last executing test programs: 12.412323075s ago: executing program 0 (id=184): close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) 11.791103395s ago: executing program 0 (id=187): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x57, 0xec}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000340)=""/102400, 0x19000) semop(0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01002bbd7000fbdbdf25330000000800", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r7 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000100)=@l={0x92, 0x0, 0xc0, 0x2, 0x0, 0x7, 0x9}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) 10.061087536s ago: executing program 0 (id=191): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f000000c880)=[{{0x0, 0x0, &(0x7f000000a580)=[{&(0x7f0000009580)='*', 0x1}], 0x1}}], 0x1, 0x4000000) close(r2) 8.91985809s ago: executing program 0 (id=200): r0 = epoll_create(0x80000000) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0xa2e4, &(0x7f0000000080)={[0x101]}, 0x8) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000005e000100"/17, @ANYRES32=r3, @ANYBLOB="9d"], 0x1c}}, 0x44) syz_emit_ethernet(0x56, 0x0, 0x0) gettid() syz_io_uring_complete(0x0, r1) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000c80)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000090000000300"/72], 0x58) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r5 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r7, 0x4, 0x800) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shmat(r5, &(0x7f0000d62000/0x4000)=nil, 0xa000) msync(&(0x7f0000967000/0x1000)=nil, 0x1000, 0x4) 8.7171999s ago: executing program 0 (id=204): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) listen(0xffffffffffffffff, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) 7.175024202s ago: executing program 0 (id=208): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0) process_vm_readv(r5, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/69, 0x45}], 0x1, &(0x7f0000000c80)=[{&(0x7f00000009c0)=""/125, 0x7d}], 0x1, 0x0) 5.848040575s ago: executing program 1 (id=215): r0 = syz_usb_connect(0x2, 0x58, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0xffffffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r1, 0x1) sendmsg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300), 0x1000}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000080)=""/7, 0xffffff4d}], 0x1}, 0x40) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000340), &(0x7f0000000380)=0x4) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r3, 0x0, 0x0) 5.266587803s ago: executing program 1 (id=219): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x8633, 0x9, 0x1, 0xc0, 0x405, 0x4, 0x36, 0x89, 0x71f6139e, 0x7, 0x100000001, 0x6, 0x8, 0x7, 0xff, 0x20000000400eee0], 0xffe, 0x10}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.075028921s ago: executing program 1 (id=220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944cf7", 0x3}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.054725009s ago: executing program 4 (id=222): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000040)=""/42) 3.997765012s ago: executing program 3 (id=223): r0 = epoll_create(0x80000000) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0xa2e4, &(0x7f0000000080)={[0x101]}, 0x8) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000005e000100"/17, @ANYRES32=r3, @ANYBLOB="9d"], 0x1c}}, 0x44) syz_emit_ethernet(0x56, 0x0, 0x0) gettid() syz_io_uring_complete(0x0, r1) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000c80)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000090000000300"/72], 0x58) 3.460062398s ago: executing program 4 (id=224): r0 = syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x0, 0x2000) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000700)={0x14, &(0x7f0000000900)=[{0x37, '\x00', @data=0x7, 0x401}]}) 3.459859478s ago: executing program 1 (id=225): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xe, 0x1) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc65d0) 3.437857618s ago: executing program 3 (id=226): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 2.732404642s ago: executing program 4 (id=230): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0) write(r0, &(0x7f0000000280), 0x43) 2.638859586s ago: executing program 4 (id=231): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="f6", 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x49, 0x4bc, 0x2}}], 0x20, 0x40801}, 0x50) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x4, 0x7a}, 0x8) 2.399975427s ago: executing program 3 (id=233): connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="890704", 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 2.235182655s ago: executing program 2 (id=234): gettid() r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 2.067546853s ago: executing program 4 (id=235): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000040)=""/42) 743.207726ms ago: executing program 2 (id=236): r0 = epoll_create(0x80000000) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0xa2e4, &(0x7f0000000080)={[0x101]}, 0x8) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000005e000100"/17, @ANYRES32=r3, @ANYBLOB="9d"], 0x1c}}, 0x44) syz_emit_ethernet(0x56, 0x0, 0x0) gettid() syz_io_uring_complete(0x0, r1) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000c80)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000090000000300"/72], 0x58) 742.748996ms ago: executing program 3 (id=237): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000)=r3) 319.911605ms ago: executing program 4 (id=238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) dup(r0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1e5) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) landlock_create_ruleset(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x204200, 0x91) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) capset(&(0x7f0000000380)={0x20080522}, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002140), 0x40801, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) unshare(0x6020400) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) write$tun(r3, &(0x7f0000000600)={@val={0x0, 0x200}, @val={0x0, 0x1, 0x0, 0x6, 0x6, 0x8001}, @llc={@snap={0xaa, 0x1, '\x00', "96c574", 0x6005}}}, 0x16) r4 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40043d0d, 0x0) 319.621536ms ago: executing program 3 (id=239): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000740)="170000000200010000ffbe8c5ee17688a2006c000301000a000002a2576e5ed9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000fc0607bdca67a622c45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c56835382e9d969ba5149e9e90539062a80e605007f71174aa964f3c63e5a1b47b63a6323ded241482cfe17c3778a658cfecb61406ae7298f", 0xc0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x12, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 294.602106ms ago: executing program 2 (id=240): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000008"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xfffffffffffffcf0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x0, 0xffffff01}, 0x48) 214.43575ms ago: executing program 2 (id=241): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x7, 0xaf21]) 112.434105ms ago: executing program 2 (id=242): setns(0xc9, 0x0) socket(0x1f, 0x5, 0x8) close(0x3) 110.499066ms ago: executing program 3 (id=243): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') 0s ago: executing program 2 (id=244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. [ 50.527149][ T4173] cgroup: Unknown subsys name 'net' [ 50.672301][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.901482][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.296454][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 53.360902][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 53.376700][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 53.441315][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.449437][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.457308][ T4200] device bridge_slave_0 entered promiscuous mode [ 53.465351][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 