last executing test programs: 5.535197335s ago: executing program 2 (id=975): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x4008054) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 5.268198116s ago: executing program 2 (id=979): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000058c0)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @local, 0xae00000}, 0x1c, 0x0}}], 0x1, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0xc, 0x10012, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xeb, 0x0) write$nci(r1, &(0x7f0000000400)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x4d, @f_listen={0x7, 0x3, 0x0, 0x82, 0xd, 0xd7, 0xbc, {0xc8, "c05ea8a8c3e4c6ae7d9828c414fe52aad70954c357d04af6c4f81612b789358c3d7a771db4f1a06e36a2c06fc32434a35d93b127472db0e1704746dbfdea9240fb24ca79504849276f7412593775435b65b20f079ccdcba21e1fd34ff65e1f1a1b240221587f100ecba31603b9245c2c6c15e0c728e20e5ac2f09b976fad845ef876fa2b08bf36cceb0ce6f567e519c2b6e4227d808fa893cef59ba86aa410d3c64dd5fffe9d90f729849fda23489fd144383e05f4420ae3c25333011cb63849c7c5e58e8f271d2f"}, 0x4, 0x7, 0x1, 0x2, 0x1d, "8765e1bb3bb1b8a11848d18790e7de5c31eb8c3f8f7125393d885d79bb"}}, 0xf5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) 5.07105341s ago: executing program 2 (id=981): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 4.150645769s ago: executing program 2 (id=982): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000940)={0x0, {0x11, 0x3, 0x5, 0xb2, 0xff}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f7ce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.007631262s ago: executing program 2 (id=984): socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c000) 3.767393738s ago: executing program 2 (id=989): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r6, 0x11, 0x64, 0x0, &(0x7f0000000080)) getpeername$packet(r2, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r0, 0x0, 0x800) 3.727565571s ago: executing program 4 (id=990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) write$tun(r0, &(0x7f0000004c80)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@dccp_packet={0x6, 0x6, "6c22db", 0x10, 0x21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, {[], {{0x4e24, 0x4e21, 0x4, 0x1, 0x8, 0x0, 0x0, 0x7, 0x1, "78b7f1", 0xf, "21b516"}}}}}}, 0x46) bpf$MAP_CREATE(0x0, 0x0, 0x50) 3.315594855s ago: executing program 4 (id=993): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 2.906996809s ago: executing program 4 (id=996): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000012c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 2.769319353s ago: executing program 1 (id=997): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, 0x0, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) socket(0x10, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x200440, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x0, {0x2, 0x40, @private}, 'syz_tun\x00'}) 2.723506145s ago: executing program 3 (id=998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x76}}]}, {0x3}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r5) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2.723223365s ago: executing program 4 (id=999): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1546], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2.152764849s ago: executing program 0 (id=1000): r0 = socket$kcm(0xa, 0x1, 0x106) recvmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000840), 0x28}, 0x400c0) 1.900111273s ago: executing program 4 (id=1001): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x8048451}, 0x48110) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10003, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x3, 0x400, 0x80, 0x89, 0x0, 0xa, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.876742688s ago: executing program 1 (id=1002): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbdc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000080) 1.813767036s ago: executing program 3 (id=1003): epoll_create(0x1007) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000bbbb00bbbbbbaaaaaaaaaabb86dd6d0020000008110000000000000000000000000000000000ff06"], 0x42) 1.6718002s ago: executing program 0 (id=1004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x34, r1, 0x7, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.463600841s ago: executing program 1 (id=1005): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) bind$packet(r0, &(0x7f0000000340)={0x11, 0x15, r1, 0x1, 0x0, 0x6, @random="fc8f954d016a"}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) 1.463374681s ago: executing program 0 (id=1006): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe80000000000000000000000000003300"/196], 0x190) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x1c, 0x3a, 0xff, @remote, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x8, 0x3ff, @private2, 0x7, 0x1, 0x4, 0x7}}}}}}, 0x0) 1.438752517s ago: executing program 3 (id=1007): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000400)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", '\x00', "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1.306970083s ago: executing program 1 (id=1008): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x24, 0x10, 0x1, 0x1000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xfff1, 0xf}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 1.29602671s ago: executing program 0 (id=1009): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4621, @multicast1}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001800)=@filter={'filter\x00', 0xe, 0x5, 0x886, [0x0, 0x200000000f40, 0x200000001304, 0x200000001334], 0x0, 0x0, 0x0}, 0x907) 1.203513743s ago: executing program 3 (id=1010): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0xe, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.07461014s ago: executing program 3 (id=1011): pipe(&(0x7f0000000200)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 992.076984ms ago: executing program 0 (id=1012): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) rmdir(&(0x7f0000000140)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(r3, 0x0, 0xf3) chdir(&(0x7f0000000200)='./file0\x00') mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) 915.50581ms ago: executing program 1 (id=1013): socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2b, 0x1, 0x1) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000000)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f00000005c0)={@remote, @random="001a00e100", @void, {@mpls_uc={0x8847, {[], @llc={@llc={0x42, 0xaa, "d4"}}}}}}, 0x0) 862.20289ms ago: executing program 3 (id=1014): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000002200000009", @ANYRES16=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x33) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000100)={'wg1\x00'}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x6400c095}, 0x8010) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, 0x0, 0x4008080) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r7, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x810, 0x208, 0xe, 0x2, 0x3, 0x8, 0x9, r1}, 0x20) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(r0, 0x0, 0x0) syz_emit_ethernet(0x80, &(0x7f0000000580)=ANY=[], 0x0) 656.012262ms ago: executing program 1 (id=1015): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x40) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200a50ee9"], 0x0) 415.353207ms ago: executing program 4 (id=1016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = socket(0xa, 0x3, 0x3a) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x330}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 0s ago: executing program 0 (id=1017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) bind$netlink(r1, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r3) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. [ 66.027462][ T4172] cgroup: Unknown subsys name 'net' [ 66.177664][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.707932][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.207901][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 69.233548][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 69.316075][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 69.360234][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 69.413997][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.421450][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.429591][ T4185] device bridge_slave_0 entered promiscuous mode [ 69.445723][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 69.456226][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.463508][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.472183][ T4194] device bridge_slave_0 entered promiscuous mode [ 69.488942][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.496931][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.505784][ T4185] device bridge_slave_1 entered promiscuous mode [ 69.525532][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.533363][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.541907][ T4194] device bridge_slave_1 entered promiscuous mode [ 69.601358][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.632632][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.642068][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.649453][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.658124][ T4186] device bridge_slave_0 entered promiscuous mode [ 69.671258][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.698493][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.706186][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.714727][ T4186] device bridge_slave_1 entered promiscuous mode [ 69.727119][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.784252][ T4194] team0: Port device team_slave_0 added [ 69.801526][ T4185] team0: Port device team_slave_0 added [ 69.807822][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.815112][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.824313][ T4193] device bridge_slave_0 entered promiscuous mode [ 69.838775][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.846906][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.855376][ T4193] device bridge_slave_1 entered promiscuous mode [ 69.863805][ T4194] team0: Port device team_slave_1 added [ 69.876983][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.884770][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.893488][ T4187] device bridge_slave_0 entered promiscuous mode [ 69.902748][ T4185] team0: Port device team_slave_1 added [ 69.909097][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.916628][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.924839][ T4187] device bridge_slave_1 entered promiscuous mode [ 69.934225][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.972494][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.984085][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.022500][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.033449][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.043652][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.050961][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.077138][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.090486][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.098493][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.124675][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.144907][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.169833][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.177578][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.204402][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.220917][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.227903][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.254054][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.267738][ T4186] team0: Port device team_slave_0 added [ 70.282186][ T4193] team0: Port device team_slave_0 added [ 70.297904][ T4186] team0: Port device team_slave_1 added [ 70.312810][ T4193] team0: Port device team_slave_1 added [ 70.335352][ T4187] team0: Port device team_slave_0 added [ 70.350158][ T4187] team0: Port device team_slave_1 added [ 70.384935][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.392073][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.419064][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.438102][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.445207][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.471551][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.483542][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.490744][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.517284][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.535427][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.542664][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.568845][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.584849][ T4194] device hsr_slave_0 entered promiscuous mode [ 70.592623][ T4194] device hsr_slave_1 entered promiscuous mode [ 70.599771][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.606971][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.633374][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.645190][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.652476][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.679366][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.724853][ T4185] device hsr_slave_0 entered promiscuous mode [ 70.732022][ T4185] device hsr_slave_1 entered promiscuous mode [ 70.739160][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.749013][ T4185] Cannot create hsr debugfs directory [ 70.796744][ T4187] device hsr_slave_0 entered promiscuous mode [ 70.803946][ T4187] device hsr_slave_1 entered promiscuous mode [ 70.811622][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.819237][ T4187] Cannot create hsr debugfs directory [ 70.842188][ T4193] device hsr_slave_0 entered promiscuous mode [ 70.849087][ T4193] device hsr_slave_1 entered promiscuous mode [ 70.855832][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.863716][ T1106] Bluetooth: hci1: command 0x0409 tx timeout [ 70.864816][ T1106] Bluetooth: hci0: command 0x0409 tx timeout [ 70.869997][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 70.882368][ T4193] Cannot create hsr debugfs directory [ 70.894416][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 70.915093][ T4186] device hsr_slave_0 entered promiscuous mode [ 70.922085][ T4186] device hsr_slave_1 entered promiscuous mode [ 