last executing test programs: 6.566611714s ago: executing program 0 (id=36): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xb02b, 0x1000, 0x4, 0x4000002, 0x88d7, 0x8d, 0x1007, 0x0, 0x1002, 0xffffffff, 0x200, 0x800007, 0x10000009, 0x80001, 0x5, 0x1, 0x8, 0x3, 0x40009, 0x91, 0x10c, 0x3, 0x7, 0xa, 0x7, 0x9, 0x75, 0xc, 0xff, 0x400002, 0x1]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, 0x0, 0x0) r5 = dup(r2) sendmmsg$inet(r5, 0x0, 0x0, 0x40000091) 6.551396045s ago: executing program 0 (id=37): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002000)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x40) 6.458404819s ago: executing program 0 (id=40): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x4000}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x5c}}, 0x0) 6.371587003s ago: executing program 0 (id=42): timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x8a9, 0x41, "ff074e000476808eff0300", 0x0, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) 5.574572288s ago: executing program 0 (id=46): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000003c0)={0x0, 0x6, 0x3, "d8605e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x40, 0xe, 0x9, "8e2355c0f042cec254"}, 0x0, 0x0, 0x0, 0x0}) 4.000300346s ago: executing program 1 (id=51): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2040}, 0x54) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.319784046s ago: executing program 3 (id=57): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 3.258902839s ago: executing program 3 (id=59): openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x40000, 0x6) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) close(0x3) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0xe, 0x9}}, 0x0) close(0x3) 3.201093981s ago: executing program 3 (id=60): openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16=r0], 0x0) 3.066173317s ago: executing program 1 (id=61): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000580)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x0, 0x17c1, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x2}}}}}}}, 0x42) 3.065502617s ago: executing program 4 (id=62): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40046304, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 2.99396229s ago: executing program 4 (id=63): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) landlock_restrict_self(r1, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, 0x0) pipe(0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f00510066b87a000f02d86161300f300fc79d53bf0000c4b961edc30101220f01c3", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.845583646s ago: executing program 1 (id=64): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='g', 0x1, 0x4000000, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x81, 0x6, 0x10, 0x6, 0xc, 0x7, 0x3, 0xb, 0x6b, 0xa, 0xf5, 0x1, 0x46, 0x8}, 0xe) 2.817122898s ago: executing program 4 (id=65): bind$isdn(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @local=@item_4={0x3, 0x2, 0x2, "4e84a66b"}, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x7, '8'}, @main=@item_4={0x3, 0x0, 0x8, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @main=@item_4={0x3, 0x0, 0x9, ')$Q)'}]}}, 0x0}, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) 2.791269419s ago: executing program 1 (id=66): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="690302020502060612f5ce2ba893279f5b401f98e63b6db21a505401"], 0x1c) close(0xffffffffffffffff) 2.538596309s ago: executing program 0 (id=67): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000240)={0x14, &(0x7f0000000500)={0x40, 0x2, 0xf9, {0xf9, 0x28, "ac975e53c374f96bc3f02ac06f9170dbab1630bcc9d0942f66170c42f41566859862440fd535841ccbfbfdb41898c07c3b7ab768f9825dfae845e4ce6f80248e54090c89dfee8b3b52fe24befb93cc366259708224b04a4a8a7a9a730cc15b830c92a7d515515ca637eab05ebdb2de801a5ecb572f5cb2379fc9fe5566c13071e0edffcde2be6229a8b665ea4221836c4004849b27ee234704367d147187e2ae6ebc989c8e2f6d1022c584adbc5f5f09cc549d22bb43da0ffc39e839e371202a94da997edf280083794e41716f77fcc65b3064a032b4f3eac01c78bca7bb41d343df546f108a2d996a692502d3ea73d10517fcddd32878"}}, &(0x7f00000002c0)={0x0, 0x3, 0xd, @string={0xd, 0x3, "34da568633a0920f72783a"}}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000b40)=0xe) syz_usb_connect(0x1, 0x24, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 2.420962315s ago: executing program 2 (id=69): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0402030c"], 0x7) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0402030c"], 0x7) 2.350590158s ago: executing program 2 (id=70): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000880)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 1.907018057s ago: executing program 1 (id=71): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x1c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.869160959s ago: executing program 1 (id=72): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, 0x0) 1.498544815s ago: executing program 3 (id=73): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000090, &(0x7f00000005c0)={0xa, 0x4e20, 0xa3, @loopback, 0x1ff}, 0x1c) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 971.724038ms ago: executing program 3 (id=74): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40046304, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 912.72052ms ago: executing program 4 (id=75): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003"], 0x68}}, 0x0) 887.714991ms ago: executing program 3 (id=76): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x802) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x2a, 0xf0]) 826.496475ms ago: executing program 4 (id=77): openat$sequencer(0xffffffffffffff9c, 0x0, 0x82200, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf", 0x48) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) read(r0, &(0x7f0000000040)=""/142, 0x3f) 282.245208ms ago: executing program 2 (id=78): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', 0x0}) r1 = socket(0x10, 0x80003, 0x0) recvmsg$unix(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000100)=""/35, 0x23}, {0x0}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000000440)=""/93, 0x5d}, {0x0}, {&(0x7f0000006380)=""/4096, 0x1000}], 0x6, &(0x7f00000008c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'sit0\x00'}) 175.902832ms ago: executing program 2 (id=79): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 30.342809ms ago: executing program 2 (id=80): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'rti802\x00', [0x4f27, 0x5, 0x10000, 0x30, 0x67, 0x4c7, 0x7, 0x8000, 0xa, 0x104, 0xffffffff, 0x1, 0xffffffff, 0x1, 0x4, 0x7, 0x5, 0x1a449, 0x3, 0x404, 0x2086, 0x24, 0x84000000, 0x20001e5c, 0x7ffe, 0x8002, 0x3c, 0x1, 0x6, 0x0, 0x1000000]}) 30.080939ms ago: executing program 2 (id=81): readv(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000004c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f00000004c0)={0x20, 0xf, 0x4, "d7bcae42"}, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=82): ioctl$TCSETSF2(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={0x10000000, 0x4, 0x10008, 0x0, 0xf, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe3, 0x9}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x1, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68fc, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x10}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.176' (ED25519) to the list of known hosts. [ 47.717867][ T4169] cgroup: Unknown subsys name 'net' [ 47.858358][ T4169] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.071075][ T4169] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.482953][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 50.588138][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 50.597387][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.604584][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.612725][ T4181] device bridge_slave_0 entered promiscuous mode [ 