last executing test programs: 8.508910354s ago: executing program 3 (id=4): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.526171443s ago: executing program 1 (id=27): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_io_uring_setup(0x6841, 0x0, &(0x7f0000000300), &(0x7f0000000280)) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xfd4c) ioctl$NBD_DO_IT(r0, 0xab03) 4.481766013s ago: executing program 1 (id=36): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) writev(r0, &(0x7f0000001f00)=[{&(0x7f0000001ac0)="4df069", 0x3}], 0x1) 4.480916083s ago: executing program 1 (id=48): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r0, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 4.332956896s ago: executing program 1 (id=39): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40080) r1 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}}) write$char_usb(r3, &(0x7f0000000000)="97a5693083855ead7e", 0x9) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r5, 0x0, 0xfb3}, 0x18) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 3.957126983s ago: executing program 2 (id=44): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r1, 0x100000000) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) 3.813497006s ago: executing program 2 (id=45): prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_control_io(r0, 0x0, 0x0) write$char_usb(r1, &(0x7f00000005c0)="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", 0x141) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 3.752882167s ago: executing program 4 (id=47): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0xb, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0xb2, 0x6ff5, 0x9f5, 0x8, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0xa, 0x10, 0x8001, 0x5, 0x1, 0xd4a, 0xffefe87a, 0x1, 0x6, 0x9, 0x9, 0x8, 0x0, 0x0, 0xe, 0x1, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x7, 0x3ff, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0x400a2, 0x3, 0xffff, 0x3, 0x0, 0x9, 0xf, 0x101, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x1, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x6, 0x1, 0x1, 0x2, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x4, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0xffffffff, 0x9, 0x6, 0xffff, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x6, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x5, 0x8001, 0x7, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x1, 0x80000001, 0x53c2, 0x4, 0x2, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x400, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x266, 0x10000, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x8, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x6, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x0, 0x7, 0x3, 0x8241, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0x7, 0xf, 0x0, 0x100, 0x7, 0xd, 0x56be]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.573892671s ago: executing program 4 (id=49): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r2, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 3.381662824s ago: executing program 4 (id=50): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x4, 0x3}) 2.113661049s ago: executing program 1 (id=54): socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1bae885d4356a5ae}}, 0x80080) r2 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x1}, 0x0) ptrace(0x10, 0x0) ptrace$ARCH_SET_GS(0x1e, 0x0, 0x0, 0x1001) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000500)={r3, 0x80, 0x30}, 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x1, r4, 0x1, 0x12, 0x6, @broadcast}, 0x14) 1.954094612s ago: executing program 1 (id=55): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="400308"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0xe2, 0x7, &(0x7f0000000080)={0xfe, "53815fda5cddd02f1831c642d1e8526dcf6cfd8ead46eb19aa390d74794dfde636"}}) 1.236816016s ago: executing program 4 (id=56): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x1) 1.157488048s ago: executing program 4 (id=58): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000100)={0x4000, 0x114000, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 1.115358608s ago: executing program 2 (id=60): creat(&(0x7f0000000140)='./file0\x00', 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x280840, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$inet(0x2, 0xa, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) syz_io_uring_setup(0xe7, &(0x7f0000000140)={0x0, 0x5, 0x400, 0x6}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0xffffffffffffffff}) 1.03564347s ago: executing program 4 (id=61): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0) 937.403602ms ago: executing program 2 (id=63): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 693.630397ms ago: executing program 0 (id=66): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f00000000c0)={0xc000003, 0xf, &(0x7f0000000580)=[0x138d, 0x400b, 0x1, 0x4, 0x9, 0x1ed, 0x0, 0x2, 0xbb, 0xc58f, 0x2060, 0xfed, 0xfffffff9, 0x1ac, 0xfffffff8], 0x0, 0x2}) 684.706567ms ago: executing program 0 (id=67): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000100)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r3, 0xffffffffffffffff}) close_range(r0, r1, 0x0) ppoll(&(0x7f0000000140)=[{r4, 0x1fe}, {r1, 0xc0}], 0x2, 0x0, 0x0, 0x0) 643.575268ms ago: executing program 0 (id=68): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a00793439394b0e904b0e90f090f00f7fd89d53bf000000b9e16dc30101220f01c3", 0x6b}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 285.726105ms ago: executing program 0 (id=69): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x100, 0x12345}) r1 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x0, 0x0, 0x29f}, &(0x7f00000001c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x21, 0x0, 0x0) 262.875575ms ago: executing program 0 (id=70): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x1, &(0x7f00000001c0)='\x00', 0x48, 0x1, 0x7, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 136.057067ms ago: executing program 0 (id=71): prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_control_io(r0, 0x0, 0x0) write$char_usb(r1, &(0x7f00000005c0)="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", 0x141) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 81.629859ms ago: executing program 2 (id=72): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x204, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x1, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) fchdir(r1) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000007) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 0s ago: executing program 2 (id=73): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8f}, 0x19) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) dup3(r2, r3, 0x80000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.137' (ED25519) to