last executing test programs: 12.979928724s ago: executing program 0 (id=320): r0 = syz_open_dev$usbfs(0x0, 0xff, 0x4000) ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_genetlink_get_family_id$devlink(0x0, r2) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f0000006840)={0x2020}, 0x2020) 10.704678954s ago: executing program 0 (id=325): openat$dir(0xffffffffffffff9c, 0x0, 0x141040, 0xec) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[r0, r0], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_open_dev$sg(&(0x7f0000000380), 0x4, 0x4200) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0xee01, &(0x7f00000002c0)={0x8000000000000000, 0x5, 0xd38, 0x10000000, 0x199b7836, 0x1, 0x0, 0x1, 0xa}) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet(0x2, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000001b40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x800009}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='qnx6\x00', 0x8007, 0x0) 8.391539444s ago: executing program 3 (id=334): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 8.198618494s ago: executing program 3 (id=338): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000000)={&(0x7f0000000780)={{@host}, {@my=0x0}, 0x400, "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"}, 0x418}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2040) accept4(r0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x7, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r6 = socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 7.760165302s ago: executing program 3 (id=344): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x44, 0x31, 0x103, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 6.731385017s ago: executing program 0 (id=346): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xa0603) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 6.692898467s ago: executing program 3 (id=348): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0xa00) 6.495810166s ago: executing program 1 (id=351): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6090b50000"], 0x0) 6.299401716s ago: executing program 1 (id=352): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 6.264826266s ago: executing program 4 (id=353): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 5.790754283s ago: executing program 2 (id=354): ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12, 0x4, 0x424, 0x9}}) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, 0x0, &(0x7f0000001180)) socket(0x28, 0x2, 0x1) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="04080401c8000296dea574a42b9aa03eeacf630555d11c553a7dcccfb6eb4523496620a2fe990f60907c222906b85b10170b7cda94f5300600000026fc4a5fa94ea234e9c100000000823ce9547684b9ecebb4189caa928220edc42933e468adf1da092edb7afa761cf79a4c96b9fe298abb1b7d53d9efecf108fcd08df68594751468a93bbc885491920088417c9bb0"], 0x7) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc2c45513, &(0x7f0000000040)={{0x2, 0x8, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x2, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x8000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r3, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r4, &(0x7f0000000440)=ANY=[], 0xfdef) socket(0x22, 0x800, 0x0) io_setup(0x3, 0x0) syz_usb_connect(0x5, 0x6a, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) write$dsp(0xffffffffffffffff, &(0x7f00000012c0), 0x0) 5.358747362s ago: executing program 1 (id=355): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x7fffffff, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x390f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000580)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00', 0x8001}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000780)="91d847a10615baedb804d88ef421a5d873f90fee3409bf992ba1feb616d98e162950c03a23b65c154f120dfe6e4f47452e5ada221cc906a479bdd8f3a49c04902cf0e96e3f5bc746431419c92f97cae48a1ac9311e369931289656f559edcc16d5fadcc0aa23d97cad851501d78bfd3bcb1d4ac1030008b92c54b5c3c7fc842cbb245a3f6932ccbdcc6710ed4229ef90df128ec9eb443ffdb07612d8880956f54fa35eeb", 0xa4}], 0x1, &(0x7f0000000840)=[@hopopts_2292={{0x5c, 0x29, 0x36, {0x3a, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @ra, @pad1, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x30, {0x0, 0xa, 0x17, 0x0, [0x4, 0x9, 0x40, 0xfffffffffffffff9, 0x7a2bf443]}}, @ra]}}}], 0x5c}}], 0x1, 0x40005) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400005235adb6d70035767ee180f7", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fcdbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x200080c0}, 0x40040) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100"], 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) connect$netrom(r0, &(0x7f0000000140)={{0x6, @bcast, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x1ad72f7) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 4.89668346s ago: executing program 2 (id=356): openat$dir(0xffffffffffffff9c, 0x0, 0x141040, 0xec) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[r0, r0], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_open_dev$sg(&(0x7f0000000380), 0x4, 0x4200) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0xee01, &(0x7f00000002c0)={0x8000000000000000, 0x5, 0xd38, 0x10000000, 0x199b7836, 0x1, 0x0, 0x1, 0xa}) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet(0x2, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000001b40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x800009}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='qnx6\x00', 0x8007, 0x0) 4.111976716s ago: executing program 4 (id=357): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) rmdir(0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='pstore\x00', 0x0, &(0x7f0000000400)) socket$inet6_udp(0xa, 0x2, 0x0) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) shutdown(r2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000001880), 0x0, 0x0, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x30df5ae70c2bc9e7, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x6}, 0x8) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 3.443204224s ago: executing program 4 (id=358): socket$kcm(0x11, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.176626653s ago: executing program 0 (id=359): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r2, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x54, 0xff, 0x4c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x10, 0x700, 0x200, 0x6}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYRESOCT=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0xffffffffffffffb8, 0x0, 0x41000, 0x0, '\x00', r3, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, 0x0, 0x881) sendmsg$nl_route(r8, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r5, &(0x7f00000000c0)=0x58, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x44, 0x31, 0x103, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 3.001644102s ago: executing program 2 (id=360): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020}, 0x2020) 2.57407932s ago: executing program 2 (id=361): open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x0) 2.52339732s ago: executing program 3 (id=362): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6090b50000"], 0x0) 2.45966335s ago: executing program 4 (id=363): socket(0x1e, 0x2, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 2.375267639s ago: executing program 2 (id=364): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffeab) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x29) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fstat(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, r4, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000340)=@nullb, r4, &(0x7f0000000480)) mknodat(r2, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r2, &(0x7f00000001c0)='./file1\x00', r2, &(0x7f0000000280)='./file0\x00', 0x1400) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000363000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000500)="66baf80cb8f42c2b80ef0fbafc0cb800000000c4e209b6e80f381d2ac4e265a68f631200000f01c2df0fb805000000b9cb9d00000f01d90f01b8921a000002e2080000b80a000000ba00000000c4e1b5d1da", 0x52}], 0x0, 0x1, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x15) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095", @ANYRES8=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 2.239120259s ago: executing program 4 (id=365): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="80"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x19a, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='rxrpc_transmit\x00', r0, 0x0, 0x3}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x18) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x80) flock(r3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000005c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x1f000000}) socket$kcm(0x10, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000300)={0x0, &(0x7f0000000600)=[{}, {}, {}], 0x0, 0x0, '\x00', 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000240)={0x0, &(0x7f0000000380)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x40406300, 0x0, 0xffffff7f00000000}], 0x0, 0x1000000000000, 0x0}) 2.217048749s ago: executing program 3 (id=366): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7a5a9e6b4f56a075233f6b4c01b065af85353c84492739035a58e3ba92194b2b3dffb7938e50debabda765b6c7a6a3afd07fdea4ba8b79fd82c050d", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.190762558s ago: executing program 0 (id=367): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) read$FUSE(r1, &(0x7f0000001340)={0x2020}, 0x2020) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x8988002206538cac, 0x0) close(r3) 2.110383068s ago: executing program 2 (id=368): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b01, 0x0) 1.883319648s ago: executing program 1 (id=369): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_usbip_server_init(0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/42, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.675950396s ago: executing