last executing test programs: 12.841816323s ago: executing program 3 (id=114): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) 10.594925269s ago: executing program 3 (id=128): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000200), 0x0, 0x0) pselect6(0x40, &(0x7f0000000400)={0x2, 0x0, 0x3, 0x0, 0x1, 0x40, 0x0, 0x2}, 0x0, &(0x7f0000000440)={0x1f, 0xc, 0x0, 0x8000000000000000, 0x0, 0x80000000000000, 0x8000000000000000, 0x20000}, 0x0, 0x0) close(0x3) 9.749107369s ago: executing program 0 (id=135): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x2a00005, &(0x7f00000002c0)=ANY=[], 0x0, 0x2b7, &(0x7f0000000580)="$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") r0 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x39d88, 0x17294}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x34}, 0x1, 0x8100, 0x0, 0x4010}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x8001, 0xd) 8.608800138s ago: executing program 0 (id=138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000003c0)="0f01cb0f2226baf80c66b895cd308666ef8340730cec0f8500000f01c366b9750100000f326767660f382570a5360fc76a8726f30f6fc3660f38807d00", 0x3d}], 0x1, 0x40, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000400)=0x1, 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3d) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r5, &(0x7f00000005c0)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000640)='6', 0x1) 8.032923462s ago: executing program 3 (id=140): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000100)='./file1\x00', 0x1008008, &(0x7f0000000000)={[{@longad}, {@uid}, {}, {@volume={'volume', 0x3d, 0x3}}, {@shortad}, {@rootdir={'rootdir', 0x3d, 0x10}}, {@session={'session', 0x3d, 0xffffffffffffff81}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@anchor={'anchor', 0x3d, 0xffffffffffffffff}}, {@partition={'partition', 0x3d, 0xfffffffffffffffc}}, {@rootdir={'rootdir', 0x3d, 0x81}}]}, 0x2, 0xc45, &(0x7f0000001bc0)="$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") 7.569551913s ago: executing program 0 (id=141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$loop(0x0, 0x4, 0x123000) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0xc480000000000000, 0x3000, 0x0, 0x0, 0x13}) 7.342419049s ago: executing program 2 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_io_uring_setup(0x32c, &(0x7f0000000240)={0x0, 0x10f24e, 0x100, 0xfffffffd, 0x80290}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) io_uring_enter(r4, 0x6516, 0x6d93, 0x8, 0x0, 0x3f) 5.739206629s ago: executing program 2 (id=146): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x20000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EVIOCGLED(r0, 0x80284504, 0x0) 5.735641269s ago: executing program 1 (id=147): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000f00)={0x1, 0x0, [{0x0, 0x24, &(0x7f0000000f40)=""/36}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000f80)=0x1) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000280)={0x1, 0x3e8}) 5.648890461s ago: executing program 0 (id=148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e01010800020000000000080007400000000024000e801400018008000100ac14142a08000200ac1414380c0002"], 0x88}}, 0x0) 5.219511251s ago: executing program 1 (id=149): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000500)="0f0000000401666f6f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006261720000000000000000", 0x10a) 4.900948229s ago: executing program 0 (id=150): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000200), 0x0, 0x0) pselect6(0x40, &(0x7f0000000400)={0x2, 0x0, 0x3, 0x0, 0x1, 0x40, 0x0, 0x2}, 0x0, &(0x7f0000000440)={0x1f, 0xc, 0x0, 0x8000000000000000, 0x0, 0x80000000000000, 0x8000000000000000, 0x20000}, 0x0, 0x0) close(0x3) 4.621938976s ago: executing program 3 (id=151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000003c0)="0f01cb0f2226baf80c66b895cd308666ef8340730cec0f8500000f01c366b9750100000f326767660f382570a5360fc76a8726f30f6fc3660f38807d00", 0x3d}], 0x1, 0x40, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000400)=0x1, 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3d) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2082, 0x0) write(r5, &(0x7f0000000640)='6', 0x1) 4.587433107s ago: executing program 4 (id=152): pipe(&(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) ptrace$peekuser(0x3, r0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f000001a240)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000033240)=0x80000000000003) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}}) 4.512022089s ago: executing program 1 (id=153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, 0x0, 0x0}, 0x20) 3.036473715s ago: executing program 4 (id=154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050826bd70001edcdf250900000008000300", @ANYRES32=r3, @ANYBLOB="08003700000000000a000600080211000001"], 0x30}, 0x1, 0x0, 0x0, 0x48011}, 0x40) 3.036092795s ago: executing program 1 (id=155): r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='source', &(0x7f00000001c0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.895862289s ago: executing program 1 (id=156): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000002700), 0x10106, 0x2, 0x0) r1 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) r2 = shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r2) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x4040, &(0x7f0000000e00)=ANY=[], 0x82, 0xc2d, &(0x7f00000001c0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000002080)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0xd, 0xe, &(0x7f0000002080)=ANY=[], &(0x7f0000002840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000025c0)={0x2}, 0x8, 0x10, &(0x7f0000002600)={0x0, 0x0, 0x10000}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002640)={r3, 0x702, 0xb, 0x0, &(0x7f00000026c0)="e460334470d8d400eb00c1", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) preadv(r4, &(0x7f0000001f80)=[{&(0x7f0000000e00)=""/99, 0x63}, {&(0x7f0000000e80)=""/152, 0x98}, {&(0x7f0000000f40)=""/20, 0x14}, {&(0x7f0000000f80)=""/4096, 0x1000}], 0x4, 0x9, 0x5a0) syz_io_uring_setup(0x259a, &(0x7f0000002700)={0x0, 0xa548, 0x800, 0x1, 0x154}, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000002780)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f00000027c0)=ANY=[@ANYBLOB="02"], 0xf) syz_emit_vhci(&(0x7f0000002800)=ANY=[@ANYBLOB="040e079c0814"], 0xa) ioctl$FS_IOC_SETFLAGS(r5, 0xc0086c43, &(0x7f0000000080)=0x6ff) 2.816712631s ago: executing program 3 (id=157): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TIOCSBRK(r0, 0x5427) 2.368940632s ago: executing program 2 (id=158): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0xa8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000640)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5420, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000006c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000780)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0xa8c01) write$sndseq(r2, &(0x7f00000008c0)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0800}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.226222316s ago: executing program 2 (id=159): syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) chmod(&(0x7f0000000380)='./file0\x00', 0x21d) 2.145353778s ago: executing program 3 (id=160): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2a0471a, &(0x7f0000000140)={[{@bh}]}, 0x80, 0x4c4, &(0x7f0000001a80)="$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") syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001000000000904"], 0x0) mkdir(&(0x7f00000002c0)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 1.963141242s ago: executing program 2 (id=161): pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000800)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000840), 0x0, 0x0) read$msr(r4, &(0x7f0000002440)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f000001b500), 0xfffffecc) splice(r0, 0x0, r5, 0x0, 0x8001, 0xd) 1.917016993s ago: executing program 4 (id=162): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x2c}}, 0x4084) 522.346087ms ago: executing program 2 (id=163): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582e30f0200020000000905030200020000006d6fbb01ec72d8ff3422a3b9f864f95876060a868e13ad70e1a98ef5261b2c4949d67556f498473d132782ce591ff6f73a0e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0xf, 0x20000, 0x10, 0x6, 0xc, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 429.63209ms ago: executing program 0 (id=164): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x81d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 416.90942ms ago: executing program 4 (id=165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) setuid(0xee01) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r1, 0x103, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 214.054795ms ago: executing program 4 (id=166): r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='source', &(0x7f00000001c0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 60.014169ms ago: executing program 1 (id=167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000003c0)="0f01cb0f2226baf80c66b895cd308666ef8340730cec0f8500000f01c366b9750100000f326767660f382570a5360fc76a8726f30f6fc3660f38807d00", 0x3d}], 0x1, 0x40, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000400)=0x1, 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3d) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2082, 0x0) write(r5, &(0x7f0000000640)='6', 0x1) 0s ago: executing program 4 (id=168): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f00000002c0)={0x0, [[0xffffffff, 0xffffffdf, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r4, 0x40184150, &(0x7f0000000540)={0x0, &(0x7f0000000580)='\x00', 0x10040}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) readv(r3, &(0x7f00000005c0)=[{0x0}], 0x1) pipe2$watch_queue(&(0x7f0000000600), 0x80) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x2c, 0x64, 0x0, 0x4, 0x11, 0x0, @remote, @multicast2}, {0x4e22, 0x4e23, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x7000000000000000}}}}}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x0, 0x0}) setns(0xffffffffffffffff, 0x24020000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') read$FUSE(r6, &(0x7f00000061c0)={0x2020}, 0x2020) read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.227' (ED25519) to the list of known hosts. [ 74.983756][ T4258] cgroup: Unknown subsys name 'net' [ 75.117381][ T4258] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.618521][ T4258] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 