last executing test programs: 3.054261267s ago: executing program 4 (id=192): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x6}}, &(0x7f0000000700)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.99819125s ago: executing program 4 (id=193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x570}]}) 2.920326763s ago: executing program 0 (id=194): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x420) umount2(&(0x7f0000000040)='.\x00', 0xa) 2.732418661s ago: executing program 4 (id=198): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) listen(r0, 0x9) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 2.687422533s ago: executing program 2 (id=199): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) write$uinput_user_dev(r0, &(0x7f0000000480)={'syz1\x00', {0x9, 0x200, 0x1, 0x4}, 0x33, [0x5, 0xfffffff8, 0xd, 0xbb, 0x4, 0x3, 0x401, 0x9, 0x800, 0x800, 0x3, 0x0, 0x6, 0x8, 0x0, 0x3a20, 0x0, 0x9, 0x101, 0x10000, 0x8, 0x7fff, 0xfffffff7, 0xc, 0x80, 0x3, 0x7, 0xf, 0x3, 0x101, 0x3, 0x814, 0xc, 0x8, 0x10, 0xea, 0x7, 0xffffffff, 0x4, 0x5, 0x9, 0x2a8, 0x7, 0x9, 0x4, 0x44bc, 0xda6b, 0xd74b, 0xfffffff2, 0x0, 0x2, 0x6, 0x7, 0xf5, 0x6257, 0x8, 0x6, 0x54000000, 0x7, 0x0, 0x101, 0xfffffff9, 0x8000, 0x2], [0x7ff, 0x7ff, 0xca1, 0x8, 0x1, 0xd2f0, 0x2, 0x9, 0xfffff8c3, 0x6, 0x97, 0xfffffc01, 0x1, 0x3, 0xffff, 0x7, 0x1ff, 0x2, 0x1, 0x6, 0x7, 0x400, 0xa634, 0x4f5e, 0x1, 0x5, 0x1, 0x7, 0xd5, 0x1, 0x6, 0x100, 0x200, 0x9, 0xea02, 0x9, 0xa396, 0x1, 0x5, 0x5, 0x140, 0x44, 0x3, 0x7fffffff, 0x0, 0x16614a31, 0x80000000, 0x1, 0x6, 0x0, 0x1, 0x3, 0xc32, 0x10000, 0x5, 0xffff1dfc, 0x3, 0xffff, 0x1, 0x4, 0x4, 0x73, 0xf873, 0x6], [0x7, 0x3, 0x7ff, 0xf, 0x76d, 0x9, 0x5, 0x3, 0x7, 0xbd1, 0xffff, 0xfffffffc, 0x30, 0x1, 0x7, 0x6, 0x5, 0x6, 0x10001, 0x6, 0x8, 0xd8a6, 0x5c8, 0x1, 0x6, 0x916, 0x2, 0x80000000, 0x9, 0x6, 0x5, 0x6, 0x3, 0x8, 0x30, 0x9c97, 0x6, 0x6, 0xf9e, 0x80000001, 0x3, 0x9, 0x5, 0xffffff46, 0x599, 0x2, 0x800, 0x1, 0xd672, 0xfffffffc, 0x2, 0x2, 0x0, 0x1, 0x4, 0xe48a, 0x6, 0x2, 0xfb, 0x8, 0x7fffffff, 0xe24f, 0xb, 0x7], [0x0, 0x0, 0x0, 0x10001, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x44caab61, 0x3, 0x6, 0x9, 0x7fff, 0x40, 0xfffffff1, 0xacfb, 0x1ff, 0x1, 0x5, 0x3, 0x101, 0x4, 0x3ff, 0x6, 0xf, 0x10000, 0x2, 0x6, 0x2, 0x4, 0x40, 0x47, 0x40, 0x1, 0x3, 0x0, 0xff, 0x51f8f6cd, 0x1, 0x3, 0x5f, 0x174d, 0x0, 0x10, 0x40, 0x5, 0x8, 0x8, 0x5, 0x7f, 0xa, 0x5, 0xfffffffd, 0x9, 0x3, 0xffffffff, 0x9554, 0x2, 0xfffffc00, 0xbc, 0xa, 0xc0000000, 0xff, 0xfffffff7]}, 0x45c) 2.564134169s ago: executing program 1 (id=201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x4000000000000000) 2.564011299s ago: executing program 4 (id=202): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_num_supported_iac={{0x7}, {0x6, 0xd}}}}, 0x8) 2.554491349s ago: executing program 2 (id=203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x3, 0x8, 0x1000000000000002, 0x8, 0x800, 0x5, 0x4f, 0x0, 0x80, 0xffffffffffffffff, 0x80, 0xa, 0x7f, 0x8, 0x5fbe, 0x7ff], 0xffff1000, 0x200c02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.54275067s ago: executing program 0 (id=204): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b090d, 0x2, '\x00', @p_u8=&(0x7f0000000480)=0x4}}) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) 2.412363795s ago: executing program 1 (id=205): ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000380)={{}, "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"}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000006800d50300000000000000000a0000000000000004000b000800010002"], 0x24}}, 0x0) 2.412264865s ago: executing program 4 (id=206): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="1201d69cdb9d1808"], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) 2.346013528s ago: executing program 2 (id=207): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000700)) 2.325648089s ago: executing program 1 (id=208): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$alg(0x26, 0x5, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x13, 0x2}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xff7c, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 2.236396303s ago: executing program 0 (id=209): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x900f, 0x100, 0x4, 0x162}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x3, 0x8}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) ioctl$FIDEDUPERANGE(r3, 0xc0189436, 0x0) io_uring_enter(r0, 0x3517, 0x173d, 0x42, 0x0, 0x0) 2.193646665s ago: executing program 2 (id=210): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a44000000001010902"], 0x0) ioctl$EVIOCRMFF(r0, 0x5501, 0x0) 2.048240411s ago: executing program 1 (id=212): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0) keyctl$restrict_keyring(0xa, 0xfffffffffffffffe, 0x0, &(0x7f0000000000)='i\xacl*c\x822') syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) unshare(0x62040200) 1.692307466s ago: executing program 1 (id=215): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000004c0)="a82ac9", 0x3}], 0x1) close_range(r0, r0, 0x0) 1.483533065s ago: executing program 3 (id=218): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x30, 0x12100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000cd}, 0x0) 1.332344102s ago: executing program 3 (id=219): io_uring_setup(0x25f5, &(0x7f00000000c0)={0x0, 0xc63b, 0x0, 0x0, 0x1}) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) 1.276942094s ago: executing program 3 (id=220): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0xb, 0x40000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x429, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4, 0x6, 0x0, 0x2, 0x1, 0x0, 0xfffffffffffffffd, 0x50b, 0x0, 0x0, 0xbd4c, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x2080000000000000, 0x0, 0x4, 0x3, 0x0, 0x40, 0xfffffffffffffffc, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x5, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x8, 0x3, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x2000000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0xfffffffffffffffc, 0xffffffff, 0x3, 0x6, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x200, 0x9, 0x3, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x400, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) 1.196007557s ago: executing program 3 (id=221): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1040}, 0x0) 1.048435094s ago: executing program 3 (id=222): openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04015b0c"], 0x7) 1.038813935s ago: executing program 4 (id=223): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000f600014723fb08cf126500003500000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000274c0340ab0560000611000000010902120001000d00000904"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 936.780099ms ago: executing program 3 (id=224): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000140), 0x4800, &(0x7f0000000300)={[{}]}) socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) 444.34336ms ago: executing program 0 (id=225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4080) 428.882951ms ago: executing program 0 (id=226): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x8b4}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x4, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b850000, 0x2000, 0x0, 0x0, 0x0, 0x10b, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x8b) lseek(r2, 0x0, 0x2) 349.121005ms ago: executing program 0 (id=227): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 276.384418ms ago: executing program 2 (id=228): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) close(r0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 142.403493ms ago: executing program 2 (id=229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x69, 0xacd, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=230): syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21b9ae72ded771e1}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x3b0, 0xd, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x368, 0x3, 0x0, 0x1, [{0x14c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x148, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "9243188b6fd8bb72ea679772eb"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xfb, 0x1, "051fa797f9f32b7ae2d510ca59f4627efea8aa451da113727e44a3298ff41705f5683dff8d76ad30d8d946013482ae8705f4e5b804234f6a464b9c32bae41a37276d5c078c8764e340a27a5839b778fc6331d42d8ce1c26d56a1fadfa310df829182c1aa734730aae667e92110897104da7ae4ff22ffece274c7196cf53774748a3bc30ba2f3f5a2ef69741e38bc8e11092ee3dda674983c28739dec3da0223a0c363374fbb4be767b12de462a9009ea624a6001ac3fff44046f0a0cfac5b515ba03f44167d8e3c36ed58f3c48a56e41919e7ab848dae774d805d81ecc6d9bd5f7db4cc2a471cfe813a1bc4d8d1e7d7d5518e378ce7399"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0xec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x64, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x5abc9fca197f46bd}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5599bff6cfa67afd}, @NFTA_SET_ELEM_KEY={0x7c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0x12c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc6d8e16511cb30b5}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9395}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @masq={{0x9}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0xb8, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x24, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_LAST_SET={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x4041}, 0x4008020) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xc2, 