the list of known hosts. [ 66.981927][ T4173] cgroup: Unknown subsys name 'net' [ 67.097346][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.660303][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.838020][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 70.927445][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 71.034072][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.045448][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.053941][ T4194] device bridge_slave_0 entered promiscuous mode [ 71.066490][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.073681][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.082136][ T4194] device bridge_slave_1 entered promiscuous mode [ 71.090295][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 71.164292][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 71.176840][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 71.196425][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.218804][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.226327][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.236440][ T4183] device bridge_slave_0 entered promiscuous mode [ 71.246599][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.277569][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.285036][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.293215][ T4183] device bridge_slave_1 entered promiscuous mode [ 71.335170][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.342603][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.350857][ T4184] device bridge_slave_0 entered promiscuous mode [ 71.384527][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.391799][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.399847][ T4184] device bridge_slave_1 entered promiscuous mode [ 71.422921][ T4194] team0: Port device team_slave_0 added [ 71.439390][ T4194] team0: Port device team_slave_1 added [ 71.455421][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.496248][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.507140][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.541469][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.548456][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.574708][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.589902][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.605806][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.613121][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.625611][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.626233][ T4197] device bridge_slave_0 entered promiscuous mode [ 71.632375][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.646524][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.654479][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.662679][ T4186] device bridge_slave_0 entered promiscuous mode [ 71.670340][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.677538][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.703913][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.730213][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.737445][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.746140][ T4197] device bridge_slave_1 entered promiscuous mode [ 71.753534][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.761194][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.769088][ T4186] device bridge_slave_1 entered promiscuous mode [ 71.793781][ T4183] team0: Port device team_slave_0 added [ 71.801971][ T4184] team0: Port device team_slave_0 added [ 71.830538][ T4183] team0: Port device team_slave_1 added [ 71.837843][ T4184] team0: Port device team_slave_1 added [ 71.861414][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.887685][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.914590][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.954156][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.966558][ T4194] device hsr_slave_0 entered promiscuous mode [ 71.974552][ T4194] device hsr_slave_1 entered promiscuous mode [ 71.982094][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.989062][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.015870][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.035456][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.042744][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.068789][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.096603][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.103879][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.130639][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.144267][ T4186] team0: Port device team_slave_0 added [ 72.154135][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.161653][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.187935][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.204721][ T4197] team0: Port device team_slave_0 added [ 72.223125][ T4186] team0: Port device team_slave_1 added [ 72.252629][ T4197] team0: Port device team_slave_1 added [ 72.262623][ T4183] device hsr_slave_0 entered promiscuous mode [ 72.269833][ T4183] device hsr_slave_1 entered promiscuous mode [ 72.276937][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.285625][ T4183] Cannot create hsr debugfs directory [ 72.345690][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.352778][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.379424][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.399470][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.407528][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.434354][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.448047][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.455476][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.482641][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.500384][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.502079][ T4198] Bluetooth: hci0: command 0x0409 tx timeout [ 72.508698][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 72.519411][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.526839][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 72.547472][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.576778][ T4184] device hsr_slave_0 entered promiscuous mode [ 72.584235][ T4184] device hsr_slave_1 entered promiscuous mode [ 72.591253][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 72.591472][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.597689][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 72.610847][ T4184] Cannot create hsr debugfs directory [ 72.668533][ T4197] device hsr_slave_0 entered promiscuous mode [ 72.677102][ T4197] device hsr_slave_1 entered promiscuous mode [ 72.687022][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.697110][ T4197] Cannot create hsr debugfs directory [ 72.811886][ T4186] device hsr_slave_0 entered promiscuous mode [ 