50.646897][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.654195][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.662206][ T4181] device bridge_slave_1 entered promiscuous mode [ 50.692718][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 50.713973][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.737540][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 50.747387][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.837282][ T4181] team0: Port device team_slave_0 added [ 50.855570][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.862641][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.870616][ T4191] device bridge_slave_0 entered promiscuous mode [ 50.881151][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.888396][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.896318][ T4191] device bridge_slave_1 entered promiscuous mode [ 50.906466][ T4180] chnl_net:caif_netlink_parms(): no params data found [ 50.916002][ T4181] team0: Port device team_slave_1 added [ 50.962336][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.969542][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.977349][ T4182] device bridge_slave_0 entered promiscuous mode [ 50.997620][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.012899][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.020321][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.028120][ T4182] device bridge_slave_1 entered promiscuous mode [ 51.046618][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.056472][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.063621][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.089629][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.125190][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.132156][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.158418][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.180073][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.189336][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.196673][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.204380][ T4192] device bridge_slave_0 entered promiscuous mode [ 51.227244][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.236690][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.243997][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.251826][ T4192] device bridge_slave_1 entered promiscuous mode [ 51.267271][ T4191] team0: Port device team_slave_0 added [ 51.305168][ T4191] team0: Port device team_slave_1 added [ 51.319807][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.327163][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.335534][ T4180] device bridge_slave_0 entered promiscuous mode [ 51.344527][ T4182] team0: Port device team_slave_0 added [ 51.350458][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.357922][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.366214][ T4180] device bridge_slave_1 entered promiscuous mode [ 51.381810][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.400326][ T4182] team0: Port device team_slave_1 added [ 51.421367][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.451571][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.458796][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.484891][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.504937][ T4181] device hsr_slave_0 entered promiscuous mode [ 51.511571][ T4181] device hsr_slave_1 entered promiscuous mode [ 51.525811][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.535360][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.542308][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.569751][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.581740][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.589965][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.615975][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.638752][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.648369][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.655426][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.681645][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.709594][ T4192] team0: Port device team_slave_0 added [ 51.731618][ T4180] team0: Port device team_slave_0 added [ 51.758847][ T4192] team0: Port device team_slave_1 added [ 51.774154][ T4180] team0: Port device team_slave_1 added [ 51.788402][ T4191] device hsr_slave_0 entered promiscuous mode [ 51.795340][ T4191] device hsr_slave_1 entered promiscuous mode [ 51.801768][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.809677][ T4191] Cannot create hsr debugfs directory [ 51.854215][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.861176][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.887187][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.901711][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.908870][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.935027][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.946941][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.954671][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.980593][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.001988][ T4182] device hsr_slave_0 entered promiscuous mode [ 52.009071][ T4182] device hsr_slave_1 entered promiscuous mode [ 52.015744][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.023333][ T4182] Cannot create hsr debugfs directory [ 52.036465][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.043574][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.069535][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.145383][ T4192] device hsr_slave_0 entered promiscuous mode [ 52.152283][ T4192] device hsr_slave_1 entered promiscuous mode [ 52.159164][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.167130][ T4192] Cannot create hsr debugfs directory [ 52.227289][ T4180] device hsr_slave_0 entered promiscuous mode [ 52.234075][ T4180] device hsr_slave_1 entered promiscuous mode [ 52.240737][ T4180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.248742][ T4180] Cannot create hsr debugfs directory [ 52.264373][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 52.273467][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 52.276816][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 52.286360][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 52.287976][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 52.452452][ T4181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.470449][ T4181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.485110][ T4181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.494678][ T4181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.535089][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.543917][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.560749][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.570682][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.608844][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.631576][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.641990][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.662913][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.710662][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.719703][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.747105][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.760375][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.804172][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.830886][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.870925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.880616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.889770][ T4180] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.900430][ T4180] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.914210][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.921006][ T4180] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.932774][ T4180] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.950182][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.963174][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.972501][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.981203][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.990483][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.999957][ T487] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.007263][ T487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.016080][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.049431][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.059478][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.068878][ T487] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.076061][ T487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.086262][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.108879][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.118462][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.130306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.140707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.149948][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.157040][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.166407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.177466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.187032][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.194126][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.201992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.223207][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.231478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.240203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.249468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.260454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.270340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.279434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.311492][ T4181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.322619][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.339949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.349388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.358058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.367746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.376885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.386110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.395413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.404124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.412399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.421749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.430549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.439205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.447274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.455631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.471170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.481381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.490168][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.497272][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.507435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.516079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.524783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.533741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.542042][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.549115][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.556669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.565392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.576001][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.592726][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.604836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.612937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.635354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.648460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.659995][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.667121][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.681485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.691142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.699745][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.706818][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.722965][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.735551][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.751069][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.761712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.779561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.789180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.799276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.808905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.819144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.828223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.837268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.845154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.854365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.862689][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.869764][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.878433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.886350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.909812][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.919479][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.935503][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.950621][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.961319][ T4262] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.968420][ T4262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.976941][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.989461][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.998211][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.021333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.038041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.049488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.065870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.074946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.083607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.091926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.100956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.109842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.132228][ T4180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.143252][ T4180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.166616][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.178332][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.187066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.196930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.206105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.215598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.229958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.238506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.247294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.256091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.265347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.273817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.282332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.291842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.300323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.308592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.316299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.339560][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.347363][ T4242] Bluetooth: hci3: command 0x041b tx timeout [ 54.354031][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 54.360263][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 54.367281][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.378562][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 