last executing test programs: 4.222361818s ago: executing program 2 (id=3): syz_mount_image$jfs(&(0x7f0000005d40), &(0x7f0000005d80)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x5d0c, &(0x7f0000005e00)="$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") 3.351480269s ago: executing program 2 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) 3.254301511s ago: executing program 3 (id=4): r0 = syz_usb_connect$hid(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000405e04da070000000000010902190001010080320904000001ff00000007058103080007"], 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_RESET(r1, 0x5514) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="00011200000012010000000010105e04da07000000000001"], 0x0, 0x0, 0x0}, 0x0) 2.899559519s ago: executing program 2 (id=6): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810340000007050203400000"], 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00") syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00") syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcd72101000700") nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0) syz_usb_disconnect(r0) 2.488289529s ago: executing program 0 (id=1): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) nanosleep(&(0x7f0000000500)={0x0, 0x10000000}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) setsockopt(r1, 0x112, 0x11, &(0x7f0000000100)="00ff000000000000ff0000000500000001000000ff000000050000000100000000000000000000000000000000000000000000000a0000000a000000", 0x3c) connect(r1, &(0x7f0000000200)=@generic={0x1f, "0000000000000100"}, 0xa) 2.309200834s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000402a1101000001010203010902270001010080fa0904000003ffffff00070581024000000705820240000007050302400000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0xc0, 0xb1, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/lirc0\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="0100000002000000", 0x8) 2.100720038s ago: executing program 0 (id=7): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406411220600000000000109022e0001010080000904000004ffffff0007050102000200070581020002000705840200020007050202000200"], 0x0) (async) syz_usb_ep_write(r0, 0x81, 0x100, &(0x7f0000001000)="a0080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808") nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000300)={0x80000000}) 480.412118ms ago: executing program 0 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(&(0x7f0000000640)=@filename='proc\x00', &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r1, &(0x7f0000000740)='10\n', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r2, &(0x7f00000007c0)='10\n', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='tcp 2049\n', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,clientaddr=127.0.0.1\x00']) openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt/file1\x00', 0x42, 0x1ff) rename(&(0x7f0000000580)='./mnt/file1\x00', &(0x7f00000005c0)='./mnt/file2\x00') 145.238846ms ago: executing program 3 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='thunderbolt\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/thunderbolt/bind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0000:00:01.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/thunderbolt/devices/0-0/authorized\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) 0s ago: executing program 3 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='123\x00', 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts. [ 84.444787][ T5763] cgroup: Unknown subsys name 'net' [ 84.582747][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.117538][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.659566][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.669935][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.678552][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.679274][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.689364][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.696776][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.705260][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.711840][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.720605][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.726943][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.733271][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.741147][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.748331][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.762828][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.771610][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.780559][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.791842][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.802283][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.804093][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.812427][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.829916][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.842198][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.853240][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.863051][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.280544][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 