72.821342][ T4186] device hsr_slave_1 entered promiscuous mode [ 72.827981][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.836033][ T4186] Cannot create hsr debugfs directory [ 73.082030][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.095350][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.108240][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.118787][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.187138][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.212300][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.230506][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.242071][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.330218][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.339999][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.355209][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.378256][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.389894][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.402703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.415677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.446045][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.501705][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.510539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.522196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.532485][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.540025][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.549846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.559560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.568759][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.575923][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.583896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.595732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.607022][ T4197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.618390][ T4197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.634665][ T4197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.649296][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.683586][ T4197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.709627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.718900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.727445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.736868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.747795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.757964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.769345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.778371][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.793912][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.810414][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.824625][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.834830][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.844995][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.855515][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.865292][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.881515][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.896343][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.906525][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.915561][ T1213] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.923310][ T1213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.941602][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.972804][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.989492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.998706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.008000][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.015370][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.072014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.083260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.133005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.143682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.154181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.163974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.189407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.197868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.213430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.229058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.238957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.263316][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.282754][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.321490][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.329547][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.340190][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.353855][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.396792][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.407872][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.417956][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.428893][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.436198][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.446093][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.454229][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.462354][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.473713][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.482837][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.490032][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.498367][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.510165][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.520064][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.532119][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.544398][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.579181][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.591491][ T4252] Bluetooth: hci2: command 0x041b tx timeout [ 74.603997][ T4252] Bluetooth: hci3: command 0x041b tx timeout [ 74.610538][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.621489][ T4252] Bluetooth: hci0: command 0x041b tx timeout [ 74.628973][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.643302][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.653627][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.667222][ T4269] Bluetooth: hci1: command 0x041b tx timeout [ 74.674666][ T4269] Bluetooth: hci4: command 0x041b tx timeout [ 