last executing test programs: 8.234527004s ago: executing program 3 (id=503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$uid(0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.136887733s ago: executing program 1 (id=507): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 7.136551653s ago: executing program 3 (id=509): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000280)={r2, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r3}) 7.016257173s ago: executing program 3 (id=510): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x7ffeffff, 0x7, 0x40, 0x7, 0x6, 0x83, 0x100, {0x0, @in={{0x2, 0x4e23, @remote}}, 0x4bb5, 0xfffffffa, 0x400, 0x3, 0xd}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) 5.540087272s ago: executing program 2 (id=511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000e00), 0x12) 5.484785786s ago: executing program 3 (id=513): fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) 5.333316459s ago: executing program 0 (id=515): close(0xffffffffffffffff) io_setup(0x8, &(0x7f0000000540)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f0000000140)="0100", 0x2, 0x2a21}]) 5.076896169s ago: executing program 0 (id=516): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x1c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x1) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000003080)={0x0, 0x0, 0x6, &(0x7f0000003040)={0xe, "f4e1a230be8f46463fb1a7f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) r7 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) 5.076744099s ago: executing program 4 (id=517): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 4.039016113s ago: executing program 2 (id=518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x7, 0xa, 0x801, 0x0, 0x0, {0x6, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000094) 3.979970878s ago: executing program 3 (id=519): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) socketpair(0x1d, 0xa, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000340)=[{0x7, 0xbb11, 0x22, &(0x7f0000000080)="cfbb0d939950572c020000b54191bb4e4e1c83ba0000000078e4174aff7ca82431b8"}, {0xff, 0x8000, 0x0, 0x0}], 0x2}) 3.975100758s ago: executing program 4 (id=520): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xb013, 0x5, 0x0, 0x2, 0x8a3, 0x8f, 0x1007, 0x10, 0x1002, 0xffffffff, 0x200, 0x8, 0x10000009, 0x1, 0x5, 0x1, 0x8, 0x3, 0x9, 0x8e, 0x108, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]}) syz_open_dev$usbfs(0x0, 0x76, 0x103381) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 3.912103664s ago: executing program 2 (id=521): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xff1ed000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x8, 0x40}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x1, 0xfffd, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000080)={0x3, r5, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000}) 3.911629973s ago: executing program 0 (id=522): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@nodioread_nolock}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x12b042, 0x0) pwrite64(r0, &(0x7f0000000080)='2', 0x1, 0xfecc) 3.792904073s ago: executing program 1 (id=523): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000580)='./file2\x00', 0x2000400, &(0x7f00000004c0)=ANY=[], 0x1, 0x21e, &(0x7f00000005c0)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x66960000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3.686501722s ago: executing program 4 (id=524): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x8d4, &(0x7f00000000c0)={0x0, 0x951a, 0x3010, 0x1}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0xe8}, 0x0, 0x24040092}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, 0x0, 0x0) syz_io_uring_setup(0x4169, 0x0, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 2.837018041s ago: executing program 2 (id=525): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x402, &(0x7f0000000ec0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2.765027296s ago: executing program 4 (id=526): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a051702fc000000000109022400010000000009040000010300000009210100080122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220700000085a3091f82"], 0x0}, 0x0) 2.764763436s ago: executing program 1 (id=527): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$kcm(0x2, 0x200000000000001, 0x106) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000280)={r4, r4, 0xc, 0x0, 0x0, 0x9, 0x1, 0x457, 0x9, 0x3, 0x1, 0x1, 'syz1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_open_procfs(r0, &(0x7f0000000340)='net/ip_tables_targets\x00') syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x4) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) socket$inet_sctp(0x2, 0x1, 0x84) 2.759959137s ago: executing program 0 (id=528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000e00), 0x12) 2.71252977s ago: executing program 3 (id=529): unshare(0x2060000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001600), 0x47, 0x7000000, &(0x7f0000000100)="6027a98820210172b82b22ecbdc64da99999ab9cdde9825980d5afd8654f38976e340713fac123221463a4645d8412ab50d14af845e59a9b4c322bed0473fe3a0bc3e66c836151"}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) r2 = socket(0x10, 0x803, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x4, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r4, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000040)={0x80, 0x1, 0x7, 0xcb25, 0x0, 0x3}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0xffffffffffffffc8, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbf7, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4c00d}, 0x20000000) 2.699596182s ago: executing program 2 (id=530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000940)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000480)={{0xff, 0x10}, 'port0\x00', 0x8, 0x10000, 0x9, 0x3, 0xca7, 0xfffff805, 0x10001, 0x0, 0x2, 0x1}) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000000000000f8ffffffb703000008000000b7040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r8 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(0x0, 0x591002, 0x50f) 2.064927193s ago: executing program 4 (id=531): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$key(0xf, 0x3, 0x2) r2 = socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) close_range(r0, 0xffffffffffffffff, 0x0) 2.063245893s ago: executing program 1 (id=532): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005780)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003540)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x2, 0x0) 2.021819587s ago: executing program 1 (id=533): bind$alg(0xffffffffffffffff, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x26) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10161, 0x0) 225.324472ms ago: executing program 1 (id=534): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 146.005329ms ago: executing program 0 (id=535): r0 = socket$key(0xf, 0x3, 0x2) sendmsg(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c80)="ecba", 0x2}, {0x0}], 0x2}, 0xe0) 52.811786ms ago: executing program 4 (id=536): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ac0)=@delchain={0x68, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_ACT={0x30, 0x2, [@m_nat={0x2c, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) 26.672588ms ago: executing program 2 (id=537): socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtclass={0x70, 0x28, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0xf, 0xb}, {0x1, 0xb}}, [@c_atm={{0x8}, {0x2c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xd}}, @TCA_ATM_FD={0x8}, @TCA_ATM_FD={0x8}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x275461a364d8dd42}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0x4}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x7}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000840}, 0x880) recvmsg$can_raw(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/34, 0x62}, {&(0x7f00000006c0)=""/117, 0x4e}], 0x2}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x2c}}, 0x40) 0s ago: executing program 0 (id=538): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x2f126000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000180)={0x0, 0x45888, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts. [ 300.149645][ T4066] cgroup: Unknown subsys name 'net' [ 300.372837][ T4066] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 300.681925][ T4066] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 302.769052][ T4076] chnl_net:caif_netlink_parms(): no params data found [ 302.870640][ T4078] chnl_net:caif_netlink_parms(): no params data found [ 302.879650][ T4077] chnl_net:caif_netlink_parms(): no params data found [ 302.921068][ T4082] chnl_net:caif_netlink_parms(): no params data found [ 302.943948][ T4076] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.945115][ T4076] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.947624][ T4076] device bridge_slave_0 