last executing test programs: 7.806626057s ago: executing program 2 (id=132): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x10d, 0x8e, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) 7.694548016s ago: executing program 2 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file1\x00', 0x880, 0x2) mkdirat(r0, &(0x7f0000000040)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rmdir(&(0x7f0000000200)='./bus\x00') 7.390004225s ago: executing program 2 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x52) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='./file1\x00', 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 7.182582014s ago: executing program 2 (id=137): syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_req={{0x6, 0x4, 0x4}, {0x1, 0xffff}}]}}, 0x11) 7.034200774s ago: executing program 2 (id=139): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah\x00', 0x5) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 6.858484983s ago: executing program 2 (id=143): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)=0xc0) 3.099606961s ago: executing program 1 (id=171): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x81af, 0x0, 0x0, 0x1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x800}, 0x8) sendto$inet6(r4, 0x0, 0x0, 0x240540c3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000300000000000005000600"], 0xa0}}, 0x0) close(r4) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) 2.91965722s ago: executing program 1 (id=172): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, 0xe) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) accept4(r0, 0x0, 0x0, 0x800) r2 = socket$unix(0x1, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup2(r2, r1) bind$unix(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0) 2.195287937s ago: executing program 0 (id=176): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @any, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x5c}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x4, 0x5e, 0x8, 0xfffffffffffffffe}) 2.104263607s ago: executing program 0 (id=177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000009300004003078173391486"]) 2.028119007s ago: executing program 4 (id=178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) close(0x3) 2.009285227s ago: executing program 1 (id=179): r0 = msgget(0x1, 0x410) msgctl$IPC_INFO(r0, 0x3, &(0x7f00000003c0)=""/117) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002780)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x8890) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setpgid(0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x40}}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) mkdir(0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004"], 0x1c, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000004840), 0x9d40, 0x0) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40103d0b, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r7, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGUCODE(r7, 0xc018480d, &(0x7f00000001c0)={0x1, 0x2, 0x9, 0x90a, 0x7, 0x7fff}) 1.951700416s ago: executing program 4 (id=180): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file1\x00', 0x880, 0x2) mkdirat(r0, &(0x7f0000000040)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000200)='./bus\x00') 1.841416466s ago: executing program 4 (id=181): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1.768209726s ago: executing program 0 (id=182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000008c0)=[@text64={0x40, 0x0}], 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.710511146s ago: executing program 4 (id=184): syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2}}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.654634006s ago: executing program 1 (id=185): unshare(0x6a040000) socket$inet6(0xa, 0x2, 0x3a) 1.508138695s ago: executing program 3 (id=186): r0 = msgget(0x1, 0x410) msgctl$IPC_INFO(r0, 0x3, &(0x7f00000003c0)=""/117) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 1.507897125s ago: executing program 0 (id=187): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a0000000000440007800800", @ANYRES32, @ANYBLOB='2'], 0x90}}, 0x0) 1.390499495s ago: executing program 0 (id=188): mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x1a5ac2, 0x1df2a23c5997fa01) sendfile(r0, r0, 0x0, 0x7f03) 1.313366974s ago: executing program 3 (id=189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9ee}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x40}}, 0x0) 1.196180664s ago: executing program 0 (id=190): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000000500050002000000050001000600"], 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140ac"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 1.152325294s ago: executing program 3 (id=191): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file1\x00', 0x880, 0x2) mkdirat(r0, &(0x7f0000000040)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000200)='./bus\x00') 1.059567244s ago: executing program 1 (id=192): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah\x00', 0x5) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 968.993273ms ago: executing program 3 (id=193): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x75) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000600)=""/81}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, 0xffffffffffffffff, 0x0) 732.639813ms ago: executing program 3 (id=194): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x0) r1 = io_uring_setup(0x30d1, &(0x7f0000000240)={0x0, 0x0, 0x40}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 649.988932ms ago: executing program 4 (id=195): r0 = msgget(0x1, 0x410) msgctl$IPC_INFO(r0, 0x3, &(0x7f00000003c0)=""/117) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002780)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x8890) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setpgid(0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x40}}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) mkdir(0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004"], 0x1c, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000004840), 0x9d40, 0x0) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40103d0b, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r7, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGUCODE(r7, 0xc018480d, &(0x7f00000001c0)={0x1, 0x2, 0x9, 0x90a, 0x7, 0x7fff}) 455.757792ms ago: executing program 3 (id=196): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='mm_vmscan_write_folio\x00', r2}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 149.386481ms ago: executing program 1 (id=197): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1d0d6709002f70"], 0x20) 0s ago: executing program 4 (id=198): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x4, 0x5e, 0x8, 0xfffffffffffffffe}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts. [ 58.656745][ T4156] cgroup: Unknown subsys name 'net' [ 58.793530][ T4156] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.356390][ T4156] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.885768][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 61.897058][ T4175] chnl_net:caif_netlink_parms(): no params data found [ 61.945733][ T4178] chnl_net:caif_netlink_parms(): no params data found [ 62.010636][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 62.020813][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 62.107573][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.114886][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.123908][ T4175] device bridge_slave_0 entered