88.377760][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 88.490350][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.499146][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.506889][ T5774] bridge_slave_0: entered allmulticast mode [ 88.515481][ T5774] bridge_slave_0: entered promiscuous mode [ 88.526692][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.535002][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.542468][ T5774] bridge_slave_1: entered allmulticast mode [ 88.550461][ T5774] bridge_slave_1: entered promiscuous mode [ 88.558291][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 88.629466][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.637070][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.644851][ T5777] bridge_slave_0: entered allmulticast mode [ 88.651967][ T5777] bridge_slave_0: entered promiscuous mode [ 88.669457][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.676700][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.684339][ T5777] bridge_slave_1: entered allmulticast mode [ 88.691650][ T5777] bridge_slave_1: entered promiscuous mode [ 88.698763][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 88.719442][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.752265][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.810340][ T5774] team0: Port device team_slave_0 added [ 88.820644][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.846107][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.874298][ T5774] team0: Port device team_slave_1 added [ 88.921235][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.928800][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.936261][ T5776] bridge_slave_0: entered allmulticast mode [ 88.943685][ T5776] bridge_slave_0: entered promiscuous mode [ 88.967953][ T5777] team0: Port device team_slave_0 added [ 88.982853][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.993762][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.000982][ T5776] bridge_slave_1: entered allmulticast mode [ 89.008751][ T5776] bridge_slave_1: entered promiscuous mode [ 89.021774][ T5777] team0: Port device team_slave_1 added [ 89.029577][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.037371][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.066318][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.113570][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.120750][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.147845][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.191567][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.199661][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.209321][ T5775] bridge_slave_0: entered allmulticast mode [ 89.217323][ T5775] bridge_slave_0: entered promiscuous mode [ 89.232370][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.243817][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.255144][ T5775] bridge_slave_1: entered allmulticast mode [ 89.264349][ T5775] bridge_slave_1: entered promiscuous mode [ 89.275891][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.287702][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.297780][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.325985][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.372724][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.383375][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.390914][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.423733][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.457142][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.472828][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.502079][ T5774] hsr_slave_0: entered promiscuous mode [ 89.509047][ T5774] hsr_slave_1: entered promiscuous mode [ 89.541895][ T5776] team0: Port device team_slave_0 added [ 89.552567][ T5776] team0: Port device team_slave_1 added [ 89.601910][ T5775] team0: Port device team_slave_0 added [ 89.641760][ T5775] team0: Port device team_slave_1 added [ 89.654984][ T5777] hsr_slave_0: entered promiscuous mode [ 89.663293][ T5777] hsr_slave_1: entered promiscuous mode [ 89.670178][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.679541][ T5777] Cannot create hsr debugfs directory [ 89.705873][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.713698][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.740303][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.780119][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.789735][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.816372][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.876709][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.885018][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.913197][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.914749][ T5087] Bluetooth: hci1: command tx timeout [ 89.924827][ T5784] Bluetooth: hci3: command tx timeout [ 