1, 0x30, 0x10, 0xaa, 0xa, 0xfd, 0x8, 0x6, 0x40, 0x0, 0x79}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000540)=0x10) recvfrom$inet6(r0, &(0x7f0000000600)=""/49, 0x31, 0x63, &(0x7f0000000640)={0xa, 0x4e21, 0x8000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x21}, 0x1c) 3.215066953s ago: executing program 2 (id=423): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracefs\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='!:mygroup/myevent s', 0x13) 2.007813076s ago: executing program 2 (id=424): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40242, 0x31) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x8040480) modify_ldt$read(0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000640), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000740)={0x20004, r0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000007c0)={0x0, 0x0, r2}) close_range(r0, 0xffffffffffffffff, 0x2) 1.999015267s ago: executing program 3 (id=425): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000300)=0xc) sched_setaffinity(r2, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r3, &(0x7f00000005c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000040000000600040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0d0000000a00000004000000010000"], 0x50) close(r5) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={r6, &(0x7f00000008c0)}, 0x20) 1.984294038s ago: executing program 5 (id=426): syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) socket(0x40000000015, 0x805, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/user\x00') open_by_handle_at(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r2], 0x101c40) 1.494741978s ago: executing program 2 (id=427): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x40080, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102) writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$erofs(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x200800c, &(0x7f00000006c0)=ANY=[], 0x0, 0x24d, &(0x7f0000000700)="$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") mount$overlay(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x0, &(0x7f0000000ac0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000000b40)=""/4096, 0xc00) 1.330961455s ago: executing program 5 (id=428): socket$inet6(0xa, 0x1, 0x100) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f00000002c0)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000003c0), 0x7, 0x4aa442) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000400)=""/114) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000600), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000680), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001680)={'sit0\x00', &(0x7f00000016c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) 644.911484ms ago: executing program 5 (id=429): add_key(&(0x7f0000000100)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="0100000002000800ffffff7f010000000011223344556677aabbccddeeff0011", 0x20, 0xfffffffd) 595.107149ms ago: executing program 5 (id=430): setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) syz_usb_connect$midi(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000400c200b10400001020301090238"], 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x28041, 0x0) write$dsp(r0, &(0x7f00000000c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000280)=0x10) 570.348912ms ago: executing program 2 (id=431): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 355.589063ms ago: executing program 3 (id=432): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f00000003c0)) getpriority(0x2, 0x0) 298.465939ms ago: executing program 2 (id=433): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x18e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x1e, 0x7ffffffe}]}) chmod(&(0x7f00000001c0)='./file1\x00', 0x4) 211.057758ms ago: executing program 3 (id=434): prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000880)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000008c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000940)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000009c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000a00), 0x4000087, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)}) clock_getres(0xd6c79f3ee28bc1b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xe, 0x16, &(0x7f0000000cc0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff4e53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a1574aefc97d8addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf73b18e509402a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcf"], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) 210.947218ms ago: executing program 2 (id=435): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304, 0x38}, "b575c2c1c3a227b7", "799298c9493f4cbdfb5868d41337f3a2", "8df6bd29", 'H\x00'}, 0x28) 0s ago: executing program 1 (id=436): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) io_setup(0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000016000008001b"], 0x30}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x401, &(0x7f0000000540)=ANY=[@ANYRES16=0x0], 0xfd, 0x2d9, &(0x7f0000000580)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000880)='.\x00', 0x8000, 0x1f7) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x641, 0x8000026, r4, 0x0) sendto$inet6(r3, &(0x7f00000003c0)='X', 0x14f8d, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x100, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000440)={0x1, [0x0]}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000004c0)={r6, 0xa9ac}, &(0x7f0000000500)=0x8) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f00000001c0)={'ipvlan0\x00', @random="0200ff7fffff"}) kernel console output (not intermixed with test programs): 1.894112][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 71.985371][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 72.034065][ T4194] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.059923][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 72.091620][ T4202] chnl_net:caif_netlink_parms(): no params data found [ 72.152753][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.162346][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.175425][ T4188] device bridge_slave_0 entered promiscuous mode [ 72.233183][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.240457][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.249006][ T4188] device bridge_slave_1 entered promiscuous mode [ 72.278479][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.285609][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.294152][ T4201] device bridge_slave_0 entered promiscuous mode [ 72.303784][ T4194] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.329434][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.344896][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.352429][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.368160][ T4201] device bridge_slave_1 entered promiscuous mode [ 72.393029][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.468133][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.477746][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.484844][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.493602][ T4198] device bridge_slave_0 entered promiscuous mode [ 72.502551][ T4194] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.504596][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.516135][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.524643][ T4198] device bridge_slave_1 entered promiscuous mode [ 72.564183][ T4202] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.573209][ T4202] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.586772][ T4202] device bridge_slave_0 entered promiscuous mode [ 72.597201][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.606455][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.644568][ T4202] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.656468][ T4202] device bridge_slave_1 entered promiscuous mode [ 72.684119][ T4188] team0: Port device team_slave_0 added [ 72.720214][ T4188] team0: Port device team_slave_1 added [ 72.747163][ T4202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.759516][ T4202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.791783][ T4201] team0: Port device team_slave_0 added [ 72.800651][ T4201] team0: Port device team_slave_1 added [ 72.815612][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.840899][ T4194] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.873486][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.925464][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.935628][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.973766][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.987038][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.995291][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.053774][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.078996][ T4202] team0: Port device team_slave_0 added [ 73.085464][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.098404][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.128587][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.143823][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.153886][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.180534][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.198179][ T4198] team0: Port device team_slave_0 added [ 73.205474][ T4202] team0: Port device team_slave_1 added [ 73.227461][ T4198] team0: Port device team_slave_1 added [ 73.238560][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 73.245426][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 73.317377][ T4190] Bluetooth: hci2: command 0x0409 tx timeout [ 73.317396][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 73.351209][ T4188] device hsr_slave_0 entered promiscuous mode [ 73.363179][ T4188] device hsr_slave_1 entered promiscuous mode [ 73.374370][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.381868][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.408526][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 73.408732][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.428304][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.435293][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.462085][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.478212][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.485220][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.511925][ T4202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.527663][ T4201] device hsr_slave_0 entered promiscuous mode [ 73.534516][ T4201] device hsr_slave_1 entered promiscuous mode [ 73.541982][ T4201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.550108][ T4201] Cannot create hsr debugfs directory [ 73.582033][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.589450][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.615775][ T4202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.693782][ T3854] infiniband rxe0: set active [ 73.740381][ T4198] device hsr_slave_0 entered promiscuous mode [ 73.748784][ T4198] device hsr_slave_1 entered promiscuous mode [ 73.755624][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.763962][ T4198] Cannot create hsr debugfs directory [ 73.770379][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.797434][ T4202] device hsr_slave_0 entered promiscuous mode [ 73.804953][ T4202] device hsr_slave_1 entered promiscuous mode [ 73.812291][ T4202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.820244][ T4202] Cannot create hsr debugfs directory [ 73.960042][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 74.126678][ T4201] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.154693][ T4201] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.176342][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.183892][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.192783][ T4194] device bridge_slave_0 entered promiscuous mode [ 74.202743][ T4201] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.213435][ T4201] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.223602][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.231632][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.240210][ T4194] device bridge_slave_1 entered promiscuous mode [ 74.276796][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.297060][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.362177][ T4194] team0: Port device team_slave_0 added [ 74.371412][ T4194] team0: Port device team_slave_1 added [ 74.380577][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.395421][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.419271][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.426277][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.454944][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.472250][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.481986][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.493439][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.501525][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.528429][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.593438][ T4194] device hsr_slave_0 entered promiscuous mode [ 74.600916][ T4194] device hsr_slave_1 entered promiscuous mode [ 74.608226][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.615909][ T4194] Cannot create hsr debugfs directory [ 74.632933][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.647509][ T4202] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.677199][ T4202] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.729494][ T4202] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.754966][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.764948][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.781226][ T4202] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.805983][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.859552][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.869563][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.879941][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.887207][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.896238][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.905652][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.914647][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.921820][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.931092][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.946752][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.005244][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.017219][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.026791][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.036732][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.067999][ T4198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.088411][ T4198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.100790][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.110213][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.119362][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.128592][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.137216][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.146427][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.155257][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.185711][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.196791][ T4198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.206475][ T4198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.226129][ T4202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.234428][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.243195][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.260184][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.279671][ T4194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.291683][ T4194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.305436][ T4194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.317866][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 75.326344][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 75.341171][ T4194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.360749][ T4202] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.379060][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.387073][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.396453][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.397743][ T4269] Bluetooth: hci4: command 0x041b tx timeout [ 75.405271][ T4272] Bluetooth: hci2: command 0x041b tx timeout [ 75.418780][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.427574][ T1234] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.434724][ T1234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.466840][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.477570][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 75.486105][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.503840][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.513797][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.520987][ T1234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.535406][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.544466][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.560550][ T1234] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.567685][ T1234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.578355][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.587218][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.596594][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.603830][ T1234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.613549][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.624315][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.659909][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.668807][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.679676][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.689845][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.700109][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.710464][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.750394][ T4202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.761188][ T4202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.774332][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.783798][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.793664][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.804823][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.814055][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.822316][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.830518][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.840138][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.850632][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.864604][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.919648][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.929650][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.940813][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.950807][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.999993][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.009211][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.020126][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.031946][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.041887][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.051323][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.061385][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.079950][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.094308][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.107095][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.120191][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.134664][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.147499][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.163203][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.171254][ T4201] device veth0_vlan entered promiscuous mode [ 76.192194][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.208573][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.225645][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.237174][ T4201] device veth1_vlan entered promiscuous mode [ 76.246911][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.256784][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.265488][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.278704][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.308419][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.323209][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.332782][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.342792][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.349955][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.361269][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.380631][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.394654][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.411922][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.419118][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.442856][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.451679][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.462523][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.473862][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.481058][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.489900][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.499088][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.508601][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.517936][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.530260][ T4201] device veth0_macvtap entered promiscuous mode [ 76.559514][ T4202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.583219][ T4201] device veth1_macvtap entered promiscuous mode [ 76.592298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.603650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.613324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.622202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.630383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.646883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.656053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.665457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.675074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.685385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.698130][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.705244][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.714284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.723223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.735591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.746036][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.754905][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.768111][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.779873][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.805393][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.820067][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.831707][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.842043][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.851569][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.870578][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.882420][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.894926][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.905314][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.921726][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.934180][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.946863][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.961663][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.972062][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.985280][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.013808][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.035904][ T4201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.045381][ T4201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.054559][ T4201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.063413][ T4201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.075136][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.096274][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.111991][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.122457][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.136435][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.152271][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.164239][ T4202] device veth0_vlan entered promiscuous mode [ 77.192895][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.206688][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.221658][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.230008][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.247044][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.256189][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.275006][ T4202] device veth1_vlan entered promiscuous mode [ 77.319152][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.326685][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.337061][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.347390][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.379847][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.388750][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.398148][ T4269] Bluetooth: hci1: command 0x040f tx timeout [ 77.405295][ T4269] Bluetooth: hci0: command 0x040f tx timeout [ 77.415974][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.428808][ T4188] device veth0_vlan entered promiscuous mode [ 77.442519][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.464867][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.477801][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 77.484490][ T4188] device veth1_vlan entered promiscuous mode [ 77.497521][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 77.520171][ T4202] device veth0_macvtap entered promiscuous mode [ 77.557724][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 77.573934][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.583033][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.592540][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.603687][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.641734][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.653120][ T1234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.661066][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.672644][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.678827][ T1234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.689467][ T4202] device veth1_macvtap entered promiscuous mode [ 77.728319][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.736605][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.746795][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.755775][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.773018][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.783999][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.796917][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.816640][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.828755][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.840545][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.855236][ T4194] device veth0_vlan entered promiscuous mode [ 77.863003][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.872765][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.882544][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.892100][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.902304][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.910993][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.919810][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.927906][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.940696][ T4188] device veth0_macvtap entered promiscuous mode [ 77.961554][ T4202] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.971126][ T4202] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.980268][ T4202] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.990905][ T4202] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.011047][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.011091][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.029444][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.031198][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.037143][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.054677][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.065350][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.077049][ T4194] device veth1_vlan entered promiscuous mode [ 78.093485][ T4188] device veth1_macvtap entered promiscuous mode [ 78.106417][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.124314][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.196380][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.217908][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.228866][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.247106][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.266203][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.292372][ T4194] device veth0_macvtap entered promiscuous mode [ 78.303285][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.318160][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.333821][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.346768][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.366869][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.379884][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.392375][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.403836][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.416135][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.429996][ T4194] device veth1_macvtap entered promiscuous mode [ 