promiscuous mode [ 62.136033][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.143242][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.151375][ T4175] device bridge_slave_1 entered promiscuous mode [ 62.175118][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.182199][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.191039][ T4169] device bridge_slave_0 entered promiscuous mode [ 62.213026][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.220114][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.229083][ T4178] device bridge_slave_0 entered promiscuous mode [ 62.237088][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.244262][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.252124][ T4169] device bridge_slave_1 entered promiscuous mode [ 62.275285][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.282364][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.291145][ T4178] device bridge_slave_1 entered promiscuous mode [ 62.316188][ T4175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.328131][ T4175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.388170][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.397584][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.405016][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.414131][ T4166] device bridge_slave_0 entered promiscuous mode [ 62.441896][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.453328][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.462777][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.469930][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.478290][ T4166] device bridge_slave_1 entered promiscuous mode [ 62.488606][ T4175] team0: Port device team_slave_0 added [ 62.497109][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.507948][ T4175] team0: Port device team_slave_1 added [ 62.514024][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.521094][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.529142][ T4172] device bridge_slave_0 entered promiscuous mode [ 62.567923][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.575305][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.583813][ T4172] device bridge_slave_1 entered promiscuous mode [ 62.629143][ T4169] team0: Port device team_slave_0 added [ 62.637130][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.649507][ T4178] team0: Port device team_slave_0 added [ 62.656600][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.663693][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.690271][ T4175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.710065][ T4169] team0: Port device team_slave_1 added [ 62.717572][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.729177][ T4178] team0: Port device team_slave_1 added [ 62.735630][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.742591][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.768809][ T4175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.782952][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.828534][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.869477][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.876578][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.902602][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.921736][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.928813][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.954856][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.968901][ T4166] team0: Port device team_slave_0 added [ 62.984279][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.991374][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.018227][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.032364][ T4172] team0: Port device team_slave_0 added [ 63.039156][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.046188][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.072353][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.084824][ T4166] team0: Port device team_slave_1 added [ 63.108218][ T4172] team0: Port device team_slave_1 added [ 63.126272][ T4175] device hsr_slave_0 entered promiscuous mode [ 63.134020][ T4175] device hsr_slave_1 entered promiscuous mode [ 63.189749][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.197182][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.224154][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.246948][ T4169] device hsr_slave_0 entered promiscuous mode [ 63.254975][ T4169] device hsr_slave_1 entered promiscuous mode [ 63.261826][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.270029][ T4169] Cannot create hsr debugfs directory [ 63.280235][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.287317][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.313431][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.325053][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.332357][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.358533][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.382855][ T4178] device hsr_slave_0 entered promiscuous mode [ 63.389598][ T4178] device hsr_slave_1 entered promiscuous mode [ 63.397038][ T4178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.404729][ T4178] Cannot create hsr debugfs directory [ 63.418744][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.425921][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.452437][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.483845][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 63.490845][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 63.492891][ T1110] Bluetooth: hci0: command 0x0409 tx timeout [ 63.498418][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 63.568764][ T1110] Bluetooth: hci4: command 0x0409 tx timeout [ 63.603872][ T4166] device hsr_slave_0 entered promiscuous mode [ 63.610981][ T4166] device hsr_slave_1 entered promiscuous mode [ 63.621859][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.630390][ T4166] Cannot create hsr debugfs directory [ 63.667545][ T4172] device hsr_slave_0 entered promiscuous mode [ 63.674821][ T4172] device hsr_slave_1 entered promiscuous mode [ 63.681505][ T4172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.689387][ T4172] Cannot create hsr debugfs directory [ 63.934427][ T4169] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.948264][ T4169] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.962427][ T4169] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.978746][ T4169] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.011199][ T4175] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.024095][ T4175] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.034030][ T4175] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.060382][ T4175] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.127252][ T4172] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.138252][ T4172] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.154302][ T4172] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.176025][ T4172] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.244960][ T4178] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.284356][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.291300][ T4178] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.301408][ T4178] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.330806][ T4178] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.347075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.356680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.387063][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.404831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.414581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.424624][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.431812][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.441267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.451375][ T4166] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.468620][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.486206][ T4166] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.496059][ T4166] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.518346][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.528462][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.538145][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.545313][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.554411][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.565566][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.574246][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.589056][ T4166] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.605251][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.632593][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.642112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.652091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.678237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.686769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.696118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.721143][ T4169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.732182][ T4169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.759895][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.780335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.792545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.807293][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.814443][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.823270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.833399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.842353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.852125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.861077][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.869117][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.877761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.886659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.896163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.905601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.914990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.924165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.941898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.951334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.959555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.019955][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.028750][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.041032][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.051278][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.060175][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.068906][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.077304][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.101448][ T4175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.115689][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.145696][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.164217][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.175077][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.185251][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.197102][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.207043][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.215323][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.226814][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.238639][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.249179][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.257156][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.267779][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.278009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.304099][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.318772][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.331470][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.341441][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.350108][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.361123][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.380333][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.389982][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.404798][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.417312][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.430442][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.441755][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.451799][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.460900][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.470676][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.477902][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.510434][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.518378][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.526701][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.536310][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.545897][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.555258][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.565202][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.570002][ T4211] Bluetooth: hci0: command 0x041b tx timeout [ 65.575826][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.579463][ T4211] Bluetooth: hci1: command 0x041b tx timeout [ 65.587897][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.598897][ T4211] Bluetooth: hci3: command 0x041b tx timeout [ 65.612502][ T4211] Bluetooth: hci2: command 0x041b tx timeout [ 65.621008][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.631139][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.640677][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.650048][ T4211] Bluetooth: hci4: command 0x041b tx timeout [ 65.656909][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.666283][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.673800][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.681803][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.691878][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.712565][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.721368][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.737764][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.755386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.765325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.775230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.785891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.799673][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.821129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.830035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.839553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.849527][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.857193][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.866841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.876547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.886396][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.895538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.904511][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.911802][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.922842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.938226][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.947220][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.988919][ T4169] device veth0_vlan entered promiscuous mode [ 66.005185][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.023690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.033538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.045392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.054960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.063972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.072247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.088998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.098726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.106885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.115507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.126111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.136188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.144820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.171570][ T4169] device veth1_vlan entered promiscuous mode [ 66.191289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.204868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.217880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.240423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.250047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.268631][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.300002][ T4175] device veth0_vlan entered promiscuous mode [ 66.348121][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.366547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.381466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.390779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.399597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.408257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.420418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.429341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.444803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.454361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.465028][ T4169] device veth0_macvtap entered promiscuous mode [ 66.489509][ T4175] device veth1_vlan entered promiscuous mode [ 66.506908][ T4169] device veth1_macvtap entered promiscuous mode [ 66.519778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.533214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.541836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.552226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.560204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.598910][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.628364][ T4175] device veth0_macvtap entered promiscuous mode [ 66.636106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.646177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.655945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.669635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.678286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.686660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.696096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.704805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.726383][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.737020][ T4175] device veth1_macvtap entered promiscuous mode [ 66.750356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.758668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.770090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.784494][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.810504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.819486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.828399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.837550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.847690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.856931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.874915][ T4169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.885286][ T4169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.894392][ T4169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.904187][ T4169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.920575][ T4172] device veth0_vlan entered promiscuous mode [ 66.930085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.938928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.954954][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.963443][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.975035][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.993493][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.018971][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.031547][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.053750][ T4172] device veth1_vlan entered promiscuous mode [ 67.071560][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.085316][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.097568][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.112370][ T4175] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.128765][ T4175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.139221][ T4175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.152966][ T4175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.193144][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.202184][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.214957][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.226069][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.235788][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.244776][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.259120][ T4166] device veth0_vlan entered promiscuous mode [ 67.340880][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.358134][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.372582][ T4166] device veth1_vlan entered promiscuous mode [ 67.414475][ T4172] device veth0_macvtap entered promiscuous mode [ 67.429287][ T1448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.441424][ T1448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.474125][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.482381][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.492418][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.501484][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.509914][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.519907][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.537337][ T4172] device veth1_macvtap entered promiscuous mode [ 67.548203][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.562929][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.591554][ T1448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.600300][ T1448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.609686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.618046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.627100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.635356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.644660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.653736][ T4214] Bluetooth: hci2: command 0x040f tx timeout [ 67.655159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.667284][ T4214] Bluetooth: hci3: command 0x040f tx timeout [ 67.669404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.675239][ T4214] Bluetooth: hci1: command 0x040f tx timeout [ 67.692708][ T4214] Bluetooth: hci0: command 0x040f tx timeout [ 67.709762][ T4166] device veth0_macvtap entered