78.138617][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.138673][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.148017][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.155338][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.162330][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.171733][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.175745][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.182621][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.195243][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.196585][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.209933][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.211904][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.219364][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.224368][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.231488][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.246797][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.248368][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.261717][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.262875][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.270913][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.277445][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.284711][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.290847][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.299130][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.306780][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.318106][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.326543][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.373680][ T4275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.383701][ T4275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.391085][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.442166][ T4273] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.450179][ T4273] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.458492][ T4273] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.501997][ T4271] rdma_rxe: rxe_register_device failed with error -23 [ 78.516978][ T4274] rdma_rxe: rxe_register_device failed with error -23 [ 78.517486][ T4279] rdma_rxe: rxe_register_device failed with error -23 [ 78.526042][ T4271] rdma_rxe: failed to add rxe_eth0 [ 78.530979][ T4279] rdma_rxe: failed to add rxe_eth0 [ 78.544159][ T4272] rdma_rxe: rxe_register_device failed with error -23 [ 78.552736][ T4274] rdma_rxe: failed to add rxe_eth0 [ 78.581922][ T4272] rdma_rxe: failed to add rxe_eth0 [ 78.697331][ T4273] infiniband rxe0: set active [ 78.705067][ T4273] infiniband rxe0: added rxe_eth0 [ 78.742353][ T4280] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.758012][ T4273] RDS/IB: rxe0: added [ 78.762920][ T4273] smc: adding ib device rxe0 with port count 1 [ 78.769308][ T4273] smc: ib device rxe0 port 1 has pnetid [ 78.831148][ T4280] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.850419][ T4273] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.914091][ T4280] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.055326][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 79.075157][ T4273] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.259355][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 79.325183][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.351643][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.368553][ T4279] device bridge_slave_0 entered promiscuous mode [ 79.392624][ T4273] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.403887][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 79.415990][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.440666][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.449009][ T4279] device bridge_slave_1 entered promiscuous mode [ 79.504805][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 79.595273][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.649037][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.666559][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.677638][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.687107][ T4271] device bridge_slave_0 entered promiscuous mode [ 79.698579][ T4273] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.781269][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.788428][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.797296][ T4271] device bridge_slave_1 entered promiscuous mode [ 79.818237][ T4279] team0: Port device team_slave_0 added [ 79.827473][ T4279] team0: Port device team_slave_1 added [ 79.901357][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.908516][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.918283][ T4272] device bridge_slave_0 entered promiscuous mode [ 79.927097][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.934947][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.961394][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.985442][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.995672][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.005768][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.014319][ T4272] device bridge_slave_1 entered promiscuous mode [ 80.024507][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.032483][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.058805][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.072426][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.140664][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.147817][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.161786][ T4274] device bridge_slave_0 entered promiscuous mode [ 80.172709][ T4271] team0: Port device team_slave_0 added [ 80.185229][ T4273] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.213986][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.240842][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.255214][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.262482][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.275733][ T4274] device bridge_slave_1 entered promiscuous mode [ 80.285057][ T4271] team0: Port device team_slave_1 added [ 80.404087][ T4272] team0: Port device team_slave_0 added [ 80.422157][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.429169][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.456251][ T4287] Bluetooth: hci0: command 0x0409 tx timeout [ 80.462573][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 80.468775][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 80.475169][ T49] Bluetooth: hci2: command 0x0409 tx timeout [ 80.481996][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.499122][ T4279] device hsr_slave_0 entered promiscuous mode [ 80.506317][ T4279] device hsr_slave_1 entered promiscuous mode [ 80.511093][ T49] Bluetooth: hci1: command 0x0409 tx timeout [ 80.521318][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.536698][ T4272] team0: Port device team_slave_1 added [ 80.552927][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.559928][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.586592][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.604712][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.661304][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.668314][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.721584][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.737898][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.746363][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.777422][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.844834][ T4274] team0: Port device team_slave_0 added [ 80.878674][ T4271] device hsr_slave_0 entered promiscuous mode [ 80.887224][ T4271] device hsr_slave_1 entered promiscuous mode [ 80.894612][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.902866][ T4271] Cannot create hsr debugfs directory [ 80.928148][ T4274] team0: Port device team_slave_1 added [ 81.006652][ T4272] device hsr_slave_0 entered promiscuous mode [ 81.014031][ T4272] device hsr_slave_1 entered promiscuous mode [ 81.026280][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.034108][ T4272] Cannot create hsr debugfs directory [ 81.040252][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.047885][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.079738][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.131291][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.138306][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.169575][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.303371][ T4274] device hsr_slave_0 entered promiscuous mode [ 81.311922][ T4274] device hsr_slave_1 entered promiscuous mode [ 81.318850][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.326549][ T4274] Cannot create hsr debugfs directory [ 81.549900][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 81.563554][ T4279] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.625729][ T4279] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.663311][ T4279] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.681038][ T4279] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.768371][ T4344] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.801789][ T3932] infiniband rxe0: set active [ 81.806865][ T126] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.849844][ T4271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.878522][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.889617][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.901083][ T4273] device bridge_slave_0 entered promiscuous mode [ 81.920386][ T4271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.935825][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.944418][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.953088][ T4273] device bridge_slave_1 entered promiscuous mode [ 81.979432][ T4271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.023106][ T4271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.046972][ T4274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.060502][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.089809][ T4274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.117711][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.132266][ T4274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.182237][ T4274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.208259][ T4272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.221864][ T4273] team0: Port device team_slave_0 added [ 82.238714][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.246261][ T4272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.256870][ T4273] team0: Port device team_slave_1 added [ 82.298307][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.305480][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.332603][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.348495][ T4272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.357797][ T4272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.377134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.387306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.396556][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.403975][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.435439][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.468320][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.511118][ T49] Bluetooth: hci2: command 0x041b tx timeout [ 82.512134][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 82.517212][ T49] Bluetooth: hci3: command 0x041b tx timeout [ 82.523238][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 