53.501519][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.508720][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.516346][ T4200] device bridge_slave_1 entered promiscuous mode [ 53.529404][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 53.555301][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.562485][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.570276][ T4187] device bridge_slave_0 entered promiscuous mode [ 53.605834][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.613911][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.621794][ T4187] device bridge_slave_1 entered promiscuous mode [ 53.652901][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.662330][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.670219][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.678241][ T4190] device bridge_slave_0 entered promiscuous mode [ 53.692212][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.699476][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.707402][ T4190] device bridge_slave_1 entered promiscuous mode [ 53.715645][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.732945][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.758994][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.774865][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.782030][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.790443][ T4186] device bridge_slave_0 entered promiscuous mode [ 53.816917][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.824216][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.832568][ T4186] device bridge_slave_1 entered promiscuous mode [ 53.841729][ T4200] team0: Port device team_slave_0 added [ 53.854029][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.866060][ T4187] team0: Port device team_slave_0 added [ 53.877900][ T4200] team0: Port device team_slave_1 added [ 53.897723][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.908710][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.918913][ T4187] team0: Port device team_slave_1 added [ 53.940370][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.965704][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.972860][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.981034][ T4191] device bridge_slave_0 entered promiscuous mode [ 53.993591][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.000745][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.008740][ T4191] device bridge_slave_1 entered promiscuous mode [ 54.024707][ T4190] team0: Port device team_slave_0 added [ 54.031585][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.038695][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.064742][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.082227][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.089464][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.115456][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.133284][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.140329][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.166359][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.178454][ T4190] team0: Port device team_slave_1 added [ 54.184521][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.191501][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.217615][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.230770][ T4186] team0: Port device team_slave_0 added [ 54.253696][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.267493][ T4186] team0: Port device team_slave_1 added [ 54.274813][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.314050][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.321123][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.347216][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.368440][ T4191] team0: Port device team_slave_0 added [ 54.382117][ T4191] team0: Port device team_slave_1 added [ 54.389506][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.396464][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.422679][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.449834][ T4187] device hsr_slave_0 entered promiscuous mode [ 54.456879][ T4187] device hsr_slave_1 entered promiscuous mode [ 54.464428][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.471738][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.497964][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.528882][ T4200] device hsr_slave_0 entered promiscuous mode [ 54.535596][ T4200] device hsr_slave_1 entered promiscuous mode [ 54.542299][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.550325][ T4200] Cannot create hsr debugfs directory [ 54.556269][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.563349][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.589491][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.615292][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.622544][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.648575][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.688044][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.695015][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.721047][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.745285][ T4190] device hsr_slave_0 entered promiscuous mode [ 54.752379][ T4190] device hsr_slave_1 entered promiscuous mode [ 54.759416][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.766967][ T4190] Cannot create hsr debugfs directory [ 54.796712][ T4186] device hsr_slave_0 entered promiscuous mode [ 54.804222][ T4186] device hsr_slave_1 entered promiscuous mode [ 54.810878][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.818650][ T4186] Cannot create hsr debugfs directory [ 54.932979][ T4191] device hsr_slave_0 entered promiscuous mode [ 54.939901][ T4191] device hsr_slave_1 entered promiscuous mode [ 54.946440][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.955183][ T4191] Cannot create hsr debugfs directory [ 55.047788][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 55.057095][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 55.057865][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 55.074354][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 55.080783][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 55.144603][ T4200] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.156842][ T4200] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.165821][ T4200] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.180338][ T4200] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.232157][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.241264][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.254525][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.263358][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.302734][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.312162][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.321764][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.341588][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.420406][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.430557][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.444619][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.461185][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.480479][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.490743][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.508489][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.515326][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.526186][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.545486][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.559060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.566814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.591880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.601168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.610698][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.617999][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.627545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.636145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