entered promiscuous mode [ 302.972401][ T4076] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.973643][ T4076] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.975425][ T4076] device bridge_slave_1 entered promiscuous mode [ 303.022560][ T4078] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.023696][ T4078] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.025521][ T4078] device bridge_slave_0 entered promiscuous mode [ 303.031794][ T4076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.036167][ T4078] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.037314][ T4078] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.039120][ T4078] device bridge_slave_1 entered promiscuous mode [ 303.040951][ T4083] chnl_net:caif_netlink_parms(): no params data found [ 303.071516][ T4076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.116817][ T4077] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.118039][ T4077] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.119811][ T4077] device bridge_slave_0 entered promiscuous mode [ 303.125056][ T4078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.128946][ T4078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.135737][ T4082] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.137307][ T4082] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.138999][ T4082] device bridge_slave_0 entered promiscuous mode [ 303.155481][ T4077] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.156741][ T4077] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.158671][ T4077] device bridge_slave_1 entered promiscuous mode [ 303.172287][ T4082] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.173536][ T4082] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.175476][ T4082] device bridge_slave_1 entered promiscuous mode [ 303.192706][ T4076] team0: Port device team_slave_0 added [ 303.203917][ T4078] team0: Port device team_slave_0 added [ 303.212741][ T4076] team0: Port device team_slave_1 added [ 303.216173][ T4082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.228485][ T4078] team0: Port device team_slave_1 added [ 303.241890][ T4082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.262363][ T4077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.270339][ T4078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.271548][ T4078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.275203][ T4078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.297089][ T4077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.298827][ T4078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.299791][ T4078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.303591][ T4078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.317011][ T4076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.317991][ T4076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.321677][ T4076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.325417][ T4082] team0: Port device team_slave_0 added [ 303.333244][ T4083] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.334508][ T4083] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.336564][ T4083] device bridge_slave_0 entered promiscuous mode [ 303.355765][ T4076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.357165][ T4076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.360910][ T4076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.388434][ T4078] device hsr_slave_0 entered promiscuous mode [ 303.426208][ T4078] device hsr_slave_1 entered promiscuous mode [ 303.467352][ T4082] team0: Port device team_slave_1 added [ 303.468899][ T4083] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.470035][ T4083] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.471791][ T4083] device bridge_slave_1 entered promiscuous mode [ 303.475548][ T4077] team0: Port device team_slave_0 added [ 303.478230][ T4077] team0: Port device team_slave_1 added [ 303.502344][ T4082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.503370][ T4082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.507458][ T4082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.542823][ T4082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.544066][ T4082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.547947][ T4082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.562356][ T4077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.563499][ T4077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.567479][ T4077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.585334][ T4083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.587313][ T4077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.588470][ T4077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.592425][ T4077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.596611][ T4083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.677963][ T4076] device hsr_slave_0 entered promiscuous mode [ 303.716508][ T4076] device hsr_slave_1 entered promiscuous mode [ 303.756148][ T4076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.757906][ T4076] Cannot create hsr debugfs directory [ 303.801940][ T4083] team0: Port device team_slave_0 added [ 303.877989][ T4077] device hsr_slave_0 entered promiscuous mode [ 303.916402][ T4077] device hsr_slave_1 entered promiscuous mode [ 303.955920][ T4077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.957237][ T4077] Cannot create hsr debugfs directory [ 303.959290][ T4083] team0: Port device team_slave_1 added [ 304.017982][ T4082] device hsr_slave_0 entered promiscuous mode [ 304.076315][ T4082] device hsr_slave_1 entered promiscuous mode [ 304.116062][ T4082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.117350][ T4082] Cannot create hsr debugfs directory [ 304.143853][ T4083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.144825][ T4083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.149347][ T4083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.177704][ T4083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.178864][ T4083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.182515][ T4083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.348165][ T4083] device hsr_slave_0 entered promiscuous mode [ 304.396367][ T4083] device hsr_slave_1 entered promiscuous mode [ 304.436319][ T4083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.437525][ T4083] Cannot create hsr debugfs directory [ 304.544579][ T4078] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 304.576751][ T1533] Bluetooth: hci3: command 0x0409 tx timeout [ 304.586588][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 304.588131][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 304.589013][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 304.589993][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 304.618146][ T4078] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 304.671396][ T4078] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 304.744731][ T4078] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 304.814330][ T4077] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 304.870460][ T4077] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 304.917938][ T4077] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 304.960265][ T4077] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 305.048778][ T4082] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 305.083227][ T4082] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 305.118575][ T4082] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 305.169922][ T4082] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 305.262851][ T4076] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 305.289248][ T4076] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 305.330759][ T4076] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 305.398206][ T4076] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 305.499788][ T4083] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 305.525180][ T4078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.533990][ T4083] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 305.558516][ T4083] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 305.608095][ T4083] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 305.689307][ T4078] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.695468][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.698079][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.709756][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 305.711484][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.713529][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.714612][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.720019][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.737466][ T4077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.756967][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 305.758936][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.760618][ T1699] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.761673][ T1699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.783017][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.784705][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.788835][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 305.802835][ T4077] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.804802][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 305.819387][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 305.821601][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 305.823580][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 305.826900][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 305.831638][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 305.843220][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 305.845591][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 305.850962][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 305.852871][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.854761][ T1604] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.855914][ T1604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.862776][ T4082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.867756][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.872513][ T4078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.882047][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 305.883713][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 305.893405][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 305.895359][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.897923][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.898960][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.915072][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 305.917548][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.919130][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.926967][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 305.932308][ T4082] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.941882][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 305.943845][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 305.945692][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 305.959084][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 305.961015][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 305.972930][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 305.974835][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.977252][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.978320][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.979811][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.993532][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 305.995550][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 305.997915][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 305.999613][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.001498][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.002624][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.015540][ T4076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.023500][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.025504][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.029214][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.031136][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.032915][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.035175][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.040388][ T4077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 306.050788][ T4083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.060860][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.062618][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 306.064131][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.065564][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.068760][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.077889][ T4076] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.087804][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.089707][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.091393][ T1604] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.092489][ T1604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.094140][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.109816][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 306.111664][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.120395][ T4083] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.130335][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.132146][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.133736][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.134807][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.142134][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 306.143340][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 306.144592][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.147307][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.154047][ T4078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.162115][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.176932][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.178820][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.180492][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.181582][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.183402][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.201274][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.202864][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.204472][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.211645][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 306.212909][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 306.219218][ T4082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 306.227408][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.229160][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.230680][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.231771][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.233261][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.235346][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.240540][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.263591][ T4077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.265986][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.267901][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.269806][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.273255][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.274942][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.278969][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.280901][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.299411][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 306.301465][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.303408][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.311926][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 306.338698][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.340942][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.343804][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.354076][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 306.356878][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.358830][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.360666][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.372407][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.374184][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.376881][ T4078] device veth0_vlan entered promiscuous mode [ 306.395184][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.397339][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.401971][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 306.403923][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.410749][ T4083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.413074][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 306.418346][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.420052][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.423530][ T4078] device veth1_vlan entered promiscuous mode [ 306.440965][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 306.442813][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 306.444433][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 306.447956][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 306.459023][ T4082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.492226][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 306.493903][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.502565][ T4078] device veth0_macvtap entered promiscuous mode [ 306.508635][ T4078] device veth1_macvtap entered promiscuous mode [ 306.524262][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.526344][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.528051][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 