82.544462][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.560813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.571135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.580520][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.587831][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.591110][ T49] Bluetooth: hci1: command 0x041b tx timeout [ 82.610996][ T4273] device hsr_slave_0 entered promiscuous mode [ 82.618208][ T4273] device hsr_slave_1 entered promiscuous mode [ 82.625452][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.633391][ T4273] Cannot create hsr debugfs directory [ 82.651627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.663382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.672613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.685707][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.692937][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.701858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.775788][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.804268][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.813034][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.860458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.870123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.896264][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.907248][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.919918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.928904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.938550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.948502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.957308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.966985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.975693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.989124][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.031525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.043091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.054548][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.061754][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.070500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.079091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.087657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.096859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.106049][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.113238][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.123181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.147517][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.162984][ T4273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.190866][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.211689][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.241383][ T4273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.260180][ T4273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.288855][ T4271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.306406][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.319565][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.336329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.346746][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.353979][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.365904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.375084][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.384342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.393750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.403423][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.413381][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.422785][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.430224][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.438533][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.447146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.456465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.465388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.474802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.483378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.492601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.505157][ T4273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.532182][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.556847][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.571828][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.591177][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.611302][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.652568][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.673083][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.699610][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.734238][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.763140][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.795410][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.814011][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.836833][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.846943][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.871688][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.883025][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.918084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.929022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.938811][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.946019][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.982002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.992152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.012634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.031868][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.039101][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.071904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.087816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.105269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.120825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.185765][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.203726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.217109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.233415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.243677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.253178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.293286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.301845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.314982][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.331548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.345104][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.378444][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.408165][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.432330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.451271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.467474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.497963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.535938][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.569038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.579045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.590591][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 84.602236][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 84.602252][ T49] Bluetooth: hci0: command 0x040f tx timeout [ 84.602340][ T49] Bluetooth: hci2: command 0x040f tx timeout [ 84.649937][ T4279] device veth0_vlan entered promiscuous mode [ 84.670518][ T49] Bluetooth: hci1: command 0x040f tx timeout [ 84.679284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.695615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.706231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.735919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.756070][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.782992][ T4279] device veth1_vlan entered promiscuous mode [ 84.810462][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.818735][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.841832][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.859774][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.867011][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.880861][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.898549][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.908444][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.915684][ T4365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.950178][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.967140][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.991516][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.010856][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.018452][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.040826][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.078758][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.088788][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.099887][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.115282][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.133163][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.148926][ T4279] device veth0_macvtap entered promiscuous mode [ 85.167039][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.176188][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.186063][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.204260][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.223502][ T4279] device veth1_macvtap entered promiscuous mode [ 85.249684][ T4273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.261901][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.282706][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.292487][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.301809][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.313374][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.323850][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.351967][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.367093][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.377354][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.437885][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.448094][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.466723][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.485468][ T4274] device veth0_vlan entered promiscuous mode [ 85.496808][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.505558][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.514200][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.526984][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.554015][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.583761][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.600999][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.608527][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.625865][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.646928][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.657102][ T4274] device veth1_vlan entered promiscuous mode [ 85.685885][ T4279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.700725][ T4279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.709493][ T4279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.720680][ T4279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.776763][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.787243][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.798800][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.808852][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.819545][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.830604][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.857814][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.883340][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.893449][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.902491][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.930454][ T4271] device veth0_vlan entered promiscuous mode [ 85.966954][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.986719][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.008015][ T4274] device veth0_macvtap entered promiscuous mode [ 86.032080][ T4271] device veth1_vlan entered promiscuous mode [ 86.087867][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.102447][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.121421][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.130161][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.147812][ T4272] device veth0_vlan entered promiscuous mode [ 86.165161][ T4274] device veth1_macvtap entered promiscuous mode [ 86.183047][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.192844][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.201185][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.215176][ T4272] device veth1_vlan entered promiscuous mode [ 86.244862][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.257522][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.269863][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.284031][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.296902][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.316889][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.324648][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.333693][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.346758][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.356537][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.366752][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.375790][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.387493][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.395432][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.405794][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.416981][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.428849][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.448913][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.459729][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.469656][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.478564][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.507692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.518219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.560960][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.568850][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.577156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.590208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.600111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.611070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.620016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.628983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.637911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.652858][ T4271] device veth0_macvtap entered promiscuous mode [ 86.666358][ T4272] device veth0_macvtap entered promiscuous mode [ 86.673235][ T4291] Bluetooth: hci2: command 0x0419 tx timeout [ 86.673727][ T49] Bluetooth: hci4: command 0x0419 tx timeout [ 86.679280][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 86.692321][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 86.730516][ T4272] device veth1_macvtap entered promiscuous mode [ 86.740885][ T4271] device veth1_macvtap entered promiscuous mode [ 86.751175][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 86.882165][ T4273] device veth0_vlan entered promiscuous mode [ 86.907018][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.941372][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.960915][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.972944][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.985103][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.997402][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.006836][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.024008][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.039887][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.042738][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.062746][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.071799][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.080629][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.090265][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.099877][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.115105][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.124548][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.137318][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.148316][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.170431][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.199203][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.220457][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.236357][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.248596][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.282498][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.295210][ T4273] device veth1_vlan entered promiscuous mode [ 87.339500][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.372000][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.400990][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.420403][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.442177][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.449604][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.468584][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.483306][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.501169][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.526861][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.552989][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.579843][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.599220][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.617547][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.628151][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.647141][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.657705][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.675065][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.700224][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.720144][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.729758][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.744603][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.757624][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.773075][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.823661][ T4271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.834200][ T4271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.843038][ T4271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.852057][ T4271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.876088][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.899896][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.913705][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.919689][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.937379][ T4273] device veth0_macvtap entered promiscuous mode [ 87.959967][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.968868][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.978657][ T4402] tipc: Started in network mode [ 87.984519][ T4402] tipc: Node identity ac1414aa, cluster identity 4711 [ 87.991994][ T4402] tipc: Enabling of bearer rejected, failed to enable media [ 88.022425][ T4273] device veth1_macvtap entered promiscuous mode [ 88.133461][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.153329][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.189856][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.208558][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.218569][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.242060][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.260153][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.273255][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.286052][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.312250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.321020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.339384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.360724][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.379055][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.399151][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.411885][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.422288][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.435220][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.445504][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.458288][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.477228][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.497370][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.516896][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.532423][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.556183][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.565807][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.578337][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.588551][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.598663][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.616588][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.682585][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.700931][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.739594][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.767525][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.789224][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.851172][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.861619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.888050][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.898431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.973897][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.009432][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.034499][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.095130][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.115992][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.137617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.221769][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 