78.454882][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.471393][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.480630][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.490573][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.513585][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.524625][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.535001][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.544230][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.565346][ T4305] device syzkaller0 entered promiscuous mode [ 78.613427][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.642224][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.647197][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.664497][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.683059][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.696224][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.713830][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.725521][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.740995][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.755012][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.768642][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.779581][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.849832][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.868749][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.879316][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.893265][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.903700][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.914747][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.927030][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.942975][ T4194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.952143][ T4194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.961898][ T4194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.971127][ T4194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.993455][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.005491][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.016017][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.026382][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.068377][ T4287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.076291][ T4287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.093618][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.115113][ T4198] device veth0_vlan entered promiscuous mode [ 79.123651][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.142882][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.154348][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.169762][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.211997][ T1234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.225221][ T4198] device veth1_vlan entered promiscuous mode [ 79.233819][ T1234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.274169][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.359951][ T4287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.371875][ T4287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.390896][ T4287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.404902][ T4198] device veth0_macvtap entered promiscuous mode [ 79.417419][ T4287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.431905][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.441388][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.454887][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.464138][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.474008][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.482205][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 79.489279][ T21] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 79.489360][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 79.507046][ T4198] device veth1_macvtap entered promiscuous mode [ 79.553207][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.565234][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 79.574335][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.585907][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.587875][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 79.597815][ T4273] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.610823][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.621339][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.632472][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.642910][ T2289] Bluetooth: hci3: command 0x0419 tx timeout [ 79.651069][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.662647][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.675792][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.694722][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.705157][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.718962][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.741226][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.753655][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.763975][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.774592][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.786757][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.800081][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.810535][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.821787][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.833740][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.849786][ T4319] FAULT_INJECTION: forcing a failure. [ 79.849786][ T4319] name failslab, interval 1, probability 0, space 0, times 1 [ 79.850012][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.865949][ T4273] usb 4-1: Using ep0 maxpacket: 32 [ 79.880225][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.890569][ T4319] CPU: 0 PID: 4319 Comm: syz.0.1 Not tainted syzkaller #0 [ 79.897742][ T4319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 79.907550][ T4198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.907865][ T4319] Call Trace: [ 79.917129][ T4198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.919843][ T4319] [ 79.919855][ T4319] dump_stack_lvl+0x188/0x250 [ 79.929196][ T4198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.931576][ T4319] ? show_regs_print_info+0x20/0x20 [ 79.936420][ T4198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.944976][ T4319] ? load_image+0x410/0x410 [ 79.945040][ T4319] ? __might_sleep+0xf0/0xf0 [ 79.945064][ T4319] ? __lock_acquire+0x7d40/0x7d40 [ 79.973272][ T4319] should_fail+0x383/0x4b0 [ 79.977745][ T4319] should_failslab+0x5/0x20 [ 79.982297][ T4319] slab_pre_alloc_hook+0x51/0xc0 [ 79.987287][ T4319] kmem_cache_alloc_trace+0x47/0x290 [ 79.992629][ T4319] ? alloc_work_entries+0xc0/0x360 [ 79.997806][ T4319] alloc_work_entries+0xc0/0x360 [ 80.002813][ T4319] iw_cm_listen+0x3e/0x220 [ 80.007286][ T4319] rdma_listen+0x953/0xde0 [ 80.011764][ T4319] ? rdma_set_afonly+0x120/0x120 [ 80.016748][ T4319] ? _raw_spin_unlock+0x24/0x40 [ 80.021633][ T4319] ? rdma_restrack_add+0x2ff/0x730 [ 80.026804][ T4319] cma_listen_on_dev+0x3ff/0x730 [ 80.031806][ T4319] cma_add_one+0x638/0xa10 [ 80.036292][ T4319] add_client_context+0x375/0x7a0 [ 80.041473][ T4319] ? ib_register_client+0x3f0/0x3f0 [ 80.046719][ T4319] enable_device_and_get+0x195/0x3d0 [ 80.050168][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 80.052027][ T4319] ? ib_register_device+0x12e0/0x12e0 [ 80.052056][ T4319] ? do_raw_spin_unlock+0x11d/0x230 [ 80.070345][ T4319] ib_register_device+0x1039/0x12e0 [ 80.075641][ T4319] ? remove_all_compat_devs+0x260/0x260 [ 80.081246][ T4319] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 80.087284][ T4319] ? lock_chain_count+0x20/0x20 [ 80.092191][ T4319] ? __rwlock_init+0x140/0x140 [ 80.097151][ T4319] ? lockdep_hardirqs_on+0x94/0x140 [ 80.102378][ T4319] ? lockdep_softirqs_off+0x430/0x430 [ 80.107929][ T4319] ? memset+0x1e/0x40 [ 80.112001][ T4319] ? __raw_spin_lock_init+0x41/0x100 [ 80.117343][ T4319] siw_newlink+0xa5b/0xf30 [ 80.121860][ T4319] nldev_newlink+0x524/0x580 [ 80.126528][ T4319] ? __update_load_avg_cfs_rq+0x685/0xa80 [ 80.132292][ T4319] ? nldev_set_doit+0x420/0x420 [ 80.137270][ T4319] ? aa_get_newest_label+0xf5/0x5a0 [ 80.142519][ T4319] ? end_current_label_crit_section+0x170/0x170 [ 80.148784][ T4319] ? end_current_label_crit_section+0x170/0x170 [ 80.155114][ T4319] ? bpf_lsm_capable+0x5/0x10 [ 80.155757][ T21] usb 3-1: not running at top speed; connect to a high speed hub [ 80.159832][ T4319] ? security_capable+0x85/0xb0 [ 80.159870][ T4319] ? nldev_set_doit+0x420/0x420 [ 80.159894][ T4319] rdma_nl_rcv+0x6d8/0xa00 [ 80.182028][ T4319] ? rdma_nl_net_init+0x190/0x190 [ 80.187112][ T4319] ? rcu_lock_release+0x5/0x20 [ 80.192129][ T4319] netlink_unicast+0x804/0x9e0 [ 80.197339][ T4319] netlink_sendmsg+0x8ba/0xbe0 [ 80.202270][ T4319] ? netlink_getsockopt+0x570/0x570 [ 80.207523][ T4319] ? aa_sock_msg_perm+0x94/0x150 [ 80.212127][ T4273] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 80.212530][ T4319] ? apparmor_socket_sendmsg+0x88/0x230 [ 80.225654][ T4273] usb 4-1: config 0 has no interface number 0 [ 80.226445][ T4319] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 80.237815][ T4319] ? security_socket_sendmsg+0x7c/0xa0 [ 80.243217][ T4273] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 80.243319][ T4319] ? netlink_getsockopt+0x570/0x570 [ 80.243355][ T4319] ____sys_sendmsg+0x5be/0x8f0 [ 80.264335][ T4319] ? __sys_sendmsg_sock+0x30/0x30 [ 80.269416][ T4319] ? import_iovec+0x6f/0xa0 [ 80.272904][ T4273] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 80.273963][ T4319] ___sys_sendmsg+0x236/0x2e0 [ 80.274026][ T4319] ? __sys_sendmsg+0x290/0x290 [ 80.293324][ T4319] __se_sys_sendmsg+0x1b7/0x2a0 [ 80.298230][ T4319] ? __x64_sys_sendmsg+0x80/0x80 [ 80.303208][ T4319] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 80.309255][ T4319] ? lockdep_hardirqs_on+0x94/0x140 [ 80.314516][ T4319] do_syscall_64+0x4c/0xa0 [ 80.318974][ T4319] ? clear_bhb_loop+0x30/0x80 [ 80.323702][ T4319] ? clear_bhb_loop+0x30/0x80 [ 80.328437][ T4319] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.334380][ T4319] RIP: 0033:0x7fe4d124bb19 [ 80.338806][ T4319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.348706][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.358461][ T4319] RSP: 002b:00007fe4cf4a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.358493][ T4319] RAX: ffffffffffffffda RBX: 00007fe4d14d1fa0 RCX: 00007fe4d124bb19 [ 80.358510][ T4319] RDX: 000000000000c000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 80.358526][ T4319] RBP: 00007fe4d12e3b70 R08: 0000000000000000 R09: 0000000000000000 [ 80.386333][ T21] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 39, changing to 4 [ 80.393037][ T4319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.393057][ T4319] R13: 00007fe4d14d2038 R14: 00007fe4d14d1fa0 R15: 00007ffc785d7508 [ 80.393099][ T4319] [ 80.442522][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.451140][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.464961][ T21] usb 3-1: too many endpoints for config 1 interface 2 altsetting 254: 255, using maximum allowed: 30 [ 80.468816][ T4319] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -12 [ 80.485751][ T21] usb 3-1: config 1 interface 2 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 80.511856][ T21] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 80.523861][ T21] usb 3-1: config 1 interface 2 has no altsetting 0 [ 80.542532][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.561630][ T4273] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 80.587756][ T4273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.597690][ T4273] usb 4-1: Product: syz [ 80.601924][ T4273] usb 4-1: Manufacturer: syz [ 80.606553][ T4273] usb 4-1: SerialNumber: syz [ 80.631212][ T4273] usb 4-1: config 0 descriptor?? [ 80.688637][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.725028][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.733816][ T21] usb 3-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 80.743560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.751343][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.762524][ T21] usb 3-1: Product: syz [ 80.766910][ T21] usb 3-1: Manufacturer: syz [ 80.772153][ T21] usb 3-1: SerialNumber: syz [ 80.808696][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.816680][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.828454][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.897830][ T4273] radio-si470x 4-1:0.35: this is not a si470x device. [ 80.922912][ T4325] device lo entered promiscuous mode [ 80.954772][ T4327] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.001743][ T4325] device tunl0 entered promiscuous mode [ 81.040319][ T4325] device gre0 entered promiscuous mode [ 81.111444][ T4273] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 81.138387][ T4271] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.173725][ T4273] usb 4-1: USB disconnect, device number 2 [ 81.188033][ T21] usb 3-1: incorrect wMaxPacketSize 0x0 for BADD profile [ 81.203221][ T21] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 81.273431][ T4325] device gretap0 entered promiscuous mode [ 81.308761][ T4325] device erspan0 entered promiscuous mode [ 81.346552][ T21] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 81.356355][ T4325] device ip_vti0 entered promiscuous mode [ 81.366130][ T21] usb 3-1: USB disconnect, device number 2 [ 81.427928][ T4325] device ip6_vti0 entered promiscuous mode [ 81.473119][ T4325] device sit0 entered promiscuous mode [ 81.543261][ T4325] device ip6tnl0 entered promiscuous mode [ 81.575254][ T4325] device ip6gre0 entered promiscuous mode [ 81.587600][ T4271] usb 2-1: unable to get BOS descriptor or descriptor too short [ 81.597959][ T4203] udevd[4203]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.627334][ T4190] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.646057][ T4325] device syz_tun entered promiscuous mode [ 81.681315][ T4325] device ip6gretap0 entered promiscuous mode [ 81.718739][ T4271] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.736530][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.745109][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.748602][ T4271] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 81.777659][ T4271] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.792621][ T4325] device bridge0 entered promiscuous mode [ 81.841100][ T4325] device vcan0 entered promiscuous mode [ 81.858936][ T4325] device bond0 entered promiscuous mode [ 81.864553][ T4325] device bond_slave_0 entered promiscuous mode [ 81.871474][ T4325] device bond_slave_1 entered promiscuous mode [ 81.906513][ T4325] device team0 entered promiscuous mode [ 81.912425][ T4325] device team_slave_0 entered promiscuous mode [ 81.919404][ T4325] device team_slave_1 entered promiscuous mode [ 81.947793][ T4271] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 81.959040][ T4271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 81.967176][ T4271] usb 2-1: Product: syz [ 81.971655][ T4271] usb 2-1: Manufacturer: syz [ 81.980732][ T4325] device dummy0 entered promiscuous mode [ 82.010735][ T4325] device nlmon0 entered promiscuous mode [ 82.022217][ T4325] device caif0 entered promiscuous mode [ 82.030421][ T4325] device