0x10001, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x7800, 0x8, 0x80, 0x5}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@bridge_setlink={0x20, 0x13, 0x4, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, r0, 0x80, 0x210}}, 0x20}, 0x1, 0x0, 0x0, 0x4004005}, 0x40000) syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa3c0011d40ee7ac68fde51e1a59c78ff0e1cb982845a8fd0d"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts. [ 48.300472][ T4172] cgroup: Unknown subsys name 'net' [ 48.434147][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.571577][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.950783][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 51.081104][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 51.132140][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.139283][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.147489][ T4183] device bridge_slave_0 entered promiscuous mode [ 51.157665][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.165203][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.172932][ T4183] device bridge_slave_1 entered promiscuous mode [ 51.203449][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.222305][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 51.234113][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.290566][ T4183] team0: Port device team_slave_0 added [ 51.319969][ T4183] team0: Port device team_slave_1 added [ 51.333032][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 51.342072][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 51.355919][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.363125][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.372131][ T4184] device bridge_slave_0 entered promiscuous mode [ 51.400449][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.407561][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.415619][ T4184] device bridge_slave_1 entered promiscuous mode [ 51.453401][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.460564][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.487468][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.517914][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.525052][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.551068][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.576717][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.618796][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.644622][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.651829][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.659644][ T4193] device bridge_slave_0 entered promiscuous mode [ 51.673334][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.680639][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.688231][ T4182] device bridge_slave_0 entered promiscuous mode [ 51.706279][ T4184] team0: Port device team_slave_0 added [ 51.712780][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.720230][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.727795][ T4193] device bridge_slave_1 entered promiscuous mode [ 51.734714][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.742128][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.749887][ T4190] device bridge_slave_0 entered promiscuous mode [ 51.756986][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.764338][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.772198][ T4182] device bridge_slave_1 entered promiscuous mode [ 51.788841][ T4184] team0: Port device team_slave_1 added [ 51.803518][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.810702][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.818381][ T4190] device bridge_slave_1 entered promiscuous mode [ 51.836528][ T4183] device hsr_slave_0 entered promiscuous mode [ 51.843425][ T4183] device hsr_slave_1 entered promiscuous mode [ 51.892203][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.899199][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.925295][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.939401][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.950496][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.962157][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.974974][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.982464][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.009127][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.021993][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.044304][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.054874][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.105474][ T4190] team0: Port device team_slave_0 added [ 52.140687][ T4190] team0: Port device team_slave_1 added [ 52.157338][ T4193] team0: Port device team_slave_0 added [ 52.167231][ T4193] team0: Port device team_slave_1 added [ 52.175701][ T4182] team0: Port device team_slave_0 added [ 52.188712][ T4184] device hsr_slave_0 entered promiscuous mode [ 52.196096][ T4184] device hsr_slave_1 entered promiscuous mode [ 52.202926][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.211192][ T4184] Cannot create hsr debugfs directory [ 52.229604][ T4182] team0: Port device team_slave_1 added [ 52.251934][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.259111][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.285301][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.306962][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.314130][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.340167][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.358461][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.366177][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.392659][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.416522][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.423745][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.449822][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.482576][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.489679][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.516502][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.554447][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.561570][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.588104][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.619074][ T4193] device hsr_slave_0 entered promiscuous mode [ 52.626183][ T4193] device hsr_slave_1 entered promiscuous mode [ 52.633802][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.641524][ T4193] Cannot create hsr debugfs directory [ 52.668914][ T4190] device hsr_slave_0 entered promiscuous mode [ 52.676111][ T4190] device hsr_slave_1 entered promiscuous mode [ 52.682873][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.690599][ T4190] Cannot create hsr debugfs directory [ 52.710457][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 52.717146][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 52.724014][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 52.731349][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 52.737448][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 52.779961][ T4182] device hsr_slave_0 entered promiscuous mode [ 52.786628][ T4182] device hsr_slave_1 entered promiscuous mode [ 52.793683][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.801361][ T4182] Cannot create hsr debugfs directory [ 52.989239][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.002940][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.017290][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.036299][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.075022][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.094967][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.104405][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.122547][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.166782][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.177589][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.194733][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.205933][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.285758][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.310371][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.319242][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.328227][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.350433][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.365172][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.384095][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.412593][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.427343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.437050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.446654][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.453938][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.475209][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.486592][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.497229][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.506418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.518749][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.532282][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.548748][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.576139][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.585192][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.595150][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.602258][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.611604][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.619827][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.627