89.480349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.500371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 89.510355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 89.520352][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 89.530352][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 89.540351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 89.550334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 89.560334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 89.570331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 89.580342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 90.334354][ T4413] loop2: detected capacity change from 0 to 512 [ 90.342486][ T4413] EXT4-fs: Ignoring removed nobh option [ 90.348065][ T4413] ext4: Unknown parameter 'dioread_lock.grpquota' [ 91.047674][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 91.091007][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 91.109929][ T4261] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 91.244276][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 91.270866][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 91.285530][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 91.303674][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 91.324461][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 91.367263][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 91.385819][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 91.413270][ T4425] Zero length message leads to an empty skb [ 91.423032][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 91.452977][ T4284] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 91.462805][ T4284] CPU: 0 PID: 4284 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 91.463477][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 91.470409][ T4284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.470444][ T4284] Workqueue: hci2 hci_rx_work [ 91.470494][ T4284] Call Trace: [ 91.470502][ T4284] [ 91.470511][ T4284] dump_stack_lvl+0x188/0x24e [ 91.470550][ T4284] ? show_regs_print_info+0x12/0x12 [ 91.470578][ T4284] ? load_image+0x410/0x410 [ 91.513411][ T4284] sysfs_create_dir_ns+0x26a/0x290 [ 91.518600][ T4284] ? __lock_acquire+0x7ea0/0x7ea0 [ 91.523694][ T4284] ? sysfs_warn_dup+0xa0/0xa0 [ 91.528451][ T4284] ? do_raw_spin_unlock+0x11d/0x230 [ 91.533758][ T4284] kobject_add_internal+0x617/0xca0 [ 91.539042][ T4284] kobject_add+0x160/0x230 [ 91.543538][ T4284] ? kobject_init+0x1c0/0x1c0 [ 91.548281][ T4284] ? __raw_spin_lock_init+0x41/0x100 [ 91.553602][ T4284] ? klist_children_get+0x50/0x50 [ 91.558665][ T4284] ? get_device_parent+0x121/0x3e0 [ 91.563904][ T4284] device_add+0x470/0x1050 [ 91.568386][ T4284] hci_conn_add_sysfs+0xd1/0x1e0 [ 91.573358][ T4284] hci_sync_conn_complete_evt+0x707/0xab0 [ 91.579139][ T4284] ? hci_remote_ext_features_evt+0xb50/0xb50 [ 91.585150][ T4284] hci_event_packet+0x806/0x1290 [ 91.590130][ T4284] ? lock_chain_count+0x20/0x20 [ 91.595028][ T4284] ? bis_list+0x280/0x280 [ 91.599394][ T4284] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 91.605325][ T4284] ? kcov_remote_start+0x50f/0x810 [ 91.610474][ T4284] ? lockdep_hardirqs_on+0x94/0x140 [ 91.615730][ T4284] ? hci_send_to_monitor+0x9c/0x4a0 [ 91.620975][ T4284] hci_rx_work+0x3eb/0xd40 [ 91.625422][ T4284] ? _raw_spin_unlock+0x40/0x40 [ 91.630313][ T4284] ? process_one_work+0x7b4/0x1160 [ 91.635459][ T4284] process_one_work+0x8ab/0x1160 [ 91.640445][ T4284] ? worker_detach_from_pool+0x240/0x240 [ 91.646113][ T4284] ? _raw_spin_lock_irq+0xb7/0xf0 [ 91.651170][ T4284] ? _raw_spin_lock_irqsave+0x100/0x100 [ 91.656755][ T4284] ? wq_worker_running+0x97/0x190 [ 91.661806][ T4284] worker_thread+0xaf5/0x12a0 [ 91.666546][ T4284] kthread+0x29d/0x330 [ 91.670642][ T4284] ? worker_clr_flags+0x1a0/0x1a0 [ 91.675696][ T4284] ? kthread_blkcg+0xd0/0xd0 [ 91.680340][ T4284] ret_from_fork+0x1f/0x30 [ 91.684809][ T4284] [ 91.689679][ T4284] kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 91.703027][ T4284] Bluetooth: hci2: failed to register connection device [ 91.719181][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 91.727859][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 91.736684][ T4417] infiniband rxe0: set active [ 91.741931][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 91.802697][ T7] cfg80211: failed to load regulatory.db [ 91.812823][ T4349] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.873768][ T4429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 92.096262][ T4431] loop4: detected capacity change from 0 to 512 [ 92.239995][ T4431] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 92.298255][ T4431] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.949904][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 93.057026][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.374858][ T4455] FAULT_INJECTION: forcing a failure. [ 93.374858][ T4455] name failslab, interval 1, probability 0, space 0, times 1 [ 93.420806][ T4455] CPU: 0 PID: 4455 Comm: syz.3.18 Not tainted syzkaller #0 [ 93.428109][ T4455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.438217][ T4455] Call Trace: [ 93.441540][ T4455] [ 93.444512][ T4455] dump_stack_lvl+0x188/0x24e [ 93.449257][ T4455] ? show_regs_print_info+0x12/0x12 [ 93.454563][ T4455] ? load_image+0x410/0x410 [ 93.459117][ T4455] ? __might_sleep+0xd0/0xd0 [ 93.463756][ T4455] ? __lock_acquire+0x7ea0/0x7ea0 [ 93.468841][ T4455] should_fail_ex+0x390/0x4c0 [ 93.473579][ T4455] should_failslab+0x5/0x20 [ 93.478129][ T4455] slab_pre_alloc_hook+0x59/0x300 [ 93.483214][ T4455] kmem_cache_alloc+0x56/0x2f0 [ 93.488030][ T4455] ? ptlock_alloc+0x1c/0x60 [ 93.492642][ T4455] ptlock_alloc+0x1c/0x60 [ 93.497024][ T4455] pte_alloc_one+0xc0/0x310 [ 93.501580][ T4455] ? pfn_modify_allowed+0x560/0x560 [ 93.506824][ T4455] ? count_memcg_event_mm+0x36b/0x3c0 [ 93.512244][ T4455] ? __lock_acquire+0x7ea0/0x7ea0 [ 93.517345][ T4455] ? count_memcg_event_mm+0x8a/0x3c0 [ 93.522683][ T4455] ? put_page+0x270/0x270 [ 93.527066][ T4455] __pte_alloc+0x21/0x150 [ 93.531451][ T4455] handle_mm_fault+0x34b1/0x3d40 [ 93.536459][ T4455] ? mt_find+0x157/0x830 [ 93.540792][ T4455] ? numa_migrate_prep+0x250/0x250 [ 93.545961][ T4455] ? lock_chain_count+0x20/0x20 [ 93.550870][ T4455] ? lock_mm_and_find_vma+0xae/0x2f0 [ 93.556215][ T4455] do_user_addr_fault+0x58e/0xb20 [ 93.561326][ T4455] exc_page_fault+0x60/0x100 [ 93.565980][ T4455] asm_exc_page_fault+0x22/0x30 [ 93.570880][ T4455] RIP: 0010:copy_user_short_string+0x22/0x40 [ 93.576921][ T4455] Code: e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 01 ca c3 8d 14 [ 93.596582][ T4455] RSP: 0018:ffffc90004a979c8 EFLAGS: 00050202 [ 93.602702][ T4455] RAX: ffffffff8416c501 RBX: 0000000000000004 RCX: 0000000000000004 [ 93.610744][ T4455] RDX: 0000000000000004 RSI: 0000000000000000 RDI: ffffc90004a97aa0 [ 93.618755][ T4455] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 93.626775][ T4455] R10: dffffc0000000000 R11: fffff52000952f54 R12: 00007fffffffeffc [ 93.634812][ T4455] R13: ffffc90004a97aa0 R14: ffffc90004a97aa0 R15: 0000000000000000 [ 93.642839][ T4455] ? _copy_from_user+0xa1/0x170 [ 93.647753][ T4455] _copy_from_user+0xf4/0x170 [ 93.652497][ T4455] do_ipv6_getsockopt+0x304/0x2720 [ 93.657664][ T4455] ? __lock_acquire+0x1359/0x7ea0 [ 93.662748][ T4455] ? ipv6_setsockopt+0x190/0x190 [ 93.667775][ T4455] ? futex_wait_queue+0x23/0x1b0 [ 93.672768][ T4455] ? aa_label_sk_perm+0x501/0x6b0 [ 93.677846][ T4455] ? verify_lock_unused+0x140/0x140 [ 93.683128][ T4455] ? aa_sk_perm+0x950/0x950 [ 93.687704][ T4455] ? __might_sleep+0xd0/0xd0 [ 93.692350][ T4455] ipv6_getsockopt+0xba/0x2e0 [ 93.697081][ T4455] ? ipv6_getsockopt_sticky+0x180/0x180 [ 93.702677][ T4455] ? aa_sk_perm+0x81f/0x950 [ 93.707249][ T4455] rawv6_getsockopt+0x27b/0x560 [ 93.712160][ T4455] ? rawv6_setsockopt+0x660/0x660 [ 93.717247][ T4455] ? aa_sock_opt_perm+0x74/0x100 [ 93.722292][ T4455] ? sock_common_getsockopt+0x29/0xa0 [ 93.727720][ T4455] ? sock_recv_errqueue+0x590/0x590 [ 93.732971][ T4455] __sys_getsockopt+0x1b0/0x230 [ 93.737878][ T4455] __x64_sys_getsockopt+0xb1/0xc0 [ 93.742952][ T4455] do_syscall_64+0x4c/0xa0 [ 93.747424][ T4455] ? clear_bhb_loop+0x60/0xb0 [ 93.752151][ T4455] ? clear_bhb_loop+0x60/0xb0 [ 93.756885][ T4455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.762829][ T4455] RIP: 0033:0x7fe02919e559 [ 93.767314][ T4455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.786975][ T4455] RSP: 002b:00007fe029fdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 93.795450][ T4455] RAX: ffffffffffffffda RBX: 00007fe029425fa0 RCX: 00007fe02919e559 [ 93.803469][ T4455] RDX: 000000000000004c RSI: 0000000000000029 RDI: 0000000000000003 [ 93.811482][ T4455] RBP: 00007fe0292358b0 R08: 0000000000000000 R09: 0000000000000000 [ 93.819488][ T4455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.827502][ T4455] R13: 00007fe029426038 R14: 00007fe029425fa0 R15: 00007ffc471683f8 [ 93.835546][ T4455] [ 93.844687][ T4291] Bluetooth: hci2: command 0x0409 tx timeout [ 93.962364][ T4461] loop2: detected capacity change from 0 to 512 [ 94.059121][ T4461] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.11: inode #1: comm syz.2.11: iget: illegal inode # [ 94.097231][ T4461] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.11: error while reading EA inode 1 err=-117 [ 94.342188][ T4461] EXT4-fs (loop2): 1 orphan inode deleted [ 94.357937][ T4461] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 95.274595][ T4475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 95.284707][ T4475] netlink: 84 bytes leftover after parsing attributes in process `syz.4.21'. [ 96.154405][ T4291] Bluetooth: hci2: command 0x0406 tx timeout [ 96.324108][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 96.432345][ T4479] loop1: detected capacity change from 0 to 2048 [ 97.925588][ T4484] hub 6-0:1.0: USB hub found [ 97.937486][ T4484] hub 6-0:1.0: 1 port detected [ 97.973661][ T4479] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 97.995833][ T4479] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.011595][ T4490] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.121104][ T4493] process 'syz.0.26' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 98.241305][ T4493] loop0: detected capacity change from 0 to 1024 [ 98.426943][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 98.457939][ T4493] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 98.649386][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 99.217624][ T4516] loop0: detected capacity change from 0 to 1024 [ 99.267321][ T4516] ======================================================= [ 99.267321][ T4516] WARNING: The mand mount option has been deprecated and [ 99.267321][ T4516] and is ignored by this kernel. Remove the mand [ 99.267321][ T4516] option from the mount to silence this warning. [ 99.267321][ T4516] ======================================================= [ 99.361003][ T4523] Bluetooth: MGMT ver 