74.705138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.714772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.725355][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.732881][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.744936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.754319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.763570][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.770757][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.779026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.788106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.796839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.806182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.814692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.823831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.832562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.841971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.853596][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.885062][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.895578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.907394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.930029][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.946347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.958990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.972510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.988742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.997863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.007368][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.017208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.027574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.037103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.045494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.054115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.071939][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.098186][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.109827][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.129862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.138612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.148666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.157808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.168911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.178490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.194209][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.201727][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.210007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.219528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.229539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.238800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.247707][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.255370][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.263678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.272270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.291829][ T4194] device veth0_vlan entered promiscuous mode [ 75.332703][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.340475][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.350822][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.359959][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.382522][ T4194] device veth1_vlan entered promiscuous mode [ 75.435979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.448382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.457773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.467085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.476379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.486405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.495857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.507470][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.542149][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.557085][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.567054][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.576798][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.593965][ T4184] device veth0_vlan entered promiscuous mode [ 75.607825][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.634928][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.643932][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.655010][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.664399][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.679476][ T4184] device veth1_vlan entered promiscuous mode [ 75.691320][ T4194] device veth0_macvtap entered promiscuous mode [ 75.709332][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.726642][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.736587][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.752102][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.760582][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.769736][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.781965][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.789548][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.810179][ T4194] device veth1_macvtap entered promiscuous mode [ 75.837291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.852338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.878877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.922900][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.933226][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.950378][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.971194][ T4184] device veth0_macvtap entered promiscuous mode [ 75.999464][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.019623][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.029795][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.053576][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.062856][ T4184] device veth1_macvtap entered promiscuous mode [ 76.085414][ T4183] device veth0_vlan entered promiscuous mode [ 76.093204][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.104651][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.116393][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.126999][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.138822][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.147576][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.173551][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.185077][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.208522][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.218883][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.228553][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.238056][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.247302][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.281604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.291418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.300601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.310123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.324718][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.337500][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.352407][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.361662][ T4183] device veth1_vlan entered promiscuous mode [ 