54.393598][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 54.398925][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.418552][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.433575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.441082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.458607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.471023][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.513686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.529891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.545978][ T4191] device veth0_vlan entered promiscuous mode [ 54.552771][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.562297][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.582281][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.609697][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.620560][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.634816][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.642304][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.651383][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.660418][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.676672][ T4191] device veth1_vlan entered promiscuous mode [ 54.692581][ T4181] device veth0_vlan entered promiscuous mode [ 54.704171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.713152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.721915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.767432][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.791931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.801094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.815399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.826180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.835276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.844826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.852325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.860133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.867904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.881878][ T4180] device veth0_vlan entered promiscuous mode [ 54.892172][ T4181] device veth1_vlan entered promiscuous mode [ 54.904956][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.913886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.922392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.933808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.942542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.956577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.968822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.981712][ T4191] device veth0_macvtap entered promiscuous mode [ 55.017161][ T4180] device veth1_vlan entered promiscuous mode [ 55.040759][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.055010][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.066205][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.075402][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.097148][ T4191] device veth1_macvtap entered promiscuous mode [ 55.109536][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.117920][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.127866][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.138203][ T4181] device veth0_macvtap entered promiscuous mode [ 55.162666][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.174838][ T4181] device veth1_macvtap entered promiscuous mode [ 55.195635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.205826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.214428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.222312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.231350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.240475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.249086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.257813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.267169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.276690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.286808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.297574][ T4192] device veth0_vlan entered promiscuous mode [ 55.316348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.326442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.336938][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.346309][ T4180] device veth0_macvtap entered promiscuous mode [ 55.356826][ T4180] device veth1_macvtap entered promiscuous mode [ 55.365095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.373590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.381555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.390597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.406084][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.416679][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.425682][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.437038][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.449712][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.460529][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.471970][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.492696][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.504358][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.515211][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.525892][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.538041][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.551061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.560266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.569167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.578388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.588237][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.599004][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.609901][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.625874][ T4192] device veth1_vlan entered promiscuous mode [ 55.632838][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.645588][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.656165][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.667376][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.678413][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.691722][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.700140][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.710123][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.719362][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.728863][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.738781][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.747056][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.758571][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.766384][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.777037][ T4181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.786193][ T4181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.796163][ T4181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.805326][ T4181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.825298][ T4182] device veth0_vlan entered promiscuous mode [ 55.839980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.854240][ T4180] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.865119][ T4180] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.874570][ T4180] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.883331][ T4180] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.920906][ T4182] device veth1_vlan entered promiscuous mode [ 55.946743][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.955567][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.965212][ T4192] device veth0_macvtap entered promiscuous mode [ 56.038581][ T4192] device veth1_macvtap entered promiscuous mode [ 56.060945][ T487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.069468][ T487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.080087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.088769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.097187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.105921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.114777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.124849][ T4182] device veth0_macvtap entered promiscuous mode [ 56.151528][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.162656][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.173755][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.185172][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.195410][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.206145][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.217520][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.227605][ T4182] device veth1_macvtap entered promiscuous mode [ 56.254213][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.262463][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.271168][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.280381][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.291695][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.302511][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.312575][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.323266][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.334270][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.345157][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.357034][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.373159][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.383821][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.394910][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.405608][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.415695][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.426974][ T4258] Bluetooth: hci4: command 0x040f tx timeout [ 56.432987][ T4258] Bluetooth: hci0: command 0x040f tx timeout [ 56.433118][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.439548][ T4258] Bluetooth: hci2: command 0x040f tx timeout [ 56.455329][ T4258] Bluetooth: hci1: command 0x040f tx timeout [ 56.455715][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.461383][ T4258] Bluetooth: hci3: command 0x040f tx timeout [ 56.477391][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.489182][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.514341][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.522997][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.532165][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.541123][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.559310][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.569547][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.578792][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.588279][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.609213][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.620006][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.621015][ T4262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.637240][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.637360][ T4262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.649292][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.662865][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.674266][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.684125][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.695968][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.705936][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.716374][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.727188][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.744416][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.753995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.761792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.766296][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.774018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.786382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.796495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.819385][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.836284][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.845054][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.854315][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.887609][ T4262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.897057][ T4262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.910254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.929166][ T4262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.966998][ T4262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.026525][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.099595][ T4262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.120247][ T4262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.122889][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.180481][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.184930][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.192983][ T4295] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 57.205299][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.239634][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.283727][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.291675][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.331297][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.359287][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.392033][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.426085][ T1324] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 57.698822][ T4322] Zero length message leads to an empty skb [ 57.706582][ T4322] process 'syz.4.8' launched './file0' with NULL argv: empty string added [ 57.754806][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 57.809103][ T4322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8'. [ 57.863873][ T1324] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 57.882897][ T1324] usb 4-1: config 0 interface 0 has no altsetting 0 [ 58.025110][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 58.073665][ T1324] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 58.084913][ T1324] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 58.097993][ T1324] usb 4-1: Product: syz [ 58.098029][ T1324] usb 4-1: Manufacturer: syz [ 58.098156][ T1324] usb 4-1: SerialNumber: syz [ 58.118534][ T1324] usb 4-1: config 0 descriptor?? [ 58.154388][ T23] usb 3-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 58.169508][ T1324] usb 4-1: selecting invalid altsetting 0 [ 58.176627][ T23] usb 3-1: config 6 interface 0 altsetting 0 has an invalid endpoint with address 0xEC, skipping [ 58.370162][ T4292] usb 4-1: selecting invalid altsetting 0 [ 58.382023][ T23] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 58.391650][ T4292] usb 4-1: 0:0: usb_set_interface failed (-22) [ 58.406986][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.423848][ T23] usb 3-1: Product: syz [ 58.428050][ T23] usb 3-1: Manufacturer: syz [ 58.432647][ T23] usb 3-1: SerialNumber: syz [ 58.459639][ T4292] usb 4-1: selecting invalid altsetting 0 [ 58.475945][ T4292] usb 4-1: 0:0: usb_set_interface failed (-22) [ 58.499704][ T1324] usb 4-1: USB disconnect, device number 2 [ 58.504134][ T4237] Bluetooth: hci4: command 0x0419 tx timeout [ 58.512992][ T23] hso 3-1:6.0: Can't find BULK IN endpoint [ 58.526913][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 58.557163][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 58.586924][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 58.598781][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 58.737281][ T4293] usb 3-1: USB disconnect, device number 2 [ 59.115033][ T4362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19'. [ 59.137302][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.293427][ T4183] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 