1.22 [ 99.383557][ T4522] loop4: detected capacity change from 0 to 512 [ 99.418339][ T4516] EXT4-fs: Ignoring removed bh option [ 99.478840][ T4522] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 99.516606][ T4522] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.534229][ T4516] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 99.570843][ T4516] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.655438][ T4516] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm syz.0.32: lblock 3 mapped to illegal pblock 3 (length 2) [ 99.681133][ T4522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'. [ 99.731938][ T4516] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 2 with error 117 [ 99.766129][ T4516] EXT4-fs (loop0): This should not happen!! Data will be lost [ 99.766129][ T4516] [ 99.843549][ T4534] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: block 3: comm syz.0.32: lblock 3 mapped to illegal pblock 3 (length 1) [ 99.882768][ T4539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'. [ 100.005604][ T4538] EXT4-fs error (device loop0): ext4_ext_remove_space:2945: inode #15: comm syz.0.32: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 100.700632][ T4538] EXT4-fs error (device loop0) in ext4_setattr:5695: Corrupt filesystem [ 102.343239][ T4291] Bluetooth: hci0: command 0x0c20 tx timeout [ 102.349332][ T4291] Bluetooth: hci4: command 0x0405 tx timeout [ 102.553562][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 102.642729][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 103.716195][ T4563] loop4: detected capacity change from 0 to 256 [ 103.828028][ T4563] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 104.220538][ T4579] loop3: detected capacity change from 0 to 512 [ 104.338612][ T4579] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 104.397030][ T4579] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.470415][ T4351] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.738739][ T4351] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 104.754406][ T4351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.239880][ T4351] net1080 1-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, d2:d0:38:2e:e8:63 [ 105.281929][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 105.645921][ T4596] loop4: detected capacity change from 0 to 512 [ 106.373966][ T4596] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.47: bg 0: block 288: padding at end of block bitmap is not set [ 106.390943][ T4596] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 106.401270][ T4596] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.47: attempt to clear invalid blocks 1024 len 1 [ 106.494178][ T4604] FAULT_INJECTION: forcing a failure. [ 106.494178][ T4604] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.507523][ T4604] CPU: 1 PID: 4604 Comm: syz.2.50 Not tainted syzkaller #0 [ 106.514778][ T4604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.524864][ T4604] Call Trace: [ 106.528170][ T4604] [ 106.531125][ T4604] dump_stack_lvl+0x188/0x24e [ 106.535843][ T4604] ? show_regs_print_info+0x12/0x12 [ 106.541071][ T4604] ? load_image+0x410/0x410 [ 106.545623][ T4604] ? __lock_acquire+0x7ea0/0x7ea0 [ 106.550721][ T4604] should_fail_ex+0x390/0x4c0 [ 106.555451][ T4604] _copy_from_user+0x2c/0x170 [ 106.560156][ T4604] __sys_bpf+0x2ea/0x780 [ 106.564433][ T4604] ? bpf_link_show_fdinfo+0x380/0x380 [ 106.569864][ T4604] ? lock_chain_count+0x20/0x20 [ 106.574781][ T4604] __x64_sys_bpf+0x78/0x90 [ 106.579232][ T4604] do_syscall_64+0x4c/0xa0 [ 106.583780][ T4604] ? clear_bhb_loop+0x60/0xb0 [ 106.588489][ T4604] ? clear_bhb_loop+0x60/0xb0 [ 106.593194][ T4604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.599202][ T4604] RIP: 0033:0x7f3bf8b9e559 [ 106.603639][ T4604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.623302][ T4604] RSP: 002b:00007f3bf9a27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.631747][ T4604] RAX: ffffffffffffffda RBX: 00007f3bf8e26180 RCX: 00007f3bf8b9e559 [ 106.639747][ T4604] RDX: 0000000000000094 RSI: 0000200000000580 RDI: 0000000000000005 [ 106.647748][ T4604] RBP: 00007f3bf8c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 106.655753][ T4604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.663757][ T4604] R13: 00007f3bf8e26218 R14: 00007f3bf8e26180 R15: 00007ffc468cf358 [ 106.671770][ T4604] [ 106.735878][ T4604] loop2: detected capacity change from 0 to 256 [ 106.829956][ T4604] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.840904][ T4604] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 106.885616][ T4604] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 106.901901][ T4604] exFAT-fs (loop2): failed to load alloc-bitmap [ 106.908554][ T4604] exFAT-fs (loop2): failed to recognize exfat type [ 106.924542][ T4596] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.47: invalid indirect mapped block 1819239214 (level 0) [ 106.952857][ T4590] loop1: detected capacity change from 0 to 128 [ 107.523426][ T4590] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 107.541666][ T4596] EXT4-fs (loop4): 1 truncate cleaned up [ 107.547397][ T4596] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 107.647565][ T4590] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 107.661722][ T4590] ext2 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.351835][ T4609] netlink: 'syz.2.51': attribute type 29 has an invalid length. [ 108.363476][ T4609] netlink: 'syz.2.51': attribute type 29 has an invalid length. [ 109.241434][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.283901][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 109.433939][ T4351] usb 1-1: USB disconnect, device number 2 [ 109.453978][ T4351] net1080 1-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 109.524110][ T26] audit: type=1326 audit(1792002385.405:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4612 comm="syz.4.52" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f3d7a3982d7 code=0x0 [ 109.605198][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 110.323472][ T4635] syz.3.61 uses obsolete (PF_INET,SOCK_PACKET) [ 112.124415][ T4650] loop3: detected capacity change from 0 to 256 [ 112.227063][ T4650] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.278836][ T4652] loop1: detected capacity change from 0 to 256 [ 112.302929][ T4650] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2048) [ 112.349852][ T4650] FAT-fs (loop3): Filesystem has been set read-only [ 112.364844][ T4652] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.411615][ T4652] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 112.464817][ T4652] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b889, utbl_chksum : 0xe619d30d) [ 112.536256][ T4652] exFAT-fs (loop1): failed to load alloc-bitmap [ 112.573137][ T4652] exFAT-fs (loop1): failed to recognize exfat type [ 113.321970][ T4663] loop2: detected capacity change from 0 to 128 [ 114.230015][ T4682] loop2: detected capacity change from 0 to 2048 [ 114.324035][ T4682] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.923800][ T4715] loop0: detected capacity change from 0 to 512 [ 115.931434][ T4715] EXT4-fs: inline encryption not supported [ 115.987333][ T4715] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.240888][ T4715] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 117.310610][ T4715] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 117.356061][ T4715] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 117.367908][ T4726] loop1: detected capacity change from 0 to 512 [ 117.421741][ T4715] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 118.949839][ T4715] EXT4-fs (loop0): orphan cleanup on readonly fs [ 118.991081][ T4726] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 118.998603][ T4715] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.84: bg 0: block 34: padding at end of block bitmap is not set [ 119.030553][ T4726] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 119.101507][ T4726] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.87: invalid indirect mapped block 9 (level 0) [ 119.153925][ T4715] Quota error (device loop0): write_blk: dquota write failed [ 119.219710][ T4726] EXT4-fs (loop1): 1 truncate cleaned up [ 119.263751][ T4715] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 119.280447][ T4726] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 119.309570][ T4715] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.84: Failed to acquire dquot type 1 [ 119.450713][ T4715] EXT4-fs (loop0): 1 truncate cleaned up [ 119.471605][ T4715] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 119.538756][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 119.630761][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 119.826291][ T4753] loop0: detected capacity change from 0 to 512 [ 119.893310][ T4753] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 119.978057][ T4753] EXT4-fs (loop0): 1 truncate cleaned up [ 120.010769][ T4753] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 120.039126][ T26] audit: type=1326 audit(1792002395.915:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4738 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7a39e559 code=0x7ffc0000 [ 121.620543][ T4382] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 121.639298][ T26] audit: type=1326 audit(1792002395.945:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4738 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7a39e559 code=0x7ffc0000 [ 121.690420][ T26] audit: type=1326 audit(1792002395.945:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4738 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7a39e559 code=0x7ffc0000 [ 121.770605][ T26] audit: type=1326 audit(1792002395.945:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4738 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3d7a39e559 code=0x7ffc0000 [ 121.842357][ T4382] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 121.884253][ T4382] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.900686][ T26] audit: type=1326 audit(1792002395.945:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4738 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3d7a39e559 code=0x7ffc0000 [ 121.953620][ T4382] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 121.966817][ T4382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.986084][ T4382] hub 2-1:4.0: USB hub found [ 122.207266][ T4382] hub 2-1:4.0: 2 ports detected [ 122.212502][ T4382] usb 2-1: selecting invalid altsetting 1 [ 122.255140][ T4382] hub 2-1:4.0: Using single TT (err -22) [ 122.414247][ T4382] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 122.448786][ T4382] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 122.562494][ T4382] usb 2-1: USB disconnect, device number 2 [ 122.597517][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 123.529322][ T4781] loop1: detected capacity change from 0 to 256 [ 123.545422][ T26] audit: type=1326 audit(1792002399.425:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.2.