76.391453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.400295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.409867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.419051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.427214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.438695][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.448001][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.456910][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.467011][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.506702][ T4197] device veth0_vlan entered promiscuous mode [ 76.536710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.546326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.555553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.568200][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.593537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.607603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.615926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.624914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.648135][ T4183] device veth0_macvtap entered promiscuous mode [ 76.663216][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 76.671710][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 76.678082][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 76.679137][ T4197] device veth1_vlan entered promiscuous mode [ 76.704376][ T4183] device veth1_macvtap entered promiscuous mode [ 76.751357][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 76.757965][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 76.772389][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.781468][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.788689][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.789503][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.799691][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.818481][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.827795][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.836300][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.845367][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.874811][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.888440][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.899743][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.911433][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.924412][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.941799][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.951253][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.960028][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.969050][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.989376][ T4197] device veth0_macvtap entered promiscuous mode [ 77.004907][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.016270][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.026569][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.037444][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.050049][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.059711][ T4186] device veth0_vlan entered promiscuous mode [ 77.068501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.076979][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.085597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.094685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.104096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.114298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.122580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.138056][ T4197] device veth1_macvtap entered promiscuous mode [ 77.149652][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.159056][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.168485][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.177564][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.193146][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.212733][ T4186] device veth1_vlan entered promiscuous mode [ 77.220103][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.240170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.261201][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.272909][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.290267][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.302790][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.312745][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.323500][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.334925][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.346577][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.357954][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.376051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.376151][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.391896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.395298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.400493][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.431631][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.454931][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.465847][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.478082][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.488449][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.499498][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.511065][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.522672][ T4197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.532133][ T4197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.543056][ T4197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.552270][ T4197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.577299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.587337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.598162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.658742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.676563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.722607][ T4186] device veth0_macvtap entered promiscuous mode [ 77.752200][ T1213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.760314][ T1213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.812137][ T4186] device veth1_macvtap entered promiscuous mode [ 