306.529781][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.531517][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 306.533367][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 306.545749][ T4077] device veth0_vlan entered promiscuous mode [ 306.563643][ T4077] device veth1_vlan entered promiscuous mode [ 306.567631][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 306.569411][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 306.571143][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.597287][ T4082] device veth0_vlan entered promiscuous mode [ 306.604042][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 306.605338][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 306.607073][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 306.609045][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.610841][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.612518][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.619440][ T4076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.630200][ T4078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.637791][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 306.639542][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.641430][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.652248][ T4082] device veth1_vlan entered promiscuous mode [ 306.656947][ T4147] Bluetooth: hci0: command 0x041b tx timeout [ 306.657565][ T4078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.658613][ T4147] Bluetooth: hci2: command 0x041b tx timeout [ 306.659832][ T4147] Bluetooth: hci4: command 0x041b tx timeout [ 306.660816][ T4147] Bluetooth: hci1: command 0x041b tx timeout [ 306.661333][ T4078] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.663234][ T4078] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.664438][ T4078] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.665680][ T4078] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.666689][ T4147] Bluetooth: hci3: command 0x041b tx timeout [ 306.671183][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 306.672864][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 306.674629][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.678462][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 306.680146][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 306.699859][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 306.701614][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 306.702738][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 306.729226][ T4083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.745315][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 306.747392][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.753781][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 306.755590][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.770816][ T4082] device veth0_macvtap entered promiscuous mode [ 306.774783][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 306.777372][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 306.779123][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.783349][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.785091][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.790871][ T4076] device veth0_vlan entered promiscuous mode [ 306.795776][ T4077] device veth0_macvtap entered promiscuous mode [ 306.809389][ T4082] device veth1_macvtap entered promiscuous mode [ 306.820152][ T4077] device veth1_macvtap entered promiscuous mode [ 306.838541][ T4076] device veth1_vlan entered promiscuous mode [ 306.879343][ T4082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.880871][ T4082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.885415][ T4082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.898420][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 306.900356][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 306.902074][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 306.903840][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 306.905705][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 306.909307][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.911246][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.922224][ T4082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.923990][ T4082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.928036][ T4082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.939442][ T4077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.940941][ T4077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.942398][ T4077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.943985][ T4077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.948691][ T4077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.953930][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 306.955747][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 306.958315][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.959988][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.969069][ T4077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.970827][ T4077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.972325][ T4077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.973807][ T4077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.978375][ T4077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.988775][ T1699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.990048][ T1699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.998025][ T1604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.998840][ T4082] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.999393][ T1604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.001764][ T4082] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.003102][ T4082] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.004268][ T4082] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.010382][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.012114][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.013834][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 307.015520][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 307.022563][ T4077] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.023928][ T4077] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.025273][ T4077] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.027879][ T4077] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.048099][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.049810][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.051466][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.053041][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.064852][ T4076] device veth0_macvtap entered promiscuous mode [ 307.103866][ T4076] device veth1_macvtap entered promiscuous mode [ 307.145087][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 307.148357][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 307.149974][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.151663][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.175932][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.177590][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.195000][ T4083] device veth0_vlan entered promiscuous mode [ 307.198270][ T4076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.199840][ T4076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.201965][ T4076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.203612][ T4076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.205114][ T4076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.213688][ T4076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.216582][ T4076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.232113][ T4083] device veth1_vlan entered promiscuous mode [ 307.235092][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 307.237052][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 307.238929][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 307.242230][ T4076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.243880][ T4076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.245384][ T4076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.248254][ T4076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.249643][ T4076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.251270][ T4076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.253988][ T4076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.255303][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.259571][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.272543][ T376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.273748][ T376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.275616][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 307.284437][ T4076] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.285677][ T4076] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.297614][ T4076] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.298840][ T4076] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.349891][ T4083] device veth0_macvtap entered promiscuous mode [ 307.363924][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 307.365747][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.371130][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.385667][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 307.407236][ T4083] device veth1_macvtap entered promiscuous mode [ 307.446035][ T376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.447347][ T376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.463616][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.465001][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.489837][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 307.492143][ T4191] team0: Port device batadv1 added [ 307.493658][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 307.495291][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 307.499343][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 307.541767][ T4083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.543289][ T4083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.544878][ T4083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.565216][ T4083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.572503][ T4083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.573990][ T4083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.575414][ T4083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.580245][ T4083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.603120][ T4083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.636856][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 307.638665][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 307.676625][ T376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.677866][ T376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.705236][ T4083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.709945][ T4083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.717092][ T4083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.720938][ T4083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.726763][ T4083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.730877][ T4083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.734737][ T4083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.744186][ T4083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.751112][ T4083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.759041][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 307.761097][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.763177][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.766677][ T4195] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 307.767929][ T4195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 307.769976][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.771887][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.772995][ T4195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.793660][ T376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.794922][ T376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.865251][ T4197] udc-core: couldn't find an available UDC or it's busy [ 307.867001][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 307.870012][ T4083] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.871468][ T4083] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.872822][ T4083] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.874173][ T4083] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.879852][ T4197] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 307.921416][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.922698][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.934109][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 307.940669][ T4199] udc-core: couldn't find an available UDC or it's busy [ 307.941673][ T4199] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 308.386171][ T26] audit: type=1326 audit(308.280:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4198 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff997f4c28 code=0x7ffc0000 [ 308.476650][ T26] audit: type=1326 audit(308.290:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4198 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff997f4c28 code=0x7ffc0000 [ 308.601315][ T26] audit: type=1326 audit(308.290:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4198 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff997f4c28 code=0x7ffc0000 [ 308.723253][ T26] audit: type=1326 audit(308.300:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4198 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff997f4c28 code=0x7ffc0000 [ 308.894356][ T4192] Bluetooth: hci3: command 0x040f tx timeout [ 308.895641][ T4192] Bluetooth: hci1: command 0x040f tx timeout [ 308.897683][ T4192] Bluetooth: hci4: command 0x040f tx timeout [ 308.899172][ T4192] Bluetooth: hci2: command 0x040f tx timeout [ 308.900416][ T4192] Bluetooth: hci0: command 0x040f tx timeout [ 308.923776][ T26] audit: type=1326 audit(308.300:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4198 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff997f4c28 code=0x7ffc0000 [ 308.928052][ T26] audit: type=1326 audit(308.300:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4198 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff997f4c28 code=0x7ffc0000 [ 308.931401][ T26] audit: type=1326 audit(308.320:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4198 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff997f4c28 code=0x7ffc0000 [ 308.972576][ T26] audit: type=1326 audit(308.330:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4198 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff997f4c28 code=0x7ffc0000 [ 309.026907][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.028298][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.031591][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 309.093359][ T1604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.094524][ T1604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.115711][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 309.306304][ T4203] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 309.336632][ T4212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.546357][ T4203] usb 1-1: Using ep0 maxpacket: 32 [ 309.666122][ T4203] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 309.826221][ T4203] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 309.828807][ T4203] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 309.830338][ T4203] usb 1-1: Product: syz [ 309.830943][ T4203] usb 1-1: Manufacturer: syz [ 309.831667][ T4203] usb 1-1: SerialNumber: syz [ 309.847398][ T4203] usb 1-1: config 0 descriptor?? [ 309.866921][ T4207] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 310.410264][ T4143] usb 1-1: USB disconnect, device number 2 [ 310.831566][ T4227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 310.896331][ T4085] Bluetooth: hci3: command 0x0419 tx timeout [ 310.976516][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 310.977705][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 310.978739][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 310.979783][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 311.751268][ T4235] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.753260][ T4235] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.356962][ T4256] binder: 4255:4256 tried to acquire reference to desc 0, got 1 instead [ 313.359053][ T4256] binder: 4255:4256 not enough space to store 5 fds in buffer [ 313.360402][ T4256] binder: 4255:4256 transaction failed 29201/-22, size 112-24 line 3331 [ 313.369789][ T21] binder: undelivered TRANSACTION_ERROR: 29201 [ 313.580186][ T4235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.722112][ T4235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.171946][ T4235] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.173381][ T4235] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.174796][ T4235] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.176332][ T4235] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.387071][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.388861][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.414975][ T4244] netlink: 96 bytes leftover after parsing attributes in process `syz.0.16'. [ 315.436968][ T4254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.546903][ T4254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.071089][ T4288] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 316.072351][ T4288] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 316.122401][ T4288] vhci_hcd vhci_hcd.0: Device attached [ 316.324466][ T4290] vhci_hcd: connection closed [ 316.328166][ T148] vhci_hcd: stop