last executing test programs: 16.831782667s ago: executing program 4 (id=342): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0}) 11.836479994s ago: executing program 4 (id=353): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x441, 0x0) r1 = dup(r0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xe64, 0x5, 0x10, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x8082) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) dup3(r2, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001100)=0x12) 9.630194709s ago: executing program 4 (id=363): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x1) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x203, 0xfff9, 0xffffffffffffffff, 0x20000000000000c, 0xe, 0x200, 0xc, 0x2c, 0x80000009, 0x2}) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x2000) 8.235331401s ago: executing program 3 (id=366): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4) r0 = io_uring_setup(0x4505, &(0x7f0000000840)={0x0, 0x9a3d, 0x40, 0x1, 0x151}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) sendto(r2, &(0x7f0000000400)="a0b7f4681b2c5a98568dcde245c59f04ad5c8c27c22f55a05985de53f9d50647958899b3909b4f26a0115aae78e12e5844470229939cfdba9360cbc7a19e7b5a87dcd9a0309cb46e8746b5ffccdc3aba786d0d42942ddaf3766a6f9f503048effc9ad53dd3b0c97ee0fd04db964d16557648a9b0a27a2e6130c3", 0x7a, 0x4000054, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getpid() setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000800)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x87, 0xd}, &(0x7f00000005c0)=0x4, 0x0, 0x0, 0x9, 0x96, 0x5, 0x50}}], 0x58, 0x20008011}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0xfff, 0x4}, @window={0x3, 0x5}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 8.160527045s ago: executing program 4 (id=367): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)) 7.158346131s ago: executing program 3 (id=368): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000300)='net/xfrm_stat\x00') r4 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x3, r4, 0x0, 0x0, 0x0) 7.099871995s ago: executing program 0 (id=369): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x8, 0x80000) fanotify_mark(r6, 0x105, 0x4800003a, r5, 0x0) 6.082666711s ago: executing program 4 (id=370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) syz_usb_connect(0x5, 0x3b, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xd6, 0x23, 0xd3, 0x8, 0x13d8, 0x1, 0x5a0b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x3, 0x7, 0x40, 0x8, [{{0x9, 0x4, 0xad, 0x8, 0x0, 0xea, 0x7a, 0xb0, 0x80, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0x7a9, 0x4}}]}}]}}]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.056546663s ago: executing program 0 (id=371): syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04000b20"], 0x7) syz_usb_connect(0x1, 0x36, 0x0, 0x0) 5.981671988s ago: executing program 2 (id=372): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) 5.981316308s ago: executing program 3 (id=373): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 5.883829214s ago: executing program 2 (id=374): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa00000, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 5.774536152s ago: executing program 2 (id=375): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb8, 0xc0, 0x7d, 0x40, 0xc45, 0x8001, 0x900a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x80, 0x82, 0x99}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x20, 0x9, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0}) 5.397176707s ago: executing program 0 (id=376): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) recvfrom(r2, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 3.694080208s ago: executing program 1 (id=378): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r1, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3.586486655s ago: executing program 0 (id=379): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000880)={0x2, 0x8001, @status={[0x4, 0x7ff, 0x8, 0x379, 0x2, 0x3]}, [0x1, 0x6, 0x5, 0xc, 0x7, 0x8, 0x6, 0x101, 0x200, 0x1, 0x7, 0x0, 0x8, 0x7ff, 0x200, 0x8000, 0x4, 0x8, 0x0, 0x9dd, 0xff, 0x0, 0x5, 0x3, 0x8000000000000000, 0x7, 0x5, 0xc, 0x1, 0x800000b, 0xffffffffffffffff, 0x8, 0x1, 0x8, 0xc, 0x4, 0x5, 0x10001, 0x4, 0xffff, 0x9, 0x9, 0x80, 0x0, 0x8, 0x7, 0x10b, 0x3, 0x1, 0x7, 0x0, 0x45c7, 0x0, 0x6, 0x4, 0x3, 0x9, 0x9d5b, 0xba3, 0x3, 0x69b, 0x9, 0x10001, 0x5c]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.585927275s ago: executing program 1 (id=380): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05030500", 0x4, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.419823796s ago: executing program 1 (id=381): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x8, 0x80000) fanotify_mark(r6, 0x105, 0x4800003a, r5, 0x0) 3.156552503s ago: executing program 2 (id=382): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="11da", 0x2) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x578}], 0x1) 3.150247393s ago: executing program 4 (id=383): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xca, 0x9b, 0xd4, 0x10, 0x1199, 0xb000, 0xa898, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x30, 0x2, 0x0, 0x17, 0xb5, 0x1b}}]}}]}}, 0x0) syz_usb_connect$uac1(0x3, 0xa3, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x40, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x10, 0x3, 0xfa, 0x8, "266ca9", "f8d8"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x7, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7, 0x0, 0x8, {0x7, 0x25, 0x1, 0x80, 0x9, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xce, 0x4, 0x2, 0x10, "7c9013"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x7, 0x2}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7, 0x2, 0x5, '|'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x9, 0xb0, 0xa, {0x7, 0x25, 0x1, 0x0, 0x2, 0xc911}}}}}}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 2.358439475s ago: executing program 3 (id=384): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000300)='net/xfrm_stat\x00') r4 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x3, r4, 0x0, 0x0, 0x0) 2.330013557s ago: executing program 2 (id=385): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x10000, 0x5fa, 0x8, 0x1ff, 0x0, [{0x6d, 0x6, 0x9, '\x00', 0xa}, {0x6, 0xb, 0x72, '\x00', 0x3}, {0x1, 0xfe, 0x9, '\x00', 0x40}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x6, 0x7f, '\x00', 0x5c}, {0x0, 0x4, 0x6, '\x00', 0x8}, {0x6, 0x6, 0x8, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x9}, {0x2, 0x9, 0x0, '\x00', 0xa}, {0x7, 0x5, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x1, 0x86, 0xc, '\x00', 0xfb}, {0x5, 0x4f}, {0x4, 0x4, 0x96, '\x00', 0x3}, {0xb, 0x0, 0x7, '\x00', 0x7f}, {0x10, 0x5, 0x1, '\x00', 0x3}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x5, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x4c, 0xa, '\x00', 0x3}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x0, 0x6, '\x00', 0x6}, {0x93, 0x4, 0x4, '\x00', 0xe9}, {0x3, 0x7f, 0xdf, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x21, 0x0, "a386bcb957f6ee650a88e8065cb3b0852da5b6b12cf609fdffffff0f392be7124f3883ab73ec229f5fab90b052c3572db8ed729eed0700001400000000de12709700"}, 0xd8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x0, 0x3, 0x93, 0x0, 0x0, 0x1, 0xbb, 0x2, 0xc0, 0x4d, 0x9, 0x61, 0x7, 0x90, 0xd}}) 2.13931828s ago: executing program 1 (id=386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88a8"], 0x72) 1.280086306s ago: executing program 2 (id=387): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x10031, 0xffffffffffffffff, 0xe51d7000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r3, 0x0, 0x21, &(0x7f00000000c0)=0xffffffff, 0x4) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40804) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x35, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000100)=""/69, 0x314000, 0x800, 0xffff7ffd, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.279592467s ago: executing program 3 (id=388): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x1}, 0x2b1}) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x802, @private0, 0x5}, {0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1, {[0x0, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0xe1d]}}, 0x5c) 1.055878241s ago: executing program 1 (id=389): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) chdir(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) shmget(0x3, 0x1000, 0x200, &(0x7f000013e000/0x1000)=nil) r3 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) setrlimit(0x7, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x120e1100, 0x0, 0x13, 0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0xffffffff, 0x0, &(0x7f0000000280)) 1.022216593s ago: executing program 0 (id=390): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='scalable', 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000002c0)=':', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)='(', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000c80)="5006c99cd7b933a8472857cc8b83e78de1a52fc0e63d9aabc8bdba80421bb865eef220052e0fddbfdc51ce2c3a760c78a126a898d2c77520293ddb03dc411ed2b61381a91892118e3a6d22bb7e234183767795dc5c3d8a65a9a2009a37f947a472a34ef75249279873aac3f91787c05a2684d3c1d2f38cd4d363", 0x7a}], 0x1}}], 0x3, 0x8084) 852.101784ms ago: executing program 0 (id=391): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) 417.19µs ago: executing program 1 (id=392): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() ptrace$getenv(0x4201, r1, 0x7, &(0x7f0000000100)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x37, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newtclass={0x24, 0x28, 0x5b1c90f1fc49f939, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x8, 0x5}, {0x7, 0xa}}}, 0x24}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32=0x1, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="01000000030000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x36, 0x8e, &(0x7f00000008c0)=""/142, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000d40), 0x0, 0x10, 0x200000}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x2, 0xf, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) 0s ago: executing program 3 (id=393): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x6, 0x2, 0x9, 0x3ff}, {0x15, 0x0, 0x0, 0x1c}, {0x6, 0x7, 0x1, 0xd060}]}, 0x10) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = msgget$private(0x0, 0x1f3) msgrcv(r0, 0x0, 0x0, 0x3, 0x2000) msgsnd(r0, &(0x7f0000000040)={0x1}, 0x8, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.28' (ED25519) to the list of known hosts. [ 63.348584][ T4172] cgroup: Unknown subsys name 'net' [ 63.479649][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.950484][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.470487][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 66.486347][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 66.606492][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 66.662375][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 66.671843][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 66.718062][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.725315][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.734310][ T4183] device bridge_slave_0 entered promiscuous mode [ 66.773363][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.780458][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.788533][ T4183] device bridge_slave_1 entered promiscuous mode [ 66.797038][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.804320][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.812149][ T4191] device bridge_slave_0 entered promiscuous mode [ 66.854280][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.861482][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.870181][ T4191] device bridge_slave_1 entered promiscuous mode [ 66.894730][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.910344][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.917938][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.926246][ T4192] device bridge_slave_0 entered promiscuous mode [ 66.950772][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.969070][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.976431][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.984734][ T4192] device bridge_slave_1 entered promiscuous mode [ 67.017570][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.033851][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.040987][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.049592][ T4186] device bridge_slave_0 entered promiscuous mode [ 67.057218][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.064650][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.072610][ T4190] device bridge_slave_0 entered promiscuous mode [ 67.088192][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.105574][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.112667][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.120812][ T4186] device bridge_slave_1 entered promiscuous mode [ 67.128392][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.135880][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.145033][ T4190] device bridge_slave_1 entered promiscuous