.645410][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.652578][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.661055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.669827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.682295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.691588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.701838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.710659][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.717748][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.741890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.749791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.760843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.770201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.779975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.788965][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.796016][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.804696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.821253][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.849272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.858551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.866968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.876120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.885729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.894967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.903628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.913374][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.922959][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.938427][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.948257][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.956612][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.965481][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.980355][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.991316][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.000496][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.009737][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.024204][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.033778][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.046626][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.064465][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.072297][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.080431][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.090531][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.099378][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.108611][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.116909][ T514] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.123990][ T514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.132512][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.141363][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.152046][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.180651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.197665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.217198][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.224296][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.264677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.293368][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.321300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.330984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.342147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.351974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.365242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.374475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.392404][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.403271][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.416355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.424833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.434238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.443348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.453289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.472215][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.494987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.504192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.513165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.526645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.534829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.545943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.554510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.563197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.571858][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.578939][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.595283][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.604713][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.616459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.626337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.635466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.644287][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.651413][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.662209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.703012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.712123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.721151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.732446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.741287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.750037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.758938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.779516][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.796367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.805359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.814145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.822513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.831546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.840261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.848225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.858770][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.874537][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.884742][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.899093][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.914609][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.924203][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.934902][ T1528] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.942221][ T1528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.950098][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.958618][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.966769][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.976605][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.985109][ T1528] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.992219][ T1528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.005052][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.013983][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.021923][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.032937][ T4200] device veth0_vlan entered promiscuous mode [ 57.045200][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.055280][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.064045][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.072539][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.081217][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.090555][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.098574][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.112401][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.122535][ T4187] device veth0_vlan entered promiscuous mode [ 57.127183][ T4244] Bluetooth: hci1: command 0x041b tx timeout [ 57.134622][ T4244] Bluetooth: hci3: command 0x041b tx timeout [ 57.141893][ T4200] device veth1_vlan entered promiscuous mode [ 57.147449][ T4244] Bluetooth: hci2: command 0x041b tx