batadv0 entered promiscuous mode [ 82.039134][ T4190] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 82.052806][ T4190] usb 1-1: config 1 has no interface number 0 [ 82.063090][ T4325] device vxcan0 entered promiscuous mode [ 82.087853][ T4267] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 82.106020][ T4325] device vxcan1 entered promiscuous mode [ 82.116444][ T4325] device veth0 entered promiscuous mode [ 82.137684][ T4290] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.158257][ T4325] device veth1 entered promiscuous mode [ 82.190822][ T4325] device wg0 entered promiscuous mode [ 82.216704][ T4325] device wg1 entered promiscuous mode [ 82.237739][ T4190] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 82.252505][ T4190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.263069][ T4271] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 82.270286][ T4190] usb 1-1: Product: syz [ 82.274492][ T4190] usb 1-1: Manufacturer: syz [ 82.279989][ T4271] usb 2-1: No streaming interface found for terminal 2. [ 82.287599][ T4190] usb 1-1: SerialNumber: syz [ 82.297690][ T4271] usb 2-1: USB disconnect, device number 2 [ 82.316573][ T4325] device wg2 entered promiscuous mode [ 82.346895][ T4325] device veth0_to_bridge entered promiscuous mode [ 82.397543][ T4290] usb 3-1: Using ep0 maxpacket: 16 [ 82.407456][ T4325] device veth1_to_bridge entered promiscuous mode [ 82.456358][ T4325] device veth0_to_bond entered promiscuous mode [ 82.477634][ T4267] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 82.485699][ T4267] usb 4-1: config 0 has no interface number 0 [ 82.507027][ T4325] device veth1_to_bond entered promiscuous mode [ 82.523841][ T4290] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.536752][ T4290] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 82.552675][ T4290] usb 3-1: config 0 interface 0 has no altsetting 0 [ 82.559967][ T4290] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 82.576848][ T4290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.596882][ T4290] usb 3-1: config 0 descriptor?? [ 82.620000][ T4325] device veth0_to_team entered promiscuous mode [ 82.657853][ T4190] usb 1-1: 3:0 : does not exist [ 82.662793][ T4190] usb 1-1: 3:0 : does not exist [ 82.685197][ T4325] device veth1_to_team entered promiscuous mode [ 82.690038][ T4267] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 82.708786][ T4190] usb 1-1: USB disconnect, device number 2 [ 82.714874][ T4267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.723741][ T4267] usb 4-1: Product: syz [ 82.730422][ T4267] usb 4-1: Manufacturer: syz [ 82.740273][ T4267] usb 4-1: SerialNumber: syz [ 82.766610][ T4267] usb 4-1: config 0 descriptor?? [ 82.843426][ T4325] device veth0_to_batadv entered promiscuous mode [ 82.876556][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.913753][ T4325] device batadv_slave_0 entered promiscuous mode [ 82.975259][ T4325] device veth1_to_batadv entered promiscuous mode [ 82.995557][ T4267] usb 4-1: selecting invalid altsetting 1 [ 83.005246][ T4267] dvb_ttusb_budget: ttusb_init_controller: error [ 83.011863][ T4267] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 83.055209][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.091701][ T4267] DVB: Unable to find symbol stv0299_attach() [ 83.272157][ T4325] device batadv_slave_1 entered promiscuous mode [ 83.741223][ T4200] udevd[4200]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.763904][ T4290] input: HID 04f3:074d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:04F3:074D.0001/input/input5 [ 83.798899][ T4325] device xfrm0 entered promiscuous mode [ 83.815297][ T4290] elan 0003:04F3:074D.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.2-1/input0 [ 83.840331][ T4290] usb 3-1: USB disconnect, device number 3 [ 83.869867][ T4267] DVB: Unable to find symbol tda8083_attach() [ 83.881002][ T4267] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 83.923003][ T4267] usb 4-1: USB disconnect, device number 3 [ 83.946625][ T4325] device veth0_to_hsr entered promiscuous mode [ 84.015344][ T4351] fido_id[4351]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 84.063671][ T4325] device veth1_to_hsr entered promiscuous mode [ 84.120713][ T4325] device hsr0 entered promiscuous mode [ 84.156840][ T4325] device veth1_virt_wifi entered promiscuous mode [ 84.195323][ T4325] device veth0_virt_wifi entered promiscuous mode [ 84.209511][ T4325] device virt_wifi0 entered promiscuous mode [ 84.237547][ T4190] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.331715][ T4325] device vlan0 entered promiscuous mode [ 84.364074][ T4325] device vlan1 entered promiscuous mode [ 84.436031][ T4325] device macvlan0 entered promiscuous mode [ 84.489211][ T4325] device macvlan1 entered promiscuous mode [ 84.508047][ T4325] device ipvlan0 entered promiscuous mode [ 84.514367][ T4325] device ipvlan1 entered promiscuous mode [ 84.523396][ T4190] usb 1-1: Using ep0 maxpacket: 8 [ 84.665182][ T4325] device macvtap0 entered promiscuous mode [ 84.678337][ T4190] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 84.686744][ T4190] usb 1-1: config 179 has no interface number 0 [ 84.695676][ T4190] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 84.717411][ T4190] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 84.737388][ T4190] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 84.749175][ T4190] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 84.777318][ T4190] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 84.791890][ T4190] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 84.799062][ T4325] device macsec0 entered promiscuous mode [ 84.810640][ T4190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.848371][ T4350] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 84.924483][ T4325] device geneve0 entered promiscuous mode [ 84.982458][ T4325] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.002419][ T4325] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.016422][ T4325] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.026867][ T4325] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.051871][ T4325] device geneve1 entered promiscuous mode [ 85.139564][ T4325] device netdevsim0 entered promiscuous mode [ 85.185718][ T4190] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6 [ 85.216127][ T4325] device netdevsim1 entered promiscuous mode [ 85.273891][ T4325] device netdevsim2 entered promiscuous mode [ 85.317666][ T4325] device netdevsim3 entered promiscuous mode [ 85.328891][ T1111] usb 1-1: USB disconnect, device number 3 [ 85.337354][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 85.347773][ T1111] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 85.408604][ T4325] device wlan0 entered promiscuous mode [ 85.445917][ T4325] device wlan1 entered promiscuous mode [ 85.457381][ T4344] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 85.564011][ T4325] syz.4.5 (4325) used greatest stack depth: 19760 bytes left [ 85.907497][ T4344] usb 4-1: Using ep0 maxpacket: 8 [ 86.517283][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 86.537282][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 86.695152][ T1109] cfg80211: failed to load regulatory.db [ 86.797597][ T4344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.186972][ T4344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.196963][ T4344] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.209982][ T4344] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 87.219109][ T4344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.231497][ T4344] usb 4-1: config 0 descriptor?? [ 87.474375][ T4380] loop4: detected capacity change from 0 to 4096 [ 87.605996][ T4380] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 87.735124][ T4380] capability: warning: `syz.4.22' uses deprecated v2 capabilities in a way that may be insecure [ 88.258722][ T4344] sony 0003:054C:042F.0002: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 88.273466][ T4344] sony 0003:054C:042F.0002: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.3-1/input0 [ 88.285805][ T4344] sony 0003:054C:042F.0002: failed to claim input [ 88.312120][ T4344] usb 4-1: USB disconnect, device number 4 [ 88.572037][ T4388] fido_id[4388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 88.606853][ T2289] Bluetooth: hci0: command 0x0c3a tx timeout [ 88.721356][ T4397] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 88.814088][ T4399] IPVS: sh: FWM 3 0x00000003 - no destination available [ 89.225251][ T4267] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.327389][ T2289] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.338230][ T4427] netlink: 44 bytes leftover after parsing attributes in process `syz.4.32'. [ 90.509975][ T4396] loop3: detected capacity change from 0 to 40427 [ 90.564167][ T4396] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 90.595010][ T4396] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 90.638438][ T7] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 90.653828][ T4396] F2FS-fs (loop3): invalid crc value [ 90.670131][ T4396] F2FS-fs (loop3): Found nat_bits in checkpoint [ 90.677833][ T1111] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.717688][ T2289] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 90.744650][ T2289] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 90.803544][ T4396] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 90.811576][ T4396] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.888865][ T4396] autofs4:pid:4396:autofs_fill_super: called with bogus options [ 90.938258][ T2289] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 90.955114][ T2289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.975971][ T2289] usb 2-1: Product: syz [ 90.980803][ T2289] usb 2-1: Manufacturer: syz [ 90.985436][ T2289] usb 2-1: SerialNumber: syz [ 91.014993][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.206520][ T4447] input: syz0 as /devices/virtual/input/input8 [ 91.214343][ T7] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 91.224610][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.232829][ T7] usb 1-1: Product: syz [ 91.237774][ T7] usb 1-1: Manufacturer: syz [ 91.242412][ T7] usb 1-1: SerialNumber: syz [ 91.259364][ T7] usb 1-1: config 0 descriptor?? [ 91.331225][ T7] kobil_sct 1-1:0.0: required endpoints missing [ 91.338515][ T2289] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 91.535116][ T2289] usb 1-1: USB disconnect, device number 4 [ 91.571128][ T4344] usb 2-1: USB disconnect, device number 3 [ 91.587588][ T4344] usblp0: removed [ 91.710783][ T4454] siw: device registration error -23 [ 91.994763][ T4355] Set syz1 is full, maxelem 65536 reached [ 92.055366][ T4460] IPVS: sh: FWM 3 0x00000003 - no destination available [ 92.277284][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 92.297282][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 92.307283][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 92.317281][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 92.327281][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 92.337280][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 92.347280][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 92.357279][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 93.210056][ T4469] loop0: detected capacity change from 0 to 4096 [ 95.053181][ T4469] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 96.737509][ T4190] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.897489][ T4190] usb 5-1: Using ep0 maxpacket: 16 [ 97.897489][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.167651][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 98.307588][ T7] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 98.373306][ T7] usb 2-1: config 179 has no interface number 0 [ 98.464456][ T7] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 98.627620][ T7] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 98.639234][ T7] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 98.650972][ T7] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 98.662826][ T7] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 98.676444][ T7] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 98.685843][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.733841][ T4489] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 98.812973][ T4190] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 98.826804][ T4190] usb 5-1: can't read configurations, error -71 [ 99.050482][ T7] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input9 [ 99.096510][ T4495] ODEBUG: Out of memory. ODEBUG disabled [ 99.246815][ T7] usb 2-1: USB disconnect, device number 4 [ 99.267351][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 99.277029][ T7] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 99.616648][ T4503] loop0: detected capacity change from 0 to 40427 [ 99.656857][ T4504] loop2: detected capacity change from 0 to 32768 [ 99.849750][ T4504] ======================================================= [ 99.849750][ T4504] WARNING: The mand mount option has been deprecated and [ 99.849750][ T4504] and is ignored by this kernel. Remove the mand [ 99.849750][ T4504] option from the mount to silence this warning. [ 99.849750][ T4504] ======================================================= [ 100.020580][ T4516] loop4: detected capacity change from 0 to 16 [ 100.037871][ T4517] Zero length message leads to an empty skb [ 100.064551][ T4516] erofs: (device loop4): mounted with root inode @ nid 36. [ 100.081283][ T4516] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 100.298793][ T4504] XFS (loop2): Mounting V5 Filesystem [ 100.322796][ T4529] loop0: detected capacity change from 0 to 128 [ 100.627908][ T4504] XFS (loop2): Ending clean mount [ 100.652938][ T4525] block device autoloading is deprecated and will be removed. [ 100.730429][ T4504] XFS (loop2): Quotacheck needed: Please wait. [ 101.336177][ T4504] XFS (loop2): Quotacheck: Done. [ 101.492381][ T4344] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 101.698876][ T4201] XFS (loop2): Unmounting Filesystem [ 101.797572][ T4344] usb 2-1: Using ep0 maxpacket: 16 [ 101.947637][ T4344] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.968990][ T4344] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 102.047375][ T4344] usb 2-1: config 0 interface 0 has no altsetting 0 [ 102.067379][ T4344] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 102.125015][ T4344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.212025][ T4344] usb 2-1: config 0 descriptor?? [ 102.843437][ T4344] input: HID 04f3:074d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04F3:074D.0003/input/input10 [ 102.939731][ T4344] elan 0003:04F3:074D.