70.928672][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.936720][ T4186] Cannot create hsr debugfs directory [ 70.942257][ T1106] Bluetooth: hci4: command 0x0409 tx timeout [ 71.285063][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.307580][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.324576][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.339136][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.356954][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.363990][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.372414][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.383796][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.405667][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.422723][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.496708][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.512867][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.537993][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.548559][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.623337][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.636820][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.649263][ T4193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.659816][ T4193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.675466][ T4193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.686576][ T4193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.701607][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.712339][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.724688][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.749216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.759162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.771187][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.778468][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.788049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.796537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.806686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.826011][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.838469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.850286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.859120][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.866344][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.895496][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.904796][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.915160][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.922463][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.930506][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.940108][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.952429][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.963467][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.976416][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.987429][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.998645][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.007552][ T1638] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.014704][ T1638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.038886][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.048983][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.059245][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.073390][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.083271][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.093957][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.113436][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.123146][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.134001][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.142801][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.152374][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.163137][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.191355][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.202059][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.221160][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.232142][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.242571][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.251329][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.260523][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.270120][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.280099][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.290989][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.306105][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.319156][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.344260][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.353377][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.367133][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.386614][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.437317][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.462507][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.474954][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.514789][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.529288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.544739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.555670][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.562859][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.579496][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.601140][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.613842][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.624578][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.631706][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.642341][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.652237][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.682706][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.690585][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.717912][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.738460][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.746652][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.760251][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.786053][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.796204][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.805312][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.821885][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.830294][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.839196][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.848334][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.858049][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.867928][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.878798][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.906379][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.914568][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.930466][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.940180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.942028][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 72.954019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.964091][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.971219][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.971715][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 72.988617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.996869][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 73.002301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.011133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.018651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.026316][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 73.032619][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 73.048918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.057834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.067182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.075715][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.082814][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.092710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.103835][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.112880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.121754][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.128829][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.138023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.156386][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.166337][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.176122][ T1638] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.183337][ T1638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.235219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.248240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.258942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.268538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.277940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.287266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.296460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.305955][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.315502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.324677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.334379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.345965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.354900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.379714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.396059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.407415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.423653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.436828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.447594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.463370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.471968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.486852][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.499086][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.522645][ T4187] device veth0_vlan entered promiscuous mode [ 73.534801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.543089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.551761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.560330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.569339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.578085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.593630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.602138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.610572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.618786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.635720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.647316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.664789][ T4185] device veth0_vlan entered promiscuous mode [ 73.693740][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.707585][ T4187] device veth1_vlan entered promiscuous mode [ 73.724590][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.734854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.748585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.759244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.784215][ T4185] device veth1_vlan entered promiscuous mode [ 73.850101][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.871470][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.879900][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.901434][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.913523][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.933669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.943990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.976398][ T4185] device veth0_macvtap entered promiscuous mode [ 73.989076][ T4187] device veth0_macvtap entered promiscuous mode [ 74.003313][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.015036][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.025397][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.036117][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.049893][ T4185] device veth1_macvtap entered promiscuous mode [ 74.062141][ T4187] device veth1_macvtap entered promiscuous mode [ 74.083963][ T4194] device veth0_vlan entered promiscuous mode [ 74.102599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.118575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.127974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.143313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.156516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.165581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.173462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.182307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.197422][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.217677][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.225949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.237137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.249571][ T4194] device veth1_vlan entered promiscuous mode [ 74.264817][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.276264][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.288742][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.299497][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.318875][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.327160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.335987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.345433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.364471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.375938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.385360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.395319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.403847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.424836][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.436937][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.456844][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.469175][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.478811][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.488175][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.505224][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.522440][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.532780][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.544038][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.553145][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.573396][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.583156][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.592245][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.602552][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.663314][ T4194] device veth0_macvtap entered promiscuous mode [ 74.678397][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.689094][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.717014][ T4194] device veth1_macvtap entered promiscuous mode [ 74.745929][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.755910][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.765907][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.778151][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.787798][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.796602][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.829227][ T4193] device veth0_vlan entered promiscuous mode [ 74.885458][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.900235][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.916149][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.929851][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.945615][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.957853][ T4193] device veth1_vlan entered promiscuous mode [ 74.979348][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.989920][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.005616][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.017661][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.029134][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 75.035637][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 75.036295][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.052467][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.063467][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.075972][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.102250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.112281][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 75.118877][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 75.126128][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 75.126299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.151824][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.162930][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.172393][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.182131][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.219433][ T4193] device veth0_macvtap entered promiscuous mode [ 75.226565][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.242058][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.252210][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.262324][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.270544][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.278891][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.291991][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.300998][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.309872][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.318870][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.327683][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.335872][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.361813][ T4193] device veth1_macvtap entered promiscuous mode [ 75.414257][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.426836][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.437093][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.447293][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.456177][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.465293][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.477251][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.485650][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.500556][ T4186] device veth0_vlan entered promiscuous mode [ 75.518174][ T1638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.537554][ T1638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.545629][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.576191][ T4186] device veth1_vlan entered promiscuous mode [ 75.603074][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.634197][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.645713][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.669611][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.682969][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.694885][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.719932][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.747231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.759995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.797355][ T4274] loop2: detected capacity change from 0 to 256 [ 75.816969][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.832076][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.845376][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.857471][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.867918][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.882049][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.895674][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.946687][ T4274] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.968699][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.991641][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.031728][ T1638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.040095][ T1638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.040112][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.057955][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.068255][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.077992][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.151841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.160164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.171690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.192186][ T4186] device veth0_macvtap entered promiscuous mode [ 76.209972][ T4186] device veth1_macvtap entered promiscuous mode [ 76.218707][ T4266] Process accounting resumed [ 76.225542][ T4266] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264) [ 76.235023][ T4266] FAT-fs (loop2): Filesystem has been set read-only [ 76.282264][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.299155][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.329259][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.344550][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.354647][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.365828][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.377243][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.392044][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.403248][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.413861][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.427973][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.441087][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.449349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.458585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.467189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.476912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.516738][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.547208][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.560765][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.576150][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.587341][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.599183][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.610839][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.625811][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.654550][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.699415][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.709420][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.776354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.787145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.798511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.809682][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.830702][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.849696][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.861086][ T4287] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 76.865915][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.957862][ T26] audit: type=1326 audit(1773178838.268:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4286 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d0f8f799 code=0x7ffc0000 [ 77.023059][ T26] audit: type=1326 audit(1773178838.308:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4286 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f37d0f8f799 code=0x7ffc0000 [ 77.060037][ T1638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.081711][ T1638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.101813][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 77.109299][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 77.133995][ T26] audit: type=1326 audit(1773178838.308:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4286 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d0f8f799 code=0x7ffc0000 [ 77.162021][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.177034][ T26] audit: type=1326 audit(1773178838.308:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4286 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f37d0f8f799 code=0x7ffc0000 [ 77.203081][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 77.219512][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.219551][ T4234] Bluetooth: hci1: command 0x0419 tx timeout [ 77.237216][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.255859][ T26] audit: type=1326 audit(1773178838.308:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4286 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d0f8f799 code=0x7ffc0000 [ 77.281925][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 77.305274][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.341119][ T1638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.349401][ T1638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.395700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.530900][ T4289] loop1: detected capacity change from 0 to 8192 [ 77.661308][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.670523][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.679889][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 77.689439][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 77.698735][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 77.707761][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 77.716754][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 77.725758][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.734830][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.743890][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.792878][ T4289] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.907309][ T4306] loop4: detected capacity change from 0 to 2048 [ 78.026973][ T4306] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000004000005,,errors=continue. Quota mode: none. [ 78.371656][ T4318] device syzkaller0 entered promiscuous mode [ 78.523120][ T4327] x_tables: duplicate underflow at hook 3 [ 78.975156][ T4341] loop3: detected capacity change from 0 to 512 [ 80.080614][ C0] sched: RT throttling activated [ 80.098056][ T4341] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.102208][ T4341] EXT4-fs warning (device loop3): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop3. [ 82.114790][ T26] audit: type=1800 audit(1773178843.418:7): pid=4306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 82.150820][ T26] audit: type=1800 audit(1773178843.438:8): pid=4315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 82.849165][ T4359] netlink: 'syz.0.25': attribute type 12 has an invalid length. [ 84.622106][ T4371] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.871873][ T4402] ======================================================= [ 85.871873][ T4402] WARNING: The mand mount option has been deprecated and [ 85.871873][ T4402] and is ignored by this kernel. Remove the mand [ 85.871873][ T4402] option from the mount to silence this warning. [ 85.871873][ T4402] ======================================================= [ 85.960975][ T4402] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 86.017787][ T4402] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.339665][ T4395] netlink: 'syz.2.37': attribute type 12 has an invalid length. [ 86.717371][ T2050] cfg80211: failed to load regulatory.db [ 87.766020][ T4451] loop0: detected capacity change from 0 to 2048 [ 87.979908][ T4459] overlayfs: failed to resolve './file0': -2 [ 88.839366][ T4451] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 88.870006][ T4470] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 88.981371][ T4470] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 89.683441][ T4480] Cannot find add_set index 65532 as target [ 90.755543][ T4490] device syzkaller0 entered promiscuous mode [ 91.556988][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.611779][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 91.932180][ T4515] overlayfs: failed to clone upperpath [ 92.856888][ T4518] Cannot find add_set index 65532 as target [ 96.419638][ T4546] syz.1.82 uses obsolete (PF_INET,SOCK_PACKET) [ 96.839095][ T4554] overlayfs: failed to resolve './file1': -2 [ 97.481141][ T4561] loop4: detected capacity change from 0 to 1024 [ 97.545959][ T4565] device syzkaller0 entered promiscuous mode [ 97.850286][ T4561] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.141911][ T4561] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3885: comm syz.4.89: Allocating blocks 385-513 which overlap fs metadata [ 98.205929][ T4577] Cannot find add_set index 65532 as target [ 98.594825][ T4560] EXT4-fs (loop4): pa ffff888020fe6b60: logic 49152, phys. 129, len 24 [ 98.603625][ T4560] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 8 [ 99.279879][ T4587] loop0: detected capacity change from 0 to 512 [ 99.487452][ T4589] overlayfs: failed to resolve './file1': -2 [ 100.283032][ T4587] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 100.316913][ T4587] ext4 filesystem being mounted at /21/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.450073][ T4587] EXT4-fs error (device loop0): ext4_get_first_dir_block:3597: inode #12: comm syz.0.96: Attempting to read directory block (0) that is past i_size (3) [ 101.775435][ T4617] loop3: detected capacity change from 0 to 164 [ 101.837178][ T4622] loop1: detected capacity change from 0 to 128 [ 102.196199][ T4628] Cannot find add_set index 65532 as target [ 102.279548][ T4628] process 'syz.0.105' launched './file1' with NULL argv: empty string added [ 103.090467][ T4622] FAT-fs (loop1): FAT read failed (blocknr 128) [ 103.379489][ T4639] overlayfs: failed to resolve './file1': -2 [ 104.140289][ T4650] netlink: 72 bytes leftover after parsing attributes in process `syz.3.112'. [ 104.149781][ T4650] netlink: 76 bytes leftover after parsing attributes in process `syz.3.112'. [ 104.473108][ T4660] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.564514][ T4659] loop1: detected capacity change from 0 to 1764 [ 104.649962][ T4659] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 104.698988][ T4659] ISOFS: unable to read i-node block [ 104.723620][ T4659] isofs_fill_super: get root inode failed [ 104.946970][ T4659] Zero length message leads to an empty skb [ 105.261979][ T4677] Cannot find add_set index 65532 as target [ 107.045172][ T4685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.336828][ T4705] loop1: detected capacity change from 0 to 512 [ 107.779928][ T4705] EXT4-fs (loop1): Ignoring removed nobh option [ 107.787775][ T4705] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 109.605177][ T4722] netlink: 72 bytes leftover after parsing attributes in process `syz.2.131'. [ 109.614215][ T4722] netlink: 76 bytes leftover after parsing attributes in process `syz.2.131'. [ 109.705260][ T4705] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 109.849828][ T4728] loop0: detected capacity change from 0 to 1024 [ 109.879924][ T4705] EXT4-fs (loop1): 1 truncate cleaned up [ 110.001751][ T4739] device syzkaller0 entered promiscuous mode [ 110.014417][ T4705] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,nobh,nodiscard,,errors=continue. Quota mode: none. [ 110.123139][ T4728] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nombcache,noquota,delalloc,journal_dev=0x0000000000000008,nodioread_nolock,,errors=continue. Quota mode: none. [ 110.209478][ T4745] Cannot find add_set index 65532 as target [ 110.346399][ T4728] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.129472][ T4752] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.146740][ T4778] netlink: 72 bytes leftover after parsing attributes in process `syz.4.145'. [ 113.156561][ T4778] netlink: 76 bytes leftover after parsing attributes in process `syz.4.145'. [ 113.363907][ T4784] device syzkaller0 entered promiscuous mode [ 114.331099][ T4799] Cannot find add_set index 65532 as target [ 115.913697][ T4806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.154'. [ 115.960881][ T4806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.154'. [ 117.530971][ T4824] device syzkaller0 entered promiscuous mode [ 118.037800][ T4838] netlink: 72 bytes leftover after parsing attributes in process `syz.0.163'. [ 118.047341][ T4838] netlink: 76 bytes leftover after parsing attributes in process `syz.0.163'. [ 118.390129][ T4840] Cannot find add_set index 65532 as target [ 118.815342][ T4848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 118.830788][ T4848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.168'. [ 121.727716][ T4871] device syzkaller0 entered promiscuous mode [ 121.735671][ T4876] netlink: 'syz.3.175': attribute type 1 has an invalid length. [ 121.857758][ T4869] loop3: detected capacity change from 0 to 8192 [ 122.130349][ T4882] netlink: 72 bytes leftover after parsing attributes in process `syz.2.179'. [ 122.139505][ T4882] netlink: 76 bytes leftover after parsing attributes in process `syz.2.179'. [ 122.322447][ T4177] loop3: p1 p2 p4 [ 122.337635][ T4177] loop3: p4 size 262912 extends beyond EOD, truncated [ 122.423197][ T4893] Cannot find add_set index 65532 as target [ 123.292450][ T4869] loop3: p1 p2 p4 [ 123.316488][ T4869] loop3: p4 size 262912 extends beyond EOD, truncated [ 126.135010][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 126.175488][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 126.200230][ T4679] udevd[4679]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 126.398390][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 126.432665][ T4679] udevd[4679]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 126.449631][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 126.659115][ T4923] netlink: 72 bytes leftover after parsing attributes in process `syz.4.191'. [ 126.668914][ T4923] netlink: 76 bytes leftover after parsing attributes in process `syz.4.191'. [ 127.262267][ T4925] device syzkaller0 entered promiscuous mode [ 127.656177][ T4934] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 127.675379][ T4942] loop3: detected capacity change from 0 to 512 [ 127.687576][ T4934] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.709958][ T4937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.196'. [ 127.849112][ T4937] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.857941][ T4937] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.711358][ T4942] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.198: inode has both inline data and extents flags [ 128.776100][ T4942] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.198: couldn't read orphan inode 15 (err -117) [ 129.003245][ T4942] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.673312][ T4967] netlink: 72 bytes leftover after parsing attributes in process `syz.3.204'. [ 129.682256][ T4967] netlink: 76 bytes leftover after parsing attributes in process `syz.3.204'. [ 130.048848][ T4974] autofs4:pid:4974:autofs_fill_super: called with bogus options [ 131.249376][ T4985] device syzkaller0 entered promiscuous mode [ 132.784877][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.240311][ T4999] netlink: 'syz.1.214': attribute type 12 has an invalid length. [ 134.022548][ T4993] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 134.032525][ T5010] loop0: detected capacity change from 0 to 512 [ 134.061335][ T4993] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.357820][ T5018] loop4: detected capacity change from 0 to 512 [ 134.742388][ T5018] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 134.754637][ T5018] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.565527][ T5047] netlink: 'syz.3.229': attribute type 12 has an invalid length. [ 137.336500][ T5041] overlayfs: failed to clone upperpath [ 137.820936][ T5057] loop1: detected capacity change from 0 to 512 [ 137.935872][ T5057] FAT-fs (loop1): IO charset utfѾ¹Éh$Û‚‰œ#wî•w9Á‹C= Yæ’³t ¤•áÁEÅ’&y3‹_òÀ©„@¥rRh¢BÀ&5dùˆÓÁxpOêø¤ß‚upˆ‚êš@HÆäX¡ð[ƒòæ›–[ò²â°î7VGø†¥1‰˜ yª{´îþvŽìX±œõªñ)P1uô&-÷@=õ6 not found [ 138.985065][ T5056] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 139.171702][ T5056] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.460253][ T5076] Cannot find add_set index 65532 as target [ 141.071498][ T5083] netlink: 'syz.2.240': attribute type 12 has an invalid length. [ 142.090033][ T5097] loop0: detected capacity change from 0 to 512 [ 142.194671][ T5097] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 142.219273][ T5097] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.239345][ T26] audit: type=1800 audit(1773178903.548:9): pid=5097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.244" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 144.509647][ T4240] Bluetooth: hci5: Frame reassembly failed (-84) [ 144.542578][ T4240] Bluetooth: hci5: Frame reassembly failed (-84) [ 145.795292][ T5145] loop1: detected capacity change from 0 to 1024 [ 145.899452][ T5145] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 145.920879][ T5145] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 145.963640][ T5145] EXT4-fs error (device loop1): ext4_get_journal_inode:5185: inode #5: comm syz.1.257: unexpected bad inode w/o EXT4_IGET_BAD [ 145.980697][ T4231] Bluetooth: hci5: command 0x1003 tx timeout [ 145.991618][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 145.998135][ T4351] Bluetooth: hci5: Frame reassembly failed (-84) [ 146.006573][ T5145] EXT4-fs (loop1): no journal found [ 146.027587][ T5145] EXT4-fs (loop1): can't get journal size [ 146.071076][ T5145] EXT4-fs (loop1): failed to initialize system zone (-117) [ 146.087200][ T5145] EXT4-fs (loop1): mount failed [ 146.280035][ T5155] loop4: detected capacity change from 0 to 512 [ 146.360736][ T5155] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 146.481365][ T5155] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.700727][ T4231] Bluetooth: hci0: command 0x0401 tx timeout [ 146.733365][ T4231] Bluetooth: hci6: command 0x1003 tx timeout [ 146.897962][ T4197] Bluetooth: hci6: sending frame failed (-49) [ 147.451739][ T5168] loop1: detected capacity change from 0 to 1024 [ 147.593462][ T5168] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 147.850991][ T5168] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000004,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 148.060754][ T4231] Bluetooth: hci5: command 0x1001 tx timeout [ 148.103137][ T4240] Bluetooth: hci5: Frame reassembly failed (-84) [ 148.117980][ T4240] Bluetooth: hci5: Frame reassembly failed (-84) [ 148.402315][ T26] audit: type=1800 audit(1773178909.718:10): pid=5168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.262" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 149.346695][ T4231] Bluetooth: hci6: command 0x1001 tx timeout [ 149.370733][ T4197] Bluetooth: hci6: sending frame failed (-49) [ 149.547540][ T5184] device syzkaller0 entered promiscuous mode [ 150.701104][ T23] Bluetooth: hci5: command 0x1009 tx timeout [ 150.971241][ T5194] device syzkaller0 entered promiscuous mode [ 150.980536][ T5188] loop3: detected capacity change from 0 to 128 [ 151.798679][ T4234] Bluetooth: hci6: command 0x1009 tx timeout [ 155.563675][ T5239] device syzkaller0 entered promiscuous mode [ 155.846018][ T5243] overlayfs: failed to clone upperpath [ 156.102630][ T5253] team0: No ports can be present during mode change [ 158.060443][ T5269] loop0: detected capacity change from 0 to 2048 [ 158.144222][ T5269] loop0: p2 < > p4 [ 158.187196][ T5269] loop0: p4 size 262144 extends beyond EOD, truncated [ 158.218146][ T5280] netlink: 'syz.2.300': attribute type 12 has an invalid length. [ 158.256115][ T5280] netlink: 'syz.2.300': attribute type 29 has an invalid length. [ 158.328345][ T5280] netlink: 148 bytes leftover after parsing attributes in process `syz.2.300'. [ 158.597415][ T5280] netlink: 'syz.2.300': attribute type 2 has an invalid length. [ 158.686492][ T5280] netlink: 'syz.2.300': attribute type 3 has an invalid length. [ 158.701589][ T5280] netlink: 11 bytes leftover after parsing attributes in process `syz.2.300'. [ 159.197132][ T5293] sctp: failed to load transform for md5: -2 [ 159.308596][ T4351] Bluetooth: hci5: Frame reassembly failed (-84) [ 161.058306][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 161.075857][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 161.350736][ T4174] Bluetooth: hci0: command 0x0401 tx timeout [ 161.372838][ T4174] Bluetooth: hci6: command 0x1003 tx timeout [ 161.405349][ T4197] Bluetooth: hci6: sending frame failed (-49) [ 161.414539][ T4174] Bluetooth: hci5: command 0x1003 tx timeout [ 161.434911][ T4344] Bluetooth: hci5: Frame reassembly failed (-84) [ 163.103354][ T5331] netlink: 32 bytes leftover after parsing attributes in process `syz.2.317'. [ 163.420737][ T4174] Bluetooth: hci6: command 0x1001 tx timeout [ 163.429362][ T4197] Bluetooth: hci6: sending frame failed (-49) [ 163.500882][ T23] Bluetooth: hci5: command 0x1001 tx timeout [ 163.519000][ T4613] Bluetooth: hci5: Frame reassembly failed (-84) [ 163.672104][ T4613] Bluetooth: hci5: Frame reassembly failed (-84) [ 165.844545][ T23] Bluetooth: hci6: command 0x1009 tx timeout [ 165.870872][ T23] Bluetooth: hci5: command 0x1009 tx timeout [ 166.426549][ T5356] netlink: 'syz.4.325': attribute type 12 has an invalid length. [ 167.525983][ T5361] autofs4:pid:5361:autofs_fill_super: called with bogus options [ 167.566501][ T5363] netlink: 40 bytes leftover after parsing attributes in process `syz.3.327'. [ 168.528400][ T5361] loop0: detected capacity change from 0 to 2048 [ 168.634446][ T5361] loop0: p2 < > p4 [ 168.721989][ T5361] loop0: p4 size 262144 extends beyond EOD, truncated [ 169.119557][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 169.923665][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 170.305036][ T5390] device syzkaller0 entered promiscuous mode [ 173.305774][ T5407] loop8: detected capacity change from 0 to 7 [ 173.329211][ T5407] Dev loop8: unable to read RDB block 7 [ 173.336454][ T5403] netlink: 'syz.1.338': attribute type 12 has an invalid length. [ 173.402970][ T5408] netlink: 96 bytes leftover after parsing attributes in process `syz.2.339'. [ 173.500822][ T5407] loop8: AHDI p1 p2 p3 [ 173.505204][ T5407] loop8: partition table partially beyond EOD, truncated [ 173.532078][ T5407] loop8: p1 start 1601398130 is beyond EOD, truncated [ 173.561182][ T5407] loop8: p2 start 1702059890 is beyond EOD, truncated [ 176.769628][ T5429] loop3: detected capacity change from 0 to 736 [ 176.826074][ T5433] capability: warning: `syz.2.350' uses deprecated v2 capabilities in a way that may be insecure [ 177.653467][ T5440] netlink: 'syz.2.352': attribute type 12 has an invalid length. [ 178.455254][ T5444] ieee802154 phy1 wpan1: encryption failed: -22 [ 178.549973][ T5446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'. [ 178.745960][ T5450] loop0: detected capacity change from 0 to 512 [ 178.754180][ T5451] netlink: 104 bytes leftover after parsing attributes in process `syz.4.356'. [ 179.343213][ T5450] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 180.140626][ T5450] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 180.192244][ T5450] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 180.209323][ T5469] loop3: detected capacity change from 0 to 512 [ 180.466981][ T5469] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 180.532499][ T5469] EXT4-fs (loop3): 1 truncate cleaned up [ 180.553045][ T5469] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.692561][ T5478] netlink: 'syz.2.364': attribute type 12 has an invalid length. [ 181.503850][ T5450] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 181.593169][ T5450] System zones: 0-2, 18-18, 34-35 [ 181.703071][ T5450] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 183.191382][ T4235] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 184.124538][ T5503] loop4: detected capacity change from 0 to 1024 [ 184.368740][ T5506] netlink: 'syz.3.375': attribute type 12 has an invalid length. [ 185.450701][ T4235] usb 2-1: Using ep0 maxpacket: 16 [ 185.464842][ T5503] EXT4-fs (loop4): inline encryption not supported [ 185.496715][ T5503] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.570876][ T4235] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.602635][ T4235] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.633147][ T4235] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.650117][ T4235] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 185.817052][ T5503] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 185.839304][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.932890][ T4235] usb 2-1: config 0 descriptor?? [ 185.951159][ T4235] usb 2-1: can't set config #0, error -71 [ 185.979261][ T4235] usb 2-1: USB disconnect, device number 2 [ 186.781789][ T5523] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 186.821409][ T5523] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: writeback. [ 187.396980][ T4235] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 187.720732][ T1106] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 187.776097][ T5537] netlink: 72 bytes leftover after parsing attributes in process `syz.1.380'. [ 187.785228][ T5537] netlink: 76 bytes leftover after parsing attributes in process `syz.1.380'. [ 188.004818][ T4230] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 188.030796][ T4235] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.060661][ T4235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.121043][ T4235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.158202][ T4235] usb 5-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 188.198152][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.380167][ T4235] usb 5-1: config 0 descriptor?? [ 188.481573][ T1106] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.508889][ T1106] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.521773][ T4230] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 188.553193][ T1106] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 188.561240][ T4230] usb 4-1: config 0 has no interface number 0 [ 188.573177][ T4230] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 188.578832][ T1106] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.634755][ T1106] usb 1-1: config 0 descriptor?? [ 188.740923][ T4230] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 188.755946][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 188.786673][ T4230] usb 4-1: Manufacturer: syz [ 188.806320][ T4230] usb 4-1: SerialNumber: syz [ 188.854898][ T4230] usb 4-1: config 0 descriptor?? [ 188.874488][ T4235] wacom 0003:056A:0010.0002: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 188.905143][ T4235] wacom 0003:056A:0010.0002: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.4-1/input0 [ 188.923729][ T4235] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0010.0002/input/input5 [ 189.083668][ T5529] udc-core: couldn't find an available UDC or it's busy [ 189.120822][ T5529] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 189.133877][ T1106] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 189.162700][ T1106] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 189.201865][ T1106] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 189.228696][ T1106] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 189.290730][ T1106] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 189.328127][ T4235] usb 5-1: USB disconnect, device number 2 [ 189.344620][ T1106] playstation 0003:054C:0DF2.0003: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 189.593296][ T4230] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.214/input/input8 [ 189.783137][ T5549] loop1: detected capacity change from 0 to 1024 [ 189.796637][ T23] usb 4-1: USB disconnect, device number 2 [ 189.809454][ T5549] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 189.911314][ T5549] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000004,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000346,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 189.940726][ T1106] playstation 0003:054C:0DF2.0003: Failed to retrieve feature with reportID 5: -71 [ 189.956728][ T1106] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense calibration info: -71 [ 189.966476][ T1106] playstation 0003:054C:0DF2.0003: Failed to get calibration data from DualSense [ 189.981649][ T1106] playstation 0003:054C:0DF2.0003: Failed to create dualsense. [ 190.002696][ T1106] playstation: probe of 0003:054C:0DF2.0003 failed with error -71 [ 190.010792][ T26] audit: type=1800 audit(1773178951.318:11): pid=5549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.387" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 190.033588][ T1106] usb 1-1: USB disconnect, device number 2 [ 190.644947][ T5557] fido_id[5557]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 191.208865][ T4230] Bluetooth: hci2: command 0x0406 tx timeout [ 191.245270][ T4230] Bluetooth: hci3: command 0x0406 tx timeout [ 191.271028][ T4174] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 191.356076][ T4230] Bluetooth: hci0: command 0x0406 tx timeout [ 191.377744][ T4230] Bluetooth: hci1: command 0x0406 tx timeout [ 191.415984][ T4230] Bluetooth: hci4: command 0x0406 tx timeout [ 191.752746][ T4174] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 191.773087][ T4174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.803109][ T4174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.831946][ T4174] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 191.951053][ T4174] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 191.969162][ T4174] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 191.996808][ T4174] usb 5-1: Manufacturer: syz [ 192.018131][ T4174] usb 5-1: config 0 descriptor?? [ 192.165068][ T5585] netlink: 72 bytes leftover after parsing attributes in process `syz.2.395'. [ 192.174221][ T5585] netlink: 76 bytes leftover after parsing attributes in process `syz.2.395'. [ 192.672638][ T4174] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 192.680284][ T4174] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 192.700377][ T4174] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 192.781306][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 192.950827][ T4801] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 192.971501][ T4234] usb 5-1: USB disconnect, device number 3 [ 193.040767][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 193.046040][ T4174] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 193.200731][ T4801] usb 1-1: Using ep0 maxpacket: 8 [ 193.320771][ T4801] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 193.334456][ T4801] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 193.346561][ T4801] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 193.360755][ T4801] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 193.361726][ T23] usb 2-1: New USB device found, idVendor=0cde, idProduct=001a, bcdDevice=21.32 [ 193.380481][ T4801] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.391730][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.402562][ T23] usb 2-1: Product: syz [ 193.406860][ T23] usb 2-1: Manufacturer: syz [ 193.411917][ T23] usb 2-1: SerialNumber: syz [ 193.419566][ T23] usb 2-1: config 0 descriptor?? [ 193.428087][ T4801] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 193.439232][ T4801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.451158][ T4174] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 193.476035][ T4174] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 193.503590][ T4174] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.516721][ T4174] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 193.713863][ T23] usb 2-1: USB disconnect, device number 3 [ 193.747173][ T5591] udc-core: couldn't find an available UDC or it's busy [ 193.760958][ T4801] usb 1-1: usb_control_msg returned -32 [ 193.789288][ T4801] usbtmc 1-1:16.0: can't read capabilities [ 193.807807][ T5591] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 193.957588][ T5591] udc-core: couldn't find an available UDC or it's busy [ 193.970197][ T5591] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 193.979856][ T5591] udc-core: couldn't find an available UDC or it's busy [ 194.022975][ T5591] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 194.049672][ T5591] udc-core: couldn't find an available UDC or it's busy [ 194.063766][ T5591] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 194.227748][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.278296][ T5591] udc-core: couldn't find an available UDC or it's busy [ 194.289944][ T5591] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 194.306029][ T4801] usb 1-1: USB disconnect, device number 3 [ 194.401012][ T4174] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 194.410682][ T4174] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 194.418782][ T4174] usb 4-1: Product: syz [ 194.424830][ T4174] usb 4-1: Manufacturer: syz [ 194.466014][ T5593] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 194.481854][ T4174] cdc_wdm 4-1:1.0: skipping garbage [ 194.490804][ T4174] cdc_wdm 4-1:1.0: skipping garbage [ 194.496361][ T4174] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 195.506780][ T5593] udc-core: couldn't find an available UDC or it's busy [ 195.560159][ T5593] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 195.608225][ T4235] usb 4-1: USB disconnect, device number 3 [ 195.628234][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 195.751117][ T4801] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 196.160896][ T4801] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 196.171209][ T4801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 196.181685][ T4801] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 196.210940][ T4235] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 196.461580][ T4801] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 196.480605][ T4801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.488649][ T4801] usb 1-1: Product: syz [ 196.500607][ T4801] usb 1-1: Manufacturer: syz [ 196.517083][ T4801] usb 1-1: SerialNumber: syz [ 196.532818][ T4801] usb 1-1: config 0 descriptor?? [ 196.552156][ T5610] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 196.696126][ T5627] netlink: 72 bytes leftover after parsing attributes in process `syz.2.409'. [ 196.705408][ T5627] netlink: 76 bytes leftover after parsing attributes in process `syz.2.409'. [ 196.812258][ T4174] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 196.848508][ T4234] usb 1-1: USB disconnect, device number 4 [ 196.990727][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 197.101228][ T4174] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 197.190791][ T4235] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 197.198417][ T4235] usb 4-1: can't read configurations, error -71 [ 197.211033][ T4174] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.227983][ T4174] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.239768][ T4174] usb 5-1: config 0 interface 0 has no altsetting 0 [ 197.249733][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 197.451033][ T4174] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.460116][ T4174] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.472147][ T4174] usb 5-1: config 0 interface 0 has no altsetting 0 [ 197.721837][ T4174] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.766961][ T4174] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.832131][ T23] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 197.863974][ T4174] usb 5-1: config 0 interface 0 has no altsetting 0 [ 197.888266][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.949797][ T23] usb 2-1: Product: syz [ 197.979777][ T23] usb 2-1: Manufacturer: syz [ 198.001219][ T4174] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.023777][ T23] usb 2-1: SerialNumber: syz [ 198.051303][ T4174] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.241079][ T23] usb 2-1: config 0 descriptor?? [ 198.250658][ T4174] usb 5-1: config 0 interface 0 has no altsetting 0 [ 198.330826][ T4174] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.348099][ T4174] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.370268][ T4174] usb 5-1: config 0 interface 0 has no altsetting 0 [ 198.440697][ T4235] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 198.451004][ T4174] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.460416][ T4174] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.471932][ T4174] usb 5-1: config 0 interface 0 has no altsetting 0 [ 198.511016][ T23] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 198.520844][ T1106] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 198.560903][ T4174] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.570243][ T4174] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.582124][ T4174] usb 5-1: config 0 interface 0 has no altsetting 0 [ 198.660811][ T4174] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.670893][ T4174] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.682369][ T4174] usb 5-1: config 0 interface 0 has no altsetting 0 [ 198.730779][ T4235] usb 4-1: Using ep0 maxpacket: 32 [ 198.810766][ T1106] usb 1-1: Using ep0 maxpacket: 16 [ 198.840810][ T4174] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 198.850145][ T4174] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 198.860929][ T4174] usb 5-1: Product: syz [ 198.863118][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.865348][ T4174] usb 5-1: Manufacturer: syz [ 198.881851][ T4174] usb 5-1: SerialNumber: syz [ 198.887073][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.898640][ T4174] usb 5-1: config 0 descriptor?? [ 198.914655][ T4235] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 198.924151][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.936430][ T4235] usb 4-1: config 0 descriptor?? [ 198.956888][ T4174] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 199.126906][ T4235] hub 4-1:0.0: USB hub found [ 199.159489][ T4266] usb 5-1: USB disconnect, device number 4 [ 199.175295][ T4266] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 199.221970][ T4235] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 199.246754][ T5641] overlayfs: failed to clone upperpath [ 199.664001][ T4235] hid-generic 