timeout [ 57.154272][ T4244] Bluetooth: hci4: command 0x041b tx timeout [ 57.164058][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.172284][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.177399][ T4244] Bluetooth: hci0: command 0x041b tx timeout [ 57.192846][ T4187] device veth1_vlan entered promiscuous mode [ 57.219585][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.229981][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.240651][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.254674][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.263079][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.273133][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.282851][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.292200][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.301503][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.310223][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.319072][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.341272][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.353502][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.373759][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.382641][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.393255][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.403013][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.412196][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.441330][ T4200] device veth0_macvtap entered promiscuous mode [ 57.454342][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.464665][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.476276][ T4190] device veth0_vlan entered promiscuous mode [ 57.487422][ T4200] device veth1_macvtap entered promiscuous mode [ 57.502150][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.511375][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.520691][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.528391][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.546038][ T4190] device veth1_vlan entered promiscuous mode [ 57.555096][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.568174][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.577805][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.592180][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.603179][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.620477][ T4187] device veth0_macvtap entered promiscuous mode [ 57.636168][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.650267][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.662537][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.674956][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.689097][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.700586][ T4187] device veth1_macvtap entered promiscuous mode [ 57.709948][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.718752][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.727727][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.742406][ T4200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.751526][ T4200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.760720][ T4200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.770778][ T4200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.795994][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.808444][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.820870][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.830558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.838717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.846128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.855531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.870779][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.892629][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.909021][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.921359][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.930023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.939654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.948562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.957600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.966821][ T4190] device veth0_macvtap entered promiscuous mode [ 57.985864][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.996775][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.005884][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.016034][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.028817][ T4190] device veth1_macvtap entered promiscuous mode [ 58.083322][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.092979][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.102028][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.111338][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.120136][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.129070][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.165823][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.180335][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.190650][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.201414][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.212881][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.227420][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.238203][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.248536][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.259041][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.269950][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.289703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.299995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.309185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.317760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.326012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.336121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.345049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.352972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.375178][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.388697][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.397784][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.406490][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.420037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.429220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.439026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.446851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.447156][ T1528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.460609][ T4191] device veth0_vlan entered promiscuous mode [ 58.462252][ T1528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.502345][ T4186] device veth0_vlan entered promiscuous mode [ 58.509551][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.520995][ T4191] device veth1_vlan entered promiscuous mode [ 58.559971][ T1528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.574993][ T1528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.585756][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.603251][ T4186] device veth1_vlan entered promiscuous mode [ 58.688915][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.693388][ T4186] device veth0_macvtap entered promiscuous mode [ 58.696855][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.707891][ T4186] device veth1_macvtap entered promiscuous mode [ 58.717839][ T514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.725675][ T514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.740328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.750001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.759448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.769090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.777043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.784795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.794022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.803083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.823374][ T4191] device veth0_macvtap entered promiscuous mode [ 