407][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.636501][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.645736][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.655650][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.665277][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.694865][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.704459][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.724074][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.733269][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.742376][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.751991][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.761079][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.769438][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.778279][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.786761][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.797025][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.816840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.826484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.836235][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.843360][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.882340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.897027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.907861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.925595][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.932749][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.941049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.949546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.958209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.966827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.975546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.984340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.993519][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.000684][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.008349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.016476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.043218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.052865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.064954][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.072256][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.081769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.091065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.109623][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.120937][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.141823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.157331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.166223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.176583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.185225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.194386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.238059][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.246416][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.256690][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.284785][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.292724][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.302390][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.312337][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.321536][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.330540][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.338868][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.353976][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.376635][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.393979][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.406163][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.418891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.429184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.438907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.447368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.455905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.464961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.475471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.502079][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.516506][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.525459][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.539626][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.548556][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.555722][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.565840][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.574507][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.583262][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.590342][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.599076][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.611593][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.619327][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.632564][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.651722][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.668358][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.686483][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.697016][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.713569][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.722322][ T1245] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.729381][ T1245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.765967][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.774450][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.784064][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.790043][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 54.792524][ T4253] Bluetooth: hci1: command 0x041b tx timeout [ 54.805482][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.805633][ T4253] Bluetooth: hci0: command 0x041b tx timeout [ 54.812691][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.818722][ T4253] Bluetooth: hci2: command 0x041b tx timeout [ 54.832548][ T4253] Bluetooth: hci3: command 0x041b tx timeout [ 54.832587][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.848188][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.857264][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.867857][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.876969][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.886193][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.894530][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.903045][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.911044][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.918917][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.929111][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.939507][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.950898][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.974342][ T4183] device veth0_vlan entered promiscuous mode [ 54.996628][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.007319][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.022069][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.030189][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.038617][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.047938][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.056620][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.065376][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.074691][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.083295][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.092247][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.100847][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.109035][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.119487][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.128601][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.137726][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.169908][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.177439][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.203096][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.233994][ T4183] device veth1_vlan entered promiscuous mode [ 55.271579][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.289117][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.320005][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.331947][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.352019][ T4183] device veth0_macvtap entered promiscuous mode [ 55.371133][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.382513][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.400585][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.420097][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.435117][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.444163][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.452226][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.469145][ T4183] device veth1_macvtap entered promiscuous mode [ 55.484886][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.493475][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.501866][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.521418][ T4193] device veth0_vlan entered promiscuous mode [ 55.533809][ T4184] device veth0_vlan entered promiscuous mode [ 55.541347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.550237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.562846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.571938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.584854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.593117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.608489][ T4184] device veth1_vlan entered promiscuous mode [ 55.618289][ T4193] device veth1_vlan entered promiscuous mode [ 55.632515][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.644252][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.654642][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.688341][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.698373][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.707371][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.716101][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.725903][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.737737][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.754978][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.770979][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.780790][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.792109][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.801159][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.832357][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.847501][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.856669][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.865768][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.877361][ T4193] device veth0_macvtap entered promiscuous mode [ 55.885528][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.894273][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.904179][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.913354][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.922013][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.941149][ T4184] device veth0_macvtap entered promiscuous mode [ 55.952875][ T4193] device veth1_macvtap entered promiscuous mode [ 55.967198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.976381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.986042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.997299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.024594][ T4184] device veth1_macvtap entered promiscuous mode [ 56.048710][ T4182] device veth0_vlan entered promiscuous mode [ 56.055973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.064398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.074487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.107603][ T4182] device veth1_vlan entered promiscuous mode [ 56.119333][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.128858][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.137881][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.157807][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.176026][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.188286][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.198727][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.209369][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.219809][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.231696][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.249298][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.272483][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.281866][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.293238][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.302027][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.314529][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.325751][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.336915][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.351704][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.363346][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.374417][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.385119][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.396348][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.414119][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.423381][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.432310][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.441954][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.471643][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.483276][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.492496][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.501679][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.511876][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.520613][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.528818][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.536799][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.546765][ T4190] device veth0_vlan entered promiscuous mode [ 56.569628][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.589944][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.601169][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.610165][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.619263][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.631002][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.648840][ T4182] device veth0_macvtap entered promiscuous mode [ 56.663996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.672102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.682149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.696044][ T4190] device veth1_vlan entered promiscuous mode [ 56.706885][ T4182] device veth1_macvtap entered promiscuous mode [ 56.724231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.733568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.742053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.780835][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.789119][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.806374][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.822289][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.832169][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.842714][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.852652][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.863474][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.875311][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.883230][ T4248] Bluetooth: hci3: command 0x040f tx timeout [ 56.889901][ T4248] Bluetooth: hci2: command 0x040f tx timeout [ 56.897009][ T4190] device veth0_macvtap entered promiscuous mode [ 56.905849][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.913764][ T4248] Bluetooth: hci0: command 0x040f tx timeout [ 56.915033][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.925121][ T4248] Bluetooth: hci1: command 0x040f tx timeout [ 56.928372][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.933486][ T4248] Bluetooth: hci4: command 0x040f tx timeout [ 56.948880][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.959186][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.969045][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.986872][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.005359][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.016011][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.026749][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.038204][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.049003][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.063324][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.075659][ T4190] device veth1_macvtap entered promiscuous mode [ 57.100102][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.111165][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.125730][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.135705][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.160024][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.177238][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.190769][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.199765][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.200838][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.218777][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.228776][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.241238][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.252101][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.263053][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.266162][ T4291] loop3: detected capacity change from 0 to 164 [ 57.281650][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.293634][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.305980][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.318060][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.327946][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.341284][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.354351][ T4291] Unable to read rock-ridge attributes [ 57.361857][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.371497][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.386163][ T4291] Unable to read rock-ridge attributes [ 57.397693][ T4291] attempt to access beyond end of device [ 57.397693][ T4291] loop3: rw=524288, want=263332, limit=164 [ 57.398893][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.421606][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.431999][ T4291] attempt to access beyond end of device [ 57.431999][ T4291] loop3: rw=0, want=263332, limit=164 [ 57.432487][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.450167][ T26] audit: type=1800 audit(1764463018.669:2): pid=4291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="file0" dev="loop3" ino=1862 res=0 errno=0 [ 57.455539][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.483308][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.494032][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.504014][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.515607][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.527154][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.554009][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.563662][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.578080][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.587315][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.597693][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.607926][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.647241][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.661534][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.671940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.716042][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.728862][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.750865][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.760290][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.778184][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.792668][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.860901][ T1245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.871359][ T1245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.900837][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.908963][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.954482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.970779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.007936][ T4298] loop1: detected capacity change from 0 to 128 [ 58.017765][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.019141][ T4298] ======================================================= [ 58.019141][ T4298] WARNING: The mand mount option has been deprecated and [ 58.019141][ T4298] and is ignored by this kernel. Remove the mand [ 58.019141][ T4298] option from the mount to silence this warning. [ 58.019141][ T4298] ======================================================= [ 58.048078][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.074975][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.081975][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.108425][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.130121][ T4298] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 58.157164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.165178][ T4253] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 58.171461][ T4296] loop2: detected capacity change from 0 to 8192 [ 58.193705][ T4298] hpfs: filesystem error: improperly stopped [ 58.208908][ T4298] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 58.213681][ T4300] loop0: detected capacity change from 0 to 128 [ 58.240699][ T4298] hpfs: You really don't want any checks? You are crazy... [ 58.248516][ T4298] hpfs: hpfs_map_sector(): read error [ 58.256126][ T4298] hpfs: code page support is disabled [ 58.262732][ T4298] hpfs: hpfs_map_4sectors(): unaligned read [ 58.269480][ T4298] hpfs: hpfs_map_4sectors(): unaligned read [ 58.277222][ T4298] hpfs: filesystem error: unable to find root dir [ 58.308346][ T4298] hpfs: hpfs_map_4sectors(): unaligned read [ 58.328143][ T4296] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 58.342204][ T4296] REISERFS (device loop2): using ordered data mode [ 58.352142][ T4298] hpfs: hpfs_map_sector(): read error [ 58.358237][ T4296] reiserfs: using flush barriers [ 58.375512][ T4300] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 58.388773][ T4296] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 58.401141][ T4300] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.410201][ T4296] REISERFS (device loop2): checking transaction log (loop2) [ 58.459968][ T4253] usb 4-1: Using ep0 maxpacket: 16 [ 58.600172][ T4253] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.624145][ T4296] REISERFS (device loop2): Using tea hash to sort names [ 58.632117][ T4253] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.651579][ T4296] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 58.670078][ T4253] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 58.689787][ T4253] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 58.840280][ T4253] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.850913][ T4296] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 58.863259][ T4253] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 58.888116][ T4253] usb 4-1: SerialNumber: syz [ 58.892959][ T26] audit: type=1800 audit(1764463020.119:3): pid=4296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 58.962367][ T4294] Bluetooth: hci4: command 0x0419 tx timeout [ 58.971152][ T4253] hub 4-1:1.0: bad descriptor, ignoring hub [ 58.994319][ T4253] hub: probe of 4-1:1.0 failed with error -5 [ 59.018154][ T4253] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 59.074826][ T4294] Bluetooth: hci1: command 0x0419 tx timeout [ 59.084402][ T4294] Bluetooth: hci0: command 0x0419 tx timeout [ 59.108543][ T4294] Bluetooth: hci2: command 0x0419 tx timeout [ 59.137076][ T4294] Bluetooth: hci3: command 0x0419 tx timeout [ 59.405673][ T4304] loop4: detected capacity change from 0 to 32768 [ 59.430855][ T4309] loop1: detected capacity change from 0 to 8192 [ 60.119808][ T23] usb 4-1: USB disconnect, device number 2 [ 60.741860][ T4309] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 60.966447][ T4309] REISERFS (device loop1): using ordered data mode [ 61.092099][ T4309] reiserfs: using flush barriers [ 61.106108][ T4309] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 61.127387][ T4309] REISERFS (device loop1): checking transaction log (loop1) [ 61.179409][ T4304] XFS (loop4): Mounting V5 Filesystem [ 61.471420][ T4304] XFS (loop4): Starting recovery (logdev: internal) [ 61.505678][ T4336] loop3: detected capacity change from 0 to 8192 [ 61.539922][ T4309] REISERFS (device loop1): Using tea hash to sort names [ 61.547481][ T4309] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 61.580909][ T4304] XFS (loop4): Ending recovery (logdev: internal) [ 61.600176][ T4336] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 61.623518][ T4336] REISERFS (device loop3): using ordered data mode [ 61.640076][ T4336] reiserfs: using flush barriers [ 61.690688][ T4336] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 61.719920][ T4256] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 61.736654][ T4336] REISERFS (device loop3): checking transaction log (loop3) [ 61.761518][ T4345] loop2: detected capacity change from 0 to 512 [ 61.810368][ T4190] XFS (loop4): Unmounting Filesystem [ 61.822669][ T4309] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 61.928006][ T4345] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 61.958117][ T4336] REISERFS (device loop3): Using tea hash to sort names [ 61.970746][ T4256] usb 1-1: Using ep0 maxpacket: 16 [ 61.976593][ T4336] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 61.986910][ T4345] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.112881][ T4256] usb 1-1: config 0 interface 0 has no altsetting 0 [ 62.119570][ T4256] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 62.135622][ T4256] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.158983][ T4256] usb 1-1: config 0 descriptor?? [ 62.742576][ T4256] hid (null): unknown global tag 0x37 [ 62.769510][ T4256] hid (null): global environment stack underflow [ 62.785809][ T4353] netlink: 'syz.1.14': attribute type 1 has an invalid length. [ 62.799948][ T4256] hid (null): report_id 0 is invalid [ 62.826221][ T4353] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14'. [ 64.898133][ T4241] usb 1-1: USB disconnect, device number 2 [ 65.192449][ T4377] loop2: detected capacity change from 0 to 8192 [ 65.217102][ T4382] loop3: detected capacity change from 0 to 128 [ 65.249979][ T4377] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 65.267300][ T4377] REISERFS (device loop2): using ordered data mode [ 65.274892][ T4377] reiserfs: using flush barriers [ 65.288598][ T4377] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 65.311490][ T4377] REISERFS (device loop2): checking transaction log (loop2) [ 65.367002][ T4382] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.394864][ T4382] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.419406][ T4388] loop0: detected capacity change from 0 to 128 [ 65.611949][ T4389] loop4: detected capacity change from 0 to 2048 [ 65.619972][ T4234] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.643876][ T4388] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 65.675070][ T4389] hpfs: filesystem error: dir band size mismatch: dir_band_start==7b318cc2, dir_band_end==7b318cc3, n_dir_band==00000000; already mounted read-only [ 65.693058][ T4388] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.819820][ T4234] usb 2-1: device descriptor read/64, error -71 [ 65.826837][ T4377] REISERFS (device loop2): Using tea hash to sort names [ 65.844669][ T4377] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 65.915311][ T26] audit: type=1800 audit(1764463027.139:4): pid=4377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.19" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 66.173986][ T4234] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 66.215310][ T4398] loop4: detected capacity change from 0 to 64 [ 66.361159][ T4204] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 66.389793][ T4234] usb 2-1: device descriptor read/64, error -71 [ 