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf8b9e559 code=0x7ffc0000 [ 123.592228][ T4781] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.638521][ T4781] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 123.675961][ T26] audit: type=1326 audit(1792002399.425:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.2.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf8b9e559 code=0x7ffc0000 [ 123.724902][ T4781] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 123.750999][ T26] audit: type=1326 audit(1792002399.425:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.2.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf8b9e559 code=0x7ffc0000 [ 123.826822][ T4781] exFAT-fs (loop1): failed to load alloc-bitmap [ 123.848226][ T4781] exFAT-fs (loop1): failed to recognize exfat type [ 124.734937][ T4800] loop0: detected capacity change from 0 to 512 [ 126.236515][ T4800] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 126.312250][ T4800] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.108: casefold flag without casefold feature [ 126.355929][ T4811] loop1: detected capacity change from 0 to 8 [ 126.383098][ T4800] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.108: couldn't read orphan inode 15 (err -117) [ 126.493249][ T4800] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 126.573649][ T4800] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 4: comm syz.0.108: lblock 0 mapped to illegal pblock 4 (length 1) [ 126.610460][ T4815] capability: warning: `syz.4.112' uses deprecated v2 capabilities in a way that may be insecure [ 127.512141][ T4818] using random self ethernet address [ 127.518495][ T4818] using random host ethernet address [ 127.998507][ T4817] loop3: detected capacity change from 0 to 136 [ 128.016916][ T4810] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 128.075083][ T4817] Attempt to read inode for relocated directory [ 128.290056][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 129.380178][ T4835] FAULT_INJECTION: forcing a failure. [ 129.380178][ T4835] name failslab, interval 1, probability 0, space 0, times 0 [ 129.420732][ T4835] CPU: 0 PID: 4835 Comm: syz.0.120 Not tainted syzkaller #0 [ 129.428088][ T4835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.438268][ T4835] Call Trace: [ 129.441605][ T4835] [ 129.444617][ T4835] dump_stack_lvl+0x188/0x24e [ 129.449375][ T4835] ? show_regs_print_info+0x12/0x12 [ 129.454635][ T4835] ? load_image+0x410/0x410 [ 129.459198][ T4835] ? __lock_acquire+0x7ea0/0x7ea0 [ 129.464288][ T4835] ? vfs_write+0x777/0x9a0 [ 129.468775][ T4835] should_fail_ex+0x390/0x4c0 [ 129.473524][ T4835] should_failslab+0x5/0x20 [ 129.478087][ T4835] slab_pre_alloc_hook+0x59/0x300 [ 129.483193][ T4835] ? fsnotify_alloc_group+0x70/0x3b0 [ 129.488525][ T4835] __kmem_cache_alloc_node+0x4f/0x270 [ 129.493956][ T4835] ? fsnotify_alloc_group+0x70/0x3b0 [ 129.499266][ T4835] kmalloc_trace+0x26/0xe0 [ 129.503706][ T4835] fsnotify_alloc_group+0x70/0x3b0 [ 129.508846][ T4835] __se_sys_fanotify_init+0x1ae/0x7b0 [ 129.514282][ T4835] ? syscall_enter_from_user_mode+0x21/0x80 [ 129.520205][ T4835] ? lockdep_hardirqs_on+0x94/0x140 [ 129.525437][ T4835] do_syscall_64+0x4c/0xa0 [ 129.529873][ T4835] ? clear_bhb_loop+0x60/0xb0 [ 129.534569][ T4835] ? clear_bhb_loop+0x60/0xb0 [ 129.539265][ T4835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.545193][ T4835] RIP: 0033:0x7fdae7b9e559 [ 129.549626][ T4835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.569273][ T4835] RSP: 002b:00007fdae8aaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 129.577908][ T4835] RAX: ffffffffffffffda RBX: 00007fdae7e25fa0 RCX: 00007fdae7b9e559 [ 129.585948][ T4835] RDX: 0000000000000000 RSI: 0000000000040000 RDI: 0000000000000040 [ 129.593947][ T4835] RBP: 00007fdae7c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 129.601954][ T4835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.609941][ T4835] R13: 00007fdae7e26038 R14: 00007fdae7e25fa0 R15: 00007ffdc3ac9cb8 [ 129.617949][ T4835] [ 130.138688][ T4846] loop2: detected capacity change from 0 to 1024 [ 130.176299][ T4849] loop4: detected capacity change from 0 to 512 [ 130.249972][ T4849] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.125: inode #1: comm syz.4.125: iget: illegal inode # [ 130.291453][ T4849] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.125: error while reading EA inode 1 err=-117 [ 130.314814][ T4849] EXT4-fs (loop4): 1 orphan inode deleted [ 130.320798][ T4849] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 130.423163][ T4849] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.125: invalid indirect mapped block 234881024 (level 0) [ 130.575886][ T4846] hfsplus: xattr search failed [ 130.750076][ T4272] hfsplus: node 4:3 still has 1 user(s)! [ 130.811609][ T4467] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 130.910480][ T4382] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 131.012784][ T4467] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.024062][ T4467] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.036784][ T4467] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.050453][ T4467] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.059543][ T4467] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.087922][ T4467] usb 4-1: config 0 descriptor?? [ 131.273637][ T4874] loop0: detected capacity change from 0 to 512 [ 131.273788][ T4382] usb 5-1: unable to get BOS descriptor or descriptor too short [ 131.338291][ T4382] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.396166][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.505488][ T4382] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.602461][ T4382] usb 5-1: string descriptor 0 read error: -22 [ 131.620586][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 131.632216][ T7] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 131.657163][ T4382] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 131.734949][ T7] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.762225][ T4382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.938484][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 131.964369][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 131.991501][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.009960][ T4382] usb 5-1: selecting invalid altsetting 1 [ 132.027863][ T7] usb 2-1: config 0 descriptor?? [ 132.049550][ T4382] usb 5-1: unit 6 not found! [ 132.212876][ T4382] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 132.269144][ T7] usbhid 2-1:0.0: can't add hid device: -71 [ 132.286871][ T7] usbhid: probe of 2-1:0.0 failed with error -71 [ 132.328249][ T4382] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 132.348663][ T4467] usbhid 4-1:0.0: can't add hid device: -71 [ 132.355499][ T7] usb 2-1: USB disconnect, device number 3 [ 132.366711][ T4467] usbhid: probe of 4-1:0.0 failed with error -71 [ 132.407764][ T4882] loop2: detected capacity change from 0 to 512 [ 132.421042][ T4882] EXT4-fs: Ignoring removed orlov option [ 132.426805][ T4882] EXT4-fs: Ignoring removed oldalloc option [ 132.458751][ T4882] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.490684][ T4467] usb 4-1: USB disconnect, device number 3 [ 132.544752][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.569586][ T4382] usb 5-1: USB disconnect, device number 2 [ 132.588542][ T4882] EXT4-fs (loop2): failed to initialize system zone (-117) [ 132.634914][ T4882] EXT4-fs (loop2): mount failed [ 132.760843][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.767897][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.439425][ T4895] loop3: detected capacity change from 0 to 2048 [ 133.613624][ T4895] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 133.664761][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 133.686850][ T4895] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 133.725183][ T4895] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 135.216256][ T4895] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 135.243736][ T4895] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 135.267543][ T4908] loop4: detected capacity change from 0 to 512 [ 135.292545][ T4895] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 135.311525][ T4908] EXT4-fs: Ignoring removed orlov option [ 135.318044][ T4908] EXT4-fs: Ignoring removed oldalloc option [ 135.350667][ T4895] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 135.392203][ T4908] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.403740][ T4895] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 135.441265][ T4895] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 135.456206][ T4908] EXT4-fs (loop4): failed to initialize system zone (-117) [ 135.480600][ T4908] EXT4-fs (loop4): mount failed [ 135.493454][ T4914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 135.510574][ T4895] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 135.680679][ T4895] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=385, location=385 [ 135.732859][ T4895] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 135.744372][ T4895] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 135.755080][ T4895] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 137.025950][ T4928] 9pnet_fd: Insufficient options for proto=fd [ 137.950411][ T4360] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 138.152236][ T4360] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.173638][ T4360] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.204668][ T4360] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.250398][ T4360] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.280031][ T4360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.321308][ T4360] usb 1-1: config 0 descriptor?? [ 138.369020][ T4938] loop1: detected capacity change from 0 to 2048 [ 138.393715][ T4938] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.537947][ T4284] Bluetooth: Frame is too long (len 10, expected len 4) [ 138.941394][ T4360] usbhid 1-1:0.0: can't add hid device: -71 [ 138.956492][ T4360] usbhid: probe of 1-1:0.0 failed with error -71 [ 138.979568][ T4360] usb 1-1: USB disconnect, device number 3 [ 140.540595][ T4382] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 140.590419][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 140.768670][ T4382] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.802192][ T4382] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 140.820918][ T4382] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 140.829243][ T4382] usb 4-1: Product: syz [ 140.838547][ T4382] usb 4-1: Manufacturer: syz [ 140.843740][ T4382] usb 4-1: SerialNumber: syz [ 140.884846][ T4382] usb 4-1: config 0 descriptor?? [ 140.909584][ T4382] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 140.940101][ T4382] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 140.954563][ T4382] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 88 [ 140.968472][ T4382] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 140.995496][ T4382] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 141.008729][ T4382] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 141.028788][ T4382] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 141.050944][ T4382] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 