program 0 (id=370): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xa0603) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 913.354073ms ago: executing program 1 (id=371): openat$fb0(0xffffff9c, &(0x7f00000001c0), 0x80080, 0x0) socket$netlink(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x8, 0x8, 0x34324152, 0x0, 0x1, [{0x0, 0x2fd5}, {0x10}, {}, {}, {0x0, 0x8}, {}, {0xfffffffd}, {0x400000}], 0x0, 0x4, 0x0, 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x7d}, 0xffffffffffffffff, "e2410fc7932741e6b70674a7718a57756107b3972fd02b2504ecf28f14ee12cc", 0x192, 0x0, 0x2, 0x7}, 0x3c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x2200890, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) 861.366483ms ago: executing program 4 (id=372): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000000)={&(0x7f0000000780)={{@host}, {@my=0x0}, 0x400, "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"}, 0x418}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2040) accept4(r0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x7, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 0s ago: executing program 1 (id=373): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0603d0f, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$igmp(0x2, 0x3, 0x2) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r5, 0xffffffff) r8 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) keyctl$dh_compute(0x17, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000500)={0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. [ 54.317758][ T4155] cgroup: Unknown subsys name 'net' [ 54.447923][ T4155] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.920104][ T4155] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.844440][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 57.982064][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 58.017376][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.024739][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.033923][ T4171] device bridge_slave_0 entered promiscuous mode [ 58.046629][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.054028][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.062012][ T4171] device bridge_slave_1 entered promiscuous mode [ 58.078153][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 58.087378][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 58.125657][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.140688][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.150716][ T4180] chnl_net:caif_netlink_parms(): no params data found [ 58.223968][ T4171] team0: Port device team_slave_0 added [ 58.252150][ T4171] team0: Port device team_slave_1 added [ 58.264253][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.271641][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.279473][ T4168] device bridge_slave_0 entered promiscuous mode [ 58.290948][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.298350][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.306520][ T4168] device bridge_slave_1 entered promiscuous mode [ 58.379383][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.386487][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.412530][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.438919][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.446981][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.455027][ T4166] device bridge_slave_0 entered promiscuous mode [ 58.464883][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.474789][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.482081][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.508075][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.526141][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.533706][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.541773][ T4167] device bridge_slave_0 entered promiscuous mode [ 58.549591][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.556928][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.564917][ T4166] device bridge_slave_1 entered promiscuous mode [ 58.573930][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.587214][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.594570][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.602738][ T4180] device bridge_slave_0 entered promiscuous mode [ 58.610145][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.617414][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.625541][ T4167] device bridge_slave_1 entered promiscuous mode [ 58.655691][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.663029][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.670809][ T4180] device bridge_slave_1 entered promiscuous mode [ 58.696485][ T4168] team0: Port device team_slave_0 added [ 58.718546][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.730145][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.746865][ T4168] team0: Port device team_slave_1 added [ 58.763084][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.795574][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.806131][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.826829][ T4171] device hsr_slave_0 entered promiscuous mode [ 58.833753][ T4171] device hsr_slave_1 entered promiscuous mode [ 58.853535][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.880300][ T4166] team0: Port device team_slave_0 added [ 58.888586][ T4166] team0: Port device team_slave_1 added [ 58.910502][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.917507][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.944308][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.987041][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.994122][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.024765][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.042672][ T4180] team0: Port device team_slave_0 added [ 59.050807][ T4167] team0: Port device team_slave_0 added [ 59.061081][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.068046][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.094034][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.107752][ T4180] team0: Port device team_slave_1 added [ 59.115308][ T4167] team0: Port device team_slave_1 added [ 59.129330][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.136418][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.163018][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.233009][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.239964][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.266055][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.277671][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.284874][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.310942][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.334147][ T4168] device hsr_slave_0 entered promiscuous mode [ 59.342368][ T4168] device hsr_slave_1 entered promiscuous mode [ 59.349183][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.357062][ T4168] Cannot create hsr debugfs directory [ 59.376414][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.383419][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.409469][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.421535][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.428503][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.455160][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.481118][ T4166] device hsr_slave_0 entered promiscuous mode [ 59.487865][ T4166] device hsr_slave_1 entered promiscuous mode [ 59.495239][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.503241][ T4166] Cannot create hsr debugfs directory [ 59.562281][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 59.568877][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 59.569053][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 59.575031][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 59.596292][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 59.628179][ T4180] device hsr_slave_0 entered promiscuous mode [ 59.635015][ T4180] device hsr_slave_1 entered promiscuous mode [ 59.642073][ T4180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.649647][ T4180] Cannot create hsr debugfs directory [ 59.675945][ T4167] device hsr_slave_0 entered promiscuous mode [ 59.682766][ T4167] device hsr_slave_1 entered promiscuous mode [ 59.689761][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.697426][ T4167] Cannot create hsr debugfs directory [ 59.902610][ T4171] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.926255][ T4171] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.945184][ T4171] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.958545][ T4171] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.019304][ T4168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.029355][ T4168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.062684][ T4168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.077868][ T4168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.110710][ T4166] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.139094][ T4166] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.150135][ T4166] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.178159][ T4166] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.194087][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.234926][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.248388][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.259962][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.276637][ T4180] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.295091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.304673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.314095][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.321396][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.329960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.361399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.370102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.378984][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.386088][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.395878][ T4180] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.412117][ T4180] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.420958][ T4180] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.455228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.467525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.480383][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.495868][ T4167] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.507289][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.517229][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.526545][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.555270][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.564971][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.575666][ T4167] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.585145][ T4167] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.595916][ T4167] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.616576][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.627775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.636581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.649446][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.673812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.685554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.694860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.705450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.714081][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.721171][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.728896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.748107][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.764236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.772737][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.780950][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.789754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.799706][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.806797][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.816938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.825089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.836537][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.862054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.870954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.880953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.890056][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.897224][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.905849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.914939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.923534][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.930598][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.938517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.948897][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.977687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.031653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.048758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.059018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.070801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.079494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.088296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.097233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.107108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.116772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.125695][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.134722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.144121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.152916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.166082][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.176287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.185807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.204572][ T4166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.217456][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.238990][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.257659][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.269974][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.278731][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.287566][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.297403][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.306082][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.315011][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.323261][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.374449][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.386762][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.415007][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.422145][ T4195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.432910][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.446604][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.456554][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.463745][ T4195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.472327][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.481083][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.500608][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.523174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.530744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.550274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.567006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.589047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.600922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.617640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.632368][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.641623][ T1111] Bluetooth: hci1: command 0x041b tx timeout [ 61.647938][ T1111] Bluetooth: hci2: command 0x041b tx timeout [ 61.648950][ T4180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.661227][ T1111] Bluetooth: hci3: command 0x041b tx timeout [ 61.670771][ T1111] Bluetooth: hci0: command 0x041b tx timeout [ 61.675023][ T4180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.677879][ T1111] Bluetooth: hci4: command 0x041b tx timeout [ 61.712451][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.719512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.728113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.736958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.747795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.756487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.765817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.773384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.788563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.808268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.818426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.827189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.835718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.852197][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.881653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.890287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.903901][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.911047][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.919410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.928694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.937618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.948601][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.997463][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.007816][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.017729][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.028661][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.038996][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.046113][ T4195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.055404][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.064258][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.073147][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.082690][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.090419][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.101512][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.109995][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.147819][ T4171] device veth0_vlan entered promiscuous mode [ 62.160833][ T4168] device veth0_vlan entered promiscuous mode [ 62.168232][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.176503][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.185309][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.194325][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.203541][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.212608][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.221653][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.230064][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.239091][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.250917][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.262023][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.270371][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.284160][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.293698][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.316541][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.328787][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.339648][ T4166] device veth0_vlan entered promiscuous mode [ 62.347147][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.357014][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.365793][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.377488][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.385080][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.394712][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.403781][ T4171] device veth1_vlan