last executing test programs: 823.8599ms ago: executing program 0 (id=1): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='/dev/ram0,65536\n\x00', 0x11) close(r0) r1 = syz_open_dev$mtd(&(0x7f0000000180), 0x1, 0x2) ioctl$MEMERASE(r1, 0x40084d02, &(0x7f0000000200)={0x0, 0x400000}) close(r1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl(r2, 0x40186f40, &(0x7f0000000280)="000000000100"/24) 792.624851ms ago: executing program 1 (id=2): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040090463000001000000010902270001010080320904000003ff000000070581034000010705820200020007050302000200"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 556.949857ms ago: executing program 0 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/ignore-gfp-wait\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='N\x00', 0x1) close(r0) write(0xffffffffffffffff, &(0x7f00000001c0)='Y\x00', 0x1) r1 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='1\x00', 0x1) syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) 443.550959ms ago: executing program 0 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/ignore-gfp-wait\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='N\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='Y\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='10000\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/verbose\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='0\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='5\x00', 0x1) close(r4) r5 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='1\x00', 0x1) close(r5) r6 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) 342.540142ms ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/ignore-gfp-wait\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='N\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='Y\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='10000\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/verbose\x00', 0x2, 0x0) close(r3) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='1\x00', 0x1) r5 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) 31.424549ms ago: executing program 3 (id=4): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="d000000008021100000008021100000108021100000000000f0372060303030303037506010001000200"], 0x2a) 0s ago: executing program 4 (id=5): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="b702000001000000b703000000000000b7040000000000008500000032000000b7000000010000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r2, &(0x7f0000000640)='\x00\x00\x00\x00', &(0x7f0000000680)=@tcp=r0}, 0x20) sendto(r1, &(0x7f0000000800)="01020304", 0x4, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 31.947169][ T3852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.961133][ T3852] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. syzkaller login: [ 51.490531][ T4174] cgroup: Unknown subsys name 'net' [ 51.635037][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.822581][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.144895][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 54.167920][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 54.218061][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 54.262705][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 54.317600][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.325891][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.333933][ T4187] device bridge_slave_0 entered promiscuous mode [ 54.356054][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.364936][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.373281][ T4187] device bridge_slave_1 entered promiscuous mode [ 54.380603][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.387650][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.395324][ T4192] device bridge_slave_0 entered promiscuous mode [ 54.405892][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.413285][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.420858][ T4192] device bridge_slave_1 entered promiscuous mode [ 54.454574][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 54.488302][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.495565][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.503635][ T4191] device bridge_slave_0 entered promiscuous mode [ 54.511192][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.518255][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.526074][ T4194] device bridge_slave_0 entered promiscuous mode [ 54.535415][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.546237][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.556586][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.569052][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.576580][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.584365][ T4191] device bridge_slave_1 entered promiscuous mode [ 54.591995][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.599048][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.606791][ T4194] device bridge_slave_1 entered promiscuous mode [ 54.615437][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.672634][ T4192] team0: Port device team_slave_0 added [ 54.683227][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.699081][ T4187] team0: Port device team_slave_0 added [ 54.706572][ T4192] team0: Port device team_slave_1 added [ 54.716212][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.727841][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.738369][ T4187] team0: Port device team_slave_1 added [ 54.764099][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.795228][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.802929][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.810902][ T4197] device bridge_slave_0 entered promiscuous mode [ 54.836307][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.843378][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.869499][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.884160][ T4191] team0: Port device team_slave_0 added [ 54.890633][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.897685][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.906121][ T4197] device bridge_slave_1 entered promiscuous mode [ 54.915807][ T4194] team0: Port device team_slave_0 added [ 54.922548][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.929497][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.955584][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.966906][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.974141][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.000250][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.013122][ T4191] team0: Port device team_slave_1 added [ 55.030725][ T4194] team0: Port device team_slave_1 added [ 55.037197][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.044565][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.070548][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.128980][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.142810][ T4192] device hsr_slave_0 entered promiscuous mode [ 55.149387][ T4192] device hsr_slave_1 entered promiscuous mode [ 55.156849][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.164485][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.190575][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.202220][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.209160][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.235642][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.252061][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.259004][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.285181][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.298100][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.326345][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.333533][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.359441][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.396965][ T4187] device hsr_slave_0 entered promiscuous mode [ 55.404006][ T4187] device hsr_slave_1 entered promiscuous mode [ 55.411368][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.419113][ T4187] Cannot create hsr debugfs directory [ 55.452550][ T4197] team0: Port device team_slave_0 added [ 55.462205][ T4191] device hsr_slave_0 entered promiscuous mode [ 55.468921][ T4191] device hsr_slave_1 entered promiscuous mode [ 55.475633][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.483612][ T4191] Cannot create hsr debugfs directory [ 55.507134][ T4197] team0: Port device team_slave_1 added [ 55.562490][ T4194] device hsr_slave_0 entered promiscuous mode [ 55.569082][ T4194] device hsr_slave_1 entered promiscuous mode [ 55.578516][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.586117][ T4194] Cannot create hsr debugfs directory [ 55.598009][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.605031][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.631937][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.671381][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.678333][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.704340][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.761644][ T4197] device hsr_slave_0 entered promiscuous mode [ 55.768253][ T4197] device hsr_slave_1 entered promiscuous mode [ 55.774920][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.782741][ T4197] Cannot create hsr debugfs directory [ 55.800900][ T1323] Bluetooth: hci0: command 0x0409 tx timeout [ 55.880214][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 55.880481][ T1323] Bluetooth: hci3: command 0x0409 tx timeout [ 55.890334][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 55.960458][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 56.005443][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.017141][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.026580][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.036606][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.094587][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.109699][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.118632][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.128208][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.163760][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.175439][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.185405][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.194211][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.266802][ T4197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.297455][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.308186][ T4197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.326561][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.338534][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.354433][ T4197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.381471][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.392746][ T4197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.401657][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.412381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.423821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.431663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.440315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.448947][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.456118][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.481126][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.487896][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.496828][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.506953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.515279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.525122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.533143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.542145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.551007][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.558030][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.579460][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.595211][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.604796][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.614515][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.623090][ T1517] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.630185][ T1517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.638970][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.653057][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.662455][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.672738][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.681670][ T1517] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.688710][ T1517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.709844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.721634][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.729477][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.774026][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.782896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.792224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.801215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.811181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.819405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.828060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.836692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.845271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.854040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.869872][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.881446][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.895070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.903181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.911331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.919550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.929348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.938118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.955597][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.966500][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.979081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.988149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.996949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.005393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.019264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.027122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.035875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.044537][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.051641][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.059738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.068609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.077351][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.084436][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.095041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.128965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.146844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.171121][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.191402][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.208662][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.234599][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.249340][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.260469][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.274078][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.286961][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.301662][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.309349][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.336120][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.345904][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.359437][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.368359][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.381929][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.390865][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.399209][ T3074] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.406267][ T3074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.428487][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.452136][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.461091][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.468554][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.477993][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.489470][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.503497][ T3074] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.510578][ T3074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.518548][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.526956][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.538387][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.553856][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.562762][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.572165][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.582870][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.592421][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.602895][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.623850][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.646152][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.656766][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.670987][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.679525][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.689146][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.698128][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.706548][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.726472][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.737594][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.755198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.766352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.785913][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.796512][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.805355][ T3074] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.812448][ T3074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.821454][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.829926][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.838376][ T3074] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.845450][ T3074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.853458][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.862440][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.880867][ T26] Bluetooth: hci0: command 0x041b tx timeout [ 57.909038][ T4192] device veth0_vlan entered promiscuous mode [ 57.917964][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.938019][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.952229][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.960519][ T26] Bluetooth: hci1: command 0x041b tx timeout [ 57.960610][ T26] Bluetooth: hci3: command 0x041b tx timeout [ 57.960681][ T26] Bluetooth: hci2: command 0x041b tx timeout [ 57.972048][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.994225][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.003533][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.013820][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.023156][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.031979][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.040149][ T26] Bluetooth: hci4: command 0x041b tx timeout [ 58.045903][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.054820][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.063081][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.088668][ T4187] device veth0_vlan entered promiscuous mode [ 