141.067985][ T4382] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 141.079493][ T4382] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 141.088784][ T4382] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 141.848950][ T4467] usb 4-1: USB disconnect, device number 4 [ 142.052661][ T4467] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 142.147738][ T4467] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 142.191061][ C0] ================================================================== [ 142.199203][ C0] BUG: KASAN: use-after-free in usa49_glocont_callback+0x19f/0x270 [ 142.207178][ C0] Read of size 4 at addr ffff88802d4651b0 by task ksoftirqd/0/15 [ 142.214929][ C0] [ 142.217279][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 142.224612][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 142.234690][ C0] Call Trace: [ 142.237991][ C0] [ 142.240998][ C0] dump_stack_lvl+0x188/0x24e [ 142.245744][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 142.250799][ C0] ? show_regs_print_info+0x12/0x12 [ 142.256020][ C0] ? load_image+0x410/0x410 [ 142.260536][ C0] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 142.266039][ C0] ? __virt_addr_valid+0x188/0x540 [ 142.271176][ C0] ? __virt_addr_valid+0x467/0x540 [ 142.276311][ C0] ? usa49_glocont_callback+0x19f/0x270 [ 142.281884][ C0] print_report+0xa8/0x210 [ 142.286333][ C0] kasan_report+0x10b/0x140 [ 142.290873][ C0] ? usa49_glocont_callback+0x19f/0x270 [ 142.296469][ C0] usa49_glocont_callback+0x19f/0x270 [ 142.301884][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 142.307290][ C0] dummy_timer+0xa39/0x34e0 [ 142.311847][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 142.316899][ C0] ? lock_chain_count+0x20/0x20 [ 142.321786][ C0] ? dummy_free_streams+0x520/0x520 [ 142.327029][ C0] __hrtimer_run_queues+0x522/0xc90 [ 142.332247][ C0] ? dummy_free_streams+0x520/0x520 [ 142.337482][ C0] ? hrtimer_interrupt+0x980/0x980 [ 142.342618][ C0] hrtimer_run_softirq+0x173/0x290 [ 142.347752][ C0] handle_softirqs+0x291/0x910 [ 142.352550][ C0] ? run_ksoftirqd+0xa4/0x100 [ 142.357263][ C0] ? do_softirq+0x210/0x210 [ 142.361786][ C0] run_ksoftirqd+0xa4/0x100 [ 142.366325][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 142.371557][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 142.376955][ C0] ? takeover_tasklets+0x770/0x770 [ 142.382087][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 142.387305][ C0] smpboot_thread_fn+0x667/0xa30 [ 142.392265][ C0] ? smpboot_thread_fn+0x49/0xa30 [ 142.397321][ C0] kthread+0x29d/0x330 [ 142.401413][ C0] ? cpu_report_death+0x250/0x250 [ 142.406470][ C0] ? kthread_blkcg+0xd0/0xd0 [ 142.411098][ C0] ret_from_fork+0x1f/0x30 [ 142.415548][ C0] [ 142.418610][ C0] [ 142.420988][ C0] Allocated by task 4382: [ 142.425330][ C0] kasan_set_track+0x4b/0x70 [ 142.429945][ C0] __kasan_kmalloc+0x8e/0xa0 [ 142.434573][ C0] keyspan_port_probe+0xa7/0xd10 [ 142.439550][ C0] usb_serial_device_probe+0xd6/0x2d0 [ 142.445047][ C0] really_probe+0x24a/0xb40 [ 142.449586][ C0] __driver_probe_device+0x1f5/0x390 [ 142.454888][ C0] driver_probe_device+0x4f/0x420 [ 142.459929][ C0] __device_attach_driver+0x2c6/0x510 [ 142.465347][ C0] bus_for_each_drv+0x184/0x210 [ 142.470225][ C0] __device_attach+0x2a7/0x480 [ 142.475020][ C0] bus_probe_device+0xba/0x1d0 [ 142.479801][ C0] device_add+0xbcf/0x1050 [ 142.484246][ C0] usb_serial_probe+0x2642/0x2c90 [ 142.489296][ C0] usb_probe_interface+0x6e7/0xcf0 [ 142.494443][ C0] really_probe+0x24a/0xb40 [ 142.499028][ C0] __driver_probe_device+0x1f5/0x390 [ 142.504352][ C0] driver_probe_device+0x4f/0x420 [ 142.509403][ C0] __device_attach_driver+0x2c6/0x510 [ 142.514809][ C0] bus_for_each_drv+0x184/0x210 [ 142.519681][ C0] __device_attach+0x2a7/0x480 [ 142.524464][ C0] bus_probe_device+0xba/0x1d0 [ 142.529255][ C0] device_add+0xbcf/0x1050 [ 142.533703][ C0] usb_set_configuration+0x19d5/0x2030 [ 142.539184][ C0] usb_generic_driver_probe+0x89/0x150 [ 142.544665][ C0] usb_probe_device+0x126/0x250 [ 142.549542][ C0] really_probe+0x24a/0xb40 [ 142.554066][ C0] __driver_probe_device+0x1f5/0x390 [ 142.559368][ C0] driver_probe_device+0x4f/0x420 [ 142.564421][ C0] __device_attach_driver+0x2c6/0x510 [ 142.569832][ C0] bus_for_each_drv+0x184/0x210 [ 142.574696][ C0] __device_attach+0x2a7/0x480 [ 142.579480][ C0] bus_probe_device+0xba/0x1d0 [ 142.584265][ C0] device_add+0xbcf/0x1050 [ 142.588707][ C0] usb_new_device+0xa01/0x15e0 [ 142.593496][ C0] hub_event+0x2b2f/0x5200 [ 142.597946][ C0] process_one_work+0x8ab/0x1160 [ 142.602905][ C0] worker_thread+0xaf5/0x12a0 [ 142.607605][ C0] kthread+0x29d/0x330 [ 142.611690][ C0] ret_from_fork+0x1f/0x30 [ 142.616131][ C0] [ 142.618472][ C0] Freed by task 4467: [ 142.622473][ C0] kasan_set_track+0x4b/0x70 [ 142.627092][ C0] kasan_save_free_info+0x27/0x40 [ 142.632128][ C0] ____kasan_slab_free+0x126/0x1f0 [ 142.637264][ C0] slab_free_freelist_hook+0x133/0x1b0 [ 142.642753][ C0] __kmem_cache_free+0xb6/0x200 [ 142.647630][ C0] usb_serial_device_remove+0x11c/0x1e0 [ 142.653195][ C0] device_release_driver_internal+0x47d/0x7c0 [ 142.659295][ C0] bus_remove_device+0x2dd/0x400 [ 142.664263][ C0] device_del+0x63f/0xa80 [ 142.668619][ C0] usb_serial_disconnect+0x292/0x4c0 [ 142.673935][ C0] usb_unbind_interface+0x200/0x870 [ 142.679165][ C0] device_release_driver_internal+0x4cf/0x7c0 [ 142.685273][ C0] bus_remove_device+0x2dd/0x400 [ 142.690225][ C0] device_del+0x63f/0xa80 [ 142.694583][ C0] usb_disable_device+0x3e7/0x8a0 [ 142.699625][ C0] usb_disconnect+0x33c/0x8a0 [ 142.704328][ C0] hub_event+0x1d27/0x5200 [ 142.708762][ C0] process_one_work+0x8ab/0x1160 [ 142.713724][ C0] worker_thread+0xaf5/0x12a0 [ 142.718415][ C0] kthread+0x29d/0x330 [ 142.722581][ C0] ret_from_fork+0x1f/0x30 [ 142.727022][ C0] [ 142.729368][ C0] The buggy address belongs to the object at ffff88802d465100 [ 142.729368][ C0] which belongs to the cache kmalloc-192 of size 192 [ 142.743431][ C0] The buggy address is located 176 bytes inside of [ 142.743431][ C0] 192-byte region [ffff88802d465100, ffff88802d4651c0) [ 142.756740][ C0] [ 142.759078][ C0] The buggy address belongs to the physical page: [ 142.765525][ C0] page:ffffea0000b51940 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d465 [ 142.775696][ C0] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 142.783275][ C0] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888018441a00 [ 142.791921][ C0] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 142.800518][ C0] page dumped because: kasan: bad access detected [ 142.806956][ C0] page_owner tracks the page as allocated [ 142.812678][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4261, tgid 4261 (udevd), ts 140989078885, free_ts 140988711151 [ 142.830512][ C0] post_alloc_hook+0x173/0x1a0 [ 142.835303][ C0] get_page_from_freelist+0x206b/0x2180 [ 142.840874][ C0] __alloc_pages+0x1ec/0x4f0 [ 142.845491][ C0] alloc_slab_page+0x4f/0x180 [ 142.850225][ C0] new_slab+0x87/0x2d0 [ 142.854348][ C0] ___slab_alloc+0xbc5/0x1240 [ 142.859059][ C0] __kmem_cache_alloc_node+0x126/0x270 [ 142.864550][ C0] __kmalloc_node+0xa2/0x240 [ 142.869169][ C0] memcg_alloc_slab_cgroups+0x81/0x120 [ 142.874664][ C0] new_slab+0xc3/0x2d0 [ 142.878760][ C0] ___slab_alloc+0xbc5/0x1240 [ 142.883488][ C0] kmem_cache_alloc_lru+0x104/0x2e0 [ 142.888724][ C0] __d_alloc+0x2e/0x6e0 [ 142.892910][ C0] d_alloc_parallel+0xdc/0x1590 [ 142.897800][ C0] __lookup_slow+0x134/0x3f0 [ 142.902412][ C0] lookup_slow+0x53/0x70 [ 142.906693][ C0] page last free stack trace: [ 142.911380][ C0] free_unref_page_prepare+0x8e5/0x9e0 [ 142.916889][ C0] free_unref_page+0x2e/0x3f0 [ 142.921616][ C0] __unfreeze_partials+0x188/0x1e0 [ 142.926771][ C0] put_cpu_partial+0x17c/0x250 [ 142.931583][ C0] qlist_free_all+0x76/0xe0 [ 142.936107][ C0] kasan_quarantine_reduce+0x144/0x160 [ 142.941607][ C0] __kasan_slab_alloc+0x1e/0x80 [ 142.946490][ C0] slab_post_alloc_hook+0x4b/0x490 [ 142.951629][ C0] kmem_cache_alloc+0x18b/0x2f0 [ 142.956498][ C0] getname_flags+0xb7/0x500 [ 142.961016][ C0] user_path_at_empty+0x28/0x60 [ 142.965886][ C0] do_readlinkat+0xd9/0x490 [ 142.970422][ C0] __x64_sys_readlink+0x7b/0x90 [ 142.975311][ C0] do_syscall_64+0x4c/0xa0 [ 142.979774][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.985719][ C0] [ 142.988077][ C0] Memory state around the buggy address: [ 142.993721][ C0] ffff88802d465080: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 143.001834][ C0] ffff88802d465100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 143.009959][ C0] >ffff88802d465180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 143.018069][ C0] ^ [ 143.023727][ C0] ffff88802d465200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 143.031804][ C0] ffff88802d465280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 143.039889][ C0] ================================================================== [ 143.048002][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 143.055230][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 143.062563][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.072653][ C0] Call Trace: [ 143.075960][ C0] [ 143.078915][ C0] dump_stack_lvl+0x188/0x24e [ 143.083626][ C0] ? memcpy+0x3c/0x60 [ 143.087717][ C0] ? show_regs_print_info+0x12/0x12 [ 143.092939][ C0] ? load_image+0x410/0x410 [ 143.097462][ C0] panic+0x2d3/0x710 [ 143.101385][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 143.106445][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 143.111007][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 143.116961][ C0] ? _raw_spin_unlock+0x40/0x40 [ 143.121839][ C0] check_panic_on_warn+0x80/0xa0 [ 143.126821][ C0] ? usa49_glocont_callback+0x19f/0x270 [ 143.132398][ C0] end_report+0x66/0x110 [ 143.136688][ C0] kasan_report+0x118/0x140 [ 143.141222][ C0] ? usa49_glocont_callback+0x19f/0x270 [ 143.146807][ C0] usa49_glocont_callback+0x19f/0x270 [ 143.152202][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 143.157607][ C0] dummy_timer+0xa39/0x34e0 [ 143.162148][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 143.167202][ C0] ? lock_chain_count+0x20/0x20 [ 143.172080][ C0] ? dummy_free_streams+0x520/0x520 [ 143.177305][ C0] __hrtimer_run_queues+0x522/0xc90 [ 143.182549][ C0] ? dummy_free_streams+0x520/0x520 [ 143.187780][ C0] ? hrtimer_interrupt+0x980/0x980 [ 143.192917][ C0] hrtimer_run_softirq+0x173/0x290 [ 143.198055][ C0] handle_softirqs+0x291/0x910 [ 143.202847][ C0] ? run_ksoftirqd+0xa4/0x100 [ 143.207570][ C0] ? do_softirq+0x210/0x210 [ 143.212094][ C0] run_ksoftirqd+0xa4/0x100 [ 143.216616][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 143.221837][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 143.227245][ C0] ? takeover_tasklets+0x770/0x770 [ 143.232376][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 143.237600][ C0] smpboot_thread_fn+0x667/0xa30 [ 143.242560][ C0] ? smpboot_thread_fn+0x49/0xa30 [ 143.247611][ C0] kthread+0x29d/0x330 [ 143.251695][ C0] ? cpu_report_death+0x250/0x250 [ 143.256742][ C0] ? kthread_blkcg+0xd0/0xd0 [ 143.261343][ C0] ret_from_fork+0x1f/0x30 [ 143.265810][ C0] [ 143.269455][ C0] Kernel Offset: disabled [ 143.273792][ C0] Rebooting in 86400 seconds..