89.940847][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.948134][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.973169][ T5784] Bluetooth: hci2: command tx timeout [ 89.978291][ T5087] Bluetooth: hci0: command tx timeout [ 89.993416][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.133631][ T5776] hsr_slave_0: entered promiscuous mode [ 90.140126][ T5776] hsr_slave_1: entered promiscuous mode [ 90.146799][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.154746][ T5776] Cannot create hsr debugfs directory [ 90.167299][ T5775] hsr_slave_0: entered promiscuous mode [ 90.174199][ T5775] hsr_slave_1: entered promiscuous mode [ 90.181290][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.190676][ T5775] Cannot create hsr debugfs directory [ 90.395946][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.429055][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.442050][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.471166][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.623827][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.638360][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.666967][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.677576][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.769711][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.782277][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.796090][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.809110][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.912881][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.924782][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.940789][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.964390][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.997106][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.044226][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.088715][ T2923] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.096710][ T2923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.119566][ T2923] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.126936][ T2923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.180412][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.231376][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.269405][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.295986][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.307753][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.314958][ T2938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.376731][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.386146][ T2938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.458646][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.467034][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.489784][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.497269][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.611944][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.765885][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.804833][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.812039][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.836551][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.844098][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.938788][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.973454][ T5087] Bluetooth: hci1: command tx timeout [ 91.978972][ T5087] Bluetooth: hci3: command tx timeout [ 92.053284][ T5784] Bluetooth: hci0: command tx timeout [ 92.058768][ T5784] Bluetooth: hci2: command tx timeout [ 92.116853][ T5774] veth0_vlan: entered promiscuous mode [ 92.153579][ T5774] veth1_vlan: entered promiscuous mode [ 92.226057][ T5774] veth0_macvtap: entered promiscuous mode [ 92.256859][ T5774] veth1_macvtap: entered promiscuous mode [ 92.334216][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.348740][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.413646][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.437735][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.452009][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.469442][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.480985][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.593694][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.608671][ T5775] veth0_vlan: entered promiscuous mode [ 92.640618][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.700704][ T5775] veth1_vlan: entered promiscuous mode [ 92.708289][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.727853][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.796851][ T2938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.809407][ T2938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.876770][ T5775] veth0_macvtap: entered promiscuous mode [ 92.910811][ T5777] veth0_vlan: entered promiscuous mode [ 92.940858][ T5775] veth1_macvtap: entered promiscuous mode [ 92.949688][ T5776] veth0_vlan: entered promiscuous mode [ 92.990471][ T5777] veth1_vlan: entered promiscuous mode [ 93.027750][ T5776] veth1_vlan: entered promiscuous mode [ 