mode [ 67.154589][ T4183] team0: Port device team_slave_0 added [ 67.170749][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.204041][ T4183] team0: Port device team_slave_1 added [ 67.211524][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.223289][ T4191] team0: Port device team_slave_0 added [ 67.260682][ T4191] team0: Port device team_slave_1 added [ 67.268440][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.280809][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.314834][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.326142][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.336123][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.343449][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.369516][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.383623][ T4192] team0: Port device team_slave_0 added [ 67.417922][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.425034][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.452093][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.465963][ T4192] team0: Port device team_slave_1 added [ 67.476741][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.483938][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.509928][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.555079][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.562060][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.588330][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.601976][ T4186] team0: Port device team_slave_0 added [ 67.610497][ T4190] team0: Port device team_slave_0 added [ 67.617858][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.625233][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.652104][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.668756][ T4186] team0: Port device team_slave_1 added [ 67.683727][ T4190] team0: Port device team_slave_1 added [ 67.700404][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.707609][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.734170][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.768756][ T4183] device hsr_slave_0 entered promiscuous mode [ 67.775951][ T4183] device hsr_slave_1 entered promiscuous mode [ 67.818517][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.825843][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.852383][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.864671][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.871642][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.897636][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.920137][ T4191] device hsr_slave_0 entered promiscuous mode [ 67.927270][ T4191] device hsr_slave_1 entered promiscuous mode [ 67.934036][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.941802][ T4191] Cannot create hsr debugfs directory [ 67.972658][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.979851][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.006436][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.018361][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.025573][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.051677][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.077502][ T4192] device hsr_slave_0 entered promiscuous mode [ 68.084568][ T4192] device hsr_slave_1 entered promiscuous mode [ 68.091175][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.098945][ T4192] Cannot create hsr debugfs directory [ 68.124048][ T4174] Bluetooth: hci1: command 0x0409 tx timeout [ 68.130998][ T4174] Bluetooth: hci2: command 0x0409 tx timeout [ 68.133166][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 68.138485][ T4174] Bluetooth: hci3: command 0x0409 tx timeout [ 68.181610][ T4190] device hsr_slave_0 entered promiscuous mode [ 68.188684][ T4190] device hsr_slave_1 entered promiscuous mode [ 68.195596][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.203220][ T4174] Bluetooth: hci0: command 0x0409 tx timeout [ 68.209562][ T4190] Cannot create hsr debugfs directory [ 68.242141][ T4186] device hsr_slave_0 entered promiscuous mode [ 68.249300][ T4186] device hsr_slave_1 entered promiscuous mode [ 68.256591][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.264436][ T4186] Cannot create hsr debugfs directory [ 68.558128][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.570076][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.580625][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.595029][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.651010][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.665788][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.674984][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.705963][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.750857][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.760723][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.780467][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.791288][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.860270][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.899468][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.909172][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.922280][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.949941][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.960803][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.970870][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.984617][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.009844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.020175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.030249][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.037612][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.059888][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.071324][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.091943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.105055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.114107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.122531][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.129713][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.142638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.152574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.161682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.170916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.180082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.197499][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.211105][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.232394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.241841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.260595][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.272571][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.289887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.299522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.309484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.319951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.331356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.350284][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.385322][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.422409][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.430702][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.449436][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.502628][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.522603][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.532167][ T1218] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.539335][ T1218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.554628][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.565018][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.574147][ T1218] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.581264][ T1218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.589107][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.606596][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.620863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.630958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.661838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.672473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.681630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.690492][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.697634][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.705903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.714034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.721499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.730512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.740419][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.747580][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.756317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.765569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.776799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.802621][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.826575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.837948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.847842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.857068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.866240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.875328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.884901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.893936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.902361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.911204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.920052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.929860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.940278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.952411][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.968036][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.980456][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.004982][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.012519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.026941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.039110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.048867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.057540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.066966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.080624][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.092352][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.103536][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.115429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.131557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.140329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.156074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.169000][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.176159][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.184426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.203631][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 70.220830][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.223135][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 70.243762][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 70.259516][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.263344][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 70.271656][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.283692][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 70.319290][ T1218] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.326706][ T1218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.353480][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.362517][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.370872][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.379828][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.417834][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.440280][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.472852][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.482746][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.492247][ T1271] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.499389][ T1271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.508803][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.518242][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.527797][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.537694][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.546336][ T1271] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.553469][ T1271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.561618][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.571381][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.580844][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.590905][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.599999][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.610376][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.620222][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.629153][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.659484][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.676013][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.691088][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.702355][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.716693][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.725867][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.759150][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.778214][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.786797][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.794521][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.802041][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.826365][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.840859][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.859778][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.870832][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.880822][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.889909][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.898827][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.907737][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.917750][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.939251][ T4191] device veth0_vlan entered promiscuous mode [ 70.950621][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.958749][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.974503][ T4191] device veth1_vlan entered promiscuous mode [ 71.013874][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.022630][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.033147][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.042052][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.051936][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.067401][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.100749][ T4190] device veth0_vlan entered promiscuous mode [ 71.119319][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.128653][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.139989][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.147901][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.157300][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.166427][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.180915][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.190583][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.199132][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.207624][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.216154][ T4183] device veth0_vlan entered promiscuous mode [ 71.232208][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.253605][ T4183] device veth1_vlan entered promiscuous mode [ 71.269023][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.277781][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.288884][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.299789][ T4190] device veth1_vlan entered promiscuous mode [ 71.316775][ T4191] device veth0_macvtap entered promiscuous mode [ 71.330788][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.337745][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.341779][ T4191] device veth1_macvtap entered promiscuous mode [ 71.352770][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.361277][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.370605][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.379392][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.388060][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.396520][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.404797][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.443959][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.451070][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.461042][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.474829][ T4183] device veth0_macvtap entered promiscuous mode [ 71.490381][ T4190] device veth0_macvtap entered promiscuous mode [ 71.513365][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.522747][ T4183] device veth1_macvtap entered promiscuous mode [ 71.530791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.540402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.551065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.559422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.570539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.580696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.589987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.599222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.608241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.623892][ T4190] device veth1_macvtap entered promiscuous mode [ 71.640710][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.651418][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.669928][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.686347][ T4192] device veth0_vlan entered promiscuous mode [ 71.696168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.705396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.715277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.723877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.732433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.743807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.757395][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.767600][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.776670][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.785957][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.813156][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.825911][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.838108][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.847738][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.858649][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.868598][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.879710][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.894070][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.928307][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.938093][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.947347][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.956990][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.966155][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.975504][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.984806][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.992654][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.003156][ T4192] device veth1_vlan entered promiscuous mode [ 72.010147][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.020832][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.032074][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.039937][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.053224][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.063392][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.085689][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.097386][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.105797][ T4186] device veth0_vlan entered promiscuous mode [ 72.125320][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.134571][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.144233][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.153219][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.162680][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.175841][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.185264][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.194440][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.204357][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.223288][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.232028][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.241081][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.249865][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.267300][ T4186] device veth1_vlan entered promiscuous mode [ 72.283547][ T4234] Bluetooth: hci1: command 0x040f tx timeout [ 72.301444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.309224][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 72.310391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.316941][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 72.329070][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 72.330567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.346508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.363224][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 72.380784][ T4192] device veth0_macvtap entered promiscuous mode [ 72.454063][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.462236][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.471231][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.480380][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.501748][ T4192] device veth1_macvtap entered promiscuous mode [ 72.516907][ T4186] device veth0_macvtap entered promiscuous mode [ 72.540223][ T4186] device veth1_macvtap entered promiscuous mode [ 72.566551][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.577332][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.586407][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.599996][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.610756][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.621438][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.631566][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.642485][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.654068][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.668595][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.678959][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.688756][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.697836][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.706366][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.716415][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.733699][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.745115][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.755336][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.766899][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.777087][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.787848][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.797854][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.808354][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.821066][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.831175][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.843309][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.858758][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.869579][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.880121][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.890915][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.902581][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.911456][ T1218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.928459][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.936715][ T1218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.946851][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.955896][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.965719][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.974724][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.986400][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.997550][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.008827][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.019507][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.029582][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.040453][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.052377][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.063633][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.075600][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.089689][ T1218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.091837][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.106925][ T1218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.116178][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.125095][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.133934][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.151184][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.160013][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.170921][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.187168][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.198426][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.207564][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.217649][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.286946][ T1218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.302394][ T1218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.357145][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.370078][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.396604][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.417318][ T1271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.428122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.436567][ T1271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.450391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.514290][ T1271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.522377][ T1271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.536593][ T1218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.545197][ T1218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.560423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.569786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.623160][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.631190][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.651358][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.661028][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.731765][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.771020][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.812679][ T4305] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.531942][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 75.761265][ T4234] Bluetooth: hci3: command 0x0419 tx timeout [ 75.779903][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 76.307287][ T4234] Bluetooth: hci1: command 0x0419 tx timeout [ 76.314615][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 77.533811][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.786727][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 77.963699][ T21] usb 4-1: config 0 interface 0 has no altsetting 0 [ 77.975448][ T21] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 78.003100][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.044096][ T21] usb 4-1: config 0 descriptor?? [ 78.713418][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.714821][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 79.004741][ T21] video4linux radio48: keene_cmd_main failed (-71) [ 79.018334][ T21] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 79.042943][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #280!!! [ 79.052192][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #280!!! [ 79.061388][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 79.070568][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 79.080072][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 79.104237][ T4365] kAFS: unable to lookup cell '\/' [ 79.160025][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 79.169268][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 79.761044][ T4367] atomic_op ffff88807ae12198 conn xmit_atomic 0000000000000000 [ 80.088833][ T21] usb 4-1: USB disconnect, device number 2 [ 80.717794][ T4384] afs: Unknown parameter 'd' [ 83.614273][ T4424] openvswitch: netlink: Message has 4 unknown bytes. [ 84.413656][ T4433] atomic_op ffff888075c95998 conn xmit_atomic 0000000000000000 [ 85.565159][ T4443] ptrace attach of "./syz-executor exec"[4190] was attempted by "./syz-executor exec"[4443] [ 85.793136][ T4438] Zero length message leads to an empty skb [ 86.307985][ T4449] loop1: detected capacity change from 0 to 1024 [ 86.687201][ T1109] cfg80211: failed to load regulatory.db [ 86.890380][ T4449] EXT4-fs (loop1): Unrecognized mount option "euid=00000000000000000000" or missing value [ 87.004912][ T4456] syz.4.43 uses obsolete (PF_INET,SOCK_PACKET) [ 87.164620][ T4456] ptrace attach of "./syz-executor exec"[4191] was attempted by "./syz-executor exec"[4456] [ 87.395272][ T4197] Bluetooth: hci2: ACL packet too small [ 88.028269][ T4495] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 88.901277][ T4506] ptrace attach of "./syz-executor exec"[4191] was attempted by "./syz-executor exec"[4506] [ 89.826639][ T4502] Process accounting resumed [ 90.303769][ T4516] loop1: detected capacity change from 0 to 1024 [ 90.470621][ T4516] EXT4-fs (loop1): Unrecognized mount option "euid=00000000000000000000" or missing value [ 90.520857][ T26] audit: type=1326 audit(1759832692.658:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4520 comm="syz.3.63" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ce7652ec9 code=0x0 [ 92.204433][ T4541] binder_alloc: 4536: binder_alloc_buf, no vma [ 92.317186][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.385016][ T4545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.830062][ T4565] loop0: detected capacity change from 0 to 1024 [ 93.155754][ T4569] ufs: You didn't specify the type of your ufs filesystem [ 93.155754][ T4569] [ 93.155754][ T4569] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 93.155754][ T4569] [ 93.155754][ T4569] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 93.186966][ T4569] ufs: ufstype=old is supported read-only [ 93.197231][ T4569] blk_update_request: I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.727522][ T4573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'. [ 93.752835][ T4565] EXT4-fs (loop0): Unrecognized mount option "euid=00000000000000000000" or missing value [ 93.798271][ T4573] device veth3 entered promiscuous mode [ 95.773225][ T4235] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 96.741993][ T4611] loop0: detected capacity change from 0 to 1024 [ 97.011802][ T4611] EXT4-fs (loop0): Unrecognized mount option "euid=00000000000000000000" or missing value [ 97.603229][ T4235] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.413223][ T4235] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 99.232737][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=8 [ 99.242037][ T4235] usb 3-1: Product: syz [ 99.247346][ T4235] usb 3-1: Manufacturer: syz [ 99.264740][ T4235] usb 3-1: config 0 descriptor?? [ 99.293116][ T4235] usb 3-1: can't set config #0, error -71 [ 99.300987][ T4235] usb 3-1: USB disconnect, device number 2 [ 101.776372][ T4661] sched: RT throttling activated [ 101.997339][ T4663] ufs: You didn't specify the type of your ufs filesystem [ 101.997339][ T4663] [ 101.997339][ T4663] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 101.997339][ T4663] [ 101.997339][ T4663] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 102.028108][ T4663] ufs: ufstype=old is supported read-only [ 102.034161][ T4663] blk_update_request: I/O error, dev loop9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.366494][ T4676] loop4: detected capacity change from 0 to 1024 [ 102.411124][ T4676] EXT4-fs (loop4): Unrecognized mount option "euid=00000000000000000000" or missing value [ 104.847191][ T4699] ptrace attach of "./syz-executor exec"[4191] was attempted by "./syz-executor exec"[4699] [ 108.104588][ T4729] loop3: detected capacity change from 0 to 1024 [ 108.144457][ T4729] EXT4-fs (loop3): Unrecognized mount option "euid=00000000000000000000" or missing value [ 109.103452][ T4298] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 109.177163][ T4298] Bluetooth: hci4: Injecting HCI hardware error event [ 109.208654][ T4197] Bluetooth: hci4: hardware error 0x00 [ 110.594692][ T4762] ufs: You didn't specify the type of your ufs filesystem [ 110.594692][ T4762] [ 110.594692][ T4762] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 110.594692][ T4762] [ 110.594692][ T4762] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 110.625761][ T4762] ufs: ufstype=old is supported read-only [ 110.633972][ T4762] blk_update_request: I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.143299][ T1109] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 112.165746][ T4200] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 112.176701][ T4200] CPU: 1 PID: 4200 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 112.184288][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 112.194367][ T4200] Workqueue: hci0 hci_rx_work [ 112.199193][ T4200] Call Trace: [ 112.202593][ T4200] [ 112.205543][ T4200] dump_stack_lvl+0x168/0x230 [ 112.210250][ T4200] ? show_regs_print_info+0x20/0x20 [ 112.215467][ T4200] ? load_image+0x3b0/0x3b0 [ 112.220005][ T4200] sysfs_create_dir_ns+0x252/0x280 [ 112.225155][ T4200] ? sysfs_warn_dup+0xa0/0xa0 [ 112.229868][ T4200] kobject_add_internal+0x662/0xd00 [ 112.235093][ T4200] kobject_add+0x152/0x210 [ 112.239532][ T4200] ? kobject_init+0x1d0/0x1d0 [ 112.244235][ T4200] ? klist_children_get+0x50/0x50 [ 112.249283][ T4200] ? get_device_parent+0x121/0x3f0 [ 112.254420][ T4200] device_add+0x483/0xfb0 [ 112.258793][ T4200] hci_conn_add_sysfs+0xd1/0x1e0 [ 112.263759][ T4200] le_conn_complete_evt+0xcbc/0x1590 [ 112.269074][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 112.274300][ T4200] ? cs_le_create_conn+0x5e0/0x5e0 [ 112.279436][ T4200] ? mark_lock+0x94/0x320 [ 112.283803][ T4200] hci_le_meta_evt+0x289/0x3b80 [ 112.288686][ T4200] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 112.294723][ T4200] ? lock_chain_count+0x20/0x20 [ 112.299799][ T4200] ? hci_remote_host_features_evt+0x280/0x280 [ 112.306038][ T4200] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 112.311699][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 112.317043][ T4200] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 112.322706][ T4200] ? hci_event_packet+0x37c/0x12f0 [ 112.327858][ T4200] ? __sanitizer_cov_trace_switch+0x5e/0xe0 [ 112.333776][ T4200] hci_event_packet+0xe05/0x12f0 [ 112.338835][ T4200] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 112.344502][ T4200] ? rcu_lock_release+0x20/0x20 [ 112.349373][ T4200] ? kasan_check_range+0x7b/0x290 [ 112.354425][ T4200] ? hci_send_to_monitor+0x9c/0x4a0 [ 112.359647][ T4200] hci_rx_work+0x255/0xa10 [ 112.364100][ T4200] process_one_work+0x863/0x1000 [ 112.369080][ T4200] ? worker_detach_from_pool+0x240/0x240 [ 112.374738][ T4200] ? lockdep_hardirqs_off+0x70/0x100 [ 112.380048][ T4200] ? _raw_spin_lock_irq+0xab/0xe0 [ 112.385093][ T4200] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 112.390491][ T4200] ? wq_worker_running+0x97/0x170 [ 112.395538][ T4200] worker_thread+0xaa8/0x12a0 [ 112.400241][ T4200] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 112.406151][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 112.411384][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 112.416602][ T4200] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 112.422525][ T4200] kthread+0x436/0x520 [ 112.426610][ T4200] ? rcu_lock_release+0x20/0x20 [ 112.431476][ T4200] ? kthread_blkcg+0xd0/0xd0 [ 112.436084][ T4200] ret_from_fork+0x1f/0x30 [ 112.440535][ T4200] [ 112.478861][ T4200] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 112.493951][ T4200] Bluetooth: hci0: failed to register connection device [ 112.574646][ T4781] loop1: detected capacity change from 0 to 1024 [ 112.638717][ T4781] EXT4-fs (loop1): Unrecognized mount option "euid=00000000000000000000" or missing value [ 113.193387][ T1109] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.350549][ T1109] usb 4-1: config 0 has no interface number 0 [ 113.612313][ T1109] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 113.642933][ T1109] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 113.654504][ T1109] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 113.689859][ T1109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.717393][ T4790] ufs: You didn't specify the type of your ufs filesystem [ 113.717393][ T4790] [ 113.717393][ T4790] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 113.717393][ T4790] [ 113.717393][ T4790] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 113.749001][ T4790] ufs: ufstype=old is supported read-only [ 113.755344][ T4790] blk_update_request: I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.792636][ T1109] usb 4-1: config 0 descriptor?? [ 113.814334][ T4771] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 113.850940][ T1109] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 114.110434][ T4298] usb 4-1: USB disconnect, device number 3 [ 114.533112][ T1109] Bluetooth: hci0: command 0x2016 tx timeout [ 116.393582][ T4814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.148'. [ 118.003050][ T2304] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 118.243148][ T2304] usb 2-1: Using ep0 maxpacket: 8 [ 118.252389][ T4835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'. [ 118.363341][ T2304] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 118.390581][ T2304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.459745][ T2304] usb 2-1: config 0 descriptor?? [ 118.713286][ T2304] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 118.725363][ T1109] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 119.163564][ T1109] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 119.200613][ T1109] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 119.348298][ T1109] usb 4-1: config 150 has no interface number 0 [ 119.509223][ T1109] usb 4-1: config 150 interface 204 has no altsetting 0 [ 119.688511][ T4849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.160'. [ 119.745470][ T1109] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 119.765077][ T1109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.784885][ T4851] loop2: detected capacity change from 0 to 1024 [ 119.791528][ T1109] usb 4-1: Product: syz [ 119.801890][ T1109] usb 4-1: Manufacturer: syz [ 119.810612][ T1109] usb 4-1: SerialNumber: syz [ 119.917850][ T4851] EXT4-fs (loop2): Unrecognized mount option "euid=00000000000000000000" or missing value [ 120.147035][ T1109] xr_serial 4-1:150.204: skipping garbage [ 