58.836862][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.841100][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.855714][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.870785][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.883754][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.895185][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.905352][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.916537][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.927912][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.943813][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.955657][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.965868][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.978175][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.988918][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.999663][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.010860][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.019599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.027940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.035719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.046012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.054972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.064411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.100231][ T4191] device veth1_macvtap entered promiscuous mode [ 59.134326][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.149190][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.160199][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.165653][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.176729][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.185526][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.203323][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.211969][ T4244] Bluetooth: hci0: command 0x040f tx timeout [ 59.218710][ T4244] Bluetooth: hci4: command 0x040f tx timeout [ 59.226376][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.249414][ T4244] Bluetooth: hci2: command 0x040f tx timeout [ 59.256922][ T4244] Bluetooth: hci3: command 0x040f tx timeout [ 59.266038][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.280361][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.281937][ T4244] Bluetooth: hci1: command 0x040f tx timeout [ 59.291530][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.308537][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.318568][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.329281][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.339433][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.350179][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.366882][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.387196][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.395732][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.413705][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.426546][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.452414][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.463871][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.477410][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.487974][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.497850][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.508558][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.521154][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.536210][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.547052][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.557994][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.566814][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.575791][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.584994][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.666099][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.676820][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.722840][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.723284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.739794][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.753679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.763536][ T4231] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 59.805840][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.828577][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.839699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.893200][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.906649][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.917704][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.962674][ T4276] block device autoloading is deprecated and will be removed. [ 59.970697][ T4278] program syz.3.8 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.989589][ T4278] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 60.038318][ T4231] usb 2-1: Using ep0 maxpacket: 32 [ 60.165016][ T4231] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 60.183196][ T4231] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 60.206074][ T4231] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 60.231230][ T4231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 60.266847][ T4231] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 60.280209][ T4231] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 60.318872][ T4231] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 60.337968][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.352039][ T4231] usb 2-1: config 0 descriptor?? [ 60.457380][ T4229] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.522980][ T4299] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.632331][ T4231] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 60.655513][ T4231] usb 2-1: USB disconnect, device number 2 [ 60.686139][ T4231] usblp0: removed [ 60.717500][ T4229] usb 5-1: Using ep0 maxpacket: 8 [ 60.837286][ T4229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 60.844119][ T4307] 9pnet_virtio: no channels available for device syz [ 60.867284][ T4229] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 60.890833][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.925693][ T4229] usb 5-1: config 0 descriptor?? [ 61.011802][ T4311] 9pnet_virtio: no channels available for device syz [ 61.219094][ T4229] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 61.289615][ T4229] Bluetooth: hci3: command 0x0419 tx timeout [ 61.298782][ T4231] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 61.304743][ T4229] Bluetooth: hci2: command 0x0419 tx timeout [ 61.314521][ T4229] Bluetooth: hci4: command 0x0419 tx timeout [ 61.338652][ T4229] Bluetooth: hci0: command 0x0419 tx timeout [ 61.368054][ T4229] Bluetooth: hci1: command 0x0419 tx timeout [ 61.452724][ T1111] usb 5-1: USB disconnect, device number 2 [ 61.459081][ C0] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 61.598911][ T4337] Zero length message leads to an empty skb [ 61.697068][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 62.447052][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 62.457044][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 62.467038][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 62.477036][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 62.487037][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 62.497037][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 62.507035][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 62.517038][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 62.527055][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 62.811073][ T4231] usb 2-1: Using ep0 maxpacket: 32 [ 62.938821][ T4231] usb 2-1: device descriptor read/all, error -71 [ 63.151001][ T4356] ODEBUG: Out of memory. ODEBUG disabled [ 63.454938][ T4367] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 63.584546][ T4378] 9pnet_virtio: no channels available for device syz [ 63.602136][ T4377] FAULT_INJECTION: forcing a failure. [ 63.602136][ T4377] name failslab, interval 1, probability 0, space 0, times 1 [ 63.638287][ T4377] CPU: 1 PID: 4377 Comm: syz.0.48 Not tainted syzkaller #0 [ 63.645537][ T4377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.655620][ T4377] Call Trace: [ 63.658905][ T4377] [ 63.661837][ T4377] dump_stack_lvl+0x188/0x250 [ 63.666540][ T4377] ? show_regs_print_info+0x20/0x20 [ 63.671745][ T4377] ? load_image+0x410/0x410 [ 63.676253][ T4377] ? __might_sleep+0xf0/0xf0 [ 63.681115][ T4377] ? __lock_acquire+0x7b50/0x7b50 [ 63.686154][ T4377] should_fail+0x383/0x4b0 [ 63.690589][ T4377] should_failslab+0x5/0x20 [ 63.695100][ T4377] slab_pre_alloc_hook+0x51/0xc0 [ 63.700047][ T4377] ? __d_alloc+0x27/0x6d0 [ 63.704409][ T4377] kmem_cache_alloc+0x3d/0x280 [ 63.709202][ T4377] __d_alloc+0x27/0x6d0 [ 63.713369][ T4377] ? d_alloc_pseudo+0xe/0x70 [ 63.717973][ T4377] d_alloc_pseudo+0x19/0x70 [ 63.722481][ T4377] alloc_file_pseudo+0xe0/0x200 [ 63.727342][ T4377] ? alloc_empty_file_noaccount+0x80/0x80 [ 63.733116][ T4377] ? _raw_spin_unlock+0x24/0x40 [ 63.737976][ T4377] ? alloc_fd+0x59e/0x650 [ 63.742317][ T4377] __anon_inode_getfd+0x26b/0x3d0 [ 63.747352][ T4377] ? anon_inode_getfd+0x40/0x40 [ 63.752209][ T4377] ? bpf_lsm_bpf_map+0x5/0x10 [ 63.756904][ T4377] map_create+0x1a62/0x2330 [ 63.761424][ T4377] ? bpf_lsm_bpf+0x5/0x10 [ 63.765768][ T4377] __sys_bpf+0x30a/0x6f0 [ 63.770022][ T4377] ? bpf_link_show_fdinfo+0x380/0x380 [ 63.775417][ T4377] __x64_sys_bpf+0x78/0x90 [ 63.779840][ T4377] do_syscall_64+0x4c/0xa0 [ 63.784267][ T4377] ? clear_bhb_loop+0x30/0x80 [ 63.788950][ T4377] ? clear_bhb_loop+0x30/0x80 [ 63.793642][ T4377] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.799554][ T4377] RIP: 0033:0x7f9249db3159 [ 63.803978][ T4377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.823592][ T4377] RSP: 002b:00007f924800b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.832021][ T4377] RAX: ffffffffffffffda RBX: 00007f924a03afa0 RCX: 00007f9249db3159 [ 63.840010][ T4377] RDX: 0000000000000048 RSI: 00002000000008c0 RDI: 0000000000000000 [ 63.847994][ T4377] RBP: 00007f9249e4a06b R08: 0000000000000000 R09: 0000000000000000 [ 63.855978][ T4377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.863961][ T4377] R13: 00007f924a03b038 R14: 00007f924a03afa0 R15: 00007ffecac71218 [ 63.871960][ T4377] [ 63.915879][ T2303] input: syz0 as /devices/virtual/misc/uhid/0005:057B:030A.0001/input/input5 [ 63.960527][ T2303] hid-generic 0005:057B:030A.0001: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 65.237482][ T2303] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 65.333026][ T4227] Bluetooth: hci4: command 0x0406 tx timeout [ 65.356817][ T4397] netlink: 16 bytes leftover after parsing attributes in process `syz.2.42'. [ 65.607136][ T2303] usb 4-1: Using ep0 maxpacket: 8 [ 65.898488][ T2303] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 65.916454][ T2303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.944490][ T2303] usb 4-1: Product: syz [ 65.954361][ T2303] usb 4-1: Manufacturer: syz [ 65.970282][ T2303] usb 4-1: SerialNumber: syz [ 66.089260][ T4412] comedi comedi2: driver 'ni_daq_700' does not support attach using comedi_config [ 66.377293][ T2303] usb 4-1: MIDIStreaming interface descriptor not found [ 66.407868][ T4424] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999999 out of range (51000000..2150000000) [ 66.506288][ T2303] usb 4-1: USB disconnect, device number 2 [ 67.864963][ T4227] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 68.406362][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 68.777292][ T4227] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.794237][ T4227] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 68.907266][ T4227] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 68.926561][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 68.956940][ T4227] usb 5-1: SerialNumber: syz [ 68.990612][ T4227] usb 5-1: config 0 descriptor?? [ 69.028986][ T4227] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 69.044751][ T4227] dvb-usb: bulk message failed: -22 (3/0) [ 69.079426][ T4227] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 69.117505][ T4227] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 69.124837][ T4227] usb 5-1: media controller created [ 69.148635][ T4227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 69.189205][ T4227] dvb-usb: bulk message failed: -22 (6/0) [ 69.218208][ T4227] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 69.284281][ T4227] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 69.323660][ T4227] dvb-usb: schedule remote query interval to 150 msecs. [ 69.347765][ T4227] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 69.379716][ T4227] usb 5-1: USB disconnect, device number 3 [ 69.596367][ T4227] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 71.309384][ T4498] 9pnet_virtio: no channels available for device syz [ 71.373583][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.381848][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.753748][ T4505] device syzkaller0 entered promiscuous mode [ 72.223056][ T4516] zram0: detected capacity change from 0 to 8 [ 72.292937][ T4521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.97'. [ 75.027690][ T4561] fuse: Unknown parameter '00000000000000000000' [ 75.188980][ T4568] binder: 4567:4568 ioctl 4018620d 0 returned -22 [ 75.238261][ T4568] binder: 4567:4568 ioctl c0306201 0 returned -14 [ 75.289184][ T26] audit: type=1326 audit(1790080918.527:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4567 comm="syz.1.117" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41ad76f159 code=0x0 [ 77.599466][ T4608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 78.977101][ C1] sched: RT throttling activated [ 81.611554][ T1108] cfg80211: failed to load regulatory.db [ 83.784379][ T4659] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 83.819984][ T4659] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 84.084267][ T4669] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 86.364578][ T4699] device syzkaller0 entered promiscuous mode [ 87.678682][ T4725] syz.3.167 uses obsolete (PF_INET,SOCK_PACKET) [ 88.163130][ T4730] 9pnet_virtio: no channels available for device syz [ 88.243192][ T4734] binder: 4733:4734 ioctl 4018620d 0 returned -22 [ 89.355273][ T4742] tipc: Started in network mode [ 89.360494][ T4742] tipc: Node identity 7f000001, cluster identity 4711 [ 89.368926][ T4742] tipc: New replicast peer: 0.0.0.0 [ 89.374968][ T4742] tipc: Enabled bearer , priority 10 [ 89.447191][ T13] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 90.021885][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 90.087849][ T13] usb 2-1: not running at top speed; connect to a high speed hub [ 90.197705][ T13] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 90.264450][ T13] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 90.381172][ T13] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 90.520036][ T13] usb 2-1: config 14 has no interface number 0 [ 90.603820][ T13] usb 2-1: config 14 has no interface number 1 [ 90.684473][ T13] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 90.740304][ T13] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 90.768476][ T13] usb 2-1: config 14 interface 57 has no altsetting 0 [ 90.785563][ T13] usb 2-1: config 14 interface 228 has no altsetting 0 [ 90.838259][ T4231] tipc: Node number set to 2130706433 [ 91.007575][ T13] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 91.016685][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.049136][ T13] usb 2-1: Product: syz [ 91.058360][ T13] usb 2-1: Manufacturer: syz [ 91.077073][ T13] usb 2-1: SerialNumber: syz [ 93.379653][ T13] legousbtower 2-1:14.57: interrupt endpoints not found [ 93.448358][ T13] legousbtower 2-1:14.228: interrupt endpoints not found [ 93.504868][ T13] usb 2-1: USB disconnect, device number 5 [ 94.810043][ T4833] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 94.851732][ T4833] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 95.017072][ T1108] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.397258][ T1108] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.421913][ T1108] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 95.469535][ T1108] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 95.496142][ T1108] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 