entered promiscuous mode [ 62.412618][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.420829][ T4168] device veth1_vlan entered promiscuous mode [ 62.453073][ T4166] device veth1_vlan entered promiscuous mode [ 62.508106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.530531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.540041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.548266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.560211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.569089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.584877][ T4171] device veth0_macvtap entered promiscuous mode [ 62.595590][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.604750][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.614090][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.630350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.639594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.654280][ T4168] device veth0_macvtap entered promiscuous mode [ 62.674404][ T4171] device veth1_macvtap entered promiscuous mode [ 62.687672][ T4168] device veth1_macvtap entered promiscuous mode [ 62.707557][ T4166] device veth0_macvtap entered promiscuous mode [ 62.745748][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.759084][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.770265][ T4166] device veth1_macvtap entered promiscuous mode [ 62.781636][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.794335][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.808721][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.824894][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.838549][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.847448][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.856713][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.865408][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.873948][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.883275][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.892543][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.901588][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.910264][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.919392][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.932119][ T4171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.940949][ T4171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.950252][ T4171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.959328][ T4171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.983492][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.994554][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.005886][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.035517][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.052087][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.059541][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.067610][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.078870][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.092122][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.100898][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.122523][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.134295][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.144601][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.157108][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.170374][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.179488][ T4168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.189011][ T4168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.198199][ T4168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.206934][ T4168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.234743][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.244612][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.255531][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.264577][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.275575][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.286762][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.296878][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.307590][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.319117][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.355844][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.364597][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.373587][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.382000][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.390466][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.399355][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.410442][ T4166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.424537][ T4166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.433578][ T4166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.442576][ T4166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.466689][ T4180] device veth0_vlan entered promiscuous mode [ 63.499775][ T4167] device veth0_vlan entered promiscuous mode [ 63.524729][ T4180] device veth1_vlan entered promiscuous mode [ 63.545613][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.557437][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.567246][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.576416][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.584924][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.668055][ T4167] device veth1_vlan entered promiscuous mode [ 63.682798][ T1287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.690764][ T1287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.705193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.717005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.723004][ T1111] Bluetooth: hci4: command 0x040f tx timeout [ 63.727137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.736895][ T1111] Bluetooth: hci0: command 0x040f tx timeout [ 63.738691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.745576][ T1111] Bluetooth: hci3: command 0x040f tx timeout [ 63.753246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.764522][ T1111] Bluetooth: hci2: command 0x040f tx timeout [ 63.775235][ T1111] Bluetooth: hci1: command 0x040f tx timeout [ 63.784793][ T4180] device veth0_macvtap entered promiscuous mode [ 63.799560][ T4180] device veth1_macvtap entered promiscuous mode [ 63.827433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.836714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.847077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.875380][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.892281][ T475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.898440][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.900245][ T475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.922809][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.935281][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.945141][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.955724][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.965913][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.976979][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.988537][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.997330][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.005599][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.015267][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.024120][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.039712][ T4167] device veth0_macvtap entered promiscuous mode [ 64.056531][ T4167] device veth1_macvtap entered promiscuous mode [ 64.072422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.088075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.096861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.105465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.116145][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.125656][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.133021][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.133065][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.133087][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.133102][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.133113][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.133127][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.196338][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.208192][ T4180] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.217695][ T4180] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.226977][ T4180] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.235991][ T4180] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.265530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.274314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.284767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.297864][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.308932][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.319098][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.330046][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.340184][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.351829][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.362969][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.376747][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.388277][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.408302][ T1287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.418474][ T1287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.440842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.452649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.466020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.477260][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.498535][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.511056][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.523000][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.533257][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.544199][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.555482][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.566066][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.577650][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.589395][ T4167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.600702][ T4167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.610546][ T4167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.619584][ T4167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.636604][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.650049][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.669777][ T4195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.724557][ T4195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.815147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.851854][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.874489][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.895770][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.915429][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.946497][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.955192][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.008698][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.045048][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.065676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.117683][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.142839][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.153777][ T4252] device bridge_slave_0 left promiscuous mode [ 65.160673][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.191565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.350119][ T4263] trusted_key: encrypted_key: insufficient parameters specified [ 65.670346][ T4263] capability: warning: `syz.2.7' uses 32-bit capabilities (legacy support in use) [ 65.937607][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 67.430996][ C1] sched: RT throttling activated [ 67.514703][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 67.563570][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 67.605463][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 67.747920][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 68.031008][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 68.039951][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 68.048873][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 68.058849][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 69.249954][ T4278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.291237][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.571810][ T4212] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.663756][ T7] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 69.678509][ T7] usb 3-1: config 1 has an invalid descriptor of length 106, skipping remainder of the config [ 69.743616][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 69.795183][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 230, changing to 11 [ 69.917975][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41381, setting to 1024 [ 69.973118][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 69.982683][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 69.992526][ T4212] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 70.002434][ T4212] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 70.021371][ T4212] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 70.028173][ T4291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.030503][ T4212] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 70.052777][ T4212] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 70.161303][ T7] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 70.184922][ T7] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 70.221208][ T7] usb 3-1: Product: syz [ 70.227092][ T7] usb 3-1: Manufacturer: syz [ 70.271815][ T4212] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 70.284505][ T7] cdc_wdm 3-1:1.0: skipping garbage [ 70.299481][ T4212] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 70.316762][ T4212] usb 1-1: Product: syz [ 70.328249][ T4212] usb 1-1: Manufacturer: syz [ 70.412311][ T4212] cdc_wdm 1-1:1.0: skipping garbage [ 70.418323][ T4212] cdc_wdm 1-1:1.0: skipping garbage [ 70.467175][ T7] cdc_wdm 3-1:1.0: skipping garbage [ 70.480605][ T4212] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 70.517769][ T7] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 70.546001][ T4212] cdc_wdm 1-1:1.0: Unknown control protocol [ 70.579668][ T7] cdc_wdm 3-1:1.0: Unknown control protocol [ 70.661100][ T7] usb 3-1: USB disconnect, device number 2 [ 70.781215][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 70.788141][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 70.821021][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 70.827648][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 70.851078][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 70.857813][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 70.870426][ T4210] usb 1-1: USB disconnect, device number 2 [ 70.891037][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 70.897652][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 70.903723][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 71.245530][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.252639][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.406681][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 71.554104][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.559136][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.559680][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.876770][ T4326] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.958602][ T4213] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.008134][ T4328] Bluetooth: hci5: Frame reassembly failed (-84) [ 72.331067][ T4213] usb 4-1: Using ep0 maxpacket: 16 [ 72.464027][ T4213] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 73.021991][ T4326] mmap: syz.4.22 (4326) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 73.221287][ T4213] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 73.239095][ T4213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.287970][ T4213] usb 4-1: Product: syz [ 73.300309][ T4213] usb 4-1: Manufacturer: syz [ 73.316997][ T4213] usb 4-1: SerialNumber: syz [ 73.350697][ T4213] usb 4-1: config 0 descriptor?? [ 73.422546][ T4213] appledisplay 4-1:0.0: Could not find int-in endpoint [ 73.476922][ T4213] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 73.687429][ T4213] usb 4-1: USB disconnect, device number 2 [ 74.041115][ T4213] Bluetooth: hci5: command 0xfc11 tx timeout [ 74.041127][ T4176] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 74.155621][ T4344] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 74.244747][ T4351] 9pnet_virtio: no channels available for device syz [ 74.513661][ T4355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32'. [ 76.314589][ T4366] gfs2: gfs2 mount does not exist [ 76.830175][ T4373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.837685][ T4373] IPv6: NLM_F_CREATE should be set when creating new route [ 77.811292][ T4212] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.061070][ T4212] usb 5-1: Using ep0 maxpacket: 8 [ 78.211325][ T4212] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 78.228283][ T4212] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.271490][ T4212] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 78.324652][ T4212] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 78.357132][ T4212] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.398615][ T4212] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 78.424979][ T4212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.751175][ T4212] usb 5-1: usb_control_msg returned -32 [ 78.756810][ T4212] usbtmc 5-1:16.0: can't read capabilities [ 79.406627][ T4212] usb 5-1: USB disconnect, device number 2 [ 79.432068][ T4398] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 79.653135][ T4157] Bluetooth: hci2: command 0x0406 tx timeout [ 79.911221][ T4212] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 80.075468][ T4404] overlayfs: unrecognized mount option "verity=require" or missing value [ 82.435985][ T1108] cfg80211: failed to load regulatory.db [ 83.913060][ T4426] overlayfs: failed to resolve './bus': -2 [ 83.915466][ T4436] misc userio: Invalid payload size [ 83.933370][ T4438] netlink: 'syz.2.55': attribute type 1 has an invalid length. [ 84.011187][ T4438] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.55'. [ 86.462529][ T4459] netlink: 'syz.3.60': attribute type 1 has an invalid length. [ 86.501088][ T1111] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.861403][ T1111] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.248254][ T1111] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 87.435948][ T1111] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.747073][ T1111] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 87.771925][ T1111] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 87.902125][ T1111] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 88.057831][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 88.167005][ T1111] usb 1-1: Product: syz [ 88.213059][ T1111] usb 1-1: Manufacturer: syz [ 88.271187][ T1111] usb 1-1: can't set config #1, error -71 [ 88.308534][ T1111] usb 1-1: USB disconnect, device number 3 [ 89.242456][ T4213] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 89.981131][ T4213] usb 1-1: Using ep0 maxpacket: 8 [ 90.101650][ T4213] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 90.123959][ T4213] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.164302][ T4213] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 90.165087][ T4492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'. [ 90.192353][ T4213] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 90.260358][ T4213] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.291272][ T4213] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 90.300425][ T4213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.571130][ T4213] usb 1-1: usb_control_msg returned -32 [ 90.576761][ T4213] usbtmc 1-1:16.0: can't read capabilities [ 90.781106][ T1108] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.991284][ T4505] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 91.011122][ T1108] usb 4-1: device descriptor read/64, error -71 [ 91.042345][ T4212] usb 1-1: USB disconnect, device number 4 [ 91.201825][ T4509] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 91.301945][ T1108] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.501140][ T1108] usb 4-1: device descriptor read/64, error -71 [ 91.641468][ T1108] usb usb4-port1: attempt power cycle [ 91.765578][ T4514] device bridge_slave_0 left promiscuous mode [ 91.782855][ T4514] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.068333][ T4519] netdevsim netdevsim0: Direct firmware load for , [ 92.068333][ T4519] failed with error -2 [ 92.091700][ T1108] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 92.157583][ T4519] netdevsim netdevsim0: Falling back to sysfs fallback for: , [ 92.157583][ T4519] [ 92.201162][ T1108] usb 4-1: device descriptor read/8, error -71 [ 92.291061][ T4157] Bluetooth: hci0: command 0x0401 tx timeout [ 92.481895][ T1108] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 92.593741][ T4525] netlink: 'syz.1.79': attribute type 1 has an invalid length. [ 92.602807][ T1108] usb 4-1: device descriptor read/8, error -71 [ 92.841338][ T1108] usb usb4-port1: unable to enumerate USB device [ 94.065300][ T4534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.144459][ T4563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 97.601374][ T4210] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.811077][ T4210] usb 3-1: device descriptor read/64, error -71 [ 98.152919][ T4210] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 98.481354][ T4210] usb 3-1: device descriptor read/64, error -71 [ 98.975650][ T4210] usb usb3-port1: attempt power cycle [ 99.161204][ T4157] Bluetooth: hci0: command 0x0401 tx timeout [ 99.661045][ T4210] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 99.861231][ T4210] usb 3-1: device descriptor read/8, error -71 [ 100.171120][ T4210] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 100.401199][ T1111] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.491121][ T4210] usb 3-1: device not accepting address 6, error -71 [ 100.501286][ T4210] usb usb3-port1: unable to enumerate USB device [ 100.629062][ T4616] netlink: 'syz.2.101': attribute type 1 has an invalid length. [ 100.812202][ T1111] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 100.834714][ T1111] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 100.851081][ T1111] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 100.865166][ T1111] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 100.876592][ T1111] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 101.031508][ T1111] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 101.053398][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 101.090261][ T1111] usb 2-1: Product: syz [ 101.108834][ T1111] usb 2-1: Manufacturer: syz [ 101.182276][ T1111] cdc_wdm 2-1:1.0: skipping garbage [ 101.196985][ T1111] cdc_wdm 2-1:1.0: skipping garbage [ 101.207807][ T1111] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 101.214370][ T1111] cdc_wdm 2-1:1.0: Unknown control protocol [ 101.510532][ T4157] usb 2-1: USB disconnect, device number 2 [ 101.521010][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 101.527646][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 101.533734][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 101.548846][ T4629] netlink: 'syz.3.105': attribute type 2 has an invalid length. [ 102.516087][ T4626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.106'. [ 102.571474][ T4642] device bridge_slave_0 left promiscuous mode [ 102.594049][ T4642] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.465711][ T4657] netlink: 'syz.4.112': attribute type 1 has an invalid length. [ 104.511338][ T4657] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.112'. [ 104.981062][ T1111] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.191047][ T1111] usb 2-1: device descriptor read/64, error -71 [ 105.471118][ T1111] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.671085][ T1111] usb 2-1: device descriptor read/64, error -71 [ 105.802707][ T1111] usb usb2-port1: attempt power cycle [ 106.241072][ T1111] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 106.361357][ T1111] usb 2-1: device descriptor read/8, error -71 [ 106.605295][ T4157] Bluetooth: hci0: command 0x0401 tx timeout [ 106.641167][ T1111] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 108.285720][ T26] audit: type=1400 audit(1737212775.920:2): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name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usb 2-1: device descriptor read/8, error -71 [ 108.714102][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.855550][ T4687] misc userio: Invalid payload size [ 109.031338][ T1111] usb usb2-port1: unable to enumerate USB device [ 109.048079][ T4687] misc userio: Invalid payload size [ 110.348962][ T4707] device bridge_slave_0 left promiscuous mode [ 110.521473][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.621140][ T1111] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 111.061204][ T1111] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 112.263989][ T1111] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 112.295105][ T1111] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 112.304670][ T1111] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 112.316179][ T1111] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 112.461227][ T1111] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 112.498805][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.554848][ T1111] usb 4-1: Product: syz [ 112.559052][ T1111] usb 4-1: Manufacturer: syz [ 112.749365][ T1111] cdc_wdm 4-1:1.0: skipping garbage [ 112.761116][ T1111] cdc_wdm 4-1:1.0: skipping garbage [ 113.323945][ T1111] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 113.329931][ T1111] cdc_wdm 4-1:1.0: Unknown control protocol [ 113.349342][ T1111] usb 4-1: USB disconnect, device number 7 [ 115.431041][ T4725] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 115.578304][ T4761] overlayfs: unrecognized mount option "verity=require" or missing value [ 116.121143][ T4725] usb 3-1: Using ep0 maxpacket: 8 [ 116.411203][ T4725] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 116.419470][ T4725] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.439719][ T4725] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.501673][ T4157] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 117.611039][ T4725] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.621118][ T4725] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.634191][ T4725] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.708104][ T4725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.963646][ T4157] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 117.984913][ T4157] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 118.011913][ T4725] usb 3-1: usb_control_msg returned -32 [ 118.017759][ T4725] usbtmc 3-1:16.0: can't read capabilities [ 118.027939][ T4157] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 118.047467][ T4157] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.151649][ T4764] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 118.594672][ T4725] usb 3-1: USB disconnect, device number 7 [ 118.611411][ T4801] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 118.705333][ T4211] usb 2-1: USB disconnect, device number 7 [ 119.349502][ T4725] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 120.143294][ T4814] overlayfs: unrecognized mount option "verity=require" or missing value [ 121.401174][ T1111] Bluetooth: hci1: command 0x0406 tx timeout [ 125.461086][ T4214] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.702031][ T4214] usb 1-1: Using ep0 maxpacket: 8 [ 125.727057][ T4877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.734372][ T4877] IPv6: NLM_F_CREATE should be set when creating new route [ 125.748591][ T4157] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 125.821481][ T4214] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 125.830019][ T4214] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.867952][ T4214] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 125.878196][ T4214] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.889066][ T4214] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.931638][ T4214] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.940829][ T4214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.323685][ T4157] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 126.402663][ T4157] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 126.550851][ T4157] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 126.671537][ T4157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.932189][ T4873] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 126.996309][ T4214] usb 1-1: usb_control_msg returned -32 [ 127.002304][ T4214] usbtmc 1-1:16.0: can't read capabilities [ 127.268172][ T4214] usb 3-1: USB disconnect, device number 9 [ 127.611275][ T4157] usb 1-1: USB disconnect, device number 5 [ 127.611556][ T4904] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 128.151088][ T4157] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 128.561149][ T4157] usb 1-1: unable to get BOS descriptor or descriptor too short [ 128.721232][ T4157] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 128.782984][ T4157] usb 1-1: can't read configurations, error -71 [ 128.829118][ T4918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.187'. [ 129.323886][ T4922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.331240][ T4922] IPv6: NLM_F_CREATE should be set when creating