0003:046D:C31C.0005: unknown main item tag 0x0 [ 199.683342][ T4235] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 200.121981][ T23] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 200.133888][ T23] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 200.143149][ T23] usb 2-1: media controller created [ 200.165183][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.229612][ T23] i2c i2c-1: Added multiplexed i2c bus 2 [ 200.236957][ T23] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 200.245532][ T23] usb 2-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 200.272323][ T23] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 200.319127][ T23] DVB: Unable to find symbol fc0012_attach() [ 200.336471][ T5629] usb 4-1: reset high-speed USB device number 5 using dummy_hcd [ 200.679477][ T23] usb 2-1: USB disconnect, device number 5 [ 200.922125][ T4235] usb 4-1: USB disconnect, device number 5 [ 200.933496][ T5629] usbhid 4-1:0.0: reset_resume error -19 [ 201.030693][ T4174] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 201.100737][ T1106] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 201.108599][ T1106] usb 1-1: can't read configurations, error -71 [ 201.420789][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 201.550718][ T4235] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 201.600952][ T4174] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 201.614661][ T4174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.625079][ T4174] usb 5-1: Product: syz [ 201.629642][ T4174] usb 5-1: Manufacturer: syz [ 201.637014][ T4174] usb 5-1: SerialNumber: syz [ 201.655430][ T4174] usb 5-1: config 0 descriptor?? [ 201.691245][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 201.713405][ T4174] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 201.731463][ T5670] netlink: 72 bytes leftover after parsing attributes in process `syz.0.424'. [ 201.742698][ T5670] netlink: 76 bytes leftover after parsing attributes in process `syz.0.424'. [ 201.790698][ T4235] usb 4-1: Using ep0 maxpacket: 32 [ 201.851001][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.868815][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.879443][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 201.898856][ T23] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 201.908459][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.911367][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.938743][ T23] usb 2-1: config 0 descriptor?? [ 201.946522][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.965466][ T4235] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 201.983916][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.000974][ T4235] usb 4-1: config 0 descriptor?? [ 202.070729][ T4235] usb 4-1: can't set config #0, error -71 [ 202.081325][ T4235] usb 4-1: USB disconnect, device number 6 [ 202.201743][ T5660] udc-core: couldn't find an available UDC or it's busy [ 202.216072][ T5660] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 202.451321][ T4174] gspca_stk1135: reg_w 0x3 err -71 [ 202.457571][ T4174] gspca_stk1135: serial bus timeout: status=0x00 [ 202.465745][ T4174] gspca_stk1135: Sensor write failed [ 202.471990][ T4174] gspca_stk1135: serial bus timeout: status=0x00 [ 202.480210][ T4174] gspca_stk1135: Sensor write failed [ 202.488965][ T23] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 202.500621][ T4174] gspca_stk1135: serial bus timeout: status=0x00 [ 202.507832][ T4174] gspca_stk1135: Sensor read failed [ 202.523607][ T23] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 202.537587][ T23] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 202.546894][ T4174] gspca_stk1135: serial bus timeout: status=0x00 [ 202.565848][ T4174] gspca_stk1135: Sensor read failed [ 202.571762][ T23] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 202.579621][ T4174] gspca_stk1135: Detected sensor type unknown (0x0) [ 202.595718][ T23] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 202.612360][ T4174] gspca_stk1135: serial bus timeout: status=0x00 [ 202.620873][ T23] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 202.629510][ T23] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 202.666333][ T4174] gspca_stk1135: Sensor read failed [ 202.672264][ T23] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 202.679527][ T23] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 202.687636][ T4174] gspca_stk1135: serial bus timeout: status=0x00 [ 202.710853][ T4174] gspca_stk1135: Sensor read failed [ 202.716273][ T4174] gspca_stk1135: serial bus timeout: status=0x00 [ 202.723049][ T4174] gspca_stk1135: Sensor write failed [ 202.728390][ T4174] gspca_stk1135: serial bus timeout: status=0x00 [ 202.735849][ T23] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 202.770471][ T4174] gspca_stk1135: Sensor write failed [ 202.777585][ T4174] stk1135: probe of 5-1:0.0 failed with error -71 [ 202.802102][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0006/input/input9 [ 202.825374][ T4174] usb 5-1: USB disconnect, device number 5 [ 202.904313][ T23] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 202.940192][ T23] usb 2-1: USB disconnect, device number 6 [ 203.148782][ T5683] fido_id[5683]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 203.437941][ T5688] overlayfs: missing 'lowerdir' [ 204.870071][ T5736] overlayfs: missing 'lowerdir' [ 205.756464][ T5749] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 205.760842][ T5760] loop1: detected capacity change from 0 to 2048 [ 205.803623][ T4177] loop1: p3 < > p4 < > [ 205.808189][ T4177] loop1: partition table partially beyond EOD, truncated [ 205.832763][ T5749] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.844980][ T4177] loop1: p3 start 4284160 is beyond EOD, truncated [ 205.860356][ T5760] loop1: p3 < > p4 < > [ 205.867267][ T5760] loop1: partition table partially beyond EOD, truncated [ 205.907802][ T5760] loop1: p3 start 4284160 is beyond EOD, truncated [ 206.119720][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 206.224821][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 206.713263][ T5788] overlayfs: missing 'lowerdir' [ 207.473204][ T5795] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 207.481583][ T5795] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.781301][ T5816] tipc: Enabling of bearer rejected, failed to enable media [ 207.798604][ T5816] device syzkaller0 entered promiscuous mode [ 207.945038][ T4266] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 207.981701][ T4266] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 208.350055][ T5827] overlayfs: missing 'lowerdir' [ 208.650700][ T4230] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 208.757159][ T5845] device syzkaller0 entered promiscuous mode [ 209.161404][ T4230] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.442308][ T4230] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 209.471558][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.529913][ T4230] usb 2-1: Product: syz [ 209.559176][ T4230] usb 2-1: Manufacturer: syz [ 209.588874][ T4230] usb 2-1: SerialNumber: syz [ 209.894737][ T5851] netlink: 9 bytes leftover after parsing attributes in process `syz.3.500'. [ 209.915516][ T5851] device gretap0 entered promiscuous mode [ 210.086917][ T5857] device syzkaller1 entered promiscuous mode [ 210.996530][ T5883] overlayfs: missing 'lowerdir' [ 211.181249][ T4230] cdc_ncm 2-1:1.0: bind() failure [ 211.190317][ T4230] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 211.197420][ T4230] cdc_ncm 2-1:1.1: bind() failure [ 211.214806][ T4230] usb 2-1: USB disconnect, device number 7 [ 211.596989][ T5889] tipc: Enabling of bearer rejected, failed to enable media [ 212.473797][ T5914] overlayfs: statfs failed on './file0' [ 212.693096][ T5919] overlayfs: missing 'lowerdir' [ 213.426272][ T5932] tipc: Enabling of bearer rejected, failed to enable media [ 213.440301][ T5931] overlayfs: failed to clone upperpath [ 213.461411][ T4230] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 213.554278][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.530'. [ 213.710932][ T4230] usb 1-1: Using ep0 maxpacket: 8 [ 213.880777][ T4230] usb 1-1: unable to get BOS descriptor or descriptor too short [ 213.960950][ T4230] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.996617][ T4230] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.180785][ T1106] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 214.191053][ T4230] usb 1-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 214.200430][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.230754][ T4230] usb 1-1: Product: syz [ 214.234980][ T4230] usb 1-1: Manufacturer: syz [ 214.239732][ T4230] usb 1-1: SerialNumber: syz [ 214.590897][ T1106] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.621165][ T1106] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.628654][ T4230] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 214.717481][ T1106] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.845762][ T1106] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.938415][ T1106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.284426][ T1106] usb 4-1: config 0 descriptor?? [ 215.611583][ T4230] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 215.970004][ T5982] overlayfs: missing 'workdir' [ 216.003598][ T1106] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.181582][ T1106] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.617499][ T4230] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 216.635751][ T5988] device syzkaller0 entered promiscuous mode [ 216.696381][ T4230] usb 1-1: USB disconnect, device number 7 [ 216.720885][ T1106] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.728912][ T1106] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.736765][ T1106] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.745326][ T1106] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.753895][ T1106] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.761658][ T1106] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.769258][ T1106] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.811922][ T1106] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.858055][ T1106] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.881221][ T1106] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.918242][ T1106] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.926410][ T1106] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.934825][ T1106] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 216.943842][ T1106] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 216.981608][ T1106] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 217.049536][ T1106] usb 4-1: USB disconnect, device number 7 [ 217.062229][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.207303][ T6002] fido_id[6002]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 218.725157][ T6035] overlayfs: missing 'workdir' [ 218.758994][ T6037] wireguard: wg2: Could not create IPv4 socket [ 220.461803][ T4266] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 220.726371][ T4266] usb 1-1: Using ep0 maxpacket: 32 [ 220.736697][ T6071] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 220.771003][ T6071] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 221.691820][ T4266] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 221.700506][ T4266] usb 1-1: config 0 has no interface number 0 [ 221.709009][ T4266] usb 1-1: config 0 interface 184 has no altsetting 0 [ 221.891371][ T4266] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 221.910513][ T4266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.921117][ T4266] usb 1-1: Product: syz [ 221.925337][ T4266] usb 1-1: Manufacturer: syz [ 221.944142][ T4266] usb 1-1: SerialNumber: syz [ 221.975490][ T4266] usb 1-1: config 0 descriptor?? [ 222.041820][ T4266] smsc75xx v1.0.0 [ 222.252617][ T6098] fuse: Bad value for 'fd' [ 222.927466][ T4266] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 222.958868][ T4266] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 223.036852][ T4266] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 223.048612][ T4266] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 223.089198][ T4266] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 223.128804][ T4266] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 223.176711][ T4266] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 223.227181][ T4266] usb 1-1: USB disconnect, device number 8 [ 223.716970][ T6127] device syzkaller0 entered promiscuous mode [ 225.030714][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 225.411104][ T23] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 225.425005][ T23] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 225.530400][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 225.587227][ T23] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.631828][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.674047][ T23] usb 2-1: config 0 descriptor?? [ 225.720274][ T23] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 226.500235][ T4264] Bluetooth: hci5: Frame reassembly failed (-84) [ 227.374005][ T6182] overlayfs: failed to clone upperpath [ 227.678989][ T4230] usb 2-1: USB disconnect, device number 8 [ 228.000726][ T4266] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 228.260780][ T4266] usb 4-1: Using ep0 maxpacket: 32 [ 228.400910][ T4266] usb 4-1: config 8 has an invalid interface number: 77 but max is 0 [ 228.409222][ T4266] usb 4-1: config 8 has an invalid descriptor of length 1, skipping remainder of the config [ 228.419680][ T4266] usb 4-1: config 8 has no interface number 0 [ 228.425950][ T4266] usb 4-1: config 8 interface 77 has no altsetting 0 [ 228.540726][ T4234] Bluetooth: hci5: command 0x1003 tx timeout [ 228.547056][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 228.601157][ T4266] usb 4-1: New USB device found, idVendor=470c, idProduct=8062, bcdDevice=95.49 [ 228.610864][ T4266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.619083][ T4266] usb 4-1: Product: syz [ 228.624577][ T4266] usb 4-1: Manufacturer: syz [ 228.629313][ T4266] usb 4-1: SerialNumber: syz [ 228.961255][ T4266] usb 4-1: USB disconnect, device number 8 [ 229.911562][ T6249] syz.1.630 (6249) used greatest stack depth: 18000 bytes left [ 230.181879][ T6258] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 230.190052][ T6258] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 230.620700][ T4234] Bluetooth: hci5: command 0x1001 tx timeout [ 