95.516274][ T1108] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 95.537312][ T1108] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 95.547756][ T1108] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 95.727276][ T1108] usb 3-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 95.746692][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.763254][ T1108] usb 3-1: Product: syz [ 95.775002][ T1108] usb 3-1: Manufacturer: syz [ 95.787958][ T1108] usb 3-1: SerialNumber: syz [ 95.827309][ T4831] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.836686][ T4831] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.856596][ T4831] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.888717][ T1108] keyspan 3-1:1.0: Keyspan 1 port adapter converter detected [ 95.902035][ T1108] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 95.925522][ T1108] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 82 [ 95.948191][ T1108] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 95.957218][ T4227] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.989807][ T1108] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 96.197177][ T4227] usb 4-1: Using ep0 maxpacket: 8 [ 96.317645][ T4227] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 96.335332][ T4227] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 96.381992][ T4227] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 96.419015][ T4227] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 96.450815][ T13] usb 3-1: USB disconnect, device number 2 [ 96.459421][ T4227] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 96.469505][ T13] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 96.498257][ T13] keyspan 3-1:1.0: device disconnected [ 96.520074][ T4227] usb 4-1: config 168 interface 0 has no altsetting 0 [ 96.627244][ T4227] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 96.639098][ T4227] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 96.671089][ T4227] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 96.711714][ T4227] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 96.754221][ T4227] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 96.797029][ T4227] usb 4-1: config 168 interface 0 has no altsetting 0 [ 96.887425][ T4227] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 96.912580][ T4227] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 97.000003][ T4227] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 97.128228][ T4227] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 97.224961][ T4227] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 97.332453][ T4227] usb 4-1: config 168 interface 0 has no altsetting 0 [ 97.617395][ T4227] usb 4-1: string descriptor 0 read error: -22 [ 97.623727][ T4227] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 97.697449][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.789588][ T4227] adutux 4-1:168.0: interrupt endpoints not found [ 98.000980][ T4232] usb 4-1: USB disconnect, device number 3 [ 99.386777][ T4906] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 99.612146][ T4906] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 100.338996][ T4917] type: 4261412864 invalid [ 100.965827][ T26] audit: type=1800 audit(1790080944.197:3): pid=4927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.230" name="subclass" dev="configfs" ino=36482 res=0 errno=0 [ 101.250380][ T4935] device syzkaller0 entered promiscuous mode [ 103.410576][ T4955] device syzkaller0 entered promiscuous mode [ 103.617305][ T4963] 9pnet_virtio: no channels available for device syz [ 103.669337][ T4965] ================================================================== [ 103.677718][ T4965] BUG: KASAN: slab-out-of-bounds in ieee80211_monitor_select_queue+0x23a/0x240 [ 103.686676][ T4965] Read of size 2 at addr ffff88805d236dfb by task syz.2.244/4965 [ 103.694420][ T4965] [ 103.696755][ T4965] CPU: 0 PID: 4965 Comm: syz.2.244 Not tainted syzkaller #0 [ 103.704048][ T4965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.714114][ T4965] Call Trace: [ 103.717407][ T4965] [ 103.720345][ T4965] dump_stack_lvl+0x188/0x250 [ 103.725042][ T4965] ? show_regs_print_info+0x20/0x20 [ 103.730256][ T4965] ? _printk+0xda/0x130 [ 103.734421][ T4965] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 103.740770][ T4965] ? load_image+0x410/0x410 [ 103.745297][ T4965] print_address_description+0x60/0x2d0 [ 103.750863][ T4965] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 103.757120][ T4965] kasan_report+0xdf/0x130 [ 103.761550][ T4965] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 103.767810][ T4965] ieee80211_monitor_select_queue+0x23a/0x240 [ 103.773898][ T4965] ? ieee80211_recalc_smps_work+0x20/0x20 [ 103.779636][ T4965] netdev_core_pick_tx+0x12c/0x300 [ 103.784783][ T4965] __dev_queue_xmit+0x797/0x2e50 [ 103.789740][ T4965] ? __might_sleep+0xf0/0xf0 [ 103.794357][ T4965] ? dev_queue_xmit+0x20/0x20 [ 103.799045][ T4965] ? virtio_net_hdr_to_skb+0xc33/0x1260 [ 103.804616][ T4965] ? packet_cached_dev_get+0x270/0x270 [ 103.810093][ T4965] packet_sendmsg+0x3b4f/0x4de0 [ 103.814947][ T4965] ? sched_move_task+0x180/0x4f0 [ 103.819905][ T4965] ? place_entity+0x4f0/0x4f0 [ 103.824602][ T4965] ? aa_sk_perm+0x7dc/0x910 [ 103.829118][ T4965] ? packet_getsockopt+0x9a0/0x9a0 [ 103.834236][ T4965] ? apparmor_setprocattr+0x426/0x6a0 [ 103.839616][ T4965] ? apparmor_socket_sendmsg+0x88/0x230 [ 103.845171][ T4965] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 103.850464][ T4965] ? security_socket_sendmsg+0x7c/0xa0 [ 103.855928][ T4965] ? packet_getsockopt+0x9a0/0x9a0 [ 103.861054][ T4965] ____sys_sendmsg+0x5be/0x8f0 [ 103.865833][ T4965] ? __sys_sendmsg_sock+0x30/0x30 [ 103.870871][ T4965] ? import_iovec+0x6f/0xa0 [ 103.875387][ T4965] ___sys_sendmsg+0x236/0x2e0 [ 103.880075][ T4965] ? __sys_sendmsg+0x290/0x290 [ 103.884879][ T4965] __se_sys_sendmsg+0x1b7/0x2a0 [ 103.889736][ T4965] ? __x64_sys_sendmsg+0x80/0x80 [ 103.894671][ T4965] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 103.900687][ T4965] ? lockdep_hardirqs_on+0x94/0x140 [ 103.905905][ T4965] do_syscall_64+0x4c/0xa0 [ 103.910337][ T4965] ? clear_bhb_loop+0x30/0x80 [ 103.915032][ T4965] ? clear_bhb_loop+0x30/0x80 [ 103.919731][ T4965] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.925637][ T4965] RIP: 0033:0x7ff330dc6159 [ 103.930063][ T4965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.949690][ T4965] RSP: 002b:00007ff32f01e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.958119][ T4965] RAX: ffffffffffffffda RBX: 00007ff33104dfa0 RCX: 00007ff330dc6159 [ 103.966107][ T4965] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 103.974095][ T4965] RBP: 00007ff330e5d06b R08: 0000000000000000 R09: 0000000000000000 [ 103.982089][ T4965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.990075][ T4965] R13: 00007ff33104e038 R14: 00007ff33104dfa0 R15: 00007ffcbee379d8 [ 103.998080][ T4965] [ 104.001117][ T4965] [ 104.003458][ T4965] Allocated by task 4937: [ 104.007795][ T4965] __kasan_kmalloc+0xaf/0xe0 [ 104.012405][ T4965] snd_seq_oss_readq_new+0x7e/0x240 [ 104.017656][ T4965] snd_seq_oss_open+0x7e6/0xf00 [ 104.022521][ T4965] odev_open+0x63/0x90 [ 104.026605][ T4965] chrdev_open+0x585/0x5f0 [ 104.031039][ T4965] do_dentry_open+0x7f7/0xf90 [ 104.035733][ T4965] path_openat+0x2718/0x2fb0 [ 104.040343][ T4965] do_filp_open+0x1df/0x400 [ 104.044864][ T4965] do_sys_openat2+0x14b/0x500 [ 104.049555][ T4965] __x64_sys_openat+0x135/0x160 [ 104.054423][ T4965] do_syscall_64+0x4c/0xa0 [ 104.058854][ T4965] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.064759][ T4965] [ 104.067087][ T4965] Freed by task 4936: [ 104.071065][ T4965] kasan_set_track+0x4b/0x70 [ 104.075676][ T4965] kasan_set_free_info+0x1f/0x40 [ 104.080634][ T4965] ____kasan_slab_free+0xd5/0x110 [ 104.085675][ T4965] slab_free_freelist_hook+0xec/0x170 [ 104.091064][ T4965] kfree+0xef/0x2a0 [ 104.094875][ T4965] snd_seq_oss_readq_delete+0x3a/0x50 [ 104.100246][ T4965] free_devinfo+0x87/0xa0 [ 104.104572][ T4965] port_delete+0xc9/0x1a0 [ 104.108897][ T4965] snd_seq_delete_port+0x1bb/0x1f0 [ 104.114009][ T4965] snd_seq_ioctl_delete_port+0x8d/0x190 [ 104.119558][ T4965] snd_seq_event_port_detach+0xe1/0x160 [ 104.125122][ T4965] snd_seq_oss_release+0x17b/0x310 [ 104.130241][ T4965] odev_release+0x52/0x70 [ 104.134583][ T4965] __fput+0x212/0x8c0 [ 104.138575][ T4965] task_work_run+0x125/0x1a0 [ 104.143175][ T4965] exit_to_user_mode_loop+0x10f/0x130 [ 104.148557][ T4965] exit_to_user_mode_prepare+0xee/0x180 [ 104.154111][ T4965] syscall_exit_to_user_mode+0x16/0x40 [ 104.159580][ T4965] do_syscall_64+0x58/0xa0 [ 104.164004][ T4965] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.169908][ T4965] [ 104.172231][ T4965] Last potentially related work creation: [ 104.177975][ T4965] kasan_save_stack+0x35/0x60 [ 104.182664][ T4965] kasan_record_aux_stack+0xb8/0x100 [ 104.187970][ T4965] insert_work+0x54/0x3d0 [ 104.192406][ T4965] __queue_work+0x90b/0xc80 [ 104.196921][ T4965] queue_work_on+0x124/0x1f0 [ 104.201523][ T4965] sg_release+0x1d0/0x2c0 [ 104.205859][ T4965] __fput+0x212/0x8c0 [ 104.209846][ T4965] task_work_run+0x125/0x1a0 [ 104.214442][ T4965] exit_to_user_mode_loop+0x10f/0x130 [ 104.219827][ T4965] exit_to_user_mode_prepare+0xee/0x180 [ 104.225384][ T4965] syscall_exit_to_user_mode+0x16/0x40 [ 104.230857][ T4965] do_syscall_64+0x58/0xa0 [ 104.235282][ T4965] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.241183][ T4965] [ 104.243509][ T4965] The buggy address belongs to the object at ffff88805d234000 [ 104.243509][ T4965] which belongs to the cache kmalloc-8k of size 8192 [ 104.257562][ T4965] The buggy address is located 3579 bytes to the right of [ 104.257562][ T4965] 8192-byte region [ffff88805d234000, ffff88805d236000) [ 104.271550][ T4965] The buggy address belongs to the page: [ 104.277186][ T4965] page:ffffea0001748c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d230 [ 104.287351][ T4965] head:ffffea0001748c00 order:3 compound_mapcount:0 compound_pincount:0 [ 104.295700][ T4965] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 104.303713][ T4965] raw: 00fff00000010200 ffffea0001d4be00 0000000200000002 ffff888016c42280 [ 104.312311][ T4965] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 104.320905][ T4965] page dumped because: kasan: bad access detected [ 104.327328][ T4965] page_owner tracks the page as allocated [ 104.333045][ T4965] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4487, ts 70022615433, free_ts 69881001651 [ 104.353539][ T4965] get_page_from_freelist+0x24f6/0x2670 [ 104.359102][ T4965] __alloc_pages+0x1ee/0x480 [ 104.363697][ T4965] new_slab+0xc0/0x4b0 [ 104.367772][ T4965] ___slab_alloc+0x807/0xdd0 [ 104.372369][ T4965] __kmalloc+0x11d/0x340 [ 104.376616][ T4965] snd_seq_oss_readq_new+0x7e/0x240 [ 104.381822][ T4965] snd_seq_oss_open+0x7e6/0xf00 [ 104.386682][ T4965] odev_open+0x63/0x90 [ 104.390751][ T4965] chrdev_open+0x585/0x5f0 [ 104.395169][ T4965] do_dentry_open+0x7f7/0xf90 [ 104.399841][ T4965] path_openat+0x2718/0x2fb0 [ 104.404431][ T4965] do_filp_open+0x1df/0x400 [ 104.408938][ T4965] do_sys_openat2+0x14b/0x500 [ 104.413621][ T4965] __x64_sys_openat+0x135/0x160 [ 104.418490][ T4965] do_syscall_64+0x4c/0xa0 [ 104.422912][ T4965] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.428814][ T4965] page last free stack trace: [ 104.433486][ T4965] free_unref_page_prepare+0x637/0x6c0 [ 104.438976][ T4965] free_unref_page+0x8f/0x2a0 [ 104.443674][ T4965] __unfreeze_partials+0x188/0x1e0 [ 104.448793][ T4965] put_cpu_partial+0x12d/0x190 [ 104.453554][ T4965] qlist_free_all+0x35/0x90 [ 104.458062][ T4965] kasan_quarantine_reduce+0x150/0x160 [ 104.463524][ T4965] __kasan_slab_alloc+0x2f/0xc0 [ 104.468385][ T4965] slab_post_alloc_hook+0x4c/0x380 [ 104.473502][ T4965] kmem_cache_alloc+0x15d/0x280 [ 104.478388][ T4965] getname_flags+0xb7/0x4f0 [ 104.482892][ T4965] do_sys_openat2+0xdd/0x500 [ 104.487482][ T4965] __x64_sys_openat+0x135/0x160 [ 104.492336][ T4965] do_syscall_64+0x4c/0xa0 [ 104.496759][ T4965] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.503007][ T4965] [ 104.505329][ T4965] Memory state around the buggy address: [ 104.510955][ T4965] ffff88805d236c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.519022][ T4965] ffff88805d236d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.527088][ T4965] >ffff88805d236d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.535146][ T4965] ^ [ 104.543126][ T4965] ffff88805d236e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.551191][ T4965] ffff88805d236e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.559245][ T4965] ================================================================== [ 104.567291][ T4965] Disabling lock debugging due to kernel taint [ 104.573545][ T4965] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 104.580738][ T4965] CPU: 0 PID: 4965 Comm: syz.2.244 Tainted: G B syzkaller #0 [ 104.589416][ T4965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.599472][ T4965] Call Trace: [ 104.602749][ T4965] [ 104.605676][ T4965] dump_stack_lvl+0x188/0x250 [ 104.610357][ T4965] ? show_regs_print_info+0x20/0x20 [ 104.615556][ T4965] ? load_image+0x410/0x410 [ 104.620063][ T4965] panic+0x2f8/0x850 [ 104.623963][ T4965] ? bpf_jit_dump+0xd0/0xd0 [ 104.628469][ T4965] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 104.634364][ T4965] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 104.640255][ T4965] ? _raw_spin_unlock+0x40/0x40 [ 104.645113][ T4965] ? print_memory_metadata+0x314/0x400 [ 104.650580][ T4965] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 104.656836][ T4965] check_panic_on_warn+0x80/0xa0 [ 104.661781][ T4965] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 104.668032][ T4965] end_report+0x6d/0xf0 [ 104.672227][ T4965] kasan_report+0x102/0x130 [ 104.676742][ T4965] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 104.682999][ T4965] ieee80211_monitor_select_queue+0x23a/0x240 [ 104.689080][ T4965] ? ieee80211_recalc_smps_work+0x20/0x20 [ 104.694808][ T4965] netdev_core_pick_tx+0x12c/0x300 [ 104.699924][ T4965] __dev_queue_xmit+0x797/0x2e50 [ 104.704867][ T4965] ? __might_sleep+0xf0/0xf0 [ 104.709468][ T4965] ? dev_queue_xmit+0x20/0x20 [ 104.714147][ T4965] ? virtio_net_hdr_to_skb+0xc33/0x1260 [ 104.719699][ T4965] ? packet_cached_dev_get+0x270/0x270 [ 104.725160][ T4965] packet_sendmsg+0x3b4f/0x4de0 [ 104.730009][ T4965] ? sched_move_task+0x180/0x4f0 [ 104.734952][ T4965] ? place_entity+0x4f0/0x4f0 [ 104.739632][ T4965] ? aa_sk_perm+0x7dc/0x910 [ 104.744142][ T4965] ? packet_getsockopt+0x9a0/0x9a0 [ 104.749252][ T4965] ? apparmor_setprocattr+0x426/0x6a0 [ 104.754620][ T4965] ? apparmor_socket_sendmsg+0x88/0x230 [ 104.760164][ T4965] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 104.765454][ T4965] ? security_socket_sendmsg+0x7c/0xa0 [ 104.770916][ T4965] ? packet_getsockopt+0x9a0/0x9a0 [ 104.776027][ T4965] ____sys_sendmsg+0x5be/0x8f0 [ 104.780799][ T4965] ? __sys_sendmsg_sock+0x30/0x30 [ 104.785841][ T4965] ? import_iovec+0x6f/0xa0 [ 104.790340][ T4965] ___sys_sendmsg+0x236/0x2e0 [ 104.795019][ T4965] ? __sys_sendmsg+0x290/0x290 [ 104.799790][ T4965] __se_sys_sendmsg+0x1b7/0x2a0 [ 104.804643][ T4965] ? __x64_sys_sendmsg+0x80/0x80 [ 104.809578][ T4965] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 104.815563][ T4965] ? lockdep_hardirqs_on+0x94/0x140 [ 104.820761][ T4965] do_syscall_64+0x4c/0xa0 [ 104.825177][ T4965] ? clear_bhb_loop+0x30/0x80 [ 104.829869][ T4965] ? clear_bhb_loop+0x30/0x80 [ 104.834665][ T4965] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.840569][ T4965] RIP: 0033:0x7ff330dc6159 [ 104.844984][ T4965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.864591][ T4965] RSP: 002b:00007ff32f01e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.873015][ T4965] RAX: ffffffffffffffda RBX: 00007ff33104dfa0 RCX: 00007ff330dc6159 [ 104.880985][ T4965] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 104.888958][ T4965] RBP: 00007ff330e5d06b R08: 0000000000000000 R09: 0000000000000000 [ 104.896927][ T4965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.904894][ T4965] R13: 00007ff33104e038 R14: 00007ff33104dfa0 R15: 00007ffcbee379d8 [ 104.912873][ T4965] [ 104.916151][ T4965] Kernel Offset: disabled [ 104.920482][ T4965] Rebooting in 86400 seconds..