66.467370][ T4404] loop2: detected capacity change from 0 to 8192 [ 66.510001][ T4234] usb usb2-port1: attempt power cycle [ 66.543558][ T4404] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 66.588028][ T4404] REISERFS (device loop2): using ordered data mode [ 66.617149][ T4404] reiserfs: using flush barriers [ 66.636881][ T4404] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 66.639783][ T4204] usb 1-1: Using ep0 maxpacket: 32 [ 66.679390][ T4404] REISERFS (device loop2): checking transaction log (loop2) [ 66.763926][ T4407] loop3: detected capacity change from 0 to 32768 [ 66.780764][ T4204] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 66.792118][ T4204] usb 1-1: config 0 has no interface number 0 [ 66.814106][ T4410] loop4: detected capacity change from 0 to 8192 [ 66.850754][ T4410] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 66.871316][ T4410] REISERFS (device loop4): using ordered data mode [ 66.878869][ T4404] REISERFS (device loop2): Using tea hash to sort names [ 66.886339][ T4410] reiserfs: using flush barriers [ 66.886443][ T4407] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 66.900880][ T4410] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 66.902212][ T4404] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 66.927186][ T4410] REISERFS (device loop4): checking transaction log (loop4) [ 66.939807][ T4234] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 66.965974][ T26] audit: type=1800 audit(1764463028.189:5): pid=4404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.25" name="file1" dev="loop2" ino=8 res=0 errno=0 [ 66.989875][ T4204] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 67.040429][ T4204] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.089973][ T4204] usb 1-1: Product: syz [ 67.104733][ T4204] usb 1-1: Manufacturer: syz [ 67.109469][ T4204] usb 1-1: SerialNumber: syz [ 67.114807][ T4234] usb 2-1: device descriptor read/8, error -71 [ 67.153315][ T4204] usb 1-1: config 0 descriptor?? [ 67.211137][ T4410] REISERFS (device loop4): Using tea hash to sort names [ 67.218928][ T4410] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 67.221666][ T4204] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 67.329813][ T4241] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 67.389888][ T4234] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 67.423115][ T4395] udc-core: couldn't find an available UDC or it's busy [ 67.440343][ T4418] udc-core: couldn't find an available UDC or it's busy [ 67.447427][ T4418] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 67.457139][ T4395] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 67.475637][ T4204] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 67.500143][ T4234] usb 2-1: device descriptor read/8, error -71 [ 67.508244][ T4204] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 67.623325][ T4234] usb usb2-port1: unable to enumerate USB device [ 67.697844][ T4395] udc-core: couldn't find an available UDC or it's busy [ 67.706081][ T4395] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 67.989805][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 67.998788][ T4234] usb 1-1: USB disconnect, device number 3 [ 68.192309][ T4234] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 68.367646][ T4234] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 68.451909][ T4234] quatech2 1-1:0.51: device disconnected [ 68.473460][ T4431] loop2: detected capacity change from 0 to 8192 [ 68.517806][ T4204] kernel write not supported for file /audio (pid: 4204 comm: kworker/1:3) [ 68.586982][ T4431] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 68.607056][ T4431] REISERFS (device loop2): using ordered data mode [ 68.649819][ T4241] usb 4-1: Using ep0 maxpacket: 16 [ 68.660179][ T4431] reiserfs: using flush barriers [ 68.686250][ T4431] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 68.852146][ T4431] REISERFS (device loop2): checking transaction log (loop2) [ 69.330577][ T4447] FAULT_INJECTION: forcing a failure. [ 69.330577][ T4447] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 69.382444][ T4443] loop0: detected capacity change from 0 to 8192 [ 69.417837][ T4447] CPU: 1 PID: 4447 Comm: syz.4.38 Not tainted syzkaller #0 [ 69.425200][ T4447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 69.435567][ T4447] Call Trace: [ 69.438869][ T4447] [ 69.441819][ T4447] dump_stack_lvl+0x168/0x230 [ 69.446529][ T4447] ? show_regs_print_info+0x20/0x20 [ 69.451758][ T4447] ? load_image+0x3b0/0x3b0 [ 69.456309][ T4447] ? mark_lock+0x94/0x320 [ 69.460912][ T4447] ? verify_lock_unused+0x140/0x140 [ 69.466182][ T4447] ? __lock_acquire+0x12d9/0x7c60 [ 69.471428][ T4447] should_fail+0x38c/0x4c0 [ 69.476004][ T4447] prepare_alloc_pages+0x1e4/0x5f0 [ 69.481265][ T4447] __alloc_pages+0x10e/0x470 [ 69.485893][ T4447] ? zone_statistics+0x170/0x170 [ 69.490983][ T4447] new_slab+0xc0/0x4b0 [ 69.495100][ T4447] ? __kmalloc+0x1cd/0x330 [ 69.499555][ T4447] ___slab_alloc+0x81e/0xdf0 [ 69.504194][ T4447] ? tomoyo_realpath_from_path+0x118/0x610 [ 69.510142][ T4447] __kmalloc+0x1cd/0x330 [ 69.514419][ T4447] ? tomoyo_realpath_from_path+0x118/0x610 [ 69.520360][ T4447] tomoyo_realpath_from_path+0x118/0x610 [ 69.526142][ T4447] tomoyo_path_number_perm+0x1d5/0x5d0 [ 69.531662][ T4447] ? verify_lock_unused+0x140/0x140 [ 69.536904][ T4447] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 69.542409][ T4447] ? ksys_write+0x1c7/0x250 [ 69.546992][ T4447] security_file_ioctl+0x6c/0xa0 [ 69.551967][ T4447] __se_sys_ioctl+0x48/0x170 [ 69.556588][ T4447] do_syscall_64+0x4c/0xa0 [ 69.561038][ T4447] ? clear_bhb_loop+0x30/0x80 [ 69.565778][ T4447] ? clear_bhb_loop+0x30/0x80 [ 69.570490][ T4447] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.576416][ T4447] RIP: 0033:0x7fd206086749 [ 69.580860][ T4447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.600496][ T4447] RSP: 002b:00007fd2042ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.608950][ T4447] RAX: ffffffffffffffda RBX: 00007fd2062dcfa0 RCX: 00007fd206086749 [ 69.616946][ T4447] RDX: 0000200000000080 RSI: 0000000040085112 RDI: 0000000000000003 [ 69.625218][ T4447] RBP: 00007fd2042ed090 R08: 0000000000000000 R09: 0000000000000000 [ 69.633259][ T4447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.641354][ T4447] R13: 00007fd2062dd038 R14: 00007fd2062dcfa0 R15: 00007ffeb39e5fe8 [ 69.649572][ T4447] [ 69.683693][ T4443] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 69.699148][ T4443] REISERFS (device loop0): using ordered data mode [ 69.712846][ T4443] reiserfs: using flush barriers [ 69.723522][ T4443] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 69.746514][ T4443] REISERFS (device loop0): checking transaction log (loop0) [ 69.813402][ T4241] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.826067][ T4241] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 63, changing to 7 [ 69.847966][ T4241] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.078624][ T4431] REISERFS (device loop2): Using tea hash to sort names [ 70.150556][ T4183] ocfs2: Unmounting device (7,3) on (node local) [ 70.226295][ T4431] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 70.545614][ T4241] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 70.588419][ T4455] loop1: detected capacity change from 0 to 128 [ 70.595020][ T4241] usb 4-1: string descriptor 0 read error: -71 [ 70.604454][ T4241] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 70.665083][ T4241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.671215][ T4443] REISERFS (device loop0): Using tea hash to sort names [ 70.709510][ T4443] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 70.741138][ T4455] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 70.777490][ T4241] usb 4-1: can't set config #1, error -71 [ 70.784829][ T26] audit: type=1800 audit(1764463032.009:6): pid=4443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.37" name="file1" dev="loop0" ino=8 res=0 errno=0 [ 70.823413][ T4455] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.843325][ T4241] usb 4-1: USB disconnect, device number 3 [ 70.894924][ T4457] loop4: detected capacity change from 0 to 8192 [ 70.962133][ T4461] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.982985][ T4457] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 71.003449][ T4457] REISERFS (device loop4): using ordered data mode [ 71.017439][ T4457] reiserfs: using flush barriers [ 71.050091][ T4457] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 71.105878][ T4457] REISERFS (device loop4): checking transaction log (loop4) [ 71.125992][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.300748][ T4457] REISERFS (device loop4): Using tea hash to sort names [ 71.327715][ T4457] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 71.358761][ T4474] loop1: detected capacity change from 0 to 128 [ 72.471000][ T4474] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 72.563442][ T4474] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.103571][ T4523] loop3: detected capacity change from 0 to 7 [ 74.180190][ T4523] Dev loop3: unable to read RDB block 7 [ 74.199876][ T4523] loop3: unable to read partition table [ 74.213224][ T4523] loop3: partition table beyond EOD, truncated [ 74.230021][ T4523] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 74.607778][ T4509] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 75.446526][ T4568] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.700994][ T4575] capability: warning: `syz.0.76' uses deprecated v2 capabilities in a way that may be insecure [ 75.787987][ T4575] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 