77.876106][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.886603][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.899973][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.902044][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.934506][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.946016][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.999474][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.036037][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.051522][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.063190][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.076682][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.088859][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.109142][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.150781][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.179803][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.209411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.242265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.256626][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.277792][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.289295][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.300293][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.315635][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.327564][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.339054][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.370842][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.400566][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.409118][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 78.449743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.458806][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.471907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.495723][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.515288][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.539203][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.548328][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.557838][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.573803][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.634797][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.655931][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.703145][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.748856][ T4319] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9'. [ 78.757727][ T4269] Bluetooth: hci2: command 0x0419 tx timeout [ 78.757819][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 78.794779][ T4269] Bluetooth: hci0: command 0x0419 tx timeout [ 78.831001][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 78.839420][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 78.862734][ T1213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.882811][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.891924][ T1213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.916128][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.947666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.977486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.032381][ T4327] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 79.052828][ T4329] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12'. [ 79.358316][ T4340] netlink: 'syz.1.15': attribute type 1 has an invalid length. [ 79.477261][ T4341] device veth3 entered promiscuous mode [ 79.602528][ T4343] overlayfs: failed to decode file handle (len=6, type=196859, flags=0, err=-22) [ 79.740844][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.903420][ T4349] netlink: 'syz.1.19': attribute type 1 has an invalid length. [ 79.919795][ T4349] device gretap1 entered promiscuous mode [ 79.969742][ T4350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19'. [ 80.007722][ T4350] device veth0 entered promiscuous mode [ 80.013634][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 80.141060][ T21] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 80.158106][ T21] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 80.178175][ T21] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 80.207195][ T21] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 80.240816][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 80.416973][ T21] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 80.436402][ T21] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 80.466773][ T21] usb 5-1: Product: syz [ 80.476047][ T21] usb 5-1: Manufacturer: syz [ 80.495794][ T21] usb 5-1: SerialNumber: syz [ 80.519632][ T4239] Bluetooth: hci5: command 0x1003 tx timeout [ 80.537883][ T4204] Bluetooth: hci5: sending frame failed (-49) [ 80.546911][ T21] usb 5-1: config 0 descriptor?? [ 80.604373][ T21] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 80.631951][ T21] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 80.840471][ T4362] syz.0.24 uses obsolete (PF_INET,SOCK_PACKET) [ 81.236878][ T4369] ldusb 5-1:0.0: Write buffer overflow, 1 bytes dropped [ 81.526636][ T21] usb 5-1: USB disconnect, device number 2 [ 81.578849][ T21] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 81.659535][ T4374] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.691771][ T4376] overlayfs: failed to decode file handle (len=6, type=196859, flags=0, err=-22) [ 81.771629][ T4379] netlink: 'syz.2.29': attribute type 1 has an invalid length. [ 81.791362][ T4379] bridge0: port 3(ip6gretap1) entered blocking state [ 81.798386][ T4379] bridge0: port 3(ip6gretap1) entered disabled state [ 81.813579][ T4379] device ip6gretap1 entered promiscuous mode [ 81.845057][ T4379] device veth3 entered promiscuous mode [ 81.851490][ T4379] bridge0: port 4(veth3) entered blocking state [ 81.858069][ T4379] bridge0: port 4(veth3) entered disabled state [ 82.122071][ T4389] netlink: 'syz.0.33': attribute type 1 has an invalid length. [ 82.137573][ T4389] device gretap1 entered promiscuous mode [ 82.157442][ T4204] block nbd1: Receive control failed (result -32) [ 82.168938][ T4372] block nbd1: shutting down sockets [ 82.226607][ T4391] netlink: 28 bytes leftover after parsing attributes in process `syz.0.33'. [ 82.287526][ T4391] device veth1_to_bridge entered promiscuous mode [ 82.289326][ T4398] ax25_connect(): syz.1.48 uses autobind, please contact jreuter@yaina.de [ 82.581626][ T4253] Bluetooth: hci5: command 0x1001 tx timeout [ 82.587794][ T4204] Bluetooth: hci5: sending frame failed (-49) [ 82.690810][ T2240] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 83.042405][ T4421] input: syz1 as /devices/virtual/input/input5 [ 83.069513][ T2240] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 83.080599][ T2240] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 83.114191][ T2240] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 83.224752][ T2240] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 83.236170][ T2240] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 83.257530][ T2240] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 83.351059][ T2240] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 83.360882][ T1325] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.369337][ T2240] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 83.391146][ T2240] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 83.631771][ T1325] usb 3-1: Using ep0 maxpacket: 32 [ 83.666816][ T2240] usb 2-1: string descriptor 0 read error: -22 [ 83.679096][ T2240] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 