last executing test programs: 11.191130013s ago: executing program 0 (id=87): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4000010) r4 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x100000000000000) capset(0x0, &(0x7f00000002c0)={0x200000, 0x200000, 0x0, 0x1, 0xfffffffd, 0xfff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r5, 0x4b4b, 0x0) 9.733772683s ago: executing program 4 (id=105): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x50) 9.50396847s ago: executing program 4 (id=107): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) 8.93069874s ago: executing program 0 (id=112): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)=0xfffffffc, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r6, 0x541c, 0x0) dup(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000a000000000000bca15c502df94a2ffa631574ad06d353e0ebf19c8a5c6c78167e16be39195ffdc51157efb9cfd975e4b11ce869d3be251c8259ec13131752f3bc1e0ddc3a49f030403414216d503d0b062e4efb1409337d4d7828393df03daa734b"], &(0x7f0000000840)=""/184, 0x26, 0xb8, 0x1}, 0x28) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc) 6.366324156s ago: executing program 4 (id=119): unshare(0x26020400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) readv(r1, 0x0, 0x0) 6.239290596s ago: executing program 4 (id=120): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x2, &(0x7f00000001c0)={&(0x7f0000000140)="c94576a7c5e27e80", 0x8}) 6.056652708s ago: executing program 4 (id=121): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') getdents(r0, &(0x7f00000000c0)=""/39, 0xffc3) 6.004876829s ago: executing program 4 (id=122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 4.148636017s ago: executing program 3 (id=137): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20040000) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff803500004000638477fbac14142ce934a0a662079f4b4d2f87e56dca6aab055013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 3.918565267s ago: executing program 3 (id=140): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{}]}, @func_proto, @union={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x5f]}}, 0x0, 0x69}, 0x28) 3.73961621s ago: executing program 3 (id=143): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N,'], 0x6a) 3.533457306s ago: executing program 3 (id=147): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8003, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) 3.236488373s ago: executing program 3 (id=150): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) listen(0xffffffffffffffff, 0x5) prlimit64(0xffffffffffffffff, 0xc, 0x0, 0x0) r1 = open(0x0, 0x66842, 0x21) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, &(0x7f0000000000)) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc04c560f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x7, 0x4, 0x9, 0x3}]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 2.869307654s ago: executing program 1 (id=154): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0009000d00000000050000", 0x28}], 0x1) 2.720643676s ago: executing program 1 (id=155): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x51}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 2.651594675s ago: executing program 3 (id=156): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000402a1101000001010203010902270001010080fa0904000003ffffff00070581024000000705820240000007050302"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x21, 0x1}}) 2.58410362s ago: executing program 2 (id=157): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Nc\xdd\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x8) ftruncate(r0, 0x7) 2.567998774s ago: executing program 1 (id=158): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="f30f09b800228ed00f20e06635080000000f22e00f21a1f30fc7b400000f20c06635100000000f22c0646664660f380817f2660f35bad104527c000000650fc7af95de8ec0", 0x45}], 0x1, 0x3, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.424783695s ago: executing program 2 (id=159): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, 0x0, 0x6, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 2.275997103s ago: executing program 1 (id=160): syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000180)={{0x12, 0x1, 0x340, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x1a, 0x30, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x715a}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0xfffb, 0x884c, 0x5}, {0x6, 0x24, 0x1a, 0x1, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x7ff, 0x9, 0x6, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xa, 0x0, 0x9}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0xc, &(0x7f0000000300)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x1, 0x0, 0x4}]}}) 1.273362762s ago: executing program 2 (id=161): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.014059743s ago: executing program 0 (id=162): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0) 808.284008ms ago: executing program 2 (id=163): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x6, 0x0, [], [0xfffffff8, 0x4, 0xc, 0x2], [0x7f, 0x9, 0x1, 0x6], [0x7, 0x101, 0x6, 0x7]}) 808.029927ms ago: executing program 0 (id=164): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000007c0)={{r0, 0x0, 0x604400, &(0x7f00000004c0)={@align, {0x4, 0x1ff, 0x6c, 0x4}}, 0x3, &(0x7f0000000500), 0x0}, 0x1, &(0x7f0000000680)=[{0x3, 0x3, &(0x7f0000000580)='\x00', &(0x7f00000005c0)="f03abf739b9b2656f129e16745257f8df3e64a74dd25b470fc0723ff48fb196618b807f1c117a00c4321fe944c0eeebd4c0e6243cb9a34d53122035d695ddf725a5c3cc7eed40f70f92a7eeb48ff10e5576d828161142de9949618f94d9d6b74125cea17dd885fc6c86c37bd2e0bb27d74a1f72f6fd11a469571e0f1b5bed2a63530f9", 0x83, 0x10}]}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB="4c00238006000c000e00000005"], 0x68}, 0x1, 0x0, 0x0, 0x4048050}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdc01, {{}, {@val={0x8, 0x1, 0x35}, @val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001100090000000000c100ff0700000000", @ANYRES32=r4, @ANYBLOB="402000000000000014001a80100004800c0008800800010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 746.80617ms ago: executing program 1 (id=165): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0009000d00000000050000", 0x28}], 0x1) 710.716364ms ago: executing program 2 (id=166): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/module/nvme_core/parameters/admin_timeout\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r3, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery,reconnect_delay=1\x00', 0xb3) 565.423568ms ago: executing program 1 (id=167): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0xed8, 0x280) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) 312.916239ms ago: executing program 2 (id=168): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 312.696135ms ago: executing program 0 (id=169): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70200"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 0s ago: executing program 0 (id=170): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2715, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xd004, 0x2, 0xfffffb, 0x29c}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000)) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r1, &(0x7f000000a280)={0x2020}, 0x2020) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00005ac000/0x3000)=nil, 0x3000, 0x2) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) lstat(0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.104' (ED25519) to the list of known hosts. [ 77.419838][ T5612] cgroup: Unknown subsys name 'net' [ 77.551002][ T5612] cgroup: Unknown subsys name 'cpuset' [ 77.560604][ T5612] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.220801][ T5612] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.543164][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.560503][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.571109][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.581024][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.588406][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.597429][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.605432][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.615289][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.623654][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.623693][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.634316][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.647476][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.647889][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.664132][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.680379][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.687481][ T5636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.690232][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.701702][ T5635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.710669][ T5635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.718089][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.726845][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.736649][ T4942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.748363][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.758330][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.770078][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.929250][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.936571][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.944487][ T5642] bridge_slave_0: entered allmulticast mode [ 82.952954][ T5642] bridge_slave_0: entered promiscuous mode [ 82.962021][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.969348][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.976832][ T5639] bridge_slave_0: entered allmulticast mode [ 82.984154][ T5639] bridge_slave_0: entered promiscuous mode [ 83.032004][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.039244][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.046804][ T5642] bridge_slave_1: entered allmulticast mode [ 83.054132][ T5642] bridge_slave_1: entered promiscuous mode [ 83.061414][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.069126][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.076421][ T5639] bridge_slave_1: entered allmulticast mode [ 83.083853][ T5639] bridge_slave_1: entered promiscuous mode [ 83.097314][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.104460][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.112065][ T5644] bridge_slave_0: entered allmulticast mode [ 83.119392][ T5644] bridge_slave_0: entered promiscuous mode [ 83.161685][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.169113][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.176448][ T5644] bridge_slave_1: entered allmulticast mode [ 83.183891][ T5644] bridge_slave_1: entered promiscuous mode [ 83.253666][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.266096][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.278476][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.336451][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.345816][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.353953][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.361286][ T5643] bridge_slave_0: entered allmulticast mode [ 83.368934][ T5643] bridge_slave_0: entered promiscuous mode [ 83.380134][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.424237][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.432162][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.439966][ T5643] bridge_slave_1: entered allmulticast mode [ 83.447476][ T5643] bridge_slave_1: entered promiscuous mode [ 83.456606][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.465880][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.473201][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.480505][ T5641] bridge_slave_0: entered allmulticast mode [ 83.488195][ T5641] bridge_slave_0: entered promiscuous mode [ 83.498365][ T5642] team0: Port device team_slave_0 added [ 83.542957][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.550275][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.557704][ T5641] bridge_slave_1: entered allmulticast mode [ 83.565078][ T5641] bridge_slave_1: entered promiscuous mode [ 83.573966][ T5642] team0: Port device team_slave_1 added [ 83.581650][ T5639] team0: Port device team_slave_0 added [ 83.634471][ T5639] team0: Port device team_slave_1 added [ 83.642868][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.655834][ T5644] team0: Port device team_slave_0 added [ 83.664325][ T5644] team0: Port device team_slave_1 added [ 83.706769][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.729635][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.739902][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.748796][ T50] Bluetooth: hci0: command tx timeout [ 83.755048][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.781061][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.827226][ T5631] Bluetooth: hci3: command tx timeout [ 83.832790][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.834531][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.843975][ T5630] Bluetooth: hci2: command tx timeout [ 83.850381][ T5633] Bluetooth: hci1: command tx timeout [ 83.855599][ T50] Bluetooth: hci4: command tx timeout [ 83.864965][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.893274][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.905628][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.913019][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.939046][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.973661][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.981074][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.007520][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.029068][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.036298][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.062556][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.075809][ T5643] team0: Port device team_slave_0 added [ 84.095457][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.102673][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.128862][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.160246][ T5643] team0: Port device team_slave_1 added [ 84.168377][ T5641] team0: Port device team_slave_0 added [ 84.177179][ T5641] team0: Port device team_slave_1 added [ 84.242022][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.249262][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.275446][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.325972][ T5642] hsr_slave_0: entered promiscuous mode [ 84.332849][ T5642] hsr_slave_1: entered promiscuous mode [ 84.340157][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.347580][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.373841][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.385760][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.392847][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.418823][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.461960][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.469008][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.494973][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.511629][ T5644] hsr_slave_0: entered promiscuous mode [ 84.518175][ T5644] hsr_slave_1: entered promiscuous mode [ 84.524359][ T5644] debugfs: 'hsr0' already exists in 'hsr' [ 84.530633][ T5644] Cannot create hsr debugfs directory [ 84.542836][ T5639] hsr_slave_0: entered promiscuous mode [ 84.549721][ T5639] hsr_slave_1: entered promiscuous mode [ 84.555921][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 84.561917][ T5639] Cannot create hsr debugfs directory [ 84.658834][ T5643] hsr_slave_0: entered promiscuous mode [ 84.665222][ T5643] hsr_slave_1: entered promiscuous mode [ 84.671723][ T5643] debugfs: 'hsr0' already exists in 'hsr' [ 84.677953][ T5643] Cannot create hsr debugfs directory [ 84.767853][ T5641] hsr_slave_0: entered promiscuous mode [ 84.774524][ T5641] hsr_slave_1: entered promiscuous mode [ 84.781071][ T5641] debugfs: 'hsr0' already exists in 'hsr' [ 84.786881][ T5641] Cannot create hsr debugfs directory [ 85.318413][ T5642] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.335242][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.344389][ T5642] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.356952][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.366073][ T5642] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.377178][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.395813][ T5642] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.407150][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.479623][ T5639] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.492167][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.500706][ T5639] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.511126][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.519410][ T5639] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.531018][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.542626][ T5639] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.554440][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.667632][ T5644] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.686729][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.704466][ T5644] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.717878][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.726848][ T5644] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.736149][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.744442][ T5644] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.756943][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.827403][ T50] Bluetooth: hci0: command tx timeout [ 85.873904][ T5643] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.886180][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.894953][ T5643] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.906550][ T5631] Bluetooth: hci3: command tx timeout [ 85.906807][ T5630] Bluetooth: hci2: command tx timeout [ 85.913028][ T50] Bluetooth: hci4: command tx timeout [ 85.917981][ T5633] Bluetooth: hci1: command tx timeout [ 85.932074][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.940254][ T5643] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.950705][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.958856][ T5643] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.969480][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.983659][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.077530][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.111676][ T5641] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.123300][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.131292][ T5641] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.141787][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.150366][ T5641] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.163343][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.172053][ T5641] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.182218][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.195340][ T771] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.203065][ T771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.246130][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.279118][ T771] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.286349][ T771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.344493][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.388460][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.395621][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.430960][ T771] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.438314][ T771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.494054][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.548028][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.583309][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.625190][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.632386][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.653262][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.685613][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.692969][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.720198][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.738027][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.760556][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.767807][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.782262][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.789507][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.919938][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.964496][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.990284][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.997506][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.071005][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.078281][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.181662][ T5642] veth0_vlan: entered promiscuous mode [ 87.222277][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.238687][ T5642] veth1_vlan: entered promiscuous mode [ 87.262741][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.274976][ T5639] veth0_vlan: entered promiscuous mode [ 87.329304][ T5639] veth1_vlan: entered promiscuous mode [ 87.385706][ T5642] veth0_macvtap: entered promiscuous mode [ 87.411124][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.427080][ T5642] veth1_macvtap: entered promiscuous mode [ 87.482493][ T5644] veth0_vlan: entered promiscuous mode [ 87.498680][ T5639] veth0_macvtap: entered promiscuous mode [ 87.519854][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.529032][ T5639] veth1_macvtap: entered promiscuous mode [ 87.540977][ T5643] veth0_vlan: entered promiscuous mode [ 87.557664][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.573582][ T5644] veth1_vlan: entered promiscuous mode [ 87.609775][ T5643] veth1_vlan: entered promiscuous mode [ 87.619329][ T70] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.638672][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.646967][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.683993][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.747379][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.786119][ T5641] veth0_vlan: entered promiscuous mode [ 87.824817][ T5644] veth0_macvtap: entered promiscuous mode [ 87.847199][ T70] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.887590][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.897593][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.907038][ T50] Bluetooth: hci0: command tx timeout [ 87.927788][ T5643] veth0_macvtap: entered promiscuous mode [ 87.935249][ T5641] veth1_vlan: entered promiscuous mode [ 87.947675][ T5644] veth1_macvtap: entered promiscuous mode [ 87.976383][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.986625][ T50] Bluetooth: hci4: command tx timeout [ 87.992123][ T5631] Bluetooth: hci3: command tx timeout [ 87.992773][ T5633] Bluetooth: hci1: command tx timeout [ 88.003469][ T5630] Bluetooth: hci2: command tx timeout [ 88.030924][ T5643] veth1_macvtap: entered promiscuous mode [ 88.049358][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.058015][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.121799][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.144863][ T5642] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.175276][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.185899][ T5642] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 88.199705][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.211022][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.212170][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.234498][ T5642] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 88.235657][ T5641] veth0_macvtap: entered promiscuous mode [ 88.250280][ T5642] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 88.265071][ T5642] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 88.291378][ T1016] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.314932][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.330936][ T5641] veth1_macvtap: entered promiscuous mode [ 88.414616][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.426711][ T70] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.438366][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.464967][ T1016] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.535444][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.583319][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.762567][ T3365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.773919][ T3365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.795865][ T1016] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.894315][ T771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.931878][ T771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.978740][ T78] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.044881][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.062698][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.130431][ T771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.152887][ T1016] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.172180][ T771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.219194][ T3365] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.229465][ T809] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.281400][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.320737][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.412710][ T809] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.457288][ T809] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 89.479373][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.509352][ T809] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.521507][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.546448][ T3365] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.556719][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.578580][ T809] usb 4-1: Product: syz [ 89.599154][ T809] usb 4-1: Manufacturer: syz [ 89.613211][ T809] usb 4-1: SerialNumber: syz [ 89.735764][ T809] cdc_mbim 4-1:1.0: skipping garbage [ 89.749698][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.769153][ T34] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.787789][ T1016] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.821837][ T1016] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.876464][ T1016] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.896726][ T24] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 89.916375][ T1016] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.944905][ T5741] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 89.989225][ T5630] Bluetooth: hci0: command tx timeout [ 90.010401][ T5765] capability: warning: `syz.2.17' uses deprecated v2 capabilities in a way that may be insecure [ 90.066733][ T5630] Bluetooth: hci4: command tx timeout [ 90.072691][ T5633] Bluetooth: hci3: command tx timeout [ 90.078376][ T50] Bluetooth: hci2: command tx timeout [ 90.078409][ T50] Bluetooth: hci1: command tx timeout [ 90.098642][ T1016] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.107953][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 90.118611][ T24] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 90.134075][ T24] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 90.144486][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 90.154236][ T24] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 90.164202][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.199107][ T24] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 90.439098][ T24] scsi host1: usb-storage 5-1:1.0 [ 90.590644][ T5741] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 90.610276][ T809] cdc_mbim 4-1:1.0: setting tx_max = 60 [ 90.646546][ T5699] usb 5-1: USB disconnect, device number 2 [ 90.666448][ T809] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 90.744229][ T809] wwan wwan0: port wwan0mbim0 attached [ 90.887354][ T5783] hub 8-0:1.0: USB hub found [ 90.908741][ T809] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 16:2c:f2:9a:8f:9a [ 90.940520][ T5783] hub 8-0:1.0: 1 port detected [ 90.979763][ T809] usb 4-1: USB disconnect, device number 2 [ 91.008130][ T809] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 91.179868][ T809] wwan wwan0: port wwan0mbim0 disconnected [ 91.841939][ T10] cfg80211: failed to load regulatory.db [ 93.074046][ T5815] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.913422][ T5827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'. [ 95.388844][ T5848] netlink: 88 bytes leftover after parsing attributes in process `syz.3.43'. [ 96.083073][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.126763][ T5854] batadv_slave_1: entered promiscuous mode [ 97.126766][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.270499][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 97.286295][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 97.304491][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 97.334377][ T10] usb 5-1: config 0 has no interface number 0 [ 97.351036][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 97.376304][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.404862][ T10] usb 5-1: Product: syz [ 97.414996][ T10] usb 5-1: Manufacturer: syz [ 97.421873][ T10] usb 5-1: SerialNumber: syz [ 97.454954][ T10] usb 5-1: config 0 descriptor?? [ 97.703505][ T5862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.719106][ T5862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.183701][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 98.218453][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 98.270607][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 98.285200][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 98.301366][ T10] usb 5-1: USB disconnect, device number 3 [ 98.456969][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.628417][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 98.640702][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.667169][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.708463][ T9] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 98.736115][ T9] usb 1-1: New USB device strings: Mfr=24, Product=0, SerialNumber=0 [ 98.765144][ T9] usb 1-1: Manufacturer: syz [ 98.788687][ T9] usb 1-1: config 0 descriptor?? [ 99.258915][ T9] input: syz Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0042.0001/input/input5 [ 99.379470][ T9] input: syz Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0042.0001/input/input6 [ 99.465578][ T9] uclogic 0003:5543:0042.0001: input,hidraw0: USB HID v7f.fd Mouse [syz] on usb-dummy_hcd.0-1/input0 [ 99.511757][ T9] usb 1-1: USB disconnect, device number 2 [ 99.792282][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 99.856530][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 99.889122][ T5901] fido_id[5901]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 100.326932][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 100.498136][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 100.511144][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.533370][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.558121][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 100.586313][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 100.608982][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.631126][ T9] usb 5-1: config 0 descriptor?? [ 101.107157][ T9] appleir 0003:05AC:8241.