75.911755][ T4575] overlayfs: failed to resolve './file0': -13 [ 75.938873][ T4195] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 75.938999][ T4195] Bluetooth: hci1: unknown advertising packet type: 0xff [ 76.241322][ T1111] cfg80211: failed to load regulatory.db [ 76.480059][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 76.890072][ T7] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 76.908499][ T7] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 76.939781][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 77.145860][ T7] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 77.165434][ T7] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 77.185703][ T7] usb 1-1: Product: syz [ 77.195840][ T7] usb 1-1: Manufacturer: syz [ 77.200543][ T7] usb 1-1: SerialNumber: syz [ 77.231956][ T7] usb 1-1: config 0 descriptor?? [ 77.306759][ T7] hub 1-1:0.0: bad descriptor, ignoring hub [ 77.313053][ T7] hub: probe of 1-1:0.0 failed with error -5 [ 77.342901][ T7] usb 1-1: selecting invalid altsetting 0 [ 77.991205][ T4617] bond0: (slave wg0): Error: Device can not be enslaved while up [ 78.453883][ T4234] usb 1-1: USB disconnect, device number 4 [ 79.591078][ T4334] Bluetooth: hci5: Frame reassembly failed (-84) [ 80.123348][ T4651] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 80.155295][ T4651] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 80.569823][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.939917][ T21] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.129868][ T21] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 81.159342][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 81.179601][ T21] usb 3-1: Product: syz [ 81.189856][ T21] usb 3-1: Manufacturer: syz [ 81.194609][ T21] usb 3-1: SerialNumber: syz [ 81.536994][ T21] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 81.599467][ T4186] Bluetooth: hci5: command 0x1003 tx timeout [ 81.607288][ T4185] Bluetooth: hci5: sending frame failed (-49) [ 81.779330][ T4669] netlink: 'syz.3.108': attribute type 18 has an invalid length. [ 81.814338][ T4669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.108'. [ 81.876393][ T21] usb 3-1: USB disconnect, device number 2 [ 81.889862][ C1] usblp0: nonzero write bulk status received: -71 [ 81.909330][ T21] usblp0: removed [ 81.996453][ T4672] APIC base relocation is unsupported by KVM [ 82.780593][ T4690] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 83.545020][ T4710] 9pnet_virtio: no channels available for device syz [ 83.670156][ T4241] Bluetooth: hci5: command 0x1001 tx timeout [ 83.676431][ T4185] Bluetooth: hci5: sending frame failed (-49) [ 83.898137][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'. [ 84.530892][ T4743] 9pnet_virtio: no channels available for device syz [ 85.022167][ T4751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 85.046686][ T4751] device bridge_slave_1 left promiscuous mode [ 85.077324][ T4751] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.199413][ T4751] device bridge_slave_0 left promiscuous mode [ 85.225418][ T4751] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.266308][ T4753] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 85.281288][ T4753] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 85.352902][ T21] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 85.726110][ T21] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 85.741364][ T21] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 85.759832][ T4186] Bluetooth: hci5: command 0x1009 tx timeout [ 85.782038][ T21] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 85.808375][ T21] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 85.823681][ T21] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 85.865145][ T21] usb 2-1: config 168 interface 0 has no altsetting 0 [ 85.897981][ T4776] Zero length message leads to an empty skb [ 85.990040][ T21] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 86.012207][ T21] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 86.041450][ T4782] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 86.060198][ T21] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 86.086008][ T21] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 86.099869][ T21] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 86.113957][ T21] usb 2-1: config 168 interface 0 has no altsetting 0 [ 86.207021][ T21] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 86.221506][ T21] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 86.247809][ T21] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 86.270931][ T4787] 9pnet_virtio: no channels available for device syz [ 86.279017][ T21] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 86.308904][ T21] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 86.328797][ T21] usb 2-1: config 168 interface 0 has no altsetting 0 [ 86.463944][ T4793] 9pnet_virtio: no channels available for device syz [ 86.590271][ T21] usb 2-1: string descriptor 0 read error: -22 [ 86.596618][ T21] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 86.614764][ T4800] device syzkaller0 entered promiscuous mode [ 86.615940][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.671455][ T21] adutux 2-1:168.0: interrupt endpoints not found [ 86.896786][ T4294] usb 2-1: USB disconnect, device number 6 [ 87.054722][ T4809] 9pnet_virtio: no channels available for device syz [ 87.430285][ T21] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 87.598902][ T4819] tipc: Started in network mode [ 87.624894][ T4819] tipc: Node identity fa1b051b2c6f, cluster identity 4711 [ 87.640166][ T4819] tipc: Enabled bearer , priority 0 [ 87.670642][ T4818] tipc: Resetting bearer [ 87.778119][ T4818] tipc: Disabling bearer [ 87.800156][ T21] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 87.813698][ T21] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 87.834365][ T21] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 87.844516][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.880113][ T4814] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 87.887964][ T4814] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 88.159160][ T21] usb 3-1: USB disconnect, device number 3 [ 88.574519][ T4841] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 88.581428][ T4841] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 88.623815][ T4841] vhci_hcd vhci_hcd.0: Device attached [ 88.890783][ T4234] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 88.909895][ T4294] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 89.296123][ T4234] usb 2-1: config 0 has no interfaces? [ 89.302414][ T4234] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 89.338398][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.400818][ T4234] usb 2-1: config 0 descriptor?? [ 89.649031][ T4186] usb 2-1: USB disconnect, device number 7 [ 89.655349][ T4843] vhci_hcd: connection closed [ 89.658189][ T4433] vhci_hcd: stop threads [ 89.668819][ T4433] vhci_hcd: release socket [ 89.698693][ T4433] vhci_hcd: disconnect device [ 89.725364][ T4294] vhci_hcd: vhci_device speed not set [ 89.983088][ T4871] tmpfs: Unknown parameter 'grpquota' [ 90.715996][ T4893] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 90.728777][ T4893] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 90.776426][ T4907] binder_alloc: 4906: binder_alloc_buf, no vma [ 90.966530][ T4922] 9pnet_virtio: no channels available for device syz [ 91.285916][ T4935] tun0: tun_chr_ioctl cmd 1074025675 [ 91.285984][ T4935] tun0: persist enabled [ 91.762985][ T4195] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 91.763020][ T4195] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 91.770463][ T4195] Bluetooth: hci1: Malicious advertising data. [ 91.883959][ T4964] netlink: 'syz.3.213': attribute type 29 has an invalid length. [ 91.899849][ T4234] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 92.162993][ T4971] 9pnet_virtio: no channels available for device syz [ 92.169988][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 92.269981][ T4234] usb 5-1: unable to get BOS descriptor or descriptor too short [ 92.335759][ T4234] usb 5-1: no configurations [ 92.340576][ T4234] usb 5-1: can't read configurations, error -22 [ 92.390091][ T4294] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 92.430007][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 92.550494][ T7] usb 3-1: config 0 has no interfaces? [ 92.630368][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.649738][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 92.660011][ T4294] usb 2-1: Using ep0 maxpacket: 8 [ 92.687509][ T7] usb 3-1: SerialNumber: syz [ 92.699063][ T7] usb 3-1: config 0 descriptor?? [ 92.799893][ T4294] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 92.808081][ T4294] usb 2-1: config 0 has no interface number 0 [ 92.839770][ T4294] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 92.866364][ T4294] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 92.908115][ T4294] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 92.937304][ T4294] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 92.969153][ T4294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.992085][ T4294] usb 2-1: config 0 descriptor?? [ 93.000383][ T7] usb 3-1: USB disconnect, device number 4 [ 93.041469][ T4294] ldusb 2-1:0.55: Interrupt in endpoint not found [ 93.219808][ T4204] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 93.240085][ T4234] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.263516][ T1111] usb 2-1: USB disconnect, device number 8 [ 93.581839][ T4204] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 93.599987][ T4234] usb 5-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 93.610104][ T4204] usb 4-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 93.626350][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.649742][ T4204] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.675636][ T4234] usb 5-1: config 0 descriptor?? [ 93.707714][ T4204] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 93.738081][ T4204] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.782030][ T4204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.827878][ T4204] usb 4-1: config 0 descriptor?? [ 93.897379][ T5000] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 93.936470][ T5000] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 93.954183][ T4195] Bluetooth: hci3: Unknown advertising packet type: 0xff [ 93.954484][ T4195] ================================================================== [ 93.970069][ T4195] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12db/0x3b80 [ 93.977911][ T4195] Read of size 1 at addr ffff888026002c01 by task kworker/u5:4/4195 [ 93.986022][ T4195] [ 93.988377][ T4195] CPU: 0 PID: 4195 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 93.996035][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 94.006121][ T4195] Workqueue: hci3 hci_rx_work [ 94.010843][ T4195] Call Trace: [ 94.014154][ T4195] [ 94.017116][ T4195] dump_stack_lvl+0x168/0x230 [ 94.021901][ T4195] ? show_regs_print_info+0x20/0x20 [ 94.027187][ T4195] ? load_image+0x3b0/0x3b0 [ 94.031719][ T4195] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 94.037215][ T4195] print_address_description+0x60/0x2d0 [ 94.042906][ T4195] ? hci_le_meta_evt+0x12db/0x3b80 [ 94.048034][ T4195] kasan_report+0xdf/0x130 [ 94.052463][ T4195] ? hci_le_meta_evt+0x12db/0x3b80 [ 94.057581][ T4195] hci_le_meta_evt+0x12db/0x3b80 [ 94.062520][ T4195] ? hci_event_packet+0x2a0/0x12f0 [ 94.067644][ T4195] ? hci_remote_host_features_evt+0x280/0x280 [ 94.073720][ T4195] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 94.079358][ T4195] ? mark_lock+0x94/0x320 [ 94.083695][ T4195] ? mutex_unlock+0x10/0x10 [ 94.088204][ T4195] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 94.094190][ T4195] ? lock_chain_count+0x20/0x20 [ 94.099149][ T4195] ? __rwlock_init+0x140/0x140 [ 94.103913][ T4195] hci_event_packet+0xe05/0x12f0 [ 94.108866][ T4195] ? lockdep_hardirqs_on+0x94/0x140 [ 94.114148][ T4195] ? rcu_lock_release+0x20/0x20 [ 94.119048][ T4195] ? hci_send_to_monitor+0x9c/0x4a0 [ 94.124254][ T4195] hci_rx_work+0x255/0xa10 [ 94.128687][ T4195] process_one_work+0x863/0x1000 [ 94.133641][ T4195] ? worker_detach_from_pool+0x240/0x240 [ 94.139275][ T4195] ? lockdep_hardirqs_off+0x70/0x100 [ 94.144738][ T4195] ? _raw_spin_lock_irq+0xab/0xe0 [ 94.149767][ T4195] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 94.155192][ T4195] ? wq_worker_running+0x97/0x170 [ 94.160334][ T4195] worker_thread+0xaa8/0x12a0 [ 94.165034][ T4195] kthread+0x436/0x520 [ 94.169139][ T4195] ? rcu_lock_release+0x20/0x20 [ 94.173998][ T4195] ? kthread_blkcg+0xd0/0xd0 [ 94.178590][ T4195] ret_from_fork+0x1f/0x30 [ 94.183030][ T4195] [ 94.186047][ T4195] [ 94.188369][ T4195] Allocated by task 4984: [ 94.192688][ T4195] __kasan_kmalloc+0xb5/0xf0 [ 94.197284][ T4195] __alloc_skb+0x22c/0x750 [ 94.201704][ T4195] vhci_write+0xbc/0x450 [ 94.205949][ T4195] vfs_write+0x712/0xd00 [ 94.210195][ T4195] ksys_write+0x14d/0x250 [ 94.214527][ T4195] do_syscall_64+0x4c/0xa0 [ 94.218952][ T4195] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.224857][ T4195] [ 94.227180][ T4195] The buggy address belongs to the object at ffff888026002800 [ 94.227180][ T4195] which belongs to the cache kmalloc-1k of size 1024 [ 94.241361][ T4195] The buggy address is located 1 bytes to the right of [ 94.241361][ T4195] 1024-byte region [ffff888026002800, ffff888026002c00) [ 94.255203][ T4195] The buggy address belongs to the page: [ 94.260841][ T4195] page:ffffea0000980000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26000 [ 94.271080][ T4195] head:ffffea0000980000 order:3 compound_mapcount:0 compound_pincount:0 [ 94.279496][ T4195] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 94.287485][ T4195] raw: 00fff00000010200 ffffea00008e9200 0000000200000002 ffff888016841dc0 [ 94.296165][ T4195] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 94.304742][ T4195] page dumped because: kasan: bad access detected [ 94.311262][ T4195] page_owner tracks the page as allocated [ 94.316972][ T4195] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4182, ts 56047032006, free_ts 56013994604 [ 94.336175][ T4195] get_page_from_freelist+0x1b77/0x1c60 [ 94.341835][ T4195] __alloc_pages+0x1e1/0x470 [ 94.346430][ T4195] new_slab+0xc0/0x4b0 [ 94.350503][ T4195] ___slab_alloc+0x81e/0xdf0 [ 94.355141][ T4195] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 94.360946][ T4195] __alloc_skb+0x22c/0x750 [ 94.365371][ T4195] rtmsg_fib+0xe7/0x4b0 [ 94.369534][ T4195] fib_table_insert+0x987/0x1b20 [ 94.374472][ T4195] fib_magic+0x2c1/0x390 [ 94.378715][ T4195] fib_add_ifaddr+0x389/0x5e0 [ 94.383391][ T4195] fib_inetaddr_event+0x13c/0x1c0 [ 94.388416][ T4195] blocking_notifier_call_chain+0x103/0x1b0 [ 94.394318][ T4195] __inet_insert_ifa+0x9e9/0xbc0 [ 94.399266][ T4195] inet_rtm_newaddr+0x940/0x1800 [ 94.404207][ T4195] rtnetlink_rcv_msg+0x7ff/0xe90 [ 94.409145][ T4195] netlink_rcv_skb+0x1e0/0x430 [ 94.413912][ T4195] page last free stack trace: [ 94.418577][ T4195] free_unref_page_prepare+0x637/0x6c0 [ 94.424040][ T4195] free_unref_page+0x94/0x280 [ 94.428714][ T4195] __unfreeze_partials+0x1a5/0x200 [ 94.433912][ T4195] put_cpu_partial+0x12d/0x190 [ 94.438763][ T4195] qlist_free_all+0x35/0x90 [ 94.443288][ T4195] kasan_quarantine_reduce+0x150/0x160 [ 94.448747][ T4195] __kasan_slab_alloc+0x2f/0xd0 [ 94.453617][ T4195] slab_post_alloc_hook+0x4c/0x380 [ 94.458776][ T4195] __kmalloc+0x127/0x330 [ 94.463017][ T4195] tomoyo_realpath_from_path+0x118/0x610 [ 94.468658][ T4195] tomoyo_path_perm+0x1cd/0x510 [ 94.473509][ T4195] security_inode_getattr+0xcf/0x120 [ 94.478797][ T4195] vfs_getattr+0x26/0x3a0 [ 94.483126][ T4195] __x64_sys_newfstat+0x104/0x1d0 [ 94.488150][ T4195] do_syscall_64+0x4c/0xa0 [ 94.492569][ T4195] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.498467][ T4195] [ 94.500786][ T4195] Memory state around the buggy address: [ 94.506425][ T4195] ffff888026002b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 94.514492][ T4195] ffff888026002b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 94.522576][ T4195] >ffff888026002c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 94.530651][ T4195] ^ [ 94.534730][ T4195] ffff888026002c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 94.542878][ T4195] ffff888026002d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 94.551050][ T4195] ================================================================== [ 94.559120][ T4195] Disabling lock debugging due to kernel taint [ 94.566597][ T4234] usb 5-1: string descriptor 0 read error: -71 [ 94.572365][ T4195] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 94.580000][ T4195] CPU: 0 PID: 4195 Comm: kworker/u5:4 Tainted: G B syzkaller #0 [ 94.588958][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 94.595347][ T4234] usb-storage 5-1:0.0: USB Mass Storage device detected [ 94.599149][ T4195] Workqueue: hci3 hci_rx_work [ 94.599189][ T4195] Call Trace: [ 94.599197][ T4195] [ 94.617184][ T4195] dump_stack_lvl+0x168/0x230 [ 94.621912][ T4195] ? show_regs_print_info+0x20/0x20 [ 94.627252][ T4195] ? load_image+0x3b0/0x3b0 [ 94.631893][ T4195] panic+0x2c9/0x7f0 [ 94.635826][ T4195] ? bpf_jit_dump+0xd0/0xd0 [ 94.640359][ T4195] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 94.646292][ T4195] ? _raw_spin_unlock+0x40/0x40 [ 94.651174][ T4195] ? hci_le_meta_evt+0x12db/0x3b80 [ 94.656320][ T4195] check_panic_on_warn+0x80/0xa0 [ 94.657368][ T4234] usb-storage 5-1:0.0: Quirks match for vid 05ab pid 0060: 2 [ 94.661283][ T4195] ? hci_le_meta_evt+0x12db/0x3b80 [ 94.661308][ T4195] end_report+0x6d/0xf0 [ 94.661326][ T4195] kasan_report+0x102/0x130 [ 94.661343][ T4195] ? hci_le_meta_evt+0x12db/0x3b80 [ 94.661360][ T4195] hci_le_meta_evt+0x12db/0x3b80 [ 94.661377][ T4195] ? hci_event_packet+0x2a0/0x12f0 [ 94.661401][ T4195] ? hci_remote_host_features_evt+0x280/0x280 [ 94.661420][ T4195] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 94.661441][ T4195] ? mark_lock+0x94/0x320 [ 94.714289][ T4195] ? mutex_unlock+0x10/0x10 [ 94.718849][ T4195] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 94.724870][ T4195] ? lock_chain_count+0x20/0x20 [ 94.729720][ T4195] ? __rwlock_init+0x140/0x140 [ 94.734483][ T4195] hci_event_packet+0xe05/0x12f0 [ 94.739518][ T4195] ? lockdep_hardirqs_on+0x94/0x140 [ 94.744717][ T4195] ? rcu_lock_release+0x20/0x20 [ 94.749583][ T4195] ? hci_send_to_monitor+0x9c/0x4a0 [ 94.754783][ T4195] hci_rx_work+0x255/0xa10 [ 94.759208][ T4195] process_one_work+0x863/0x1000 [ 94.764157][ T4195] ? worker_detach_from_pool+0x240/0x240 [ 94.769786][ T4195] ? lockdep_hardirqs_off+0x70/0x100 [ 94.775068][ T4195] ? _raw_spin_lock_irq+0xab/0xe0 [ 94.780095][ T4195] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 94.785467][ T4195] ? wq_worker_running+0x97/0x170 [ 94.790486][ T4195] worker_thread+0xaa8/0x12a0 [ 94.795172][ T4195] kthread+0x436/0x520 [ 94.799244][ T4195] ? rcu_lock_release+0x20/0x20 [ 94.804179][ T4195] ? kthread_blkcg+0xd0/0xd0 [ 94.808850][ T4195] ret_from_fork+0x1f/0x30 [ 94.813267][ T4195] [ 94.816507][ T4195] Kernel Offset: disabled [ 94.820829][ T4195] Rebooting in 86400 seconds..