last executing test programs: 4.105378808s ago: executing program 4 (id=481): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000140), 0x202, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r1], 0x398}}, 0x0) 3.925572919s ago: executing program 4 (id=485): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = mq_open(0x0, 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_unlink(0x0) close(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000001040), &(0x7f0000001080)=0x26) mkdirat(0xffffffffffffffff, &(0x7f0000000680)='./bus\x00', 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x1966cd75, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff122]}, 0x45c) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) 3.886248168s ago: executing program 1 (id=486): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0xffffffffffffffff) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000900)={0x1, 0x0, 0x0, 0x0}) 3.737709218s ago: executing program 1 (id=487): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9"}, 0x3c) r0 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r0, 0x3a, 0x1, 0x0, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000190c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="2fce590e"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000192c0)=@newtaction={0x70, 0x30, 0xcac229faa96ee7df, 0xffffffff, 0xfffffffd, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4000, 0xffffffff}}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc, 0x4}, {0xc}}}]}]}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000019400)={@loopback, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3, 0x6, 0x0, 0x0, 0x6, 0x105090100}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r5, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, 0x0, 0x0, 0x700, 0x0) sendfile(r6, r5, 0x0, 0x100000000) 2.849272526s ago: executing program 4 (id=489): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) sendmmsg$alg(r1, &(0x7f0000004680)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}], 0x1, 0x20000000) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff1, 0xfff2}, {0xfff2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 2.681034486s ago: executing program 4 (id=492): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x2) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4, 0x21}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.098781814s ago: executing program 0 (id=497): socket(0x2, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, 0x0) exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x1, 0x35, 0xfffc, 0x1, 0x0, 0x80000001, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000000206030000000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a310000000005000500f6ffffff05000400"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.067767914s ago: executing program 4 (id=498): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2c2fc2, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)=0x6) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) recvfrom$packet(r4, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, 0x0, 0x800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x3bc, 0x1ac, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2f4, 0x20a, 0x278, 0x2f4, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1ac, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x1}}]}, @common=@inet=@TCPMSS={0x24}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@limit={{0x3c}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x418) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r5, 0x0, 0x17) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) socket$nl_route(0x10, 0x3, 0x0) 1.827734294s ago: executing program 3 (id=500): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8957) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000090) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) 1.381788003s ago: executing program 2 (id=502): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 1.381562353s ago: executing program 1 (id=503): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="900000005200010000000000000000000a"], 0x90}}, 0x0) 1.375713023s ago: executing program 2 (id=504): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)='W', 0x1}, {&(0x7f00000002c0)="592eb75b3ad6fbbf04a8cdb64a61fce6", 0x10}, {&(0x7f0000000340)="14", 0x7fffefef}], 0x3}, 0x0) 1.324406593s ago: executing program 1 (id=505): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4], 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x20}}, 0x0) 1.156092332s ago: executing program 2 (id=506): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x19) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r1, 0x4, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.146239542s ago: executing program 1 (id=507): r0 = socket$caif_seqpacket(0x25, 0x5, 0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x800, 0x70bd2c, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180800d173c81a00000000000000000195000000000000007f4cb933d8c0e4ac46c01ae96072345bc4de2b1089f3e2b149dd873f1db2b25e69ceb25874b3900da7896e1cb3854f1da80e8f2ff13b832e"], 0x0, 0x6d, 0xe7, &(0x7f0000000500)=""/231, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x4048000) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd_index=0x7, 0x2, 0x0, 0x0, 0xc}) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x45) 1.093704372s ago: executing program 0 (id=508): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) write$dsp(r0, &(0x7f00000003c0)="81595358762221bda9887e93ca32dfa67dbb6aab85bbbac1484e810ec77d7b0f4b7860c62bf0415861ca7b91c15e74be97478eb15599f3f679e3a009ca1f9ba897", 0x41) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) close(r0) 1.093331752s ago: executing program 2 (id=509): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000640)='5', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/228, 0xe4}], 0x1}, 0xa0a}], 0x1, 0x40002000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mlockall(0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40087446, &(0x7f0000000380)={0x1, &(0x7f0000000300)=[{0x4, 0x1, 0x7, 0x5}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r3, &(0x7f00000004c0)='./cgroup\x00', &(0x7f0000001b80)=""/4131, 0x1023) openat$vimc2(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) fsetxattr$trusted_overlay_opaque(r5, &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) 935.854322ms ago: executing program 3 (id=510): unshare(0x62040200) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000880)=ANY=[@ANYBLOB="736563757869747900000000000000000000000000000000000000000000000004"], &(0x7f0000000980)=0x28) 873.460932ms ago: executing program 0 (id=511): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) 461.632981ms ago: executing program 3 (id=512): msgrcv(0x0, 0x0, 0x0, 0x0, 0xff0c) 393.435361ms ago: executing program 0 (id=513): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 379.929471ms ago: executing program 3 (id=514): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='romfs\x00', 0x0, 0x0) 169.75779ms ago: executing program 0 (id=515): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 157.93259ms ago: executing program 3 (id=516): syz_emit_ethernet(0x256, &(0x7f00000004c0)={@random="9164d265eead", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x220, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x18, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000003000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}]}}}}}}, 0x0) 123.3466ms ago: executing program 1 (id=517): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4], 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x20}}, 0x0) 123.0545ms ago: executing program 2 (id=518): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x5}, 0x18) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) 37.74661ms ago: executing program 0 (id=519): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140006000000000005000000000000f1ffffffff130002"], 0x40}}, 0x0) 37.52377ms ago: executing program 3 (id=520): syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0xffff8001}}}, 0xd) 25.9109ms ago: executing program 2 (id=521): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x24000880) 0s ago: executing program 4 (id=522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x70, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x4e, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0xb}}, 0x40000000000, @default, 0x10, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @void, @val={0x2d, 0x1a, {0x8, 0x3, 0x2, 0x0, {0x6, 0xf, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, 0x1, 0x3, 0xff}}, @void, @void}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0xba4820d6e6815606}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.21' (ED25519) to the list of known hosts. [ 43.466941][ T4011] cgroup: Unknown subsys name 'net' [ 43.698592][ T4011] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 44.034198][ T4011] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 45.519845][ T4031] chnl_net:caif_netlink_parms(): no params data found [ 45.565100][ T4021] chnl_net:caif_netlink_parms(): no params data found [ 45.579758][ T4026] chnl_net:caif_netlink_parms(): no params data found [ 45.615542][ T4025] chnl_net:caif_netlink_parms(): no params data found [ 45.643163][ T4031] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.644577][ T4031] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.646898][ T4031] device bridge_slave_0 entered promiscuous mode [ 45.666647][ T4031] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.668243][ T4031] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.670636][ T4031] device bridge_slave_1 entered promiscuous mode [ 45.732839][ T4032] chnl_net:caif_netlink_parms(): no params data found [ 45.736183][ T4026] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.737769][ T4026] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.740311][ T4026] device bridge_slave_0 entered promiscuous mode [ 45.743988][ T4021] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.745533][ T4021] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.747725][ T4021] device bridge_slave_0 entered promiscuous mode [ 45.752051][ T4031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.762932][ T4026] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.764455][ T4026] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.766498][ T4026] device bridge_slave_1 entered promiscuous mode [ 45.768525][ T4021] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.769995][ T4021] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.773120][ T4021] device bridge_slave_1 entered promiscuous mode [ 45.777427][ T4031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.810561][ T4025] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.812253][ T4025] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.814637][ T4025] device bridge_slave_0 entered promiscuous mode [ 45.817808][ T4025] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.819416][ T4025] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.821692][ T4025] device bridge_slave_1 entered promiscuous mode [ 45.859604][ T4026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.863876][ T4026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.867396][ T4021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.871153][ T4031] team0: Port device team_slave_0 added [ 45.874870][ T4031] team0: Port device team_slave_1 added [ 45.896955][ T4021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.906036][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.907618][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.913582][ T4031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.923879][ T4025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.927599][ T4025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.942313][ T4026] team0: Port device team_slave_0 added [ 45.944688][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.946078][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.951187][ T4031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.966471][ T4032] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.968073][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.970342][ T4032] device bridge_slave_0 entered promiscuous mode [ 45.979381][ T4026] team0: Port device team_slave_1 added [ 45.988576][ T4021] team0: Port device team_slave_0 added [ 45.999571][ T4032] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.001191][ T4032] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.004532][ T4032] device bridge_slave_1 entered promiscuous mode [ 46.018485][ T4021] team0: Port device team_slave_1 added [ 46.020252][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.021649][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.027300][ T4026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.034228][ T4025] team0: Port device team_slave_0 added [ 46.041685][ T4025] team0: Port device team_slave_1 added [ 46.061122][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.062685][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.067955][ T4026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.079227][ T4032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.104536][ T4032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.112793][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.114190][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.119499][ T4025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.123208][ T4021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.124675][ T4021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.129844][ T4021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.174473][ T4031] device hsr_slave_0 entered promiscuous mode [ 46.212579][ T4031] device hsr_slave_1 entered promiscuous mode [ 46.260380][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.261665][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.267198][ T4025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.270474][ T4021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.271927][ T4021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.277330][ T4021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.318941][ T4032] team0: Port device team_slave_0 added [ 46.323080][ T4032] team0: Port device team_slave_1 added [ 46.364365][ T4026] device hsr_slave_0 entered promiscuous mode [ 46.402612][ T4026] device hsr_slave_1 entered promiscuous mode [ 46.442382][ T4026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.444217][ T4026] Cannot create hsr debugfs directory [ 46.461899][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.463749][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.469141][ T4032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.499674][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.501117][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.506918][ T4032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.564187][ T4025] device hsr_slave_0 entered promiscuous mode [ 46.602493][ T4025] device hsr_slave_1 entered promiscuous mode [ 46.642194][ T4025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.643826][ T4025] Cannot create hsr debugfs directory [ 46.724485][ T4021] device hsr_slave_0 entered promiscuous mode [ 46.762480][ T4021] device hsr_slave_1 entered promiscuous mode [ 46.802281][ T4021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.803853][ T4021] Cannot create hsr debugfs directory [ 46.875600][ T4032] device hsr_slave_0 entered promiscuous mode [ 46.922558][ T4032] device hsr_slave_1 entered promiscuous mode [ 46.962367][ T4032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.963983][ T4032] Cannot create hsr debugfs directory [ 47.167826][ T4031] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.215584][ T4031] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.223100][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 47.224742][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 47.225956][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 47.254975][ T4031] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.302386][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 47.303716][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 47.306999][ T4031] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.383143][ T4021] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.434123][ T4021] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.474336][ T4021] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.524423][ T4021] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.621591][ T4026] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 47.665156][ T4026] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 47.718927][ T4031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.725563][ T4026] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 47.771247][ T4026] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 47.850073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.854569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.858874][ T4031] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.885051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.887689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.890046][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.891525][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.894436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.897335][ T4025] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.934187][ T4025] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.991825][ T4025] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.040711][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.043709][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.045903][ T500] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.047320][ T500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.050531][ T4025] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.107092][ T4032] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.147979][ T4021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.150886][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.155433][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.158450][ T4032] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.217713][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.220505][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.224587][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.227840][ T4032] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.267278][ T4032] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.317309][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.320176][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.322666][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.324631][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.329106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.331196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.348740][ T4031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.351932][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.358151][ T4021] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.361611][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.363913][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.395155][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.397274][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.399319][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.400804][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.410130][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.427309][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.429575][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.431647][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.433113][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.435418][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.440206][ T4026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.466947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.487718][ T4026] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.491062][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.494262][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.498738][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.500565][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.511425][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.514659][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.516839][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.520000][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.521994][ T500] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.523484][ T500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.526441][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.528667][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.548522][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.551204][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.554630][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.556872][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.559253][ T500] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.560759][ T500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.568533][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.588408][ T4021] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.590673][ T4021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.596497][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.599087][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.605596][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.608495][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.610651][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.614532][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.634162][ T4025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.655728][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.658270][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.661558][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.670547][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.674542][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.691377][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.694239][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.696342][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.699072][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.701223][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.709819][ T4032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.727453][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.729803][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.733678][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.736038][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.751482][ T4025] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.767508][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.771092][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.773833][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.775793][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.777973][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.790022][ T4032] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.799419][ T4031] device veth0_vlan entered promiscuous mode [ 48.801496][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.803825][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.805809][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.808160][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.810229][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.811955][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.816948][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.819247][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.821483][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.823076][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.826498][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.828740][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.830728][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.832285][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.848749][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.850913][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.855877][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.857710][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.859230][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.861778][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.871030][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.875588][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.877018][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.881903][ T4021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.896013][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.918945][ T4031] device veth1_vlan entered promiscuous mode [ 48.921781][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.924180][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.926644][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.929081][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.931232][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.935205][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.937503][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.943946][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.946501][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.952016][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.969761][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.971982][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.973971][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.975544][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.977977][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.985060][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.994414][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.997601][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.999768][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.018590][ T4026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.026349][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.028533][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.035061][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.037655][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.051952][ T4031] device veth0_macvtap entered promiscuous mode [ 49.058150][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.060471][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.065806][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.073916][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.076074][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.078888][ T4031] device veth1_macvtap entered promiscuous mode [ 49.120419][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.123090][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.125462][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.133822][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.140009][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.147641][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.149931][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.158774][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.161114][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.164464][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.166353][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.173325][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.193873][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.196055][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.198216][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.199899][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.210286][ T4021] device veth0_vlan entered promiscuous mode [ 49.219391][ T4031] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.221424][ T4031] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.231438][ T4031] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.235543][ T4031] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.247749][ T4032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.251778][ T4021] device veth1_vlan entered promiscuous mode [ 49.287047][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.289117][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.291408][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.302666][ T4068] Bluetooth: hci0: command 0x041b tx timeout [ 49.304849][ T4068] Bluetooth: hci1: command 0x041b tx timeout [ 49.306244][ T4068] Bluetooth: hci2: command 0x041b tx timeout [ 49.323505][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.325639][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.327736][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.331108][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.334514][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.344727][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.346369][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.349651][ T4026] device veth0_vlan entered promiscuous mode [ 49.358241][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.382707][ T25] Bluetooth: hci4: command 0x041b tx timeout [ 49.384241][ T25] Bluetooth: hci3: command 0x041b tx timeout [ 49.390054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.393280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.402475][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.404724][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.407050][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.409119][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.423120][ T4026] device veth1_vlan entered promiscuous mode [ 49.432202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.434683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.436994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.441203][ T4032] device veth0_vlan entered promiscuous mode [ 49.455955][ T4021] device veth0_macvtap entered promiscuous mode [ 49.494361][ T296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.495984][ T296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.505583][ T4021] device veth1_macvtap