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.1-1/input0 [ 103.115196][ T7] usb 2-1: USB disconnect, device number 5 [ 103.170196][ T4547] fido_id[4547]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 104.016101][ T4566] vivid-000: disconnect [ 104.034861][ T4565] vivid-000: reconnect [ 104.220188][ T4568] loop1: detected capacity change from 0 to 16 [ 104.267502][ T4568] erofs: (device loop1): mounted with root inode @ nid 36. [ 104.276716][ T4568] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 104.445810][ T4495] Set syz1 is full, maxelem 65536 reached [ 105.654792][ T4346] attempt to access beyond end of device [ 105.654792][ T4346] loop0: rw=1, want=785, limit=128 [ 105.886217][ T4583] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 105.912823][ T4583] CIFS mount error: No usable UNC path provided in device string! [ 105.912823][ T4583] [ 105.923322][ T4583] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 106.886823][ T4590] loop4: detected capacity change from 0 to 512 [ 106.917566][ T4584] device wireguard0 entered promiscuous mode [ 106.990871][ T4590] EXT4-fs (loop4): Ignoring removed bh option [ 107.103588][ T4590] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,norecovery,bh,noload,bsdgroups,noquota,,errors=continue. Quota mode: writeback. [ 107.157181][ T4590] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.333073][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.597954][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 107.725782][ T7] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 107.755551][ T7] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.818459][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 107.855875][ T7] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 107.885223][ T4613] loop1: detected capacity change from 0 to 16 [ 107.909493][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.934965][ T4613] erofs: (device loop1): mounted with root inode @ nid 36. [ 107.947690][ T4613] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 108.042731][ T7] usb 3-1: config 0 descriptor?? [ 108.561859][ T7] input: HID 1e7d:3264 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1E7D:3264.0004/input/input11 [ 108.807428][ T4267] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 109.157837][ T4267] usb 4-1: Using ep0 maxpacket: 16 [ 109.424083][ T4267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.462362][ T4267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.497274][ T4267] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 109.566758][ T4267] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 109.636778][ T4267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.768434][ T4267] usb 4-1: config 0 descriptor?? [ 109.787252][ C0] sched: RT throttling activated [ 109.808336][ T7] isku 0003:1E7D:3264.0004: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 1e7d:3264] on usb-dummy_hcd.2-1/input0 [ 110.137609][ T4267] usbhid 4-1:0.0: can't add hid device: -71 [ 110.143699][ T4267] usbhid: probe of 4-1:0.0 failed with error -71 [ 110.202373][ T4267] usb 4-1: USB disconnect, device number 5 [ 110.270854][ T4623] loop0: detected capacity change from 0 to 32768 [ 110.390139][ T4623] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.86 (4623) [ 110.643302][ C1] Unknown status report in ack skb [ 110.781045][ T7] usb 3-1: USB disconnect, device number 4 [ 110.799103][ T4269] Bluetooth: hci4: command 0x2016 tx timeout [ 110.885840][ T4642] loop3: detected capacity change from 0 to 16 [ 110.944317][ T4642] erofs: (device loop3): mounted with root inode @ nid 36. [ 110.973816][ T4642] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 111.457127][ T4623] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 111.701493][ T4623] BTRFS warning (device loop0): excessive commit interval 3581 [ 111.709478][ T4623] BTRFS info (device loop0): force zlib compression, level 3 [ 111.717052][ T4623] BTRFS info (device loop0): metadata ratio 107050 [ 111.723719][ T4623] BTRFS info (device loop0): turning on flush-on-commit [ 111.731346][ T4623] BTRFS info (device loop0): max_inline at 4096 [ 111.737740][ T4623] BTRFS info (device loop0): using free space tree [ 111.744483][ T4623] BTRFS info (device loop0): has skinny extents [ 112.039977][ T4641] fido_id[4641]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 112.149179][ T4623] BTRFS error (device loop0): open_ctree failed: -12 [ 112.305947][ T4669] loop4: detected capacity change from 0 to 256 [ 112.326281][ T4671] IPVS: sh: FWM 3 0x00000003 - no destination available [ 112.493456][ T4675] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.665839][ T4675] device bridge_slave_0 left promiscuous mode [ 112.678265][ T4195] Bluetooth: hci0: unexpected event for opcode 0x0404 [ 112.695085][ T4675] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.930306][ T4680] netlink: 28 bytes leftover after parsing attributes in process `syz.2.105'. [ 113.976602][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.074380][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.136809][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.166935][ T4710] loop3: detected capacity change from 0 to 16 [ 114.220401][ T4710] erofs: (device loop3): mounted with root inode @ nid 36. [ 114.229382][ T4710] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 115.600820][ T4725] program syz.3.116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.939069][ T4619] Set syz1 is full, maxelem 65536 reached [ 116.066933][ T4735] loop1: detected capacity change from 0 to 512 [ 116.370148][ T4740] loop2: detected capacity change from 0 to 16 [ 116.400912][ T4746] input: syz0 as /devices/virtual/input/input12 [ 116.421230][ T4740] erofs: (device loop2): mounted with root inode @ nid 36. [ 116.431554][ T4740] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 116.532544][ T4735] EXT4-fs (loop1): 1 orphan inode deleted [ 116.617000][ T4735] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.666257][ T4735] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.731795][ T4760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.131'. [ 116.877411][ T4768] ip_tables: iptables: counters copy to user failed while replacing table [ 117.880740][ T4780] loop3: detected capacity change from 0 to 16 [ 117.969163][ T4780] erofs: (device loop3): mounted with root inode @ nid 36. [ 118.005724][ T4782] ip_tables: iptables: counters copy to user failed while replacing table [ 118.159430][ T4780] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 118.625331][ T4799] syz.2.144 uses obsolete (PF_INET,SOCK_PACKET) [ 118.744125][ T26] audit: type=1326 audit(1794191907.676:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4803 comm="syz.3.143" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb70eab19 code=0x7ffc0000 [ 118.785060][ T4805] loop3: detected capacity change from 0 to 512 [ 118.810659][ T4805] EXT4-fs (loop3): Ignoring removed nobh option [ 118.961875][ T26] audit: type=1326 audit(1794191907.716:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4803 comm="syz.3.143" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb70eab19 code=0x7ffc0000 [ 119.025050][ T26] audit: type=1326 audit(1794191907.716:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4803 comm="syz.3.143" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb70eab19 code=0x7ffc0000 [ 119.095073][ T4813] netlink: 76 bytes leftover after parsing attributes in process `syz.4.147'. [ 119.304897][ T26] audit: type=1326 audit(1794191907.716:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4803 comm="syz.3.143" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdfb70eab19 code=0x7ffc0000 [ 119.331012][ T26] audit: type=1326 audit(1794191907.716:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4803 comm="syz.3.143" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdfb70ea882 code=0x7ffc0000 [ 119.356500][ T4805] EXT4-fs (loop3): 1 truncate cleaned up [ 119.362943][ T4805] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,auto_da_alloc=0x0000000000000005,nojournal_checksum,noload,nobh,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: none. [ 119.386795][ T26] audit: type=1326 audit(1794191907.716:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4803 comm="syz.3.143" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdfb70ab34e code=0x7ffc0000 [ 119.389029][ T4815] lo: Caught tx_queue_len zero misconfig [ 119.429076][ T26] audit: type=1326 audit(1794191907.716:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4803 comm="syz.3.143" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdfb70ea947 code=0x7ffc0000 [ 119.461385][ T26] audit: type=1326 audit(1794191907.716:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4803 comm="syz.3.143" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdfb70ab34e code=0x7ffc0000 [ 119.502974][ T26] audit: type=1326 audit(1794191907.716:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4803 comm="syz.3.143" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdfb70ea7ab code=0x7ffc0000 [ 119.534723][ T26] audit: type=1326 audit(1794191907.736:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4803 comm="syz.3.143" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdfb70ab34e code=0x7ffc0000 [ 119.861306][ T4816] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 120.092080][ T4827] loop4: detected capacity change from 0 to 16 [ 120.147535][ T4827] erofs: (device loop4): mounted with root inode @ nid 36. [ 120.156680][ T4827] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 120.356108][ T4839] rxe_eth0 speed is unknown, defaulting to 1000 [ 120.403023][ T4847] autofs4:pid:4847:autofs_fill_super: called with bogus options [ 122.415749][ T4868] loop3: detected capacity change from 0 to 16 [ 122.455427][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 122.462649][ T4868] erofs: (device loop3): mounted with root inode @ nid 36. [ 122.477798][ T4868] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 122.620718][ T4874] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 123.097061][ T4867] loop4: detected capacity change from 0 to 32768 [ 123.159019][ T4867] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.168 (4867) [ 123.199951][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.217135][ T13] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 123.227134][ T13] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.259404][ T4867] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 123.273857][ T4867] BTRFS info (device loop4): using free space tree [ 123.280688][ T4867] BTRFS info (device loop4): has skinny extents [ 123.342650][ T4897] netlink: 44 bytes leftover after parsing attributes in process `syz.3.179'. [ 123.397598][ T13] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 123.438097][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.446187][ T13] usb 1-1: Product: syz [ 123.512847][ T13] usb 1-1: Manufacturer: syz [ 123.546412][ T13] usb 1-1: SerialNumber: syz [ 123.604731][ T4867] BTRFS info (device loop4): enabling ssd optimizations [ 123.617431][ T13] usb 1-1: can't set config #1, error -71 [ 123.702077][ T13] usb 1-1: USB disconnect, device number 5 [ 123.815483][ T4923] loop0: detected capacity change from 0 to 16 [ 123.909568][ T4923] erofs: (device loop0): mounted with root inode @ nid 36. [ 123.919243][ T4923] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 124.183152][ T4666] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 124.477350][ T4666] usb 4-1: Using ep0 maxpacket: 32 [ 124.607482][ T4666] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 124.625357][ T4666] usb 4-1: config 0 has no interface number 0 [ 124.657138][ T4666] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 124.713782][ T4666] usb 4-1: config 0 interface 196 has no altsetting 0 [ 124.927652][ T4666] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 124.988452][ T4666] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.013126][ T4666] usb 4-1: Product: syz [ 125.026951][ T4941] device bond0 entered promiscuous mode [ 125.028061][ T4666] usb 4-1: Manufacturer: syz [ 125.064521][ T4666] usb 4-1: SerialNumber: syz [ 125.066306][ T4941] device bond_slave_0 entered promiscuous mode [ 125.100329][ T4941] device bond_slave_1 entered promiscuous mode [ 125.109538][ T4666] usb 4-1: config 0 descriptor?? [ 125.137931][ T4941] device batadv0 entered promiscuous mode [ 125.147803][ T4921] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.173310][ T4941] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 125.216451][ T4941] device bond0 left promiscuous mode [ 125.242456][ T4941] device bond_slave_0 left promiscuous mode [ 125.268175][ T4941] device bond_slave_1 left promiscuous mode [ 125.298675][ T4941] device batadv0 left promiscuous mode [ 125.644363][ T4666] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 125.856104][ T4946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.190'. [ 127.008964][ T4666] usb 4-1: USB disconnect, device number 6 [ 127.017359][ T2289] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 127.158826][ T4666] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 127.257411][ T2289] usb 1-1: Using ep0 maxpacket: 32 [ 127.377602][ T2289] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 127.409264][ T2289] usb 1-1: config 0 interface 0 has no altsetting 0 [ 127.441956][ T2289] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 127.625693][ T2289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.636534][ T2289] usb 1-1: config 0 descriptor?? [ 127.641695][ T4978] loop3: detected capacity change from 0 to 16 [ 127.771530][ T4978] erofs: (device loop3): mounted with root inode @ nid 36. [ 128.143279][ T2289] corsair-psu 0003:1B1C:1C09.0005: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 128.180312][ T4982] jffs2: notice: (4982) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 128.209680][ T4973] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 128.747398][ T2289] corsair-psu 0003:1B1C:1C09.0005: unable to initialize device (-71) [ 128.779368][ T2289] corsair-psu: probe of 0003:1B1C:1C09.0005 failed with error -71 [ 128.854650][ T2289] usb 1-1: USB disconnect, device number 6 [ 129.093101][ T4999] fido_id[4999]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 130.081313][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.291017][ T4195] Bluetooth: Wrong link type (-57) [ 130.307704][ T5038] loop3: detected capacity change from 0 to 16 [ 130.522397][ T5038] erofs: (device loop3): mounted with root inode @ nid 36. [ 130.799373][ T5035] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 131.015182][ T5049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.216'. [ 131.889614][ T5066] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 131.960203][ T5053] loop3: detected capacity change from 0 to 32768 [ 132.087461][ T5053] XFS (loop3): Mounting V5 Filesystem [ 132.446886][ T5053] XFS (loop3): Ending clean mount [ 132.476002][ T5053] XFS (loop3): Quotacheck needed: Please wait. [ 132.590476][ T5053] XFS (loop3): Quotacheck: Done. [ 132.675604][ T4202] XFS (loop3): Unmounting Filesystem [ 132.770807][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.777199][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.729472][ T5099] loop2: detected capacity change from 0 to 16 [ 134.215263][ T5099] erofs: (device loop2): mounted with root inode @ nid 36. [ 134.295434][ T5093] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 134.875925][ T5123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.238'. [ 137.431769][ T5140] loop4: detected capacity change from 0 to 16 [ 138.163734][ T5140] erofs: (device