new route [ 129.646818][ T1111] Bluetooth: hci3: command 0x0406 tx timeout [ 132.412833][ T4943] 9pnet_virtio: no channels available for device syz [ 132.685676][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.692928][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.280801][ T26] audit: type=1804 audit(1737212806.910:3): pid=5035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.223" name="/newroot/49/bus/file0" dev="overlay" ino=286 res=1 errno=0 [ 140.153642][ T4212] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 140.811819][ T4212] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 140.812040][ T4212] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.812179][ T4212] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 140.812623][ T4212] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 141.161336][ T4212] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 141.161370][ T4212] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.161394][ T4212] usb 1-1: Product: syz [ 141.161411][ T4212] usb 1-1: Manufacturer: syz [ 141.212780][ T5049] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 141.222462][ T4212] cdc_wdm 1-1:1.0: skipping garbage [ 141.222509][ T4212] cdc_wdm 1-1:1.0: skipping garbage [ 141.222534][ T4212] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 142.071968][ T4725] usb 1-1: USB disconnect, device number 8 [ 142.301176][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 142.388492][ T4340] Bluetooth: hci5: Frame reassembly failed (-84) [ 142.581299][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 142.711410][ T23] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 142.828891][ T26] audit: type=1804 audit(1737212810.460:4): pid=5094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.240" name="/newroot/47/bus/file0" dev="overlay" ino=269 res=1 errno=0 [ 143.071165][ T23] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 143.080568][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.100619][ T23] usb 2-1: Product: syz [ 143.105589][ T23] usb 2-1: Manufacturer: syz [ 143.110203][ T23] usb 2-1: SerialNumber: syz [ 143.274345][ T5101] bridge0: port 1(hsr_slave_1) entered blocking state [ 143.281523][ T5101] bridge0: port 1(hsr_slave_1) entered disabled state [ 144.132590][ C1] dccp_check_seqno: Step 6 failed for CLOSEREQ packet, (LSWL(70860545595599) <= P.seqno(70860545595598) <= S.SWH(70860545595673)) and (P.ackno exists or LAWL(67029836763085) <= P.ackno(67029836763085) <= S.AWH(67029836763086), sending SYNC... [ 144.156309][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.247337][ T23] usb 2-1: config 0 descriptor?? [ 144.441129][ T4174] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 144.592267][ T23] appledisplay 2-1:0.0: Could not find int-in endpoint [ 144.600147][ T23] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 144.831050][ T4214] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 144.962907][ T1111] usb 2-1: USB disconnect, device number 8 [ 145.131056][ T4214] usb 1-1: Using ep0 maxpacket: 16 [ 145.811603][ T4214] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.128060][ T4214] usb 1-1: config 0 has no interfaces? [ 146.441099][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 146.501301][ T4214] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 146.517749][ T4214] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 146.536389][ T26] audit: type=1804 audit(1737212814.170:5): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.256" name="/newroot/55/bus/file0" dev="overlay" ino=314 res=1 errno=0 [ 146.572007][ T4214] usb 1-1: Product: syz [ 146.576205][ T4214] usb 1-1: SerialNumber: syz [ 146.589151][ T4214] usb 1-1: config 0 descriptor?? [ 146.850885][ T4214] usb 1-1: USB disconnect, device number 9 [ 146.861723][ T21] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 146.887831][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.043907][ T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 147.063013][ T21] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 147.102291][ T26] audit: type=1804 audit(1737212814.740:6): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.269" name="/newroot/45/bus/file0" dev="overlay" ino=269 res=1 errno=0 [ 148.101665][ T5153] bridge0: port 1(hsr_slave_1) entered blocking state [ 148.108794][ T5153] bridge0: port 1(hsr_slave_1) entered disabled state [ 149.111523][ C1] dccp_check_seqno: Step 6 failed for CLOSEREQ packet, (LSWL(117574967247335) <= P.seqno(117574967247334) <= S.SWH(117574967247409)) and (P.ackno exists or LAWL(35055325548536) <= P.ackno(35055325548536) <= S.AWH(35055325548537), sending SYNC... [ 149.157841][ T21] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 149.211094][ T21] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 149.370989][ T21] usb 5-1: can't set config #1, error -71 [ 149.453382][ T21] usb 5-1: USB disconnect, device number 4 [ 152.456469][ T5179] Zero length message leads to an empty skb [ 153.055502][ T26] audit: type=1804 audit(1737212820.690:7): pid=5200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.274" name="/newroot/61/bus/file0" dev="overlay" ino=362 res=1 errno=0 [ 154.361125][ T21] Bluetooth: hci5: command 0xfc11 tx timeout [ 154.371164][ T4174] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 157.731084][ T26] audit: type=1804 audit(1737212825.370:8): pid=5263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.286" name="/newroot/63/bus/file0" dev="overlay" ino=382 res=1 errno=0 [ 158.001255][ T4243] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 158.841487][ T4243] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 158.893561][ T4243] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 159.033541][ T4243] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 159.088939][ T4243] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 159.114784][ T4243] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 159.351147][ T4243] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 159.394301][ T4243] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 159.415929][ T4243] usb 2-1: Product: syz [ 159.429862][ T4243] usb 2-1: Manufacturer: syz [ 159.502085][ T4243] cdc_wdm 2-1:1.0: skipping garbage [ 159.540743][ T4243] cdc_wdm 2-1:1.0: skipping garbage [ 159.547562][ T4243] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 159.553992][ T4243] cdc_wdm 2-1:1.0: Unknown control protocol [ 159.933207][ T23] usb 2-1: USB disconnect, device number 9 [ 159.952302][ T5260] cdc_wdm 2-1:1.0: Tx URB error: -19 [ 163.408906][ T26] audit: type=1804 audit(1737212831.040:9): pid=5358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.312" name="/newroot/60/bus/file0" dev="overlay" ino=348 res=1 errno=0 [ 163.751109][ T4725] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 164.447894][ T26] audit: type=1804 audit(1737212832.040:10): pid=5373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.324" name="/newroot/61/bus/file0" dev="overlay" ino=364 res=1 errno=0 [ 164.647295][ T4725] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 164.704269][ T4725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.715247][ T4725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.725071][ T4725] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 164.821131][ T4725] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 164.921265][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 164.996062][ T4725] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 165.311128][ T7] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 166.289617][ T4725] usb 3-1: Manufacturer: syz [ 166.298883][ T7] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 166.865797][ T4725] usb 3-1: config 0 descriptor?? [ 166.910396][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 166.926738][ T4725] usb 3-1: can't set config #0, error -71 [ 167.077117][ T4725] usb 3-1: USB disconnect, device number 10 [ 167.085906][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 167.107419][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 167.211168][ T7] usb 5-1: string descriptor 0 read error: -71 [ 167.217444][ T7] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 167.265032][ T7] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 167.761055][ T7] usb 5-1: can't set config #1, error -71 [ 167.844185][ T7] usb 5-1: USB disconnect, device number 5 [ 169.507720][ T26] audit: type=1804 audit(1737212837.140:11): pid=5421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.332" name="/newroot/61/bus/file0" dev="overlay" ino=343 res=1 errno=0 [ 171.400517][ T26] audit: type=1804 audit(1737212839.030:12): pid=5470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.349" name="/newroot/78/bus/file0" dev="overlay" ino=482 res=1 errno=0 [ 171.422013][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.679258][ T5475] syzkaller0: create flow: hash 1381886901 index 1 [ 171.825305][ T4243] syzkaller0: tun_net_xmit 76 [ 171.833194][ T4243] syzkaller0: tun_net_xmit 48 [ 171.861793][ T21] syzkaller0: tun_net_xmit 76 [ 171.947525][ T5471] syzkaller0: delete flow: hash 1381886901 index 1 [ 175.941221][ T1111] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 175.954730][ T5527] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 175.961623][ T5527] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 175.997841][ T5527] vhci_hcd vhci_hcd.0: Device attached [ 176.011067][ T4725] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 176.067080][ T5529] vhci_hcd: connection closed [ 176.069744][ T4328] vhci_hcd: stop threads [ 176.085186][ T4328] vhci_hcd: release socket [ 176.093708][ T4328] vhci_hcd: disconnect device [ 176.321068][ T4725] usb 3-1: Using ep0 maxpacket: 8 [ 176.391302][ T1111] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 176.441276][ T4725] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 176.460855][ T1111] usb 4-1: config 1 has an invalid descriptor of length 106, skipping remainder of the config [ 176.491154][ T4725] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 176.902187][ T4725] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 