promiscuous mode [ 67.721980][ T4178] device veth0_vlan entered promiscuous mode [ 67.731109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.739200][ T4214] Bluetooth: hci4: command 0x040f tx timeout [ 67.741868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.754549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.767682][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.773371][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.786379][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.786715][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.801918][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.818051][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.831852][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.842491][ T4166] device veth1_macvtap entered promiscuous mode [ 67.869794][ T4178] device veth1_vlan entered promiscuous mode [ 67.883462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.891820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.912613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.922587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.940731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.955683][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.967014][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.977525][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.988838][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.000984][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.009127][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.020384][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.031800][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.045009][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.055806][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.067144][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.080640][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.091450][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.103387][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.113616][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.125541][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.136226][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.147126][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.159565][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.175709][ T4166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.184691][ T4166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.194459][ T4166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.204799][ T4166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.222354][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.233989][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.244002][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.253428][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.273352][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.303462][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.315192][ T4172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.325302][ T4172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.335132][ T4172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.343926][ T4172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.459697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.484311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.509526][ T4178] device veth0_macvtap entered promiscuous mode [ 68.725580][ T4178] device veth1_macvtap entered promiscuous mode [ 68.979916][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.019605][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.060416][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.078864][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.089943][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.102484][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.113561][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.127256][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.139949][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.152210][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.168931][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.217175][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.225945][ T4241] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.246853][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.275311][ T1448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.284924][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.292754][ T1448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.311716][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.329855][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.340754][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.351021][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.362207][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.372516][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.387772][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.399333][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.431667][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.445389][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.446037][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.453842][ T4225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.466444][ T4178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.479681][ T4225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.484858][ T4178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.498098][ T4178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.507458][ T4178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.526640][ T1448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.539705][ T1448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.544893][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.555997][ T4241] usb 2-1: Using ep0 maxpacket: 8 [ 69.562029][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.595208][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.612048][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.635018][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.830560][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.869026][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.959966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.998022][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.036825][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.101542][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.115974][ T4265] dccp_close: ABORT with 52 bytes unread [ 70.508261][ T4270] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.619752][ T4259] loop1: detected capacity change from 0 to 131072 [ 70.629634][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 70.636135][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 70.642901][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 70.649946][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 70.658547][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 70.672143][ T4259] F2FS-fs (loop1): Unrecognized mount option "0000000000000000000" or missing value [ 71.464382][ T4296] trusted_key: encrypted_key: insufficient parameters specified [ 71.558488][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.567043][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.634551][ T4293] tmpfs: Bad value for 'mpol' [ 72.282552][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 72.364684][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 72.382772][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 