loop4): mounted with root inode @ nid 36. [ 138.199457][ T5150] autofs4:pid:5150:autofs_fill_super: called with bogus options [ 138.316359][ T5140] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 138.372084][ T4267] hid-generic 0003:0008:0043.0006: item fetching failed at offset 0/1 [ 138.437961][ T4267] hid-generic: probe of 0003:0008:0043.0006 failed with error -22 [ 138.449453][ T5154] FAULT_INJECTION: forcing a failure. [ 138.449453][ T5154] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 138.464195][ T5154] CPU: 1 PID: 5154 Comm: syz.1.252 Not tainted syzkaller #0 [ 138.471511][ T5154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 138.481596][ T5154] Call Trace: [ 138.484896][ T5154] [ 138.487830][ T5154] dump_stack_lvl+0x188/0x250 [ 138.492543][ T5154] ? show_regs_print_info+0x20/0x20 [ 138.497763][ T5154] ? load_image+0x410/0x410 [ 138.502316][ T5154] ? mark_lock+0x94/0x320 [ 138.506655][ T5154] should_fail+0x383/0x4b0 [ 138.511091][ T5154] prepare_alloc_pages+0x1e3/0x5b0 [ 138.516229][ T5154] __alloc_pages+0x11b/0x480 [ 138.520844][ T5154] ? zone_statistics+0x170/0x170 [ 138.525830][ T5154] ? rcu_lock_acquire+0x30/0x30 [ 138.530694][ T5154] ? alloc_pages+0x452/0x560 [ 138.535324][ T5154] __get_free_pages+0x8/0x30 [ 138.539954][ T5154] __tlb_remove_page_size+0x1f2/0x3f0 [ 138.545348][ T5154] unmap_page_range+0xfcf/0x2410 [ 138.550318][ T5154] unmap_vmas+0x131/0x250 [ 138.554699][ T5154] ? unmap_page_range+0x2410/0x2410 [ 138.559921][ T5154] ? __mutex_lock_common+0x435/0x2400 [ 138.565309][ T5154] ? exit_mm_release+0x16/0x30 [ 138.570087][ T5154] exit_mmap+0x3b9/0x640 [ 138.574340][ T5154] ? vm_brk+0x20/0x20 [ 138.578333][ T5154] ? uprobe_clear_state+0x2f6/0x460 [ 138.583538][ T5154] __mmput+0x115/0x390 [ 138.587613][ T5154] exit_mm+0x632/0x7b0 [ 138.591699][ T5154] ? perf_pmu_migrate_context+0xb70/0xb70 [ 138.597442][ T5154] ? do_exit+0x2100/0x2100 [ 138.601874][ T5154] ? __ia32_sys_timer_delete+0x40/0x40 [ 138.607357][ T5154] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 138.612846][ T5154] ? tty_audit_exit+0x149/0x1f0 [ 138.617710][ T5154] do_exit+0x5b8/0x2100 [ 138.621880][ T5154] ? put_task_struct+0x80/0x80 [ 138.626646][ T5154] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 138.632638][ T5154] ? cgroup_freezing+0x264/0x310 [ 138.637589][ T5154] do_group_exit+0x12c/0x2f0 [ 138.642358][ T5154] ? lockdep_hardirqs_on+0x94/0x140 [ 138.647567][ T5154] get_signal+0x7eb/0x12e0 [ 138.652003][ T5154] arch_do_signal_or_restart+0xe6/0x12a0 [ 138.657682][ T5154] ? futex_exit_release+0x1c0/0x1c0 [ 138.662909][ T5154] ? get_sigframe_size+0x10/0x10 [ 138.667854][ T5154] ? __context_tracking_exit+0x4c/0x80 [ 138.673329][ T5154] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 138.679324][ T5154] ? exit_to_user_mode_loop+0x3b/0x130 [ 138.684794][ T5154] exit_to_user_mode_loop+0x9e/0x130 [ 138.690086][ T5154] exit_to_user_mode_prepare+0xee/0x180 [ 138.695642][ T5154] syscall_exit_to_user_mode+0x16/0x40 [ 138.701373][ T5154] do_syscall_64+0x58/0xa0 [ 138.705790][ T5154] ? clear_bhb_loop+0x30/0x80 [ 138.710474][ T5154] ? clear_bhb_loop+0x30/0x80 [ 138.715166][ T5154] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.721071][ T5154] RIP: 0033:0x7f91ca04bb19 [ 138.725526][ T5154] Code: Unable to access opcode bytes at RIP 0x7f91ca04baef. [ 138.732893][ T5154] RSP: 002b:00007f91c82a20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 138.741313][ T5154] RAX: fffffffffffffe00 RBX: 00007f91ca2d1fa8 RCX: 00007f91ca04bb19 [ 138.749291][ T5154] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f91ca2d1fa8 [ 138.757361][ T5154] RBP: 00007f91ca2d1fa0 R08: 0000000000000000 R09: 0000000000000000 [ 138.765355][ T5154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.773445][ T5154] R13: 00007f91ca2d2038 R14: 00007ffd4eba0560 R15: 00007ffd4eba0648 [ 138.781433][ T5154] [ 138.858083][ T5145] rxe_eth0 speed is unknown, defaulting to 1000 [ 139.208978][ T5145] chnl_net:caif_netlink_parms(): no params data found [ 139.217472][ T4269] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 139.447725][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.455241][ T5145] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.702244][ T4290] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 139.725191][ T5145] device bridge_slave_0 entered promiscuous mode [ 139.734020][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.741323][ T5145] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.758234][ T5145] device bridge_slave_1 entered promiscuous mode [ 139.821343][ T5145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.888464][ T4269] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 139.908992][ T4269] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 139.923455][ T5145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.971236][ T4269] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 140.031771][ T4269] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 140.081807][ T5145] team0: Port device team_slave_0 added [ 140.091568][ T4269] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 140.141203][ T4926] Bluetooth: hci0: command 0x0409 tx timeout [ 140.152127][ T5145] team0: Port device team_slave_1 added [ 140.167103][ T4269] usb 2-1: config 168 interface 0 has no altsetting 0 [ 140.271415][ T5145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.278497][ T4269] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 140.278533][ T4269] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 140.278574][ T4269] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 140.278605][ T4269] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 140.278631][ T4269] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 140.278661][ T4269] usb 2-1: config 168 interface 0 has no altsetting 0 [ 140.340938][ T5145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.358448][ T4269] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 140.368194][ T5145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.389217][ T5145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.396432][ T5145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.407511][ T4269] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 140.443922][ T5145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.471664][ T4269] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 140.491896][ T4269] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 140.507110][ T4269] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 140.528730][ T4269] usb 2-1: config 168 interface 0 has no altsetting 0 [ 140.556722][ T5145] device hsr_slave_0 entered promiscuous mode [ 140.574113][ T5145] device hsr_slave_1 entered promiscuous mode [ 140.580462][ T4290] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.597906][ T4290] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 140.617290][ T4290] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 140.640606][ T4290] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 140.660861][ T4290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.680079][ T5145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.698079][ T5145] Cannot create hsr debugfs directory [ 140.774423][ T4269] usb 2-1: string descriptor 0 read error: -22 [ 140.784482][ T4269] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 140.812216][ T4269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.883691][ T4269] adutux 2-1:168.0: interrupt endpoints not found [ 140.997448][ T4290] cxacru_cm: 17 callbacks suppressed [ 140.997471][ T4290] cxacru 3-1:1.0: invalid response length to cm 0x90: 0 [ 141.011625][ T5145] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 141.023710][ T5189] loop4: detected capacity change from 0 to 40427 [ 141.036549][ T5145] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 141.061735][ T5145] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 141.073093][ T5145] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.080057][ T5190] cxacru 3-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 141.080084][ T5190] cxacru 3-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 141.112748][ T4269] usb 2-1: USB disconnect, device number 6 [ 141.136864][ T5189] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 141.151424][ T5189] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 141.231916][ T5189] F2FS-fs (loop4): Found nat_bits in checkpoint [ 141.311440][ T13] usb 3-1: USB disconnect, device number 5 [ 141.334617][ T5145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.367005][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.392843][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.401389][ T5189] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 141.412860][ T5145] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.420079][ T5189] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 141.433755][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.448083][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.466130][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.473357][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.526838][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.568492][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.587751][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.685137][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.692330][ T1234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.700753][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.709907][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.396394][ T4290] Bluetooth: hci0: command 0x041b tx timeout [ 143.232218][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.268292][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.329147][ T5209] loop1: detected capacity change from 0 to 16 [ 143.357785][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.479804][ T5209] erofs: (device loop1): mounted with root inode @ nid 36. [ 143.491772][ T4195] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 143.502786][ T4195] CPU: 1 PID: 4195 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 143.510391][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 143.520630][ T4195] Workqueue: hci3 hci_rx_work [ 143.525384][ T4195] Call Trace: [ 143.528712][ T4195] [ 143.531696][ T4195] dump_stack_lvl+0x188/0x250 [ 143.536438][ T4195] ? show_regs_print_info+0x20/0x20 [ 143.542271][ T4195] ? load_image+0x410/0x410 [ 143.546842][ T4195] sysfs_create_dir_ns+0x26a/0x290 [ 143.551995][ T4195] ? sysfs_warn_dup+0xa0/0xa0 [ 143.556919][ T4195] ? kthread+0x42e/0x520 [ 143.561232][ T4195] ? do_raw_spin_unlock+0x11d/0x230 [ 143.566617][ T4195] kobject_add_internal+0x5ba/0xcd0 [ 143.571866][ T4195] kobject_add+0x160/0x230 [ 143.576348][ T4195] ? kobject_init+0x1c0/0x1c0 [ 143.581054][ T4195] ? __raw_spin_lock_init+0x41/0x100 [ 143.586356][ T4195] ? klist_children_get+0x50/0x50 [ 143.591399][ T4195] ? get_device_parent+0x121/0x3e0 [ 143.596540][ T4195] device_add+0x470/0x1050 [ 143.600974][ T4195] ? device_initialize+0x2a5/0x4d0 [ 143.606104][ T4195] hci_conn_add_sysfs+0xd1/0x1e0 [ 143.611193][ T4195] le_conn_complete_evt+0xc55/0x14d0 [ 143.616511][ T4195] ? cs_le_create_conn+0x5e0/0x5e0 [ 143.621870][ T4195] ? __mutex_trylock_common+0x15c/0x260 [ 143.627452][ T4195] hci_le_meta_evt+0x285/0x3ca0 [ 143.632336][ T4195] ? hci_event_packet+0x363/0x1310 [ 143.637467][ T4195] ? __lock_acquire+0x7d40/0x7d40 [ 143.642519][ T4195] ? hci_remote_host_features_evt+0x240/0x240 [ 143.648598][ T4195] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 143.654245][ T4195] ? mark_lock+0x94/0x320 [ 143.658606][ T4195] ? mutex_unlock+0x10/0x10 [ 143.663124][ T4195] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 143.669135][ T4195] ? lock_chain_count+0x20/0x20 [ 143.674002][ T4195] ? __rwlock_init+0x140/0x140 [ 143.678776][ T4195] hci_event_packet+0xe0b/0x1310 [ 143.683738][ T4195] ? _raw_spin_unlock+0x40/0x40 [ 143.688606][ T4195] ? rcu_lock_release+0x20/0x20 [ 143.693488][ T4195] ? hci_send_to_monitor+0x9c/0x4a0 [ 143.698875][ T4195] hci_rx_work+0x255/0xa10 [ 143.703387][ T4195] process_one_work+0x867/0xff0 [ 143.708404][ T4195] ? worker_detach_from_pool+0x240/0x240 [ 143.714232][ T4195] ? lockdep_hardirqs_off+0x70/0x100 [ 143.719569][ T4195] ? _raw_spin_lock_irq+0xb7/0xf0 [ 143.724637][ T4195] ? _raw_spin_lock_irqsave+0x100/0x100 [ 143.730203][ T4195] ? wq_worker_running+0x97/0x170 [ 143.735308][ T4195] worker_thread+0xad7/0x12a0 [ 143.740033][ T4195] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 143.745954][ T4195] kthread+0x42e/0x520 [ 143.750125][ T4195] ? rcu_lock_release+0x20/0x20 [ 143.755003][ T4195] ? kthread_blkcg+0xd0/0xd0 [ 143.759608][ T4195] ret_from_fork+0x1f/0x30 [ 143.764049][ T4195] [ 143.773427][ T4195] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 143.787114][ T4195] Bluetooth: hci3: failed to register connection device [ 143.824162][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.841748][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.851072][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.926967][ T5209] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 143.955501][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.073498][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.116180][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.130127][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.220845][ T5217] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 144.228281][ T5217] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 144.270784][ T5217] vhci_hcd vhci_hcd.0: Device attached [ 144.297079][ T5218] vhci_hcd: connection closed [ 144.317728][ T155] vhci_hcd: stop threads [ 144.327055][ T155] vhci_hcd: release socket [ 144.370889][ T155] vhci_hcd: disconnect device [ 144.524929][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.557967][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.601811][ T5145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.619487][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 146.736483][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 146.865052][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.889488][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.958682][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.973877][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.008397][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.030031][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.053784][ T5145] device veth0_vlan entered promiscuous mode [ 147.081571][ T5145] device veth1_vlan entered promiscuous mode [ 147.179254][ T5264] loop1: detected capacity change from 0 to 16 [ 147.574276][ T5264] erofs: (device loop1): mounted with root inode @ nid 36. [ 147.640569][ T5262] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 147.650543][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 147.688204][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 147.722108][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.748555][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.973413][ T5145] device veth0_macvtap entered promiscuous mode [ 147.984128][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.999909][ T5145] device veth1_macvtap entered promiscuous mode [ 148.932737][ T5145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.984551][ T5145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.996539][ T5145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.008229][ T5145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.025500][ T5278] netlink: 64 bytes leftover after parsing attributes in process `syz.4.285'. [ 149.035306][ T5145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.046363][ T5145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.077401][ T5145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.104665][ T5145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.126524][ T5145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.149884][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.159384][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.190990][ T5145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.210454][ T5145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.252456][ T5145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.283737][ T5145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.304136][ T5145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.654276][ T5145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.861154][ T5145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.195834][ T5145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.250570][ T5145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.271035][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.291369][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.317991][ T5145] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.336223][ T5145] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.355045][ T5145] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.364658][ T5145] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.530189][ T5304] loop2: detected capacity change from 0 to 16 [ 150.607960][ T5304] erofs: (device loop2): mounted with root inode @ nid 36. [ 150.626992][ T5304] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 150.727323][ T4290] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 150.851248][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.917574][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.989819][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.046861][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.088626][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.107697][ T4290] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 151.127164][ T4290] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.154131][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.194299][ T4290] usb 4-1: config 0 has no interface number 0 [ 151.228288][ T4290] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.445806][ T5307] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 151.458541][ T4290] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 151.474367][ T5307] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 151.480989][ T4290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.511092][ T4290] usb 4-1: Product: syz [ 151.515391][ T4290] usb 4-1: Manufacturer: syz [ 151.527617][ T5308] netlink: 14 bytes leftover after parsing attributes in process `syz.5.246'. [ 151.544126][ T4290] usb 4-1: SerialNumber: syz [ 151.587831][ T4290] usb 4-1: config 0 descriptor?? [ 151.649845][ T4290] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 151.674542][ T4290] radio-si470x: probe of 4-1:0.35 failed with error -5 [ 151.877447][ T4290] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 152.041788][ T4290] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 152.088171][ T5308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.325452][ T5308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.327817][ T5303] block device autoloading is deprecated and will be removed. [ 152.372216][ T5308] bond0 (unregistering): Released all slaves [ 152.436062][ T4269] bond0 speed is unknown, defaulting to 1000 [ 152.453555][ T5307] siw: device registration error -19 [ 153.163016][ T5323] rxe_eth0 speed is unknown, defaulting to 1000 [ 153.875965][ T4926] usb 4-1: USB disconnect, device number 7 [ 154.090549][ T5349] loop4: detected capacity change from 0 to 16 [ 154.141515][ T5349] erofs: (device loop4): mounted with root inode @ nid 36. [ 154.669195][ T5349] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 155.137196][ T5363] jffs2: notice: (5363) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 155.449064][ T26] audit: type=1800 audit(1794191944.386:29): pid=5374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.315" name="file1" dev="sda1" ino=2048 res=0 errno=0 [ 156.476561][ T5387] loop1: detected capacity change from 0 to 16 [ 156.513137][ T5387] erofs: (device loop1): mounted with root inode @ nid 36. [ 156.564865][ T5387] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 156.667323][ T4269] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 158.078187][ T4269] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 158.140305][ T4269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.274573][ T4269] usb 4-1: Product: syz [ 158.351373][ T4269] usb 4-1: Manufacturer: syz [ 158.466378][ T4269] usb 4-1: SerialNumber: syz [ 158.980995][ T4269] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 159.902150][ T5427] usb usb1: usbfs: process 5427 (syz.1.335) did not claim interface 0 before use [ 160.852683][ T5433] loop5: detected capacity change from 0 to 16 [ 160.956247][ T5433] erofs: (device loop5): mounted with root inode @ nid 36. [ 160.976394][ T5433] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 161.187570][ T4269] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 161.317660][ T4269] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 161.422089][ T5435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 161.460933][ T4190] Bluetooth: hci4: command 0x0406 tx timeout [ 161.507545][ T4269] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 161.687484][ T4269] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 161.817581][ T4269] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 161.880852][ T5423] loop2: detected capacity change from 0 to 40427 [ 161.908870][ T4269] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 161.931379][ T5423] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 161.957691][ T5423] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 161.967475][ T4269] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 162.014129][ T5423] F2FS-fs (loop2): Found nat_bits in checkpoint [ 162.058254][ T4269] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 162.119407][ T4269] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 162.142123][ T4269] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 162.168965][ T4269] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 162.183266][ T4269] lan78xx: probe of 4-1:1.0 failed with error -71 [ 162.216209][ T4269] usb 4-1: USB disconnect, device number 8 [ 162.243572][ T5423] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 162.267486][ T5423] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 162.294660][ T5451] netlink: 'syz.5.344': attribute type 1 has an invalid length. [ 162.401697][ T145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.496525][ T5456] netlink: 28 bytes leftover after parsing attributes in process `syz.5.344'. [ 162.550045][ T5463] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 163.020513][ T145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.431852][ T5468] netlink: 'syz.1.350': attribute type 1 has an invalid length. [ 164.446485][ T4269] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 164.457083][ T5471] netlink: 84 bytes leftover after parsing attributes in process `syz.1.350'. [ 165.036327][ T145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.217067][ T5476] loop5: detected capacity change from 0 to 16 [ 165.316038][ T5476] erofs: (device loop5): mounted with root inode @ nid 36. [ 165.335149][ T5476] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 165.405281][ T145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.022784][ T5481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.355'. [ 166.165135][ T5485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.357'. [ 166.324178][ T5493] netlink: 'syz.4.360': attribute type 21 has an invalid length. [ 166.378609][ T5493] netlink: 132 bytes leftover after parsing attributes in process `syz.4.360'. [ 166.415358][ T5493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.360'. [ 168.777423][ T5497] input: syz0 as /devices/virtual/input/input14 [ 170.365046][ T5526] file system registered [ 170.476425][ T5535] loop4: detected capacity change from 0 to 128 [ 170.602644][ T5535] FAT-fs (loop4): Directory bread(block 1048) failed [ 170.610825][ T5535] FAT-fs (loop4): Directory bread(block 1049) failed [ 170.617924][ T5535] FAT-fs (loop4): Directory bread(block 1050) failed [ 170.624739][ T5535] FAT-fs (loop4): Directory bread(block 1051) failed [ 170.631620][ T5535] FAT-fs (loop4): Directory bread(block 1052) failed [ 170.638580][ T5535] FAT-fs (loop4): Directory bread(block 1053) failed [ 170.645371][ T5535] FAT-fs (loop4): Directory bread(block 1054) failed [ 170.652237][ T5535] FAT-fs (loop4): Directory bread(block 1055) failed [ 171.561248][ T5548] loop3: detected capacity change from 0 to 16 [ 171.619875][ T5548] erofs: (device loop3): mounted with root inode @ nid 36. [ 171.640712][ T5548] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 171.837386][ T4344] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 172.247789][ T4344] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.324247][ T4344] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 172.407403][ T4344] usb 6-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 172.459329][ T4344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.505248][ T4344] usb 6-1: config 0 descriptor?? [ 172.897334][ T4924] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 173.047716][ T5531] loop2: detected capacity change from 0 to 32768 [ 173.137850][ T5571] overlayfs: workdir and upperdir must reside under the same mount [ 173.214981][ T5571] si4713 0-0006: IRQ not configured. Using timeouts. [ 173.268015][ T5571] si4713 0-0006: Error while sending command 0x01 [ 173.283242][ T145] device hsr_slave_0 left promiscuous mode [ 173.289905][ T5571] si4713 0-0006: Failed to probe device information. [ 173.301719][ T4924] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 173.334565][ T145] device hsr_slave_1 left promiscuous mode [ 173.337001][ T4924] usb 4-1: config 0 has no interface number 0 [ 173.347081][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.355614][ T5571] si4713: probe of 0-0006 failed with error -5 [ 173.369988][ T4924] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.370131][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.417875][ T5571] i2c i2c-0: new_device: Instantiated device si4713 at 0x06 [ 173.470809][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.507354][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.525803][ T145] device bridge_slave_1 left promiscuous mode [ 173.541539][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.607550][ T4924] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 173.618515][ T5560] loop4: detected capacity change from 0 to 32768 [ 173.628561][ T4924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.645365][ T145] device bridge_slave_0 left promiscuous mode [ 173.652151][ T4924] usb 4-1: Product: syz [ 173.666692][ T4924] usb 4-1: Manufacturer: syz [ 173.668821][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.684340][ T4924] usb 4-1: SerialNumber: syz [ 173.724073][ T4924] usb 4-1: config 0 descriptor?? [ 173.737613][ T5560] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.375 (5560) [ 173.803485][ T4924] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 173.828196][ T145] device veth1_macvtap left promiscuous mode [ 173.842094][ T145] device veth0_macvtap left promiscuous mode [ 173.862472][ T5560] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 173.869848][ T145] device veth1_vlan left promiscuous mode [ 173.888238][ T5560] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 173.911917][ T5560] BTRFS info (device loop4): use zstd compression, level 3 [ 173.920785][ T145] device veth0_vlan left promiscuous mode [ 173.947824][ T5560] BTRFS info (device loop4): using free space tree [ 173.972094][ T5560] BTRFS info (device loop4): has skinny extents [ 174.160102][ T5560] BTRFS info (device loop4): enabling ssd optimizations [ 174.204467][ T26] audit: type=1800 audit(1794191963.136:30): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.375" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 174.526569][ T145] team0 (unregistering): Port device team_slave_1 removed [ 174.545513][ T145] team0 (unregistering): Port device team_slave_0 removed [ 174.573546][ T4924] usb 6-1: USB disconnect, device number 2 [ 174.615219][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.650042][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.944947][ T145] bond0 (unregistering): Released all slaves [ 175.025592][ T5577] batadv_slave_0: Caught tx_queue_len zero misconfig [ 175.088179][ C0] Unknown status report in ack skb [ 175.632172][ C1] usb 4-1: yurex_control_callback - control failed: -2 [ 175.770558][ T5644] loop5: detected capacity change from 0 to 16 [ 175.824543][ T5644] erofs: (device loop5): mounted with root inode @ nid 36. [ 175.826662][ T5644] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 176.598451][ T4272] usb 4-1: USB disconnect, device number 10 [ 176.606428][ T4272] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 176.959759][ T5666] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 177.210987][ T26] audit: type=1800 audit(1794191966.146:31): pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.390" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 178.352974][ T5694] loop2: detected capacity change from 0 to 512 [ 178.399181][ T5694] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.474004][ T5694] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 178.515116][ T5694] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.394: bg 0: block 248: padding at end of block bitmap is not set [ 178.543500][ T5694] Quota error (device loop2): write_blk: dquota write failed [ 178.553792][ T5694] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 178.564680][ T5694] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.394: Failed to acquire dquot type 1 [ 178.629263][ T5694] EXT4-fs (loop2): 1 truncate cleaned up [ 178.657394][ T5694] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 178.903136][ T5704] loop1: detected capacity change from 0 to 4096 [ 179.915650][ T5717] loop4: detected capacity change from 0 to 16 [ 179.980248][ T5715] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.055082][ T5717] erofs: (device loop4): mounted with root inode @ nid 36. [ 180.076249][ T5717] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 180.378674][ T26] audit: type=1800 