120.205431][ T1109] xr_serial 4-1:150.204: xr_serial converter detected [ 122.023671][ T4869] ufs: You didn't specify the type of your ufs filesystem [ 122.023671][ T4869] [ 122.023671][ T4869] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 122.023671][ T4869] [ 122.023671][ T4869] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 122.054554][ T4869] ufs: ufstype=old is supported read-only [ 122.061560][ T4869] blk_update_request: I/O error, dev loop9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.602014][ T1109] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 122.628348][ T1109] xr_serial: probe of ttyUSB0 failed with error -71 [ 122.640214][ T1109] usb 4-1: USB disconnect, device number 4 [ 122.643074][ T2304] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 122.656103][ T1109] xr_serial 4-1:150.204: device disconnected [ 123.294314][ T2304] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 123.306205][ T2304] asix: probe of 2-1:0.0 failed with error -71 [ 123.319621][ T2304] usb 2-1: USB disconnect, device number 2 [ 123.718426][ T4876] loop4: detected capacity change from 0 to 8192 [ 124.360580][ T4891] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 124.360580][ T4891] The task syz.2.172 (4891) triggered the difference, watch for misbehavior. [ 124.474350][ T4876] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 124.503038][ T4876] UDF-fs: Scanning with blocksize 512 failed [ 124.518683][ T4876] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 124.556835][ T4876] UDF-fs: Scanning with blocksize 1024 failed [ 124.570973][ T4876] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 124.584358][ T4876] UDF-fs: Scanning with blocksize 2048 failed [ 124.605310][ T4876] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.165382][ T4908] loop2: detected capacity change from 0 to 1024 [ 125.267990][ T4908] EXT4-fs (loop2): Unrecognized mount option "euid=00000000000000000000" or missing value [ 126.069140][ T4916] rtc_cmos 00:00: Alarms can be up to one day in the future [ 127.113549][ T4923] ufs: You didn't specify the type of your ufs filesystem [ 127.113549][ T4923] [ 127.113549][ T4923] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 127.113549][ T4923] [ 127.113549][ T4923] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 127.144450][ T4923] ufs: ufstype=old is supported read-only [ 127.150447][ T4923] blk_update_request: I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.993582][ T4174] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 129.738159][ T4956] loop3: detected capacity change from 0 to 8192 [ 129.848691][ T4956] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 129.857025][ T4956] UDF-fs: Scanning with blocksize 512 failed [ 129.875762][ T4956] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 129.885139][ T4956] UDF-fs: Scanning with blocksize 1024 failed [ 129.903184][ T4298] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 129.917491][ T4956] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 129.926436][ T4956] UDF-fs: Scanning with blocksize 2048 failed [ 129.933038][ T4299] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 129.951640][ T4956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.173724][ T4174] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 130.683223][ T4298] usb 2-1: Using ep0 maxpacket: 8 [ 130.707142][ T4174] usb 3-1: config 0 has no interface number 0 [ 130.714528][ T4174] usb 3-1: config 0 interface 41 has no altsetting 0 [ 130.963591][ T4298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 130.983142][ T4298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.995039][ T4298] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.005044][ T4174] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 131.006002][ T4298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 131.019788][ T4174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.032046][ T4174] usb 3-1: Product: syz [ 131.037747][ T4174] usb 3-1: Manufacturer: syz [ 131.042421][ T4174] usb 3-1: SerialNumber: syz [ 131.043379][ T4299] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 131.056374][ T4174] usb 3-1: config 0 descriptor?? [ 131.071487][ T4299] usb 1-1: config 0 has no interface number 0 [ 131.081632][ T4242] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 131.092107][ T4298] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 131.108641][ T4299] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 131.120481][ T4298] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 131.133241][ T4299] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 131.145578][ T4298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.153991][ T4299] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 131.164256][ T4299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.174703][ T4298] usb 2-1: config 0 descriptor?? [ 131.190889][ T4299] usb 1-1: config 0 descriptor?? [ 131.214010][ T4954] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 131.233699][ T4197] Bluetooth: hci5: urb ffff888022387300 submission failed (90) [ 131.246121][ T4299] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 131.439850][ T4299] usb 2-1: USB disconnect, device number 3 [ 131.453126][ T4242] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 131.462220][ T4242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.519517][ T4298] usb 1-1: USB disconnect, device number 2 [ 131.520877][ T4941] udc-core: couldn't find an available UDC or it's busy [ 131.540236][ T4242] usb 5-1: config 0 descriptor?? [ 131.541973][ T4941] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 131.605116][ T4242] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 131.803414][ T4174] CoreChips: probe of 3-1:0.41 failed with error -71 [ 131.823570][ T4174] usb 3-1: USB disconnect, device number 3 [ 131.833201][ T4242] gp8psk: usb in 128 operation failed. [ 132.093239][ T4242] gp8psk: usb in 146 operation failed. [ 132.099310][ T4242] gp8psk: failed to get FW version [ 132.770092][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.776581][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.791585][ T4242] gp8psk: usb in 149 operation failed. [ 132.802580][ T4242] gp8psk: failed to get FPGA version [ 132.823255][ T4242] gp8psk: usb in 138 operation failed. [ 132.833090][ T4242] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 132.873487][ T4242] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 132.888490][ T4242] usb 5-1: media controller created [ 132.981526][ T4242] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.026373][ T4989] device syzkaller1 entered promiscuous mode [ 133.095295][ T4242] gp8psk_fe: Frontend attached [ 133.108923][ T4242] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 133.135804][ T4242] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 133.343034][ T4242] gp8psk: usb in 138 operation failed. [ 133.348763][ T4242] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 133.421708][ T4242] gp8psk: found Genpix USB device pID = 203 (hex) [ 133.457914][ T4242] usb 5-1: USB disconnect, device number 2 [ 133.648693][ T4242] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 133.699215][ T5008] device syzkaller1 entered promiscuous mode [ 133.722279][ T5008] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 41 [ 134.459869][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801e656c00: rx timeout, send abort [ 134.470472][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88801e656c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 135.217083][ T5035] loop3: detected capacity change from 0 to 1024 [ 135.482943][ T5035] EXT4-fs (loop3): Unrecognized mount option "euid=00000000000000000000" or missing value [ 135.543357][ T21] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 136.113180][ T21] usb 1-1: config 252 has an invalid interface number: 95 but max is 0 [ 136.123905][ T21] usb 1-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 136.332823][ T21] usb 1-1: config 252 has no interface number 0 [ 136.339959][ T21] usb 1-1: config 252 interface 95 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 136.351510][ T21] usb 1-1: config 252 interface 95 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 136.363666][ T21] usb 1-1: config 252 interface 95 altsetting 4 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 136.377250][ T21] usb 1-1: config 252 interface 95 has no altsetting 0 [ 136.423069][ T4242] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 136.837583][ T4242] usb 2-1: Using ep0 maxpacket: 8 [ 136.965461][ T4242] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 136.980870][ T4242] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 137.007081][ T4242] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.050815][ T5056] capability: warning: `syz.3.226' uses 32-bit capabilities (legacy support in use) [ 137.177320][ T4242] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 137.207420][ T4242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.222465][ T4242] usb 2-1: Product: syz [ 137.227155][ T4242] usb 2-1: Manufacturer: syz [ 137.231785][ T4242] usb 2-1: SerialNumber: syz [ 137.313259][ T21] usb 1-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=c6.10 [ 137.322362][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.332166][ T21] usb 1-1: Product: syz [ 137.337067][ T21] usb 1-1: Manufacturer: syz [ 137.341705][ T21] usb 1-1: SerialNumber: syz [ 137.384822][ T5037] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 137.406618][ T5037] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 137.466854][ T5069] netlink: 20 bytes leftover after parsing attributes in process `syz.4.228'. [ 137.653287][ T5041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'. [ 137.878125][ T21] HFC-S_USB: probe of 1-1:252.95 failed with error -5 [ 137.979645][ T21] usb 1-1: USB disconnect, device number 3 [ 138.253348][ T4242] usb 2-1: 0:2 : does not exist [ 138.284001][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 138.313966][ T4242] usb 2-1: USB disconnect, device number 4 [ 138.337874][ T4297] udevd[4297]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.523525][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 138.643218][ T7] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 138.651544][ T7] usb 3-1: config 0 has no interface number 0 [ 138.813752][ T7] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 138.849554][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.866933][ T7] usb 3-1: Product: syz [ 138.871747][ T7] usb 3-1: Manufacturer: syz [ 138.878795][ T7] usb 3-1: SerialNumber: syz [ 138.898198][ T7] usb 3-1: config 0 descriptor?? [ 138.903606][ T4242] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 138.931010][ T5089] netlink: 88 bytes leftover after parsing attributes in process `syz.3.236'. [ 138.943065][ T21] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 138.956409][ T7] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 138.984757][ T7] usb 3-1: selecting invalid altsetting 1 [ 139.001535][ T7] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 139.048814][ T7] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 139.061061][ T7] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 139.072232][ T7] usb 3-1: media controller created [ 139.098120][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.142949][ T4242] usb 2-1: Using ep0 maxpacket: 32 [ 139.283109][ T4242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.303003][ T4242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.314548][ T4242] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 139.324175][ T4242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.347239][ T4242] usb 2-1: config 0 descriptor?? [ 139.388642][ T21] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 139.399112][ T21] usb 1-1: config 0 has no interface number 0 [ 139.418771][ T21] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 139.449779][ T21] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 139.477756][ T21] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 139.500567][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.530012][ T21] usb 1-1: config 0 descriptor?? [ 139.573494][ T5084] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 139.613788][ T21] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 139.836741][ T4242] ft260 0003:0403:6030.0001: unknown main item tag 0x7 [ 139.839558][ T21] usb 1-1: USB disconnect, device number 4 [ 139.861716][ T4242] ft260 0003:0403:6030.0001: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 140.110073][ T4242] ft260 0003:0403:6030.0001: chip code: 6424 8183 [ 140.215791][ T5065] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 140.487829][ T2304] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.533153][ T7] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 140.542212][ T7] zl10353_read_register: readreg error (reg=127, ret==-71) [ 140.577834][ T7] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 140.632755][ T7] usb 3-1: USB disconnect, device number 4 [ 140.763414][ T4242] ft260 0003:0403:6030.0001: failed to reset I2C controller: -71 [ 140.793407][ T4242] usb 2-1: USB disconnect, device number 5 [ 140.863191][ T2304] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.892683][ T2304] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 140.944178][ T2304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.947966][ T5101] fido_id[5101]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 140.964972][ T2304] usb 4-1: config 0 descriptor?? [ 140.976785][ T5105] tmpfs: Unknown parameter 'usrquota' [ 140.987517][ T5103] binder: 5102:5103 unknown command 1074553619 [ 140.997762][ T5103] binder: 5102:5103 ioctl c0306201 200000004a40 returned -22 [ 141.039532][ T2304] pwc: Askey VC010 type 2 USB webcam detected. [ 142.081998][ T2304] pwc: recv_control_msg error -32 req 02 val 2b00 [ 142.123307][ T2304] pwc: recv_control_msg error -32 req 02 val 2700 [ 142.174201][ T2304] pwc: recv_control_msg error -32 req 02 val 2c00 [ 142.215508][ T2304] pwc: recv_control_msg error -32 req 04 val 1000 [ 142.254359][ T5120] block device autoloading is deprecated and will be removed. [ 142.293122][ T2304] pwc: recv_control_msg error -32 req 04 val 1300 [ 142.333019][ T2304] pwc: recv_control_msg error -32 req 04 val 1400 [ 142.373797][ T2304] pwc: recv_control_msg error -32 req 02 val 2000 [ 142.426404][ T2304] pwc: recv_control_msg error -32 req 02 val 2100 [ 142.486443][ T2304] pwc: recv_control_msg error -32 req 04 val 1500 [ 142.553120][ T2304] pwc: recv_control_msg error -32 req 02 val 2500 [ 142.963823][ T5138] ufs: You didn't specify the type of your ufs filesystem [ 142.963823][ T5138] [ 142.963823][ T5138] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 142.963823][ T5138] [ 142.963823][ T5138] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 142.994966][ T5138] ufs: ufstype=old is supported read-only [ 143.002123][ T5138] blk_update_request: I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.072242][ T2304] pwc: recv_control_msg error -32 req 02 val 2400 [ 143.673184][ T2304] pwc: recv_control_msg error -32 req 02 val 2600 [ 143.771751][ T2304] pwc: recv_control_msg error -32 req 02 val 2900 [ 143.853074][ T2304] pwc: recv_control_msg error -32 req 02 val 2800 [ 145.012169][ T2304] pwc: recv_control_msg error -71 req 04 val 1200 [ 145.021464][ T2304] pwc: Registered as video103. [ 145.028003][ T2304] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 145.045027][ T2304] usb 4-1: USB disconnect, device number 5 [ 145.978330][ T21] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 146.416555][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 146.851903][ T4249] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 147.069114][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.093078][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.132628][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 147.161801][ T21] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 147.191485][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.229599][ T4249] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.242066][ T21] usb 2-1: config 0 descriptor?? [ 147.248717][ T4249] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 147.267953][ T4249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.291354][ T4249] usb 1-1: config 0 descriptor?? [ 147.527632][ T5194] ufs: You didn't specify the type of your ufs filesystem [ 147.527632][ T5194] [ 147.527632][ T5194] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 147.527632][ T5194] [ 147.527632][ T5194] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 147.558595][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.565914][ T5194] ufs: ufstype=old is supported read-only [ 147.572230][ T5194] blk_update_request: I/O error, dev loop5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.723880][ T21] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0002/input/input6 [ 147.917348][ T21] appleir 0003:05AC:8241.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 147.944222][ T4878] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 148.034165][ T21] usb 2-1: USB disconnect, device number 6 [ 148.171747][ T5200] fido_id[5200]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 148.213038][ T4249] usb 1-1: string descriptor 0 read error: -71 [ 148.233126][ T4249] uclogic 0003:5543:006E.0003: failed retrieving string descriptor #200: -71 [ 148.249283][ T4249] uclogic 0003:5543:006E.0003: failed retrieving pen parameters: -71 [ 148.260912][ T4249] uclogic 0003:5543:006E.0003: failed probing pen v2 parameters: -71 [ 148.271582][ T4249] uclogic 0003:5543:006E.0003: failed probing parameters: -71 [ 148.282770][ T4249] uclogic: probe of 0003:5543:006E.0003 failed with error -71 [ 148.298251][ T4197] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 148.301687][ T4249] usb 1-1: USB disconnect, device number 5 [ 148.309001][ T4197] CPU: 1 PID: 4197 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 148.321746][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 148.332046][ T4197] Workqueue: hci3 hci_rx_work [ 148.336785][ T4197] Call Trace: [ 148.340088][ T4197] [ 148.343042][ T4197] dump_stack_lvl+0x168/0x230 [ 148.347758][ T4197] ? show_regs_print_info+0x20/0x20 [ 148.353000][ T4197] ? load_image+0x3b0/0x3b0 [ 148.357602][ T4197] sysfs_create_dir_ns+0x252/0x280 [ 148.362852][ T4197] ? __lock_acquire+0x7c60/0x7c60 [ 148.367936][ T4197] ? sysfs_warn_dup+0xa0/0xa0 [ 148.372660][ T4197] ? le_conn_complete_evt+0xcbc/0x1590 [ 148.378159][ T4197] ? hci_event_packet+0xe05/0x12f0 [ 148.383308][ T4197] ? process_one_work+0x863/0x1000 [ 148.388454][ T4197] ? do_raw_spin_unlock+0x11d/0x230 [ 148.393673][ T4197] kobject_add_internal+0x662/0xd00 [ 148.398914][ T4197] kobject_add+0x152/0x210 [ 148.403372][ T4197] ? kobject_init+0x1d0/0x1d0 [ 148.408080][ T4197] ? klist_children_get+0x50/0x50 [ 148.413115][ T4197] ? get_device_parent+0x121/0x3f0 [ 148.418254][ T4197] device_add+0x483/0xfb0 [ 148.422727][ T4197] hci_conn_add_sysfs+0xd1/0x1e0 [ 148.427676][ T4197] le_conn_complete_evt+0xcbc/0x1590 [ 148.432998][ T4197] ? cs_le_create_conn+0x5e0/0x5e0 [ 148.438196][ T4197] ? __mutex_trylock_common+0x14f/0x250 [ 148.443854][ T4197] hci_le_meta_evt+0x289/0x3b80 [ 148.449031][ T4197] ? hci_event_packet+0x36d/0x12f0 [ 148.454175][ T4197] ? hci_event_packet+0x2e2/0x12f0 [ 148.459412][ T4197] ? __lock_acquire+0x7c60/0x7c60 [ 148.464579][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 148.470918][ T4197] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 148.476746][ T4197] ? mark_lock+0x94/0x320 [ 148.481121][ T4197] ? mutex_unlock+0x10/0x10 [ 148.485745][ T4197] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 148.491942][ T4197] ? lock_chain_count+0x20/0x20 [ 148.496825][ T4197] ? __rwlock_init+0x140/0x140 [ 148.501753][ T4197] hci_event_packet+0xe05/0x12f0 [ 148.506736][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 148.511983][ T4197] ? rcu_lock_release+0x20/0x20 [ 148.516868][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 148.522188][ T4197] hci_rx_work+0x255/0xa10 [ 148.526631][ T4197] process_one_work+0x863/0x1000 [ 148.531608][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 148.537324][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 148.542759][ T4197] ? _raw_spin_lock_irq+0xab/0xe0 [ 148.547911][ T4197] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 148.553320][ T4197] ? wq_worker_running+0x97/0x170 [ 148.558382][ T4197] worker_thread+0xaa8/0x12a0 [ 148.563123][ T4197] kthread+0x436/0x520 [ 148.567314][ T4197] ? rcu_lock_release+0x20/0x20 [ 148.572194][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 148.576826][ T4197] ret_from_fork+0x1f/0x30 [ 148.581297][ T4197] [ 148.584405][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.603042][ T4197] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 148.617772][ T4197] Bluetooth: hci3: failed to register connection device [ 148.643265][ T4878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.673052][ T4878] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 148.702711][ T4878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.739128][ T4878] usb 5-1: config 0 descriptor?? [ 149.370566][ T4878] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 149.410099][ T4878] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0004/input/input7 [ 150.131330][ T4878] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 150.344262][ T5229] capability: warning: `syz.2.282' uses deprecated v2 capabilities in a way that may be insecure [ 151.382478][ T4252] usb 5-1: USB disconnect, device number 3 [ 151.476739][ T5233] fido_id[5233]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 151.723116][ T4235] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 151.958800][ T4252] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 151.993596][ T4235] usb 3-1: Using ep0 maxpacket: 16 [ 152.153813][ T4235] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.238745][ T4235] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.248608][ T4252] usb 5-1: Using ep0 maxpacket: 16 [ 152.534064][ T4252] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 152.672131][ T4252] usb 5-1: config 0 has no interface number 0 [ 152.755461][ T4252] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 152.767192][ T4235] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.782904][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.803006][ T4252] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 152.828548][ T4235] usb 3-1: Product: syz [ 152.832766][ T4235] usb 3-1: Manufacturer: syz [ 152.842938][ T4235] usb 3-1: SerialNumber: syz [ 152.958648][ T4252] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 152.978404][ T4252] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 153.003031][ T4252] usb 5-1: Product: syz [ 153.007266][ T4252] usb 5-1: SerialNumber: syz [ 153.032833][ T4252] usb 5-1: config 0 descriptor?? [ 153.096160][ T4252] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 153.126846][ T4252] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input8 [ 153.213145][ T4235] usb 3-1: 0:2 : does not exist [ 153.259059][ T4235] usb 3-1: USB disconnect, device number 5 [ 153.407012][ T4252] usb 5-1: USB disconnect, device number 4 [ 153.413480][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 153.413642][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 153.469766][ T4252] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 153.587216][ T4297] udevd[4297]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.630285][ T5271] ufs: You didn't specify the type of your ufs filesystem [ 153.630285][ T5271] [ 153.630285][ T5271] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 153.630285][ T5271] [ 153.630285][ T5271] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 154.249443][ T5271] ufs: ufstype=old is supported read-only [ 154.290332][ T5271] blk_update_request: I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.513002][ T4174] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 154.922944][ T4174] usb 5-1: Using ep0 maxpacket: 32 [ 155.134883][ T4174] usb 5-1: unable to get BOS descriptor or descriptor too short [ 155.334271][ T4174] usb 5-1: config 129 has an invalid interface number: 180 but max is 0 [ 155.461723][ T4174] usb 5-1: config 129 has no interface number 0 [ 155.640742][ T4174] usb 5-1: config 129 interface 180 has no altsetting 0 [ 155.863187][ T4174] usb 5-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=36.2d [ 155.882607][ T4174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.911018][ T4174] usb 5-1: Product: syz [ 155.923115][ T4174] usb 5-1: Manufacturer: syz [ 155.938201][ T4174] usb 5-1: SerialNumber: syz [ 155.983384][ T4252] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 156.873507][ T4174] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 156.881593][ T4174] dvb-usb: bulk message failed: -22 (4/0) [ 156.979426][ T4174] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 156.990118][ T4174] dvb-usb: bulk message failed: -22 (5/0) [ 156.996231][ T4174] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 157.009263][ T4174] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 157.037745][ T4174] dvbdev: DVB: registering new adapter (Pinnacle 400e DVB-S USB2.0) [ 157.053240][ T4252] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.073145][ T4174] usb 5-1: media controller created [ 157.078652][ T4252] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 157.159882][ T4174] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.169448][ T4252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.180063][ T4252] usb 1-1: config 0 descriptor?? [ 157.209069][ T4174] ttusb2: set interface to alts=3 failed [ 157.305219][ T4252] pwc: Askey VC010 type 2 USB webcam detected. [ 157.551470][ T4174] DVB: Unable to find symbol tda10086_attach() [ 157.558719][ T4174] dvb-usb: no frontend was attached by 'Pinnacle 400e DVB-S USB2.0' [ 157.603144][ T4174] dvb-usb: bulk message failed: -22 (4/0) [ 157.608934][ T4174] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 157.650433][ T4174] dvb-usb: bulk message failed: -22 (5/0) [ 157.727042][ T4174] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 157.813367][ T4252] pwc: recv_control_msg error -32 req 02 val 2b00 [ 157.873425][ T4252] pwc: recv_control_msg error -32 req 02 val 2700 [ 157.900376][ T4174] dvb-usb: Pinnacle 400e DVB-S USB2.0 successfully initialized and connected. [ 157.977595][ T4252] pwc: recv_control_msg error -32 req 02 val 2c00 [ 158.145616][ T4252] pwc: recv_control_msg error -32 req 04 val 1000 [ 158.325000][ T4174] usb 5-1: USB disconnect, device number 5 [ 158.341244][ T5336] loop1: detected capacity change from 0 to 8192 [ 158.393140][ T4252] pwc: recv_control_msg error -32 req 04 val 1300 [ 158.438354][ T5336] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 158.450500][ T4252] pwc: recv_control_msg error -32 req 04 val 1400 [ 158.482262][ T4174] dvb-usb: Pinnacle 400e DVB-S USB2.0 successfully deinitialized and disconnected. [ 158.493092][ T5336] UDF-fs: Scanning with blocksize 512 failed [ 158.500147][ T5336] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 158.514684][ T4252] pwc: recv_control_msg error -32 req 02 val 2000 [ 158.566106][ T5336] UDF-fs: Scanning with blocksize 1024 failed [ 158.579062][ T5336] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 158.583121][ T4252] pwc: recv_control_msg error -32 req 02 val 2100 [ 158.597882][ T5336] UDF-fs: Scanning with blocksize 2048 failed [ 158.633171][ T4252] pwc: recv_control_msg error -32 req 04 val 1500 [ 158.645095][ T5336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.915799][ T4252] pwc: recv_control_msg error -71 req 02 val 2400 [ 159.481345][ T4252] pwc: recv_control_msg error -71 req 02 val 2600 [ 159.487970][ T4235] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 159.513196][ T4252] pwc: recv_control_msg error -71 req 02 val 2900 [ 159.543113][ T4252] pwc: recv_control_msg error -71 req 02 val 2800 [ 159.573357][ T4252] pwc: recv_control_msg error -71 req 04 val 1100 [ 159.603019][ T4252] pwc: recv_control_msg error -71 req 04 val 1200 [ 159.614727][ T4252] pwc: Registered as video103. [ 159.620684][ T4252] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 159.795391][ T4252] usb 1-1: USB disconnect, device number 6 [ 159.832977][ T4235] usb 3-1: Using ep0 maxpacket: 32 [ 159.843803][ T5356] ufs: You didn't specify the type of your ufs filesystem [ 159.843803][ T5356] [ 159.843803][ T5356] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 159.843803][ T5356] [ 159.843803][ T5356] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 160.595974][ T5366] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 160.618215][ T5356] ufs: ufstype=old is supported read-only [ 160.621269][ T4174] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 160.668404][ T5356] blk_update_request: I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.733061][ T4235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.753156][ T4235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.763741][ T4235] usb 3-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 160.778655][ T4235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.793866][ T4235] usb 3-1: config 0 descriptor?? [ 160.910310][ T4174] usb 5-1: Using ep0 maxpacket: 16 [ 160.970977][ T5377] overlayfs: failed to get index nlink (file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa, err=-61) [ 161.088488][ T4174] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 161.103058][ T4174] usb 5-1: config 0 has no interface number 0 [ 161.109212][ T4174] usb 5-1: config 0 interface 48 has no altsetting 0 [ 161.319266][ T4235] betop 0003:20BC:5500.0005: report_id 0 is invalid [ 161.326387][ T4235] betop 0003:20BC:5500.0005: item 0 0 1 8 parsing failed [ 161.334794][ T4235] betop 0003:20BC:5500.0005: parse failed [ 161.340580][ T4235] betop: probe of 0003:20BC:5500.0005 failed with error -22 [ 161.369058][ T5384] loop3: detected capacity change from 0 to 1024 [ 161.503862][ T4174] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 161.513499][ T4235] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 161.524136][ T5384] EXT4-fs (loop3): Unrecognized mount option "euid=00000000000000000000" or missing value [ 161.615387][ T4174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.705160][ T4174] usb 5-1: Product: syz [ 161.820939][ T4174] usb 5-1: Manufacturer: syz [ 161.906277][ T4174] usb 5-1: SerialNumber: syz [ 162.056327][ T4235] usb 2-1: config 0 has no interfaces? [ 162.094591][ T4174] usb 5-1: config 0 descriptor?? [ 162.104489][ T4252] usb 3-1: USB disconnect, device number 6 [ 162.151990][ T4174] usb 5-1: can't set config #0, error -71 [ 162.216784][ T4174] usb 5-1: USB disconnect, device number 6 [ 162.245970][ T4235] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.265540][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 162.302909][ T4235] usb 2-1: Product: syz [ 162.307411][ T4235] usb 2-1: Manufacturer: syz [ 162.329154][ T4235] usb 2-1: SerialNumber: syz [ 162.495425][ T5391] loop0: detected capacity change from 0 to 8192 [ 162.509786][ T4235] usb 2-1: config 0 descriptor?? [ 162.798847][ T5391] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 162.865009][ T5391] UDF-fs: Scanning with blocksize 512 failed [ 162.935671][ T5391] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 162.973731][ T5391] UDF-fs: Scanning with blocksize 1024 failed [ 163.042333][ T5391] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 163.065165][ T2304] usb 2-1: USB disconnect, device number 7 [ 163.073749][ T5391] UDF-fs: Scanning with blocksize 2048 failed [ 163.166712][ T5391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.473076][ T4242] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 163.883643][ T4242] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 163.906494][ T4242] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 163.953008][ T4242] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 163.990764][ T4242] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 164.019748][ T4252] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 164.027615][ T4242] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 164.173213][ T4242] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 164.189599][ T4242] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 164.197898][ T4242] usb 4-1: Product: syz [ 164.202250][ T4242] usb 4-1: Manufacturer: syz [ 164.213876][ T2304] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 164.276248][ T4242] cdc_wdm 4-1:1.0: skipping garbage [ 164.282096][ T4242] cdc_wdm 4-1:1.0: skipping garbage [ 164.292974][ T4252] usb 3-1: Using ep0 maxpacket: 16 [ 164.308455][ T4242] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 164.326030][ T4242] cdc_wdm 4-1:1.0: Unknown control protocol [ 164.422325][ T5410] ptrace attach of "./syz-executor exec"[4183] was attempted by "./syz-executor exec"[5410] [ 164.453331][ T4252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 164.493617][ T4878] usb 4-1: USB disconnect, device number 6 [ 164.583082][ T2304] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 164.643889][ T4252] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 164.654647][ T4252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.662681][ T4252] usb 3-1: Product: syz [ 164.667548][ T4252] usb 3-1: Manufacturer: syz [ 164.672175][ T4252] usb 3-1: SerialNumber: syz [ 164.686857][ T4252] usb 3-1: config 0 descriptor?? [ 164.726696][ T4252] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 164.744804][ T2304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.755480][ T2304] usb 2-1: config 0 descriptor?? [ 164.764609][ T4252] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 165.373091][ T4252] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 165.397725][ T5418] ufs: You didn't specify the type of your ufs filesystem [ 165.397725][ T5418] [ 165.397725][ T5418] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 165.397725][ T5418] [ 165.397725][ T5418] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 165.428779][ T5418] ufs: ufstype=old is supported read-only [ 165.434943][ T5418] blk_update_request: I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.887716][ T4299] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 165.911790][ T4299] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 166.083096][ T4878] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 166.156562][ T4252] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 166.176624][ T4252] em28xx 3-1:0.0: board has no eeprom [ 166.302985][ T4252] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 166.320856][ T4252] em28xx 3-1:0.0: dvb set to bulk mode. [ 166.327071][ T4878] usb 4-1: Using ep0 maxpacket: 32 [ 166.381018][ T4252] usb 3-1: USB disconnect, device number 7 [ 166.398729][ T4252] em28xx 3-1:0.0: Disconnecting em28xx [ 166.417666][ T4174] em28xx 3-1:0.0: Binding DVB extension [ 166.453725][ T4878] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 166.461912][ T4878] usb 4-1: config 0 has no interface number 0 [ 166.473032][ T2304] pegasus 2-1:0.0: can't reset MAC [ 166.478343][ T2304] pegasus: probe of 2-1:0.0 failed with error -5 [ 166.490319][ T4878] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.507419][ T4174] em28xx 3-1:0.0: Registering input extension [ 166.512588][ T2304] usb 2-1: USB disconnect, device number 8 [ 166.530654][ T4252] em28xx 3-1:0.0: Closing input extension [ 166.541470][ T4878] usb 4-1: config 0 interface 85 has no altsetting 0 [ 166.589128][ T4252] em28xx 3-1:0.0: Freeing device [ 166.733179][ T4878] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 166.762807][ T4878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.773153][ T4878] usb 4-1: Product: syz [ 166.777362][ T4878] usb 4-1: Manufacturer: syz [ 166.781980][ T4878] usb 4-1: SerialNumber: syz [ 166.839269][ T4878] usb 4-1: config 0 descriptor?? [ 167.263050][ T2304] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 167.663389][ T2304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 167.681167][ T2304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.691863][ T2304] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 167.715393][ T2304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.785590][ T2304] usb 1-1: config 0 descriptor?? [ 167.812366][ T4878] appletouch 4-1:0.85: Geyser mode initialized. [ 167.823146][ T4878] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input11 [ 167.873016][ T4299] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 167.950535][ T4878] usb 4-1: USB disconnect, device number 7 [ 167.987434][ T4878] appletouch 4-1:0.85: input: appletouch disconnected [ 168.295764][ T2304] elan 0003:04F3:0755.0007: failed to start in urb: -90 [ 168.318283][ T2304] elan 0003:04F3:0755.0007: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 168.393235][ T4299] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 168.463472][ T4299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.490511][ T4299] usb 5-1: Product: syz [ 168.506419][ T2304] usb 1-1: USB disconnect, device number 7 [ 169.009323][ T4299] usb 5-1: Manufacturer: syz [ 169.242615][ T4299] usb 5-1: SerialNumber: syz [ 169.296634][ T4299] usb 5-1: config 0 descriptor?? [ 169.451875][ T5466] fido_id[5466]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 169.583405][ T4299] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 169.916488][ T5473] ufs: You didn't specify the type of your ufs filesystem [ 169.916488][ T5473] [ 169.916488][ T5473] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 169.916488][ T5473] [ 169.916488][ T5473] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 169.948026][ T5473] ufs: ufstype=old is supported read-only [ 169.954063][ T5473] blk_update_request: I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.383141][ T4174] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 171.772946][ T4174] usb 4-1: Using ep0 maxpacket: 16 [ 171.777152][ T4299] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 171.848678][ T5491] ufs: You didn't specify the type of your ufs filesystem [ 171.848678][ T5491] [ 171.848678][ T5491] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 171.848678][ T5491] [ 171.848678][ T5491] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 171.879727][ T5491] ufs: ufstype=old is supported read-only [ 171.886568][ T5491] blk_update_request: I/O error, dev loop5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.974262][ T4174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.010525][ T4174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.071725][ T4174] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 172.143407][ T4174] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 172.190990][ T4174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.544584][ T4174] usb 4-1: config 0 descriptor?? [ 172.700132][ T4299] usb 5-1: USB disconnect, device number 7 [ 173.476236][ T4174] microsoft 0003:045E:07DA.0008: item 0 4 0 8 parsing failed [ 173.476722][ T4174] microsoft 0003:045E:07DA.0008: parse failed [ 173.476754][ T4174] microsoft: probe of 0003:045E:07DA.0008 failed with error -22 [ 173.654125][ T4299] usb 4-1: USB disconnect, device number 8 [ 173.708811][ T5498] mkiss: ax0: crc mode is auto. [ 175.140255][ T5532] ufs: You didn't specify the type of your ufs filesystem [ 175.140255][ T5532] [ 175.140255][ T5532] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 175.140255][ T5532] [ 175.140255][ T5532] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 175.171835][ T5532] ufs: ufstype=old is supported read-only [ 175.177868][ T5532] blk_update_request: I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 