93.046097][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.063111][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.077407][ T5838] syz.2.3[5838]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.084760][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.109066][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.120333][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.133354][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.157251][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.170973][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.182782][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.197168][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.307658][ T5776] veth0_macvtap: entered promiscuous mode [ 93.375756][ T5777] veth0_macvtap: entered promiscuous mode [ 93.398771][ T5776] veth1_macvtap: entered promiscuous mode [ 93.411026][ T5777] veth1_macvtap: entered promiscuous mode [ 93.427003][ T2923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.457963][ T2923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.546263][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.549339][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.571562][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.581612][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.585186][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.602424][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.615438][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.637981][ T5838] loop2: detected capacity change from 0 to 32768 [ 93.678741][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.693574][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.705981][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.717927][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.729117][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.743990][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.759004][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.821878][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.853371][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.873020][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.884976][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.914650][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.946109][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.986006][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.013816][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.040731][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.053207][ T5087] Bluetooth: hci1: command tx timeout [ 94.059266][ T5784] Bluetooth: hci3: command tx timeout [ 94.087729][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.113017][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.130069][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.134755][ T5784] Bluetooth: hci2: command tx timeout [ 94.141355][ T5087] Bluetooth: hci0: command tx timeout [ 94.153597][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.165407][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.177598][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.208895][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.225752][ T5844] jffs2: notice: (5844) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 94.248262][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.258312][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.272630][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.282561][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.364585][ T5816] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.492067][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.503066][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.573329][ T5816] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 94.586672][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.596541][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.609590][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.623556][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.633343][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.723145][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.750542][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.775283][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.835274][ T5851] Bluetooth: ISO socket layer initialized [ 94.938340][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.964698][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 94.987274][ T23] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 95.003480][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.011848][ T23] usb 3-1: Product: syz [ 95.019868][ T23] usb 3-1: Manufacturer: syz [ 95.026384][ T23] usb 3-1: SerialNumber: syz [ 95.039317][ T23] port100 3-1:1.0: NFC: Could not find bulk-in or bulk-out endpoint [ 95.273418][ T5846] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.433101][ T2179] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.475479][ T5846] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 95.487158][ T5846] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 95.499863][ T5846] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 95.512647][ T5846] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 95.522581][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.533612][ T5846] usb 2-1: Product: syz [ 95.538418][ T5846] usb 2-1: Manufacturer: syz [ 95.543679][ T5846] usb 2-1: SerialNumber: syz [ 95.552356][ T5855] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 95.568560][ T5855] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 95.579352][ T5855] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 95.638061][ T2179] usb 1-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00 [ 95.647967][ T2179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.667657][ T2179] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 95.878545][ T5861] digital: digital_start_poll: Unknown protocol [ 96.133793][ T5087] Bluetooth: hci1: command tx timeout [ 96.184308][ T2323] pvrusb2: Failed to submit write-control URB status=-2 [ 96.195387][ T2323] pvrusb2: Device being rendered inoperable [ 96.203539][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 96.204889][ T2179] usb 1-1: USB disconnect, device number 2 [ 96.215057][ T5087] Bluetooth: hci0: command tx timeout [ 96.227387][ T5087] Bluetooth: hci2: command tx timeout [ 96.242461][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 97.006759][ T5846] redrat3 2-1:1.0: Problem fetching firmware ID [ 97.025869][ T5846] redrat3 2-1:1.0: Failed to read timeout from hardware [ 97.078534][ T5828] usb 4-1: USB disconnect, device number 2 [ 97.103465][ T5846] rc_core: IR keymap rc-hauppauge not found [ 97.117290][ T5846] Registered IR keymap rc-empty [ 97.140266][ T5846] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/rc/rc0 [ 97.161191][ T5846] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/rc/rc0/input5 [ 97.175589][ T5815] thunderbolt 0000:00:01.0: error -EINVAL: cannot obtain PCI resources, aborting [ 97.192750][ T5871] thunderbolt: probe of 0000:00:01.0 failed with error -22 [ 97.203900][ T5846] redrat3 2-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 97.214693][ T5846] redrat3 2-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 97.223893][ T5846] redrat3 2-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 97.245912][ T5846] redrat3: probe of 2-1:1.0 failed with error -5 [ 97.274862][ T5846] usb 2-1: USB disconnect, device number 2 [ 97.288883][ T5142] ================================================================== [ 97.298411][ T5142] BUG: KASAN: slab-use-after-free in string+0x204/0x290 [ 97.305578][ T5142] Read of size 1 at addr ffff888025261760 by task udevd/5142 [ 97.312971][ T5142] [ 97.315328][ T5142] CPU: 0 PID: 5142 Comm: udevd Not tainted syzkaller #0 [ 97.322286][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.332499][ T5142] Call Trace: [ 97.335823][ T5142] [ 97.338796][ T5142] dump_stack_lvl+0x18c/0x250 [ 97.343531][ T5142] ? __lock_acquire+0x7d80/0x7d80 [ 97.348710][ T5142] ? show_regs_print_info+0x20/0x20 [ 97.354035][ T5142] ? load_image+0x420/0x420 [ 97.358588][ T5142] ? __virt_addr_valid+0x10c/0x380 [ 97.363935][ T5142] ? __virt_addr_valid+0x10c/0x380 [ 97.369100][ T5142] ? __virt_addr_valid+0x10c/0x380 [ 97.374617][ T5142] print_report+0xa8/0x210 [ 97.379174][ T5142] ? string+0x204/0x290 [ 97.383481][ T5142] kasan_report+0x117/0x150 [ 97.388212][ T5142] ? string+0x204/0x290 [ 97.392447][ T5142] string+0x204/0x290 [ 97.396593][ T5142] vsnprintf+0xf72/0x1ba0 [ 97.401508][ T5142] add_uevent_var+0x1d1/0x460 [ 97.406237][ T5142] ? vfs_read+0x486/0x990 [ 97.410613][ T5142] ? kobject_uevent_env+0x890/0x890 [ 97.415861][ T5142] rc_dev_uevent+0x15f/0x190 [ 97.420491][ T5142] dev_uevent+0x53a/0x7c0 [ 97.424896][ T5142] ? dev_uevent_name+0xa0/0xa0 [ 97.429720][ T5142] uevent_show+0x196/0x300 [ 97.434383][ T5142] dev_attr_show+0x54/0xc0 [ 97.438099][ T28] audit: type=1800 audit(1785892765.531:2): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10" name="bmaControls" dev="configfs" ino=6700 res=0 errno=0 [ 97.439432][ T5142] sysfs_kf_seq_show+0x34d/0x4c0 [ 97.439467][ T5142] ? device_get_ownership+0xb0/0xb0 [ 97.471252][ T5142] seq_read_iter+0x464/0xc50 [ 97.475899][ T5142] ? common_file_perm+0x198/0x1f0 [ 97.480984][ T5142] vfs_read+0x486/0x990 [ 97.485177][ T5142] ? kernel_read+0x1e0/0x1e0 [ 97.489902][ T5142] ? __x64_sys_newfstat+0x1c4/0x250 [ 97.495153][ T5142] ? do_sys_openat2+0x170/0x1d0 [ 97.500056][ T5142] ? __fdget_pos+0x2ba/0x330 [ 97.504819][ T5142] ksys_read+0x151/0x260 [ 97.509112][ T5142] ? vfs_write+0x9a0/0x9a0 [ 97.513562][ T5142] ? lockdep_hardirqs_on+0x98/0x150 [ 97.519246][ T5142] do_syscall_64+0x55/0xb0 [ 97.523689][ T5142] ? clear_bhb_loop+0x40/0x90 [ 97.528398][ T5142] ? clear_bhb_loop+0x40/0x90 [ 97.533115][ T5142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.539221][ T5142] RIP: 0033:0x7f67dc7d7407 [ 97.544090][ T5142] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 97.564239][ T5142] RSP: 002b:00007ffec6adb350 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 97.573150][ T5142] RAX: ffffffffffffffda RBX: 