entered promiscuous mode [ 49.509938][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.512039][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.515082][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.517259][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.520855][ T4032] device veth1_vlan entered promiscuous mode [ 49.539096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.541164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.545716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.547988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.578356][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.580035][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.585366][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.595847][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.598056][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.603422][ T4021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.607887][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.610038][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.614273][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.616412][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.618565][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.620813][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.625096][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.626973][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.634147][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.636231][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.639802][ T4021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.649720][ T4032] device veth0_macvtap entered promiscuous mode [ 49.653491][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.655605][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.657761][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.659926][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.662021][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.668178][ T4026] device veth0_macvtap entered promiscuous mode [ 49.672038][ T4025] device veth0_vlan entered promiscuous mode [ 49.678843][ T4021] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.680546][ T4021] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.684598][ T4021] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.686455][ T4021] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.693576][ T4032] device veth1_macvtap entered promiscuous mode [ 49.699513][ T4026] device veth1_macvtap entered promiscuous mode [ 49.740608][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.749004][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.751114][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.754737][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.758750][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.771403][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.774525][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.776555][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.778772][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.794987][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.799985][ T4026] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.802005][ T4026] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.805210][ T4026] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.807053][ T4026] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.811308][ T4025] device veth1_vlan entered promiscuous mode [ 49.815091][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.817196][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.819231][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.821428][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.831331][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.835775][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.837992][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.840236][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.845240][ T9] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 49.864257][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.866457][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.868449][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.870469][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.873385][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.875534][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.878928][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.886351][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.888955][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.891038][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.894396][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.896460][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.898673][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.902850][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.911041][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.913759][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.916205][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.918526][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.920844][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.926284][ T4032] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.928028][ T4032] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.929702][ T4032] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.931565][ T4032] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.013345][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.015757][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.021887][ T4025] device veth0_macvtap entered promiscuous mode [ 50.051808][ T4025] device veth1_macvtap entered promiscuous mode [ 50.064918][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.068876][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.070884][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.073808][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.075710][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.077877][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.079945][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.084030][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.087721][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.091924][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.101563][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.104850][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.107620][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.122261][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.124758][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.126877][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.129084][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.131313][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.136357][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.138528][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.140774][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.146984][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.154040][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.156280][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.160989][ T4025] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.163571][ T4025] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.165422][ T4025] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.167356][ T4025] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.638015][ T500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.639636][ T500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.658560][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.688257][ T500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.689904][ T500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.692524][ T296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.694268][ T296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.694909][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.696765][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.697659][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.701455][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.721442][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.826730][ T296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.828775][ T296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.841289][ T4076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.843461][ T500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.845007][ T500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.849165][ T4076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.853524][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.855556][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.857598][ T4108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.861112][ T4108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.868592][ T4108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.871138][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.958903][ T4114] udc-core: couldn't find an available UDC or it's busy [ 50.960368][ T4114] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 51.050726][ T4120] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 51.118637][ T4120] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 51.358318][ T4136] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.360234][ T4136] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.362359][ T4136] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.364257][ T4136] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.383341][ T4068] Bluetooth: hci2: command 0x040f tx timeout [ 51.385077][ T4068] Bluetooth: hci1: command 0x040f tx timeout [ 51.386704][ T4068] Bluetooth: hci0: command 0x040f tx timeout [ 51.401714][ T4136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11'. [ 51.426797][ T4136] device vxlan1 entered promiscuous mode [ 51.439631][ T4136] Zero length message leads to an empty skb [ 51.446829][ T4137] device geneve2 entered promiscuous mode [ 