177.256167][ T5543] ufs: You didn't specify the type of your ufs filesystem [ 177.256167][ T5543] [ 177.256167][ T5543] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 177.256167][ T5543] [ 177.256167][ T5543] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 177.287266][ T5543] ufs: ufstype=old is supported read-only [ 177.293276][ T5543] blk_update_request: I/O error, dev loop5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.415522][ T5560] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 178.429247][ T5560] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 178.459347][ T5560] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 178.743139][ T4878] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 178.767904][ T4252] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 178.872957][ T5474] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.043019][ T4252] usb 5-1: Using ep0 maxpacket: 8 [ 179.173350][ T4878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.193222][ T4252] usb 5-1: config 3 has an invalid interface number: 173 but max is 0 [ 179.213349][ T4252] usb 5-1: config 3 has no interface number 0 [ 179.233303][ T4878] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 179.251107][ T4252] usb 5-1: config 3 interface 173 has no altsetting 0 [ 179.274836][ T4878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.293345][ T5474] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 179.302462][ T5474] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.323877][ T4878] usb 4-1: config 0 descriptor?? [ 179.371325][ T5474] usb 3-1: config 0 descriptor?? [ 179.444068][ T4252] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=5a.0b [ 179.445429][ T5474] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 179.478514][ T4252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.504552][ T4252] usb 5-1: Product: syz [ 179.523158][ T4252] usb 5-1: Manufacturer: syz [ 179.527941][ T4252] usb 5-1: SerialNumber: syz [ 179.653163][ T5474] gspca_sn9c2028: read1 error -32 [ 179.693109][ T5474] gspca_sn9c2028: read1 error -32 [ 179.835656][ T4878] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 180.072685][ T4878] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0009/input/input12 [ 180.148323][ T4252] usb 5-1: selecting invalid altsetting 3 [ 180.206568][ T4252] comedi comedi5: could not set alternate setting 3 in high speed [ 180.321151][ T4252] usbdux 5-1:3.173: driver 'usbdux' failed to auto-configure device. [ 180.560042][ T2304] usb 3-1: USB disconnect, device number 8 [ 180.627157][ T4252] usbdux: probe of 5-1:3.173 failed with error -22 [ 180.639509][ T4878] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 180.675574][ T4252] usb 5-1: USB disconnect, device number 8 [ 181.799117][ T2304] usb 4-1: USB disconnect, device number 9 [ 182.163065][ T4252] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 182.413072][ T4252] usb 5-1: Using ep0 maxpacket: 16 [ 182.557202][ T4252] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 182.619761][ T4252] usb 5-1: config 0 has no interface number 0 [ 182.713485][ T4252] usb 5-1: config 0 interface 48 has no altsetting 0 [ 183.014648][ T4252] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 183.015268][ T5474] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 183.032187][ T5474] Bluetooth: hci0: Injecting HCI hardware error event [ 183.040755][ T4200] Bluetooth: hci0: hardware error 0x00 [ 183.075451][ T4252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.232512][ T4252] usb 5-1: Product: syz [ 183.237046][ T4252] usb 5-1: Manufacturer: syz [ 183.241753][ T4252] usb 5-1: SerialNumber: syz [ 183.267145][ T4252] usb 5-1: config 0 descriptor?? [ 184.313743][ T5592] udc-core: couldn't find an available UDC or it's busy [ 184.320748][ T5592] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 184.491193][ T4197] Bluetooth: hci2: Unknown advertising packet type: 0xd49b [ 184.491261][ T4197] Bluetooth: hci2: Unknown advertising packet type: 0x1bb5 [ 184.491844][ T5613] usb 5-1: USB disconnect, device number 9 [ 184.499530][ T4197] Bluetooth: hci2: Unknown advertising packet type: 0x91 [ 184.513682][ T4197] ================================================================== [ 184.529237][ T4197] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12db/0x3b80 [ 184.537185][ T4197] Read of size 1 at addr ffff88807e814c03 by task kworker/u5:5/4197 [ 184.545382][ T4197] [ 184.547711][ T4197] CPU: 0 PID: 4197 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 184.555255][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 184.565445][ T4197] Workqueue: hci2 hci_rx_work [ 184.570161][ T4197] Call Trace: [ 184.573443][ T4197] [ 184.576373][ T4197] dump_stack_lvl+0x168/0x230 [ 184.581091][ T4197] ? show_regs_print_info+0x20/0x20 [ 184.586299][ T4197] ? load_image+0x3b0/0x3b0 [ 184.590809][ T4197] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 184.596189][ T4197] print_address_description+0x60/0x2d0 [ 184.601762][ T4197] ? hci_le_meta_evt+0x12db/0x3b80 [ 184.606878][ T4197] kasan_report+0xdf/0x130 [ 184.611309][ T4197] ? hci_le_meta_evt+0x12db/0x3b80 [ 184.616425][ T4197] hci_le_meta_evt+0x12db/0x3b80 [ 184.621371][ T4197] ? hci_event_packet+0x2b0/0x12f0 [ 184.626498][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 184.632565][ T4197] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 184.638204][ T4197] ? mark_lock+0x94/0x320 [ 184.642582][ T4197] ? mutex_unlock+0x10/0x10 [ 184.647114][ T4197] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 184.653103][ T4197] ? lock_chain_count+0x20/0x20 [ 184.657969][ T4197] ? __rwlock_init+0x140/0x140 [ 184.662737][ T4197] hci_event_packet+0xe05/0x12f0 [ 184.667792][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 184.673018][ T4197] ? rcu_lock_release+0x20/0x20 [ 184.677886][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 184.683102][ T4197] hci_rx_work+0x255/0xa10 [ 184.687549][ T4197] process_one_work+0x863/0x1000 [ 184.692516][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 184.698150][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 184.703444][ T4197] ? _raw_spin_lock_irq+0xab/0xe0 [ 184.708466][ T4197] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 184.713841][ T4197] ? wq_worker_running+0x97/0x170 [ 184.718866][ T4197] worker_thread+0xaa8/0x12a0 [ 184.723562][ T4197] kthread+0x436/0x520 [ 184.727640][ T4197] ? rcu_lock_release+0x20/0x20 [ 184.732617][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 184.737253][ T4197] ret_from_fork+0x1f/0x30 [ 184.741690][ T4197] [ 184.744723][ T4197] [ 184.747039][ T4197] Allocated by task 5592: [ 184.751356][ T4197] __kasan_kmalloc+0xb5/0xf0 [ 184.755945][ T4197] __alloc_skb+0x22c/0x750 [ 184.760356][ T4197] vhci_write+0xbc/0x450 [ 184.764594][ T4197] vfs_write+0x712/0xd00 [ 184.768834][ T4197] ksys_write+0x14d/0x250 [ 184.773160][ T4197] do_syscall_64+0x4c/0xa0 [ 184.777592][ T4197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.783489][ T4197] [ 184.785805][ T4197] Last potentially related work creation: [ 184.791615][ T4197] kasan_save_stack+0x35/0x60 [ 184.796290][ T4197] kasan_record_aux_stack+0xb8/0x100 [ 184.801572][ T4197] kvfree_call_rcu+0x10a/0x7c0 [ 184.806333][ T4197] neigh_periodic_work+0x407/0xc70 [ 184.811438][ T4197] process_one_work+0x863/0x1000 [ 184.816374][ T4197] worker_thread+0xaa8/0x12a0 [ 184.821045][ T4197] kthread+0x436/0x520 [ 184.825107][ T4197] ret_from_fork+0x1f/0x30 [ 184.829518][ T4197] [ 184.831834][ T4197] The buggy address belongs to the object at ffff88807e814800 [ 184.831834][ T4197] which belongs to the cache kmalloc-1k of size 1024 [ 184.845876][ T4197] The buggy address is located 3 bytes to the right of [ 184.845876][ T4197] 1024-byte region [ffff88807e814800, ffff88807e814c00) [ 184.859589][ T4197] The buggy address belongs to the page: [ 184.865224][ T4197] page:ffffea0001fa0400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e810 [ 184.875368][ T4197] head:ffffea0001fa0400 order:3 compound_mapcount:0 compound_pincount:0 [ 184.883687][ T4197] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 184.891666][ T4197] raw: 00fff00000010200 0000000000000000 0000000a00000001 ffff888016841dc0 [ 184.900332][ T4197] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 184.908906][ T4197] page dumped because: kasan: bad access detected [ 184.915316][ T4197] page_owner tracks the page as allocated [ 184.921024][ T4197] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4298, ts 75784769393, free_ts 73949484251 [ 184.939785][ T4197] get_page_from_freelist+0x1b77/0x1c60 [ 184.945335][ T4197] __alloc_pages+0x1e1/0x470 [ 184.949920][ T4197] new_slab+0xc0/0x4b0 [ 184.954004][ T4197] ___slab_alloc+0x81e/0xdf0 [ 184.958636][ T4197] __kmalloc+0x1cd/0x330 [ 184.962906][ T4197] ___neigh_create+0x6d2/0x2250 [ 184.967891][ T4197] ip6_finish_output2+0xa01/0x1500 [ 184.973025][ T4197] ndisc_send_skb+0xbea/0x14a0 [ 184.977791][ T4197] ndisc_send_ns+0x63c/0x840 [ 184.982377][ T4197] addrconf_dad_work+0xa47/0x1520 [ 184.987400][ T4197] process_one_work+0x863/0x1000 [ 184.992337][ T4197] worker_thread+0xaa8/0x12a0 [ 184.997011][ T4197] kthread+0x436/0x520 [ 185.001074][ T4197] ret_from_fork+0x1f/0x30 [ 185.005487][ T4197] page last free stack trace: [ 185.010152][ T4197] free_unref_page_prepare+0x637/0x6c0 [ 185.015782][ T4197] free_unref_page+0x94/0x280 [ 185.020458][ T4197] __unfreeze_partials+0x1a5/0x200 [ 185.025571][ T4197] put_cpu_partial+0x12d/0x190 [ 185.030349][ T4197] qlist_free_all+0x35/0x90 [ 185.034849][ T4197] kasan_quarantine_reduce+0x150/0x160 [ 185.040304][ T4197] __kasan_slab_alloc+0x2f/0xd0 [ 185.045148][ T4197] slab_post_alloc_hook+0x4c/0x380 [ 185.050252][ T4197] __kmalloc_node+0x15a/0x3b0 [ 185.054926][ T4197] __vmalloc_node_range+0x2dd/0x8b0 [ 185.060126][ T4197] dup_task_struct+0x3f5/0xb30 [ 185.064887][ T4197] copy_process+0x5b3/0x3e00 [ 185.069507][ T4197] kernel_clone+0x219/0x930 [ 185.074003][ T4197] __se_sys_clone3+0x2d5/0x360 [ 185.078760][ T4197] do_syscall_64+0x4c/0xa0 [ 185.083194][ T4197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.089095][ T4197] [ 185.091420][ T4197] Memory state around the buggy address: [ 185.097040][ T4197] ffff88807e814b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 185.105096][ T4197] ffff88807e814b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 185.113277][ T4197] >ffff88807e814c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 185.121331][ T4197] ^ [ 185.125392][ T4197] ffff88807e814c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 185.133450][ T4197] ffff88807e814d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 185.141502][ T4197] ================================================================== [ 185.149566][ T4197] Disabling lock debugging due to kernel taint [ 185.179248][ T4197] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 185.186505][ T4197] CPU: 0 PID: 4197 Comm: kworker/u5:5 Tainted: G B syzkaller #0 [ 185.195440][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 185.205500][ T4197] Workqueue: hci2 hci_rx_work [ 185.210186][ T4197] Call Trace: [ 185.213466][ T4197] [ 185.216414][ T4197] dump_stack_lvl+0x168/0x230 [ 185.221098][ T4197] ? show_regs_print_info+0x20/0x20 [ 185.226298][ T4197] ? load_image+0x3b0/0x3b0 [ 185.230813][ T4197] panic+0x2c9/0x7f0 [ 185.234718][ T4197] ? bpf_jit_dump+0xd0/0xd0 [ 185.239221][ T4197] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 185.245300][ T4197] ? _raw_spin_unlock+0x40/0x40 [ 185.250186][ T4197] ? hci_le_meta_evt+0x12db/0x3b80 [ 185.255326][ T4197] check_panic_on_warn+0x80/0xa0 [ 185.260272][ T4197] ? hci_le_meta_evt+0x12db/0x3b80 [ 185.265615][ T4197] end_report+0x6d/0xf0 [ 185.269774][ T4197] kasan_report+0x102/0x130 [ 185.274283][ T4197] ? hci_le_meta_evt+0x12db/0x3b80 [ 185.279395][ T4197] hci_le_meta_evt+0x12db/0x3b80 [ 185.284358][ T4197] ? hci_event_packet+0x2b0/0x12f0 [ 185.289474][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 185.295545][ T4197] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 185.301174][ T4197] ? mark_lock+0x94/0x320 [ 185.305499][ T4197] ? mutex_unlock+0x10/0x10 [ 185.309999][ T4197] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 185.315984][ T4197] ? lock_chain_count+0x20/0x20 [ 185.320838][ T4197] ? __rwlock_init+0x140/0x140 [ 185.325602][ T4197] hci_event_packet+0xe05/0x12f0 [ 185.330540][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 185.335740][ T4197] ? rcu_lock_release+0x20/0x20 [ 185.340598][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 185.345797][ T4197] hci_rx_work+0x255/0xa10 [ 185.350252][ T4197] process_one_work+0x863/0x1000 [ 185.355220][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 185.360852][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 185.366139][ T4197] ? _raw_spin_lock_irq+0xab/0xe0 [ 185.371161][ T4197] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 185.376529][ T4197] ? wq_worker_running+0x97/0x170 [ 185.381551][ T4197] worker_thread+0xaa8/0x12a0 [ 185.386233][ T4197] kthread+0x436/0x520 [ 185.390301][ T4197] ? rcu_lock_release+0x20/0x20 [ 185.395173][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 185.399759][ T4197] ret_from_fork+0x1f/0x30 [ 185.404183][ T4197] [ 185.407472][ T4197] Kernel Offset: disabled [ 185.411857][ T4197] Rebooting in 86400 seconds..