83.694596][ T2240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.771142][ T1325] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 83.785483][ T2240] adutux 2-1:168.0: interrupt endpoints not found [ 83.790483][ T1325] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 83.840748][ T1325] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 83.869175][ T1325] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 83.894352][ T1325] usb 3-1: config 0 interface 0 has no altsetting 0 [ 83.996498][ T4402] ksmbd: Unknown IPC event: 6, ignore. [ 84.010382][ T21] usb 2-1: USB disconnect, device number 2 [ 84.102153][ T1325] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 84.117214][ T1325] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 84.130841][ T1325] usb 3-1: Product: syz [ 84.135068][ T1325] usb 3-1: Manufacturer: syz [ 84.150055][ T1325] usb 3-1: SerialNumber: syz [ 84.158828][ T1325] usb 3-1: config 0 descriptor?? [ 84.222689][ T1325] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 84.232446][ T4269] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.255491][ T1325] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 84.480798][ T4269] usb 1-1: Using ep0 maxpacket: 16 [ 84.601109][ T4269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.643122][ T4269] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.666682][ T4269] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 84.676634][ T21] Bluetooth: hci5: command 0x1009 tx timeout [ 84.686898][ T4269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.718497][ T4269] usb 1-1: config 0 descriptor?? [ 84.765168][ T4269] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 84.807500][ T4439] ldusb 3-1:0.0: Write buffer overflow, 1 bytes dropped [ 84.994438][ T4269] usb 1-1: USB disconnect, device number 2 [ 85.094253][ T4253] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.102458][ T2240] usb 3-1: USB disconnect, device number 2 [ 85.123076][ T2240] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 85.380802][ T4253] usb 2-1: Using ep0 maxpacket: 8 [ 85.501430][ T4253] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.533514][ T4253] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.557041][ T4253] usb 2-1: config 0 interface 0 has no altsetting 0 [ 85.570785][ T4253] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 85.590501][ T4253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.637724][ T4253] usb 2-1: config 0 descriptor?? [ 85.666975][ T4451] 9pnet_virtio: no channels available for device syz [ 85.834708][ T4460] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.853710][ C1] vkms_vblank_simulate: vblank timer overrun [ 86.133609][ T4253] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 86.141908][ T4253] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 86.149602][ T4253] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 86.158402][ T4253] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 86.165889][ T4253] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 86.174906][ T4253] mcp2221 0003:04D8:00DD.0001: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 86.240280][ T4471] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 86.265270][ T4471] kvm [4470]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 86.275848][ T4471] kvm [4470]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 86.292127][ T4471] APIC base relocation is unsupported by KVM [ 86.322892][ T4269] usb 2-1: USB disconnect, device number 3 [ 86.519444][ T1107] hid-generic 0005:0007:0008.0002: unknown main item tag 0x0 [ 86.541022][ T1107] hid-generic 0005:0007:0008.0002: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 86.694843][ T4479] fido_id[4479]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 86.758337][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 86.779049][ T4486] ================================================================== [ 86.787512][ T4486] BUG: KASAN: use-after-free in ax25_release+0x5ca/0x870 [ 86.794601][ T4486] Read of size 8 at addr ffff8880201b4b08 by task syz.2.73/4486 [ 86.802472][ T4486] [ 86.804972][ T4486] CPU: 1 PID: 4486 Comm: syz.2.73 Not tainted syzkaller #0 [ 86.812184][ T4486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 86.822369][ T4486] Call Trace: [ 86.825679][ T4486] [ 86.828618][ T4486] dump_stack_lvl+0x168/0x230 [ 86.833322][ T4486] ? show_regs_print_info+0x20/0x20 [ 86.838533][ T4486] ? _printk+0xcc/0x110 [ 86.842704][ T4486] ? ax25_release+0x5ca/0x870 [ 86.847431][ T4486] ? load_image+0x3b0/0x3b0 [ 86.851989][ T4486] print_address_description+0x60/0x2d0 [ 86.857669][ T4486] ? ax25_release+0x5ca/0x870 [ 86.862398][ T4486] kasan_report+0xdf/0x130 [ 86.866836][ T4486] ? ax25_release+0x5ca/0x870 [ 86.871599][ T4486] ax25_release+0x5ca/0x870 [ 86.876237][ T4486] sock_close+0xd5/0x240 [ 86.880519][ T4486] ? sock_mmap+0x90/0x90 [ 86.884809][ T4486] __fput+0x234/0x930 [ 86.888860][ T4486] task_work_run+0x125/0x1a0 [ 86.893497][ T4486] exit_to_user_mode_loop+0x10f/0x130 [ 86.898921][ T4486] exit_to_user_mode_prepare+0xee/0x180 [ 86.904525][ T4486] syscall_exit_to_user_mode+0x16/0x40 [ 86.910029][ T4486] do_syscall_64+0x58/0xa0 [ 86.914484][ T4486] ? clear_bhb_loop+0x30/0x80 [ 86.919313][ T4486] ? clear_bhb_loop+0x30/0x80 [ 86.924131][ T4486] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.930346][ T4486] RIP: 0033:0x7f82cb7b2ec9 [ 86.934794][ T4486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.954501][ T4486] RSP: 002b:00007f82c9a1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 86.960895][ T4269] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.962933][ T4486] RAX: 0000000000000008 RBX: 00007f82cba09fa0 RCX: 00007f82cb7b2ec9 [ 86.962971][ T4486] RDX: 0000000000080000 RSI: 0000000000000008 RDI: 0000000000000007 [ 86.986790][ T4486] RBP: 00007f82cb835f91 R08: 0000000000000000 R09: 0000000000000000 [ 86.994951][ T4486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.003067][ T4486] R13: 00007f82cba0a038 R14: 00007f82cba09fa0 R15: 00007ffc6b1db998 [ 87.011365][ T4486] [ 87.014422][ T4486] [ 87.016897][ T4486] Allocated by task 4486: [ 87.021551][ T4486] __kasan_kmalloc+0xb5/0xf0 [ 87.026257][ T4486] ax25_dev_device_up+0x50/0x580 [ 87.031396][ T4486] ax25_device_event+0x483/0x4f0 [ 87.036363][ T4486] raw_notifier_call_chain+0xcb/0x160 [ 87.041743][ T4486] __dev_notify_flags+0x178/0x2d0 [ 87.046878][ T4486] dev_change_flags+0xe3/0x1a0 [ 87.051677][ T4486] dev_ifsioc+0x147/0xe70 [ 87.056065][ T4486] dev_ioctl+0x55f/0xe50 [ 87.060636][ T4486] sock_do_ioctl+0x222/0x2f0 [ 87.065250][ T4486] sock_ioctl+0x4ed/0x6e0 [ 87.069606][ T4486] __se_sys_ioctl+0xfa/0x170 [ 87.074227][ T4486] do_syscall_64+0x4c/0xa0 [ 87.078652][ T4486] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.084813][ T4486] [ 87.087166][ T4486] Freed by task 4486: [ 87.091149][ T4486] kasan_set_track+0x4b/0x70 [ 87.095775][ T4486] kasan_set_free_info+0x1f/0x40 [ 87.100726][ T4486] ____kasan_slab_free+0xd5/0x110 [ 87.105781][ T4486] slab_free_freelist_hook+0xea/0x170 [ 87.111310][ T4486] kfree+0xef/0x2a0 [ 87.115156][ T4486] ax25_device_event+0x4b4/0x4f0 [ 87.120105][ T4486] raw_notifier_call_chain+0xcb/0x160 [ 87.125577][ T4486] __dev_notify_flags+0x178/0x2d0 [ 87.130611][ T4486] dev_change_flags+0xe3/0x1a0 [ 87.135588][ T4486] dev_ifsioc+0x147/0xe70 [ 87.140020][ T4486] dev_ioctl+0x55f/0xe50 [ 87.144284][ T4486] sock_do_ioctl+0x222/0x2f0 [ 87.148892][ T4486] sock_ioctl+0x4ed/0x6e0 [ 87.153239][ T4486] __se_sys_ioctl+0xfa/0x170 [ 87.158165][ T4486] do_syscall_64+0x4c/0xa0 [ 87.162609][ T4486] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.168531][ T4486] [ 87.170865][ T4486] The buggy address belongs to the object at ffff8880201b4b00 [ 87.170865][ T4486] which belongs to the cache kmalloc-192 of size 192 [ 87.185031][ T4486] The buggy address is located 8 bytes inside of [ 87.185031][ T4486] 192-byte region [ffff8880201b4b00, ffff8880201b4bc0) [ 87.198141][ T4486] The buggy address belongs to the page: [ 87.203967][ T4486] page:ffffea0000806d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880201b4a00 pfn:0x201b4 [ 87.210965][ T4269] usb 1-1: Using ep0 maxpacket: 32 [ 87.215527][ T4486] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 87.228295][ T4486] raw: 00fff00000000200 ffffea00050ce300 0000000700000006 ffff888016841a00 [ 87.237007][ T4486] raw: ffff8880201b4a00 000000008010000f 00000001ffffffff 0000000000000000 [ 87.245803][ T4486] page dumped because: kasan: bad access detected [ 87.252390][ T4486] page_owner tracks the page as allocated [ 87.258117][ T4486] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4184, ts 77797696474, free_ts 77693458450 [ 87.274297][ T4486] get_page_from_freelist+0x1b77/0x1c60 [ 87.279869][ T4486] __alloc_pages+0x1e1/0x470 [ 87.284835][ T4486] new_slab+0xb6/0x4b0 [ 87.288924][ T4486] ___slab_alloc+0x81e/0xdf0 [ 87.293514][ T4486] __kmalloc_node+0x200/0x3b0 [ 87.298191][ T4486] memcg_alloc_page_obj_cgroups+0x81/0x120 [ 87.304013][ T4486] slab_post_alloc_hook+0xba/0x380 [ 87.309344][ T4486] kmem_cache_alloc+0x100/0x290 [ 87.314197][ T4486] shmem_alloc_inode+0x16/0x30 [ 87.318974][ T4486] new_inode_pseudo+0x5f/0x210 [ 87.323832][ T4486] new_inode+0x25/0x1c0 [ 87.328003][ T4486] shmem_get_inode+0x334/0xa90 [ 87.332964][ T4486] shmem_mknod+0x55/0x1b0 [ 87.337300][ T4486] shmem_mkdir+0x27/0x60 [ 87.341638][ T4486] vfs_mkdir+0x387/0x570 [ 87.345991][ T4486] do_mkdirat+0x1d7/0x5a0 [ 87.350594][ T4486] page last free stack trace: [ 87.355269][ T4486] free_unref_page_prepare+0x637/0x6c0 [ 87.361018][ T4486] free_unref_page+0x94/0x280 [ 87.365931][ T4486] __unfreeze_partials+0x1a5/0x200 [ 87.371250][ T4486] put_cpu_partial+0x12d/0x190 [ 87.376027][ T4486] qlist_free_all+0x35/0x90 [ 87.380537][ T4486] kasan_quarantine_reduce+0x150/0x160 [ 87.386005][ T4486] __kasan_slab_alloc+0x2f/0xd0 [ 87.390875][ T4486] slab_post_alloc_hook+0x4c/0x380 [ 87.395995][ T4486] __kmalloc+0x127/0x330 [ 87.400250][ T4486] tomoyo_realpath_from_path+0x118/0x610 [ 87.405892][ T4486] tomoyo_path_perm+0x1cd/0x510 [ 87.410748][ T4486] security_inode_getattr+0xcf/0x120 [ 87.416057][ T4486] vfs_getattr+0x26/0x3a0 [ 87.420393][ T4486] __x64_sys_newfstat+0x104/0x1d0 [ 87.425420][ T4486] do_syscall_64+0x4c/0xa0 [ 87.429868][ T4486] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.435770][ T4486] [ 87.438109][ T4486] Memory state around the buggy address: [ 87.443846][ T4486] ffff8880201b4a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.452079][ T4486] ffff8880201b4a80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 87.460273][ T4486] >ffff8880201b4b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.468351][ T4486] ^ [ 87.472702][ T4486] ffff8880201b4b80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 87.480770][ T4486] ffff8880201b4c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 87.488838][ T4486] ================================================================== [ 87.496904][ T4486] Disabling lock debugging due to kernel taint [ 87.503204][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.521702][ T23] cfg80211: failed to load regulatory.db [ 87.540973][ T4269] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 87.550368][ T4269] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 87.561770][ T4269] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 87.574206][ T4269] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 87.587716][ T4269] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.661316][ T4486] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 87.668667][ T4486] CPU: 0 PID: 4486 Comm: syz.2.73 Tainted: G B syzkaller #0 [ 87.677274][ T4486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 87.687369][ T4486] Call Trace: [ 87.690738][ T4486] [ 87.693851][ T4486] dump_stack_lvl+0x168/0x230 [ 87.698546][ T4486] ? show_regs_print_info+0x20/0x20 [ 87.704078][ T4486] ? load_image+0x3b0/0x3b0 [ 87.708598][ T4486] panic+0x2c9/0x7f0 [ 87.712736][ T4486] ? bpf_jit_dump+0xd0/0xd0 [ 87.717288][ T4486] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 87.723227][ T4486] ? _raw_spin_unlock+0x40/0x40 [ 87.728142][ T4486] ? print_memory_metadata+0x314/0x400 [ 87.734184][ T4486] ? ax25_release+0x5ca/0x870 [ 87.738977][ T4486] check_panic_on_warn+0x80/0xa0 [ 87.743942][ T4486] ? ax25_release+0x5ca/0x870 [ 87.748644][ T4486] end_report+0x6d/0xf0 [ 87.752832][ T4486] kasan_report+0x102/0x130 [ 87.757751][ T4486] ? ax25_release+0x5ca/0x870 [ 87.762815][ T4486] ax25_release+0x5ca/0x870 [ 87.767761][ T4486] sock_close+0xd5/0x240 [ 87.772027][ T4486] ? sock_mmap+0x90/0x90 [ 87.776304][ T4486] __fput+0x234/0x930 [ 87.780429][ T4486] task_work_run+0x125/0x1a0 [ 87.785249][ T4486] exit_to_user_mode_loop+0x10f/0x130 [ 87.790742][ T4486] exit_to_user_mode_prepare+0xee/0x180 [ 87.796367][ T4486] syscall_exit_to_user_mode+0x16/0x40 [ 87.802213][ T4486] do_syscall_64+0x58/0xa0 [ 87.806660][ T4486] ? clear_bhb_loop+0x30/0x80 [ 87.811724][ T4486] ? clear_bhb_loop+0x30/0x80 [ 87.816517][ T4486] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.822428][ T4486] RIP: 0033:0x7f82cb7b2ec9 [ 87.826957][ T4486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.847014][ T4486] RSP: 002b:00007f82c9a1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 87.855479][ T4486] RAX: 0000000000000008 RBX: 00007f82cba09fa0 RCX: 00007f82cb7b2ec9 [ 87.863543][ T4486] RDX: 0000000000080000 RSI: 0000000000000008 RDI: 0000000000000007 [ 87.871725][ T4486] RBP: 00007f82cb835f91 R08: 0000000000000000 R09: 0000000000000000 [ 87.879707][ T4486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.887707][ T4486] R13: 00007f82cba0a038 R14: 00007f82cba09fa0 R15: 00007ffc6b1db998 [ 87.896413][ T4486] [ 87.899708][ T4486] Kernel Offset: disabled [ 87.904188][ T4486] Rebooting in 86400 seconds..