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 101.213041][ T5919] input: syz1 as /devices/virtual/input/input7 [ 102.372574][ T5684] usb 5-1: USB disconnect, device number 4 [ 103.489182][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 103.656313][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 103.679874][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 103.722774][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 103.762904][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 103.800930][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 103.845322][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 103.877686][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 103.909147][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 103.943855][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 103.972614][ T10] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 104.004616][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.021864][ T10] usb 5-1: Product: syz [ 104.035952][ T10] usb 5-1: Manufacturer: syz [ 104.047565][ T10] usb 5-1: SerialNumber: syz [ 104.069287][ T10] usb 5-1: config 0 descriptor?? [ 104.083370][ T5948] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 104.122234][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 104.166326][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 104.341317][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 104.358782][ T9] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 104.388930][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.418419][ T9] usb 3-1: config 0 descriptor?? [ 104.509044][ T10] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 104.572630][ T10] usb 5-1: USB disconnect, device number 5 [ 104.602884][ T5958] syz.1.86 uses obsolete (PF_INET,SOCK_PACKET) [ 104.694442][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.862904][ T9] hid (null): invalid report_size 29396 [ 104.882872][ T9] hid (null): invalid report_count 165044534 [ 104.907976][ T9] hid-led 0003:0FC5:B080.0003: unexpected long global item [ 104.931855][ T9] hid-led 0003:0FC5:B080.0003: probe with driver hid-led failed with error -22 [ 105.088974][ T10] usb 3-1: USB disconnect, device number 2 [ 105.460824][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.95'. [ 105.470228][ T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 105.480970][ T5979] netlink: 72 bytes leftover after parsing attributes in process `syz.3.95'. [ 105.640190][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 105.659222][ T10] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 105.690737][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.727749][ T10] usb 2-1: config 0 descriptor?? [ 106.171990][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 106.196386][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 106.241486][ T10] usb 2-1: USB disconnect, device number 2 [ 110.904054][ T6105] bridge0: port 3(erspan0) entered blocking state [ 110.987804][ T6105] bridge0: port 3(erspan0) entered disabled state [ 111.024108][ T6105] erspan0: entered allmulticast mode [ 111.058830][ T6105] erspan0: entered promiscuous mode [ 111.075133][ T6105] bridge0: port 3(erspan0) entered blocking state [ 111.082837][ T6105] bridge0: port 3(erspan0) entered forwarding state [ 111.187451][ T6112] sit0: entered allmulticast mode [ 111.632109][ T6126] netlink: 132 bytes leftover after parsing attributes in process `syz.1.135'. [ 113.230964][ T6172] warning: `syz.1.155' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.447600][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.619693][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 113.650848][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 113.672946][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 113.696828][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 113.728342][ T9] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 113.747468][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.765865][ T9] usb 4-1: Product: syz [ 113.776008][ T9] usb 4-1: Manufacturer: syz [ 113.786154][ T9] usb 4-1: SerialNumber: syz [ 113.816745][ T6170] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 113.835220][ T6170] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 113.946348][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.126303][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 114.139825][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2047, setting to 1024 [ 114.170012][ T24] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 114.190128][ T24] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 114.219376][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.242456][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.254094][ T24] usb 2-1: Product: syz [ 114.262676][ T24] usb 2-1: Manufacturer: syz [ 114.273755][ T24] usb 2-1: SerialNumber: syz [ 114.512594][ T24] cdc_ncm 2-1:1.0: bind() failure [ 114.540420][ T24] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 114.559008][ T24] cdc_ncm 2-1:1.1: bind() failure [ 114.600477][ T24] usb 2-1: USB disconnect, device number 3 [ 114.872415][ T9] redrat3 4-1:1.0: Firmware rev: [ 115.074028][ T9] redrat3 4-1:1.0: Failed to read timeout from hardware [ 115.202571][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.247719][ T6194] bridge_slave_0 (unregistering): left allmulticast mode [ 115.265839][ T6194] bridge_slave_0 (unregistering): left promiscuous mode [ 115.286346][ T9] rc_core: IR keymap rc-hauppauge not found [ 115.292961][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.307807][ T9] Registered IR keymap rc-empty [ 115.340257][ T9] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc0 [ 115.391575][ T6198] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 115.395343][ T9] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc0/input8 [ 115.634499][ T6207] loop2: detected capacity change from 0 to 7 [ 115.666115][ T6207] Dev loop2: unable to read RDB block 7 [ 115.672760][ T9] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 115.693654][ T6207] loop2: unable to read partition table [ 115.700786][ T9] redrat3 4-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 115.718013][ T6207] loop2: partition table beyond EOD, truncated [ 115.745231][ T6207] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 115.760116][ T9] redrat3 4-1:1.0: probe with driver redrat3 failed with error -5 [ 115.807035][ T9] usb 4-1: USB disconnect, device number 3 [ 115.848017][ T4993] ================================================================== [ 115.856154][ T4993] BUG: KASAN: slab-use-after-free in string+0x216/0x2d0 [ 115.863156][ T4993] Read of size 1 at addr ffff8880794e2758 by task udevd/4993 [ 115.870550][ T4993] [ 115.872922][ T4993] CPU: 1 UID: 0 PID: 4993 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 115.872946][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.872967][ T4993] Call Trace: [ 115.872975][ T4993] [ 115.872984][ T4993] dump_stack_lvl+0xe8/0x150 [ 115.873020][ T4993] print_address_description+0x55/0x1e0 [ 115.873051][ T4993] ? string+0x216/0x2d0 [ 115.873070][ T4993] print_report+0x58/0x70 [ 115.873096][ T4993] kasan_report+0x117/0x150 [ 115.873129][ T4993] ? string+0x216/0x2d0 [ 115.873158][ T4993] string+0x216/0x2d0 [ 115.873181][ T4993] vsnprintf+0x74a/0xef0 [ 115.873207][ T4993] add_uevent_var+0x1ce/0x460 [ 115.873230][ T4993] ? __pfx___mutex_lock+0x10/0x10 [ 115.873260][ T4993] ? __pfx_add_uevent_var+0x10/0x10 [ 115.873288][ T4993] rc_dev_uevent+0x164/0x1a0 [ 115.873319][ T4993] dev_uevent+0x537/0x870 [ 115.873354][ T4993] ? __pfx_dev_uevent+0x10/0x10 [ 115.873385][ T4993] ? __kmalloc_cache_noprof+0x32d/0x660 [ 115.873413][ T4993] ? __kmalloc_cache_noprof+0x150/0x660 [ 115.873440][ T4993] ? uevent_show+0x15c/0x310 [ 115.873472][ T4993] uevent_show+0x1a0/0x310 [ 115.873503][ T4993] dev_attr_show+0x58/0xc0 [ 115.873531][ T4993] ? __pfx_dev_attr_show+0x10/0x10 [ 115.873560][ T4993] sysfs_kf_seq_show+0x331/0x490 [ 115.873593][ T4993] seq_read_iter+0x463/0xca0 [ 115.873624][ T4993] vfs_read+0x595/0xa80 [ 115.873648][ T4993] ? __pfx_vfs_read+0x10/0x10 [ 115.873668][ T4993] ? do_sys_openat2+0x14e/0x200 [ 115.873703][ T4993] ksys_read+0x150/0x270 [ 115.873723][ T4993] ? __pfx_ksys_read+0x10/0x10 [ 115.873746][ T4993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.873766][ T4993] do_syscall_64+0x174/0x580 [ 115.873793][ T4993] ? clear_bhb_loop+0x40/0x90 [ 115.873816][ T4993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.873837][ T4993] RIP: 0033:0x7fdb952a7407 [ 115.873862][ T4993] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 115.873879][ T4993] RSP: 002b:00007ffcc6d892d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 115.873901][ T4993] RAX: ffffffffffffffda RBX: 00007fdb95984880 RCX: 00007fdb952a7407 [ 115.873916][ T4993] RDX: 0000000000001000 RSI: 00005645974ba240 RDI: 000000000000000c [ 115.873930][ T4993] RBP: 00007fdb953efff0 R08: 0000000000000000 R09: 0000000000000000 [ 115.873942][ T4993] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 115.873954][ T4993] R13: 00007fdb953efea0 R14: 0000000000000000 R15: 00005645974317a0 [ 115.873976][ T4993] [ 115.873984][ T4993] [ 116.124134][ T4993] Allocated by task 9: [ 116.128215][ T4993] kasan_save_track+0x3e/0x80 [ 116.132923][ T4993] __kasan_kmalloc+0x93/0xb0 [ 116.137540][ T4993] __kmalloc_cache_noprof+0x32d/0x660 [ 116.142950][ T4993] redrat3_dev_probe+0x477/0x2570 [ 116.148004][ T4993] usb_probe_interface+0x653/0xc60 [ 116.153149][ T4993] really_probe+0x254/0xae0 [ 116.157691][ T4993] __driver_probe_device+0x1e8/0x360 [ 116.162996][ T4993] driver_probe_device+0x4f/0x240 [ 116.168044][ T4993] __device_attach_driver+0x270/0x410 [ 116.173441][ T4993] bus_for_each_drv+0x258/0x2f0 [ 116.178316][ T4993] __device_attach+0x2c4/0x450 [ 116.183122][ T4993] device_initial_probe+0xa1/0xd0 [ 116.188165][ T4993] bus_probe_device+0x12a/0x220 [ 116.193031][ T4993] device_add+0x7d7/0xb80 [ 116.197374][ T4993] usb_set_configuration+0x1ad8/0x2180 [ 116.202851][ T4993] usb_generic_driver_probe+0x8d/0x150 [ 116.208326][ T4993] usb_probe_device+0x1c3/0x3b0 [ 116.213190][ T4993] really_probe+0x254/0xae0 [ 116.217711][ T4993] __driver_probe_device+0x1e8/0x360 [ 116.223017][ T4993] driver_probe_device+0x4f/0x240 [ 116.228058][ T4993] __device_attach_driver+0x270/0x410 [ 116.233452][ T4993] bus_for_each_drv+0x258/0x2f0 [ 116.238314][ T4993] __device_attach+0x2c4/0x450 [ 116.243168][ T4993] device_initial_probe+0xa1/0xd0 [ 116.248250][ T4993] bus_probe_device+0x12a/0x220 [ 116.253140][ T4993] device_add+0x7d7/0xb80 [ 116.257483][ T4993] usb_new_device+0x99d/0x1620 [ 116.262267][ T4993] hub_event+0x28e8/0x4d30 [ 116.266700][ T4993] process_scheduled_works+0xa8e/0x14e0 [ 116.272265][ T4993] worker_thread+0xa47/0xfb0 [ 116.276872][ T4993] kthread+0x388/0x470 [ 116.280961][ T4993] ret_from_fork+0x514/0xb70 [ 116.285573][ T4993] ret_from_fork_asm+0x1a/0x30 [ 116.290347][ T4993] [ 116.292677][ T4993] Freed by task 9: [ 116.296403][ T4993] kasan_save_track+0x3e/0x80 [ 116.301101][ T4993] kasan_save_free_info+0x40/0x50 [ 116.306149][ T4993] __kasan_slab_free+0x5c/0x80 [ 116.310935][ T4993] kfree+0x1c5/0x640 [ 116.314843][ T4993] redrat3_dev_probe+0x1bf4/0x2570 [ 116.319972][ T4993] usb_probe_interface+0x653/0xc60 [ 116.325099][ T4993] really_probe+0x254/0xae0 [ 116.329622][ T4993] __driver_probe_device+0x1e8/0x360 [ 116.334923][ T4993] driver_probe_device+0x4f/0x240 [ 116.339989][ T4993] __device_attach_driver+0x270/0x410 [ 116.345384][ T4993] bus_for_each_drv+0x258/0x2f0 [ 116.350249][ T4993] __device_attach+0x2c4/0x450 [ 116.355028][ T4993] device_initial_probe+0xa1/0xd0 [ 116.360082][ T4993] bus_probe_device+0x12a/0x220 [ 116.364942][ T4993] device_add+0x7d7/0xb80 [ 116.369289][ T4993] usb_set_configuration+0x1ad8/0x2180 [ 116.374765][ T4993] usb_generic_driver_probe+0x8d/0x150 [ 116.380236][ T4993] usb_probe_device+0x1c3/0x3b0 [ 116.385105][ T4993] really_probe+0x254/0xae0 [ 116.389625][ T4993] __driver_probe_device+0x1e8/0x360 [ 116.394925][ T4993] driver_probe_device+0x4f/0x240 [ 116.399970][ T4993] __device_attach_driver+0x270/0x410 [ 116.405359][ T4993] bus_for_each_drv+0x258/0x2f0 [ 116.410221][ T4993] __device_attach+0x2c4/0x450 [ 116.414999][ T4993] device_initial_probe+0xa1/0xd0 [ 116.420049][ T4993] bus_probe_device+0x12a/0x220 [ 116.424913][ T4993] device_add+0x7d7/0xb80 [ 116.429283][ T4993] usb_new_device+0x99d/0x1620 [ 116.434065][ T4993] hub_event+0x28e8/0x4d30 [ 116.438492][ T4993] process_scheduled_works+0xa8e/0x14e0 [ 116.444050][ T4993] worker_thread+0xa47/0xfb0 [ 116.448657][ T4993] kthread+0x388/0x470 [ 116.452747][ T4993] ret_from_fork+0x514/0xb70 [ 116.457356][ T4993] ret_from_fork_asm+0x1a/0x30 [ 116.462160][ T4993] [ 116.464496][ T4993] The buggy address belongs to the object at ffff8880794e2000 [ 116.464496][ T4993] which belongs to the cache kmalloc-2k of size 2048 [ 116.478647][ T4993] The