230.634131][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 231.235019][ T6285] netlink: 37 bytes leftover after parsing attributes in process `syz.3.643'. [ 232.020902][ T1106] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 232.424102][ T1106] usb 2-1: Using ep0 maxpacket: 16 [ 232.651540][ T1106] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 232.672896][ T1106] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.783591][ T1106] usb 2-1: config 1 has no interface number 0 [ 234.199021][ T1106] usb 2-1: config 1 interface 105 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0 [ 234.212531][ T1106] usb 2-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.226227][ T1106] usb 2-1: config 1 interface 105 has no altsetting 0 [ 234.243916][ T4234] Bluetooth: hci5: command 0x1009 tx timeout [ 234.415619][ T1106] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 234.431628][ T1106] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 234.440485][ T1106] usb 2-1: Product: syz [ 234.450412][ T1106] usb 2-1: Manufacturer: syz [ 234.456660][ T1106] usb 2-1: SerialNumber: syz [ 234.738441][ T1106] aqc111: probe of 2-1:1.105 failed with error -22 [ 235.155294][ T6357] netlink: 'syz.3.667': attribute type 12 has an invalid length. [ 236.201867][ T1106] usb 2-1: USB disconnect, device number 9 [ 236.269989][ T6362] overlayfs: failed to clone upperpath [ 237.386191][ T6398] netlink: 'syz.1.678': attribute type 12 has an invalid length. [ 238.858082][ T6416] device syzkaller0 entered promiscuous mode [ 239.121351][ T6424] fuse: Bad value for 'fd' [ 239.329253][ T6429] netlink: 'syz.3.691': attribute type 12 has an invalid length. [ 240.405459][ T6424] overlayfs: failed to clone upperpath [ 240.504327][ T6434] kvm: emulating exchange as write [ 242.011332][ T6478] netlink: 'syz.4.703': attribute type 12 has an invalid length. [ 242.940658][ T23] Bluetooth: hci5: command 0x1003 tx timeout [ 242.955997][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 245.684112][ T4230] Bluetooth: hci5: command 0x1001 tx timeout [ 245.691399][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 245.703498][ T6508] netlink: 'syz.4.714': attribute type 12 has an invalid length. [ 245.827470][ T6509] device syzkaller0 entered promiscuous mode [ 246.378981][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'. [ 246.504981][ T6527] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 247.740885][ T4230] Bluetooth: hci5: command 0x1009 tx timeout [ 248.292938][ T6548] device syzkaller0 entered promiscuous mode [ 248.643281][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'. [ 249.379786][ T6582] tipc: Enabling of bearer rejected, failed to enable media [ 249.497047][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.739'. [ 249.514685][ T6587] device vlan2 entered promiscuous mode [ 249.530866][ T6587] device bond0 entered promiscuous mode [ 249.536467][ T6587] device bond_slave_0 entered promiscuous mode [ 249.554472][ T6587] device bond_slave_1 entered promiscuous mode [ 249.570847][ T4174] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 249.942403][ T4174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.964322][ T4174] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 249.990721][ T4174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.023949][ T4174] usb 1-1: config 0 descriptor?? [ 250.078051][ T6614] tipc: Enabling of bearer rejected, failed to enable media [ 250.102706][ T6615] netlink: 'syz.4.746': attribute type 10 has an invalid length. [ 250.171178][ T6615] team0: Device ipvlan1 failed to register rx_handler [ 250.360852][ T4174] usbhid 1-1:0.0: can't add hid device: -71 [ 250.378650][ T4174] usbhid: probe of 1-1:0.0 failed with error -71 [ 250.419321][ T4174] usb 1-1: USB disconnect, device number 9 [ 251.019241][ T6642] device syzkaller0 entered promiscuous mode [ 251.265306][ T6648] device ip6erspan0 entered promiscuous mode [ 251.320731][ T4174] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 251.376162][ T6653] tipc: Started in network mode [ 251.405097][ T6653] tipc: Node identity 9235d24a0d53, cluster identity 4711 [ 251.412992][ T6653] tipc: Enabled bearer , priority 0 [ 251.429720][ T6657] device syzkaller0 entered promiscuous mode [ 251.450473][ T6659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.762'. [ 251.465127][ T6659] device geneve2 entered promiscuous mode [ 251.481500][ T6652] tipc: Resetting bearer [ 251.529747][ T6652] tipc: Disabling bearer [ 251.711775][ T4174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.737018][ T4174] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 251.767157][ T4174] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.795932][ T4174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.818684][ T4174] usb 1-1: config 0 descriptor?? [ 252.293761][ T4174] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 252.326943][ T4174] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 252.631283][ C0] plantronics 0003:047F:FFFF.0009: hid_field_extract() called with n (132) > 32! (syz.1.775) [ 252.848244][ T4801] usb 1-1: USB disconnect, device number 10 [ 253.091105][ T6718] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.098827][ T6718] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.218274][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.784'. [ 253.228521][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.784'. [ 253.244531][ T6725] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.254010][ T6725] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.262925][ T6725] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.271959][ T6725] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.345547][ T6728] netlink: 'syz.2.785': attribute type 3 has an invalid length. [ 254.733628][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.806'. [ 254.819870][ T6780] team0 (unregistering): Port device team_slave_0 removed [ 254.858536][ T6780] team0 (unregistering): Port device team_slave_1 removed [ 255.149972][ T6790] device syzkaller0 entered promiscuous mode [ 255.580404][ T6796] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 255.663595][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.086476][ T6751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.352056][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.828'. [ 260.455244][ T6894] device bond_slave_0 entered promiscuous mode [ 260.462028][ T6894] device bond_slave_1 entered promiscuous mode [ 260.624236][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'. [ 260.640462][ T6897] device bond_slave_0 left promiscuous mode [ 260.646645][ T6897] device bond_slave_1 left promiscuous mode [ 261.047130][ T6904] device syzkaller0 entered promiscuous mode [ 261.498840][ T6924] netlink: 'syz.0.851': attribute type 1 has an invalid length. [ 261.553108][ T6929] device syzkaller0 entered promiscuous mode [ 261.709475][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 261.735308][ T6937] n: the hash_elasticity option has been deprecated and is always 16 [ 261.767796][ T6937] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 261.795436][ T6935] tipc: Enabled bearer , priority 14 [ 261.809254][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 262.040054][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.861'. [ 262.336919][ T6956] tipc: Started in network mode [ 262.355471][ T6956] tipc: Node identity 9e600eb8cff9, cluster identity 4711 [ 262.395447][ T6956] tipc: Enabled bearer , priority 0 [ 262.457892][ T6959] 8021q: adding VLAN 0 to HW filter on device bond2 [ 262.555251][ T6958] device syzkaller0 entered promiscuous mode [ 262.605970][ T6961] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 262.674311][ T4240] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 262.704658][ T6955] tipc: Resetting bearer [ 262.832145][ T9] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 262.853398][ T6955] tipc: Disabling bearer [ 262.888934][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 262.911840][ T1106] tipc: Node number set to 2674315850 [ 263.055193][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'. [ 263.142104][ T4801] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 263.431893][ T4801] usb 2-1: Using ep0 maxpacket: 32 [ 263.590948][ T4801] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 263.604840][ T4801] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.644316][ T4801] usb 2-1: config 0 has no interface number 0 [ 263.664090][ T4801] usb 2-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.708784][ T4801] usb 2-1: config 0 interface 12 has no altsetting 0 [ 263.841941][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.877'. [ 263.859077][ T7004] device macvtap1 entered promiscuous mode [ 263.866598][ T7004] device bond0 entered promiscuous mode [ 263.881831][ T7004] device bond_slave_0 entered promiscuous mode [ 263.890176][ T7004] device bond_slave_1 entered promiscuous mode [ 263.907031][ T7004] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 263.917519][ T4801] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 263.934449][ T4801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.948380][ T4801] usb 2-1: Product: syz [ 263.974002][ T4801] usb 2-1: Manufacturer: syz [ 263.998201][ T4801] usb 2-1: SerialNumber: syz [ 264.025538][ T4801] usb 2-1: config 0 descriptor?? [ 264.072381][ T4801] f81534 2-1:0.12: required endpoints missing [ 264.324380][ T4801] usb 2-1: USB disconnect, device number 10 [ 264.422677][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 265.252190][ T7036] netlink: 32 bytes leftover after parsing attributes in process `syz.1.888'. [ 265.282587][ T7036] netlink: 40 bytes leftover after parsing attributes in process `syz.1.888'. [ 265.756614][ T7057] tipc: Started in network mode [ 265.787393][ T7057] tipc: Node identity ca0d8571144f, cluster identity 4711 [ 265.801062][ T7057] tipc: Enabled bearer , priority 0 [ 265.896587][ T7064] device syzkaller0 entered promiscuous mode [ 265.960609][ T2050] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 266.023644][ T7056] tipc: Resetting bearer [ 266.119193][ T7056] tipc: Disabling bearer [ 266.220705][ T2050] usb 2-1: Using ep0 maxpacket: 32 [ 266.340806][ T2050] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 266.360018][ T2050] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.407472][ T2050] usb 2-1: config 0 has no interface number 0 [ 266.440709][ T2050] usb 2-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.474783][ T2050] usb 2-1: config 0 interface 12 has no altsetting 0 [ 266.640851][ T2050] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 266.670600][ T2050] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.689031][ T2050] usb 2-1: Product: syz [ 266.699179][ T2050] usb 2-1: Manufacturer: syz [ 266.719481][ T2050] usb 2-1: SerialNumber: syz [ 266.740940][ T2050] usb 2-1: config 0 descriptor?? [ 266.782392][ T2050] f81534 2-1:0.12: required endpoints missing [ 267.018148][ T4801] usb 2-1: USB disconnect, device number 11 [ 267.214832][ T7099] device batadv0 entered promiscuous mode [ 267.232030][ T7099] device team0 entered promiscuous mode [ 267.250600][ T7099] device team_slave_0 entered promiscuous mode [ 267.257792][ T7099] device team_slave_1 entered promiscuous mode [ 267.272851][ T7099] device hsr1 entered promiscuous mode [ 267.283216][ T7099] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 267.303003][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 267.348173][ T7098] netlink: set zone limit has 8 unknown bytes [ 267.722796][ T7116] device syzkaller0 entered promiscuous mode [ 268.346754][ T7135] netlink: 'syz.1.921': attribute type 12 has an invalid length. [ 269.710660][ T1106] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 269.960638][ T1106] usb 4-1: Using ep0 maxpacket: 32 [ 270.081060][ T1106] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 270.089467][ T1106] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.121432][ T1106] usb 4-1: config 0 has no interface number 0 [ 270.123737][ T7160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.931'. [ 270.154455][ T1106] usb 4-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.195274][ T7160] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.204293][ T7160] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.210490][ T1106] usb 4-1: config 0 interface 12 has no altsetting 0 [ 270.213373][ T7160] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.228776][ T7160] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.252136][ T7164] netlink: 'syz.2.932': attribute type 1 has an invalid length. [ 270.367258][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.931'. [ 270.380043][ T1106] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 270.419946][ T1106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.441563][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.931'. [ 270.450855][ T1106] usb 4-1: Product: syz [ 270.462005][ T1106] usb 4-1: Manufacturer: syz [ 270.484001][ T1106] usb 4-1: SerialNumber: syz [ 270.492651][ T7166] netlink: 72 bytes leftover after parsing attributes in process `syz.1.923'. [ 270.502604][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.931'. [ 270.521395][ T1106] usb 4-1: config 0 descriptor?? [ 270.526403][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.923'. [ 270.570831][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'. [ 270.574636][ T1106] f81534 4-1:0.12: required endpoints missing [ 270.610492][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'. [ 270.876081][ T7170] netlink: 'syz.4.933': attribute type 12 has an invalid length. [ 271.695966][ T4266] usb 4-1: USB disconnect, device number 9 [ 271.822952][ T7178] device syzkaller0 entered promiscuous mode [ 273.388209][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'. [ 274.372349][ T7236] device syzkaller0 entered promiscuous mode [ 274.560768][ T4235] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 274.733055][ T7246] device vlan2 entered promiscuous mode [ 274.750604][ T7246] device geneve1 entered promiscuous mode [ 274.820734][ T4235] usb 4-1: Using ep0 maxpacket: 32 [ 274.920043][ T7249] tipc: Enabled bearer , priority 0 [ 274.940904][ T4235] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 274.959784][ T4235] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.964534][ T7249] device syzkaller0 entered promiscuous mode [ 274.987906][ T4235] usb 4-1: config 0 has no interface number 0 [ 275.008054][ T4235] usb 4-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.045411][ T7249] tipc: Resetting bearer [ 275.051827][ T4235] usb 4-1: config 0 interface 