72.392721][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 72.403034][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 72.416034][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 72.612760][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 72.660004][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 72.680015][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 72.713871][ T4241] usb 2-1: unable to get BOS descriptor or descriptor too short [ 72.730418][ T4241] usb 2-1: no configurations [ 72.743047][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 72.749282][ T4241] usb 2-1: can't read configurations, error -22 [ 72.942279][ T4317] wlan0 speed is unknown, defaulting to 1000 [ 72.953462][ T4317] wlan0 speed is unknown, defaulting to 1000 [ 73.009411][ T4317] wlan0 speed is unknown, defaulting to 1000 [ 73.358707][ T4321] netlink: 36 bytes leftover after parsing attributes in process `syz.0.21'. [ 73.413808][ T4317] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.430896][ T4317] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 73.619114][ T4317] wlan0 speed is unknown, defaulting to 1000 [ 73.639319][ T4317] wlan0 speed is unknown, defaulting to 1000 [ 73.667280][ T4317] wlan0 speed is unknown, defaulting to 1000 [ 73.718976][ T4317] wlan0 speed is unknown, defaulting to 1000 [ 73.730778][ T4327] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 73.857733][ T4317] wlan0 speed is unknown, defaulting to 1000 [ 73.928478][ T4332] netlink: 'syz.2.26': attribute type 10 has an invalid length. [ 73.948243][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.957063][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.036233][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.043429][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.052442][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.059616][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.080477][ T4332] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 74.170659][ T4332] syz.2.26 (4332) used greatest stack depth: 17816 bytes left [ 74.266323][ T4338] loop2: detected capacity change from 0 to 1024 [ 74.577658][ T4336] loop0: detected capacity change from 0 to 8192 [ 74.784591][ T4336] ======================================================= [ 74.784591][ T4336] WARNING: The mand mount option has been deprecated and [ 74.784591][ T4336] and is ignored by this kernel. Remove the mand [ 74.784591][ T4336] option from the mount to silence this warning. [ 74.784591][ T4336] ======================================================= [ 75.176394][ T4338] hfsplus: xattr searching failed [ 75.184271][ T4345] hfsplus: xattr searching failed [ 75.229341][ T26] audit: type=1800 audit(1737750609.889:2): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.29" name="file1" dev="loop2" ino=3 res=0 errno=0 [ 75.313268][ T4338] hfsplus: xattr searching failed [ 75.320110][ T4338] hfsplus: xattr searching failed [ 75.434444][ T26] audit: type=1804 audit(1737750610.099:3): pid=4336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.28" name="/newroot/7/file2/bus" dev="loop0" ino=1048590 res=1 errno=0 [ 75.476140][ T4345] hfsplus: b-tree write err: -5, ino 3 [ 75.548696][ T4355] netlink: 56 bytes leftover after parsing attributes in process `syz.3.33'. [ 75.609339][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.850250][ T4364] loop2: detected capacity change from 0 to 2048 [ 75.965708][ T4364] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.358680][ T4361] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 76.436798][ T4361] overlayfs: missing 'lowerdir' [ 77.080868][ T4391] loop0: detected capacity change from 0 to 2048 [ 77.143308][ T4391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.504224][ T4394] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 77.566084][ T4394] overlayfs: missing 'lowerdir' [ 77.634227][ T4396] kvm: pic: non byte read [ 77.843302][ T4414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 78.001919][ T4422] Process accounting resumed [ 78.132971][ T4241] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 78.539166][ T4241] usb 2-1: config 0 has no interfaces? [ 78.626209][ T4207] hid-generic 0005:0C45:100D.0001: item fetching failed at offset 0/1 [ 78.643262][ T4207] hid-generic: probe of 0005:0C45:100D.0001 failed with error -22 [ 78.653647][ T4209] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.685442][ T4241] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 78.716909][ T4241] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 78.735481][ T4241] usb 2-1: Product: syz [ 78.739941][ T4241] usb 2-1: Manufacturer: syz [ 78.765165][ T4241] usb 2-1: config 0 descriptor?? [ 78.922362][ T4459] kvm: emulating exchange as write [ 78.932860][ T4209] usb 3-1: Using ep0 maxpacket: 16 [ 79.089188][ T4209] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.112032][ T4209] usb 3-1: config 0 has no interfaces? [ 79.120468][ T4209] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 79.130358][ T4209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.145381][ T4209] usb 3-1: config 0 descriptor?? [ 79.304548][ T4418] udc-core: couldn't find an available UDC or it's busy [ 79.311530][ T4418] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.369711][ T4207] usb 2-1: USB disconnect, device number 4 [ 79.401872][ T4209] usb 3-1: USB disconnect, device number 2 [ 79.882890][ T4241] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.896437][ T4483] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 79.913244][ T4483] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 80.134390][ T4241] usb 1-1: Using ep0 maxpacket: 8 [ 80.253279][ T4241] usb 1-1: config 0 has no interfaces? [ 80.258855][ T4241] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 80.293176][ T4241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.302377][ T4504] ptrace attach of "./syz-executor exec"[4166] was attempted by " [ 80.317709][ T4241] usb 1-1: config 0 descriptor?? [ 80.480921][ T4506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.489677][ T4506] bond0: (slave bond1): Enslaving as an active interface with an up link [ 80.514152][ T4512] 9pnet_virtio: no channels available for device syz [ 80.717044][ T1325] usb 1-1: USB disconnect, device number 2 [ 80.947389][ T4529] befs: (nullb0): No write support. Marking filesystem read-only [ 80.998148][ T4529] befs: (nullb0): invalid magic header [ 81.022155][ T4531] 9pnet_virtio: no channels available for device syz [ 81.073864][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 81.155333][ T4529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.201285][ T4529] bond0: (slave rose0): Enslaving as an active interface with an up link [ 81.230391][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 81.949777][ T4569] bridge0: port 3(syz_tun) entered blocking state [ 82.018045][ T4569] bridge0: port 3(syz_tun) entered disabled state [ 82.067538][ T4569] device syz_tun entered promiscuous mode [ 82.128584][ T4569] bridge0: port 3(syz_tun) entered blocking state [ 82.135515][ T4569] bridge0: port 3(syz_tun) entered forwarding state [ 82.207225][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 82.236080][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 82.312940][ T4207] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.349276][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 82.401334][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 82.449588][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 82.524817][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 82.621193][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 82.645138][ T4581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 82.732996][ T4207] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 82.760047][ T4207] usb 1-1: config 0 interface 0 has no altsetting 0 [ 82.943065][ T4207] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 82.964526][ T4207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.003788][ T4207] usb 1-1: Product: syz [ 83.008009][ T4207] usb 1-1: Manufacturer: syz [ 83.012638][ T4207] usb 1-1: SerialNumber: syz [ 83.101963][ T4207] usb 1-1: config 0 descriptor?? [ 83.200315][ T4207] usb 1-1: selecting invalid altsetting 0 [ 83.524357][ T4572] 9pnet_virtio: no channels available for device syz [ 83.590285][ T4207] usb 1-1: USB disconnect, device number 3 [ 83.853816][ T4616] 9pnet_virtio: no channels available for device syz [ 83.896311][ T4616] Zero length message leads to an empty skb [ 83.915118][ T4608] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 83.940688][ T4608] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 84.128477][ T1110] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.228523][ T4627] wlan0 speed is unknown, defaulting to 1000 [ 84.736157][ T1110] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 84.760661][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.772770][ T4649] netlink: 32 bytes leftover after parsing attributes in process `syz.3.123'. [ 84.802099][ T1110] usb 5-1: Product: syz [ 84.835176][ T1110] usb 5-1: Manufacturer: syz [ 84.839828][ T1110] usb 5-1: SerialNumber: syz [ 84.898615][ T1110] usb 5-1: config 0 descriptor?? [ 85.049292][ T4662] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 85.091922][ T4662] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 85.226551][ T1110] usb 5-1: USB disconnect, device number 2 [ 85.537630][ T4677] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 86.767394][ T13] cfg80211: failed to load regulatory.db [ 87.197066][ T4718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 87.550476][ T4722] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 87.573812][ T4722] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 88.242282][ T4740] binder: BINDER_SET_CONTEXT_MGR already set [ 88.278598][ T4740] binder: 4739:4740 ioctl 4018620d 20000440 returned -16 [ 88.602793][ T4209] Bluetooth: hci5: command 0x1003 tx timeout [ 88.608964][ T4167] Bluetooth: hci5: sending frame failed (-49) [ 88.746881][ T4751] tipc: Failed to remove unknown binding: 66,3,3/0:1392719287/1392719288 [ 88.854760][ T1110] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 88.896840][ T1110] Bluetooth: hci0: Injecting HCI hardware error event [ 88.930110][ T146] Bluetooth: hci0: hardware error 0x00 [ 89.793295][ T4238] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.884237][ T4770] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 90.042910][ T4238] usb 4-1: Using ep0 maxpacket: 8 [ 90.163022][ T4238] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 90.182305][ T4238] usb 4-1: config 0 has no interface number 0 [ 90.202065][ T4238] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 90.244025][ T4238] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 90.271279][ T4238] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 90.295359][ T4238] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 90.295776][ T4167] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 90.313303][ T4238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.316969][ T4167] CPU: 1 PID: 4167 Comm: kworker/u5:1 Not tainted 5.15.177-syzkaller #0 [ 90.331364][ T4167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 90.341114][ T4238] usb 4-1: config 0 descriptor?? [ 90.341566][ T4167] Workqueue: hci3 hci_rx_work [ 90.351215][ T4167] Call Trace: [ 90.354513][ T4167] [ 90.357461][ T4167] dump_stack_lvl+0x1e3/0x2d0 [ 90.362255][ T4167] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 90.367924][ T4167] ? panic+0x860/0x860 [ 90.372035][ T4167] ? sysfs_create_dir_ns+0x282/0x390 [ 90.377350][ T4167] sysfs_create_dir_ns+0x2c6/0x390 [ 90.382502][ T4167] ? sysfs_warn_dup+0xa0/0xa0 [ 90.387211][ T4167] ? do_raw_spin_unlock+0x137/0x8b0 [ 90.392536][ T4167] kobject_add_internal+0x6e0/0xe00 [ 90.397783][ T4167] kobject_add+0x14e/0x210 [ 90.402241][ T4167] ? device_add+0x3c2/0xfd0 [ 90.406810][ T4167] ? kobject_init+0x1d0/0x1d0 [ 90.411506][ T4167] ? __raw_spin_lock_init+0x41/0x100 [ 90.416822][ T4167] ? get_device_parent+0x128/0x400 [ 90.421954][ T4167] device_add+0x476/0xfd0 [ 90.426309][ T4167] hci_conn_add_sysfs+0xe4/0x1f0 [ 90.431264][ T4167] le_conn_complete_evt+0xc15/0x1500 [ 90.436572][ T4167] ? cs_le_create_conn+0x5f0/0x5f0 [ 90.441706][ T4167] hci_le_meta_evt+0x28c/0x3f50 [ 90.446675][ T4167] ? __lock_acquire+0x1ff0/0x1ff0 [ 90.451726][ T4167] ? __mutex_lock_common+0x444/0x25a0 [ 90.457221][ T4167] ? hci_remote_host_features_evt+0x280/0x280 [ 90.463302][ T4167] ? __mutex_unlock_slowpath+0x218/0x750 [ 90.468941][ T4167] ? hci_event_packet+0x3b4/0x1550 [ 90.474065][ T4167] ? mutex_unlock+0x10/0x10 [ 90.478582][ T4167] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 90.484574][ T4167] ? print_irqtrace_events+0x210/0x210 [ 90.490056][ T4167] hci_event_packet+0xc41/0x1550 [ 90.495015][ T4167] ? rcu_lock_release+0x20/0x20 [ 90.499886][ T4167] ? hci_send_to_monitor+0x99/0x4d0 [ 90.505208][ T4167] hci_rx_work+0x237/0xa10 [ 90.509660][ T4167] process_one_work+0x8a1/0x10c0 [ 90.514624][ T4167] ? worker_detach_from_pool+0x260/0x260 [ 90.520267][ T4167] ? _raw_spin_lock_irqsave+0x120/0x120 [ 90.525827][ T4167] ? kthread_data+0x4e/0xc0 [ 90.530347][ T4167] ? wq_worker_running+0x97/0x170 [ 90.535380][ T4167] worker_thread+0xaca/0x1280 [ 90.540087][ T4167] kthread+0x3f6/0x4f0 [ 90.544163][ T4167] ? rcu_lock_release+0x20/0x20 [ 90.549197][ T4167] ? kthread_blkcg+0xd0/0xd0 [ 90.553791][ T4167] ret_from_fork+0x1f/0x30 [ 90.558228][ T4167] [ 90.564574][ T4167] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 90.576818][ T4238] ldusb 4-1:0.55: Interrupt in endpoint not found [ 90.577867][ T4167] Bluetooth: hci3: failed to register connection device [ 90.684918][ T4209] Bluetooth: hci5: command 0x1001 tx timeout [ 90.691600][ T4167] Bluetooth: hci5: sending frame failed (-49) [ 90.831482][ T4238] usb 4-1: USB disconnect, device number 2 [ 91.224805][ T4800] loop1: detected capacity change from 0 to 512 [ 91.266522][ T4802] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 91.400673][ T4800] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.453480][ T4800] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.788498][ T4823] wlan0 speed is unknown, defaulting to 1000 [ 92.081279][ T4833] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 92.685267][ T4842] loop4: detected capacity change from 0 to 512 [ 92.762970][ T4209] Bluetooth: hci5: command 0x1009 tx timeout [ 92.880213][ T4842] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.928770][ T4842] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.112389][ T4167] ================================================================== [ 93.120897][ T4167] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x11f1/0x3f50 [ 93.128758][ T4167] Read of size 1 at addr ffff88805f7bfe04 by task kworker/u5:1/4167 [ 93.137128][ T4167] [ 93.139562][ T4167] CPU: 1 PID: 4167 Comm: kworker/u5:1 Not tainted 5.15.177-syzkaller #0 [ 93.148026][ T4167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 93.158183][ T4167] Workqueue: hci3 hci_rx_work [ 93.162875][ T4167] Call Trace: [ 93.166161][ T4167] [ 93.169109][ T4167] dump_stack_lvl+0x1e3/0x2d0 [ 93.173797][ T4167] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 93.179427][ T4167] ? _printk+0xd1/0x120 [ 93.183598][ T4167] ? __wake_up_klogd+0xcc/0x100 [ 93.188455][ T4167] ? panic+0x860/0x860 [ 93.192525][ T4167] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 93.198003][ T4167] print_address_description+0x63/0x3b0 [ 93.203557][ T4167] ? hci_le_meta_evt+0x11f1/0x3f50 [ 93.208780][ T4167] kasan_report+0x16b/0x1c0 [ 93.213295][ T4167] ? hci_le_meta_evt+0x11f1/0x3f50 [ 93.218443][ T4167] hci_le_meta_evt+0x11f1/0x3f50 [ 93.223384][ T4167] ? __lock_acquire+0x1ff0/0x1ff0 [ 93.228423][ T4167] ? hci_remote_host_features_evt+0x280/0x280 [ 93.234488][ T4167] ? __mutex_unlock_slowpath+0x218/0x750 [ 93.240148][ T4167] ? hci_event_packet+0x3b4/0x1550 [ 93.245315][ T4167] ? mutex_unlock+0x10/0x10 [ 93.249881][ T4167] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 93.256077][ T4167] ? print_irqtrace_events+0x210/0x210 [ 93.261564][ T4167] hci_event_packet+0xc41/0x1550 [ 93.266558][ T4167] ? rcu_lock_release+0x20/0x20 [ 93.271428][ T4167] ? hci_send_to_monitor+0x99/0x4d0 [ 93.276640][ T4167] hci_rx_work+0x237/0xa10 [ 93.281068][ T4167] process_one_work+0x8a1/0x10c0 [ 93.286114][ T4167] ? worker_detach_from_pool+0x260/0x260 [ 93.291776][ T4167] ? _raw_spin_lock_irqsave+0x120/0x120 [ 93.297513][ T4167] ? kthread_data+0x4e/0xc0 [ 93.302044][ T4167] ? wq_worker_running+0x97/0x170 [ 93.308168][ T4167] worker_thread+0xaca/0x1280 [ 93.313915][ T4167] kthread+0x3f6/0x4f0 [ 93.318822][ T4167] ? rcu_lock_release+0x20/0x20 [ 93.325936][ T4167] ? kthread_blkcg+0xd0/0xd0 [ 93.331795][ T4167] ret_from_fork+0x1f/0x30 [ 93.337252][ T4167] [ 93.340294][ T4167] [ 93.342635][ T4167] Allocated by task 4851: [ 93.347145][ T4167] ____kasan_kmalloc+0xba/0xf0 [ 93.352388][ T4167] __kmalloc_node_track_caller+0x195/0x390 [ 93.358407][ T4167] __alloc_skb+0x12c/0x590 [ 93.362959][ T4167] vhci_write+0xbc/0x430 [ 93.367323][ T4167] vfs_write+0xacd/0xe50 [ 93.371602][ T4167] ksys_write+0x1a2/0x2c0 [ 93.376028][ T4167] do_syscall_64+0x3b/0xb0 [ 93.380548][ T4167] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.386546][ T4167] [ 93.388908][ T4167] The buggy address belongs to the object at ffff88805f7bfc00 [ 93.388908][ T4167] which belongs to the cache kmalloc-512 of size 512 [ 93.403143][ T4167] The buggy address is located 4 bytes to the right of [ 93.403143][ T4167] 512-byte region [ffff88805f7bfc00, ffff88805f7bfe00) [ 93.416768][ T4167] The buggy address belongs to the page: [ 93.422620][ T4167] page:ffffea00017def00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f7bc [ 93.432791][ T4167] head:ffffea00017def00 order:2 compound_mapcount:0 compound_pincount:0 [ 93.441294][ T4167] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 93.449292][ T4167] raw: 00fff00000010200 ffffea0000962300 0000000500000005 ffff888017441c80 [ 93.457891][ T4167] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 93.466479][ T4167] page dumped because: kasan: bad access detected [ 93.472903][ T4167] page_owner tracks the page as allocated [ 93.478822][ T4167] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3546, ts 73334304020, free_ts 70954549233 [ 93.499328][ T4167] get_page_from_freelist+0x3b78/0x3d40 [ 93.504938][ T4167] __alloc_pages+0x272/0x700 [ 93.509551][ T4167] new_slab+0xbb/0x4b0 [ 93.513627][ T4167] ___slab_alloc+0x6f6/0xe10 [ 93.518323][ T4167] kmem_cache_alloc_trace+0x1a0/0x290 [ 93.524129][ T4167] kernfs_fop_open+0x3b5/0xbc0 [ 93.528903][ T4167] do_dentry_open+0x807/0xfb0 [ 93.533592][ T4167] path_openat+0x2705/0x2f20 [ 93.538270][ T4167] do_filp_open+0x21c/0x460 [ 93.542767][ T4167] do_sys_openat2+0x13b/0x4f0 [ 93.547440][ T4167] __x64_sys_openat+0x243/0x290 [ 93.552298][ T4167] do_syscall_64+0x3b/0xb0 [ 93.556740][ T4167] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.562653][ T4167] page last free stack trace: [ 93.567332][ T4167] free_unref_page_prepare+0xc34/0xcf0 [ 93.572792][ T4167] free_unref_page_list+0x1f7/0x8e0 [ 93.577988][ T4167] release_pages+0x1bb9/0x1f40 [ 93.582749][ T4167] __pagevec_release+0x80/0xf0 [ 93.587547][ T4167] shmem_undo_range+0x67a/0x1b50 [ 93.592741][ T4167] shmem_evict_inode+0x21b/0xa00 [ 93.597706][ T4167] evict+0x529/0x930 [ 93.601602][ T4167] __dentry_kill+0x436/0x650 [ 93.606454][ T4167] dentry_kill+0xbb/0x290 [ 93.611215][ T4167] dput+0xd8/0x1a0 [ 93.614945][ T4167] __fput+0x636/0x8e0 [ 93.618928][ T4167] task_work_run+0x129/0x1a0 [ 93.623521][ T4167] exit_to_user_mode_loop+0x106/0x130 [ 93.628889][ T4167] exit_to_user_mode_prepare+0xb1/0x140 [ 93.634436][ T4167] syscall_exit_to_user_mode+0x5d/0x240 [ 93.639983][ T4167] do_syscall_64+0x47/0xb0 [ 93.644401][ T4167] [ 93.646733][ T4167] Memory state around the buggy address: [ 93.652357][ T4167] ffff88805f7bfd00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.660420][ T4167] ffff88805f7bfd80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.668477][ T4167] >ffff88805f7bfe00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.676624][ T4167] ^ [ 93.680694][ T4167] ffff88805f7bfe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.688752][ T4167] ffff88805f7bff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.696810][ T4167] ================================================================== [ 93.705068][ T4167] Disabling lock debugging due to kernel taint [ 93.718059][ T4167] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 93.725288][ T4167] CPU: 1 PID: 4167 Comm: kworker/u5:1 Tainted: G B 5.15.177-syzkaller #0 [ 93.735108][ T4167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 93.745184][ T4167] Workqueue: hci3 hci_rx_work [ 93.749891][ T4167] Call Trace: [ 93.753202][ T4167] [ 93.756151][ T4167] dump_stack_lvl+0x1e3/0x2d0 [ 93.760871][ T4167] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 93.766544][ T4167] ? panic+0x860/0x860 [ 93.770649][ T4167] ? rcu_is_watching+0x11/0xa0 [ 93.775439][ T4167] ? preempt_schedule_common+0xa6/0xd0 [ 93.780909][ T4167] panic+0x318/0x860 [ 93.784806][ T4167] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 93.790963][ T4167] ? check_panic_on_warn+0x1d/0xa0 [ 93.796275][ T4167] ? fb_is_primary_device+0xd0/0xd0 [ 93.801493][ T4167] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 93.807518][ T4167] ? _raw_spin_unlock+0x40/0x40 [ 93.812383][ T4167] check_panic_on_warn+0x7e/0xa0 [ 93.817429][ T4167] ? hci_le_meta_evt+0x11f1/0x3f50 [ 93.822788][ T4167] end_report+0x6d/0xf0 [ 93.826962][ T4167] kasan_report+0x18e/0x1c0 [ 93.831468][ T4167] ? hci_le_meta_evt+0x11f1/0x3f50 [ 93.836582][ T4167] hci_le_meta_evt+0x11f1/0x3f50 [ 93.841570][ T4167] ? __lock_acquire+0x1ff0/0x1ff0 [ 93.846888][ T4167] ? hci_remote_host_features_evt+0x280/0x280 [ 93.853055][ T4167] ? __mutex_unlock_slowpath+0x218/0x750 [ 93.858709][ T4167] ? hci_event_packet+0x3b4/0x1550 [ 93.864041][ T4167] ? mutex_unlock+0x10/0x10 [ 93.868647][ T4167] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 93.874719][ T4167] ? print_irqtrace_events+0x210/0x210 [ 93.880185][ T4167] hci_event_packet+0xc41/0x1550 [ 93.885139][ T4167] ? rcu_lock_release+0x20/0x20 [ 93.890003][ T4167] ? hci_send_to_monitor+0x99/0x4d0 [ 93.895203][ T4167] hci_rx_work+0x237/0xa10 [ 93.899659][ T4167] process_one_work+0x8a1/0x10c0 [ 93.904617][ T4167] ? worker_detach_from_pool+0x260/0x260 [ 93.910263][ T4167] ? _raw_spin_lock_irqsave+0x120/0x120 [ 93.915834][ T4167] ? kthread_data+0x4e/0xc0 [ 93.920352][ T4167] ? wq_worker_running+0x97/0x170 [ 93.925389][ T4167] worker_thread+0xaca/0x1280 [ 93.930079][ T4167] kthread+0x3f6/0x4f0 [ 93.934153][ T4167] ? rcu_lock_release+0x20/0x20 [ 93.939029][ T4167] ? kthread_blkcg+0xd0/0xd0 [ 93.943632][ T4167] ret_from_fork+0x1f/0x30 [ 93.948062][ T4167] [ 93.951287][ T4167] Kernel Offset: disabled [ 93.963883][ T4167] Rebooting in 86400 seconds..