buggy address is located 1880 bytes inside of [ 116.478647][ T4993] freed 2048-byte region [ffff8880794e2000, ffff8880794e2800) [ 116.492635][ T4993] [ 116.494987][ T4993] The buggy address belongs to the physical page: [ 116.501419][ T4993] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880794e0000 pfn:0x794e0 [ 116.511492][ T4993] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 116.520007][ T4993] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 116.528522][ T4993] page_type: f5(slab) [ 116.532514][ T4993] raw: 00fff00000000240 ffff88801b002000 ffffea0001f63c10 ffffea0000d40210 [ 116.541110][ T4993] raw: ffff8880794e0000 0000000800080006 00000000f5000000 0000000000000000 [ 116.549710][ T4993] head: 00fff00000000240 ffff88801b002000 ffffea0001f63c10 ffffea0000d40210 [ 116.558391][ T4993] head: ffff8880794e0000 0000000800080006 00000000f5000000 0000000000000000 [ 116.567075][ T4993] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 116.575783][ T4993] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 116.584464][ T4993] page dumped because: kasan: bad access detected [ 116.590898][ T4993] page_owner tracks the page as allocated [ 116.596620][ T4993] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5641, tgid 5641 (syz-executor), ts 83496793425, free_ts 69195291601 [ 116.617993][ T4993] post_alloc_hook+0x1f9/0x250 [ 116.622790][ T4993] get_page_from_freelist+0x21fa/0x2270 [ 116.628357][ T4993] __alloc_frozen_pages_noprof+0x18d/0x380 [ 116.634202][ T4993] allocate_slab+0x79/0x5e0 [ 116.638718][ T4993] refill_objects+0x2d5/0x350 [ 116.643411][ T4993] __pcs_replace_empty_main+0x2bf/0x6b0 [ 116.648966][ T4993] __kmalloc_cache_noprof+0x3a7/0x660 [ 116.654355][ T4993] rtnl_newlink+0x136/0x1bd0 [ 116.658970][ T4993] rtnetlink_rcv_msg+0x802/0xc00 [ 116.663946][ T4993] netlink_rcv_skb+0x226/0x4a0 [ 116.668737][ T4993] netlink_unicast+0x7bb/0x940 [ 116.673525][ T4993] netlink_sendmsg+0x813/0xb40 [ 116.678314][ T4993] sock_sendmsg_nosec+0x13a/0x180 [ 116.683398][ T4993] __sys_sendto+0x408/0x5a0 [ 116.687916][ T4993] __ia32_compat_sys_socketcall+0x44f/0xa50 [ 116.693832][ T4993] do_int80_emulation+0x19a/0x550 [ 116.698894][ T4993] page last free pid 5288 tgid 5288 stack trace: [ 116.705245][ T4993] __free_frozen_pages+0xc1e/0xd10 [ 116.710473][ T4993] __slab_free+0x274/0x2c0 [ 116.714918][ T4993] qlist_free_all+0x99/0x100 [ 116.719531][ T4993] kasan_quarantine_reduce+0x148/0x160 [ 116.725013][ T4993] __kasan_slab_alloc+0x22/0x80 [ 116.729894][ T4993] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 116.735367][ T4993] vm_area_alloc+0x24/0x140 [ 116.739886][ T4993] mmap_region+0x1221/0x2310 [ 116.744489][ T4993] do_mmap+0xc3b/0x10c0 [ 116.748659][ T4993] vm_mmap_pgoff+0x272/0x4e0 [ 116.753271][ T4993] do_syscall_64+0x174/0x580 [ 116.757905][ T4993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.763816][ T4993] [ 116.766154][ T4993] Memory state around the buggy address: [ 116.771793][ T4993] ffff8880794e2600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.779870][ T4993] ffff8880794e2680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.787959][ T4993] >ffff8880794e2700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.796053][ T4993] ^ [ 116.803011][ T4993] ffff8880794e2780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.811092][ T4993] ffff8880794e2800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 116.819161][ T4993] ================================================================== [ 116.843197][ T4993] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 116.850463][ T4993] CPU: 0 UID: 0 PID: 4993 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 116.859351][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.869443][ T4993] Call Trace: [ 116.872750][ T4993] [ 116.875702][ T4993] vpanic+0x56c/0xa60 [ 116.879728][ T4993] ? __pfx_vpanic+0x10/0x10 [ 116.884282][ T4993] ? __pfx___schedule+0x10/0x10 [ 116.889165][ T4993] panic+0xc5/0xd0 [ 116.892910][ T4993] ? __pfx_panic+0x10/0x10 [ 116.897360][ T4993] ? preempt_schedule_thunk+0x16/0x40 [ 116.902843][ T4993] ? string+0x216/0x2d0 [ 116.907019][ T4993] check_panic_on_warn+0x89/0xb0 [ 116.912007][ T4993] ? string+0x216/0x2d0 [ 116.916183][ T4993] end_report+0x73/0x170 [ 116.920456][ T4993] ? string+0x216/0x2d0 [ 116.924634][ T4993] kasan_report+0x128/0x150 [ 116.929166][ T4993] ? string+0x216/0x2d0 [ 116.933340][ T4993] string+0x216/0x2d0 [ 116.937344][ T4993] vsnprintf+0x74a/0xef0 [ 116.941628][ T4993] add_uevent_var+0x1ce/0x460 [ 116.946331][ T4993] ? __pfx___mutex_lock+0x10/0x10 [ 116.951385][ T4993] ? __pfx_add_uevent_var+0x10/0x10 [ 116.956695][ T4993] rc_dev_uevent+0x164/0x1a0 [ 116.961314][ T4993] dev_uevent+0x537/0x870 [ 116.965676][ T4993] ? __pfx_dev_uevent+0x10/0x10 [ 116.970548][ T4993] ? __kmalloc_cache_noprof+0x32d/0x660 [ 116.976122][ T4993] ? __kmalloc_cache_noprof+0x150/0x660 [ 116.981722][ T4993] ? uevent_show+0x15c/0x310 [ 116.986347][ T4993] uevent_show+0x1a0/0x310 [ 116.990821][ T4993] dev_attr_show+0x58/0xc0 [ 116.995274][ T4993] ? __pfx_dev_attr_show+0x10/0x10 [ 117.000409][ T4993] sysfs_kf_seq_show+0x331/0x490 [ 117.005369][ T4993] seq_read_iter+0x463/0xca0 [ 117.009994][ T4993] vfs_read+0x595/0xa80 [ 117.014194][ T4993] ? __pfx_vfs_read+0x10/0x10 [ 117.018903][ T4993] ? do_sys_openat2+0x14e/0x200 [ 117.023838][ T4993] ksys_read+0x150/0x270 [ 117.028113][ T4993] ? __pfx_ksys_read+0x10/0x10 [ 117.032912][ T4993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.039003][ T4993] do_syscall_64+0x174/0x580 [ 117.043628][ T4993] ? clear_bhb_loop+0x40/0x90 [ 117.048339][ T4993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.054269][ T4993] RIP: 0033:0x7fdb952a7407 [ 117.058721][ T4993] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 117.078396][ T4993] RSP: 002b:00007ffcc6d892d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 117.086872][ T4993] RAX: ffffffffffffffda RBX: 00007fdb95984880 RCX: 00007fdb952a7407 [ 117.095028][ T4993] RDX: 0000000000001000 RSI: 00005645974ba240 RDI: 000000000000000c [ 117.103076][ T4993] RBP: 00007fdb953efff0 R08: 0000000000000000 R09: 0000000000000000 [ 117.111107][ T4993] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 117.119141][ T4993] R13: 00007fdb953efea0 R14: 0000000000000000 R15: 00005645974317a0 [ 117.127155][ T4993] [ 117.130792][ T4993] Kernel Offset: disabled [ 117.135155][ T4993] Rebooting in 86400 seconds..