threads [ 316.329919][ T148] vhci_hcd: release socket [ 316.331886][ T148] vhci_hcd: disconnect device [ 316.386025][ T4124] usb 2-1: new low-speed USB device number 2 using vhci_hcd [ 316.387216][ T4124] usb 2-1: enqueue for inactive port 0 [ 316.466071][ T4124] vhci_hcd: vhci_device speed not set [ 317.945820][ C1] sched: RT throttling activated [ 318.313120][ T4318] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 318.314159][ T4318] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 318.397561][ T4318] vhci_hcd vhci_hcd.0: Device attached [ 318.468660][ T4321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.504259][ T4321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'. [ 318.688225][ T4321] team0 (unregistering): Port device team_slave_0 removed [ 318.792794][ T4321] team0 (unregistering): Port device team_slave_1 removed [ 318.862540][ T4321] team0 (unregistering): Port device batadv1 removed [ 320.662689][ T13] usb 8-1: new high-speed USB device number 2 using vhci_hcd [ 321.104856][ T4124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 321.109332][ T4124] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 321.427232][ T4319] vhci_hcd: connection reset by peer [ 321.428810][ T4201] vhci_hcd: stop threads [ 321.429520][ T4201] vhci_hcd: release socket [ 321.430397][ T4201] vhci_hcd: disconnect device [ 322.030566][ T4365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.48'. [ 322.308874][ T4375] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 324.119145][ T4399] netlink: 'syz.4.66': attribute type 1 has an invalid length. [ 325.079554][ T4410] udc-core: couldn't find an available UDC or it's busy [ 325.080689][ T4410] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 325.707532][ T4424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.77'. [ 325.796052][ T13] vhci_hcd: vhci_device speed not set [ 328.985066][ T4498] ksmbd: Unknown IPC event: 6, ignore. [ 330.438561][ T4516] udc-core: couldn't find an available UDC or it's busy [ 330.439739][ T4516] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 331.600596][ T4522] mmap: syz.4.115 (4522) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 333.915231][ T4566] udc-core: couldn't find an available UDC or it's busy [ 333.917406][ T4566] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 334.008498][ T4572] netlink: 32 bytes leftover after parsing attributes in process `syz.3.132'. [ 334.258534][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.260267][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.886566][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.955564][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.712756][ T4570] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.714154][ T4570] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.715475][ T4570] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.717077][ T4570] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.950130][ T4576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'. [ 337.954331][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 337.968319][ T4611] device bond0 entered promiscuous mode [ 337.969141][ T4611] device bond_slave_0 entered promiscuous mode [ 337.970142][ T4611] device bond_slave_1 entered promiscuous mode [ 339.006936][ T4633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 339.214208][ T4648] tipc: Enabling of bearer rejected, failed to enable media [ 341.174128][ T4669] device syzkaller0 entered promiscuous mode [ 341.315520][ T26] audit: type=1326 audit(341.280:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaead0c28 code=0x7ffc0000 [ 341.338566][ T26] audit: type=1326 audit(341.300:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=91 compat=0 ip=0xffffaead0c28 code=0x7ffc0000 [ 341.344674][ T26] audit: type=1326 audit(341.310:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaead0c28 code=0x7ffc0000 [ 342.393070][ T13] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 342.394369][ T13] Bluetooth: hci0: Injecting HCI hardware error event [ 342.396392][ T4081] Bluetooth: hci0: hardware error 0x00 [ 342.869267][ T4717] 9pnet_virtio: no channels available for device syz [ 344.038045][ T4736] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 344.189607][ T4739] capability: warning: `syz.3.183' uses 32-bit capabilities (legacy support in use) [ 346.464793][ T4764] ksmbd: Unknown IPC event: 6, ignore. [ 346.658822][ T4769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.194'. [ 346.690271][ T4769] HTB: quantum of class 80020005 is small. Consider r2q change. [ 346.691550][ T4771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 346.692706][ T4769] dlm: dev_write: no op 0 0 [ 347.982505][ T144] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 348.745598][ T4809] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 348.746768][ T4809] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 348.755299][ T4809] vhci_hcd vhci_hcd.0: Device attached [ 349.041529][ T4124] usb 6-1: new low-speed USB device number 2 using vhci_hcd [ 349.045405][ T4814] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 349.046439][ T4814] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 349.049274][ T4814] vhci_hcd vhci_hcd.0: Device attached [ 349.099401][ T4814] netdevsim netdevsim0: Direct firmware load for @ failed with error -2 [ 349.100779][ T4814] netdevsim netdevsim0: Falling back to sysfs fallback for: @ [ 349.233005][ T4817] vhci_hcd: connection closed [ 349.234206][ T136] vhci_hcd: stop threads [ 349.235584][ T136] vhci_hcd: release socket [ 349.249969][ T136] vhci_hcd: disconnect device [ 349.290074][ T13] vhci_hcd: vhci_device speed not set [ 349.651431][ T4828] udc-core: couldn't find an available UDC or it's busy [ 349.652520][ T4828] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 349.821940][ T4830] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 349.823007][ T4830] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 349.826782][ T4830] vhci_hcd vhci_hcd.0: Device attached [ 349.853135][ T4830] netdevsim netdevsim1: Direct firmware load for @ failed with error -2 [ 349.854411][ T4830] netdevsim netdevsim1: Falling back to sysfs fallback for: @ [ 349.864182][ T4828] udc-core: couldn't find an available UDC or it's busy [ 349.865353][ T4828] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 350.235274][ T21] usb 4-1: new low-speed USB device number 2 using vhci_hcd [ 351.104756][ T4810] vhci_hcd: connection reset by peer [ 351.106236][ T1604] vhci_hcd: stop threads [ 351.106994][ T1604] vhci_hcd: release socket [ 351.107652][ T1604] vhci_hcd: disconnect device [ 351.471611][ T4848] loop3: detected capacity change from 0 to 256 [ 352.776478][ T4831] vhci_hcd: connection reset by peer [ 352.805282][ T4662] vhci_hcd: stop threads [ 352.806141][ T4662] vhci_hcd: release socket [ 352.806760][ T4662] vhci_hcd: disconnect device [ 353.005410][ T4866] binder: 4864:4866 tried to acquire reference to desc 0, got 1 instead [ 353.009209][ T4866] binder: 4864:4866 ioctl c0306201 0 returned -14 [ 353.019080][ T4866] binder: 4864:4866 ioctl c0306201 0 returned -14 [ 353.021274][ T4085] binder: undelivered TRANSACTION_COMPLETE [ 353.022079][ T4085] binder: undelivered TRANSACTION_COMPLETE [ 353.044071][ T13] binder: undelivered transaction 11, process died. [ 353.045219][ T13] binder: undelivered transaction 10, process died. [ 354.266196][ T4124] vhci_hcd: vhci_device speed not set [ 356.187134][ T21] vhci_hcd: vhci_device speed not set [ 356.855307][ T4925] loop3: detected capacity change from 0 to 2048 [ 356.966606][ T4925] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 357.260125][ T4939] netlink: 452 bytes leftover after parsing attributes in process `syz.2.255'. [ 357.544981][ T4947] udc-core: couldn't find an available UDC or it's busy [ 357.556385][ T4947] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 357.677097][ T21] Bluetooth: hci4: command 0x0405 tx timeout [ 358.773379][ T4963] loop4: detected capacity change from 0 to 1024 [ 358.894730][ T4963] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 358.908238][ T4970] loop3: detected capacity change from 0 to 256 [ 359.033098][ T4959] loop1: detected capacity change from 0 to 32768 [ 359.060655][ T4959] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.263 (4959) [ 359.103264][ T4959] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 359.104997][ T4959] BTRFS info (device loop1): using free space tree [ 359.113146][ T4959] BTRFS info (device loop1): has skinny extents [ 360.194341][ T4959] BTRFS info (device loop1): enabling ssd optimizations [ 360.249499][ T4959] BTRFS info (device loop1): scrub: started on devid 1 [ 360.272973][ T4959] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0 [ 360.395260][ T5013] loop0: detected capacity change from 0 to 64 [ 360.414516][ T26] audit: type=1326 audit(360.380:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbce70c28 code=0x7ffc0000 [ 360.430568][ T26] audit: type=1326 