58.097320][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.107230][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.117388][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.127113][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.136808][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.145490][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.156947][ T4192] device veth1_vlan entered promiscuous mode [ 58.173792][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.185424][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.199637][ T4187] device veth1_vlan entered promiscuous mode [ 58.207714][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.216290][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.224153][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.233091][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.241078][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.249225][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.268540][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.289918][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.298035][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.315850][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.327061][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.354966][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.364497][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.382009][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.390781][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.408100][ T4187] device veth0_macvtap entered promiscuous mode [ 58.424930][ T4187] device veth1_macvtap entered promiscuous mode [ 58.455999][ T4192] device veth0_macvtap entered promiscuous mode [ 58.471970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.480920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.489062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.497828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.508846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.517615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.529345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.538469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.546368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.562145][ T4191] device veth0_vlan entered promiscuous mode [ 58.577058][ T4192] device veth1_macvtap entered promiscuous mode [ 58.587485][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.596279][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.604950][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.618543][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.627678][ T4191] device veth1_vlan entered promiscuous mode [ 58.641935][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.650549][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.658669][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.667427][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.678603][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.691113][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.702670][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.714569][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.729047][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.739893][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.751799][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.760731][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.769152][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.778183][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.786705][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.795325][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.804554][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.815421][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.824418][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.833950][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.844585][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.863282][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.872463][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.881457][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.891154][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.906337][ T4194] device veth0_vlan entered promiscuous mode [ 58.926770][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.936118][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.944509][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.954397][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.963764][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.976320][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.984044][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.996817][ T4194] device veth1_vlan entered promiscuous mode [ 59.063251][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.075223][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.084414][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.093370][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.103855][ T4191] device veth0_macvtap entered promiscuous mode [ 59.118600][ T4197] device veth0_vlan entered promiscuous mode [ 59.137454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.145735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.154486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.163925][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.173102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.183209][ T4191] device veth1_macvtap entered promiscuous mode [ 59.216162][ T4197] device veth1_vlan entered promiscuous mode [ 59.250543][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.258497][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.278115][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.292051][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.301220][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.309127][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.317521][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.327933][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.336555][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.345178][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.357489][ T4197] device veth0_macvtap entered promiscuous mode [ 59.367606][ T4194] device veth0_macvtap entered promiscuous mode [ 59.396609][ T4197] device veth1_macvtap entered promiscuous mode [ 59.411893][ T4194] device veth1_macvtap entered promiscuous mode [ 59.424176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.432487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.441068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.448910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.464237][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.476245][ T1517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.484962][ T1517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.487061][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.503795][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.514453][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.525937][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.543255][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.554043][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.565179][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.575690][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.585620][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.596361][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.607362][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.621877][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.629806][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.638943][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.648121][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.656712][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.666182][ T1517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.669223][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.685452][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.695483][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.696546][ T1517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.711769][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.724382][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.735070][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.745105][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.755654][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.767215][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.782411][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.793064][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.804370][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.815146][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.826200][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.837374][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.845396][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.853909][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.862870][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.872914][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.882237][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.892852][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.902845][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.913470][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.923500][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.934053][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.945165][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.960439][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.963214][ T2301] Bluetooth: hci0: command 0x040f tx timeout [ 59.972554][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.987930][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.998374][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.008223][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.018892][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.028968][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.039641][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.050087][ T2301] Bluetooth: hci2: command 0x040f tx timeout [ 60.054627][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.060365][ T2301] Bluetooth: hci3: command 0x040f tx timeout [ 60.065892][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.071166][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.086543][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.090999][ T2301] Bluetooth: hci1: command 0x040f tx timeout [ 60.095390][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.108487][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.117216][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.120857][ T2301] Bluetooth: hci4: command 0x040f tx timeout [ 60.132237][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.141539][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.151790][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.160751][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.171277][ T1517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.196828][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.207064][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.215985][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.224946][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.237695][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.246520][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.255907][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.264829][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.479717][ T4260] ftl_cs: FTL header not found. [ 60.502209][ T4260] block2mtd: mtd1: [/dev/ram0] erase_size = 64KiB [65536] [ 60.538305][ T3074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.551779][ T3074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.572434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.589727][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.603356][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.643276][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.658759][ T3074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.671368][ T3074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.678890][ T3074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.678979][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.703013][ T3074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.710440][ T2301] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 60.748502][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.758050][ T4271] syz.0.7: vmalloc error: size 8192, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 60.766423][ T515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.778518][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.796943][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.807340][ T515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.813123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.822477][ T4271] CPU: 1 PID: 4271 Comm: syz.0.7 Not tainted syzkaller #0 [ 60.828243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.829593][ T4271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 60.829632][ T4271] Call Trace: [ 60.848793][ T4274] ERROR: Out of memory at tomoyo_realpath_from_path. [ 