176.914467][ T1111] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 176.962987][ T1111] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 230, changing to 11 [ 177.504523][ T4725] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 177.733116][ T4725] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.751067][ T1111] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41381, setting to 1024 [ 177.770285][ T4725] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 177.779984][ T4725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.884330][ T1111] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.004560][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 178.024277][ T1111] usb 4-1: Product: syz [ 178.033139][ T1111] usb 4-1: Manufacturer: syz [ 178.875678][ T1111] cdc_wdm 4-1:1.0: skipping garbage [ 178.887223][ T1111] cdc_wdm 4-1:1.0: skipping garbage [ 178.889242][ T4174] ------------[ cut here ]------------ [ 178.894656][ T1111] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 178.898262][ T4174] WARNING: CPU: 1 PID: 4174 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x250/0x450 [ 178.904194][ T1111] cdc_wdm 4-1:1.0: Unknown control protocol [ 178.912302][ T4176] ------------[ cut here ]------------ [ 178.915078][ T4179] ------------[ cut here ]------------ [ 178.920236][ T4176] WARNING: CPU: 0 PID: 4176 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x250/0x450 [ 178.920275][ T4176] Modules linked in: [ 178.920305][ T4176] CPU: 0 PID: 4176 Comm: kworker/u5:3 Not tainted 5.15.176-syzkaller #0 [ 178.926242][ T4179] WARNING: CPU: 1 PID: 4179 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x250/0x450 [ 178.964104][ T4174] Modules linked in: [ 178.968020][ T4174] CPU: 1 PID: 4174 Comm: kworker/u5:2 Not tainted 5.15.176-syzkaller #0 [ 178.973723][ T4176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 178.976448][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 178.986573][ T4176] Workqueue: hci2 hci_conn_timeout [ 178.996719][ T4179] Modules linked in: [ 179.002507][ T4176] [ 179.002519][ T4176] RIP: 0010:hci_conn_timeout+0x250/0x450 [ 179.002549][ T4176] Code: 0a 8e e8 c3 2a 6d f8 48 8b 35 84 28 ad 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b5 90 f5 f7 e8 70 42 23 f8 <0f> 0b e9 34 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff [ 179.002567][ T4176] RSP: 0018:ffffc90002f9fc28 EFLAGS: 00010293 [ 179.002590][ T4176] RAX: ffffffff895d4270 RBX: ffff88802ac66138 RCX: ffff8880280cbb80 [ 179.002608][ T4176] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 179.002623][ T4176] RBP: 00000000ffffffff R08: ffffffff895d4081 R09: ffffed100558cc03 [ 179.002640][ T4176] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 179.002656][ T4176] R13: ffff88801bff4d28 R14: ffff88802ac66000 R15: ffff88801bff4d18 [ 179.002674][ T4176] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 179.002693][ T4176] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.002709][ T4176] CR2: 00007fe45754dab8 CR3: 0000000075a92000 CR4: 00000000003506f0 [ 179.002729][ T4176] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 179.002742][ T4176] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 179.002757][ T4176] Call Trace: [ 179.002765][ T4176] [ 179.002774][ T4176] ? __warn+0x15b/0x300 [ 179.002801][ T4176] ? hci_conn_timeout+0x250/0x450 [ 179.002822][ T4176] ? report_bug+0x1b7/0x2e0 [ 179.002853][ T4176] ? handle_bug+0x3d/0x70 [ 179.002875][ T4176] ? exc_invalid_op+0x16/0x40 [ 179.006752][ T4179] [ 179.006761][ T4179] CPU: 1 PID: 4179 Comm: kworker/u5:5 Not tainted 5.15.176-syzkaller #0 [ 179.006782][ T4179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.009107][ T4176] ? asm_exc_invalid_op+0x16/0x20 [ 179.014767][ T4174] Workqueue: hci3 hci_conn_timeout [ 179.014794][ T4174] RIP: 0010:hci_conn_timeout+0x250/0x450 [ 179.036910][ T4176] ? hci_conn_timeout+0x61/0x450 [ 179.042169][ T4179] Workqueue: hci1 hci_conn_timeout [ 179.049082][ T4176] ? hci_conn_timeout+0x250/0x450 [ 179.057103][ T4179] [ 179.057113][ T4179] RIP: 0010:hci_conn_timeout+0x250/0x450 [ 179.067202][ T4176] ? hci_conn_timeout+0x250/0x450 [ 179.073183][ T4174] Code: 0a 8e e8 c3 2a 6d f8 48 8b 35 84 28 ad 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b5 90 f5 f7 e8 70 42 23 f8 <0f> 0b e9 34 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff [ 179.081449][ T4176] ? hci_conn_timeout+0x250/0x450 [ 179.090242][ T4179] Code: 0a 8e e8 c3 2a 6d f8 48 8b 35 84 28 ad 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b5 90 f5 f7 e8 70 42 23 f8 <0f> 0b e9 34 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff [ 179.101260][ T4176] process_one_work+0x8a1/0x10c0 [ 179.105050][ T4174] RSP: 0018:ffffc90002f7fc28 EFLAGS: 00010293 [ 179.113063][ T4176] ? worker_detach_from_pool+0x260/0x260 [ 179.121010][ T4179] RSP: 0018:ffffc90002fcfc28 EFLAGS: 00010293 [ 179.121035][ T4179] RAX: ffffffff895d4270 RBX: ffff88802afaa138 RCX: ffff888025f99dc0 [ 179.121051][ T4179] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 179.124333][ T4174] [ 179.127250][ T4179] RBP: 00000000ffffffff R08: ffffffff895d4081 R09: ffffed10055f5403 [ 179.132153][ T4174] RAX: ffffffff895d4270 RBX: ffff88802a9a0138 RCX: ffff8880280cd940 [ 179.137006][ T4179] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 179.141542][ T4176] ? _raw_spin_lock_irqsave+0x120/0x120 [ 179.145838][ T4179] R13: ffff88801bfeae28 R14: ffff88802afaa000 R15: ffff88801bfeae18 [ 179.150491][ T4176] ? kthread_data+0x4e/0xc0 [ 179.153015][ T4179] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 179.161325][ T4174] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 179.192577][ T4179] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.197364][ T4176] ? wq_worker_running+0x97/0x170 [ 179.202438][ T4179] CR2: 000000110c2e1315 CR3: 0000000075a92000 CR4: 00000000003506e0 [ 179.204755][ T4176] worker_thread+0xaca/0x1280 [ 179.210366][ T4179] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 179.215463][ T4174] RBP: 00000000ffffffff R08: ffffffff895d4081 R09: ffffed1005534003 [ 179.236924][ T4179] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 179.241081][ T4176] kthread+0x3f6/0x4f0 [ 179.261318][ T4174] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 179.265477][ T4176] ? rcu_lock_release+0x20/0x20 [ 179.271664][ T4174] R13: ffff88801bff4f28 R14: ffff88802a9a0000 R15: ffff88801bff4f18 [ 179.271684][ T4174] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 179.271704][ T4174] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.271720][ T4174] CR2: 0000001b30617ff8 CR3: 0000000075a92000 CR4: 00000000003506e0 [ 179.277345][ T4176] ? kthread_blkcg+0xd0/0xd0 [ 179.283951][ T4174] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 179.293275][ T4176] ret_from_fork+0x1f/0x30 [ 179.299927][ T4179] Call Trace: [ 179.299939][ T4179] [ 179.299949][ T4179] ? __warn+0x15b/0x300 [ 179.302360][ T4176] [ 179.310489][ T4179] ? hci_conn_timeout+0x250/0x450 [ 179.318590][ T4176] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 179.326521][ T4174] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 179.332006][ T4176] CPU: 0 PID: 4176 Comm: kworker/u5:3 Not tainted 5.15.176-syzkaller #0 [ 179.332029][ T4176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.340652][ T4174] Call Trace: [ 179.344558][ T4176] Workqueue: hci2 hci_conn_timeout [ 179.344587][ T4176] Call Trace: [ 179.344594][ T4176] [ 179.344604][ T4176] dump_stack_lvl+0x1e3/0x2d0 [ 179.354077][ T4179] ? report_bug+0x1b7/0x2e0 [ 179.361480][ T4176] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 179.361506][ T4176] ? panic+0x860/0x860 [ 179.368091][ T4174] [ 179.373098][ T4176] ? hci_conn_timeout+0x1e0/0x450 [ 179.373124][ T4176] ? hci_conn_timeout+0x1e0/0x450 [ 179.373146][ T4176] panic+0x318/0x860 [ 179.373172][ T4176] ? __warn+0x16a/0x300 [ 179.373196][ T4176] ? fb_is_primary_device+0xd0/0xd0 [ 179.373230][ T4176] ? ret_from_fork+0x1f/0x30 [ 179.381234][ T4179] ? handle_bug+0x3d/0x70 [ 179.385855][ T4176] ? hci_conn_timeout+0x250/0x450 [ 179.385880][ T4176] __warn+0x2b2/0x300 [ 179.393886][ T4174] ? __warn+0x15b/0x300 [ 179.401812][ T4176] ? hci_conn_timeout+0x250/0x450 [ 179.401834][ T4176] report_bug+0x1b7/0x2e0 [ 179.409839][ T4179] ? exc_invalid_op+0x16/0x40 [ 179.413880][ T4176] handle_bug+0x3d/0x70 [ 179.413903][ T4176] exc_invalid_op+0x16/0x40 [ 179.421954][ T4174] ? hci_conn_timeout+0x250/0x450 [ 179.426688][ T4176] asm_exc_invalid_op+0x16/0x20 [ 179.434684][ T4179] ? asm_exc_invalid_op+0x16/0x20 [ 179.443563][ T4176] RIP: 0010:hci_conn_timeout+0x250/0x450 [ 179.443589][ T4176] Code: 0a 8e e8 c3 2a 6d f8 48 8b 35 84 28 ad 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b5 90 f5 f7 e8 70 42 23 f8 <0f> 0b e9 34 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff [ 179.443606][ T4176] RSP: 0018:ffffc90002f9fc28 EFLAGS: 00010293 [ 179.443624][ T4176] RAX: ffffffff895d4270 RBX: ffff88802ac66138 RCX: ffff8880280cbb80 [ 179.443639][ T4176] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 179.443651][ T4176] RBP: 00000000ffffffff R08: ffffffff895d4081 R09: ffffed100558cc03 [ 179.443666][ T4176] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 179.443679][ T4176] R13: ffff88801bff4d28 R14: ffff88802ac66000 R15: ffff88801bff4d18 [ 179.443701][ T4176] ? hci_conn_timeout+0x61/0x450 [ 179.443720][ T4176] ? hci_conn_timeout+0x250/0x450 [ 179.443746][ T4176] ? hci_conn_timeout+0x250/0x450 [ 179.443770][ T4176] process_one_work+0x8a1/0x10c0 [ 179.443810][ T4176] ? worker_detach_from_pool+0x260/0x260 [ 179.443838][ T4176] ? _raw_spin_lock_irqsave+0x120/0x120 [ 179.443863][ T4176] ? kthread_data+0x4e/0xc0 [ 179.443885][ T4176] ? wq_worker_running+0x97/0x170 [ 179.443935][ T4176] worker_thread+0xaca/0x1280 [ 179.443986][ T4176] kthread+0x3f6/0x4f0 [ 179.444007][ T4176] ? rcu_lock_release+0x20/0x20 [ 179.444029][ T4176] ? kthread_blkcg+0xd0/0xd0 [ 179.444052][ T4176] ret_from_fork+0x1f/0x30 [ 179.451342][ T4174] ? report_bug+0x1b7/0x2e0 [ 179.458596][ T4176] [ 179.463495][ T4176] Kernel Offset: disabled [ 179.793416][ T4176] Rebooting in 86400 seconds..