12 has no altsetting 0 [ 275.071704][ T7248] tipc: Resetting bearer [ 275.098520][ T7248] tipc: Disabling bearer [ 275.230912][ T4235] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 275.250417][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.283621][ T4235] usb 4-1: Product: syz [ 275.287872][ T4235] usb 4-1: Manufacturer: syz [ 275.311713][ T4235] usb 4-1: SerialNumber: syz [ 275.336780][ T4235] usb 4-1: config 0 descriptor?? [ 275.392555][ T4235] f81534 4-1:0.12: required endpoints missing [ 275.483608][ T7268] device syzkaller0 entered promiscuous mode [ 275.515374][ T7270] netlink: 27 bytes leftover after parsing attributes in process `syz.1.965'. [ 275.607592][ T4234] usb 4-1: USB disconnect, device number 10 [ 275.768528][ T7280] tipc: Enabled bearer , priority 0 [ 275.868631][ T7280] device syzkaller0 entered promiscuous mode [ 275.921734][ T7279] tipc: Resetting bearer [ 276.014698][ T7279] tipc: Disabling bearer [ 277.512274][ T7303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.978'. [ 277.531821][ T7303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.978'. [ 277.765184][ T7331] netlink: set zone limit has 8 unknown bytes [ 277.782025][ T7331] netlink: 28 bytes leftover after parsing attributes in process `syz.4.987'. [ 278.004813][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.983'. [ 279.009676][ T7371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.998'. [ 279.064545][ T7374] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 279.077968][ T7374] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.195446][ T7371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.998'. [ 280.351952][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1008'. [ 280.433252][ T7400] device erspan0 entered promiscuous mode [ 280.446974][ T7400] device macvtap1 entered promiscuous mode [ 280.474085][ T7403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1008'. [ 280.511232][ T7403] device erspan0 left promiscuous mode [ 280.547622][ T7403] device macvtap1 left promiscuous mode [ 281.074408][ T7423] xt_hashlimit: size too large, truncated to 1048576 [ 281.642912][ T7419] ================================================================== [ 281.651791][ T7419] BUG: KASAN: use-after-free in ax25_find_cb+0x175/0x3a0 [ 281.658893][ T7419] Read of size 8 at addr ffff8880251a9608 by task syz.3.1014/7419 [ 281.666735][ T7419] [ 281.669186][ T7419] CPU: 1 PID: 7419 Comm: syz.3.1014 Not tainted syzkaller #0 [ 281.676598][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 281.686690][ T7419] Call Trace: [ 281.690092][ T7419] [ 281.693155][ T7419] dump_stack_lvl+0x188/0x250 [ 281.698056][ T7419] ? show_regs_print_info+0x20/0x20 [ 281.703300][ T7419] ? _printk+0xda/0x130 [ 281.707623][ T7419] ? ax25_find_cb+0x175/0x3a0 [ 281.712390][ T7419] ? load_image+0x400/0x400 [ 281.717058][ T7419] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 281.722583][ T7419] print_address_description+0x60/0x2d0 [ 281.728264][ T7419] ? ax25_find_cb+0x175/0x3a0 [ 281.732990][ T7419] kasan_report+0xdf/0x130 [ 281.737608][ T7419] ? ax25_find_cb+0x175/0x3a0 [ 281.742418][ T7419] ax25_find_cb+0x175/0x3a0 [ 281.747089][ T7419] rose_transmit_link+0x169/0x730 [ 281.752166][ T7419] rose_write_internal+0x680/0x1e90 [ 281.757591][ T7419] ? rose_validate_nr+0x120/0x120 [ 281.762659][ T7419] ? __timer_delete+0x6c/0x220 [ 281.767480][ T7419] ? skb_queue_purge+0x62/0x290 [ 281.772494][ T7419] rose_release+0x22a/0x4e0 [ 281.777064][ T7419] sock_close+0xd5/0x240 [ 281.781347][ T7419] ? sock_mmap+0x90/0x90 [ 281.785773][ T7419] __fput+0x234/0x930 [ 281.789924][ T7419] task_work_run+0x125/0x1a0 [ 281.794565][ T7419] get_signal+0x1222/0x12c0 [ 281.799374][ T7419] arch_do_signal_or_restart+0xe7/0x12c0 [ 281.805077][ T7419] ? kick_process+0xd4/0x140 [ 281.809763][ T7419] ? task_work_add+0x1a7/0x1d0 [ 281.815048][ T7419] ? get_sigframe_size+0x10/0x10 [ 281.820247][ T7419] ? __sys_connect+0x278/0x450 [ 281.825083][ T7419] ? exit_to_user_mode_loop+0x3b/0x130 [ 281.830583][ T7419] exit_to_user_mode_loop+0x9e/0x130 [ 281.835908][ T7419] exit_to_user_mode_prepare+0xee/0x180 [ 281.841597][ T7419] syscall_exit_to_user_mode+0x16/0x40 [ 281.847276][ T7419] do_syscall_64+0x58/0xa0 [ 281.851739][ T7419] ? clear_bhb_loop+0x30/0x80 [ 281.856542][ T7419] ? clear_bhb_loop+0x30/0x80 [ 281.861257][ T7419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 281.867219][ T7419] RIP: 0033:0x7f37d0f8f799 [ 281.871676][ T7419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.891686][ T7419] RSP: 002b:00007f37cf1c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 281.900162][ T7419] RAX: fffffffffffffe00 RBX: 00007f37d1209090 RCX: 00007f37d0f8f799 [ 281.908247][ T7419] RDX: 000000000000001c RSI: 0000200000000240 RDI: 000000000000000c [ 281.916268][ T7419] RBP: 00007f37d1025c99 R08: 0000000000000000 R09: 0000000000000000 [ 281.924303][ T7419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.932419][ T7419] R13: 00007f37d1209128 R14: 00007f37d1209090 R15: 00007ffc4057f6e8 [ 281.940454][ T7419] [ 281.943504][ T7419] [ 281.945856][ T7419] Allocated by task 6527: [ 281.950215][ T7419] __kasan_kmalloc+0xb5/0xf0 [ 281.954853][ T7419] ax25_dev_device_up+0x50/0x580 [ 281.959831][ T7419] ax25_device_event+0x483/0x4f0 [ 281.964804][ T7419] raw_notifier_call_chain+0xcb/0x160 [ 281.970299][ T7419] __dev_notify_flags+0x194/0x300 [ 281.975464][ T7419] dev_change_flags+0xe3/0x1a0 [ 281.980377][ T7419] dev_ifsioc+0x130/0xd50 [ 281.984754][ T7419] dev_ioctl+0x545/0xe30 [ 281.989041][ T7419] sock_do_ioctl+0x245/0x320 [ 281.993771][ T7419] sock_ioctl+0x4d2/0x710 [ 281.998260][ T7419] __se_sys_ioctl+0xfa/0x170 [ 282.003079][ T7419] do_syscall_64+0x4c/0xa0 [ 282.007542][ T7419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 282.013629][ T7419] [ 282.015988][ T7419] Freed by task 7415: [ 282.020003][ T7419] kasan_set_track+0x4b/0x70 [ 282.024645][ T7419] kasan_set_free_info+0x1f/0x40 [ 282.029643][ T7419] ____kasan_slab_free+0xd5/0x110 [ 282.034705][ T7419] slab_free_freelist_hook+0xea/0x170 [ 282.040127][ T7419] kfree+0xef/0x2a0 [ 282.044090][ T7419] ax25_release+0x661/0x870 [ 282.048636][ T7419] sock_close+0xd5/0x240 [ 282.052911][ T7419] __fput+0x234/0x930 [ 282.056944][ T7419] task_work_run+0x125/0x1a0 [ 282.061573][ T7419] exit_to_user_mode_loop+0x10f/0x130 [ 282.066981][ T7419] exit_to_user_mode_prepare+0xee/0x180 [ 282.072652][ T7419] syscall_exit_to_user_mode+0x16/0x40 [ 282.078441][ T7419] do_syscall_64+0x58/0xa0 [ 282.082907][ T7419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 282.088933][ T7419] [ 282.091555][ T7419] Last potentially related work creation: [ 282.097298][ T7419] kasan_save_stack+0x35/0x60 [ 282.102012][ T7419] kasan_record_aux_stack+0xb8/0x100 [ 282.107344][ T7419] call_rcu+0x189/0x950 [ 282.111533][ T7419] inetdev_event+0x757/0x1370 [ 282.116245][ T7419] raw_notifier_call_chain+0xcb/0x160 [ 282.121655][ T7419] unregister_netdevice_many+0x1049/0x19f0 [ 282.127493][ T7419] ip_tunnel_delete_nets+0x320/0x370 [ 282.132822][ T7419] cleanup_net+0x791/0xba0 [ 282.137278][ T7419] process_one_work+0x85f/0x1010 [ 282.142254][ T7419] worker_thread+0xaa6/0x1290 [ 282.146972][ T7419] kthread+0x436/0x520 [ 282.151087][ T7419] ret_from_fork+0x1f/0x30 [ 282.155543][ T7419] [ 282.157902][ T7419] Second to last potentially related work creation: [ 282.164510][ T7419] kasan_save_stack+0x35/0x60 [ 282.169313][ T7419] kasan_record_aux_stack+0xb8/0x100 [ 282.175130][ T7419] insert_work+0x54/0x3d0 [ 282.179502][ T7419] __queue_work+0x9c5/0xd50 [ 282.184039][ T7419] queue_work_on+0x124/0x1f0 [ 282.188665][ T7419] inet6addr_event+0x9c/0xc0 [ 282.193297][ T7419] atomic_notifier_call_chain+0x15d/0x280 [ 282.199065][ T7419] ipv6_add_addr+0xb57/0xe10 [ 282.203781][ T7419] addrconf_add_linklocal+0x26a/0x6c0 [ 282.209411][ T7419] addrconf_addr_gen+0x559/0x6b0 [ 282.214390][ T7419] addrconf_init_auto_addrs+0x747/0xb00 [ 282.219980][ T7419] addrconf_notify+0xa6b/0xf00 [ 282.224781][ T7419] raw_notifier_call_chain+0xcb/0x160 [ 282.230189][ T7419] __dev_notify_flags+0x194/0x300 [ 282.235262][ T7419] dev_change_flags+0xe3/0x1a0 [ 282.240064][ T7419] dev_ifsioc+0x130/0xd50 [ 282.244611][ T7419] dev_ioctl+0x545/0xe30 [ 282.248927][ T7419] sock_do_ioctl+0x245/0x320 [ 282.253547][ T7419] sock_ioctl+0x4d2/0x710 [ 282.257902][ T7419] __se_sys_ioctl+0xfa/0x170 [ 282.262545][ T7419] do_syscall_64+0x4c/0xa0 [ 282.266989][ T7419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 282.272924][ T7419] [ 282.275379][ T7419] The buggy address belongs to the object at ffff8880251a9600 [ 282.275379][ T7419] which belongs to the cache kmalloc-192 of size 192 [ 282.289461][ T7419] The buggy address is located 8 bytes inside of [ 282.289461][ T7419] 192-byte region [ffff8880251a9600, ffff8880251a96c0) [ 282.302597][ T7419] The buggy address belongs to the page: [ 282.308545][ T7419] page:ffffea0000946a40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x251a9 [ 282.318789][ T7419] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 282.326677][ T7419] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888016c41a00 [ 282.335340][ T7419] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 282.344099][ T7419] page dumped because: kasan: bad access detected [ 282.350589][ T7419] page_owner tracks the page as allocated [ 282.356330][ T7419] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 12972389436, free_ts 12552637581 [ 282.372318][ T7419] get_page_from_freelist+0x1bbd/0x1ca0 [ 282.378262][ T7419] __alloc_pages+0x1ee/0x480 [ 282.382896][ T7419] alloc_page_interleave+0x24/0x1e0 [ 282.388278][ T7419] new_slab+0xc0/0x4b0 [ 282.392390][ T7419] ___slab_alloc+0x80a/0xdd0 [ 282.397314][ T7419] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 282.402754][ T7419] call_usermodehelper_setup+0x8a/0x260 [ 282.408440][ T7419] kobject_uevent_env+0x65e/0x890 [ 282.413644][ T7419] really_probe+0x77d/0xc80 [ 282.418550][ T7419] __driver_probe_device+0x18c/0x330 [ 282.423895][ T7419] driver_probe_device+0x4f/0x420 [ 282.429346][ T7419] __device_attach_driver+0x2b0/0x500 [ 282.434756][ T7419] bus_for_each_drv+0x184/0x210 [ 282.439643][ T7419] __device_attach+0x2a8/0x480 [ 282.444439][ T7419] bus_probe_device+0xbc/0x1e0 [ 282.449280][ T7419] device_add+0xa00/0xfb0 [ 282.453643][ T7419] page last free stack trace: [ 282.458345][ T7419] free_unref_page_prepare+0x637/0x6c0 [ 282.463845][ T7419] free_unref_page_list+0x119/0x820 [ 282.469096][ T7419] release_pages+0x186c/0x1be0 [ 282.473894][ T7419] tlb_finish_mmu+0x176/0x300 [ 282.478614][ T7419] exit_mmap+0x3d0/0x640 [ 282.482980][ T7419] __mmput+0x115/0x3b0 [ 282.487084][ T7419] free_bprm+0x141/0x300 [ 282.491374][ T7419] kernel_execve+0x380/0x900 [ 282.496000][ T7419] call_usermodehelper_exec_async+0x207/0x350 [ 282.502124][ T7419] ret_from_fork+0x1f/0x30 [ 282.506768][ T7419] [ 282.509299][ T7419] Memory state around the buggy address: [ 282.514970][ T7419] ffff8880251a9500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 282.523150][ T7419] ffff8880251a9580: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 282.531243][ T7419] >ffff8880251a9600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.539801][ T7419] ^ [ 282.544416][ T7419] ffff8880251a9680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 282.552734][ T7419] ffff8880251a9700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 282.561357][ T7419] ================================================================== [ 282.570062][ T7419] Disabling lock debugging due to kernel taint [ 282.576517][ T7419] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 282.583734][ T7419] CPU: 1 PID: 7419 Comm: syz.3.1014 Tainted: G B syzkaller #0 [ 282.592614][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 282.602697][ T7419] Call Trace: [ 282.606011][ T7419] [ 282.609277][ T7419] dump_stack_lvl+0x188/0x250 [ 282.614082][ T7419] ? show_regs_print_info+0x20/0x20 [ 282.619514][ T7419] ? load_image+0x400/0x400 [ 282.624060][ T7419] panic+0x2e5/0x810 [ 282.628090][ T7419] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 282.634285][ T7419] ? bpf_jit_dump+0xd0/0xd0 [ 282.638829][ T7419] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 282.644945][ T7419] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 282.651315][ T7419] ? _raw_spin_unlock+0x40/0x40 [ 282.656212][ T7419] ? ax25_find_cb+0x175/0x3a0 [ 282.660928][ T7419] check_panic_on_warn+0x80/0xa0 [ 282.665900][ T7419] ? ax25_find_cb+0x175/0x3a0 [ 282.670605][ T7419] end_report+0x6d/0xf0 [ 282.674795][ T7419] kasan_report+0x102/0x130 [ 282.679480][ T7419] ? ax25_find_cb+0x175/0x3a0 [ 282.684330][ T7419] ax25_find_cb+0x175/0x3a0 [ 282.689161][ T7419] rose_transmit_link+0x169/0x730 [ 282.694224][ T7419] rose_write_internal+0x680/0x1e90 [ 282.699492][ T7419] ? rose_validate_nr+0x120/0x120 [ 282.704566][ T7419] ? __timer_delete+0x6c/0x220 [ 282.709513][ T7419] ? skb_queue_purge+0x62/0x290 [ 282.714406][ T7419] rose_release+0x22a/0x4e0 [ 282.718988][ T7419] sock_close+0xd5/0x240 [ 282.723439][ T7419] ? sock_mmap+0x90/0x90 [ 282.727718][ T7419] __fput+0x234/0x930 [ 282.731764][ T7419] task_work_run+0x125/0x1a0 [ 282.736408][ T7419] get_signal+0x1222/0x12c0 [ 282.740950][ T7419] arch_do_signal_or_restart+0xe7/0x12c0 [ 282.746626][ T7419] ? kick_process+0xd4/0x140 [ 282.751256][ T7419] ? task_work_add+0x1a7/0x1d0 [ 282.756071][ T7419] ? get_sigframe_size+0x10/0x10 [ 282.761100][ T7419] ? __sys_connect+0x278/0x450 [ 282.766095][ T7419] ? exit_to_user_mode_loop+0x3b/0x130 [ 282.771590][ T7419] exit_to_user_mode_loop+0x9e/0x130 [ 282.776912][ T7419] exit_to_user_mode_prepare+0xee/0x180 [ 282.782785][ T7419] syscall_exit_to_user_mode+0x16/0x40 [ 282.788278][ T7419] do_syscall_64+0x58/0xa0 [ 282.792728][ T7419] ? clear_bhb_loop+0x30/0x80 [ 282.797439][ T7419] ? clear_bhb_loop+0x30/0x80 [ 282.802146][ T7419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 282.808158][ T7419] RIP: 0033:0x7f37d0f8f799 [ 282.812614][ T7419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.832340][ T7419] RSP: 002b:00007f37cf1c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 282.840800][ T7419] RAX: fffffffffffffe00 RBX: 00007f37d1209090 RCX: 00007f37d0f8f799 [ 282.848980][ T7419] RDX: 000000000000001c RSI: 0000200000000240 RDI: 000000000000000c [ 282.856982][ T7419] RBP: 00007f37d1025c99 R08: 0000000000000000 R09: 0000000000000000 [ 282.865074][ T7419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.873251][ T7419] R13: 00007f37d1209128 R14: 00007f37d1209090 R15: 00007ffc4057f6e8 [ 282.881546][ T7419] [ 282.884948][ T7419] Kernel Offset: disabled [ 282.889514][ T7419] Rebooting in 86400 seconds..