51.463042][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 51.464537][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 51.526885][ T4141] netlink: 'syz.1.12': attribute type 1 has an invalid length. [ 51.528565][ T4142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 51.665000][ T4148] device ip6gretap0 entered promiscuous mode [ 51.722811][ T4148] device batadv_slave_0 entered promiscuous mode [ 51.938339][ T4145] loop2: detected capacity change from 0 to 32768 [ 51.951163][ T26] audit: type=1326 audit(51.910:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4124 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd8a9ba8 code=0x7fc00000 [ 51.966094][ T26] audit: type=1326 audit(51.910:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4124 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=73 compat=0 ip=0xffffbd8a9ba8 code=0x7fc00000 [ 51.984177][ T26] audit: type=1326 audit(51.910:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4124 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd8a9ba8 code=0x7fc00000 [ 51.989698][ T4145] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.15 (4145) [ 52.000884][ T26] audit: type=1326 audit(51.910:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4124 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd8a9ba8 code=0x7fc00000 [ 52.021940][ T26] audit: type=1326 audit(51.910:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4124 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd8a9ba8 code=0x7fc00000 [ 52.046253][ T26] audit: type=1326 audit(51.910:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4124 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd8a9ba8 code=0x7fc00000 [ 52.050834][ T4145] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 52.063522][ T4145] BTRFS info (device loop2): force clearing of disk cache [ 52.065088][ T4145] BTRFS info (device loop2): enabling disk space caching [ 52.066650][ T26] audit: type=1326 audit(51.910:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4124 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd8a9ba8 code=0x7fc00000 [ 52.075439][ T4145] BTRFS info (device loop2): turning on sync discard [ 52.080315][ T4145] BTRFS info (device loop2): disabling tree log [ 52.081575][ T4145] BTRFS info (device loop2): metadata ratio 5 [ 52.085875][ T26] audit: type=1326 audit(51.920:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4124 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd8a9ba8 code=0x7fc00000 [ 52.092697][ T4145] BTRFS info (device loop2): disk space caching is enabled [ 52.094317][ T4145] BTRFS info (device loop2): has skinny extents [ 52.163426][ T26] audit: type=1326 audit(51.920:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4124 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd8a9ba8 code=0x7fc00000 [ 52.189406][ T4165] capability: warning: `syz.3.23' uses 32-bit capabilities (legacy support in use) [ 52.264451][ T4146] loop0: detected capacity change from 0 to 32768 [ 52.270841][ T26] audit: type=1326 audit(51.920:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4124 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd8a9ba8 code=0x7fc00000 [ 53.021310][ T4146] ======================================================= [ 53.021310][ T4146] WARNING: The mand mount option has been deprecated and [ 53.021310][ T4146] and is ignored by this kernel. Remove the mand [ 53.021310][ T4146] option from the mount to silence this warning. [ 53.021310][ T4146] ======================================================= [ 53.117008][ T4146] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.14 (4146) [ 53.292156][ T4145] BTRFS info (device loop2): enabling ssd optimizations [ 53.323742][ T4145] BTRFS info (device loop2): clearing free space tree [ 53.328215][ T4145] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 53.330285][ T4145] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 53.427160][ T4146] bridge0: port 3(syz_tun) entered blocking state [ 53.437094][ T4146] bridge0: port 3(syz_tun) entered disabled state [ 53.448698][ T4146] device syz_tun entered promiscuous mode [ 53.450741][ T4146] bridge0: port 3(syz_tun) entered blocking state [ 53.452162][ T4146] bridge0: port 3(syz_tun) entered forwarding state [ 53.555367][ T4104] Bluetooth: hci0: command 0x0419 tx timeout [ 53.556715][ T4104] Bluetooth: hci1: command 0x0419 tx timeout [ 53.558427][ T4104] Bluetooth: hci2: command 0x0419 tx timeout [ 53.559730][ T4068] Bluetooth: hci4: command 0x0419 tx timeout [ 53.561074][ T4068] Bluetooth: hci3: command 0x0419 tx timeout [ 53.583718][ T4204] capability: warning: `syz.1.31' uses deprecated v2 capabilities in a way that may be insecure [ 54.015488][ C1] ODEBUG: Out of memory. ODEBUG disabled [ 54.408935][ T4212] syz.0.32 uses obsolete (PF_INET,SOCK_PACKET) [ 55.743485][ T4233] netlink: 'syz.4.42': attribute type 1 has an invalid length. [ 55.747072][ T4233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.42'. [ 55.806790][ T4233] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.978908][ T4233] device bridge_slave_0 left promiscuous mode [ 55.980337][ T4233] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.992626][ T4244] udc-core: couldn't find an available UDC or it's busy [ 55.994060][ T4244] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 56.781654][ T4270] tipc: Started in network mode [ 56.787109][ T4270] tipc: Node identity ac1414aa, cluster identity 4711 [ 56.791520][ T4270] tipc: Enabled bearer , priority 10 [ 56.888738][ T4277] netlink: 'syz.1.60': attribute type 1 has an invalid length. [ 56.899567][ T4277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.60'. [ 56.990780][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.085298][ T4279] sched: RT throttling activated [ 58.098014][ T7] tipc: Node number set to 2886997162 [ 58.714397][ T4277] device bridge_slave_0 left promiscuous mode [ 58.715813][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.731130][ T4291] usb usb4: usbfs: process 4291 (syz.2.64) did not claim interface 0 before use [ 59.010344][ T4305] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 60.863260][ T4332] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 60.926134][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.970853][ T4332] device bridge_slave_1 left promiscuous mode [ 60.975164][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.515732][ T4357] netlink: 72 bytes leftover after parsing attributes in process `syz.1.87'. [ 62.318118][ T4069] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 62.494479][ T4370] netlink: 'syz.4.97': attribute type 1 has an invalid length. [ 62.549274][ T4373] device hsr_slave_0 left promiscuous mode [ 62.709197][ T4069] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 62.711876][ T4069] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 62.714462][ T4069] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 62.715373][ T4377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'. [ 62.716288][ T4069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.783348][ T4363] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 63.365803][ T4069] usb 1-1: USB disconnect, device number 2 [ 64.401070][ T4403] netlink: 'syz.4.107': attribute type 8 has an invalid length. [ 64.597182][ T4413] netlink: 'syz.4.111': attribute type 1 has an invalid length. [ 64.620670][ T4410] Restarting kernel threads ... done. [ 64.653725][ T4413] device veth1_macvtap left promiscuous mode [ 65.553448][ T4432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.118'. [ 65.623110][ T13] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 65.625085][ T13] Bluetooth: hci3: Injecting HCI hardware error event [ 65.627486][ T4028] Bluetooth: hci3: hardware error 0x00 [ 65.980396][ T4444] netlink: 'syz.3.123': attribute type 1 has an invalid length. [ 66.136844][ T4444] bond1 (unregistering): Released all slaves [ 66.855435][ T4069] Bluetooth: hci5: command 0x1003 tx timeout [ 66.856868][ T144] Bluetooth: hci5: sending frame failed (-49) [ 66.949133][ T4450] kernel profiling enabled (shift: 17) [ 69.053848][ T13] Bluetooth: hci5: command 0x1001 tx timeout [ 69.055164][ T144] Bluetooth: hci5: sending frame failed (-49) [ 69.271474][ T4468] tipc: Enabling of bearer rejected, media not registered [ 69.417850][ T4472] netlink: 'syz.2.132': attribute type 1 has an invalid length. [ 69.419438][ T4472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.132'. [ 69.918380][ T2053] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.919894][ T2053] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.205185][ T3321] cfg80211: failed to load regulatory.db [ 70.396758][ T4487] netlink: 'syz.3.138': attribute type 1 has an invalid length. [ 70.456410][ T4487] bond1 (unregistering): Released all slaves [ 71.150305][ T13] Bluetooth: hci5: command 0x1009 tx timeout [ 71.923501][ T13] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 71.925344][ T13] Bluetooth: hci1: Injecting HCI hardware error event [ 71.926908][ T144] Bluetooth: hci1: hardware error 0x00 [ 72.238711][ T4526] netlink: 'syz.3.154': attribute type 1 has an invalid length. [ 72.283144][ T4526] bond1 (unregistering): Released all slaves [ 72.317089][ T4535] udc-core: couldn't find an available UDC or it's busy [ 72.318547][ T4535] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 72.576451][ T4555] udc-core: couldn't find an available UDC or it's busy [ 72.578125][ T4555] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 74.499341][ T4571] netlink: 'syz.4.172': attribute type 1 has an invalid length. [ 74.541780][ T4571] netlink: 36 bytes leftover after parsing attributes in process `syz.4.172'. [ 74.561413][ T4571] bond1 (unregistering): Released all slaves [ 74.987588][ T4585] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.125539][ T4594] binder: BC_ACQUIRE_RESULT not supported [ 75.145909][ T4594] binder: 4593:4594 ioctl c0306201 200001c0 returned -22 [ 75.467115][ T4603] udc-core: couldn't find an available UDC or it's busy [ 75.468621][ T4603] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 75.474050][ T4068] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.718348][ T4611] netlink: 'syz.3.188': attribute type 1 has an invalid length. [ 75.772484][ T4611] netlink: 36 bytes leftover after parsing attributes in process `syz.3.188'. [ 75.781077][ T4611] bond1 (unregistering): Released all slaves [ 76.142451][ T4068] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 76.144808][ T4068] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.147297][ T4068] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.151402][ T4068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.178459][ T4068] usb 1-1: config 0 descriptor?? [ 76.244735][ T4068] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 76.336195][ T4625] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 76.582270][ T4069] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 76.584011][ T4069] Bluetooth: hci2: Injecting HCI hardware error event [ 76.585768][ T4028] Bluetooth: hci2: hardware error 0x00 [ 78.101846][ T4658] netlink: 'syz.4.202': attribute type 1 has an invalid length. [ 78.146656][ T4656] hub 5-0:1.0: USB hub found [ 78.154598][ T4658] netlink: 36 bytes leftover after parsing attributes in process `syz.4.202'. [ 78.165522][ T4658] bond1 (unregistering): Released all slaves [ 78.167239][ T4656] hub 5-0:1.0: 8 ports detected [ 79.444650][ T3321] usb 1-1: USB disconnect, device number 3 [ 79.902154][ T3321] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 80.218303][ T3321] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 80.298064][ T3321] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.299871][ T3321] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.302892][ T3321] usb 1-1: config 0 interface 0 has no altsetting 0 [ 80.333639][ T4694] input: syz0 as /devices/virtual/input/input2 [ 81.047472][ T3321] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.049309][ T3321] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.051421][ T3321] usb 1-1: config 0 interface 0 has no altsetting 0 [ 81.154714][ T3321] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.156745][ T3321] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.158672][ T3321] usb 1-1: config 0 interface 0 has no altsetting 0 [ 81.242341][ T3321] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.244210][ T3321] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.246399][ T3321] usb 1-1: config 0 interface 0 has no altsetting 0 [ 81.322358][ T3321] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.324380][ T3321] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.326737][ T4707] netlink: 'syz.2.215': attribute type 1 has an invalid length. [ 81.328875][ T3321] usb 1-1: config 0 interface 0 has no altsetting 0 [ 81.382869][ T4707] netlink: 36 bytes leftover after parsing attributes in process `syz.2.215'. [ 81.402876][ T3321] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.404738][ T3321] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.406988][ T3321] usb 1-1: config 0 interface 0 has no altsetting 0 [ 81.424528][ T4707] bond1 (unregistering): Released all slaves [ 81.502320][ T3321] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.504616][ T3321] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.506861][ T3321] usb 1-1: config 0 interface 0 has no altsetting 0 [ 81.592435][ T3321] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.594444][ T3321] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.596990][ T3321] usb 1-1: config 0 interface 0 has no altsetting 0 [ 81.598098][ T4710] netlink: 40 bytes leftover after parsing attributes in process `syz.2.216'. [ 81.789209][ T3321] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 81.791025][ T3321] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 81.793003][ T3321] usb 1-1: Product: syz [ 81.793866][ T3321] usb 1-1: Manufacturer: syz [ 81.794761][ T3321] usb 1-1: SerialNumber: syz [ 81.808545][ T3321] usb 1-1: config 0 descriptor?? [ 81.880453][ T3321] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 82.093365][ T3321] usb 1-1: USB disconnect, device number 4 [ 82.114929][ T3321] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 82.378342][ T4719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.219'. [ 82.560985][ T4725] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 82.727727][ T4734] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 82.732814][ T4734] IPv6: addrconf: prefix option has invalid lifetime [ 82.736339][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 82.738565][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 83.022562][ T4740] netlink: 'syz.0.227': attribute type 1 has an invalid length. [ 83.028628][ T4740] netlink: 36 bytes leftover after parsing attributes in process `syz.0.227'. [ 86.032932][ T4776] 9pnet: Insufficient options for proto=fd [ 86.123343][ T4778] netlink: 'syz.3.240': attribute type 1 has an invalid length. [ 86.198010][ T4778] netlink: 36 bytes leftover after parsing attributes in process `syz.3.240'. [ 86.236817][ T4778] bond1 (unregistering): Released all slaves [ 86.253867][ T4064] libceph: connect (1)[c::]:6789 error -101 [ 86.255377][ T4064] libceph: mon0 (1)[c::]:6789 connect error [ 86.259659][ T4064] libceph: connect (1)[c::]:6789 error -101 [ 86.261435][ T4064] libceph: mon0 (1)[c::]:6789 connect error [ 86.294500][ T4782] ceph: No mds server is up or the cluster is laggy [ 86.787250][ T4793] netlink: 64 bytes leftover after parsing attributes in process `syz.2.243'. [ 87.521597][ T4808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'. [ 87.528743][ T4808] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 87.721349][ T4812] netlink: 'syz.0.252': attribute type 1 has an invalid length. [ 87.760293][ T4812] netlink: 36 bytes leftover after parsing attributes in process `syz.0.252'. [ 87.771007][ T4812] bond1 (unregistering): Released all slaves [ 88.059024][ T4821] udc-core: couldn't find an available UDC or it's busy [ 88.060567][ T4821] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 88.122471][ C1] dccp_check_seqno: Step 6 failed for CLOSEREQ packet, (LSWL(12846334452257) <= P.seqno(12846334452256) <= S.SWH(12846334452280)) and (P.ackno exists or LAWL(203853185946360) <= P.ackno(203853185946360) <= S.AWH(203853185946360), sending SYNC... [ 88.692876][ T4828] hub 5-0:1.0: USB hub found [ 88.700774][ T4828] hub 5-0:1.0: 8 ports detected [ 90.208999][ T4850] netlink: 'syz.4.264': attribute type 1 has an invalid length. [ 90.232715][ T4850] netlink: 36 bytes leftover after parsing attributes in process `syz.4.264'. [ 90.257912][ T4850] bond1 (unregistering): Released all slaves [ 90.503973][ T4861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.268'. [ 91.768252][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 91.768264][ T26] audit: type=1326 audit(91.730:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4881 comm="syz.2.274" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa3b7ba8 code=0x0 [ 92.386411][ T4895] netlink: 'syz.0.279': attribute type 1 has an invalid length. [ 92.456634][ T4895] netlink: 36 bytes leftover after parsing attributes in process `syz.0.279'. [ 92.520617][ T4895] bond1 (unregistering): Released all slaves [ 92.938351][ T26] audit: type=1326 audit(92.900:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4910 comm="syz.0.287" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef7fba8 code=0x7fc00000 [ 92.943044][ T26] audit: type=1326 audit(92.900:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4910 comm="syz.0.287" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff7ef7fba8 code=0x7fc00000 [ 92.947700][ T26] audit: type=1326 audit(92.900:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4910 comm="syz.0.287" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef7fba8 code=0x7fc00000 [ 93.260334][ T4929] netlink: 'syz.3.294': attribute type 1 has an invalid length. [ 93.344710][ T4933] netlink: 36 bytes leftover after parsing attributes in process `syz.3.294'. [ 93.377175][ T4933] bond1 (unregistering): Released all slaves [ 93.639483][ T4939] netlink: 28 bytes leftover after parsing attributes in process `syz.3.297'. [ 93.929072][ T4946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.100578][ T4957] netlink: 104 bytes leftover after parsing attributes in process `syz.1.305'. [ 94.104711][ T4955] netlink: 'syz.0.306': attribute type 1 has an invalid length. [ 94.135333][ T4955] netlink: 36 bytes leftover after parsing attributes in process `syz.0.306'. [ 94.149240][ T4955] bond1 (unregistering): Released all slaves [ 95.004173][ C1] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(277114245805223) <= P.seqno(0) <= S.SWH(277114245805297)) and (P.ackno exists or LAWL(51116572359763) <= P.ackno(51116572359764) <= S.AWH(51116572359764), sending SYNC... [ 95.331261][ T4983] netlink: 52 bytes leftover after parsing attributes in process `syz.0.314'. [ 95.493248][ T4993] netlink: 'syz.2.321': attribute type 1 has an invalid length. [ 95.570811][ T4993] netlink: 36 bytes leftover after parsing attributes in process `syz.2.321'. [ 95.581518][ T4993] bond1 (unregistering): Released all slaves [ 95.680900][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 95.891970][ T26] audit: type=1326 audit(95.850:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5022 comm="syz.4.333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd8a9ba8 code=0x7ffc0000 [ 95.896491][ T26] audit: type=1326 audit(95.850:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5022 comm="syz.4.333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd8a9ba8 code=0x7ffc0000 [ 96.011179][ T26] audit: type=1326 audit(95.870:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5022 comm="syz.4.333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=47 compat=0 ip=0xffffbd8a9ba8 code=0x7ffc0000 [ 96.041669][ T26] audit: type=1326 audit(95.870:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5022 comm="syz.4.333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd8a9ba8 code=0x7ffc0000 [ 96.055601][ T5033] udc-core: couldn't find an available UDC or it's busy [ 96.057009][ T5033] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 96.083046][ T26] audit: type=1326 audit(95.880:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5022 comm="syz.4.333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd8a9ba8 code=0x7ffc0000 [ 96.875865][ T5041] netlink: 'syz.2.339': attribute type 1 has an invalid length. [ 97.050310][ T5041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 97.057448][ T5041] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 97.063863][ T5041] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 98.530428][ T5083] binder: 5082:5083 tried to acquire reference to desc 0, got 1 instead [ 98.535622][ T5083] binder: 5082:5083 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 98.548635][ T5083] binder: 5083 RLIMIT_NICE not set [ 98.552668][ T4064] binder: undelivered TRANSACTION_COMPLETE [ 98.562520][ T5086] netlink: 'syz.1.356': attribute type 1 has an invalid length. [ 98.578711][ T5088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 98.633660][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 98.636736][ T5088] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 100.659047][ T4069] Bluetooth: hci0: command 0x0406 tx timeout [ 100.753347][ T5128] binder: 5127:5128 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 100.826248][ T5135] binder: 5133:5135 tried to acquire reference to desc 0, got 1 instead [ 100.844044][ T5135] binder_alloc: 5133: pid 5133 spamming oneway? 