59.483900][ T4237] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 59.578752][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.597379][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 59.723491][ T4183] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 59.733412][ T23] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 59.733762][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 59.742546][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 59.742568][ T23] usb 5-1: SerialNumber: syz [ 59.753343][ T4183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.798957][ T4183] usb 2-1: config 0 descriptor?? [ 59.857529][ T4237] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.864563][ T4183] cp210x 2-1:0.0: cp210x converter detected [ 59.870613][ T4237] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 59.963495][ T4237] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 59.972658][ T4237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 59.980942][ T4237] usb 4-1: SerialNumber: syz [ 60.055918][ T23] usb 5-1: 0:2 : does not exist [ 60.068430][ T23] usb 5-1: USB disconnect, device number 2 [ 60.143541][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.153501][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 60.163369][ T1324] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 60.166450][ T7] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 60.182915][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.200523][ T7] usb 1-1: config 0 descriptor?? [ 60.266869][ T4237] usb 4-1: 0:2 : does not exist [ 60.271846][ T4237] usb 4-1: unit 255 not found! [ 60.303650][ T4183] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 60.313806][ T4341] udevd[4341]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 60.382907][ T4183] usb 2-1: cp210x converter now attached to ttyUSB0 [ 60.443893][ T1324] usb 3-1: Using ep0 maxpacket: 16 [ 60.473675][ T4237] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 60.496731][ T4237] usb 4-1: USB disconnect, device number 3 [ 60.583586][ T1324] usb 3-1: unable to get BOS descriptor or descriptor too short [ 60.595956][ T1324] usb 3-1: no configurations [ 60.600650][ T1324] usb 3-1: can't read configurations, error -22 [ 60.611972][ T4183] usb 2-1: USB disconnect, device number 2 [ 60.632843][ T4183] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 60.659159][ T4183] cp210x 2-1:0.0: device disconnected [ 60.692861][ T7] kovaplus 0003:1E7D:2D50.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 60.769317][ T4341] udevd[4341]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 60.962054][ T4378] netlink: 104 bytes leftover after parsing attributes in process `syz.4.26'. [ 61.053382][ T4237] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 61.067698][ T4380] kvm: vcpu 0: requested 4 ns lapic timer period limited to 200000 ns [ 61.076963][ T4380] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 61.325422][ T7] kovaplus 0003:1E7D:2D50.0001: couldn't init struct kovaplus_device [ 61.341857][ T7] kovaplus 0003:1E7D:2D50.0001: couldn't install mouse [ 61.361059][ T4394] binder: BINDER_SET_CONTEXT_MGR already set [ 61.372219][ T7] kovaplus: probe of 0003:1E7D:2D50.0001 failed with error -71 [ 61.385928][ T4394] binder: 4393:4394 ioctl 4018620d 200000000040 returned -16 [ 61.399672][ T7] usb 1-1: USB disconnect, device number 2 [ 61.415643][ T4237] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.468086][ T4237] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 61.484224][ T4237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.506369][ T4237] usb 4-1: config 0 descriptor?? [ 61.547356][ T4237] pwc: Askey VC010 type 2 USB webcam detected. [ 61.551523][ T4395] fido_id[4395]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 61.663593][ T4171] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 61.723438][ T1324] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 61.763418][ T4237] pwc: send_video_command error -71 [ 61.768711][ T4237] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 61.776554][ T4237] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 61.792569][ T4237] usb 4-1: USB disconnect, device number 4 [ 62.020266][ T1324] usb 3-1: Using ep0 maxpacket: 16 [ 62.024601][ T4171] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 62.040392][ T4171] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 62.054763][ T4171] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 62.090032][ T4171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.143723][ T4392] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 62.191788][ T1324] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 62.204232][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.236050][ T1324] usb 3-1: config 0 descriptor?? [ 62.287608][ T1324] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 62.348198][ T4237] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 62.471255][ T4423] netlink: 'syz.1.45': attribute type 10 has an invalid length. [ 62.489111][ T4293] usb 5-1: USB disconnect, device number 3 [ 62.582177][ T4423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.618641][ T4423] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 62.634007][ T4425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.641991][ T4425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.672395][ T4425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.689911][ T4425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.713684][ T4237] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.740406][ T4237] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 62.755524][ T4425] bond0: (slave batadv0): Releasing backup interface [ 62.780631][ T4237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.813720][ T4237] usb 4-1: config 0 descriptor?? [ 62.855774][ T4237] pwc: Askey VC010 type 2 USB webcam detected. [ 62.898136][ T4423] syz.1.45 (4423) used greatest stack depth: 20672 bytes left [ 63.153470][ T4293] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 63.283460][ T4237] pwc: recv_control_msg error -32 req 02 val 2b00 [ 63.333439][ T4237] pwc: recv_control_msg error -32 req 02 val 2700 [ 63.373414][ T4237] pwc: recv_control_msg error -32 req 02 val 2c00 [ 63.413454][ T4237] pwc: recv_control_msg error -32 req 04 val 1000 [ 63.453422][ T4237] pwc: recv_control_msg error -32 req 04 val 1300 [ 63.493519][ T4237] pwc: recv_control_msg error -32 req 04 val 1400 [ 63.523442][ T4293] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 63.531640][ T4293] usb 1-1: config 0 has no interface number 0 [ 63.543826][ T4237] pwc: recv_control_msg error -32 req 02 val 2000 [ 63.593613][ T4237] pwc: recv_control_msg error -32 req 02 val 2100 [ 63.694841][ T4293] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 63.709324][ T4293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.717719][ T4293] usb 1-1: Product: syz [ 63.721899][ T4293] usb 1-1: Manufacturer: syz [ 63.731145][ T4293] usb 1-1: SerialNumber: syz [ 63.738083][ T4293] usb 1-1: config 0 descriptor?? [ 63.863679][ T4237] pwc: recv_control_msg error -71 req 02 val 2500 [ 63.883487][ T4237] pwc: recv_control_msg error -71 req 02 val 2400 [ 63.903484][ T4237] pwc: recv_control_msg error -71 req 02 val 2600 [ 63.923475][ T4237] pwc: recv_control_msg error -71 req 02 val 2900 [ 63.943489][ T4237] pwc: recv_control_msg error -71 req 02 val 2800 [ 63.963565][ T4237] pwc: recv_control_msg error -71 req 04 val 1100 [ 63.983535][ T4237] pwc: recv_control_msg error -71 req 04 val 1200 [ 63.992253][ T4237] pwc: Registered as video103. [ 63.998240][ T4237] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 64.019194][ T4237] usb 4-1: USB disconnect, device number 5 [ 64.223556][ T4293] usb 1-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 64.231697][ T4293] usb 1-1: Firmware version (0.0) predates our first public release. [ 64.240686][ T4293] usb 1-1: Please update to version 0.2 or newer [ 64.283535][ T4293] usb 1-1: Firmware: build Ø`^ [ 64.288424][ T4293] usb 1-1: atusb_probe: initialization failed, error = -32 [ 64.296161][ T4293] atusb: probe of 1-1:0.128 failed with error -32 [ 64.391679][ T4442] binder: 4440:4442 ioctl c0306201 200000000080 returned -14 [ 64.406812][ T4442] binder: 4440:4442 unknown command 0 [ 64.416947][ T4442] binder: 4440:4442 ioctl c0306201 200000000180 returned -22 [ 64.419881][ T4237] libceph: connect (1)[c::]:6789 error -101 [ 64.432171][ T4237] libceph: mon0 (1)[c::]:6789 connect error [ 64.453141][ T4237] libceph: connect (1)[c::]:6789 error -101 [ 64.459528][ T4237] libceph: mon0 (1)[c::]:6789 connect error [ 64.604840][ T4456] kvm: pic: non byte read [ 64.702565][ T4459] tipc: Started in network mode [ 64.708290][ T4459] tipc: Node identity 9aeb02d48005, cluster identity 4711 [ 64.721217][ T4459] tipc: Enabled bearer , priority 0 [ 64.734799][ T4171] libceph: connect (1)[c::]:6789 error -101 [ 64.740996][ T4171] libceph: mon0 (1)[c::]:6789 connect error [ 64.769998][ T4459] device syzkaller0 entered promiscuous mode [ 64.787600][ T4458] tipc: Resetting bearer [ 64.858284][ T4458] tipc: Disabling bearer [ 65.217067][ T4439] ceph: No mds server is up or the cluster is laggy [ 65.248974][ T4237] libceph: connect (1)[c::]:6789 error -101 [ 65.259133][ T4237] libceph: mon0 (1)[c::]:6789 connect error [ 65.279283][ T4445] ceph: No mds server is up or the cluster is laggy [ 65.288396][ T4171] libceph: connect (1)[c::]:6789 error -101 [ 65.294724][ T4171] libceph: mon0 (1)[c::]:6789 connect error [ 65.423157][ T4476] binder: 4475:4476 ioctl c0306201 200000000080 returned -14 [ 65.434443][ T4476] binder: 4475:4476 unknown command 0 [ 65.439895][ T4476] binder: 4475:4476 ioctl c0306201 200000000180 returned -22 [ 65.459662][ T4477] syz.1.61 uses obsolete (PF_INET,SOCK_PACKET) [ 65.483548][ T1324] gspca_sonixj: reg_w1 err -71 [ 65.489708][ T1324] sonixj: probe of 3-1:0.0 failed with error -71 [ 65.515856][ T1324] usb 3-1: USB disconnect, device number 4 [ 65.573405][ T4183] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 65.581955][ T4479] kvm [4478]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 65.596054][ T4479] kvm [4478]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 65.611371][ T4479] APIC base relocation is unsupported by KVM [ 65.760345][ T154] nci: nci_ntf_packet: unknown ntf opcode 0x903 [ 65.833366][ T4183] usb 4-1: Using ep0 maxpacket: 16 [ 65.884630][ T1324] usb 1-1: USB disconnect, device number 3 [ 65.933383][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 65.963602][ T4183] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.974330][ T4183] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.133561][ T4183] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 66.142951][ T4183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.151944][ T4183] usb 4-1: Product: syz [ 66.156161][ T4183] usb 4-1: Manufacturer: syz [ 66.160752][ T4183] usb 4-1: SerialNumber: syz [ 66.173381][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 66.293517][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.304545][ T1324] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 66.312062][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.321813][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 66.334713][ T23] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 66.344020][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.353911][ T23] usb 5-1: config 0 descriptor?? [ 66.363578][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 66.473514][ T4183] usb 4-1: 0:2 : does not exist [ 66.483427][ T4183] usb 4-1: USB disconnect, device number 6 [ 66.553456][ T1324] usb 1-1: Using ep0 maxpacket: 8 [ 66.616245][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 66.694443][ T4341] udevd[4341]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 66.746505][ T7] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 66.755820][ T7] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 66.766983][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 66.777010][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 66.787450][ T7] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.800573][ T7] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 66.809641][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.835297][ T23] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 66.842927][ T1324] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 66.852027][ T1324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.860863][ T23] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 66.868933][ T1324] usb 1-1: Product: syz [ 66.873098][ T1324] usb 1-1: Manufacturer: syz [ 66.877876][ T23] microsoft 0003:045E:07DA.0002: usage index exceeded [ 66.884706][ T23] microsoft 0003:045E:07DA.0002: item 0 2 2 2 parsing failed [ 66.892455][ T23] microsoft 0003:045E:07DA.0002: parse failed [ 66.898603][ T1324] usb 1-1: SerialNumber: syz [ 66.904970][ T1324] usb 1-1: config 0 descriptor?? [ 66.910077][ T23] microsoft: probe of 0003:045E:07DA.0002 failed with error -22 [ 66.946180][ T1324] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 66.973546][ T4171] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 67.038408][ T23] usb 5-1: USB disconnect, device number 4 [ 67.083570][ T7] usb 3-1: usb_control_msg returned -32 [ 67.089578][ T7] usbtmc 3-1:16.0: can't read capabilities [ 67.373389][ T1324] gspca_sonixj: reg_r err -32 [ 67.378885][ T1324] sonixj: probe of 1-1:0.0 failed with error -32 [ 67.395118][ T4171] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 67.405087][ T4171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.419092][ T4171] usb 2-1: config 0 descriptor?? [ 67.473676][ T4507] usbtmc 3-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 67.483102][ T4171] cp210x 2-1:0.0: cp210x converter detected [ 67.520114][ T4509] binder: 4508:4509 ioctl c0306201 200000000080 returned -14 [ 67.530675][ T4509] binder: 4508:4509 unknown command 0 [ 67.536198][ T4509] binder: 4508:4509 ioctl c0306201 200000000180 returned -22 [ 67.678189][ T7] usb 3-1: USB disconnect, device number 5 [ 67.863570][ T4237] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 67.903505][ T4171] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 67.946260][ T4171] usb 2-1: cp210x converter now attached to ttyUSB0 [ 68.147272][ T23] usb 2-1: USB disconnect, device number 3 [ 68.155332][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 68.165080][ T23] cp210x 2-1:0.0: device disconnected [ 68.223504][ T4237] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 68.232095][ T4237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.313763][ T4237] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 68.322838][ T4237] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 68.339748][ T4237] usb 4-1: Manufacturer: syz [ 68.360229][ T4237] usb 4-1: config 0 descriptor?? [ 68.465208][ T4527] udc-core: couldn't find an available UDC or it's busy [ 68.500142][ T4527] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 68.511402][ T4195] Bluetooth: hci2: Unknown advertising packet type: 0x6e73 [ 68.511606][ T4195] ================================================================== [ 68.527128][ T4195] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12c0/0x3b80 [ 68.534941][ T4195] Read of size 1 at addr ffff888060b7d40a by task kworker/u5:6/4195 [ 68.542906][ T4195] [ 68.545227][ T4195] CPU: 0 PID: 4195 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 68.552749][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.562786][ T4195] Workqueue: hci2 hci_rx_work [ 68.567478][ T4195] Call Trace: [ 68.570744][ T4195] [ 68.573658][ T4195] dump_stack_lvl+0x168/0x230 [ 68.578415][ T4195] ? show_regs_print_info+0x20/0x20 [ 68.583600][ T4195] ? load_image+0x3b0/0x3b0 [ 68.588084][ T4195] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 68.593448][ T4195] print_address_description+0x60/0x2d0 [ 68.598979][ T4195] ? hci_le_meta_evt+0x12c0/0x3b80 [ 68.604072][ T4195] kasan_report+0xdf/0x130 [ 68.608474][ T4195] ? hci_le_meta_evt+0x12c0/0x3b80 [ 68.613572][ T4195] hci_le_meta_evt+0x12c0/0x3b80 [ 68.618495][ T4195] ? hci_event_packet+0x2b0/0x12f0 [ 68.623604][ T4195] ? hci_remote_host_features_evt+0x280/0x280 [ 68.629663][ T4195] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 68.635285][ T4195] ? mark_lock+0x94/0x320 [ 68.639598][ T4195] ? mutex_unlock+0x10/0x10 [ 68.644084][ T4195] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 68.650050][ T4195] ? lock_chain_count+0x20/0x20 [ 68.654890][ T4195] ? __rwlock_init+0x140/0x140 [ 68.659641][ T4195] hci_event_packet+0xe05/0x12f0 [ 68.664563][ T4195] ? lockdep_hardirqs_on+0x94/0x140 [ 68.669754][ T4195] ? rcu_lock_release+0x20/0x20 [ 68.674593][ T4195] ? hci_send_to_monitor+0x9c/0x4a0 [ 68.679780][ T4195] hci_rx_work+0x255/0xa10 [ 68.684310][ T4195] process_one_work+0x863/0x1000 [ 68.689266][ T4195] ? worker_detach_from_pool+0x240/0x240 [ 68.694895][ T4195] ? lockdep_hardirqs_off+0x70/0x100 [ 68.700179][ T4195] ? _raw_spin_lock_irq+0xab/0xe0 [ 68.705194][ T4195] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 68.710550][ T4195] ? wq_worker_running+0x97/0x170 [ 68.715560][ T4195] worker_thread+0xaa8/0x12a0 [ 68.720221][ T4195] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 68.726102][ T4195] ? lockdep_hardirqs_on+0x94/0x140 [ 68.731294][ T4195] ? lockdep_hardirqs_on+0x94/0x140 [ 68.736478][ T4195] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 68.742366][ T4195] kthread+0x436/0x520 [ 68.746421][ T4195] ? rcu_lock_release+0x20/0x20 [ 68.751264][ T4195] ? kthread_blkcg+0xd0/0xd0 [ 68.755840][ T4195] ret_from_fork+0x1f/0x30 [ 68.760255][ T4195] [ 68.763263][ T4195] [ 68.765571][ T4195] Allocated by task 4527: [ 68.769880][ T4195] __kasan_kmalloc+0xb5/0xf0 [ 68.774451][ T4195] __alloc_skb+0x22c/0x750 [ 68.778854][ T4195] vhci_write+0xbc/0x450 [ 68.783079][ T4195] vfs_write+0x712/0xd00 [ 68.787319][ T4195] ksys_write+0x14d/0x250 [ 68.791633][ T4195] do_syscall_64+0x4c/0xa0 [ 68.796040][ T4195] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.801919][ T4195] [ 68.804225][ T4195] The buggy address belongs to the object at ffff888060b7d000 [ 68.804225][ T4195] which belongs to the cache kmalloc-1k of size 1024 [ 68.818269][ T4195] The buggy address is located 10 bytes to the right of [ 68.818269][ T4195] 1024-byte region [ffff888060b7d000, ffff888060b7d400) [ 68.832053][ T4195] The buggy address belongs to the page: [ 68.837672][ T4195] page:ffffea000182de00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60b78 [ 68.847805][ T4195] head:ffffea000182de00 order:3 compound_mapcount:0 compound_pincount:0 [ 68.856110][ T4195] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 68.864088][ T4195] raw: 00fff00000010200 ffffea0005335c00 0000000600000006 ffff888016841dc0 [ 68.872663][ T4195] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 68.881235][ T4195] page dumped because: kasan: bad access detected [ 68.887645][ T4195] page_owner tracks the page as allocated [ 68.893342][ T4195] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4181, ts 52779440320, free_ts 11684344355 [ 68.911816][ T4195] get_page_from_freelist+0x1b77/0x1c60 [ 68.917356][ T4195] __alloc_pages+0x1e1/0x470 [ 68.921939][ T4195] new_slab+0xc0/0x4b0 [ 68.926004][ T4195] ___slab_alloc+0x81e/0xdf0 [ 68.930576][ T4195] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 68.936363][ T4195] __alloc_skb+0x22c/0x750 [ 68.940764][ T4195] inet6_rt_notify+0xdd/0x290 [ 68.945423][ T4195] fib6_add+0x1d3b/0x3d30 [ 68.949736][ T4195] ip6_route_add+0x86/0x130 [ 68.954222][ T4195] addrconf_add_dev+0x250/0x350 [ 68.959060][ T4195] addrconf_init_auto_addrs+0x5f8/0xa80 [ 68.964588][ T4195] addrconf_notify+0xa6b/0xf00 [ 68.969334][ T4195] raw_notifier_call_chain+0xcb/0x160 [ 68.974687][ T4195] __dev_notify_flags+0x178/0x2d0 [ 68.979695][ T4195] dev_change_flags+0xe3/0x1a0 [ 68.984443][ T4195] do_setlink+0xc01/0x3980 [ 68.988841][ T4195] page last free stack trace: [ 68.993493][ T4195] free_unref_page_prepare+0x637/0x6c0 [ 68.999023][ T4195] free_unref_page+0x94/0x280 [ 69.003681][ T4195] free_contig_range+0x96/0xf0 [ 69.008428][ T4195] destroy_args+0x100/0xa20 [ 69.013087][ T4195] debug_vm_pgtable+0x318/0x370 [ 69.018004][ T4195] do_one_initcall+0x1ee/0x680 [ 69.022760][ T4195] do_initcall_level+0x137/0x1f0 [ 69.027681][ T4195] do_initcalls+0x4b/0x90 [ 69.032003][ T4195] kernel_init_freeable+0x3ce/0x560 [ 69.037274][ T4195] kernel_init+0x19/0x1b0 [ 69.041585][ T4195] ret_from_fork+0x1f/0x30 [ 69.045990][ T4195] [ 69.048292][ T4195] Memory state around the buggy address: [ 69.053898][ T4195] ffff888060b7d300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.061943][ T4195] ffff888060b7d380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.069990][ T4195] >ffff888060b7d400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 69.078031][ T4195] ^ [ 69.082338][ T4195] ffff888060b7d480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 69.090378][ T4195] ffff888060b7d500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 69.098416][ T4195] ================================================================== [ 69.106452][ T4195] Disabling lock debugging due to kernel taint [ 69.116570][ T4237] rc_core: IR keymap rc-hauppauge not found [ 69.122487][ T4237] Registered IR keymap rc-empty [ 69.127718][ T4195] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 69.134923][ T4195] CPU: 0 PID: 4195 Comm: kworker/u5:6 Tainted: G B syzkaller #0 [ 69.143890][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.153936][ T4195] Workqueue: hci2 hci_rx_work [ 69.158610][ T4195] Call Trace: [ 69.161870][ T4195] [ 69.164790][ T4195] dump_stack_lvl+0x168/0x230 [ 69.169452][ T4195] ? show_regs_print_info+0x20/0x20 [ 69.174630][ T4195] ? load_image+0x3b0/0x3b0 [ 69.179116][ T4195] panic+0x2c9/0x7f0 [ 69.182990][ T4195] ? bpf_jit_dump+0xd0/0xd0 [ 69.187475][ T4195] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 69.193351][ T4195] ? _raw_spin_unlock+0x40/0x40 [ 69.198181][ T4195] ? hci_le_meta_evt+0x12c0/0x3b80 [ 69.203272][ T4195] check_panic_on_warn+0x80/0xa0 [ 69.208195][ T4195] ? hci_le_meta_evt+0x12c0/0x3b80 [ 69.213285][ T4195] end_report+0x6d/0xf0 [ 69.217423][ T4195] kasan_report+0x102/0x130 [ 69.221907][ T4195] ? hci_le_meta_evt+0x12c0/0x3b80 [ 69.226999][ T4195] hci_le_meta_evt+0x12c0/0x3b80 [ 69.231922][ T4195] ? hci_event_packet+0x2b0/0x12f0 [ 69.237018][ T4195] ? hci_remote_host_features_evt+0x280/0x280 [ 69.243075][ T4195] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 69.248689][ T4195] ? mark_lock+0x94/0x320 [ 69.253002][ T4195] ? mutex_unlock+0x10/0x10 [ 69.257494][ T4195] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 69.263542][ T4195] ? lock_chain_count+0x20/0x20 [ 69.268374][ T4195] ? __rwlock_init+0x140/0x140 [ 69.273119][ T4195] hci_event_packet+0xe05/0x12f0 [ 69.278038][ T4195] ? lockdep_hardirqs_on+0x94/0x140 [ 69.283223][ T4195] ? rcu_lock_release+0x20/0x20 [ 69.288055][ T4195] ? hci_send_to_monitor+0x9c/0x4a0 [ 69.293234][ T4195] hci_rx_work+0x255/0xa10 [ 69.297641][ T4195] process_one_work+0x863/0x1000 [ 69.302571][ T4195] ? worker_detach_from_pool+0x240/0x240 [ 69.308184][ T4195] ? lockdep_hardirqs_off+0x70/0x100 [ 69.313452][ T4195] ? _raw_spin_lock_irq+0xab/0xe0 [ 69.318456][ T4195] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 69.323813][ T4195] ? wq_worker_running+0x97/0x170 [ 69.328820][ T4195] worker_thread+0xaa8/0x12a0 [ 69.333485][ T4195] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 69.339359][ T4195] ? lockdep_hardirqs_on+0x94/0x140 [ 69.344542][ T4195] ? lockdep_hardirqs_on+0x94/0x140 [ 69.349723][ T4195] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 69.355599][ T4195] kthread+0x436/0x520 [ 69.359648][ T4195] ? rcu_lock_release+0x20/0x20 [ 69.364478][ T4195] ? kthread_blkcg+0xd0/0xd0 [ 69.369069][ T4195] ret_from_fork+0x1f/0x30 [ 69.373470][ T4195] [ 69.376793][ T4195] Kernel Offset: disabled [ 69.381118][ T4195] Rebooting in 86400 seconds..