60.850109][ T4271] [ 60.850118][ T4271] dump_stack_lvl+0x188/0x250 [ 60.864372][ T4271] ? rcu_lock_release+0x5/0x20 [ 60.869150][ T4271] ? show_regs_print_info+0x20/0x20 [ 60.874356][ T4271] ? load_image+0x410/0x410 [ 60.878865][ T4271] warn_alloc+0x245/0x320 [ 60.883193][ T4271] ? zone_watermark_ok_safe+0x250/0x250 [ 60.888748][ T4271] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 60.894742][ T4271] ? __get_vm_area_node+0x2b5/0x2d0 [ 60.899955][ T4271] __vmalloc_node_range+0x2b1/0x8b0 [ 60.905159][ T4271] ? dvb_demux_do_ioctl+0x2ad/0x530 [ 60.910338][ T4271] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 60.915957][ T4271] ? dvb_dmxdev_filter_start+0x107/0x1060 [ 60.921654][ T4271] vmalloc+0x75/0x80 [ 60.925530][ T4271] ? dvb_dmxdev_filter_start+0x107/0x1060 [ 60.931235][ T4271] dvb_dmxdev_filter_start+0x107/0x1060 [ 60.936807][ T4271] dvb_demux_do_ioctl+0x48d/0x530 [ 60.941833][ T4271] dvb_usercopy+0x191/0x2b0 [ 60.946336][ T4271] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 60.951862][ T4271] ? dvb_generic_ioctl+0xb0/0xb0 [ 60.956786][ T4271] ? dvb_demux_poll+0x210/0x210 [ 60.961614][ T4271] dvb_demux_ioctl+0x25/0x30 [ 60.966195][ T4271] __se_sys_ioctl+0xfa/0x170 [ 60.970765][ T4271] do_syscall_64+0x4c/0xa0 [ 60.975160][ T4271] ? clear_bhb_loop+0x30/0x80 [ 60.979815][ T4271] ? clear_bhb_loop+0x30/0x80 [ 60.984481][ T4271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 60.990389][ T4271] RIP: 0033:0x7f1d1d329159 [ 60.994805][ T4271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.014392][ T4271] RSP: 002b:00007f1d1b581028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.022784][ T4271] RAX: ffffffffffffffda RBX: 00007f1d1d5b0fa0 RCX: 00007f1d1d329159 [ 61.030741][ T4271] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000004 [ 61.038726][ T4271] RBP: 00007f1d1d3c006b R08: 0000000000000000 R09: 0000000000000000 [ 61.046680][ T4271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.054634][ T4271] R13: 00007f1d1d5b1038 R14: 00007f1d1d5b0fa0 R15: 00007ffcb9246ea8 [ 61.062601][ T4271] [ 61.074770][ T4271] Mem-Info: [ 61.078073][ T4271] active_anon:271 inactive_anon:5645 isolated_anon:0 [ 61.078073][ T4271] active_file:4174 inactive_file:36600 isolated_file:0 [ 61.078073][ T4271] unevictable:768 dirty:1712 writeback:0 [ 61.078073][ T4271] slab_reclaimable:20255 slab_unreclaimable:90583 [ 61.078073][ T4271] mapped:29077 shmem:1632 pagetables:589 bounce:0 [ 61.078073][ T4271] kernel_misc_reclaimable:0 [ 61.078073][ T4271] free:1404905 free_pcp:6612 free_cma:0 [ 61.130352][ T4271] Node 0 active_anon:1052kB inactive_anon:22068kB active_file:16492kB inactive_file:146500kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116408kB dirty:6812kB writeback:0kB shmem:4448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10076kB pagetables:2356kB all_unreclaimable? no [ 61.165752][ T4271] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:36kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 61.210212][ T4271] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 61.212871][ T4278] ================================================================== [ 61.213954][ T4279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.239146][ T4278] BUG: KASAN: slab-out-of-bounds in sk_skb_adjust_room+0x35e/0x590 [ 61.239185][ T4278] Read of size 8 at addr ffff88807c1f2780 by task syz.4.5/4278 [ 61.239200][ T4278] [ 61.239206][ T4278] CPU: 0 PID: 4278 Comm: syz.4.5 Not tainted syzkaller #0 [ 61.239223][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 61.239233][ T4278] Call Trace: [ 61.239240][ T4278] [ 61.239248][ T4278] dump_stack_lvl+0x188/0x250 [ 61.239271][ T4278] ? show_regs_print_info+0x20/0x20 [ 61.239288][ T4278] ? _printk+0xda/0x130 [ 61.239301][ T4278] ? sk_skb_adjust_room+0x35e/0x590 [ 61.239321][ T4278] ? load_image+0x410/0x410 [ 61.239345][ T4278] print_address_description+0x60/0x2d0 [ 61.257190][ T4278] ? sk_skb_adjust_room+0x35e/0x590 [ 61.265389][ T4271] lowmem_reserve[]: [ 61.272593][ T4278] kasan_report+0xdf/0x130 [ 61.272627][ T4278] ? sk_skb_adjust_room+0x35e/0x590 [ 61.272650][ T4278] sk_skb_adjust_room+0x35e/0x590 [ 61.272672][ T4278] bpf_prog_e15ab8bd9cea3c06+0x19/0x44c [ 61.275386][ T4271] 0 [ 61.282061][ T4278] sk_psock_verdict_recv+0x329/0x9a0 [ 61.282093][ T4278] unix_read_sock+0x10a/0x2d0 [ 61.282115][ T4278] ? sk_psock_skb_redirect+0x4c0/0x4c0 [ 61.282132][ T4278] ? unix_stream_splice_actor+0x100/0x100 [ 61.282158][ T4278] sk_psock_verdict_data_ready+0x167/0x1d0 [ 61.282177][ T4278] ? __lock_acquire+0x7d40/0x7d40 [ 61.302371][ T4271] 2539 [ 61.303080][ T4278] ? sk_psock_start_verdict+0xc0/0xc0 [ 61.308334][ T4271] 2540 [ 61.312388][ T4278] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 61.312415][ T4278] ? do_raw_spin_unlock+0x11d/0x230 [ 61.312437][ T4278] unix_stream_sendmsg+0x7d1/0xc90 [ 61.312471][ T4278] ? unix_show_fdinfo+0xa0/0xa0 [ 61.312487][ T4278] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 61.312514][ T4278] ? apparmor_socket_sendmsg+0x88/0x230 [ 61.312533][ T4278] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 61.319496][ T4271] 2540 [ 61.322183][ T4278] ? security_socket_sendmsg+0x7c/0xa0 [ 61.322211][ T4278] __sys_sendto+0x46d/0x620 [ 61.322234][ T4278] ? __ia32_sys_getpeername+0x80/0x80 [ 61.322278][ T4278] ? lock_chain_count+0x20/0x20 [ 61.322306][ T4278] __x64_sys_sendto+0xda/0xf0 [ 61.322328][ T4278] do_syscall_64+0x4c/0xa0 [ 61.322346][ T4278] ? clear_bhb_loop+0x30/0x80 [ 61.322365][ T4278] ? clear_bhb_loop+0x30/0x80 [ 61.322385][ T4278] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.322405][ T4278] RIP: 0033:0x7f0ecaaaa159 [ 61.322423][ T4278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.322438][ T4278] RSP: 002b:00007f0ec8d02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 61.322458][ T4278] RAX: ffffffffffffffda RBX: 00007f0ecad31fa0 RCX: 00007f0ecaaaa159 [ 61.322472][ T4278] RDX: 0000000000000004 RSI: 0000200000000800 RDI: 0000000000000004 [ 61.322483][ T4278] RBP: 00007f0ecab4106b R08: 0000000000000000 R09: 0000000000000000 [ 61.322495][ T4278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.322507][ T4278] R13: 00007f0ecad32038 R14: 00007f0ecad31fa0 R15: 00007fffe6186fb8 [ 61.322532][ T4278] [ 61.322539][ T4278] [ 61.322543][ T4278] Allocated by task 4278: [ 61.322566][ T4278] __kasan_slab_alloc+0x92/0xc0 [ 61.322584][ T4278] slab_post_alloc_hook+0x4c/0x380 [ 61.322597][ T4278] kmem_cache_alloc+0x15d/0x280 [ 61.322615][ T4278] sk_prot_alloc+0x57/0x210 [ 61.322629][ T4278] sk_alloc+0x2f/0x310 [ 61.322640][ T4278] unix_create1+0xad/0x610 [ 61.322655][ T4278] unix_create+0x139/0x1f0 [ 61.322670][ T4278] __sock_create+0x473/0x910 [ 61.322684][ T4278] __sys_socketpair+0x1bd/0x540 [ 61.322698][ T4278] __x64_sys_socketpair+0x97/0xb0 [ 61.322712][ T4278] do_syscall_64+0x4c/0xa0 [ 61.322726][ T4278] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.322743][ T4278] [ 61.628027][ T4278] The buggy address belongs to the object at ffff88807c1f2000 [ 61.628027][ T4278] which belongs to the cache UNIX-STREAM of size 1920 [ 61.642156][ T4278] The buggy address is located 0 bytes to the right of [ 61.642156][ T4278] 1920-byte region [ffff88807c1f2000, ffff88807c1f2780) [ 61.655857][ T4278] The buggy address belongs to the page: [ 61.661493][ T4278] page:ffffea0001f07c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c1f0 [ 61.671636][ T4278] head:ffffea0001f07c00 order:3 compound_mapcount:0 compound_pincount:0 [ 61.679946][ T4278] memcg:ffff88805f2ff701 [ 61.684200][ T4278] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 61.692173][ T4278] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801d5988c0 [ 61.700746][ T4278] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff88805f2ff701 [ 61.709307][ T4278] page dumped because: kasan: bad access detected [ 61.715710][ T4278] page_owner tracks the page as allocated [ 61.721411][ T4278] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4173, ts 49924836519, free_ts 49920302309 [ 61.740491][ T4278] get_page_from_freelist+0x24f6/0x2670 [ 61.746037][ T4278] __alloc_pages+0x1ee/0x480 [ 61.750610][ T4278] new_slab+0xc0/0x4b0 [ 61.754666][ T4278] ___slab_alloc+0x807/0xdd0 [ 61.759235][ T4278] kmem_cache_alloc+0xf0/0x280 [ 61.763983][ T4278] sk_prot_alloc+0x57/0x210 [ 61.768478][ T4278] sk_alloc+0x2f/0x310 [ 61.772526][ T4278] unix_create1+0xad/0x610 [ 61.776926][ T4278] unix_create+0x139/0x1f0 [ 61.781326][ T4278] __sock_create+0x473/0x910 [ 61.785909][ T4278] __sys_socket+0xe2/0x170 [ 61.790310][ T4278] __x64_sys_socket+0x76/0x80 [ 61.794970][ T4278] do_syscall_64+0x4c/0xa0 [ 61.799374][ T4278] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.805252][ T4278] page last free stack trace: [ 61.809903][ T4278] free_unref_page_prepare+0x637/0x6c0 [ 61.815348][ T4278] free_unref_page+0x8f/0x2a0 [ 61.820010][ T4278] do_exit+0x16d6/0x2110 [ 61.824242][ T4278] do_group_exit+0x12c/0x2f0 [ 61.828811][ T4278] __x64_sys_exit_group+0x3b/0x40 [ 61.833816][ T4278] do_syscall_64+0x4c/0xa0 [ 61.838217][ T4278] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.844100][ T4278] [ 61.846407][ T4278] Memory state around the buggy address: [ 61.852016][ T4278] ffff88807c1f2680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 61.860061][ T4278] ffff88807c1f2700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 61.868099][ T4278] >ffff88807c1f2780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 61.876137][ T4278] ^ [ 61.880184][ T4278] ffff88807c1f2800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 61.888237][ T4278] ffff88807c1f2880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 61.896275][ T4278] ================================================================== [ 61.904330][ T4278] Disabling lock debugging due to kernel taint [ 61.920007][ T4271] 2540 [ 61.922807][ T4271] Node 0 DMA32 free:1690516kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1052kB inactive_anon:22336kB active_file:16564kB inactive_file:147084kB unevictable:1536kB writepending:6824kB present:3129332kB managed:2606500kB mlocked:0kB bounce:0kB free_pcp:12532kB local_pcp:10988kB free_cma:0kB [ 61.951716][ T2301] usb 2-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice= 1.00 [ 61.959155][ T4271] lowmem_reserve[]: 0 0 0 0 0 [ 61.962595][ T2301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.966599][ T4271] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 62.000521][ T4271] lowmem_reserve[]: 0 0 0 0 0 [ 62.000633][ T4278] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 62.005342][ T4271] Node 1 [ 62.012396][ T4278] CPU: 0 PID: 4278 Comm: syz.4.5 Tainted: G B syzkaller #0 [ 62.012412][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 62.012421][ T4278] Call Trace: [ 62.012427][ T4278] [ 62.012433][ T4278] dump_stack_lvl+0x188/0x250 [ 62.012453][ T4278] ? show_regs_print_info+0x20/0x20 [ 62.012470][ T4278] ? load_image+0x410/0x410 [ 62.012489][ T4278] panic+0x2f8/0x850 [ 62.012505][ T4278] ? bpf_jit_dump+0xd0/0xd0 [ 62.012519][ T4278] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 62.012537][ T4278] ? _raw_spin_unlock+0x40/0x40 [ 62.018652][ T4271] Normal free:3913028kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:36kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:13580kB local_pcp:8980kB free_cma:0kB [ 62.023914][ T4278] ? print_memory_metadata+0x314/0x400 [ 62.023937][ T4278] ? sk_skb_adjust_room+0x35e/0x590 [ 62.023953][ T4278] check_panic_on_warn+0x80/0xa0 [ 62.023971][ T4278] ? sk_skb_adjust_room+0x35e/0x590 [ 62.023984][ T4278] end_report+0x6d/0xf0 [ 62.023999][ T4278] kasan_report+0x102/0x130 [ 62.024023][ T4278] ? sk_skb_adjust_room+0x35e/0x590 [ 62.024040][ T4278] sk_skb_adjust_room+0x35e/0x590 [ 62.041302][ T2301] upd78f0730 2-1:1.0: upd78f0730 converter detected [ 62.044921][ T4278] ? sk_psock_verdict_recv+0x329/0x9a0 [ 62.044947][ T4278] ? unix_read_sock+0x10a/0x2d0 [ 62.056359][ T2301] usb 2-1: upd78f0730 converter now attached to ttyUSB0 [ 62.058472][ T4278] ? sk_psock_skb_redirect+0x4c0/0x4c0 [ 62.063428][ T4271] lowmem_reserve[]: [ 62.068901][ T4278] ? unix_stream_splice_actor+0x100/0x100 [ 62.068927][ T4278] ? sk_psock_verdict_data_ready+0x167/0x1d0 [ 62.092706][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 62.101924][ T4278] ? __lock_acquire+0x7d40/0x7d40 [ 62.101948][ T4278] ? sk_psock_start_verdict+0xc0/0xc0 [ 62.101965][ T4278] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 62.117608][ T4271] 0 [ 62.122676][ T4278] ? do_raw_spin_unlock+0x11d/0x230 [ 62.122700][ T4278] ? unix_stream_sendmsg+0x7d1/0xc90 [ 62.122723][ T4278] ? unix_show_fdinfo+0xa0/0xa0 [ 62.122737][ T4278] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 62.122760][ T4278] ? apparmor_socket_sendmsg+0x88/0x230 [ 62.122777][ T4278] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 62.122795][ T4278] ? security_socket_sendmsg+0x7c/0xa0 [ 62.122813][ T4278] ? __sys_sendto+0x46d/0x620 [ 62.122830][ T4278] ? __ia32_sys_getpeername+0x80/0x80 [ 62.122855][ T4278] ? lock_chain_count+0x20/0x20 [ 62.122875][ T4278] ? __x64_sys_sendto+0xda/0xf0 [ 62.122890][ T4278] ? do_syscall_64+0x4c/0xa0 [ 62.122904][ T4278] ? clear_bhb_loop+0x30/0x80 [ 62.122920][ T4278] ? clear_bhb_loop+0x30/0x80 [ 62.122935][ T4278] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 62.122955][ T4278] [ 62.123171][ T4278] Kernel Offset: disabled [ 62.295492][ T4278] Rebooting in 86400 seconds..