1 buffers allocated for a total size of 4096 [ 100.856871][ T5139] netlink: 'syz.4.370': attribute type 1 has an invalid length. [ 100.940743][ T4069] binder: release 5133:5135 transaction 10 out, still active [ 100.957684][ T4069] binder: undelivered TRANSACTION_COMPLETE [ 100.958894][ T4069] binder: undelivered TRANSACTION_COMPLETE [ 100.960321][ T4069] binder: send failed reply for transaction 10, target dead [ 100.963924][ T4069] binder: undelivered transaction 11, process died. [ 101.883502][ T4756] Bluetooth: hci4: command 0x0411 tx timeout [ 101.996030][ T5157] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.997857][ T5157] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.999775][ T5157] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.001631][ T5157] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.061207][ T5157] device vxlan0 entered promiscuous mode [ 102.061301][ T5165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.376'. [ 102.088744][ T5157] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.090770][ T5157] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.093005][ T5157] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.094914][ T5157] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.590603][ T5188] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 102.592272][ T5188] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 102.596624][ T5188] vhci_hcd vhci_hcd.0: Device attached [ 102.607177][ T5192] vhci_hcd: connection closed [ 102.609729][ T4559] vhci_hcd: stop threads [ 102.611918][ T4559] vhci_hcd: release socket [ 102.613159][ T4559] vhci_hcd: disconnect device [ 102.695123][ T5195] netlink: 'syz.1.384': attribute type 1 has an invalid length. [ 102.766273][ T5195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 102.794418][ T5195] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 102.805355][ T5195] bond2: (slave batadv2): Enslaving as a backup interface with an up link [ 103.409290][ T5221] netlink: 'syz.0.395': attribute type 1 has an invalid length. [ 103.500449][ T5223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'. [ 103.581918][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 103.593047][ T5223] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 104.781681][ T5242] hub 5-0:1.0: USB hub found [ 104.792652][ T5242] hub 5-0:1.0: 8 ports detected [ 104.932268][ T5252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'. [ 105.022212][ T4104] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.093903][ T5256] netlink: 'syz.3.408': attribute type 1 has an invalid length. [ 105.117694][ T5256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'. [ 105.128468][ T5256] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 105.131852][ T5256] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 105.262173][ T4104] usb 1-1: Using ep0 maxpacket: 8 [ 105.263559][ T5261] [U] [ 105.264305][ T5261] [U] [ 105.264859][ T5261] [U] [ 105.265448][ T5261] [U] [ 105.274686][ T5261] [U] [ 105.275285][ T5261] [U] [ 105.275766][ T5261] [U] [ 105.276279][ T5261] [U] [ 105.282667][ T5261] [U] [ 105.283293][ T5261] [U] [ 105.283824][ T5261] [U] [ 105.284326][ T5261] [U] [ 105.289404][ T5261] [U] [ 105.290039][ T5261] [U] [ 105.290629][ T5261] [U] [ 105.291151][ T5261] [U] [ 105.300491][ T5261] [U] [ 105.301115][ T5261] [U] [ 105.301705][ T5261] [U] [ 105.302266][ T5261] [U] [ 105.308155][ T5261] [U] [ 105.308752][ T5261] [U] [ 105.309326][ T5261] [U] [ 105.309886][ T5261] [U] [ 105.315281][ T5261] [U] [ 105.315892][ T5261] [U] [ 105.316455][ T5261] [U] [ 105.317024][ T5261] [U] [ 105.321017][ T5261] [U] [ 105.321538][ T5261] [U] [ 105.322061][ T5261] [U] [ 105.322681][ T5261] [U] [ 105.327836][ T5261] [U] [ 105.328438][ T5261] [U] [ 105.329022][ T5261] [U] [ 105.329659][ T5261] [U] [ 105.336529][ T5261] [U] [ 105.337131][ T5261] [U] [ 105.337826][ T5261] [U] [ 105.338398][ T5261] [U] [ 105.348086][ T5261] [U] [ 105.348661][ T5261] [U] [ 105.349200][ T5261] [U] [ 105.349726][ T5261] [U] [ 105.355860][ T5261] [U] [ 105.356488][ T5261] [U] [ 105.357027][ T5261] [U] [ 105.357559][ T5261] [U] [ 105.361641][ T5261] [U] [ 105.362233][ T5261] [U] [ 105.362738][ T5261] [U] [ 105.363263][ T5261] [U] [ 105.382450][ T4104] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.384419][ T4104] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.386399][ T4104] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.388404][ T4104] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.390557][ T5261] [U] [ 105.391762][ T5261] [U] [ 105.392341][ T5261] [U] [ 105.392940][ T5261] [U] [ 105.400618][ T5261] [U] [ 105.401211][ T5261] [U] [ 105.401814][ T5261] [U] [ 105.402418][ T5261] [U] [ 105.406799][ T5261] [U] [ 105.407409][ T5261] [U] [ 105.407985][ T5261] [U] [ 105.408532][ T5261] [U] [ 105.412805][ T5261] [U] [ 105.413390][ T5261] [U] [ 105.414015][ T5261] [U] [ 105.414571][ T5261] [U] [ 105.415033][ T4104] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.417074][ T4104] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.417544][ T5261] [U] [ 105.419352][ T5261] [U] [ 105.419973][ T5261] [U] [ 105.420595][ T5261] [U] [ 105.425958][ T5261] [U] [ 105.426519][ T5261] [U] [ 105.427015][ T5261] [U] [ 105.427577][ T5261] [U] [ 105.429402][ T5261] [U] [ 105.429959][ T5261] [U] [ 105.430473][ T5261] [U] [ 105.430988][ T5261] [U] [ 105.435110][ T5261] [U] [ 105.435661][ T5261] [U] [ 105.436224][ T5261] [U] [ 105.436799][ T5261] [U] [ 105.439199][ T5261] [U] [ 105.439758][ T5261] [U] [ 105.440290][ T5261] [U] [ 105.440862][ T5261] [U] [ 105.451803][ T5261] [U] [ 105.452401][ T5261] [U] [ 105.452929][ T5261] [U] [ 105.453566][ T5261] [U] [ 105.455575][ T5261] [U] [ 105.456130][ T5261] [U] [ 105.456616][ T5261] [U] [ 105.457208][ T5261] [U] [ 105.460186][ T5261] [U] [ 105.460762][ T5261] [U] [ 105.461274][ T5261] [U] [ 105.461883][ T5261] [U] [ 105.467120][ T5261] [U] [ 105.467680][ T5261] [U] [ 105.468248][ T5261] [U] [ 105.468767][ T5261] [U] [ 105.470703][ T5261] [U] [ 105.471259][ T5261] [U] [ 105.471795][ T5261] [U] [ 105.472333][ T5261] [U] [ 105.474955][ T5261] [U] [ 105.475511][ T5261] [U] [ 105.476101][ T5261] [U] [ 105.476703][ T5261] [U] [ 105.479707][ T5261] [U] [ 105.480288][ T5261] [U] [ 105.480849][ T5261] [U] [ 105.481390][ T5261] [U] [ 105.484348][ T5261] [U] [ 105.484970][ T5261] [U] [ 105.485467][ T5261] [U] [ 105.486120][ T5261] [U] [ 105.488067][ T5261] [U] [ 105.488670][ T5261] [U] [ 105.489218][ T5261] [U] [ 105.489840][ T5261] [U] [ 105.492771][ T5261] [U] [ 105.493382][ T5261] [U] [ 105.493903][ T5261] [U] [ 105.702256][ T4104] usb 1-1: usb_control_msg returned -32 [ 105.703482][ T4104] usbtmc 1-1:16.0: can't read capabilities [ 105.815260][ T5269] device pim6reg1 entered promiscuous mode [ 106.078251][ T5260] [U] [ 106.241811][ T5282] netlink: 'syz.2.419': attribute type 1 has an invalid length. [ 106.277650][ T5282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 106.294425][ T4104] usb 1-1: USB disconnect, device number 5 [ 106.343502][ T5282] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 106.362855][ T5282] bond2: (slave batadv2): Enslaving as a backup interface with an up link [ 106.585669][ T5289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.421'. [ 107.080798][ T5298] device veth1_macvtap left promiscuous mode [ 107.091923][ T5298] device macsec0 entered promiscuous mode [ 107.211603][ T5302] input: syz0 as /devices/virtual/input/input4 [ 107.672149][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.912198][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 108.032395][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.034784][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.036811][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.038960][ T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.041682][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.054960][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.322247][ T25] usb 1-1: GET_CAPABILITIES returned 0 [ 108.323322][ T25] usbtmc 1-1:16.0: can't read capabilities [ 108.532654][ T4067] usb 1-1: USB disconnect, device number 6 [ 108.751221][ T5314] netlink: 'syz.1.430': attribute type 1 has an invalid length. [ 108.807456][ T5314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.430'. [ 108.826559][ T5314] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 108.828911][ T5314] bond3: (slave batadv3): Enslaving as a backup interface with an up link [ 110.319520][ T5330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.432'. [ 111.343472][ T5341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'. [ 111.444182][ T5346] netlink: 'syz.3.441': attribute type 1 has an invalid length. [ 111.829232][ T5346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'. [ 111.866156][ T5346] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 111.880913][ T5346] bond2: (slave batadv2): Enslaving as a backup interface with an up link [ 112.199363][ T5368] device syzkaller0 entered promiscuous mode [ 112.395275][ T5383] netlink: 'syz.3.456': attribute type 1 has an invalid length. [ 112.427101][ T5383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 112.433107][ T5383] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 112.435564][ T5383] bond3: (slave batadv3): Enslaving as a backup interface with an up link [ 112.523813][ T144] Bluetooth: hci4: link tx timeout [ 112.523870][ T144] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 112.699468][ T5394] netlink: 'syz.1.460': attribute type 1 has an invalid length. [ 112.742219][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 112.806629][ T5401] udc-core: couldn't find an available UDC or it's busy [ 112.808125][ T5401] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 113.085338][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 113.096487][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 113.102620][ T25] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 113.104385][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.106294][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.127112][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.139245][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.159171][ T5411] device bridge_slave_0 left promiscuous mode [ 113.169386][ T5411] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.222528][ T25] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 113.224475][ T25] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 113.226078][ T25] usb 1-1: Product: syz [ 113.228538][ T25] usb 1-1: Manufacturer: syz [ 113.256173][ T5411] bond0: (slave bond_slave_0): Releasing backup interface [ 113.311396][ T5411] bond0: (slave bond_slave_1): Releasing backup interface [ 113.442333][ T5411] team0: Port device team_slave_0 removed [ 113.469518][ T25] usb 1-1: USB disconnect, device number 7 [ 113.488707][ T5411] team0: Port device team_slave_1 removed [ 113.490607][ T5411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.492822][ T5411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.500054][ T5411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.501806][ T5411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.519945][ T5411] bond1: (slave batadv1): Releasing backup interface [ 113.563498][ T5411] bond2: (slave batadv2): Releasing backup interface [ 113.628036][ T5415] netlink: 'syz.3.468': attribute type 1 has an invalid length. [ 113.637583][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.468'. [ 113.648616][ T5416] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 113.651357][ T5416] bond4: (slave batadv4): Enslaving as a backup interface with an up link [ 113.682504][ T5418] device bond4 entered promiscuous mode [ 113.687976][ T5418] 8021q: adding VLAN 0 to HW filter on device bond4 [ 113.845725][ T5436] udc-core: couldn't find an available UDC or it's busy [ 113.847363][ T5436] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 113.854383][ T5435] binder: 5434:5435 unknown command 1074553619 [ 113.855654][ T5435] binder: 5434:5435 ioctl c0306201 20000940 returned -22 [ 113.947128][ T5444] netlink: 'syz.1.480': attribute type 1 has an invalid length. [ 113.979694][ T5446] bond0 speed is unknown, defaulting to 1000 [ 113.981163][ T5446] bond0 speed is unknown, defaulting to 1000 [ 113.988872][ T5444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 113.997797][ T5448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.481'. [ 114.007015][ T5444] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 114.009372][ T5444] bond5: (slave batadv4): Enslaving as a backup interface with an up link [ 114.011175][ T5446] bond0 speed is unknown, defaulting to 1000 [ 114.015334][ T5446] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 114.019808][ T5446] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 114.035503][ T5446] bond0 speed is unknown, defaulting to 1000 [ 114.037616][ T5446] bond0 speed is unknown, defaulting to 1000 [ 114.039361][ T5446] bond0 speed is unknown, defaulting to 1000 [ 114.041292][ T5446] bond0 speed is unknown, defaulting to 1000 [ 114.043290][ T5446] bond0 speed is unknown, defaulting to 1000 [ 114.068984][ T5451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.483'. [ 114.070835][ T5451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.483'. [ 114.072837][ T5451] netlink: 'syz.1.483': attribute type 7 has an invalid length. [ 114.100860][ T5453] binder: Unknown parameter 'fscontext' [ 114.117163][ T5455] process 'syz.1.484' launched '/dev/fd/3' with NULL argv: empty string added [ 114.146281][ T5455] ksmbd: Unknown IPC event: 6, ignore. [ 114.582300][ T4067] Bluetooth: hci4: command 0x0406 tx timeout [ 115.458691][ T5487] netlink: 'syz.2.493': attribute type 1 has an invalid length. [ 115.502730][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 115.638768][ T5487] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 115.663353][ T5487] bond3: (slave batadv3): Enslaving as a backup interface with an up link [ 116.144604][ T5504] binder: 5503:5504 tried to acquire reference to desc 0, got 1 instead [ 116.198931][ T5505] binder: 5503:5505 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 116.201640][ T5505] binder: 5505 RLIMIT_NICE not set [ 116.203206][ T5505] binder: 5505 RLIMIT_NICE not set [ 116.204486][ T5505] binder: send failed reply for transaction 18 to 5503:5504 [ 116.212713][ T5505] binder: 5503:5505 ioctl c0306201 20000180 returned -14 [ 116.662275][ T25] Bluetooth: hci4: command 0x0405 tx timeout [ 116.701791][ T5516] netlink: 124 bytes leftover after parsing attributes in process `syz.1.503'. [ 116.781353][ T5520] netlink: 'syz.1.505': attribute type 1 has an invalid length. [ 116.811556][ T5520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 116.833548][ T5520] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 116.839750][ T5520] bond6: (slave batadv5): Enslaving as a backup interface with an up link [ 117.084854][ T5506] dccp_close: ABORT with 64 bytes unread [ 117.195933][ T5533] bond0 speed is unknown, defaulting to 1000 [ 117.589291][ T5537] 9pnet_virtio: no channels available for device syz [ 117.786817][ T5542] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 117.829503][ T5542] VFS: Can't find a romfs filesystem on dev nullb0. [ 117.829503][ T5542] [ 117.981490][ T5549] netlink: 'syz.1.517': attribute type 1 has an invalid length. [ 118.063633][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.517'. [ 118.097337][ T5557] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 118.106174][ T5557] bond7: (slave batadv6): Enslaving as a backup interface with an up link [ 118.108230][ T5561] ------------[ cut here ]------------ [ 118.109649][ T5561] no supported rates for sta 08:02:11:00:00:01 (0xf, band 0) in rate_mask 0xfff with flags 0x10 [ 118.112284][ T5561] WARNING: CPU: 1 PID: 5561 at net/mac80211/rate.c:376 __rate_control_send_low+0x580/0x774 [ 118.114381][ T5561] Modules linked in: [ 118.115166][ T5561] CPU: 1 PID: 5561 Comm: syz.4.522 Not tainted 5.15.176-syzkaller #0 [ 118.116922][ T5561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 118.119170][ T5561] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 118.120825][ T5561] pc : __rate_control_send_low+0x580/0x774 [ 118.122144][ T5561] lr : __rate_control_send_low+0x580/0x774 [ 118.123255][ T5561] sp : ffff800020d86830 [ 118.124175][ T5561] x29: ffff800020d86880 x28: ffff0000d7c2b370 x27: 000000000000000c [ 118.125874][ T5561] x26: dfff800000000000 x25: ffff0000d6f58ee4 x24: 000000000000000f [ 118.127585][ T5561] x23: ffff0000e88673e8 x22: 0000000000000010 x21: ffff0000d6f58ed0 [ 118.129290][ T5561] x20: 1fffe0001af85670 x19: ffff0000d7c2b378 x18: 0000000000000201 [ 118.130860][ T5561] x17: 0000000000000002 x16: ffff800011b4c240 x15: 00000000ffffffff [ 118.132430][ T5561] x14: ffff0000c1f68000 x13: 0000000000000001 x12: 0000000000080000 [ 118.134036][ T5561] x11: 00000000000045fa x10: ffff800025809000 x9 : c3bf23ad84ae4300 [ 118.135876][ T5561] x8 : c3bf23ad84ae4300 x7 : 0000000000000001 x6 : 0000000000000001 [ 118.137574][ T5561] x5 : ffff800020d85f98 x4 : ffff800014c40660 x3 : ffff8000085567f8 [ 118.139300][ T5561] x2 : 0000000000000001 x1 : 0000000000000200 x0 : 000000000000005d [ 118.140926][ T5561] Call trace: [ 118.141640][ T5561] __rate_control_send_low+0x580/0x774 [ 118.142871][ T5561] rate_control_send_low+0xdc/0x694 [ 118.144036][ T5561] rate_control_get_rate+0x1a4/0x4b0 [ 118.145154][ T5561] ieee80211_tx_h_rate_ctrl+0x988/0x143c [ 118.146233][ T5561] invoke_tx_handlers_late+0xa8/0x1320 [ 118.147313][ T5561] ieee80211_tx+0x278/0x400 [ 118.148258][ T5561] ieee80211_xmit+0x29c/0x3c0 [ 118.149194][ T5561] __ieee80211_tx_skb_tid_band+0x13c/0x1cc [ 118.150571][ T5561] ieee80211_mgmt_tx+0x12a4/0x171c [ 118.151585][ T5561] cfg80211_mlme_mgmt_tx+0x4d4/0xf4c [ 118.152732][ T5561] nl80211_tx_mgmt+0x89c/0xd38 [ 118.153786][ T5561] genl_rcv_msg+0xc18/0x1018 [ 118.154655][ T5561] netlink_rcv_skb+0x20c/0x3b8 [ 118.155635][ T5561] genl_rcv+0x38/0x50 [ 118.156520][ T5561] netlink_unicast+0x664/0x938 [ 118.157463][ T5561] netlink_sendmsg+0x844/0xb38 [ 118.158521][ T5561] ____sys_sendmsg+0x584/0x870 [ 118.159678][ T5561] ___sys_sendmsg+0x214/0x294 [ 118.160716][ T5561] __arm64_sys_sendmsg+0x1ac/0x25c [ 118.161798][ T5561] invoke_syscall+0x98/0x2b8 [ 118.162840][ T5561] el0_svc_common+0x138/0x258 [ 118.163862][ T5561] do_el0_svc+0x58/0x14c [ 118.164808][ T5561] el0_svc+0x7c/0x1f0 [ 118.165638][ T5561] el0t_64_sync_handler+0x84/0xe4 [ 118.166732][ T5561] el0t_64_sync+0x1a0/0x1a4 [ 118.167599][ T5561] irq event stamp: 589 [ 118.168488][ T5561] hardirqs last enabled at (588): [] __up_console_sem+0xb4/0x100 [ 118.170447][ T5561] hardirqs last disabled at (589): [] el1_dbg+0x24/0x80 [ 118.172068][ T5561] softirqs last enabled at (554): [] local_bh_enable+0x10/0x34 [ 118.174060][ T5561] softirqs last disabled at (568): [] local_bh_disable+0x10/0x34 [ 118.176069][ T5561] ---[ end trace 19b60845d4fa86ac ]---