audit(1794191969.316:32): pid=5704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.396" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 180.611786][ T26] audit: type=1800 audit(1794191969.546:33): pid=5718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.396" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 180.943849][ T5729] loop4: detected capacity change from 0 to 128 [ 180.997150][ T5682] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.721883][ T5729] FAT-fs (loop4): Directory bread(block 1048) failed [ 181.728757][ T5729] FAT-fs (loop4): Directory bread(block 1049) failed [ 181.735620][ T5729] FAT-fs (loop4): Directory bread(block 1050) failed [ 181.742459][ T5729] FAT-fs (loop4): Directory bread(block 1051) failed [ 181.749229][ T5729] FAT-fs (loop4): Directory bread(block 1052) failed [ 181.755965][ T5729] FAT-fs (loop4): Directory bread(block 1053) failed [ 181.762747][ T5729] FAT-fs (loop4): Directory bread(block 1054) failed [ 181.769916][ T5729] FAT-fs (loop4): Directory bread(block 1055) failed [ 181.805939][ T5728] FAT-fs (loop4): FAT read failed (blocknr 128) [ 181.906249][ T5735] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 182.741132][ T5732] loop3: detected capacity change from 0 to 4096 [ 182.859173][ T5746] capability: warning: `syz.4.409' uses 32-bit capabilities (legacy support in use) [ 183.103068][ T5732] EXT4-fs (loop3): Test dummy encryption mode enabled [ 183.155447][ T5732] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,block_validity,nodelalloc,minixdf,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 183.579679][ T5769] loop5: detected capacity change from 0 to 16 [ 183.756504][ T5769] erofs: (device loop5): mounted with root inode @ nid 36. [ 183.764680][ T5732] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 183.944295][ T5769] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 184.444639][ T5794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'. [ 189.998163][ T5835] loop2: detected capacity change from 0 to 16 [ 190.109290][ T5835] erofs: (device loop2): mounted with root inode @ nid 36. [ 190.481280][ T5835] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 190.810663][ T5854] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 191.232899][ T4273] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 191.378559][ T5871] loop1: detected capacity change from 0 to 128 [ 191.495090][ C0] ------------[ cut here ]------------ [ 191.500667][ C0] WARNING: CPU: 0 PID: 5867 at net/mac80211/tx.c:4883 __ieee80211_beacon_get+0x178a/0x1ff0 [ 191.511281][ C0] Modules linked in: [ 191.515283][ C0] CPU: 0 PID: 5867 Comm: syz.3.434 Not tainted syzkaller #0 [ 191.522660][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 191.532806][ C0] RIP: 0010:__ieee80211_beacon_get+0x178a/0x1ff0 [ 191.539233][ C0] Code: 1d f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 12 8f 1d f8 0f 0b e9 16 ef ff ff e8 06 8f 1d f8 <0f> 0b e9 7c f2 ff ff e8 ba ec 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 191.559106][ C0] RSP: 0018:ffffc900000078c0 EFLAGS: 00010246 [ 191.565297][ C0] RAX: ffffffff895b9e8a RBX: ffff888077c8fe00 RCX: ffff888022d39dc0 [ 191.573404][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.581466][ C0] RBP: ffffc90000007af8 R08: ffff888022d39dc0 R09: 0000000000000003 [ 191.588655][ T5871] FAT-fs (loop1): Directory bread(block 1048) failed [ 191.589624][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: f8f8f8f8f8f8f8f8 [ 191.596486][ T5871] FAT-fs (loop1): Directory bread(block 1049) failed [ 191.604361][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f28 [ 191.604383][ C0] FS: 00007fdfb53206c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 191.604403][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.604417][ C0] CR2: 00007fd6e66f9440 CR3: 000000006278f000 CR4: 00000000003506f0 [ 191.604436][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 191.604450][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 191.604464][ C0] Call Trace: [ 191.604472][ C0] [ 191.604492][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 191.604524][ C0] ? verify_lock_unused+0x140/0x140 [ 191.604553][ C0] ? verify_lock_unused+0x140/0x140 [ 191.611571][ T5871] FAT-fs (loop1): Directory bread(block 1050) failed [ 191.619341][ C0] ? ieee80211_get_buffered_bc+0x75e/0x860 [ 191.628624][ T5871] FAT-fs (loop1): Directory bread(block 1051) failed [ 191.634975][ C0] ? mark_lock+0x94/0x320 [ 191.635045][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 191.643325][ T5871] FAT-fs (loop1): Directory bread(block 1052) failed [ 191.651107][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 191.651163][ C0] __iterate_interfaces+0x225/0x4c0 [ 191.659452][ T5871] FAT-fs (loop1): Directory bread(block 1053) failed [ 191.662549][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 191.665619][ T5871] FAT-fs (loop1): Directory bread(block 1054) failed [ 191.671427][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 191.676933][ T5871] FAT-fs (loop1): Directory bread(block 1055) failed [ 191.681931][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 191.770222][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 191.775698][ C0] ? hw_scan_work+0xef0/0xef0 [ 191.780481][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 191.785768][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 191.791072][ C0] hrtimer_run_softirq+0x176/0x240 [ 191.796277][ C0] handle_softirqs+0x336/0x830 [ 191.801129][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 191.806041][ C0] ? do_softirq+0x210/0x210 [ 191.810650][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 191.815847][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 191.821131][ C0] __irq_exit_rcu+0x13b/0x230 [ 191.825849][ C0] ? irq_exit_rcu+0x20/0x20 [ 191.830454][ C0] irq_exit_rcu+0x5/0x20 [ 191.834748][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 191.840460][ C0] [ 191.843519][ C0] [ 191.846525][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 191.852594][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 191.859184][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 7f 5c 7f f7 65 8b 05 50 6d 2f 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 191.878925][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.884981][ C0] RSP: 0018:ffffc90002eff600 EFLAGS: 00000206 [ 191.891131][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 3bab08f9f3ec8b00 [ 191.899208][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2b60 RDI: 0000000000000001 [ 191.907261][ C0] RBP: ffffc90002eff698 R08: ffffffff91047177 R09: 1ffffffff2208e2e [ 191.915313][ C0] R10: dffffc0000000000 R11: fffffbfff2208e2f R12: dffffc0000000000 [ 191.923357][ C0] R13: ffff888073ea81c8 R14: ffff888073ea81c8 R15: 1ffff920005dfec0 [ 191.931443][ C0] ? _raw_spin_unlock+0x40/0x40 [ 191.936357][ C0] __skb_try_recv_datagram+0x17d/0x4e0 [ 191.941911][ C0] ? sock_load_diag_module+0x130/0x130 [ 191.944767][ T5871] FAT-fs (loop1): FAT read failed (blocknr 128) [ 191.947466][ C0] __unix_dgram_recvmsg+0x2f4/0xd50 [ 191.958982][ C0] ? unix_unhash+0x10/0x10 [ 191.961473][ T4273] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.963488][ C0] ? mark_lock+0x94/0x320 [ 191.977971][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 191.983076][ C0] ? unix_dgram_sendmsg+0x19c0/0x19c0 [ 191.988557][ C0] ____sys_recvmsg+0x2ca/0x5b0 [ 191.993383][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 191.998517][ C0] ? import_iovec+0x6f/0xa0 [ 192.003081][ C0] ___sys_recvmsg+0x213/0x5c0 [ 192.007837][ C0] ? __sys_recvmsg+0x280/0x280 [ 192.012699][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 192.017807][ C0] ? __might_fault+0xb3/0x110 [ 192.022549][ C0] do_recvmmsg+0x360/0x7f0 [ 192.027062][ C0] ? __sys_recvmmsg+0x290/0x290 [ 192.032015][ C0] ? __context_tracking_exit+0x4c/0x80 [ 192.037559][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 192.042645][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 192.047779][ C0] ? do_recvmmsg+0x7f0/0x7f0 [ 192.050553][ T4273] usb 6-1: config 0 has no interfaces? [ 192.052418][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 192.052454][ C0] do_syscall_64+0x4c/0xa0 [ 192.052476][ C0] ? clear_bhb_loop+0x30/0x80 [ 192.052500][ C0] ? clear_bhb_loop+0x30/0x80 [ 192.077091][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.083082][ C0] RIP: 0033:0x7fdfb70eab19 [ 192.087571][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.107294][ C0] RSP: 002b:00007fdfb5320028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 192.115796][ C0] RAX: ffffffffffffffda RBX: 00007fdfb7371090 RCX: 00007fdfb70eab19 [ 192.123854][ C0] RDX: 0000000004000087 RSI: 0000200000000a00 RDI: 0000000000000003 [ 192.131928][ C0] RBP: 00007fdfb7182b70 R08: 0000000000000000 R09: 0000000000000000 [ 192.139983][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 192.148048][ C0] R13: 00007fdfb7371128 R14: 00007fdfb7371090 R15: 00007ffc19805bd8 [ 192.156200][ C0] [ 192.159325][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 192.166633][ C0] CPU: 0 PID: 5867 Comm: syz.3.434 Not tainted syzkaller #0 [ 192.174082][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 192.184179][ C0] Call Trace: [ 192.187523][ C0] [ 192.190409][ C0] dump_stack_lvl+0x188/0x250 [ 192.195229][ C0] ? show_regs_print_info+0x20/0x20 [ 192.200480][ C0] ? load_image+0x410/0x410 [ 192.205042][ C0] panic+0x2f8/0x850 [ 192.209020][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 192.213582][ C0] ? __ieee80211_beacon_get+0x178a/0x1ff0 [ 192.219365][ C0] __warn+0x248/0x2b0 [ 192.223392][ C0] ? __ieee80211_beacon_get+0x178a/0x1ff0 [ 192.229162][ C0] report_bug+0x1b9/0x2e0 [ 192.233549][ C0] handle_bug+0x3a/0x70 [ 192.238136][ C0] exc_invalid_op+0x16/0x40 [ 192.242687][ C0] asm_exc_invalid_op+0x16/0x20 [ 192.247587][ C0] RIP: 0010:__ieee80211_beacon_get+0x178a/0x1ff0 [ 192.253963][ C0] Code: 1d f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 12 8f 1d f8 0f 0b e9 16 ef ff ff e8 06 8f 1d f8 <0f> 0b e9 7c f2 ff ff e8 ba ec 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 192.273635][ C0] RSP: 0018:ffffc900000078c0 EFLAGS: 00010246 [ 192.279754][ C0] RAX: ffffffff895b9e8a RBX: ffff888077c8fe00 RCX: ffff888022d39dc0 [ 192.287768][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.295821][ C0] RBP: ffffc90000007af8 R08: ffff888022d39dc0 R09: 0000000000000003 [ 192.298274][ T4273] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 192.303830][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: f8f8f8f8f8f8f8f8 [ 192.303850][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f28 [ 192.303876][ C0] ? __ieee80211_beacon_get+0x178a/0x1ff0 [ 192.334665][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 192.340700][ C0] ? verify_lock_unused+0x140/0x140 [ 192.345952][ C0] ? verify_lock_unused+0x140/0x140 [ 192.351228][ C0] ? ieee80211_get_buffered_bc+0x75e/0x860 [ 192.357096][ C0] ? mark_lock+0x94/0x320 [ 192.361484][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 192.366996][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 192.371339][ T4273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.372605][ C0] __iterate_interfaces+0x225/0x4c0 [ 192.385850][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 192.392150][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 192.398442][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 192.405521][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 192.410776][ C0] ? hw_scan_work+0xef0/0xef0 [ 192.415501][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 192.420784][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 192.425956][ C0] hrtimer_run_softirq+0x176/0x240 [ 192.431130][ C0] handle_softirqs+0x336/0x830 [ 192.435942][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 192.440852][ C0] ? do_softirq+0x210/0x210 [ 192.445403][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 192.450573][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 192.455828][ C0] __irq_exit_rcu+0x13b/0x230 [ 192.458920][ T4273] usb 6-1: Product: syz [ 192.460548][ C0] ? irq_exit_rcu+0x20/0x20 [ 192.460615][ C0] irq_exit_rcu+0x5/0x20 [ 192.473555][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 192.479244][ C0] [ 192.482221][ C0] [ 192.485190][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 192.491308][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 192.497869][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 7f 5c 7f f7 65 8b 05 50 6d 2f 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 192.500693][ T4273] usb 6-1: Manufacturer: syz [ 192.517540][ C0] RSP: 0018:ffffc90002eff600 EFLAGS: 00000206 [ 192.517570][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 3bab08f9f3ec8b00 [ 192.517586][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2b60 RDI: 0000000000000001 [ 192.517602][ C0] RBP: ffffc90002eff698 R08: ffffffff91047177 R09: 1ffffffff2208e2e [ 192.517618][ C0] R10: dffffc0000000000 R11: fffffbfff2208e2f R12: dffffc0000000000 [ 192.517633][ C0] R13: ffff888073ea81c8 R14: ffff888073ea81c8 R15: 1ffff920005dfec0 [ 192.517668][ C0] ? _raw_spin_unlock+0x40/0x40 [ 192.517704][ C0] __skb_try_recv_datagram+0x17d/0x4e0 [ 192.517737][ C0] ? sock_load_diag_module+0x130/0x130 [ 192.584360][ C0] __unix_dgram_recvmsg+0x2f4/0xd50 [ 192.589635][ C0] ? unix_unhash+0x10/0x10 [ 192.594122][ C0] ? mark_lock+0x94/0x320 [ 192.598499][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 192.603570][ C0] ? unix_dgram_sendmsg+0x19c0/0x19c0 [ 192.609023][ C0] ____sys_recvmsg+0x2ca/0x5b0 [ 192.613934][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 192.619028][ C0] ? import_iovec+0x6f/0xa0 [ 192.623582][ C0] ___sys_recvmsg+0x213/0x5c0 [ 192.628319][ C0] ? __sys_recvmsg+0x280/0x280 [ 192.633150][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 192.634075][ T4273] usb 6-1: SerialNumber: syz [ 192.638230][ C0] ? __might_fault+0xb3/0x110 [ 192.638259][ C0] do_recvmmsg+0x360/0x7f0 [ 192.638292][ C0] ? __sys_recvmmsg+0x290/0x290 [ 192.638326][ C0] ? __context_tracking_exit+0x4c/0x80 [ 192.638358][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 192.667611][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 192.672694][ C0] ? do_recvmmsg+0x7f0/0x7f0 [ 192.677335][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 192.682584][ C0] do_syscall_64+0x4c/0xa0 [ 192.687041][ C0] ? clear_bhb_loop+0x30/0x80 [ 192.691775][ C0] ? clear_bhb_loop+0x30/0x80 [ 192.696510][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.702455][ C0] RIP: 0033:0x7fdfb70eab19 [ 192.706911][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.726562][ C0] RSP: 002b:00007fdfb5320028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 192.734958][ T4273] usb 6-1: config 0 descriptor?? [ 192.739978][ C0] RAX: ffffffffffffffda RBX: 00007fdfb7371090 RCX: 00007fdfb70eab19 [ 192.740008][ C0] RDX: 0000000004000087 RSI: 0000200000000a00 RDI: 0000000000000003 [ 192.740023][ C0] RBP: 00007fdfb7182b70 R08: 0000000000000000 R09: 0000000000000000 [ 192.740038][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 192.740051][ C0] R13: 00007fdfb7371128 R14: 00007fdfb7371090 R15: 00007ffc19805bd8 [ 192.740083][ C0] [ 192.783707][ C0] Kernel Offset: disabled [ 192.788469][ C0] Rebooting in 86400 seconds..