00007f67dc74b880 RCX: 00007f67dc7d7407 [ 97.582541][ T5142] RDX: 0000000000001000 RSI: 0000564609a90a70 RDI: 000000000000000c [ 97.592006][ T5142] RBP: 00007f67dc91fff0 R08: 0000000000000000 R09: 0000000000000000 [ 97.600205][ T5142] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 97.608547][ T5142] R13: 00007f67dc91fea0 R14: 0000000000000000 R15: 00005646099f87a0 [ 97.617867][ T5142] [ 97.620995][ T5142] [ 97.623406][ T5142] Allocated by task 5846: [ 97.628267][ T5142] kasan_set_track+0x4e/0x70 [ 97.633427][ T5142] __kasan_kmalloc+0x8f/0xa0 [ 97.638133][ T5142] redrat3_dev_probe+0x3f9/0x23d0 [ 97.644200][ T5142] usb_probe_interface+0x5c2/0xaf0 [ 97.649625][ T5142] really_probe+0x247/0xae0 [ 97.654285][ T5142] __driver_probe_device+0x1f5/0x390 [ 97.659793][ T5142] driver_probe_device+0x4f/0x420 [ 97.665001][ T5142] __device_attach_driver+0x2ca/0x510 [ 97.670677][ T5142] bus_for_each_drv+0x252/0x2e0 [ 97.677001][ T5142] __device_attach+0x2c1/0x420 [ 97.682363][ T5142] bus_probe_device+0x180/0x260 [ 97.687637][ T5142] device_add+0x87c/0xc40 [ 97.693034][ T5142] usb_set_configuration+0x1ad0/0x2150 [ 97.699776][ T5142] usb_generic_driver_probe+0x8d/0x150 [ 97.705618][ T5142] usb_probe_device+0x12a/0x260 [ 97.710974][ T5142] really_probe+0x247/0xae0 [ 97.715682][ T5142] __driver_probe_device+0x1f5/0x390 [ 97.721199][ T5142] driver_probe_device+0x4f/0x420 [ 97.726448][ T5142] __device_attach_driver+0x2ca/0x510 [ 97.732200][ T5142] bus_for_each_drv+0x252/0x2e0 [ 97.737388][ T5142] __device_attach+0x2c1/0x420 [ 97.742756][ T5142] bus_probe_device+0x180/0x260 [ 97.747949][ T5142] device_add+0x87c/0xc40 [ 97.752301][ T5142] usb_new_device+0x995/0x1550 [ 97.757187][ T5142] hub_event+0x29d5/0x4a80 [ 97.761647][ T5142] process_scheduled_works+0xa60/0x1600 [ 97.767235][ T5142] worker_thread+0xa5e/0xfe0 [ 97.772031][ T5142] kthread+0x2fa/0x390 [ 97.776352][ T5142] ret_from_fork+0x48/0x80 [ 97.780877][ T5142] ret_from_fork_asm+0x11/0x20 [ 97.785749][ T5142] [ 97.788076][ T5142] Freed by task 5846: [ 97.792533][ T5142] kasan_set_track+0x4e/0x70 [ 97.797258][ T5142] kasan_save_free_info+0x28/0x40 [ 97.802580][ T5142] ____kasan_slab_free+0x126/0x1f0 [ 97.807791][ T5142] slab_free_freelist_hook+0x130/0x1a0 [ 97.813441][ T5142] __kmem_cache_free+0xba/0x1f0 [ 97.819005][ T5142] redrat3_dev_probe+0x1b73/0x23d0 [ 97.824500][ T5142] usb_probe_interface+0x5c2/0xaf0 [ 97.829792][ T5142] really_probe+0x247/0xae0 [ 97.834324][ T5142] __driver_probe_device+0x1f5/0x390 [ 97.840142][ T5142] driver_probe_device+0x4f/0x420 [ 97.846316][ T5142] __device_attach_driver+0x2ca/0x510 [ 97.852299][ T5142] bus_for_each_drv+0x252/0x2e0 [ 97.857648][ T5142] __device_attach+0x2c1/0x420 [ 97.862830][ T5142] bus_probe_device+0x180/0x260 [ 97.868303][ T5142] device_add+0x87c/0xc40 [ 97.873219][ T5142] usb_set_configuration+0x1ad0/0x2150 [ 97.879401][ T5142] usb_generic_driver_probe+0x8d/0x150 [ 97.886018][ T5142] usb_probe_device+0x12a/0x260 [ 97.893052][ T5142] really_probe+0x247/0xae0 [ 97.897577][ T5142] __driver_probe_device+0x1f5/0x390 [ 97.903066][ T5142] driver_probe_device+0x4f/0x420 [ 97.908133][ T5142] __device_attach_driver+0x2ca/0x510 [ 97.914067][ T5142] bus_for_each_drv+0x252/0x2e0 [ 97.918975][ T5142] __device_attach+0x2c1/0x420 [ 97.924034][ T5142] bus_probe_device+0x180/0x260 [ 97.928911][ T5142] device_add+0x87c/0xc40 [ 97.933431][ T5142] usb_new_device+0x995/0x1550 [ 97.938395][ T5142] hub_event+0x29d5/0x4a80 [ 97.942905][ T5142] process_scheduled_works+0xa60/0x1600 [ 97.948567][ T5142] worker_thread+0xa5e/0xfe0 [ 97.953168][ T5142] kthread+0x2fa/0x390 [ 97.957252][ T5142] ret_from_fork+0x48/0x80 [ 97.961749][ T5142] ret_from_fork_asm+0x11/0x20 [ 97.966702][ T5142] [ 97.969058][ T5142] The buggy address belongs to the object at ffff888025261000 [ 97.969058][ T5142] which belongs to the cache kmalloc-2k of size 2048 [ 97.984435][ T5142] The buggy address is located 1888 bytes inside of [ 97.984435][ T5142] freed 2048-byte region [ffff888025261000, ffff888025261800) [ 97.999105][ T5142] [ 98.001943][ T5142] The buggy address belongs to the physical page: [ 98.008455][ T5142] page:ffffea0000949800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25260 [ 98.018895][ T5142] head:ffffea0000949800 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 98.028012][ T5142] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 98.036002][ T5142] page_type: 0xffffffff() [ 98.041739][ T5142] raw: 00fff00000000840 ffff888017c42000 dead000000000122 0000000000000000 [ 98.050670][ T5142] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 98.059890][ T5142] page dumped because: kasan: bad access detected [ 98.066430][ T5142] page_owner tracks the page as allocated [ 98.072528][ T5142] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 34, tgid 34 (kworker/u4:2), ts 95580170153, free_ts 95284653620 [ 98.095537][ T5142] post_alloc_hook+0x1c1/0x200 [ 98.100304][ T5142] get_page_from_freelist+0x2181/0x22a0 [ 98.105858][ T5142] __alloc_pages+0x1f0/0x460 [ 98.110467][ T5142] alloc_slab_page+0x5d/0x180 [ 98.115158][ T5142] new_slab+0x87/0x2d0 [ 98.119353][ T5142] ___slab_alloc+0xc5c/0x12f0 [ 98.124353][ T5142] __kmem_cache_alloc_node+0x11f/0x250 [ 98.130209][ T5142] __kmalloc_node_track_caller+0xa4/0x230 [ 98.135965][ T5142] kmalloc_reserve+0x116/0x240 [ 98.140852][ T5142] __alloc_skb+0x138/0x2c0 [ 98.145278][ T5142] mld_newpack+0x14f/0xbf0 [ 98.149699][ T5142] add_grec+0x1461/0x19c0 [ 98.154038][ T5142] mld_send_initial_cr+0x288/0x540 [ 98.160389][ T5142] ipv6_mc_dad_complete+0x87/0x410 [ 98.167164][ T5142] addrconf_dad_completed+0x77e/0xd90 [ 98.172892][ T5142] addrconf_dad_work+0xc9e/0x1550 [ 98.179550][ T5142] page last free stack trace: [ 98.184965][ T5142] free_unref_page_prepare+0x7d7/0x8f0 [ 98.192112][ T5142] free_unref_page+0x32/0x2e0 [ 98.197700][ T5142] __slab_free+0x35a/0x400 [ 98.202463][ T5142] qlist_free_all+0x75/0xd0 [ 98.207365][ T5142] kasan_quarantine_reduce+0x143/0x160 [ 98.214135][ T5142] __kasan_slab_alloc+0x22/0x80 [ 98.220589][ T5142] slab_post_alloc_hook+0x6a/0x4d0 [ 98.226321][ T5142] kmem_cache_alloc_node+0x1af/0x310 [ 98.231838][ T5142] __alloc_skb+0x103/0x2c0 [ 98.236267][ T5142] mld_newpack+0x14f/0xbf0 [ 98.241151][ T5142] add_grec+0x1461/0x19c0 [ 98.245495][ T5142] mld_send_initial_cr+0x288/0x540 [ 98.250708][ T5142] mld_dad_work+0x3d/0x470 [ 98.255156][ T5142] process_scheduled_works+0xa60/0x1600 [ 98.261010][ T5142] worker_thread+0xa5e/0xfe0 [ 98.266278][ T5142] kthread+0x2fa/0x390 [ 98.271158][ T5142] [ 98.273576][ T5142] Memory state around the buggy address: [ 98.279282][ T5142] ffff888025261600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.288136][ T5142] ffff888025261680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.297818][ T5142] >ffff888025261700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.306503][ T5142] ^ [ 98.307712][ T5867] NFSD: attempt to initialize umh client tracking in a container ignored. [ 98.313973][ T5142] ffff888025261780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.313988][ T5142] ffff888025261800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.313994][ T5142] ================================================================== [ 98.329551][ T5815] usb 3-1: USB disconnect, device number 2 [ 98.359730][ T5142] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 98.367264][ T5142] CPU: 0 PID: 5142 Comm: udevd Not tainted syzkaller #0 [ 98.374230][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.384287][ T5142] Call Trace: [ 98.387561][ T5142] [ 98.390480][ T5142] dump_stack_lvl+0x18c/0x250 [ 98.395174][ T5142] ? show_regs_print_info+0x20/0x20 [ 98.400457][ T5142] ? load_image+0x420/0x420 [ 98.405160][ T5142] panic+0x2ca/0x720 [ 98.409353][ T5142] ? bpf_jit_dump+0xd0/0xd0 [ 98.413989][ T5142] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 98.420098][ T5142] ? _raw_spin_unlock+0x40/0x40 [ 98.425168][ T5142] ? print_memory_metadata+0x314/0x400 [ 98.430732][ T5142] ? string+0x204/0x290 [ 98.435003][ T5142] check_panic_on_warn+0x84/0xa0 [ 98.439959][ T5142] ? string+0x204/0x290 [ 98.444178][ T5142] end_report+0x6f/0x130 [ 98.448445][ T5142] kasan_report+0x128/0x150 [ 98.453239][ T5142] ? string+0x204/0x290 [ 98.457401][ T5142] string+0x204/0x290 [ 98.461395][ T5142] vsnprintf+0xf72/0x1ba0 [ 98.465727][ T5142] add_uevent_var+0x1d1/0x460 [ 98.470435][ T5142] ? vfs_read+0x486/0x990 [ 98.474776][ T5142] ? kobject_uevent_env+0x890/0x890 [ 98.479980][ T5142] rc_dev_uevent+0x15f/0x190 [ 98.484675][ T5142] dev_uevent+0x53a/0x7c0 [ 98.489012][ T5142] ? dev_uevent_name+0xa0/0xa0 [ 98.493945][ T5142] uevent_show+0x196/0x300 [ 98.498350][ T5142] dev_attr_show+0x54/0xc0 [ 98.502754][ T5142] sysfs_kf_seq_show+0x34d/0x4c0 [ 98.507771][ T5142] ? device_get_ownership+0xb0/0xb0 [ 98.512969][ T5142] seq_read_iter+0x464/0xc50 [ 98.517578][ T5142] ? common_file_perm+0x198/0x1f0 [ 98.523047][ T5142] vfs_read+0x486/0x990 [ 98.527338][ T5142] ? kernel_read+0x1e0/0x1e0 [ 98.533508][ T5142] ? __x64_sys_newfstat+0x1c4/0x250 [ 98.538922][ T5142] ? do_sys_openat2+0x170/0x1d0 [ 98.543806][ T5142] ? __fdget_pos+0x2ba/0x330 [ 98.548592][ T5142] ksys_read+0x151/0x260 [ 98.553172][ T5142] ? vfs_write+0x9a0/0x9a0 [ 98.557868][ T5142] ? lockdep_hardirqs_on+0x98/0x150 [ 98.563366][ T5142] do_syscall_64+0x55/0xb0 [ 98.568604][ T5142] ? clear_bhb_loop+0x40/0x90 [ 98.573456][ T5142] ? clear_bhb_loop+0x40/0x90 [ 98.578541][ T5142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.585080][ T5142] RIP: 0033:0x7f67dc7d7407 [ 98.589855][ T5142] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 98.610778][ T5142] RSP: 002b:00007ffec6adb350 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 98.621038][ T5142] RAX: ffffffffffffffda RBX: 00007f67dc74b880 RCX: 00007f67dc7d7407 [ 98.629731][ T5142] RDX: 0000000000001000 RSI: 0000564609a90a70 RDI: 000000000000000c [ 98.638925][ T5142] RBP: 00007f67dc91fff0 R08: 0000000000000000 R09: 0000000000000000 [ 98.649217][ T5142] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 98.658890][ T5142] R13: 00007f67dc91fea0 R14: 0000000000000000 R15: 00005646099f87a0 [ 98.667230][ T5142] [ 98.670511][ T5142] Kernel Offset: disabled [ 98.674926][ T5142] Rebooting in 86400 seconds..