audit(360.400:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffbce70c28 code=0x7ffc0000 [ 360.434190][ T26] audit: type=1326 audit(360.400:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbce70c28 code=0x7ffc0000 [ 360.454519][ T26] audit: type=1326 audit(360.420:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=267 compat=0 ip=0xffffbce70c28 code=0x7ffc0000 [ 360.469440][ T26] audit: type=1326 audit(360.420:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbce70c28 code=0x7ffc0000 [ 360.896328][ T1533] Bluetooth: hci1: command 0x0406 tx timeout [ 361.546944][ T5021] loop4: detected capacity change from 0 to 4096 [ 361.610091][ T5021] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 361.805959][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 362.317377][ T5037] fuse: Invalid rootmode [ 363.186036][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 363.257656][ T4070] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (4070) [ 363.306725][ T13] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 363.308416][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.310062][ T13] usb 1-1: config 0 has no interface number 0 [ 363.466372][ T13] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 363.467877][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.469113][ T13] usb 1-1: Product: syz [ 363.469733][ T13] usb 1-1: Manufacturer: syz [ 363.470870][ T13] usb 1-1: SerialNumber: syz [ 363.477343][ T13] usb 1-1: config 0 descriptor?? [ 364.230092][ T5054] binder: 5052:5054 tried to acquire reference to desc 0, got 1 instead [ 364.248172][ T5054] binder: 5052:5054 got transaction with invalid offset (24, min 24 max 39) or object. [ 364.249768][ T5054] binder: 5052:5054 transaction failed 29201/-22, size 39-24 line 3199 [ 364.278877][ T4231] binder: undelivered TRANSACTION_ERROR: 29201 [ 364.284807][ T13] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 364.286254][ T13] usb 1-1: No valid video chain found. [ 364.343189][ T4138] usb 1-1: USB disconnect, device number 3 [ 364.409148][ T5065] udc-core: couldn't find an available UDC or it's busy [ 364.410195][ T5065] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 364.567628][ T5073] udc-core: couldn't find an available UDC or it's busy [ 364.572761][ T5073] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 365.252196][ T5057] loop1: detected capacity change from 0 to 32768 [ 365.403239][ T5057] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 365.404699][ T5057] BTRFS info (device loop1): using free space tree [ 365.408082][ T5057] BTRFS info (device loop1): has skinny extents [ 367.656385][ T5057] BTRFS error (device loop1): open_ctree failed: -12 [ 370.600155][ T5147] binder: 5146:5147 tried to acquire reference to desc 0, got 1 instead [ 370.627377][ T5147] binder: 5146:5147 got transaction with invalid handle, 2 [ 370.628700][ T5147] binder: 5146:5147 transaction failed 29201/-22, size 72-24 line 3242 [ 370.642178][ T1962] binder: undelivered TRANSACTION_ERROR: 29201 [ 371.721520][ T5172] udc-core: couldn't find an available UDC or it's busy [ 371.722649][ T5172] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 372.207574][ T5180] netlink: 36 bytes leftover after parsing attributes in process `syz.0.323'. [ 373.000125][ T5167] loop1: detected capacity change from 0 to 32768 [ 373.583500][ T5185] loop2: detected capacity change from 0 to 131072 [ 374.331202][ T5195] syz.4.328 uses obsolete (PF_INET,SOCK_PACKET) [ 374.806227][ T5194] Zero length message leads to an empty skb [ 374.959326][ T5194] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 374.960909][ T5194] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 375.009759][ T5193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 375.012203][ T5193] IPVS: Error joining to the multicast group [ 375.159750][ T5185] F2FS-fs (loop2): invalid crc value [ 375.358465][ T5185] F2FS-fs (loop2): Found nat_bits in checkpoint [ 375.375732][ T5185] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 375.396079][ T5185] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 375.601654][ T5203] loop4: detected capacity change from 0 to 4096 [ 375.636724][ T5203] ======================================================= [ 375.636724][ T5203] WARNING: The mand mount option has been deprecated and [ 375.636724][ T5203] and is ignored by this kernel. Remove the mand [ 375.636724][ T5203] option from the mount to silence this warning. [ 375.636724][ T5203] ======================================================= [ 375.693234][ T5203] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 375.696763][ T5203] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 375.697986][ T5203] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 375.699067][ T5203] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 375.700332][ T5203] ntfs3: loop4: try to read out of volume at offset 0x3fffffc1c00 [ 375.701581][ T5203] ntfs3: loop4: try to read out of volume at offset 0x3fffffc2c00 [ 375.702666][ T5203] ntfs3: loop4: try to read out of volume at offset 0x3fffffc4c00 [ 375.741866][ T5203] ntfs3: loop4: try to read out of volume at offset 0x3fffffc8c00 [ 375.747680][ T5203] ntfs3: loop4: try to read out of volume at offset 0x3fffffd0c00 [ 375.753741][ T5203] ntfs3: loop4: try to read out of volume at offset 0x3fffffe0c00 [ 376.042493][ T5218] loop3: detected capacity change from 0 to 2048 [ 376.069078][ T5218] loop3: p2 p3 < > p4 < p5 > [ 376.069881][ T5218] loop3: partition table partially beyond EOD, truncated [ 376.086626][ T5218] loop3: p3 start 4284289 is beyond EOD, truncated [ 376.170656][ T5220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.334'. [ 376.213177][ T5218] loop3: detected capacity change from 0 to 512 [ 376.554998][ T5227] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 376.559259][ T5227] CIFS mount error: No usable UNC path provided in device string! [ 376.559259][ T5227] [ 376.561253][ T5227] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 376.819755][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.820960][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.232301][ T5232] loop3: detected capacity change from 0 to 1024 [ 377.457999][ T1699] hfsplus: b-tree write err: -5, ino 4 [ 378.764552][ T5249] udc-core: couldn't find an available UDC or it's busy [ 378.765558][ T5249] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 378.787501][ T5242] loop2: detected capacity change from 0 to 4096 [ 378.800273][ T5242] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 379.058526][ T5255] loop1: detected capacity change from 0 to 32768 [ 379.128803][ T5255] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.349 (5255) [ 379.171135][ T5255] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 379.172415][ T5255] BTRFS info (device loop1): using free space tree [ 379.173403][ T5255] BTRFS info (device loop1): has skinny extents [ 379.362037][ T5255] BTRFS info (device loop1): enabling ssd optimizations [ 379.402226][ T5255] BTRFS error (device loop1): balance: mixed groups data and metadata options must be the same [ 379.475580][ T4216] udevd[4216]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 379.500452][ T4656] udevd[4656]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 379.551746][ T4070] udevd[4070]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 380.918598][ T5314] loop3: detected capacity change from 0 to 2048 [ 381.006656][ T5315] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 381.150306][ T5317] udc-core: couldn't find an available UDC or it's busy [ 381.151369][ T5317] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 381.541302][ T5310] loop4: detected capacity change from 0 to 32768 [ 381.578949][ T5310] (syz.4.361,5310,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 381.583572][ T5310] (syz.4.361,5310,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 381.639232][ T5310] JBD2: Ignoring recovery information on journal [ 381.694122][ T5310] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 381.837251][ T4083] ocfs2: Unmounting device (7,4) on (node local) [ 381.903255][ T5323] proc: Bad value for 'gid' [ 381.991136][ T5327] udc-core: couldn't find an available UDC or it's busy [ 381.992224][ T5327] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 382.243398][ T5328] loop3: detected capacity change from 0 to 4096 [ 382.279082][ T5328] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 383.770811][ T5346] udc-core: couldn't find an available UDC or it's busy [ 383.771892][ T5346] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 383.800878][ T5348] udc-core: couldn't find an available UDC or it's busy [ 383.802253][ T5348] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 385.521430][ T26] audit: type=1326 audit(384.920:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbce70c28 code=0x7ffc0000 [ 385.526577][ T26] audit: type=1326 audit(384.930:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffbce70c28 code=0x7ffc0000 [ 385.529975][ T26] audit: type=1326 audit(384.950:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbce70c28 code=0x7ffc0000 [ 385.536346][ T26] audit: type=1326 audit(384.960:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffffbce70c28 code=0x7ffc0000 [ 385.543251][ T26] audit: type=1326 audit(384.960:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbce70c28 code=0x7ffc0000 [ 385.551073][ T26] audit: type=1326 audit(384.960:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffbce70c28 code=0x7ffc0000 [ 385.557636][ T26] audit: type=1326 audit(384.970:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbce70c28 code=0x7ffc0000 [ 385.563195][ T26] audit: type=1326 audit(384.980:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbce70c28 code=0x7ffc0000 [ 386.890198][ T5352] loop3: detected capacity change from 0 to 131072 [ 388.319944][ T5352] fscrypt: Error allocating hmac(sha512): -2 [ 388.321033][ T5352] F2FS-fs (loop3): Error processing option "test_dummy_encryption" [-2] [ 388.590299][ T5394] udc-core: couldn't find an available UDC or it's busy [ 388.591454][ T5394] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 390.211615][ T5410] loop2: detected capacity change from 0 to 1024 [ 390.279248][ T5410] EXT4-fs (loop2): Ignoring removed nobh option [ 390.280306][ T5410] EXT4-fs (loop2): Ignoring removed bh option [ 390.281200][ T5410] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 390.326369][ T5410] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 390.514785][ T5419] loop1: detected capacity change from 0 to 64 [ 391.645322][ T5427] udc-core: couldn't find an available UDC or it's busy [ 391.646743][ T5427] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 391.791133][ T5430] delete_channel: no stack [ 392.005745][ T5436] udc-core: couldn't find an available UDC or it's busy [ 392.007429][ T5436] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 392.618049][ T5448] loop4: detected capacity change from 0 to 256 [ 392.809674][ T5448] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 392.811577][ T5448] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 392.840354][ T5448] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x2d0d25cc, utbl_chksum : 0xe619d30d) [ 394.697402][ T5471] [U] vÔ3 [ 396.214251][ T5500] loop0: detected capacity change from 0 to 2048 [ 396.322647][ T5504] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 396.332438][ T5500] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 396.343238][ T5500] Remounting filesystem read-only [ 397.224311][ T5515] netlink: 'syz.2.436': attribute type 10 has an invalid length. [ 397.283462][ T5518] udc-core: couldn't find an available UDC or it's busy [ 397.284655][ T5518] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 397.371172][ T5522] tipc: Enabling of bearer rejected, failed to enable media [ 397.523196][ T5536] 9pnet: Could not find request transport: xen [ 397.735545][ T5545] netlink: 'syz.3.447': attribute type 10 has an invalid length. [ 397.841549][ T5545] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 397.917974][ T5544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.092994][ T26] audit: type=1326 audit(400.000:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc963c28 code=0x7ffc0000 [ 400.110600][ T26] audit: type=1326 audit(400.000:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc963c28 code=0x7ffc0000 [ 400.136203][ T26] audit: type=1326 audit(400.000:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=1 compat=0 ip=0xffffbc963c28 code=0x7ffc0000 [ 400.175395][ T26] audit: type=1326 audit(400.140:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc963c28 code=0x7ffc0000 [ 400.262189][ T5585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.458'. [ 400.915792][ T26] audit: type=1326 audit(400.140:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc963c28 code=0x7ffc0000 [ 400.982309][ T5589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 401.097892][ T5598] loop0: detected capacity change from 0 to 2048 [ 401.145712][ T5606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'. [ 401.147585][ T5598] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 402.542337][ T5617] hub 6-0:1.0: USB hub found [ 402.546409][ T5617] hub 6-0:1.0: 8 ports detected [ 404.168489][ T5638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 405.041345][ T5645] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input4 [ 406.575118][ T5670] udc-core: couldn't find an available UDC or it's busy [ 406.576273][ T5670] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 410.473379][ T5695] lo speed is unknown, defaulting to 1000 [ 410.477765][ T5695] lo speed is unknown, defaulting to 1000 [ 410.479798][ T5695] lo speed is unknown, defaulting to 1000 [ 410.531469][ T1962] lo speed is unknown, defaulting to 1000 [ 410.532680][ T5695] infiniband sz1: set active [ 410.533507][ T5695] infiniband sz1: added lo [ 410.613949][ T5695] RDS/IB: sz1: added [ 410.615313][ T5695] smc: adding ib device sz1 with port count 1 [ 410.622780][ T5695] smc: ib device sz1 port 1 has pnetid [ 410.634967][ T1962] lo speed is unknown, defaulting to 1000 [ 410.662469][ T5695] lo speed is unknown, defaulting to 1000 [ 410.855681][ T5695] lo speed is unknown, defaulting to 1000 [ 411.004853][ T5695] lo speed is unknown, defaulting to 1000 [ 411.923132][ T5695] lo speed is unknown, defaulting to 1000 [ 412.002848][ T5695] lo speed is unknown, defaulting to 1000 [ 412.906502][ T5294] Bluetooth: hci4: command 0x0405 tx timeout [ 412.952713][ T5714] @: renamed from vlan0 [ 417.272478][ T5764] udc-core: couldn't find an available UDC or it's busy [ 417.273490][ T5764] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 417.342423][ T5770] loop0: detected capacity change from 0 to 512 [ 417.405198][ T5773] loop1: detected capacity change from 0 to 16 [ 417.406973][ T5764] can: request_module (can-proto-0) failed. [ 417.548661][ T5773] erofs: (device loop1): mounted with root inode @ nid 36. [ 418.357415][ T5770] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 418.409278][ T5784] loop2: detected capacity change from 0 to 512 [ 418.451588][ T5784] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 418.499799][ T5787] udc-core: couldn't find an available UDC or it's busy [ 418.500965][ T5787] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 418.526494][ T4077] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 418.630175][ T5793] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 421.162855][ T5817] udc-core: couldn't find an available UDC or it's busy [ 421.163956][ T5817] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 422.898834][ T144] ------------[ cut here ]------------ [ 422.899974][ T144] WARNING: CPU: 0 PID: 144 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x1fc/0x424 [ 422.901277][ T144] Modules linked in: [ 422.901833][ T144] CPU: 0 PID: 144 Comm: kworker/u5:0 Not tainted 5.15.189-syzkaller #0 [ 422.903140][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 422.904688][ T144] Workqueue: hci1 hci_conn_timeout [ 422.905632][ T144] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 422.906830][ T144] pc : hci_conn_timeout+0x1fc/0x424 [ 422.907638][ T144] lr : hci_conn_timeout+0x1fc/0x424 [ 422.908452][ T144] sp : ffff80001be17b10 [ 422.909215][ T144] x29: ffff80001be17b10 x28: ffff0000c2dac000 x27: ffff0000c2a1ee18 [ 422.910402][ T144] x26: ffff0000c6cd2138 x25: ffff0000ce456c00 x24: dfff800000000000 [ 422.911601][ T144] x23: 1fffe00018d9a427 x22: dfff800000000000 x21: 00000000ffffffff [ 422.912885][ T144] x20: ffff0000c6cd2000 x19: ffff0000c6cd2138 x18: 1fffe00034218b96 [ 422.914241][ T144] x17: ffff800016d04000 x16: ffff8000111bc798 x15: ffff8000167e4500 [ 422.915534][ T144] x14: ffff0000c5402540 x13: dfff800000000000 x12: 0000000000ff0100 [ 422.916724][ T144] x11: 0000000000000000 x10: 0000000000000000 x9 : ffff8000104c9d6c [ 422.918081][ T144] x8 : ffff0000c5401b40 x7 : 0000000000000000 x6 : 0000000000000000 [ 422.919326][ T144] x5 : ffff800016d24a30 x4 : 0000000000000008 x3 : ffff8000104c9ba8 [ 422.920601][ T144] x2 : 0000000000000000 x1 : 00000000ffffffff x0 : 0000000000000000 [ 422.921799][ T144] Call trace: [ 422.922355][ T144] hci_conn_timeout+0x1fc/0x424 [ 422.923200][ T144] process_one_work+0x79c/0x1140 [ 422.923986][ T144] worker_thread+0x8f4/0x101c [ 422.924737][ T144] kthread+0x374/0x454 [ 422.925399][ T144] ret_from_fork+0x10/0x20 [ 422.926107][ T144] irq event stamp: 2360 [ 422.926845][ T144] hardirqs last enabled at (2359): [] _raw_spin_unlock_irq+0x98/0x128 [ 422.928262][ T144] hardirqs last disabled at (2360): [] el1_dbg+0x24/0x80 [ 422.929585][ T144] softirqs last enabled at (876): [] handle_softirqs+0xa4c/0xbf0 [ 422.931166][ T144] softirqs last disabled at (865): [] __irq_exit_rcu+0x240/0x440 [ 422.932639][ T144] ---[ end trace f8298a55ed2920af ]--- [ 424.512162][ T5833] sp0: Synchronizing with TNC [ 424.983297][ T5028] Bluetooth: hci2: command 0x0406 tx timeout [ 424.984350][ T5028] Bluetooth: hci3: command 0x0406 tx timeout